troxy-cli 1.2.1 → 1.2.3

package/bin/troxy.js

@@ -3,7 +3,6 @@ import { runInit }                     from '../src/init.js';
 import { runUninstall }                from '../src/uninstall.js';
 import { runMcp }                      from '../src/mcp-server.js';
 import { runLogin, clearSession, requireKey, getKeySource } from '../src/auth.js';
-import { runCards }                    from '../src/cards.js';
 import { runPolicies }                 from '../src/policies.js';
 import { runMcps }                     from '../src/mcps.js';
 import { runActivity }                 from '../src/activity.js';
@@ -82,16 +81,53 @@ switch (command) {
     console.log('\n  Logged out ✓\n');
     break;
 
+  case 'rotate-key': {
+    const jwt = requireJwt();
+    const { loadConfig, saveConfig } = await import('../src/config.js');
+    const oldKey    = loadConfig()?.apiKey;
+    const oldPrefix = oldKey ? oldKey.substring(0, 11) : null;
+    const name      = flags.name || 'Rotated key';
+    const revokeOld = !!flags['revoke-old'];
+
+    process.stdout.write('\n  Creating new key... ');
+    const result    = await api.createToken(jwt, { name });
+    const newKey    = result.key;
+    const newPrefix = result.prefix;
+    console.log('✓');
+
+    saveConfig({ apiKey: newKey });
+    console.log('  Saved to ~/.troxy/config.json ✓');
+
+    if (revokeOld && oldPrefix) {
+      process.stdout.write(`  Revoking old key ${oldPrefix}... `);
+      const { tokens = [] } = await api.listTokens(jwt);
+      const old = tokens.find(t => t.prefix === oldPrefix);
+      if (old) { await api.revokeToken(jwt, old.id); console.log('✓'); }
+      else console.log('(already revoked)');
+    }
+
+    console.log(`
+  Key rotated:
+    Old:  ${oldPrefix ? oldPrefix + '...' : '(none)'}
+    New:  ${newPrefix}...
+
+  New key (shown once — save it now):
+    ${newKey}
+
+  ~/.troxy/config.json updated ✓
+
+  ⚠  If this key runs an MCP, update TROXY_API_KEY in your MCP
+     config and restart the MCP server.
+`);
+    break;
+  }
+
   // ── MCP server (started by MCP clients) ───────────────────────
   case 'mcp':
     await runMcp();
     break;
 
   // ── Resources (read-only: --key or saved config; write: login) ─
-  case 'cards':
-    await runCards(positional, flags);
-    break;
-
   case 'policies':
     await runPolicies(positional, flags);
     break;
@@ -134,11 +170,10 @@ switch (command) {
 
   // ── Shorthand: troxy list [resource] ──────────────────────────
   case 'list':
-    if (!sub || sub === 'cards')    { await runCards(['list'], flags);    break; }
-    if (sub === 'policies')         { await runPolicies(['list'], flags); break; }
+    if (!sub || sub === 'policies') { await runPolicies(['list'], flags); break; }
     if (sub === 'mcps')             { await runMcps(['list'], flags);     break; }
     if (sub === 'activity')         { await runActivity(flags);           break; }
-    console.error(`  Unknown resource: ${sub}. Try: cards, policies, mcps, activity\n`);
+    console.error(`  Unknown resource: ${sub}. Try: policies, mcps, activity\n`);
     process.exit(1);
 
   // ── Status ────────────────────────────────────────────────────
@@ -198,6 +233,8 @@ switch (command) {
   Setup
     troxy connect --key <api-key>  Save API key (CLI only — no MCP setup)
     troxy init --key <api-key>     Full setup: save key + configure MCP
+    troxy rotate-key               Create new key + save it (requires login)
+    troxy rotate-key --revoke-old  Same + revoke the old key immediately
     troxy uninstall                Remove Troxy from this machine
     troxy status                   API health + which key is in use
 
@@ -205,7 +242,6 @@ switch (command) {
     troxy policies list
     troxy policies describe --name "Block Amazon"
     troxy mcps list
-    troxy cards list
     troxy activity [--limit 50] [--mine]
     troxy insights [--period 7]
 
@@ -214,8 +250,6 @@ switch (command) {
     troxy policies enable  --name "X"
     troxy policies disable --name "X"
     troxy policies delete  --name "X"
-    troxy cards create --name "Personal" [--budget 500]
-    troxy cards delete --name "Personal"
 
   Override key for a single command:  --key txy-...
 `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.2.1",
+  "version": "1.2.3",
   "description": "AI payment control — protect your agent's payments with policies",
   "type": "module",
   "bin": {