@mutmutco/cli 2.36.0 → 2.38.0

package/README.md

@@ -55,6 +55,7 @@ mmi-cli doctor --json
 - `mmi-cli rcand`, `release`, and `hotfix` render guarded train plans; product trains trigger the Hub's central tenant deployer, while MMI-Hub releases directly from `development` to `main`.
 - `mmi-cli bootstrap`, `bootstrap verify`, and `bootstrap apply` plan, audit, and seed repo onboarding.
 - `mmi-cli access audit` checks collaborator roles and train-branch allowlists.
+- `mmi-cli throttle report` reads `.mmi/throttle/trace.jsonl` and prints gate denial stats from the org Scrooge v2 Read/Shell gates (Claude Code + Cursor IDE) — files ≥50 KB require an explicit positive Read `limit`; output separates `denied (block)` vs `would-block (observe)`.
 - `mmi-cli doctor` checks GitHub auth, repo config, CLI availability, plugin install/config/version state, and stale MMI plugin cache dirs, auto-repairing the safe gaps.
 
 Hub API calls do not send the raw GitHub token on every request. The CLI exchanges it at `/auth/session`

package/dist/index.cjs

@@ -60,26 +60,61 @@ var init_client_version = __esm({
 function setInjectedStdin(payload) {
   injectedStdin = payload;
 }
-function stdinHasPipedInput(statFd = () => (0, import_node_fs2.fstatSync)(0)) {
+function stdinHasPipedInput(statFd = () => (0, import_node_fs2.fstatSync)(0), getIsTTY = () => process.stdin.isTTY) {
   try {
     const stat = statFd();
-    return stat.isFIFO() || stat.isFile();
+    if (stat.isFIFO() || stat.isFile()) return true;
+    if (stat.isCharacterDevice()) return false;
+    if (stat.isSocket()) return false;
+    if (getIsTTY() === true) return false;
+    return true;
   } catch {
     return false;
   }
 }
-async function readStdin() {
+async function readStdin(opts = {}) {
   if (injectedStdin !== void 0) return injectedStdin;
   if (!stdinHasPipedInput()) return "";
+  const maxBytes = opts.maxBytes ?? STDIN_MAX_BYTES;
+  const timeoutMs = opts.timeoutMs ?? STDIN_DRAIN_TIMEOUT_MS;
   const chunks = [];
-  for await (const chunk of process.stdin) chunks.push(chunk);
+  let total = 0;
+  const drain = (async () => {
+    for await (const chunk of process.stdin) {
+      const buf = chunk;
+      const room = maxBytes - total;
+      if (buf.length >= room) {
+        chunks.push(buf.subarray(0, room));
+        total = maxBytes;
+        break;
+      }
+      chunks.push(buf);
+      total += buf.length;
+    }
+  })().catch(() => {
+  });
+  let timer;
+  const timeout = new Promise((resolve) => {
+    timer = setTimeout(resolve, timeoutMs);
+  });
+  try {
+    await Promise.race([drain, timeout]);
+  } finally {
+    if (timer) clearTimeout(timer);
+    try {
+      process.stdin.unref();
+    } catch {
+    }
+  }
   return Buffer.concat(chunks).toString("utf8");
 }
-var import_node_fs2, injectedStdin;
+var import_node_fs2, injectedStdin, STDIN_MAX_BYTES, STDIN_DRAIN_TIMEOUT_MS;
 var init_stdin_inject = __esm({
   "src/stdin-inject.ts"() {
     "use strict";
     import_node_fs2 = require("node:fs");
+    STDIN_MAX_BYTES = 8 * 1024 * 1024;
+    STDIN_DRAIN_TIMEOUT_MS = 5e3;
   }
 });