sneakoscope 6.2.0 → 6.5.1

package/dist/core/locks/file-lock.js

@@ -10,45 +10,89 @@ export async function withFileLock(input, fn) {
     const timeoutMs = Math.max(1, input.timeoutMs);
     const staleMs = Math.max(1, input.staleMs);
     const started = Date.now();
-    const owner = `${process.pid}-${randomId(8)}`;
     await ensureDir(path.dirname(lockPath));
+    let held = null;
     while (true) {
+        held = await tryAcquireFileLock(lockPath, staleMs);
+        if (held) {
+            break;
+        }
+        if (Date.now() - started > timeoutMs) {
+            throw new Error(`file_lock_timeout:${lockPath}`);
+        }
+        await sleep(jitterDelay());
+    }
+    return holdFileLock(lockPath, staleMs, held, async () => fn());
+}
+export async function tryWithFileLock(input, fn) {
+    const lockPath = path.resolve(input.lockPath);
+    const staleMs = Math.max(1, input.staleMs);
+    await ensureDir(path.dirname(lockPath));
+    const held = await tryAcquireFileLock(lockPath, staleMs);
+    if (!held) {
+        return {
+            acquired: false,
+            owner: await readJson(path.join(lockPath, 'owner.json'), null)
+        };
+    }
+    const value = await holdFileLock(lockPath, staleMs, held, fn);
+    return { acquired: true, recovered: held.recovered, value };
+}
+async function tryAcquireFileLock(lockPath, staleMs) {
+    let recovered = false;
+    for (let attempt = 0; attempt < 2; attempt += 1) {
+        const owner = `${process.pid}-${randomId(8)}`;
+        const protectedPids = new Set();
         try {
             await fsp.mkdir(lockPath);
-            await writeOwnerFile(lockPath, owner, staleMs);
-            break;
+            await writeOwnerFile(lockPath, owner, staleMs, protectedPids);
+            return { owner, protectedPids, recovered };
         }
         catch (err) {
-            const code = errorCode(err);
-            if (code !== 'EEXIST')
+            if (errorCode(err) !== 'EEXIST')
                 throw err;
-            await recoverStaleLock(lockPath);
-            if (Date.now() - started > timeoutMs) {
-                throw new Error(`file_lock_timeout:${lockPath}`);
-            }
-            await sleep(jitterDelay());
+            if (attempt > 0)
+                return null;
+            recovered = await recoverStaleLock(lockPath);
+            if (!recovered)
+                return null;
         }
     }
+    return null;
+}
+async function holdFileLock(lockPath, staleMs, held, fn) {
+    const lease = {
+        owner: held.owner,
+        pid: process.pid,
+        recovered: held.recovered,
+        protectPid: async (pid) => {
+            if (!Number.isSafeInteger(pid) || pid <= 0 || pid === process.pid) {
+                throw new Error(`file_lock_invalid_protected_pid:${String(pid)}`);
+            }
+            held.protectedPids.add(pid);
+            await writeOwnerFile(lockPath, held.owner, staleMs, held.protectedPids);
+        }
+    };
     // Touch the owner file's heartbeat_at while we hold the lock so a stale
     // waiter never mistakes genuinely slow-but-alive work for an abandoned
     // lock (20차 P1-1) — recoverStaleLock only reclaims when both the
     // heartbeat is old AND the owning pid is actually dead.
     const heartbeat = setInterval(() => {
         /* intentional: a missed heartbeat tick just gets retried next interval; only matters if it stays stale for the full staleMs window */
-        writeOwnerFile(lockPath, owner, staleMs).catch(() => undefined);
+        writeOwnerFile(lockPath, held.owner, staleMs, held.protectedPids).catch(() => undefined);
     }, Math.max(250, Math.floor(staleMs / HEARTBEAT_MARGIN)));
     if (typeof heartbeat.unref === 'function')
         heartbeat.unref();
     try {
-        return await fn();
+        return await fn(lease);
     }
     finally {
         clearInterval(heartbeat);
         /* intentional: best-effort release — if it fails, the lock will still be reclaimed once it goes stale (owner-token/pid checked, never blind rm) */
-        await releaseIfOwned(lockPath, owner).catch(() => undefined);
+        await releaseIfOwned(lockPath, held.owner).catch(() => undefined);
     }
 }
-async function writeOwnerFile(lockPath, owner, staleMs) {
+async function writeOwnerFile(lockPath, owner, staleMs, protectedPids) {
     const now = nowIso();
     const existing = await readJson(path.join(lockPath, 'owner.json'), null);
     await writeJsonAtomic(path.join(lockPath, 'owner.json'), {
@@ -58,7 +102,8 @@ async function writeOwnerFile(lockPath, owner, staleMs) {
         hostname: os.hostname(),
         acquired_at: existing?.owner === owner ? existing.acquired_at : now,
         heartbeat_at: now,
-        stale_ms: staleMs
+        stale_ms: staleMs,
+        ...(protectedPids.size > 0 ? { protected_pids: [...protectedPids].sort((a, b) => a - b) } : {})
     });
 }
 // Reclaims an abandoned lock without ever directly deleting a lock another
@@ -80,23 +125,24 @@ async function recoverStaleLock(lockPath) {
         const heartbeatAgeMs = Date.now() - Date.parse(info.heartbeat_at);
         stale = Number.isFinite(heartbeatAgeMs)
             && heartbeatAgeMs > info.stale_ms
-            && !isPidAlive(info.pid, info.hostname);
+            && !ownerHasLivePid(info);
     }
     if (!stale)
-        return;
+        return false;
     const quarantinePath = `${lockPath}.stale-${Date.now()}-${randomId(6)}`;
     try {
         await fsp.rename(lockPath, quarantinePath);
     }
     catch {
         // Another waiter already reclaimed (or the holder released) it first.
-        return;
+        return false;
     }
     /* intentional: the quarantine rename already reclaimed the lock name; this is just disk cleanup of the orphaned directory and can be swept up later if it fails */
     await guardedRm(guardContextForRoute(process.cwd(), lockScopeContract(quarantinePath), 'remove quarantined stale SKS file lock directory'), quarantinePath, {
         recursive: true,
         force: true
     }).catch(() => undefined);
+    return true;
 }
 async function releaseIfOwned(lockPath, owner) {
     const info = await readJson(path.join(lockPath, 'owner.json'), null);
@@ -107,6 +153,12 @@ async function releaseIfOwned(lockPath, owner) {
         return;
     await removeLockDir(lockPath);
 }
+function ownerHasLivePid(info) {
+    if (isPidAlive(info.pid, info.hostname))
+        return true;
+    return Array.isArray(info.protected_pids)
+        && info.protected_pids.some((pid) => Number.isSafeInteger(pid) && pid > 0 && isPidAlive(pid, info.hostname));
+}
 async function removeLockDir(lockPath) {
     await guardedRm(guardContextForRoute(process.cwd(), lockScopeContract(lockPath), 'remove SKS file lock directory'), lockPath, {
         recursive: true,
@@ -165,4 +217,3 @@ function sleep(ms) {
 function errorCode(err) {
     return err && typeof err === 'object' && 'code' in err ? String(err.code) : '';
 }
-//# sourceMappingURL=file-lock.js.map

package/dist/core/loop-blocker.js

@@ -39,4 +39,3 @@ export async function writeLoopBlockerReport(file, events = [], threshold = 2) {
 function blockerKey(event) {
     return `${String(event.reason || 'unknown').trim()}::${String(event.detail || '').trim()}`;
 }
-//# sourceMappingURL=loop-blocker.js.map

package/dist/core/loops/goal-to-loop-compat.js

@@ -20,4 +20,3 @@ export async function compileGoalToLoopPlan(input) {
     });
     return plan;
 }
-//# sourceMappingURL=goal-to-loop-compat.js.map

package/dist/core/loops/loop-artifacts.js

@@ -90,4 +90,3 @@ function containedJoin(base, ...parts) {
     }
     return target;
 }
-//# sourceMappingURL=loop-artifacts.js.map

package/dist/core/loops/loop-checkpoint.js

@@ -19,4 +19,3 @@ export async function writeLoopCheckpoint(input) {
 export async function readLatestLoopCheckpoint(root, missionId, loopId) {
     return readJson(loopLatestCheckpointPath(root, missionId, loopId), null);
 }
-//# sourceMappingURL=loop-checkpoint.js.map

package/dist/core/loops/loop-concurrency-budget.js

@@ -76,4 +76,3 @@ function normalizeUsageCertainty(value) {
         return value;
     return 'unverified';
 }
-//# sourceMappingURL=loop-concurrency-budget.js.map

package/dist/core/loops/loop-continuation-enforcer.js

@@ -37,4 +37,3 @@ function loopNodes(value) {
 function isRecord(value) {
     return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
 }
-//# sourceMappingURL=loop-continuation-enforcer.js.map

package/dist/core/loops/loop-decomposer.js

@@ -6,7 +6,7 @@ export const LOOP_DOMAIN_RULES = [
     { id: 'naruto', dirs: ['src/core/naruto', 'src/core/commands/naruto-command.ts'], gates: ['naruto:*'] },
     { id: 'codex-control', dirs: ['src/core/codex-control', 'src/scripts/codex-'], gates: ['codex:*', 'codex-sdk:*'] },
     { id: 'image', dirs: ['src/core/image', 'src/core/image-generation'], gates: ['image:*'] },
-    { id: 'mad-db', dirs: ['src/core/mad-db', 'src/core/db-safety.ts'], gates: ['mad-db:*'] },
+    { id: 'mad-sks-sql-plane', dirs: ['src/core/mad-sks/sql-plane', 'src/core/db-safety.ts'], gates: ['mad-sks:sql-plane-*'] },
     { id: 'docs', dirs: ['docs', 'README.md', 'CHANGELOG.md'], gates: ['docs:*', 'changelog:check'] }
 ];
 export function decomposeRequestIntoLoopDomains(request, changedFiles = []) {
@@ -54,4 +54,3 @@ function domainAliases(id) {
         return ['qa'];
     return [];
 }
-//# sourceMappingURL=loop-decomposer.js.map

package/dist/core/loops/loop-final-arbiter-contract.js

@@ -25,4 +25,3 @@ function relativeMissionArtifact(root, absolute) {
     const normalized = absolute.replace(/\\/g, '/');
     return normalized.startsWith(`${normalizedRoot}/`) ? normalized.slice(normalizedRoot.length + 1) : normalized;
 }
-//# sourceMappingURL=loop-final-arbiter-contract.js.map

package/dist/core/loops/loop-finalizer.js

@@ -73,4 +73,3 @@ export async function finalizeLoopGraph(input) {
     await writeJsonAtomic(loopGraphProofPath(input.root, input.plan.mission_id), finalGraph);
     return finalGraph;
 }
-//# sourceMappingURL=loop-finalizer.js.map

package/dist/core/loops/loop-fixture-policy.js

@@ -55,4 +55,3 @@ export function isUnderTempRoot(root) {
     const tempRoot = path.resolve(os.tmpdir());
     return normalizedRoot === tempRoot || normalizedRoot.startsWith(`${tempRoot}${path.sep}`);
 }
-//# sourceMappingURL=loop-fixture-policy.js.map

package/dist/core/loops/loop-gate-ladder.js

@@ -13,4 +13,3 @@ export function canEscalateLoopLevel(input) {
 export function sourceMutationRequiresGptFinal(node) {
     return node.level === 'L2-action' || node.risk.requires_gpt_final || node.gates.final.includes('gpt:final-arbiter');
 }
-//# sourceMappingURL=loop-gate-ladder.js.map

package/dist/core/loops/loop-gate-registry.js

@@ -93,4 +93,3 @@ function normalizeSideEffect(value) {
 function shellQuote(value) {
     return `'${String(value).replace(/'/g, `'\\''`)}'`;
 }
-//# sourceMappingURL=loop-gate-registry.js.map

package/dist/core/loops/loop-gate-runner.js

@@ -215,4 +215,3 @@ function isWithinPath(base, target) {
     const resolvedTarget = path.resolve(target);
     return resolvedTarget === resolvedBase || resolvedTarget.startsWith(`${resolvedBase}${path.sep}`);
 }
-//# sourceMappingURL=loop-gate-runner.js.map

package/dist/core/loops/loop-gate-selector.js

@@ -16,9 +16,9 @@ export function selectLoopGates(input) {
         add(local, ['qa-loop:app-handoff-gate-lifecycle']);
     else if (/codex/.test(files) || input.node.loop_id.includes('codex'))
         add(local, ['codex:0139-capability', 'codex-sdk:version-compat']);
-    else if (/mad-db|db-safety/.test(files) || input.node.loop_id.includes('mad-db'))
-        add(local, ['mad-db:safety-conflict-matrix', 'mad-db:operation-lifecycle-ledger']);
-    else if (/agent|scheduler|native-swarm/.test(files) || input.node.loop_id.includes('naruto'))
+    else if (/mad-sks.*sql-plane|db-safety/.test(files) || input.node.loop_id.includes('mad-sks-sql-plane'))
+        add(local, ['mad-sks:sql-plane-capability', 'mad-sks:sql-plane-operation-lifecycle']);
+    else if (/agent|scheduler|worker-runtime/.test(files) || input.node.loop_id.includes('naruto'))
         add(local, ['parallel:runtime-real-blackbox', 'scheduler:utilization-proof']);
     else
         add(local, ['loop:affected']);
@@ -49,4 +49,3 @@ function add(target, values) {
     for (const value of values)
         target.add(value);
 }
-//# sourceMappingURL=loop-gate-selector.js.map

package/dist/core/loops/loop-gpt-final-arbiter.js

@@ -78,4 +78,3 @@ function stringArray(value) {
         return [];
     return value.map((item) => typeof item === 'string' ? item : JSON.stringify(item)).filter(Boolean);
 }
-//# sourceMappingURL=loop-gpt-final-arbiter.js.map

package/dist/core/loops/loop-integration-merge.js

@@ -77,4 +77,3 @@ async function writeHandoff(root, loopId, detail) {
 function safeArtifactId(value) {
     return String(value || 'unknown').replace(/[^A-Za-z0-9_.-]/g, '_').slice(0, 80) || 'unknown';
 }
-//# sourceMappingURL=loop-integration-merge.js.map

package/dist/core/loops/loop-interrupt-registry.js

@@ -115,4 +115,3 @@ function processStillExists(pid) {
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));
 }
-//# sourceMappingURL=loop-interrupt-registry.js.map

package/dist/core/loops/loop-iteration-runner.js

@@ -1,2 +1 @@
 export { runLoopNode } from './loop-runtime.js';
-//# sourceMappingURL=loop-iteration-runner.js.map

package/dist/core/loops/loop-lease.js

@@ -88,4 +88,3 @@ function allDocs(scope) {
     const values = [...scope.files, ...scope.directories];
     return values.length > 0 && values.every((value) => value === 'README.md' || value === 'CHANGELOG.md' || value.startsWith('docs'));
 }
-//# sourceMappingURL=loop-lease.js.map

package/dist/core/loops/loop-merge-strategy.js

@@ -102,4 +102,3 @@ function result(loopId, ok, selectedStrategy, attempts, changedFiles, blockers)
         blockers: [...new Set(blockers)]
     };
 }
-//# sourceMappingURL=loop-merge-strategy.js.map

package/dist/core/loops/loop-mutation-ledger.js

@@ -100,4 +100,3 @@ export async function mutationLedgerFromLoopProofs(input) {
     }
     return events;
 }
-//# sourceMappingURL=loop-mutation-ledger.js.map

package/dist/core/loops/loop-observability.js

@@ -16,4 +16,3 @@ export function summarizeLoopGraphProof(proof) {
         blocked_loop_ids: proof.blockers
     };
 }
-//# sourceMappingURL=loop-observability.js.map

package/dist/core/loops/loop-owner-inference.js

@@ -57,4 +57,3 @@ function intersection(a, b) {
     const rhs = new Set(b);
     return a.filter((value) => rhs.has(value));
 }
-//# sourceMappingURL=loop-owner-inference.js.map

package/dist/core/loops/loop-owner-ledger.js

@@ -1,2 +1 @@
 export { acquireLoopLease, releaseLoopLease, detectLoopLeaseConflicts } from './loop-lease.js';
-//# sourceMappingURL=loop-owner-ledger.js.map

package/dist/core/loops/loop-planner.js

@@ -203,4 +203,3 @@ function hintAppliesToNode(hint, node) {
     const scopes = [...node.owner_scope.files, ...node.owner_scope.directories].map((value) => value.replace(/^\.?\//, ''));
     return scopes.some((scope) => scope === hint.scope || scope.startsWith(`${hint.scope}/`) || hint.scope.startsWith(`${scope}/`));
 }
-//# sourceMappingURL=loop-planner.js.map

package/dist/core/loops/loop-proof-summary.js

@@ -7,4 +7,3 @@ export function renderLoopProofSummary(proof) {
         `Blocked: ${proof.blockers.length ? proof.blockers.join(', ') : 'none'}`
     ].join('\n');
 }
-//# sourceMappingURL=loop-proof-summary.js.map

package/dist/core/loops/loop-proof.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=loop-proof.js.map

package/dist/core/loops/loop-risk-classifier.js

@@ -7,11 +7,11 @@ export function classifyLoopRisk(node) {
     ].join(' ').toLowerCase();
     const reasons = [];
     let level = 'low';
-    if (/(db|mad-db|mcp|token|auth|postinstall|publish|global config)/.test(scope)) {
+    if (/(db|mad-sks.*sql-plane|mcp|token|auth|postinstall|publish|global config)/.test(scope)) {
         level = 'critical';
         reasons.push('critical_scope');
     }
-    else if (/(release-gates|worktree|scheduler|zellij|codex-control|agent|native-swarm)/.test(scope)) {
+    else if (/(release-gates|worktree|scheduler|zellij|codex-control|agent|worker-runtime)/.test(scope)) {
         level = 'high';
         reasons.push('runtime_or_scheduler_scope');
     }
@@ -39,4 +39,3 @@ export function loopLevelAllowedUnattended(node) {
         && node.gates.local.length > 0
         && !node.risk.requires_human_handoff;
 }
-//# sourceMappingURL=loop-risk-classifier.js.map

package/dist/core/loops/loop-runtime-control.js

@@ -24,4 +24,3 @@ export async function checkpointCancelledLoop(root, node, iteration, phase) {
         resumable: true
     });
 }
-//# sourceMappingURL=loop-runtime-control.js.map

package/dist/core/loops/loop-runtime.js

@@ -314,4 +314,3 @@ function emptyGate() {
 function emptyDiff() {
     return { changed_files: [], patch_bytes: 0, diff_stat: '', blockers: [] };
 }
-//# sourceMappingURL=loop-runtime.js.map

package/dist/core/loops/loop-scheduler.js

@@ -66,4 +66,3 @@ export function graphProofFromLoopProofs(input) {
         blockers
     };
 }
-//# sourceMappingURL=loop-scheduler.js.map

package/dist/core/loops/loop-schema.js

@@ -60,4 +60,3 @@ export function validateLoopBudget(budget) {
 export function allGateIds(gates) {
     return [...new Set([...gates.triage, ...gates.local, ...gates.checker, ...gates.integration, ...gates.final])];
 }
-//# sourceMappingURL=loop-schema.js.map

package/dist/core/loops/loop-side-effect-scanner.js

@@ -88,4 +88,3 @@ function normalize(file) {
 export function loopSideEffectLedgerPath(root, missionId) {
     return loopMutationLedgerPath(root, missionId);
 }
-//# sourceMappingURL=loop-side-effect-scanner.js.map

package/dist/core/loops/loop-state.js

@@ -58,4 +58,3 @@ export function initialLoopState(input) {
         updated_at: new Date().toISOString()
     };
 }
-//# sourceMappingURL=loop-state.js.map

package/dist/core/loops/loop-worker-prompts.js

@@ -42,4 +42,3 @@ function ownerScopeText(node) {
         ...node.owner_scope.directories.map((dir) => `dir:${dir}`)
     ].join(', ') || 'none';
 }
-//# sourceMappingURL=loop-worker-prompts.js.map

package/dist/core/loops/loop-worker-runtime.js

@@ -85,7 +85,6 @@ async function runLoopWorkerNative(input) {
         maxAgentCount: Math.max(1, workerCount),
         targetActiveSlots: Math.max(1, workerCount),
         visualLaneCount: visiblePaneCap,
-        narutoMode: true,
         narutoWorkGraph: workGraph,
         ...zellijPlacementOpts,
         env: {
@@ -267,7 +266,7 @@ function buildLoopNarutoWorkGraph(input, workerCount, executionProfile, invocati
     return {
         schema: 'sks.naruto-work-graph.v1',
         route: '$Naruto',
-        requested_clones: workerCount,
+        requested_workers: workerCount,
         total_work_items: workItems.length,
         readonly: input.phase === 'checker',
         write_capable: input.phase === 'maker',
@@ -339,4 +338,3 @@ function effectiveLoopWorkerCount(input) {
     const budget = computeLoopConcurrencyBudget({ plan: input.plan });
     return loopWorkerBudgetFor(budget, input.node.loop_id, input.phase, requested);
 }
-//# sourceMappingURL=loop-worker-runtime.js.map

package/dist/core/loops/loop-worktree-runtime.js

@@ -89,4 +89,3 @@ function stringArray(value) {
         return [];
     return value.map((item) => String(item || '').trim()).filter(Boolean);
 }
-//# sourceMappingURL=loop-worktree-runtime.js.map

package/dist/core/mad-sks/audit-ledger.js

@@ -43,4 +43,3 @@ export async function writeMadSksAuditLedger(file, ledger) {
     await writeJsonAtomic(file, ledger);
     return ledger;
 }
-//# sourceMappingURL=audit-ledger.js.map

package/dist/core/mad-sks/authorization-manifest.js

@@ -55,4 +55,3 @@ export function validateMadSksAuthorizationManifest(value) {
 function hashAuthorizationPayload(payload) {
     return sha256(stableJson(payload));
 }
-//# sourceMappingURL=authorization-manifest.js.map

package/dist/core/mad-sks/executors/computer-use-executor.js

@@ -70,4 +70,3 @@ async function runVisualHandoff(input, context, scope, dryRun) {
         extra: { guard, handoff: true, local_only_artifact_policy: true }
     });
 }
-//# sourceMappingURL=computer-use-executor.js.map

package/dist/core/mad-sks/executors/db-write-executor.js

@@ -31,7 +31,7 @@ export async function runDbWrite(input, context, dryRun = Boolean(input.dry_run)
     });
     if (!guard.ok)
         blockers.push(...guard.issues);
-    // db-write-executor has no execution engine — it never calls runMadDbCycle (or any
+    // db-write-executor has no execution engine — it never calls the MAD-SKS SQL-plane cycle (or any
     // adapter) to actually run SQL against a database. It can only produce a preview
     // plan. A real apply must therefore always be blocked here rather than fabricate
     // an 'applied' result; the actual execution route is the sql-plane executor.
@@ -62,4 +62,3 @@ export async function runDbWrite(input, context, dryRun = Boolean(input.dry_run)
         extra: { guard, sql_classification: sqlClassification, migration_file: migrationFile, migration_hash: migrationHash, affected_tables: input.affected_tables || [] }
     });
 }
-//# sourceMappingURL=db-write-executor.js.map

package/dist/core/mad-sks/executors/executor-base.js

@@ -170,4 +170,3 @@ export function redactedCommand(command) {
         return command.map((part) => redactMadSksSecrets(part)).join(' ');
     return redactMadSksSecrets(command || '');
 }
-//# sourceMappingURL=executor-base.js.map

package/dist/core/mad-sks/executors/file-write-executor.js

@@ -136,4 +136,3 @@ export async function runFileWrite(input, context, dryRun = Boolean(input.dry_ru
         extra: { target_path: target, before_hash: beforeHash, after_hash: afterHash, guard }
     });
 }
-//# sourceMappingURL=file-write-executor.js.map

package/dist/core/mad-sks/executors/index.js

@@ -44,4 +44,3 @@ export async function runMadSksExecutor(input) {
     const context = createMadSksExecutorContext({ ...input, permission_model });
     return input.dry_run ? executor.dryRun(input, context) : executor.apply(input, context);
 }
-//# sourceMappingURL=index.js.map

package/dist/core/mad-sks/executors/package-install-executor.js

@@ -86,4 +86,3 @@ function packageArgv(input) {
     const packages = Array.isArray(input.packages) ? input.packages.map(String) : [];
     return [manager, operation, ...packages];
 }
-//# sourceMappingURL=package-install-executor.js.map

package/dist/core/mad-sks/executors/service-control-executor.js

@@ -68,4 +68,3 @@ function serviceArgv(input) {
         return ['npm', 'run', String(input.script || 'dev')];
     return [command, String(input.operation || 'status'), String(input.service || '')].filter(Boolean);
 }
-//# sourceMappingURL=service-control-executor.js.map

package/dist/core/mad-sks/executors/shell-command-executor.js

@@ -126,4 +126,3 @@ function spawnArgv(argv, cwd) {
         child.on('close', (code) => resolve({ code, stdout, stderr }));
     });
 }
-//# sourceMappingURL=shell-command-executor.js.map

package/dist/core/mad-sks/executors/sql-plane-executor.js

@@ -1,9 +1,9 @@
 import path from 'node:path';
 import { classifySql } from '../../db-safety.js';
 import { readText } from '../../fsx.js';
-import { runMadDbCycle } from '../../mad-db/mad-db-coordinator.js';
-import { isMadDbControlPlaneDeniedTool, madDbOperationClassesFromClassification } from '../../mad-db/mad-db-policy.js';
-import { withMadDbLock } from '../../mad-db/mad-db-lock.js';
+import { runMadSksSqlPlaneCycle } from '../sql-plane/coordinator.js';
+import { isMadSksSqlPlaneControlPlaneDeniedTool, madSksSqlPlaneOperationClassesFromClassification } from '../sql-plane/policy.js';
+import { withMadSksSqlPlaneLock } from '../sql-plane/lock.js';
 import { madSksCatastrophicSqlExplicitlyRequested } from '../../permission-gates.js';
 import { runMadSksGuardMiddleware } from '../guard-middleware.js';
 import { madSksAuditAction } from '../audit-ledger.js';
@@ -31,7 +31,7 @@ async function runSqlPlane(input, context, dryRun = Boolean(input.dry_run)) {
     const toolName = String(input.tool_name || (action === 'apply-migration' ? 'apply_migration' : 'execute_sql'));
     const userIntent = String(input.user_intent || context.permission_model?.user_intent || 'MAD-SKS SQL-plane execution');
     const classification = classifySql(sql || userIntent);
-    const operationClasses = madDbOperationClassesFromClassification({ ...classification, toolName });
+    const operationClasses = madSksSqlPlaneOperationClassesFromClassification({ ...classification, toolName });
     const catastrophic = madSksCatastrophicSqlExplicitlyRequested({ classification, userIntent, sql });
     const rollbackKind = rollbackSql
         ? 'compensating_sql'
@@ -41,8 +41,8 @@ async function runSqlPlane(input, context, dryRun = Boolean(input.dry_run)) {
     const blockers = [];
     if (!sql.trim() && action !== 'apply-migration')
         blockers.push('sql_required_for_sql_plane_executor');
-    if (isMadDbControlPlaneDeniedTool(toolName))
-        blockers.push('mad_db_control_plane_tool_denied');
+    if (isMadSksSqlPlaneControlPlaneDeniedTool(toolName))
+        blockers.push('mad_sks_sql_plane_control_plane_tool_denied');
     if (catastrophic.required && !catastrophic.ok)
         blockers.push('catastrophic_sql_literal_request_missing');
     if (!dryRun && ['write', 'destructive'].includes(String(classification.level || '')) && !verifySql)
@@ -125,7 +125,7 @@ async function runSqlPlane(input, context, dryRun = Boolean(input.dry_run)) {
         action,
         task: userIntent,
         sql: sql || null,
-        migrationName: String(input.migration_name || input.name || `mad_sks_${Date.now()}`),
+        migrationName: String(input.migration_name || input.name || `mad_sks_sql_plane_${Date.now()}`),
         migrationFile: migrationFile || null,
         verifySql: verifySql || null,
         verifyExpectedRowCount,
@@ -136,7 +136,7 @@ async function runSqlPlane(input, context, dryRun = Boolean(input.dry_run)) {
     const readBackPassed = result.read_back ? result.read_back.ok === true : result.execution?.ok === true;
     const profileClosed = result.capability_closed === true && result.read_only_restoration?.ok === true;
     const verification = [{
-            kind: 'mad_db_cycle',
+            kind: 'mad_sks_sql_plane_cycle',
             ok: result.ok === true,
             execution_ok: result.execution?.ok === true,
             read_back_passed: readBackPassed,
@@ -170,7 +170,7 @@ async function runSqlPlane(input, context, dryRun = Boolean(input.dry_run)) {
             catastrophic,
             rollback_kind: rollbackKind,
             operation_classes: result.operation?.operation_classes || operationClasses,
-            mad_db_cycle_result: result,
+            mad_sks_sql_plane_cycle_result: result,
             sql_plane: sqlPlaneSummary(readBackPassed, profileClosed, result, result.operation?.operation_classes || operationClasses)
         }
     });
@@ -185,10 +185,10 @@ async function resolveSqlPlaneSql(input, context, migrationFile) {
     return String(await readText(resolved, '') || '');
 }
 async function runSqlPlaneCycle(input, context, cycleInput) {
-    const fixture = input.__test_mad_db_cycle_result;
-    if (fixture && (process.env.NODE_ENV === 'test' || process.env.SKS_TEST_MOCK_MAD_DB_CYCLE === '1'))
+    const fixture = input.__test_mad_sks_sql_plane_cycle_result;
+    if (fixture && (process.env.NODE_ENV === 'test' || process.env.SKS_TEST_MOCK_MAD_SKS_SQL_PLANE_CYCLE === '1'))
         return fixture;
-    return withMadDbLock(context.target_root, String(input.mission_id || input.missionId || ''), 'mad-sks-sql-plane', () => runMadDbCycle(cycleInput));
+    return withMadSksSqlPlaneLock(context.target_root, String(input.mission_id || input.missionId || ''), 'mad-sks-sql-plane', () => runMadSksSqlPlaneCycle(cycleInput));
 }
 function sqlPlaneSummary(readBackPassed, profileClosed, result, operationClasses) {
     return {
@@ -199,4 +199,3 @@ function sqlPlaneSummary(readBackPassed, profileClosed, result, operationClasses
         profile_closed: profileClosed
     };
 }
-//# sourceMappingURL=sql-plane-executor.js.map

package/dist/core/mad-sks/guard-middleware.js

@@ -132,4 +132,3 @@ function isInside(candidate, root) {
     const rel = path.relative(root, candidate);
     return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));
 }
-//# sourceMappingURL=guard-middleware.js.map

package/dist/core/mad-sks/immutable-harness-guard.js

@@ -275,4 +275,3 @@ async function realPathForCheck(candidate) {
         return path.resolve(candidate);
     }
 }
-//# sourceMappingURL=immutable-harness-guard.js.map

package/dist/core/mad-sks/permission-model.js

@@ -176,4 +176,3 @@ export function stableJson(value) {
     }
     return JSON.stringify(value);
 }
-//# sourceMappingURL=permission-model.js.map

package/dist/core/mad-sks/proof-evidence.js

@@ -35,4 +35,3 @@ export async function writeMadSksProofEvidence(file, evidence) {
     await writeJsonAtomic(file, evidence);
     return evidence;
 }
-//# sourceMappingURL=proof-evidence.js.map

package/dist/core/mad-sks/rollback-apply.js

@@ -169,4 +169,3 @@ function blocked(reason, extra = {}) {
         ...extra
     };
 }
-//# sourceMappingURL=rollback-apply.js.map

package/dist/core/mad-sks/rollback-plan.js

@@ -24,4 +24,3 @@ export async function writeMadSksRollbackPlan(file, plan) {
     await writeJsonAtomic(file, plan);
     return plan;
 }
-//# sourceMappingURL=rollback-plan.js.map