sneakoscope 4.8.7 → 5.1.2

package/dist/core/image-ux-review.js

@@ -790,11 +790,14 @@ function buildImagegenResponseArtifact(generatedReviewLedger = {}) {
         schema: 'sks.image-ux-gpt-image-2-response.v1',
         created_at: nowIso(),
         provider: image?.provider_surface || generatedReviewLedger.provider?.preferred_surface || 'none',
+        evidence_class: image?.evidence_class || (image?.mock ? 'mock_fixture' : image?.real_generated ? 'codex_app_imagegen' : null),
         model: 'gpt-image-2',
         ok: generatedReviewLedger.passed === true,
         status: generatedReviewLedger.passed === true ? 'generated' : 'blocked_or_pending',
         output_image_path: image?.path || null,
         output_image_sha256: image?.sha256 || null,
+        output_sha256: image?.output_sha256 || image?.sha256 || null,
+        output_source: image?.output_source || (image?.mock ? 'mock_fixture' : image?.real_generated ? 'manual_attach' : null),
         output_id: image?.output_id || null,
         dimensions: image ? { width: image.width || null, height: image.height || null, format: image.format || null } : null,
         latency_ms: image?.latency_ms || null,
@@ -863,6 +866,19 @@ function generatedImageEvidenceBlockers(image = {}, evidence = {}) {
     if (image.real_generated !== true || image.mock === true || image.source === 'mock_fixture')
         return [];
     const blockers = [];
+    const evidenceClass = String(image.evidence_class || '');
+    const outputSource = String(image.output_source || '');
+    const outputSha = String(image.output_sha256 || image.output_image_sha256 || '');
+    if (!evidenceClass)
+        blockers.push('generated_review_image_evidence_class_missing');
+    else if (evidenceClass !== 'codex_app_imagegen')
+        blockers.push(`generated_review_image_evidence_class_not_codex_app:${evidenceClass}`);
+    if (outputSource && !['manual_attach', 'auto_discovered_generated_images'].includes(outputSource))
+        blockers.push(`generated_review_image_output_source_invalid:${outputSource}`);
+    if (!outputSha)
+        blockers.push('generated_review_image_output_sha256_missing');
+    else if (evidence.sha256 && outputSha !== evidence.sha256)
+        blockers.push('generated_review_image_output_sha256_mismatch');
     if (!image.path)
         blockers.push('generated_review_image_missing');
     if (!evidence.sha256)

package/dist/core/imagegen/imagegen-capability.js

@@ -18,8 +18,13 @@ export async function detectImagegenCapability(opts = {}) {
     }).catch(() => null);
     const apiFallbackAvailable = openaiApiKeyPresent;
     const fakeAdapterEnabled = opts.fake === true || env.SKS_TEST_FAKE_IMAGEGEN === '1';
-    const realGenerationAvailable = codexAppBuiltInAvailable || apiFallbackAvailable;
-    const routeGenerationAvailable = realGenerationAvailable || fakeAdapterEnabled;
+    const fakeAdapterAcceptedForRoute = fakeAdapterEnabled && (opts.mockContext === true
+        || opts.testContext === true
+        || env.NODE_ENV === 'test'
+        || env.SKS_SELFTEST_MOCK === '1'
+        || env.SKS_MOCK === '1');
+    const realGenerationAvailable = codexAppBuiltInAvailable;
+    const routeGenerationAvailable = codexAppBuiltInAvailable || fakeAdapterAcceptedForRoute;
     const coreReady = codexAppBuiltInAvailable;
     const coreBlockers = coreReady ? [] : ['codex_app_builtin_imagegen_capability_missing'];
     const routeGenerationBlockers = routeGenerationAvailable ? [] : ['imagegen_capability_missing'];
@@ -68,16 +73,17 @@ export async function detectImagegenCapability(opts = {}) {
         },
         fake_adapter: {
             available: fakeAdapterEnabled,
+            accepted_for_route_readiness: fakeAdapterAcceptedForRoute,
             env: 'SKS_TEST_FAKE_IMAGEGEN=1',
             source: 'mock_like_fixture',
             real_generation_claim_allowed: false
         },
-        supports_reference_image: codexAppBuiltInAvailable || apiFallbackAvailable || fakeAdapterEnabled,
+        supports_reference_image: codexAppBuiltInAvailable || fakeAdapterAcceptedForRoute,
         gpt_image_2_input_fidelity_automatic: true,
         input_fidelity_must_be_omitted: true,
         supported_workflows: {
-            ux_review_callouts: codexAppBuiltInAvailable || apiFallbackAvailable || fakeAdapterEnabled,
-            ppt_slide_callouts: codexAppBuiltInAvailable || apiFallbackAvailable || fakeAdapterEnabled,
+            ux_review_callouts: codexAppBuiltInAvailable || fakeAdapterAcceptedForRoute,
+            ppt_slide_callouts: codexAppBuiltInAvailable || fakeAdapterAcceptedForRoute,
             structured_extraction_required_after_generation: true,
             full_verification_requires_codex_app_output: true
         },

package/dist/core/imagegen/require-imagegen.js

@@ -0,0 +1,57 @@
+import { detectImagegenCapability } from './imagegen-capability.js';
+import { repairCodexImagegen } from '../doctor/imagegen-repair.js';
+export async function requireCodexImagegen(root, opts = {}) {
+    const capability = await detectImagegenCapability({
+        codexBin: opts.codexBin || undefined,
+        timeoutMs: opts.timeoutMs || 5000
+    }).catch((err) => ({
+        ok: false,
+        core_ready: false,
+        blockers: [err instanceof Error ? err.message : String(err)]
+    }));
+    if (capability.core_ready === true) {
+        return { ok: true, capability, repair: null, blocker: null, blockers: [] };
+    }
+    const repair = opts.autoRepair === true
+        ? await repairCodexImagegen({
+            root,
+            apply: opts.applyRepair === true,
+            codexBin: opts.codexBin || null,
+            timeoutMs: opts.timeoutMs || 5000
+        }).catch((err) => ({
+            ok: false,
+            recovered: false,
+            blockers: [err instanceof Error ? err.message : String(err)]
+        }))
+        : null;
+    const finalCapability = repair
+        ? repair.after || capability
+        : capability;
+    const ok = finalCapability.core_ready === true || repair?.recovered === true;
+    const blockers = ok ? [] : [
+        ...new Set([
+            ...((finalCapability?.core_blockers || []).map(String)),
+            ...((finalCapability?.blockers || []).map(String)),
+            ...((repair?.blockers || []).map(String)),
+            'codex_imagegen_unavailable'
+        ])
+    ];
+    return {
+        ok,
+        capability: finalCapability,
+        repair,
+        blocker: ok ? null : {
+            schema: 'sks.codex-imagegen-required-blocker.v1',
+            blocker: 'codex_imagegen_unavailable',
+            status: 'blocked',
+            blockers,
+            next_actions: repair?.manual_actions || [
+                'Install/update Codex CLI: npm i -g @openai/codex@latest',
+                'Open Codex App settings and enable image_generation / $imagegen.',
+                'Verify with: codex features list --json'
+            ]
+        },
+        blockers
+    };
+}
+//# sourceMappingURL=require-imagegen.js.map

package/dist/core/init/skills.js

@@ -25,11 +25,16 @@ function reflectionInstructionText(commandPrefix = 'sks') {
     return `Post-route reflection: full routes load \`reflection\` after work/tests and before final; DFix/Answer/Help/Wiki/SKS discovery are exempt. Write reflection.md; record only real misses/gaps, or no_issue_acknowledged. For lessons, append TriWiki claim rows to ${REFLECTION_MEMORY_PATH}. Run "${commandPrefix} wiki refresh" or pack, validate, then pass reflection-gate.json.`;
 }
 async function installOfficialSkills(root) {
-    const imageUxReviewSkill = (name) => `---\nname: ${name}\ndescription: $Image-UX-Review/$UX-Review imagegen/gpt-image-2 annotated UI/UX review loop.\n---\n\nUse only for $Image-UX-Review, $UX-Review, $visual-review, or $ui-ux-review UI/UX review requests. ${imageUxReviewPipelinePolicyText()} Core loop: capture or attach source UI screenshots, then invoke Codex App $imagegen with gpt-image-2 to create a new generated annotated review image from each source screenshot, then analyze the generated review image with vision/OCR into image-ux-issue-ledger.json, then apply only requested safe fixes and recheck changed screens. Text-only screenshot critique cannot satisfy full verification; missing generated annotated review images keep full image-ux-review-gate.json verification blocked, but may close verified_partial/reference-only when source screenshots plus hashes, docs evidence, source Image Voxel anchors, and Honest Mode evidence exist. For live web/browser/webapp capture use Codex Chrome Extension first and halt if it is not installed/enabled; use Codex Computer Use only for native Mac/non-web app screens. Required artifacts: image-ux-review-policy.json, image-ux-screen-inventory.json, image-ux-generated-review-ledger.json, image-ux-issue-ledger.json, image-ux-iteration-report.json, image-ux-review-gate.json. Finish with reflection and Honest Mode.\n`;
+    const imageUxReviewSkill = (name) => `---\nname: ${name}\ndescription: $Image-UX-Review/$UX-Review imagegen/gpt-image-2 annotated UI/UX review loop.\n---\n\nUse only for $Image-UX-Review, $UX-Review, $visual-review, or $ui-ux-review UI/UX review requests. ${imageUxReviewPipelinePolicyText()} Route start must check Codex App imagegen capability and run the SKS imagegen repair loop once; if $imagegen/gpt-image-2 is still unavailable, stop with codex_imagegen_unavailable instead of doing text-only review or direct API substitution. Core loop: capture or attach source UI screenshots, then invoke Codex App $imagegen with gpt-image-2 to create a new generated annotated review image from each source screenshot, then analyze the generated review image with vision/OCR into image-ux-issue-ledger.json, then apply only requested safe fixes and recheck changed screens. Text-only screenshot critique cannot satisfy full verification; missing generated annotated review images keep full image-ux-review-gate.json verification blocked, but may close verified_partial/reference-only when source screenshots plus hashes, docs evidence, source Image Voxel anchors, and Honest Mode evidence exist. For live web/browser/webapp capture use Codex Chrome Extension first and halt if it is not installed/enabled; use Codex Computer Use only for native Mac/non-web app screens. Required artifacts: image-ux-review-policy.json, image-ux-screen-inventory.json, image-ux-generated-review-ledger.json, image-ux-issue-ledger.json, image-ux-iteration-report.json, image-ux-review-gate.json. Finish with reflection and Honest Mode.\n`;
+    const mergedMadDbSqlPlanePolicy = madDbSkillText().replace(/^---[\s\S]*?---\s*/, '').trim();
     const skills = {
         'dfix': `---\nname: dfix\ndescription: Direct Fix mode for $DFix or $dfix requests and inferred tiny copy/config/docs/labels/spacing/translation/simple mechanical edits.\n---\n\nUse for tiny copy/config/docs/labels/spacing/translation/simple mechanical edits. List exact micro-edits, inspect only needed files, apply only those edits, and run cheap verification. Keep broad implementation routed to Team; for UI/UX micro-edits read \`design.md\` when present and use imagegen for image/logo/raster assets. Bypass broad SKS routing, mission state, TriWiki/TriFix/reflection/state recording, Goal, Research, eval, redesign, and repeated full-route Honest Mode loops. Start the final answer with \`DFix 완료 요약:\` and include one \`DFix 솔직모드:\` line covering verified, not verified, and remaining issues. ${CODEX_IMAGEGEN_REQUIRED_POLICY}\n`,
         'answer': `---\nname: answer\ndescription: Answer-only research route for ordinary questions that should not start implementation.\n---\n\nUse for explanations, comparisons, status, facts, source-backed research, or docs guidance. Use repo/TriWiki first for project-local facts; hydrate low-trust claims from source. Browse or use Context7 for current external package/API/framework/MCP docs. End with a concise answer summary plus Honest Mode; do not create missions, subagents, or file edits.\n`,
         'sks': `---\nname: sks\ndescription: General Sneakoscope Codex command route for $SKS or $sks usage, setup, status, and workflow help.\n---\n\nUse local SKS commands: bootstrap, deps, commands, quickstart, codex-app, context7, guard, conflicts, reasoning, wiki, pipeline status, pipeline plan, skill-dream. Promote code-changing work to Team unless Answer/DFix/Help/Wiki/safety route fits. Surface route/guard/scope, use TriWiki, do not edit installed harness files outside this engine repo, and require human-approved conflict cleanup. ${skillDreamPolicyText()}\n`,
+        'plan': `---\nname: plan\ndescription: Decision-complete planning only - writes .sneakoscope/plans/<slug>.md, never touches code. 예: $Plan "결제 모듈 리팩터"\n---\n\nUse when the user invokes $Plan or asks for a plan-only frontdoor. Produce a concrete plan artifact under .sneakoscope/plans/<slug>.md with goal, scope, files to inspect, implementation steps, acceptance checks, and rollback notes. Do not edit product/source files, generated harness files, package metadata, or docs beyond the plan artifact. Keep implementation_allowed=false and hand off execution to $Work only after the user or route explicitly moves from planning to work. Finish with what is planned, what remains unimplemented, and Honest Mode.\n`,
+        'work': `---\nname: work\ndescription: Execute the latest plan with evidence-gated completion. 예: $Work\n---\n\nUse when the user invokes $Work or asks to execute the latest SKS plan. Resolve the newest .sneakoscope/plans/*.md, route execution through Naruto/Team evidence gates, keep leases and verification artifacts current, and do not claim completion without machine evidence or explicit blocker evidence. If no plan exists, block with a clear next action: run $Plan first or provide a task.\n`,
+        'swarm': `---\nname: swarm\ndescription: Dynamic parallel swarm (naruto) with machine-verified gates. 예: $Swarm "fix all lint errors"\n---\n\nUse when the user invokes $Swarm or asks for dynamic parallel work. Delegate to the Naruto native shadow-clone swarm, preserve lease-safe write boundaries, keep agent ledgers and gate artifacts current, and sort machine verification evidence above LLM opinion. Finish through Naruto gate, reflection when required, and Honest Mode.\n`,
+        'review': `---\nname: review\ndescription: Parallel diff review with machine-evidence first findings. 예: $Review 또는 sks review --staged\n---\n\nUse when the user asks for $Review or sks review. Review the selected diff read-only unless --fix is explicitly supplied. Machine evidence such as TypeScript, lint, tests, conflict markers, or secret scans outranks LLM findings and must be tagged evidence: machine; judgment-only findings must be tagged evidence: llm. --fix may attempt at most one machine-evidence fix pass and must re-run verification once. Do not mutate code for LLM-only opinions.\n`,
         'fast-mode': `---\nname: fast-mode\ndescription: Dollar-command route for $Fast-Mode, $Fast-On, and $Fast-Off global Codex Desktop Fast mode toggles.\n---\n\nUse when the user invokes $Fast-Mode, $Fast-On, $Fast-Off, or asks to turn SKS Fast mode on/off. Prefer \`sks fast-mode on|off|status|clear --json\`. By default on/off updates the global Codex Desktop config so GPT 5.5 Fast persists and also keeps .sneakoscope/state/fast-mode.json in sync for SKS workers. Use \`--project\` only when the user explicitly wants project-local worker preference without touching global Codex config. Explicit runtime flags still win: \`--fast\`, \`--no-fast\`, and \`--service-tier standard|fast\` override the saved preference for that run. Finish with a short status and Honest Mode; do not start Team or broad implementation for a toggle-only request.\n`,
         'fast-on': `---\nname: fast-on\ndescription: Alias for $Fast-On global Codex Desktop GPT 5.5 Fast enablement.\n---\n\nUse the same rules as fast-mode. Run or instruct \`sks fast-mode on --json\`, then report Global (desktop), Project (sks workers), state file, and the fact that explicit per-run flags still override the saved preference.\n`,
         'fast-off': `---\nname: fast-off\ndescription: Alias for $Fast-Off global Codex Desktop Fast mode disablement.\n---\n\nUse the same rules as fast-mode. Run or instruct \`sks fast-mode off --json\`, then report Global (desktop), Project (sks workers), state file, and the fact that explicit per-run flags still override the saved preference.\n`,
@@ -42,7 +47,7 @@ async function installOfficialSkills(root) {
         'shadow-clone': `---\nname: shadow-clone\ndescription: $ShadowClone alias for the $Naruto Shadow Clone Swarm high-scale parallel agent route.\n---\n\nUse the same rules as the naruto skill: this is the English alias for $Naruto / Kage Bunshin no Jutsu. Fan out up to 100 lease-safe parallel clone sessions on the native agent kernel via \`sks naruto run "<task>" [--clones N] [--backend codex-exec|fake] [--work-items N] [--json]\`. Clones run in fast service tier, are throttled to host capacity, take path leases for non-overlapping writes, and each emit per-clone proof; the parent integrates and verifies. Keep the same agent ledgers and finish with reflection and Honest Mode.\n`,
         'kage-bunshin': `---\nname: kage-bunshin\ndescription: $Kagebunshin alias for the $Naruto Shadow Clone Swarm (影分身) high-scale parallel agent route.\n---\n\nUse the same rules as the naruto skill: this is the 影分身 / Kage Bunshin no Jutsu alias for $Naruto. Fan out up to 100 lease-safe parallel clone sessions on the native agent kernel via \`sks naruto run "<task>" [--clones N] [--backend codex-exec|fake] [--work-items N] [--json]\`. Clones run in fast service tier, are throttled to host capacity, take path leases for non-overlapping writes, and each emit per-clone proof; the parent integrates and verifies. Keep the same agent ledgers and finish with reflection and Honest Mode.\n`,
         'qa-loop': `---\nname: qa-loop\ndescription: $QA-LOOP dogfoods UI/API as human proxy with safety gates, Codex Chrome Extension-first web UI evidence, safe fixes, rechecks, and a QA report.\n---\n\nUse only $QA-LOOP. Infer scope, target, mutation policy, and login boundary from the prompt plus TriWiki/current-code defaults; do not surface a prequestion sheet. Credentials are runtime-only; never save secrets. Web/browser/webapp UI-level E2E must run the Codex Chrome Extension readiness gate first; if the extension is missing or disabled, rapidly halt and ask the user to set it up, then resume only after the user confirms installation is complete. Codex Computer Use is reserved for native Mac/non-web surfaces and must not satisfy web UI evidence. Playwright, Selenium, Puppeteer, Browser Use, Chrome MCP, screenshots fabricated from code, and prose-only checks do not satisfy web UI/browser verification. ${CODEX_WEB_VERIFICATION_POLICY} Deployed targets are read-only; destructive removal is forbidden. After answer/run, dogfood real flows, apply safe contract-allowed code/test/docs fixes, recheck, and do not pass qa-gate.json with unresolved findings or without post_fix_verification_complete. Finish qa-ledger, date/version report, gate, completion summary, and Honest Mode.\n`,
-        'ppt': `---\nname: ppt\ndescription: $PPT information-first HTML/PDF presentation pipeline with inferred STP, audience, pain-point, format, research, design-system, and verification contract.\n---\n\nUse only when the user invokes $PPT or asks to create a presentation, deck, slides, pitch deck, proposal deck, HTML presentation, or PDF presentation artifact. Before artifact work, auto-seal presentation-specific answers from prompt, TriWiki/current-code defaults, and conservative policy: delivery context, target audience profile including role/average age/job/industry/topic familiarity/decision power, STP strategy, decision context and objections, and 3+ pain-point to solution mappings with expected aha moments. Do not surface a prequestion sheet. Presentation design must be simple, restrained, and information-first: avoid over-designed decoration, ornamental gradients, nested cards, and effects that compete with the message. Design detail should be embedded through typography hierarchy, spacing, alignment, thin rules, source clarity, and subtle accents. ${pptPipelineAllowlistPolicyText()} Use Product Design plugin first for context, ideation, prototype direction, audit, design QA, and share handoff. Use design.md only as an existing project-local cache or fallback SSOT when Product Design is unavailable; if fallback creation is needed, use docs/Design-Sys-Prompt.md plus getdesign-reference and curated DESIGN.md examples from ${AWESOME_DESIGN_MD_REFERENCE.url} only as source inputs, then fuse them into route-local PPT style tokens with a recorded design_ssot instead of treating references as parallel authorities. The $PPT route always loads imagegen as a required skill. When the sealed contract needs a generated raster asset or generated slide visual critique, immediately invoke Codex App \`$imagegen\` with gpt-image-2, move/copy the selected output into the mission assets or review evidence path, and record the real file path in ppt-image-asset-ledger.json or ppt-review-ledger.json before building or passing the gate. Direct API fallback, placeholder files, HTML/CSS stand-ins, and prose-only substitutes do not satisfy the route gate. ${productDesignPluginPolicyText()} ${CODEX_IMAGEGEN_REQUIRED_POLICY} Use web or Context7 evidence only when external facts/libraries/current docs are required by the PPT contract, record verified claims in ppt-fact-ledger.json, record generated image asset plans/results/blockers in ppt-image-asset-ledger.json, then create the PDF plus editable source HTML under source-html/, keep independent strategy/render/file-write phases parallel where inputs allow, record ppt-parallel-report.json, run the bounded ppt-review-policy/ppt-review-ledger/ppt-iteration-report loop, and verify readability, overlap, format fit, source coverage, export state, unsupported-claim status, image-asset completion, review-loop termination, and temporary build files cleanup. Finish with reflection and Honest Mode.\n`,
+        'ppt': `---\nname: ppt\ndescription: $PPT information-first HTML/PDF presentation pipeline with inferred STP, audience, pain-point, format, research, design-system, and verification contract.\n---\n\nUse only when the user invokes $PPT or asks to create a presentation, deck, slides, pitch deck, proposal deck, HTML presentation, or PDF presentation artifact. Before artifact work, auto-seal presentation-specific answers from prompt, TriWiki/current-code defaults, and conservative policy: delivery context, target audience profile including role/average age/job/industry/topic familiarity/decision power, STP strategy, decision context and objections, and 3+ pain-point to solution mappings with expected aha moments. Do not surface a prequestion sheet. Presentation design must be simple, restrained, and information-first: avoid over-designed decoration, ornamental gradients, nested cards, and effects that compete with the message. Design detail should be embedded through typography hierarchy, spacing, alignment, thin rules, source clarity, and subtle accents. ${pptPipelineAllowlistPolicyText()} Use Product Design plugin first for context, ideation, prototype direction, audit, design QA, and share handoff. Use design.md only as an existing project-local cache or fallback SSOT when Product Design is unavailable; if fallback creation is needed, use docs/Design-Sys-Prompt.md plus getdesign-reference and curated DESIGN.md examples from ${AWESOME_DESIGN_MD_REFERENCE.url} only as source inputs, then fuse them into route-local PPT style tokens with a recorded design_ssot instead of treating references as parallel authorities. The $PPT route always loads imagegen as a required skill, checks Codex App imagegen at route start, and runs SKS auto-repair once before any image-dependent build/review work. If repair fails, stop with codex_imagegen_unavailable and do not continue with image-free or API-substituted evidence. When the sealed contract needs a generated raster asset or generated slide visual critique, immediately invoke Codex App \`$imagegen\` with gpt-image-2, move/copy the selected output into the mission assets or review evidence path, and record the real file path in ppt-image-asset-ledger.json or ppt-review-ledger.json before building or passing the gate. Direct API fallback, placeholder files, HTML/CSS stand-ins, and prose-only substitutes do not satisfy the route gate. ${productDesignPluginPolicyText()} ${CODEX_IMAGEGEN_REQUIRED_POLICY} Use web or Context7 evidence only when external facts/libraries/current docs are required by the PPT contract, record verified claims in ppt-fact-ledger.json, record generated image asset plans/results/blockers in ppt-image-asset-ledger.json, then create the PDF plus editable source HTML under source-html/, keep independent strategy/render/file-write phases parallel where inputs allow, record ppt-parallel-report.json, run the bounded ppt-review-policy/ppt-review-ledger/ppt-iteration-report loop, and verify readability, overlap, format fit, source coverage, export state, unsupported-claim status, image-asset completion, review-loop termination, and temporary build files cleanup. Finish with reflection and Honest Mode.\n`,
         'computer-use-fast': `---\nname: computer-use-fast\ndescription: Alias for the maximum-speed $Computer-Use/$CU native Codex Computer Use lane.\n---\n\nUse the same rules as computer-use: skip Team debate, QA-LOOP clarification, upfront TriWiki refresh, Context7, subagents, and reflection unless explicitly requested. Use Codex Computer Use directly only for native macOS, desktop-app, OS-settings, or non-web visual tasks. Browser, localhost, website, webapp, and web-based app verification must use the Codex Chrome Extension path first and must halt if that extension is not installed/enabled. At the end only, refresh/pack TriWiki, validate it, then provide a concise completion summary plus Honest Mode. ${CODEX_WEB_VERIFICATION_POLICY} ${CODEX_COMPUTER_USE_ONLY_POLICY}\n`,
         'cu': `---\nname: cu\ndescription: Short alias for the maximum-speed native $Computer-Use Codex Computer Use lane.\n---\n\nUse the same rules as computer-use. This is a speed lane for native macOS, desktop-app, OS-settings, and non-web visual tasks requiring Codex Computer Use evidence, with TriWiki refresh/validate and Honest Mode deferred to final closeout. Web/browser/webapp verification must use Codex Chrome Extension first and stop if the extension is not installed/enabled. ${CODEX_WEB_VERIFICATION_POLICY} ${CODEX_COMPUTER_USE_ONLY_POLICY}\n`,
         'goal': `---\nname: goal\ndescription: Fast $Goal/$goal bridge overlay for Codex native persisted /goal workflows.\n---\n\nUse when the user invokes $Goal/$goal or asks to persist a workflow with Codex native /goal continuation. Prepare with sks goal create or the $Goal route, write only the lightweight bridge artifacts, then use native Codex /goal create, pause, resume, and clear controls where available. Goal does not replace Team, QA, DB, or other SKS execution routes; continue implementation through the selected route and use Context7 only when external API/library docs are involved. Do not recreate the old no-question loop.\n`,
@@ -52,8 +57,8 @@ async function installOfficialSkills(root) {
         'research': `---\nname: research\ndescription: Dollar-command route for $Research or $research frontier discovery workflows.\n---\n\nUse when the user invokes $Research/$research or asks for research, hypotheses, new mechanisms, falsification, or testable predictions. Prefer sks research prepare and sks research run. Research is not an implementation route: do not edit repository source, docs, package metadata, generated skills, or harness files; write only route-local mission artifacts under .sneakoscope/missions/<mission-id>/. Run the genius-lens agent council with named persona-inspired cognitive roles: Einstein Agent, Feynman Agent, Turing Agent, von Neumann Agent, and Skeptic Agent. These are lenses only; do not impersonate the historical people. Every Research agent ledger row must include display_name, persona, persona_boundary, effort=xhigh, reasoning_effort=xhigh, service_tier when available, one literal "Eureka!" idea, falsifiers, cheap_probes, and challenge_or_response before synthesis. This is not a fixed three-cycle route: repeat source gathering, Eureka ideas, evidence-bound debate, falsification, and synthesis pressure until every agent records final agreement, or until the explicit max-cycle safety cap pauses with an unpassed gate. Create research-source-skill.md as a route-local Skill Creator artifact, then maximize layered public web/source search across latest papers, official/government or leading-institution data, standards/primary docs, current news, public discourse, developer/practitioner sources, traditional background sources, and counterevidence before synthesis. Record research-source-skill.md, source-ledger.json, agent-ledger.json, debate-ledger.json, novelty-ledger.json, falsification-ledger.json, research-report.md, research-paper.md, genius-opinion-summary.md, and research-gate.json. debate-ledger.json must include consensus_iterations, unanimous_consensus, and per-agent agreements; research-gate.json cannot pass until unanimous_consensus=true with every agent agreement recorded. Context7 is optional and only needed when the research topic depends on external package/API/framework docs; do not use it as the default research evidence layer. Normal Research may take one or two hours when needed; favor real source collection, cross-layer comparison, falsification, and a concise paper manuscript over speed. Do not use --mock except for selftests or dry harness checks; if live source execution is unavailable, record a blocker and keep the gate unpassed. Do not use for ordinary code edits.\n`,
         'autoresearch': `---\nname: autoresearch\ndescription: Dollar-command route for $AutoResearch or $autoresearch iterative experiment loops.\n---\n\nUse for $AutoResearch, iterative improvement, ranking, workflow, benchmark, or experiments. Define program, hypothesis, experiment, metric, keep/discard, falsification, next step, and Honest Mode. Do not become the parent identity for SEO/GEO; $SEO-GEO-OPTIMIZER may call research as a child stage for query, market, or competitor discovery while keeping the parent mission, gate, and Completion Proof on $SEO-GEO-OPTIMIZER.\n`,
         'db': `---\nname: db\ndescription: Dollar-command route for $DB or $db database and Supabase safety checks.\n---\n\nUse when the user invokes $DB/$db or the task touches SQL, Supabase, Postgres, migrations, Prisma, Drizzle, Knex, MCP database tools, or production data. Run or follow sks db policy, sks db scan, sks db classify, and sks db check. Destructive database operations remain forbidden.\n`,
-        'mad-db': `${madDbSkillText()}\n`,
-        'mad-sks': `---\nname: mad-sks\ndescription: Explicit high-risk authorization modifier for $MAD-SKS scoped permission widening across approved target-project surfaces.\n---\n\nUse only when the user explicitly invokes $MAD-SKS or top-level sks --mad. It can be combined with another route, such as $MAD-SKS $Team or $DB ... $MAD-SKS; in that case the other command remains the primary workflow and MAD-SKS is only the temporary permission grant. The widened permission applies only while the active mission gate is open, must be deactivated when the task ends, and can open approved scopes such as target-project file writes, shell commands, package installs, local service control, network operations, browser/Computer Use workflows, generated assets, file permissions, migrations, Supabase MCP database writes, column/schema cleanup, direct execute SQL, and normal targeted DB writes. Keep catastrophic safeguards active: whole database/schema/table removal, truncate, all-row delete/update, reset, dangerous project/branch management, credential exfiltration, persistent security weakening, destructive delete without explicit confirmation, and unrequested fallback implementation remain blocked. Do not carry MAD-SKS permission into later prompts or routes. The permission profile source is centralized in src/core/permission-gates.ts and emitted as dist/core/permission-gates.js so skill/hook/MCP-style gates share one decision function.\n`,
+        'mad-db': `---\nname: mad-db\ndescription: Deprecated $MAD-DB compatibility alias; merged into mad-sks.\n---\n\n$MAD-DB and \`sks mad-db run|exec|apply-migration\` are deprecated aliases for MAD-SKS sql-plane. Warn the operator, translate to \`sks mad-sks sql|apply-migration\`, and follow the mad-sks skill as the single current authority.\n`,
+        'mad-sks': `---\nname: mad-sks\ndescription: Explicit high-risk authorization modifier plus merged SQL-plane executor for $MAD-SKS.\n---\n\nUse only when the user explicitly invokes $MAD-SKS, top-level sks --mad, or \`sks mad-sks plan|run|apply|sql|apply-migration|status|close|rollback-apply\`. MAD-SKS is the single high-risk MAD route: it combines scoped permission widening across approved target-project surfaces with the former MAD-DB SQL-plane execution model. It can be combined with another route, such as $MAD-SKS $Team or $DB ... $MAD-SKS; in that case the other command remains the primary workflow and MAD-SKS is the temporary permission grant or sql-plane executor. The widened permission applies only while the active mission gate is open, must be deactivated when the task ends, and can open approved scopes such as target-project file writes, shell commands, package installs, local service control, network operations, browser/Computer Use workflows, generated assets, file permissions, migrations, Supabase MCP database writes, column/schema cleanup, direct execute SQL, and normal targeted DB writes.\n\nMerged SQL-plane policy from mad-db:\n${mergedMadDbSqlPlanePolicy}\n\nCatastrophic SQL boundary: TRUNCATE, all-row UPDATE/DELETE, table/schema/database DROP, and equivalent reset operations are allowed only through the sql-plane executor and only when the user's prompt or CLI SQL statement literally names that operation. Other MAD-SKS executors, including db-write, keep those catastrophic categories blocked. Whole database/schema/table removal outside sql-plane, dangerous project/branch management, credential exfiltration, persistent security weakening, destructive delete without explicit confirmation, and unrequested fallback implementation remain blocked. Do not carry MAD-SKS permission into later prompts or routes. The permission profile source is centralized in src/core/permission-gates.ts and emitted as dist/core/permission-gates.js so skill/hook/MCP-style gates share one decision function.\n`,
         'gx': `---\nname: gx\ndescription: Dollar-command route for $GX or $gx deterministic GX visual context cartridges.\n---\n\nUse when the user invokes $GX/$gx or asks for architecture/context visualization through SKS. Prefer sks gx init, render, validate, drift, and snapshot. vgraph.json remains the source of truth.\n`,
         'help': `---\nname: help\ndescription: Dollar-command route for $Help or $help explaining installed SKS commands and workflows.\n---\n\nUse when the user invokes $Help/$help or asks what commands exist. Prefer concise output from sks commands, sks usage <topic>, sks quickstart, sks aliases, and sks codex-app.\n`,
         'prompt-pipeline': `---\nname: prompt-pipeline\ndescription: Default SKS prompt optimization pipeline for execution prompts; Answer and DFix bypass it.\n---\n\nClassify intent: Answer only for real questions; question-shaped implicit instructions, complaints, and mandatory-policy statements route to Team. DFix handles Direct Fix work: tiny copy/config/docs/labels/spacing/translation/simple mechanical edits; code and broad implementation default to Team unless safety/research/GX route fits. Infer goal, target, constraints, acceptance, risk, and smallest safe route from prompt, TriWiki/current-code defaults, and conservative SKS policy. Do not surface a prequestion sheet. Materialize pipeline-plan.json for the runtime lane, kept/skipped stages, no-fallback invariant, lean_decision, and verification; inspect with sks pipeline plan, adding --proof-field when changed files are known. Code work surfaces route/guard/scopes, materializes team-roster.json from default or explicit counts before implementation, compiles concrete Team runtime graph/inbox artifacts after consensus, and parent owns integration/tests/Context7/Honest Mode. ${leanEngineeringCompactText()} ${outcomeRubricPolicyText()} ${speedLanePolicyText()} ${solutionScoutPolicyText('fix this broken behavior')} ${skillDreamPolicyText()}\n\n${chatCaptureIntakeText()}\n\nDesign: non-PPT UI/UX uses Product Design plugin first; legacy design.md/design-system-builder/design-ui-editor/design-artifact-expert/getdesign-reference are fallback only when the plugin is unavailable or an existing project design.md must be respected. Use imagegen for image/logo/raster, and imagegen must prefer Codex App built-in image generation (${CODEX_APP_IMAGE_GENERATION_DOC_URL}) before API generation. ${productDesignPluginPolicyText()} ${CODEX_IMAGEGEN_REQUIRED_POLICY} For UI/UX review/audit requests that mention image generation, gpt-image-2, callouts, or annotated review images, route to $Image-UX-Review/$UX-Review and require generated annotated review image evidence before issue extraction; do not satisfy that route with text-only critique. For $PPT, ${pptPipelineAllowlistPolicyText()} ${getdesignReferencePolicyText()} TriWiki context-tracking SSOT: .sneakoscope/wiki/context-pack.json; read only the latest coordinate+voxel overlay pack before every route stage, run sks wiki refresh/pack after changes, validate before handoffs/final.\n`,
@@ -81,7 +86,7 @@ async function installOfficialSkills(root) {
         'ux-review': imageUxReviewSkill('ux-review'),
         'visual-review': imageUxReviewSkill('visual-review'),
         'ui-ux-review': imageUxReviewSkill('ui-ux-review'),
-        'imagegen': `---\nname: imagegen\ndescription: Required bridge to Codex App built-in image generation for logos, image assets, raster visuals, and image edits.\n---\n\nUse for generated or edited image assets: logo, product image, illustration, sprite, mockup, texture, cutout, or bitmap. Prefer the official Codex App built-in image generation feature documented at ${CODEX_APP_IMAGE_GENERATION_DOC_URL}: ask naturally or invoke \`$imagegen\`. For newest-model requests, make the prompt explicit: "Use ChatGPT Images 2.0 / GPT Image 2.0 with gpt-image-2." Useful official references are ${OPENAI_CHATGPT_IMAGES_2_DOC_URL}, ${OPENAI_GPT_IMAGE_2_MODEL_DOC_URL}, and ${OPENAI_IMAGE_GENERATION_DOC_URL}. Codex App image generation counts against Codex usage limits. Capability detection is not output proof; full SKS evidence requires a real selected raster output path or generated review image artifact. Direct OpenAI API fallback is non-Codex evidence and does not satisfy SKS route evidence unless a separate non-Codex API task is explicitly requested. ${IMAGEGEN_SOCIAL_SOURCE_POLICY} ${CODEX_IMAGEGEN_REQUIRED_POLICY} Do not substitute placeholder SVG/HTML/CSS for requested raster assets; follow design.md when relevant.\n`,
+        'imagegen': `---\nname: imagegen\ndescription: Required bridge to Codex App built-in image generation for logos, image assets, raster visuals, and image edits.\n---\n\nUse for generated or edited image assets: logo, product image, illustration, sprite, mockup, texture, cutout, or bitmap. Prefer the official Codex App built-in image generation feature documented at ${CODEX_APP_IMAGE_GENERATION_DOC_URL}: ask naturally or invoke \`$imagegen\`. SKS route code checks capability before image-dependent routes, attempts doctor imagegen repair once, and reports codex_imagegen_unavailable if Codex App $imagegen still is not ready. For newest-model requests, make the prompt explicit: "Use ChatGPT Images 2.0 / GPT Image 2.0 with gpt-image-2." Useful official references are ${OPENAI_CHATGPT_IMAGES_2_DOC_URL}, ${OPENAI_GPT_IMAGE_2_MODEL_DOC_URL}, and ${OPENAI_IMAGE_GENERATION_DOC_URL}. Codex App image generation counts against Codex usage limits. Capability detection is not output proof; full SKS evidence requires a real selected raster output path or generated review image artifact. Direct OpenAI API fallback is non-Codex evidence and does not satisfy SKS route evidence unless a separate non-Codex API task is explicitly requested. ${IMAGEGEN_SOCIAL_SOURCE_POLICY} ${CODEX_IMAGEGEN_REQUIRED_POLICY} Do not substitute placeholder SVG/HTML/CSS for requested raster assets; follow design.md when relevant.\n`,
         'imagegen-source-scout': `---\nname: imagegen-source-scout\ndescription: Source scout for current GPT Image 2.0/gpt-image-2 prompt guidance, official docs, and X/social workflow signals.\n---\n\nUse when the user asks for the latest imagegen docs, ChatGPT Images 2.0 / GPT Image 2.0 / gpt-image-2 behavior, X/social reactions, prompt examples, or community workflow hints before creating an image prompt or SKS imagegen policy. Source order: official OpenAI announcement (${OPENAI_CHATGPT_IMAGES_2_DOC_URL}), Codex App image generation docs (${CODEX_APP_IMAGE_GENERATION_DOC_URL}), gpt-image-2 model docs (${OPENAI_GPT_IMAGE_2_MODEL_DOC_URL}), OpenAI Image Generation API docs (${OPENAI_IMAGE_GENERATION_DOC_URL}), then public X/social/community search for prompt-quality heuristics only. ${IMAGEGEN_SOCIAL_SOURCE_POLICY} If X/Grok or web search is unavailable, record that social coverage is unverified and continue from official docs. Output a compact evidence split: official capability/evidence rules, prompt heuristics, social/workflow signals, and blockers. Do not generate images itself; pair this with the imagegen skill for actual raster output.\n`,
         'getdesign-reference': `---\nname: getdesign-reference\ndescription: Use getdesign.md official design reference as an input to the design.md SSOT for UI/UX, presentation, and HTML/PDF systems.\n---\n\nUse when creating or improving design.md, UI/UX design systems, deck-like HTML artifacts, presentation PDFs, or brand-inspired visual systems. design.md is the only design decision SSOT; reference ${GETDESIGN_REFERENCE.url}, ${GETDESIGN_REFERENCE.docs_url}, and ${AWESOME_DESIGN_MD_REFERENCE.url} only as source inputs to synthesize or update that SSOT or a route-local style-token artifact. Prefer the official Codex skill if available with \`${GETDESIGN_REFERENCE.codex_skill_install}\`. If the skill CLI is unavailable, use this generated skill plus official docs/API/CLI/SDK references and curated DESIGN.md examples as inputs. Do not claim getdesign MCP is configured unless a current official MCP surface is actually installed.\n`,
         'design-system-builder': `---\nname: design-system-builder\ndescription: Legacy fallback to create design.md from docs/Design-Sys-Prompt.md only when Product Design plugin is unavailable or explicit local SSOT is required.\n---\n\nUse Product Design plugin first. Only when the plugin is unavailable or the route explicitly needs a local fallback SSOT, read docs/Design-Sys-Prompt.md as the builder prompt, inspect product/UI context, and use getdesign-reference, official getdesign.md docs, and curated DESIGN.md examples from ${AWESOME_DESIGN_MD_REFERENCE.url} only as source inputs. Fuse those inputs into one design.md fallback/cache with tokens, components, states, imagery, accessibility, and verification rules; do not leave multiple design files or references as competing authorities. Use the plan tool only for real ambiguity plus default font recommendation. Use imagegen for assets. ${productDesignPluginPolicyText()} ${CODEX_IMAGEGEN_REQUIRED_POLICY}\n`,

package/dist/core/mad-db/mad-db-coordinator.js

@@ -1,6 +1,6 @@
 import path from 'node:path';
 import { createMission, missionDir, setCurrent } from '../mission.js';
-import { nowIso, readJson, readText, sha256, writeJsonAtomic } from '../fsx.js';
+import { ensureDir, nowIso, readJson, readText, sha256, writeJsonAtomic } from '../fsx.js';
 import { createMadDbCapability, activateMadDbCapability, closeMadDbCycle, MAD_DB_ACK, markMadDbTransportReady, readMadDbCapability } from './mad-db-capability.js';
 import { MadDbMcpExecutor } from './mad-db-executor.js';
 import { createMadDbRuntimeProfile, closeMadDbRuntimeProfile, redactedRuntimeProfile } from './mad-db-runtime-profile.js';
@@ -11,7 +11,14 @@ import { projectRootHash, resolveMadDbTarget } from './mad-db-target.js';
 import { classifySql } from '../db-safety.js';
 export async function prepareMadDbMission(input) {
     const target = await resolveMadDbTarget(input.root, { args: input.args || [] });
-    const { id, dir } = await createMission(input.root, { mode: 'mad-db', prompt: input.task || 'MadDB SQL-plane execution', sessionKey: input.sessionKey });
+    const route = input.route || 'MadDB';
+    const routeCommand = input.routeCommand || (route === 'MadSKS' ? '$MAD-SKS' : '$MAD-DB');
+    const existingMissionId = input.missionId ? String(input.missionId) : '';
+    const created = existingMissionId
+        ? { id: existingMissionId, dir: missionDir(input.root, existingMissionId) }
+        : await createMission(input.root, { mode: route === 'MadSKS' ? 'mad-sks' : 'mad-db', prompt: input.task || 'MadDB SQL-plane execution', sessionKey: input.sessionKey });
+    const { id, dir } = created;
+    await ensureDir(dir);
     const cycleId = `mad-db-${Date.now().toString(36)}`;
     const runtimeSessionId = input.runtimeSessionId || `mad-db-session-${Date.now().toString(36)}`;
     const blockers = [...target.blockers];
@@ -30,6 +37,7 @@ export async function prepareMadDbMission(input) {
         projectRef: target.project_ref || 'missing-project-ref',
         targetEnvironment: target.target_environment,
         allowedSchemas: target.allowed_schemas,
+        ttlMs: input.ttlMs,
         runtimeSessionId,
         operatorIntent: input.task,
         profilePath: profile.profile_path,
@@ -50,18 +58,28 @@ export async function prepareMadDbMission(input) {
             await markMadDbTransportReady(input.root, id);
     }
     await writeJsonAtomic(path.join(dir, 'route-context.json'), {
-        route: 'MadDB',
-        command: '$MAD-DB',
-        mode: 'MADDB',
+        route,
+        command: routeCommand,
+        mode: route === 'MadSKS' ? 'MADSKS' : 'MADDB',
         task: input.task,
         target: redactTarget(target),
         capability_file: 'mad-db-capability.json',
         runtime_profile_manifest: 'mad-db/runtime/runtime-profile-manifest.json',
-        tool_inventory: toolInventory ? 'mad-db/runtime/tool-inventory.json' : null
+        tool_inventory: toolInventory ? 'mad-db/runtime/tool-inventory.json' : null,
+        sql_plane_executor: route === 'MadSKS'
     });
-    await writeJsonAtomic(path.join(dir, 'mad-db-gate.json'), {
-        schema: 'sks.mad-db-gate.v1',
+    await writeJsonAtomic(path.join(dir, 'mad-sks-gate.json'), {
+        schema: 'sks.mad-sks-gate.v1',
         passed: false,
+        mad_sks_permission_active: route === 'MadSKS' && !blockers.length,
+        permissions_deactivated: false,
+        sql_plane: {
+            requested: true,
+            capability_id: preparedCapabilityId(id, cycleId),
+            operation_classes: [...madDbOperationClassesFromClassification(classifySql(input.task))],
+            read_back_passed: false,
+            profile_closed: false
+        },
         mad_db_capability_active: !blockers.length,
         sql_plane_all_mutations_allowed: !blockers.length,
         control_plane_denied: true,
@@ -73,18 +91,20 @@ export async function prepareMadDbMission(input) {
     await setCurrent(input.root, {
         mission_id: id,
         mad_db_capability_mission_id: id,
-        route: 'MadDB',
-        route_command: '$MAD-DB',
-        mode: 'MADDB',
-        phase: blockers.length ? 'MADDB_BLOCKED' : 'MADDB_SQL_PLANE_CAPABILITY_ACTIVE',
+        route,
+        route_command: routeCommand,
+        mode: route === 'MadSKS' ? 'MADSKS' : 'MADDB',
+        phase: blockers.length ? `${route.toUpperCase()}_BLOCKED` : `${route.toUpperCase()}_SQL_PLANE_CAPABILITY_ACTIVE`,
         questions_allowed: false,
         implementation_allowed: !blockers.length,
         mad_db_active: !blockers.length,
+        mad_sks_active: route === 'MadSKS' && !blockers.length,
         mad_db_cycle_id: cycleId,
         mad_db_runtime_session_id: runtimeSessionId,
         mad_db_profile_sha256: profile.profile_sha256,
         mad_db_capability_file: 'mad-db-capability.json',
-        stop_gate: 'mad-db-gate.json',
+        mad_sks_gate_file: 'mad-sks-gate.json',
+        stop_gate: 'mad-sks-gate.json',
         prompt: input.task
     }, { sessionKey: input.sessionKey });
     return {
@@ -102,7 +122,19 @@ export async function prepareMadDbMission(input) {
 export async function runMadDbCycle(input) {
     const timings = {};
     const start = Date.now();
-    const prepared = await prepareMadDbMission({ root: input.root, task: input.task, args: input.args || [], verifyTools: false });
+    const prepareInput = {
+        root: input.root,
+        task: input.task,
+        args: input.args || [],
+        ttlMs: input.ttlMs,
+        verifyTools: false,
+        missionId: input.missionId || null
+    };
+    if (input.route)
+        prepareInput.route = input.route;
+    if (input.routeCommand)
+        prepareInput.routeCommand = input.routeCommand;
+    const prepared = await prepareMadDbMission(prepareInput);
     timings.prepare_ms = Date.now() - start;
     const profile = await recreateProfileFromPrepared(input.root, prepared);
     const executor = new MadDbMcpExecutor(profile);
@@ -209,18 +241,60 @@ export async function runMadDbCycle(input) {
         blockers: restoration.ok ? blockers : [...blockers, ...restoration.blockers]
     };
     await writeJsonAtomic(path.join(missionDir(input.root, prepared.mission_id), 'mad-db-result.json'), redactCycleResult(result));
+    await writeMadSksSqlPlaneGate(input.root, result);
     await clearMadDbCurrentState(input.root, prepared.mission_id, result.ok, restoration);
     return result;
 }
+function preparedCapabilityId(missionId, cycleId) {
+    return `${missionId}:${cycleId}`;
+}
+export async function writeMadSksSqlPlaneGate(root, result) {
+    const file = path.join(missionDir(root, result.mission_id), 'mad-sks-gate.json');
+    const previous = await readJson(file, {});
+    const operationClasses = result.operation?.operation_classes || [];
+    const blockers = [
+        ...(Array.isArray(previous.blockers) ? previous.blockers : []),
+        ...(result.blockers || [])
+    ];
+    const sqlPlane = {
+        requested: true,
+        capability_id: preparedCapabilityId(result.mission_id, result.cycle_id),
+        operation_classes: operationClasses,
+        read_back_passed: result.read_back ? result.read_back.ok === true : result.execution?.ok === true,
+        profile_closed: result.capability_closed === true && result.read_only_restoration?.ok === true
+    };
+    const passed = result.ok === true && sqlPlane.read_back_passed === true && sqlPlane.profile_closed === true;
+    const gate = {
+        ...previous,
+        schema: previous.schema || 'sks.mad-sks-gate.v1',
+        schema_version: previous.schema_version || 1,
+        passed,
+        mad_sks_permission_active: false,
+        permissions_deactivated: true,
+        sql_plane: sqlPlane,
+        mad_db_capability_active: false,
+        sql_plane_all_mutations_allowed: result.execution?.ok === true,
+        control_plane_denied: true,
+        mission_id: result.mission_id,
+        cycle_id: result.cycle_id,
+        read_only_restoration: result.read_only_restoration,
+        blockers: passed ? [] : [...new Set(blockers.length ? blockers : ['mad_sks_sql_plane_not_passed'])],
+        created_at: previous.created_at || nowIso(),
+        updated_at: nowIso()
+    };
+    await writeJsonAtomic(file, gate);
+    return gate;
+}
 async function clearMadDbCurrentState(root, missionId, ok, restoration) {
     const currentPath = path.join(root, '.sneakoscope', 'state', 'current.json');
     const current = await readJson(currentPath, {});
     if (current.mission_id !== missionId && current.mad_db_capability_mission_id !== missionId)
         return;
     await setCurrent(root, {
-        phase: ok ? 'MADDB_CLOSED' : 'MADDB_FAILED_CLOSED',
+        phase: current.mode === 'MADSKS' ? (ok ? 'MADSKS_SQL_PLANE_CLOSED' : 'MADSKS_SQL_PLANE_FAILED_CLOSED') : (ok ? 'MADDB_CLOSED' : 'MADDB_FAILED_CLOSED'),
         implementation_allowed: false,
         mad_db_active: false,
+        mad_sks_active: current.mode === 'MADSKS' ? false : current.mad_sks_active,
         mad_db_runtime_session_id: null,
         mad_db_profile_sha256: null,
         mad_db_read_only_restored: restoration.ok,
@@ -273,14 +347,16 @@ export async function madDbRouteIdentityProof(root, missionId) {
     const state = await readJson(path.join(root, '.sneakoscope', 'state', 'current.json'), {});
     const profile = await readJson(path.join(missionDir(root, missionId), 'mad-db', 'runtime', 'runtime-profile-manifest.json'), null);
     const sameMission = Boolean(capability && capability.mission_id === missionId && state?.mission_id === missionId);
+    const mergedMadSks = state?.route === 'MadSKS' && state?.route_command === '$MAD-SKS';
     return {
         schema: 'sks.mad-db-route-identity-proof.v1',
-        ok: sameMission && state?.route === 'MadDB' && state?.route_command === '$MAD-DB',
+        ok: sameMission && (mergedMadSks || (state?.route === 'MadDB' && state?.route_command === '$MAD-DB')),
         mission_id: missionId,
         capability_mission_id: capability?.mission_id || null,
         same_mission: sameMission,
         route: state?.route || null,
         route_command: state?.route_command || null,
+        deprecated_route_accepted: mergedMadSks,
         cycle_id: capability?.cycle_id || null,
         project_root_hash: await projectRootHash(root),
         runtime_profile: profile,
@@ -288,8 +364,8 @@ export async function madDbRouteIdentityProof(root, missionId) {
             ...(capability ? [] : ['capability_missing']),
             ...(profile ? [] : ['runtime_profile_manifest_missing']),
             ...(sameMission ? [] : ['mission_binding_mismatch']),
-            ...(state?.route === 'MadDB' ? [] : ['route_state_not_maddb']),
-            ...(state?.route_command === '$MAD-DB' ? [] : ['route_command_not_maddb'])
+            ...(state?.route === 'MadDB' || mergedMadSks ? [] : ['route_state_not_maddb_or_merged_mad_sks']),
+            ...(state?.route_command === '$MAD-DB' || mergedMadSks ? [] : ['route_command_not_maddb_or_mad_sks'])
         ]
     };
 }

package/dist/core/mad-db/mad-db-policy.js

@@ -161,14 +161,16 @@ export function activeMadDbAllowsSqlPlane(classification = {}) {
 export function madDbSkillText(commandPrefix = 'sks') {
     return `---
 name: mad-db
-description: First-class MadDB SQL-plane execution route for explicit $MAD-DB and ${commandPrefix} mad-db run|exec|apply-migration.
+description: Deprecated alias; MadDB SQL-plane execution is merged into mad-sks.
 ---
 
-Use only when the operator explicitly invokes $MAD-DB/$mad-db or ${commandPrefix} mad-db run|exec|apply-migration. This is the single approval boundary for the active MadDB cycle: execute SQL-plane mutations that the operator requested, including CREATE, ALTER, table/schema DROP, column add/drop/rename, INSERT, UPDATE, DELETE including all-row mutations, TRUNCATE, execute_sql, and apply_migration. Do not ask again for each DROP/TRUNCATE/all-row DELETE inside the same bound cycle.
+Deprecated compatibility skill. Use mad-sks for all current SQL-plane execution. $MAD-DB and ${commandPrefix} mad-db run|exec|apply-migration redirect to MAD-SKS sql-plane for one release and must warn the operator.
 
-Keep normal Supabase MCP configuration read-only. MadDB must create a mission-local ephemeral write-capable Supabase MCP profile bound to capability v2, project_ref, root, mission, thread/session, intent, runtime profile hash, TTL, and SQL-plane operation classes. Verify execute_sql and apply_migration availability before claiming readiness. Require actual tool results plus independent read-back verification before claiming success. Close/revoke the capability and runtime profile in finally and prove read-only restoration.
+Merged SQL-plane rules for mad-sks: execute SQL-plane mutations that the operator requested, including CREATE, ALTER, table/schema DROP, column add/drop/rename, INSERT, UPDATE, DELETE including all-row mutations, TRUNCATE, execute_sql, and apply_migration. Catastrophic SQL is allowed only in the sql-plane executor and only when the user's prompt or CLI SQL statement literally names the operation.
 
-Still deny Supabase account/project/billing/credential control-plane actions, credential exfiltration, unrelated non-database admin changes, and unrequested fallback implementation. Do not add prompt-only SQL deny lists inside active MadDB; capability binding, SQL-plane scope, operation ledgering, and read-back verification are the approval boundary. Pair with db-safety-guard, Context7 evidence for MCP/API docs, route-local reflection, and Honest Mode.`;
+Keep normal Supabase MCP configuration read-only. MAD-SKS sql-plane must create a mission-local ephemeral write-capable Supabase MCP profile bound to capability v2, project_ref, root, mission, thread/session, intent, runtime profile hash, TTL, and SQL-plane operation classes. Verify execute_sql and apply_migration availability before claiming readiness. Require actual tool results plus independent read-back verification before claiming success. Close/revoke the capability and runtime profile in finally and prove read-only restoration.
+
+Still deny Supabase account/project/billing/credential control-plane actions, credential exfiltration, unrelated non-database admin changes, and unrequested fallback implementation. Do not add prompt-only SQL deny lists inside active sql-plane; capability binding, SQL-plane scope, operation ledgering, literal catastrophic intent, and read-back verification are the approval boundary. Pair with db-safety-guard, Context7 evidence for MCP/API docs, route-local reflection, and Honest Mode.`;
 }
 export function dbSafetyGuardSkillText() {
     return `---
@@ -177,13 +179,13 @@ description: Enforce Sneakoscope Codex database safety before using SQL, Supabas
 ---
 
 Rules:
-- Default non-MadDB mode is read-only and routes writes/destructive SQL to the DB safety gate.
+- Default non-MAD-SKS mode is read-only and routes writes/destructive SQL to the DB safety gate.
 - Supabase MCP must be read-only and project-scoped by default.
-- Live execute_sql writes are blocked unless a bound active MadDB capability v2 is present.
-- Active MadDB is the explicit exception: SQL-plane mutations requested by $MAD-DB or sks mad-db run|exec|apply-migration are allowed, including DROP, DELETE, TRUNCATE, RLS/policy changes, and execute_sql/apply_migration, and must be executed with read-back verification.
-- Default read-only restrictions do not apply to SQL-plane work while the active MadDB capability v2 is bound.
-- Supabase project/account/billing/credential control-plane actions remain denied even in MadDB.
-- If no active bound MadDB cycle exists, fall back to read-only only.`;
+- Live execute_sql writes are blocked unless a bound active MAD-SKS sql-plane capability v2 is present.
+- Active MAD-SKS sql-plane is the explicit exception: SQL-plane mutations requested by $MAD-SKS/sks mad-sks sql|apply-migration, or deprecated $MAD-DB/sks mad-db redirects, are allowed, including DROP, DELETE, TRUNCATE, RLS/policy changes, and execute_sql/apply_migration, and must be executed with read-back verification.
+- Default read-only restrictions do not apply to SQL-plane work while the active MAD-SKS sql-plane capability v2 is bound.
+- Supabase project/account/billing/credential control-plane actions remain denied even in MAD-SKS sql-plane.
+- If no active bound MAD-SKS sql-plane cycle exists, fall back to read-only only.`;
 }
 function stringArray(value) {
     if (!Array.isArray(value))

package/dist/core/mad-sks/executors/executor-base.js

@@ -42,11 +42,17 @@ export function executorBlocker({ executor, actionType, context, blockers, block
         generated_at: nowIso()
     };
 }
-export async function writeExecutorEvidence({ context, executor, actionType, changedFiles = [], blockedActions = [], fileRollbacks = [], packageRollbacks = [], serviceRollbacks = [], dbRollbacks = [], rollbackUnavailable = [], auditActions = [], verification = [] }) {
+export async function writeExecutorEvidence({ context, executor, actionType, changedFiles = [], blockedActions = [], fileRollbacks = [], packageRollbacks = [], serviceRollbacks = [], dbRollbacks = [], rollbackUnavailable = [], auditActions = [], verification = [], forceProtectedCoreChanged = false }) {
     await ensureDir(context.artifact_dir);
     const before = await snapshotProtectedCore(context.package_root, `${executor}-before`);
     const after = await snapshotProtectedCore(context.package_root, `${executor}-after`);
-    const comparison = compareProtectedCoreSnapshots(before, after);
+    const comparison = forceProtectedCoreChanged && (process.env.NODE_ENV === 'test' || process.env.SKS_TEST_FORCE_PROTECTED_CORE_CHANGED === '1')
+        ? {
+            ...compareProtectedCoreSnapshots(before, after),
+            ok: false,
+            changed: [{ id: '__test_protected_core_changed', before_digest: before.digest, after_digest: after.digest }]
+        }
+        : compareProtectedCoreSnapshots(before, after);
     const beforePath = path.join(context.artifact_dir, `${executor}-protected-core-before.json`);
     const afterPath = path.join(context.artifact_dir, `${executor}-protected-core-after.json`);
     const comparisonPath = path.join(context.artifact_dir, `${executor}-protected-core-comparison.json`);

package/dist/core/mad-sks/executors/index.js

@@ -5,6 +5,7 @@ import { shellCommandExecutor } from './shell-command-executor.js';
 import { packageInstallExecutor } from './package-install-executor.js';
 import { serviceControlExecutor } from './service-control-executor.js';
 import { dbWriteExecutor } from './db-write-executor.js';
+import { sqlPlaneExecutor } from './sql-plane-executor.js';
 import { browserUseExecutor, computerUseExecutor, generatedAssetExecutor } from './computer-use-executor.js';
 const EXECUTORS = {
     'file-write': fileWriteExecutor,
@@ -17,6 +18,9 @@ const EXECUTORS = {
     'service-control': serviceControlExecutor,
     db: dbWriteExecutor,
     'db-write': dbWriteExecutor,
+    sql: sqlPlaneExecutor,
+    'sql-plane': sqlPlaneExecutor,
+    'apply-migration': sqlPlaneExecutor,
     computer: computerUseExecutor,
     'computer-use': computerUseExecutor,
     browser: browserUseExecutor,