@mutmutco/codex-plugin 4.6.16 → 4.6.18

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.6.16",
+  "version": "4.6.18",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -2998,9 +2998,9 @@ ${indent}`) + "'";
         return quotedString(value, ctx);
       }
       const indent = ctx.indent || (ctx.forceBlockIndent || containsDocumentMarker(value) ? "  " : "");
-      const literal2 = blockQuote === "literal" ? true : blockQuote === "folded" || type === Scalar.Scalar.BLOCK_FOLDED ? false : type === Scalar.Scalar.BLOCK_LITERAL ? true : !lineLengthOverLimit(value, lineWidth, indent.length);
+      const literal = blockQuote === "literal" ? true : blockQuote === "folded" || type === Scalar.Scalar.BLOCK_FOLDED ? false : type === Scalar.Scalar.BLOCK_LITERAL ? true : !lineLengthOverLimit(value, lineWidth, indent.length);
       if (!value)
-        return literal2 ? "|\n" : ">\n";
+        return literal ? "|\n" : ">\n";
       let chomp;
       let endStart;
       for (endStart = value.length; endStart > 0; --endStart) {
@@ -3049,7 +3049,7 @@ ${indent}`) + "'";
         if (onComment)
           onComment();
       }
-      if (!literal2) {
+      if (!literal) {
         const foldedValue = value.replace(/\n+/g, "\n$&").replace(/(?:^|\n)([\t ].*)(?:([\n\t ]*)\n(?![\n\t ]))?/g, "$1$2").replace(/\n+/g, `$&${indent}`);
         let literalFallback = false;
         const foldOptions = getFoldOptions(ctx, true);
@@ -13637,13 +13637,16 @@ function isExemptPorcelainLine(status, path2) {
   return isLiveSessionPath(path2);
 }
 function porcelainBlockingPaths(porcelain) {
-  const blocking = [];
+  return porcelainBlockingEntries(porcelain).map((e) => e.path);
+}
+function porcelainBlockingEntries(porcelain) {
+  const entries = [];
   for (const line of porcelain.split("\n")) {
     if (!line.trim()) continue;
     const { status, path: path2 } = splitPorcelainLine(line);
-    if (path2 !== "" && !isExemptPorcelainLine(status, path2)) blocking.push(path2);
+    if (path2 !== "" && !isExemptPorcelainLine(status, path2)) entries.push({ status, path: path2 });
   }
-  return blocking;
+  return entries;
 }
 function porcelainHasBlockingChanges(porcelain) {
   return porcelainBlockingPaths(porcelain).length > 0;
@@ -17607,6 +17610,279 @@ var REGISTRY_FETCH_TIMEOUT_MS = 8e3;
 init_fetch_retry();
 init_client_version();
 
+// src/hub-release-ci-authority.ts
+var HUB_RELEASE_REPO = "mutmutco/MMI-Hub";
+var HUB_RELEASE_WORKFLOW = ".github/workflows/hub-release.yml";
+var HUB_RELEASE_REF = "refs/heads/development";
+var WORKFLOW_REF = `${HUB_RELEASE_REPO}/${HUB_RELEASE_WORKFLOW}@${HUB_RELEASE_REF}`;
+var ID = /^[1-9][0-9]*$/;
+function hubReleaseCiRun(env) {
+  if (env.MMI_HUB_RELEASE_CI !== "1" || env.GITHUB_ACTIONS !== "true") return null;
+  if (env.GITHUB_REPOSITORY !== HUB_RELEASE_REPO || env.GITHUB_EVENT_NAME !== "workflow_dispatch") return null;
+  if (env.GITHUB_WORKFLOW_REF !== WORKFLOW_REF || env.GITHUB_REF !== HUB_RELEASE_REF) return null;
+  const runId = env.GITHUB_RUN_ID ?? "";
+  const runAttempt2 = env.GITHUB_RUN_ATTEMPT ?? "";
+  if (!ID.test(runId) || !ID.test(runAttempt2)) return null;
+  return { runId: Number(runId), runAttempt: Number(runAttempt2) };
+}
+
+// ../shared/runner-fallback.ts
+var HOSTED_RUNNER_LABEL_RE = /\b(?:ubuntu|windows|macos)-(?:latest|\d[\w.-]*)\b/i;
+var STANDARD_HOSTED_LABEL_RE = /^(?:ubuntu-(?:latest|24\.04|22\.04|24\.04-arm|22\.04-arm)|windows-(?:latest|2025|2022|11-arm)|macos-(?:latest|\d+|\d+-intel))$/i;
+var BLESSED_RUNNER_CHOICE_SHA = "cf35db6cdf053746bc5b2cd75f241a7d93cf7f48";
+function classifyRunnerCost(selector) {
+  const raw = selector.replace(/\s+#.*$/gm, "").trim();
+  if (STANDARD_HOSTED_LABEL_RE.test(raw.replace(/^(['"])(.*)\1$/, "$2"))) return "standard-hosted";
+  if (HOSTED_RUNNER_LABEL_RE.test(raw)) return "hosted";
+  const json = /^\$\{\{\s*fromJSON\('([^']+)'\)\s*\}\}$/.exec(raw);
+  if (json) {
+    try {
+      const labels2 = JSON.parse(json[1]);
+      return Array.isArray(labels2) && labels2.length > 0 && labels2.every((l) => typeof l === "string" && /^[\w-]+$/.test(l)) && labels2.some((l) => l.toLowerCase() === "self-hosted") ? "self-hosted" : "unknown";
+    } catch {
+      return "unknown";
+    }
+  }
+  if (raw.includes("${{")) return "unknown";
+  const labels = /^\[[^\[\]]+\]$/.test(raw) ? raw.slice(1, -1).split(",").map((s) => s.trim().replace(/^(['"])(.*)\1$/, "$2")) : /^(?:-\s*[^\n]+\s*)+$/.test(raw) ? raw.split("\n").map((s) => s.trim().replace(/^-\s*/, "").replace(/^(['"])(.*)\1$/, "$2")) : [raw.replace(/^(['"])(.*)\1$/, "$2")];
+  return labels.every((l) => /^[\w-]+$/.test(l)) && labels.some((l) => l.toLowerCase() === "self-hosted") ? "self-hosted" : "unknown";
+}
+var STANDARD_HOSTED_ALLOWLIST = [
+  ["mutmutco/MMI-Hub", ".github/workflows/launcher-build.yml", "build", "windows-latest"],
+  ["mutmutco/Jerv-JervCode", ".github/workflows/release-archives.yml", "release-platform-arm64", "windows-11-arm"]
+];
+var HOSTED_SPILL_RE = /^\$\{\{\s*(?:matrix\.[\w-]+\s*==\s*'[\w-]+'\s*&&\s*(?:'(?<leg>[^']+)'|fromJSON\(needs\.(?<legDecider>[\w-]+)\.outputs\.(?<legOutput>\w+_runs_on)\s*\|\|\s*(?<legOwned>'[^']+')\))\s*\|\|\s*)?fromJSON\(needs\.(?<decider>[\w-]+)\.outputs\.(?<output>\w+_runs_on)\s*\|\|\s*(?<owned>'[^']+')\)\s*\}\}$/;
+var RUNNER_CHOICE_ACTION = "mutmutco/MMI-Hub/.github/actions/runner-choice";
+function runnerChoiceProduces(job, decider, output, source) {
+  const needs = job.needs;
+  if (!(needs === decider || Array.isArray(needs) && needs.includes(decider))) return false;
+  const producer = source.jobs.get(decider);
+  if (!record(producer) || !record(producer.outputs) || !Array.isArray(producer.steps)) return false;
+  const step = /^\$\{\{\s*steps\.([\w-]+)\.outputs\.runs-on\s*\}\}$/.exec(String(producer.outputs[output] ?? ""))?.[1];
+  const steps = producer.steps.filter((s) => record(s) && s.id === step);
+  if (steps.length !== 1 || !record(steps[0])) return false;
+  const { uses } = steps[0], inputs = steps[0].with ?? {};
+  const pinned = /^[0-9a-f]{40}$/.test(source.blessedSha) && uses === `${RUNNER_CHOICE_ACTION}@${source.blessedSha}`;
+  if (!pinned && !(source.repo === "mutmutco/MMI-Hub" && uses === "./.github/actions/runner-choice")) return false;
+  const hosted = record(inputs) ? inputs.hosted ?? "ubuntu-latest" : void 0;
+  return typeof hosted === "string" && STANDARD_HOSTED_LABEL_RE.test(hosted);
+}
+function standardHostedLabelFor(repo, path2, jobId) {
+  if (repo === "mutmutco/Jerv-Hub") return ["ubuntu-latest", "windows-latest", "macos-14"];
+  return STANDARD_HOSTED_ALLOWLIST.find(([r, p, j]) => r === repo && p === path2 && j === jobId)?.[3];
+}
+var record = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
+function classifyJobRunnerCost(job, allowance2, source) {
+  if (!record(job) || !Object.hasOwn(job, "runs-on")) return "unknown";
+  const selector = job["runs-on"];
+  const raw = typeof selector === "string" ? selector.trim() : Array.isArray(selector) && selector.length && selector.every((label) => typeof label === "string") ? JSON.stringify(selector) : "";
+  if (!raw) return "unknown";
+  const approved = (value) => Array.isArray(allowance2) && allowance2.includes(value);
+  if (approved(raw) || allowance2 === "windows-11-arm" && raw === allowance2) return "standard-hosted";
+  const fallback = /^\$\{\{\s*vars\.MMI_RUNNER_FALLBACK\s*==\s*'hosted'\s*&&\s*'([^']+)'\s*\|\|\s*(fromJSON\('[^']+'\))\s*\}\}$/.exec(raw);
+  if (fallback && approved(fallback[1]) && classifyRunnerCost("${{ " + fallback[2] + " }}") === "self-hosted") return "standard-hosted";
+  const layerZero = /^\$\{\{\s*vars\.[\w-]+\s*==\s*'off'\s*&&\s*(fromJSON\('[^']+'\))\s*\|\|\s*'([^']+)'\s*\}\}$/.exec(raw);
+  if (layerZero && classifyRunnerCost("${{ " + layerZero[1] + " }}") === "self-hosted" && STANDARD_HOSTED_LABEL_RE.test(layerZero[2])) return "standard-hosted";
+  const spill = HOSTED_SPILL_RE.exec(raw)?.groups;
+  const legOk = (g) => g.legDecider ? classifyRunnerCost(`\${{ fromJSON(${g.legOwned}) }}`) === "self-hosted" && Boolean(source) && runnerChoiceProduces(job, g.legDecider, g.legOutput, source) : !g.leg || STANDARD_HOSTED_LABEL_RE.test(g.leg);
+  if (spill && source && legOk(spill) && classifyRunnerCost(`\${{ fromJSON(${spill.owned}) }}`) === "self-hosted" && runnerChoiceProduces(job, spill.decider, spill.output, source)) return "standard-hosted";
+  const direct = classifyRunnerCost(raw);
+  const matrix = /^\$\{\{\s*matrix\.([\w-]+)(?:\.([\w-]+))?\s*\}\}$/.exec(raw);
+  if (!matrix || direct === "hosted") return direct;
+  if (!Object.hasOwn(job, "strategy") || !record(job.strategy) || !Object.hasOwn(job.strategy, "matrix") || !record(job.strategy.matrix)) return "unknown";
+  const axes = job.strategy.matrix;
+  if (Object.hasOwn(axes, "exclude")) return "unknown";
+  let alternatives;
+  if (Object.hasOwn(axes, "include")) {
+    if (Object.keys(axes).length !== 1 || !Array.isArray(axes.include) || !axes.include.length) return "unknown";
+    alternatives = axes.include.map((row) => record(row) && Object.hasOwn(row, matrix[1]) ? row[matrix[1]] : void 0);
+  } else {
+    const axis = axes[matrix[1]];
+    if (!Object.hasOwn(axes, matrix[1]) || !Array.isArray(axis) || !axis.length) return "unknown";
+    alternatives = axis;
+  }
+  if (matrix[2]) alternatives = alternatives.map((row) => record(row) && Object.hasOwn(row, matrix[2]) ? row[matrix[2]] : void 0);
+  const costs = alternatives.map((value) => {
+    if (typeof value === "string") {
+      if (value.includes("${{")) return "unknown";
+      if (approved(value) || !matrix[2] && allowance2 === "windows-latest" && value === allowance2) return "standard-hosted";
+      return classifyRunnerCost(value);
+    }
+    if (!Array.isArray(value) || !value.length || !value.every((label) => typeof label === "string" && /^[\w-]+$/.test(label))) return "unknown";
+    return classifyRunnerCost(JSON.stringify(value));
+  });
+  if (costs.includes("hosted")) return "hosted";
+  if (costs.includes("unknown")) return "unknown";
+  return costs.includes("standard-hosted") ? "standard-hosted" : "self-hosted";
+}
+
+// ../shared/github-contents.ts
+function decodeGitHubContents(content) {
+  return Buffer.from(content, "base64").toString("utf8");
+}
+function encodeGitHubContents(content) {
+  return Buffer.from(content, "utf8").toString("base64");
+}
+
+// ../shared/workflow-runner-source.ts
+var WORKFLOW_PATH = /^\.github\/workflows\/[\w.-]+\.ya?ml$/;
+var REPO = /^[A-Za-z0-9][A-Za-z0-9-]*\/[A-Za-z0-9_][\w.-]*$/;
+var REF = /^[\w./-]+$/;
+var MAX_FILES = 64;
+var MAX_DEPTH = 8;
+var WorkflowSourceError = class extends Error {
+  /** Value-free category (safeReadCategory vocabulary) — routes/logs carry it, never a location or body. */
+  category;
+  constructor(location, category) {
+    super(`${location}: ${category}`);
+    this.category = category;
+  }
+};
+function safeReadCategory(error) {
+  const e = error;
+  if (e?.rateLimited === true) return "rate-limited";
+  if (typeof e?.status === "number" && Number.isInteger(e.status) && e.status >= 400 && e.status <= 599) return `HTTP ${e.status}`;
+  if (e?.name === "TimeoutError" || e?.name === "AbortError" || e?.code === "ETIMEDOUT") return "read-timeout";
+  if (e?.code === "ENOENT") return "reader-unavailable";
+  if (e?.code === "ENOBUFS" || e?.code === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER") return "reader-output-limit";
+  if (error instanceof SyntaxError) return "invalid-json";
+  return "read-failed";
+}
+function locationOf(file) {
+  return `${file.repo}/${file.path}${file.ref ? `@${file.ref}` : ""}`;
+}
+function contentsPath(file) {
+  if (!REPO.test(file.repo) || !(WORKFLOW_PATH.test(file.path) || file.path === ".github/workflows") || file.ref !== void 0 && !REF.test(file.ref)) {
+    throw new WorkflowSourceError("workflow source", "invalid-location");
+  }
+  return `repos/${file.repo}/contents/${file.path}${file.ref ? `?ref=${encodeURIComponent(file.ref)}` : ""}`;
+}
+async function readSource(read, file) {
+  const endpoint = contentsPath(file);
+  try {
+    return await read(endpoint);
+  } catch (e) {
+    throw new WorkflowSourceError(locationOf(file), safeReadCategory(e));
+  }
+}
+async function readBody(read, file) {
+  const value = await readSource(read, file);
+  if (!value || value.encoding !== "base64" || typeof value.content !== "string" || !value.content.trim() || value.content.length > 15e5 || !/^[A-Za-z0-9+/=\r\n]+$/.test(value.content)) {
+    throw new WorkflowSourceError(locationOf(file), "invalid-content");
+  }
+  return { ...file, body: decodeGitHubContents(value.content) };
+}
+function resolveCallee(caller, uses) {
+  if (uses.startsWith("./") && WORKFLOW_PATH.test(uses.slice(2))) return { repo: caller.repo, path: uses.slice(2), ref: caller.ref };
+  const remote = /^([\w.-]+\/[\w.-]+)\/(\.github\/workflows\/[\w.-]+\.ya?ml)@([\w./-]+)$/.exec(uses);
+  return remote ? { repo: remote[1], path: remote[2], ref: remote[3] } : void 0;
+}
+async function readRunnerWorkflowClosure(parse2, read, repo, ref, roots, bounds) {
+  let totalBodyBytes = 0;
+  const readBounded = async (file) => {
+    const child2 = await readBody(read, file);
+    totalBodyBytes += Buffer.byteLength(child2.body, "utf8");
+    if (bounds?.maxTotalBodyBytes !== void 0 && totalBodyBytes > bounds.maxTotalBodyBytes) {
+      throw new WorkflowSourceError(locationOf(child2), "source-read-limit");
+    }
+    return child2;
+  };
+  let files;
+  if (roots) {
+    files = roots.map((file) => ({ ...file, repo, ref }));
+  } else {
+    const listing = await readSource(read, { repo, ref, path: ".github/workflows" });
+    if (!Array.isArray(listing)) throw new WorkflowSourceError(`${repo}/.github/workflows`, "invalid-listing");
+    const paths = listing.filter((f) => f?.type === "file" && /\.ya?ml$/i.test(f?.path ?? "")).map((f) => f.path);
+    if (!paths.length || paths.length > MAX_FILES) throw new WorkflowSourceError(`${repo}/.github/workflows`, "empty-or-oversized-listing");
+    files = [];
+    for (const path2 of paths) files.push(await readBounded({ repo, ref, path: path2 }));
+  }
+  if (!files.length || files.length > MAX_FILES) throw new WorkflowSourceError("workflow source", "empty-or-oversized-listing");
+  for (const file of files) contentsPath(file);
+  const byLocation = new Map(files.map((file) => [locationOf(file), file]));
+  const active = /* @__PURE__ */ new Set();
+  const completed = /* @__PURE__ */ new Set();
+  async function visit2(file, depth) {
+    const key = locationOf(file);
+    if (active.has(key)) throw new WorkflowSourceError(key, "reusable-cycle");
+    if (depth > MAX_DEPTH) throw new WorkflowSourceError(key, "reusable-depth-limit");
+    if (completed.has(key)) return;
+    active.add(key);
+    const jobs = parse2(file.body);
+    if (!jobs) throw new WorkflowSourceError(key, "invalid-workflow-yaml");
+    for (const job of jobs.values()) {
+      if (!Object.hasOwn(job, "uses")) continue;
+      const uses = job.uses;
+      if (typeof uses !== "string" || Object.hasOwn(job, "runs-on")) throw new WorkflowSourceError(key, "unresolved-reusable-ref");
+      const target = resolveCallee(file, uses);
+      if (!target) throw new WorkflowSourceError(key, "unresolved-reusable-ref");
+      if (bounds?.calleeAllowed && !bounds.calleeAllowed(target)) throw new WorkflowSourceError(key, "unauthorized-callee");
+      const targetKey = locationOf(target);
+      let child2 = byLocation.get(targetKey);
+      if (!child2) {
+        if (byLocation.size >= MAX_FILES) throw new WorkflowSourceError(key, "workflow-read-limit");
+        child2 = await readBounded(target);
+        byLocation.set(targetKey, child2);
+      }
+      await visit2(child2, depth + 1);
+    }
+    active.delete(key);
+    completed.add(key);
+  }
+  for (const file of files) await visit2(file, 0);
+  return [...byLocation.values()];
+}
+function classifyRunnerWorkflows(parse2, files) {
+  const known = new Map(files.map((file) => [locationOf(file), file]));
+  const parsed = new Map(files.map((file) => [locationOf(file), parse2(file.body)]));
+  const resolvedCache = /* @__PURE__ */ new Map();
+  function resolved(file, active) {
+    const key = locationOf(file);
+    if (active.has(key)) return false;
+    if (resolvedCache.has(key)) return resolvedCache.get(key);
+    const next = new Set(active).add(key);
+    const jobs = parsed.get(key);
+    const result = Boolean(jobs && [...jobs.values()].every((job) => {
+      if (!Object.hasOwn(job, "uses")) return true;
+      const uses = job.uses;
+      if (typeof uses !== "string" || Object.hasOwn(job, "runs-on")) return false;
+      const target = resolveCallee(file, uses);
+      const child2 = target && known.get(locationOf(target));
+      return Boolean(child2 && resolved(child2, next));
+    }));
+    resolvedCache.set(key, result);
+    return result;
+  }
+  return files.flatMap((file) => {
+    const jobs = parsed.get(locationOf(file));
+    if (!jobs) return [{ repo: file.repo, path: file.path, job: "(invalid YAML)", cost: "unknown", callee: false }];
+    return [...jobs].flatMap(([id, job]) => {
+      const hasCallee = Object.hasOwn(job, "uses");
+      const uses = hasCallee && typeof job.uses === "string" && !Object.hasOwn(job, "runs-on") ? job.uses : void 0;
+      const target = uses && resolveCallee(file, uses);
+      if (target && known.has(locationOf(target)) && resolved(file, /* @__PURE__ */ new Set())) return [];
+      const cost = hasCallee ? "unknown" : classifyJobRunnerCost(job, standardHostedLabelFor(file.repo, file.path, id), { repo: file.repo, jobs, blessedSha: BLESSED_RUNNER_CHOICE_SHA });
+      return [{ repo: file.repo, path: file.path, job: id, cost, callee: hasCallee }];
+    });
+  });
+}
+function runnerWorkflowFromContents(value) {
+  const file = value;
+  if (!file || typeof file.repo !== "string" || typeof file.path !== "string" || file.ref !== void 0 && typeof file.ref !== "string") {
+    throw new WorkflowSourceError("workflow source", "invalid-content");
+  }
+  if (!REPO.test(file.repo) || !WORKFLOW_PATH.test(file.path) || file.ref !== void 0 && !REF.test(file.ref)) {
+    throw new WorkflowSourceError("workflow source", "invalid-content");
+  }
+  if (file.encoding !== "base64" || typeof file.content !== "string" || !file.content.trim() || file.content.length > 15e5 || !/^[A-Za-z0-9+/=\r\n]+$/.test(file.content)) {
+    throw new WorkflowSourceError("workflow source", "invalid-content");
+  }
+  const body = decodeGitHubContents(file.content);
+  if (!body.trim()) throw new WorkflowSourceError("workflow source", "invalid-content");
+  return { repo: file.repo, path: file.path, ref: file.ref, body };
+}
+
 // ../shared/schedule-inventory.ts
 function classifyLlmValue(raw) {
   const value = raw.trim().toLowerCase();
@@ -18669,6 +18945,23 @@ async function tenantDeploy(payload, deps) {
 async function releaseAnnouncement(payload, deps) {
   return postJson("/release-announcement", payload, deps, "POST", { noRetry: true, timeoutMs: 3e4 });
 }
+async function trainWorkflowSourceClosure(repo, deps) {
+  const verdict = await fetchTrainAuthority(repo, deps);
+  if (!verdict.ok) throw new WorkflowSourceError("workflow source", "authority-unverified");
+  const delegatedTrain = verdict.authority.train === true && verdict.authority.authenticatedDelegation === true;
+  if (!delegatedTrain || repo.toLowerCase() === HUB_RELEASE_REPO.toLowerCase()) return void 0;
+  const SAFE_CHECK = /^[A-Za-z0-9 -]{1,64}$/;
+  const res = await postJson("/train-workflow-source", { repo }, deps, "POST", { noRetry: true, timeoutMs: 3e4 });
+  if (res.status === 422) {
+    const body2 = res.body;
+    const check = typeof body2?.check === "string" && SAFE_CHECK.test(body2.check) ? body2.check : "read-failed";
+    throw new WorkflowSourceError("workflow source", check);
+  }
+  if (!res.ok || res.status !== 200) throw new WorkflowSourceError("workflow source", "source-endpoint-unavailable");
+  const body = res.body;
+  if (!body || !Array.isArray(body.files)) throw new WorkflowSourceError("workflow source", "invalid-response");
+  return body.files.map(runnerWorkflowFromContents);
+}
 async function actionsCanary(payload, deps) {
   return postJson("/actions-canary", payload, deps, "POST", { noRetry: true });
 }
@@ -24389,14 +24682,6 @@ async function archiveClosedDoneBoardItems(options, deps = {}) {
   return result;
 }
 
-// src/github-contents.ts
-function decodeGitHubContents(content) {
-  return Buffer.from(content, "base64").toString("utf8");
-}
-function encodeGitHubContents(content) {
-  return Buffer.from(content, "utf8").toString("base64");
-}
-
 // src/bootstrap-ruleset.ts
 var PRODUCT_RULESET_NAME = "mmi-product-required-checks";
 var PRODUCT_PENDING_RULESET_PREFIX = "mmi-product-required-checks-pending-";
@@ -25538,7 +25823,6 @@ var BLESSED_RUNNER_CHECK_POLICY_SHA = "67bb2012710a96d21be825c29a5d5c2b4b8001e2"
 var BLESSED_KIT_AGENT_FILES_SHA = "e976df208d891b215844386c1cac0f161946b6fa";
 var BLESSED_JEV_FAILURES_SHA = "d5278c6133318b33727483ddfdfddc8f841e3ef6";
 var BLESSED_VERDICT_RECEIPT_SHA = "";
-var BLESSED_RUNNER_CHOICE_SHA = "cf35db6cdf053746bc5b2cd75f241a7d93cf7f48";
 var BLESSED_RUNBOOK_GUARD_SHA = "e661e0aedc0e58b73c738bf6cdfeac65e5914584";
 var REMOTE_USE = /^mutmutco\/MMI-Hub\/\.github\/actions\/run-with-budget@(\S+)$/;
 var LOCAL_USE = "./.github/actions/run-with-budget";
@@ -25705,9 +25989,9 @@ function checkGateBudget(files, opts = {}) {
       if (!rawMs) {
         failures.push(`${path2}: run-with-budget step has no max-seconds input \u2014 the budget step guards nothing`);
       } else {
-        const literal2 = /^['"]?(\d+)['"]?$/.exec(rawMs);
-        const seconds = literal2 ? Number(literal2[1]) : NaN;
-        if (!literal2 || seconds < 1) {
+        const literal = /^['"]?(\d+)['"]?$/.exec(rawMs);
+        const seconds = literal ? Number(literal[1]) : NaN;
+        if (!literal || seconds < 1) {
           failures.push(`${path2}: max-seconds '${rawMs}' is not a literal positive integer`);
         } else if (seconds > MAX_SECONDS_CEILING) {
           failures.push(`${path2}: max-seconds ${seconds} exceeds the org ceiling ${MAX_SECONDS_CEILING} \u2014 a budget that generous guards nothing; measure the gate and set a real ceiling`);
@@ -27805,10 +28089,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.6.16",
-    tag: "v4.6.16",
-    commit: "4bd6f2423939",
-    npm: "@mutmutco/cli@4.6.16"
+    version: "4.6.18",
+    tag: "v4.6.18",
+    commit: "24b7f2455176",
+    npm: "@mutmutco/cli@4.6.18"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -27825,14 +28109,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.6.16"
+          v3Target: "v4.6.18"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.6.16 and redeploy the Hub Lambda from tag v4.6.16 (4bd6f2423939); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.6.16 (@mutmutco/cli@4.6.16, tag commit 4bd6f2423939 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.6.18 and redeploy the Hub Lambda from tag v4.6.18 (24b7f2455176); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.6.18 (@mutmutco/cli@4.6.18, tag commit 24b7f2455176 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -32387,290 +32671,100 @@ var import_node_fs31 = require("node:fs");
 var import_promises4 = require("node:fs/promises");
 var import_node_path28 = require("node:path");
 
-// ../shared/runner-fallback.ts
-var HOSTED_RUNNER_LABEL_RE = /\b(?:ubuntu|windows|macos)-(?:latest|\d[\w.-]*)\b/i;
-var STANDARD_HOSTED_LABEL_RE = /^(?:ubuntu-(?:latest|24\.04|22\.04|24\.04-arm|22\.04-arm)|windows-(?:latest|2025|2022|11-arm)|macos-(?:latest|\d+|\d+-intel))$/i;
-function classifyRunnerCost(selector) {
-  const raw = selector.replace(/\s+#.*$/gm, "").trim();
-  if (STANDARD_HOSTED_LABEL_RE.test(raw.replace(/^(['"])(.*)\1$/, "$2"))) return "standard-hosted";
-  if (HOSTED_RUNNER_LABEL_RE.test(raw)) return "hosted";
-  const json = /^\$\{\{\s*fromJSON\('([^']+)'\)\s*\}\}$/.exec(raw);
-  if (json) {
-    try {
-      const labels2 = JSON.parse(json[1]);
-      return Array.isArray(labels2) && labels2.length > 0 && labels2.every((l) => typeof l === "string" && /^[\w-]+$/.test(l)) && labels2.some((l) => l.toLowerCase() === "self-hosted") ? "self-hosted" : "unknown";
-    } catch {
-      return "unknown";
-    }
-  }
-  if (raw.includes("${{")) return "unknown";
-  const labels = /^\[[^\[\]]+\]$/.test(raw) ? raw.slice(1, -1).split(",").map((s) => s.trim().replace(/^(['"])(.*)\1$/, "$2")) : /^(?:-\s*[^\n]+\s*)+$/.test(raw) ? raw.split("\n").map((s) => s.trim().replace(/^-\s*/, "").replace(/^(['"])(.*)\1$/, "$2")) : [raw.replace(/^(['"])(.*)\1$/, "$2")];
-  return labels.every((l) => /^[\w-]+$/.test(l)) && labels.some((l) => l.toLowerCase() === "self-hosted") ? "self-hosted" : "unknown";
-}
-var STANDARD_HOSTED_ALLOWLIST = [
-  ["mutmutco/MMI-Hub", ".github/workflows/launcher-build.yml", "build", "windows-latest"],
-  ["mutmutco/Jerv-JervCode", ".github/workflows/release-archives.yml", "release-platform-arm64", "windows-11-arm"]
-];
-var HOSTED_SPILL_RE = /^\$\{\{\s*(?:matrix\.[\w-]+\s*==\s*'[\w-]+'\s*&&\s*(?:'(?<leg>[^']+)'|fromJSON\(needs\.(?<legDecider>[\w-]+)\.outputs\.(?<legOutput>\w+_runs_on)\s*\|\|\s*(?<legOwned>'[^']+')\))\s*\|\|\s*)?fromJSON\(needs\.(?<decider>[\w-]+)\.outputs\.(?<output>\w+_runs_on)\s*\|\|\s*(?<owned>'[^']+')\)\s*\}\}$/;
-var RUNNER_CHOICE_ACTION = "mutmutco/MMI-Hub/.github/actions/runner-choice";
-function runnerChoiceProduces(job, decider, output, source) {
-  const needs = job.needs;
-  if (!(needs === decider || Array.isArray(needs) && needs.includes(decider))) return false;
-  const producer = source.jobs.get(decider);
-  if (!record(producer) || !record(producer.outputs) || !Array.isArray(producer.steps)) return false;
-  const step = /^\$\{\{\s*steps\.([\w-]+)\.outputs\.runs-on\s*\}\}$/.exec(String(producer.outputs[output] ?? ""))?.[1];
-  const steps = producer.steps.filter((s) => record(s) && s.id === step);
-  if (steps.length !== 1 || !record(steps[0])) return false;
-  const { uses } = steps[0], inputs = steps[0].with ?? {};
-  const pinned = /^[0-9a-f]{40}$/.test(source.blessedSha) && uses === `${RUNNER_CHOICE_ACTION}@${source.blessedSha}`;
-  if (!pinned && !(source.repo === "mutmutco/MMI-Hub" && uses === "./.github/actions/runner-choice")) return false;
-  const hosted = record(inputs) ? inputs.hosted ?? "ubuntu-latest" : void 0;
-  return typeof hosted === "string" && STANDARD_HOSTED_LABEL_RE.test(hosted);
-}
-function standardHostedLabelFor(repo, path2, jobId) {
-  if (repo === "mutmutco/Jerv-Hub") return ["ubuntu-latest", "windows-latest", "macos-14"];
-  return STANDARD_HOSTED_ALLOWLIST.find(([r, p, j]) => r === repo && p === path2 && j === jobId)?.[3];
-}
-var record = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
-function classifyJobRunnerCost(job, allowance2, source) {
-  if (!record(job) || !Object.hasOwn(job, "runs-on")) return "unknown";
-  const selector = job["runs-on"];
-  const raw = typeof selector === "string" ? selector.trim() : Array.isArray(selector) && selector.length && selector.every((label) => typeof label === "string") ? JSON.stringify(selector) : "";
-  if (!raw) return "unknown";
-  const approved = (value) => Array.isArray(allowance2) && allowance2.includes(value);
-  if (approved(raw) || allowance2 === "windows-11-arm" && raw === allowance2) return "standard-hosted";
-  const fallback = /^\$\{\{\s*vars\.MMI_RUNNER_FALLBACK\s*==\s*'hosted'\s*&&\s*'([^']+)'\s*\|\|\s*(fromJSON\('[^']+'\))\s*\}\}$/.exec(raw);
-  if (fallback && approved(fallback[1]) && classifyRunnerCost("${{ " + fallback[2] + " }}") === "self-hosted") return "standard-hosted";
-  const layerZero = /^\$\{\{\s*vars\.[\w-]+\s*==\s*'off'\s*&&\s*(fromJSON\('[^']+'\))\s*\|\|\s*'([^']+)'\s*\}\}$/.exec(raw);
-  if (layerZero && classifyRunnerCost("${{ " + layerZero[1] + " }}") === "self-hosted" && STANDARD_HOSTED_LABEL_RE.test(layerZero[2])) return "standard-hosted";
-  const spill = HOSTED_SPILL_RE.exec(raw)?.groups;
-  const legOk = (g) => g.legDecider ? classifyRunnerCost(`\${{ fromJSON(${g.legOwned}) }}`) === "self-hosted" && Boolean(source) && runnerChoiceProduces(job, g.legDecider, g.legOutput, source) : !g.leg || STANDARD_HOSTED_LABEL_RE.test(g.leg);
-  if (spill && source && legOk(spill) && classifyRunnerCost(`\${{ fromJSON(${spill.owned}) }}`) === "self-hosted" && runnerChoiceProduces(job, spill.decider, spill.output, source)) return "standard-hosted";
-  const direct = classifyRunnerCost(raw);
-  const matrix = /^\$\{\{\s*matrix\.([\w-]+)(?:\.([\w-]+))?\s*\}\}$/.exec(raw);
-  if (!matrix || direct === "hosted") return direct;
-  if (!Object.hasOwn(job, "strategy") || !record(job.strategy) || !Object.hasOwn(job.strategy, "matrix") || !record(job.strategy.matrix)) return "unknown";
-  const axes = job.strategy.matrix;
-  if (Object.hasOwn(axes, "exclude")) return "unknown";
-  let alternatives;
-  if (Object.hasOwn(axes, "include")) {
-    if (Object.keys(axes).length !== 1 || !Array.isArray(axes.include) || !axes.include.length) return "unknown";
-    alternatives = axes.include.map((row) => record(row) && Object.hasOwn(row, matrix[1]) ? row[matrix[1]] : void 0);
-  } else {
-    const axis = axes[matrix[1]];
-    if (!Object.hasOwn(axes, matrix[1]) || !Array.isArray(axis) || !axis.length) return "unknown";
-    alternatives = axis;
-  }
-  if (matrix[2]) alternatives = alternatives.map((row) => record(row) && Object.hasOwn(row, matrix[2]) ? row[matrix[2]] : void 0);
-  const costs = alternatives.map((value) => {
-    if (typeof value === "string") {
-      if (value.includes("${{")) return "unknown";
-      if (approved(value) || !matrix[2] && allowance2 === "windows-latest" && value === allowance2) return "standard-hosted";
-      return classifyRunnerCost(value);
-    }
-    if (!Array.isArray(value) || !value.length || !value.every((label) => typeof label === "string" && /^[\w-]+$/.test(label))) return "unknown";
-    return classifyRunnerCost(JSON.stringify(value));
-  });
-  if (costs.includes("hosted")) return "hosted";
-  if (costs.includes("unknown")) return "unknown";
-  return costs.includes("standard-hosted") ? "standard-hosted" : "self-hosted";
-}
-
 // src/workflow-runner-yaml.ts
 var import_yaml = __toESM(require_dist(), 1);
-var literal = (node) => !(0, import_yaml.isAlias)(node) && !((0, import_yaml.isNode)(node) && (node.tag || "anchor" in node && node.anchor));
-var literalMap = (node) => (0, import_yaml.isMap)(node) && literal(node) && node.items.every(({ key }) => (0, import_yaml.isScalar)(key) && literal(key) && typeof key.value === "string" && key.value !== "<<");
-function parseRunnerJobs(source) {
-  if (!source || source.length > 15e5) return void 0;
-  try {
-    const doc = (0, import_yaml.parseDocument)(source, { uniqueKeys: true, stringKeys: true, merge: false, prettyErrors: false });
-    if (doc.errors.length || doc.warnings.length) return void 0;
-    let invalid = false;
-    let nodes = 0;
-    (0, import_yaml.visit)(doc, (_key, _node, path2) => {
-      if (++nodes > 1e5 || path2.length > 64) {
-        invalid = true;
-        return import_yaml.visit.BREAK;
-      }
-    });
-    if (invalid || !literalMap(doc.contents)) return void 0;
-    const jobs = doc.contents.get("jobs", true);
-    if (!literalMap(jobs) || !jobs.items.length) return void 0;
-    const result = /* @__PURE__ */ new Map();
-    for (const { key, value: job } of jobs.items) {
-      if (!(0, import_yaml.isScalar)(key) || typeof key.value !== "string" || !literalMap(job)) return void 0;
-      const projected = /* @__PURE__ */ Object.create(null);
-      for (const field of ["runs-on", "uses", "strategy", "needs", "outputs", "steps"]) {
-        if (!job.has(field)) continue;
-        const optional = field === "needs" || field === "outputs" || field === "steps";
-        const value = job.get(field, true);
-        if (value !== null && !(0, import_yaml.isNode)(value)) {
-          if (optional) continue;
-          return void 0;
+
+// ../shared/workflow-runner-yaml-core.ts
+function createParseRunnerJobs(ops) {
+  const literal = (node) => !ops.isAlias(node) && !(ops.isNode(node) && (node.tag || "anchor" in node && node.anchor));
+  const literalMap = (node) => ops.isMap(node) && literal(node) && node.items.every(({ key }) => ops.isScalar(key) && literal(key) && typeof key.value === "string" && key.value !== "<<");
+  return (source) => {
+    if (!source || source.length > 15e5) return void 0;
+    try {
+      const doc = ops.parseDocument(source, { uniqueKeys: true, stringKeys: true, merge: false, prettyErrors: false });
+      if (doc.errors.length || doc.warnings.length) return void 0;
+      let invalid = false;
+      let nodes = 0;
+      ops.visit(doc, (_key, _node, path2) => {
+        if (++nodes > 1e5 || path2.length > 64) {
+          invalid = true;
+          return ops.BREAK;
         }
-        (0, import_yaml.visit)(value, (_key, node) => {
-          if (!literal(node) || (0, import_yaml.isPair)(node) && (0, import_yaml.isScalar)(node.key) && node.key.value === "<<") {
-            invalid = true;
-            return import_yaml.visit.BREAK;
+      });
+      if (invalid || !literalMap(doc.contents)) return void 0;
+      const jobs = doc.contents.get("jobs", true);
+      if (!literalMap(jobs) || !jobs.items.length) return void 0;
+      const result = /* @__PURE__ */ new Map();
+      for (const { key, value: job } of jobs.items) {
+        if (!ops.isScalar(key) || typeof key.value !== "string" || !literalMap(job)) return void 0;
+        const projected = /* @__PURE__ */ Object.create(null);
+        for (const field of ["runs-on", "uses", "strategy", "needs", "outputs", "steps"]) {
+          if (!job.has(field)) continue;
+          const optional = field === "needs" || field === "outputs" || field === "steps";
+          const value = job.get(field, true);
+          if (value !== null && !ops.isNode(value)) {
+            if (optional) continue;
+            return void 0;
           }
-        });
-        if (invalid && optional) {
-          invalid = false;
-          continue;
+          ops.visit(value, (_key, node) => {
+            if (!literal(node) || ops.isPair(node) && ops.isScalar(node.key) && node.key.value === "<<") {
+              invalid = true;
+              return ops.BREAK;
+            }
+          });
+          if (invalid && optional) {
+            invalid = false;
+            continue;
+          }
+          if (invalid) return void 0;
+          projected[field] = value === null ? null : value.toJS(doc, { maxAliasCount: 0 });
         }
-        if (invalid) return void 0;
-        projected[field] = value === null ? null : value.toJS(doc, { maxAliasCount: 0 });
+        result.set(key.value, projected);
       }
-      result.set(key.value, projected);
+      return result;
+    } catch {
+      return void 0;
     }
-    return result;
-  } catch {
-    return void 0;
-  }
+  };
 }
 
+// src/workflow-runner-yaml.ts
+var parseRunnerJobs = createParseRunnerJobs({ isAlias: import_yaml.isAlias, isMap: import_yaml.isMap, isNode: import_yaml.isNode, isPair: import_yaml.isPair, isScalar: import_yaml.isScalar, parseDocument: import_yaml.parseDocument, visit: import_yaml.visit, BREAK: import_yaml.visit.BREAK });
+
 // src/workflow-runner-source.ts
-var WORKFLOW_PATH = /^\.github\/workflows\/[\w.-]+\.ya?ml$/;
-var REPO = /^[A-Za-z0-9][A-Za-z0-9-]*\/[A-Za-z0-9_][\w.-]*$/;
-var REF = /^[\w./-]+$/;
-var MAX_FILES = 64;
-var MAX_DEPTH = 8;
-var WorkflowSourceError = class extends Error {
-  constructor(location, category) {
-    super(`${location}: ${category}`);
-  }
-};
-function safeReadCategory(error) {
-  const e = error;
-  if (e?.rateLimited === true) return "rate-limited";
-  if (typeof e?.status === "number" && Number.isInteger(e.status) && e.status >= 400 && e.status <= 599) return `HTTP ${e.status}`;
-  if (e?.name === "TimeoutError" || e?.name === "AbortError" || e?.code === "ETIMEDOUT") return "read-timeout";
-  if (e?.code === "ENOENT") return "reader-unavailable";
-  if (e?.code === "ENOBUFS" || e?.code === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER") return "reader-output-limit";
-  if (error instanceof SyntaxError) return "invalid-json";
-  return "read-failed";
-}
-function locationOf(file) {
-  return `${file.repo}/${file.path}${file.ref ? `@${file.ref}` : ""}`;
-}
-function contentsPath(file) {
-  if (!REPO.test(file.repo) || !(WORKFLOW_PATH.test(file.path) || file.path === ".github/workflows") || file.ref !== void 0 && !REF.test(file.ref)) {
-    throw new WorkflowSourceError("workflow source", "invalid-location");
-  }
-  return `repos/${file.repo}/contents/${file.path}${file.ref ? `?ref=${encodeURIComponent(file.ref)}` : ""}`;
-}
-async function readSource(read, file) {
-  const endpoint = contentsPath(file);
-  try {
-    return await read(endpoint);
-  } catch (e) {
-    throw new WorkflowSourceError(locationOf(file), safeReadCategory(e));
-  }
-}
-async function readBody(read, file) {
-  const value = await readSource(read, file);
-  if (!value || value.encoding !== "base64" || typeof value.content !== "string" || !value.content.trim() || value.content.length > 15e5 || !/^[A-Za-z0-9+/=\r\n]+$/.test(value.content)) {
-    throw new WorkflowSourceError(locationOf(file), "invalid-content");
-  }
-  return { ...file, body: decodeGitHubContents(value.content) };
-}
-function resolveCallee(caller, uses) {
-  if (uses.startsWith("./") && WORKFLOW_PATH.test(uses.slice(2))) return { repo: caller.repo, path: uses.slice(2), ref: caller.ref };
-  const remote = /^([\w.-]+\/[\w.-]+)\/(\.github\/workflows\/[\w.-]+\.ya?ml)@([\w./-]+)$/.exec(uses);
-  return remote ? { repo: remote[1], path: remote[2], ref: remote[3] } : void 0;
-}
-async function readRunnerWorkflowClosure(read, repo, ref, roots) {
-  let files;
-  if (roots) {
-    files = roots.map((file) => ({ ...file, repo, ref }));
-  } else {
-    const listing = await readSource(read, { repo, ref, path: ".github/workflows" });
-    if (!Array.isArray(listing)) throw new WorkflowSourceError(`${repo}/.github/workflows`, "invalid-listing");
-    const paths = listing.filter((f) => f?.type === "file" && /\.ya?ml$/i.test(f?.path ?? "")).map((f) => f.path);
-    if (!paths.length || paths.length > MAX_FILES) throw new WorkflowSourceError(`${repo}/.github/workflows`, "empty-or-oversized-listing");
-    files = [];
-    for (const path2 of paths) files.push(await readBody(read, { repo, ref, path: path2 }));
-  }
-  if (!files.length || files.length > MAX_FILES) throw new WorkflowSourceError("workflow source", "empty-or-oversized-listing");
-  for (const file of files) contentsPath(file);
-  const byLocation = new Map(files.map((file) => [locationOf(file), file]));
-  const active = /* @__PURE__ */ new Set();
-  const completed = /* @__PURE__ */ new Set();
-  async function visit2(file, depth) {
-    const key = locationOf(file);
-    if (active.has(key)) throw new WorkflowSourceError(key, "reusable-cycle");
-    if (depth > MAX_DEPTH) throw new WorkflowSourceError(key, "reusable-depth-limit");
-    if (completed.has(key)) return;
-    active.add(key);
-    const jobs = parseRunnerJobs(file.body);
-    if (!jobs) throw new WorkflowSourceError(key, "invalid-workflow-yaml");
-    for (const job of jobs.values()) {
-      if (!Object.hasOwn(job, "uses")) continue;
-      const uses = job.uses;
-      if (typeof uses !== "string" || Object.hasOwn(job, "runs-on")) throw new WorkflowSourceError(key, "unresolved-reusable-ref");
-      const target = resolveCallee(file, uses);
-      if (!target) throw new WorkflowSourceError(key, "unresolved-reusable-ref");
-      const targetKey = locationOf(target);
-      let child2 = byLocation.get(targetKey);
-      if (!child2) {
-        if (byLocation.size >= MAX_FILES) throw new WorkflowSourceError(key, "workflow-read-limit");
-        child2 = await readBody(read, target);
-        byLocation.set(targetKey, child2);
-      }
-      await visit2(child2, depth + 1);
-    }
-    active.delete(key);
-    completed.add(key);
-  }
-  for (const file of files) await visit2(file, 0);
-  return [...byLocation.values()];
+function readRunnerWorkflowClosure2(read, repo, ref, roots, bounds) {
+  return readRunnerWorkflowClosure(parseRunnerJobs, read, repo, ref, roots, bounds);
 }
-function classifyRunnerWorkflows(files) {
-  const known = new Map(files.map((file) => [locationOf(file), file]));
-  const parsed = new Map(files.map((file) => [locationOf(file), parseRunnerJobs(file.body)]));
-  const resolvedCache = /* @__PURE__ */ new Map();
-  function resolved(file, active) {
-    const key = locationOf(file);
-    if (active.has(key)) return false;
-    if (resolvedCache.has(key)) return resolvedCache.get(key);
-    const next = new Set(active).add(key);
-    const jobs = parsed.get(key);
-    const result = Boolean(jobs && [...jobs.values()].every((job) => {
-      if (!Object.hasOwn(job, "uses")) return true;
-      const uses = job.uses;
-      if (typeof uses !== "string" || Object.hasOwn(job, "runs-on")) return false;
-      const target = resolveCallee(file, uses);
-      const child2 = target && known.get(locationOf(target));
-      return Boolean(child2 && resolved(child2, next));
-    }));
-    resolvedCache.set(key, result);
-    return result;
-  }
-  return files.flatMap((file) => {
-    const jobs = parsed.get(locationOf(file));
-    if (!jobs) return [{ repo: file.repo, path: file.path, job: "(invalid YAML)", cost: "unknown", callee: false }];
-    return [...jobs].flatMap(([id, job]) => {
-      const hasCallee = Object.hasOwn(job, "uses");
-      const uses = hasCallee && typeof job.uses === "string" && !Object.hasOwn(job, "runs-on") ? job.uses : void 0;
-      const target = uses && resolveCallee(file, uses);
-      if (target && known.has(locationOf(target)) && resolved(file, /* @__PURE__ */ new Set())) return [];
-      const cost = hasCallee ? "unknown" : classifyJobRunnerCost(job, standardHostedLabelFor(file.repo, file.path, id), { repo: file.repo, jobs, blessedSha: BLESSED_RUNNER_CHOICE_SHA });
-      return [{ repo: file.repo, path: file.path, job: id, cost, callee: hasCallee }];
-    });
-  });
+function classifyRunnerWorkflows2(files) {
+  return classifyRunnerWorkflows(parseRunnerJobs, files);
 }
 
 // src/actions-billing-preflight.ts
 async function assertActionsJobsCanStart(deps, targetRepo2) {
-  const read = deps.readWorkflowContents ?? (async (path2) => JSON.parse(await deps.run("gh", ["api", path2])));
   let files;
   try {
-    files = await readRunnerWorkflowClosure(read, targetRepo2);
+    const served = await deps.readTrainWorkflowClosure?.(targetRepo2);
+    if (served && !served.some((f) => f.repo.toLowerCase() === targetRepo2.toLowerCase())) {
+      throw new WorkflowSourceError("workflow source", "invalid-response");
+    }
+    if (served) {
+      files = served;
+    } else {
+      const read = deps.readWorkflowContents ?? (async (path2) => JSON.parse(await deps.run("gh", ["api", path2])));
+      try {
+        files = await readRunnerWorkflowClosure2(read, targetRepo2);
+      } catch (e) {
+        const detail = e instanceof WorkflowSourceError ? e.message : "workflow source: read-failed";
+        throw new Error("release refused (#8911): workflow source inventory unreadable; " + detail + ". Resolve this source read before tagging.");
+      }
+    }
   } catch (e) {
-    const detail = e instanceof WorkflowSourceError ? e.message : "workflow source: read-failed";
-    throw new Error("release refused (#8911): workflow source inventory unreadable; " + detail + ". Resolve this source read before tagging.");
+    if (e instanceof WorkflowSourceError) {
+      throw new Error("release refused (#8911): workflow source inventory unreadable; " + e.message + ". Resolve this source read before tagging.");
+    }
+    throw e;
   }
-  const unresolved = classifyRunnerWorkflows(files).filter((f) => f.cost !== "self-hosted" && f.cost !== "standard-hosted");
+  const unresolved = classifyRunnerWorkflows2(files).filter((f) => f.cost !== "self-hosted" && f.cost !== "standard-hosted");
   if (unresolved.length) throw new Error("release refused (#8911): paid or unresolved runner path(s): " + unresolved.map((f) => f.repo + "/" + f.path + ":" + f.job).join(", ") + ". Standard included GitHub-hosted labels are allowed (#8977, Jerv-Hub#2459); only larger/paid runners and unresolved selectors/callees are refused. Resolve them before tagging; no paid capacity probe is permitted.");
   process.stderr.write("actions preflight: " + targetRepo2 + " source selectors are self-hosted or standard included GitHub-hosted (#8977); no canary dispatch; the org spending limit guards over-allowance spend (unprovable from source); access/isolation/execution unproven (#8958)\n");
 }
@@ -35904,18 +35998,23 @@ async function runTrainDoctor(input) {
     }
     add(healedBlock ? { code: "scratch-untracked", severity: "healed", source: "local", title: `wrote the org-managed .gitignore block for ${liveScratch.join(", ")} (#5409)`, remedy: "nothing \u2014 the live-session dirs are ignored from now on" } : { code: "scratch-untracked", severity: "warning", source: "local", title: `untracked live-session scratch: ${liveScratch.join(", ")}`, remedy: "run `mmi-cli devops train doctor --heal` (or `mmi-cli doctor --apply`) to write the org-managed .gitignore block (#5409); the train gate already exempts these (#5397)" });
   }
-  const blocking = porcelainBlockingPaths(porcelain);
-  const modifiedOnly = new Set(porcelainRows.filter((l) => l.startsWith(" M ")).map((l) => l.slice(3)));
+  const blockingEntries = porcelainBlockingEntries(porcelain);
+  const modifiedOnly = new Set(blockingEntries.filter((e) => e.status === " M").map((e) => e.path));
   const churn = [];
-  for (const path2 of blocking.filter((p) => modifiedOnly.has(p))) {
+  for (const path2 of blockingEntries.map((e) => e.path).filter((p) => modifiedOnly.has(p))) {
     try {
       if (!clean2(await train.run("git", ["diff", "HEAD", "--numstat", "--", path2]))) churn.push(path2);
     } catch {
     }
   }
-  const dirty = blocking.filter((p) => !churn.includes(p));
-  if (dirty.length) {
-    add({ code: "tree-dirty-work", severity: "blocker", source: "local", title: `working tree carries tracked changes \u2014 blocking: ${dirty.join(", ")}`, remedy: "commit or stash the work, then rerun; the train refuses a dirty tree before any mutation" });
+  const dirty = blockingEntries.filter((e) => !churn.includes(e.path));
+  const dirtyTracked = dirty.filter((e) => e.status !== "??");
+  const dirtyUntracked = dirty.filter((e) => e.status === "??");
+  if (dirtyTracked.length) {
+    add({ code: "tree-dirty-work", severity: "blocker", source: "local", title: `working tree carries tracked changes \u2014 blocking: ${dirtyTracked.map((e) => e.path).join(", ")}`, remedy: "commit or stash the work, then rerun; the train refuses a dirty tree before any mutation" });
+  }
+  if (dirtyUntracked.length) {
+    add({ code: "tree-dirty-work", severity: "blocker", source: "local", title: `working tree carries untracked content \u2014 blocking: ${dirtyUntracked.map((e) => e.path).join(", ")}`, remedy: "inspect ownership first \u2014 another session's content stays untouched; commit intended new source through its owning lane; gitignore or move only verified own scratch to the gitignored repo-root tmp/, then rerun" });
   }
   if (churn.length) {
     const restored = [];
@@ -39318,7 +39417,7 @@ var SHARED_ACTION_PINS = [
   { path: "npm-publish", floor: NPM_PUBLISH_SAFE_FLOOR_SHA }
 ];
 function auditRunnerFallbacks(repo, files, closure) {
-  return classifyRunnerWorkflows(closure ?? files.map((file) => ({ ...file, repo }))).map((f) => ({
+  return classifyRunnerWorkflows2(closure ?? files.map((file) => ({ ...file, repo }))).map((f) => ({
     ok: f.cost === "self-hosted" || f.cost === "standard-hosted",
     label: f.cost === "standard-hosted" ? `runner uses approved standard-hosted source (#8912/#8958/#8977): ${f.repo}/${f.path}:${f.job}` : `runner is self-hosted only (#8911): ${f.repo}/${f.path}:${f.job}`,
     detail: f.callee ? "unknown callee runner policy; source must be read at its referenced revision" : f.cost === "hosted" ? "larger/paid GitHub-hosted runner is forbidden; only standard included GitHub-hosted labels are allowed (#8977, Jerv-Hub#2459)" : f.cost === "unknown" ? "unknown runner selector; source unresolved" : f.cost === "standard-hosted" ? "standard GitHub-hosted labels within included Enterprise minutes only (#8977, Jerv-Hub#2459); the org spending limit guards over-allowance spend (unprovable from source); runner access and isolation not established" : "self-hosted selection only; runner access and isolation not established",
@@ -40381,7 +40480,7 @@ async function auditRepoCi(repo, callerDeps) {
     const workflows = await getBranchWorkflows();
     if (workflows) {
       try {
-        const closure = workflows.length ? await readRunnerWorkflowClosure((path2) => callerDeps.client.rest("GET", path2), repo, baseBranch, workflows) : [];
+        const closure = workflows.length ? await readRunnerWorkflowClosure2((path2) => callerDeps.client.rest("GET", path2), repo, baseBranch, workflows) : [];
         checks.push(...auditRunnerFallbacks(repo, workflows, closure));
       } catch (e) {
         checks.push({ ok: false, label: "runner workflow source is readable (#8958)", detail: e instanceof WorkflowSourceError ? e.message : "workflow source: read-failed" });
@@ -47165,7 +47264,7 @@ function sshRemoteCommand(remoteCommand) {
 function shellSingleQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
-var SSH_RECIPE_AGENT_NOTE = "# agent callers: this is multi-line, so running it inline is denied (#1473/#2125).\n# Use `mmi-cli devops runtime box get <name> --ssh --script <path>` to write it to a file, then `bash <path>`.";
+var SSH_RECIPE_AGENT_NOTE = '# agent callers: this is multi-line, so running it inline is denied (#1473/#2125).\n# Use `mmi-cli devops runtime box get <name> --ssh --script <path>` to write it to a file, then `bash <path>`.\n# For a multi-line remote body add --stdin (or --body <file>): the recipe then runs `sh -s` on the box,\n# and you stream the body over stdin \u2014 `bash "<path>" < "<body-file>"` \u2014 with no remote re-quoting (#9750).';
 function sshRecipeScript(box, remoteCommand) {
   return `#!/usr/bin/env bash
 ${formatSshRecipe(box, remoteCommand)}
@@ -47249,8 +47348,16 @@ function registerBoxCommands(program3) {
       await failGraceful(e.message);
     }
   });
-  box.command("get <name> [command...]").description("one box by name \u2014 its address and ssh key path; --ssh prints a ready-to-run connect recipe").option("--json", "machine-readable output").option("--ssh", "print a copy-paste ssh recipe (runs under the keyless vault wrapper and loads the key into an ssh-agent; the key is never written to a file or echoed)").option("--script <path>", "with --ssh: write the recipe to <path> and print the one line to run \u2014 the runnable form for agent callers, whose transport denies a multi-line inline body (#3385)").action(async (name, command, o) => {
+  box.command("get <name> [command...]").description("one box by name \u2014 its address and ssh key path; --ssh prints a ready-to-run connect recipe").option("--json", "machine-readable output").option("--ssh", "print a copy-paste ssh recipe (runs under the keyless vault wrapper and loads the key into an ssh-agent; the key is never written to a file or echoed)").option("--script <path>", "with --ssh: write the recipe to <path> and print the one line to run \u2014 the runnable form for agent callers, whose transport denies a multi-line inline body (#3385)").option("--stdin", "with --ssh --script: write the recipe with remote command sh -s so a multi-line script can be piped or redirected on stdin without remote shell re-quoting (#9750)").option("--body <file>", 'with --ssh --script: same as --stdin, and name <file> in the printed run line: bash "<script>" < "<file>" (#9750)').action(async (name, command, o) => {
     try {
+      if ((o.stdin || o.body) && (!o.ssh || !o.script)) {
+        await failGraceful("runtime box get: --stdin/--body requires --ssh --script <path> (it writes an sh -s recipe that reads the remote body from stdin)");
+        return;
+      }
+      if ((o.stdin || o.body) && command && command.length) {
+        await failGraceful("runtime box get: cannot combine --stdin/--body with trailing [command...] arguments \u2014 put the commands in the stdin body file instead");
+        return;
+      }
       const { boxes, incomplete } = await fetchInventory();
       const result = lookupBox(name, boxes, incomplete);
       if (result.kind === "unknown") {
@@ -47269,16 +47376,19 @@ function registerBoxCommands(program3) {
         await failGraceful("runtime box get: --script requires --ssh (it writes the ssh connect recipe)");
         return;
       }
-      const remote = command && command.length ? command.join(" ") : void 0;
+      const useStdin = Boolean(o.stdin || o.body);
+      const remote = useStdin ? "sh -s" : command && command.length ? command.join(" ") : void 0;
+      const stdinSource = o.body ? `"${o.body}"` : "<body.sh>";
       const wroteScript = o.ssh && o.script ? o.script : null;
+      const runLine = wroteScript ? useStdin ? `bash "${wroteScript}" < ${stdinSource}` : `bash "${wroteScript}"` : void 0;
       if (wroteScript) (0, import_node_fs37.writeFileSync)(wroteScript, sshRecipeScript(found, remote), "utf8");
       if (o.json) {
         console.log(JSON.stringify({
           box: found,
           incomplete,
-          ...wroteScript ? { script: { path: wroteScript, run: `bash "${wroteScript}"` } } : {}
+          ...wroteScript ? { script: { path: wroteScript, run: runLine, ...useStdin ? { stdin: o.body ?? true } : {} } } : {}
         }, null, 2));
-      } else if (wroteScript) console.log(`wrote ${wroteScript} \u2014 run: bash "${wroteScript}"`);
+      } else if (wroteScript) console.log(`wrote ${wroteScript} \u2014 run: ${runLine}`);
       else if (o.ssh) console.log(`${formatSshRecipe(found, remote)}
 ${SSH_RECIPE_AGENT_NOTE}`);
       else console.log(formatBoxTable([found]));
@@ -54211,22 +54321,6 @@ async function deleteMergedRemoteBranch(options) {
 // src/command-register-train-operations.ts
 init_github_client();
 
-// src/hub-release-ci-authority.ts
-var HUB_RELEASE_REPO = "mutmutco/MMI-Hub";
-var HUB_RELEASE_WORKFLOW = ".github/workflows/hub-release.yml";
-var HUB_RELEASE_REF = "refs/heads/development";
-var WORKFLOW_REF = `${HUB_RELEASE_REPO}/${HUB_RELEASE_WORKFLOW}@${HUB_RELEASE_REF}`;
-var ID = /^[1-9][0-9]*$/;
-function hubReleaseCiRun(env) {
-  if (env.MMI_HUB_RELEASE_CI !== "1" || env.GITHUB_ACTIONS !== "true") return null;
-  if (env.GITHUB_REPOSITORY !== HUB_RELEASE_REPO || env.GITHUB_EVENT_NAME !== "workflow_dispatch") return null;
-  if (env.GITHUB_WORKFLOW_REF !== WORKFLOW_REF || env.GITHUB_REF !== HUB_RELEASE_REF) return null;
-  const runId = env.GITHUB_RUN_ID ?? "";
-  const runAttempt2 = env.GITHUB_RUN_ATTEMPT ?? "";
-  if (!ID.test(runId) || !ID.test(runAttempt2)) return null;
-  return { runId: Number(runId), runAttempt: Number(runAttempt2) };
-}
-
 // src/release-custody.ts
 var import_node_crypto18 = require("node:crypto");
 var import_node_fs41 = require("node:fs");
@@ -62659,6 +62753,9 @@ function trainApplyDeps() {
   return withHubReleaseCustody({
     // #8958: same authenticated bounded read boundary as devops api; no raw gh contents subprocess.
     readWorkflowContents: (path2) => defaultGitHubClient().rest("GET", path2, { timeoutMs: GH_TRAIN_TIMEOUT_MS }),
+    // #9755: delegated Jerv trains require the Hub's sourceSha-pinned closure and fail closed on errors.
+    // Humans and the Hub binding retain the caller-side read above; no producer token is widened.
+    readTrainWorkflowClosure: async (repo) => trainWorkflowSourceClosure(repo, registryClientDeps(await loadConfig())),
     // #7027: every mutating train verb holds this checkout's train writer lock for its whole run.
     trainWriter: (verb, cwd) => acquireTrainWriterLock(cwd, `mmi-cli devops ${verb}`),
     run: async (file, args) => {
@@ -68400,6 +68497,22 @@ function stageAllowlistConfig(project2) {
   const stages = cfg.stages.filter((s) => ALLOWLIST_STAGES.includes(s));
   return stages.length > 0 ? { key: cfg.key, stages } : null;
 }
+function resolveStageAllowlistTarget(repo, projects) {
+  if (!projects) return { kind: "registry-unreadable", exitCode: 1, message: "org access sync: could not read the org project registry \u2014 nothing written" };
+  const project2 = projects.find((p) => (p.repos ?? []).some((r) => r.toLowerCase() === repo.toLowerCase())) ?? null;
+  if (!project2) return { kind: "unregistered", exitCode: 1, message: `org access sync: ${repo} is not in the org project registry \u2014 nothing written` };
+  if (project2.stageAllowlist == null) {
+    return {
+      kind: "no-opt-in",
+      exitCode: 0,
+      json: { repo, optIn: null, stages: [], skipped: "no-stageAllowlist" },
+      message: `org access sync: ${repo} has no stageAllowlist opt-in \u2014 nothing to rebuild (set it with \`mmi-cli oracle org project set ${repo} --var 'stageAllowlist={"key":"<KEY>","stages":["dev"]}'\`)`
+    };
+  }
+  const config = stageAllowlistConfig(project2);
+  if (!config) return { kind: "malformed", exitCode: 1, message: `org access sync: ${repo} has a malformed stageAllowlist in the registry \u2014 set it with \`mmi-cli oracle org project set ${repo} --var 'stageAllowlist={"key":"<KEY>","stages":["dev"]}'\`` };
+  return { kind: "sync", exitCode: 0, config };
+}
 function developerAdminLogins(collaborators) {
   const logins = /* @__PURE__ */ new Set();
   for (const c of collaborators) {
@@ -72215,11 +72328,13 @@ access.command("sync [repo]").description("rebuild the stage allowlist (e.g. MM-
   if (!repo) return fail("org access sync: pass <owner/repo> or run inside a repo checkout");
   const cfg = await loadConfig();
   if (!cfg.sagaApiUrl) return fail("org access sync: Hub API URL not configured");
-  const projects = await fetchProjectsList(registryClientDeps(cfg));
-  if (!projects) return failGraceful("org access sync: could not read the org project registry \u2014 nothing written");
-  const project2 = projects.find((p) => (p.repos ?? []).some((r) => r.toLowerCase() === repo.toLowerCase())) ?? null;
-  const config = stageAllowlistConfig(project2);
-  if (!config) return failGraceful(`org access sync: ${repo} has no stageAllowlist opt-in \u2014 set it with \`mmi-cli oracle org project set ${repo} --var 'stageAllowlist={"key":"<KEY>","stages":["dev"]}'\``);
+  const target = resolveStageAllowlistTarget(repo, await fetchProjectsList(registryClientDeps(cfg)));
+  if (target.kind === "no-opt-in") {
+    console.log(o.json ? JSON.stringify(target.json, null, 2) : target.message);
+    return;
+  }
+  if (target.kind !== "sync") return failGraceful(target.message);
+  const config = target.config;
   const secretsDeps = makeSecretsDeps(cfg);
   const client = defaultGitHubClient();
   const result = await syncStageAllowlist({

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.6.16",
+  "version": "4.6.18",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.6.16",
+  "version": "4.6.18",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",