troxy-cli 1.2.2 → 1.2.4

package/bin/troxy.js

@@ -81,11 +81,72 @@ switch (command) {
     console.log('\n  Logged out ✓\n');
     break;
 
+  case 'rotate-key': {
+    const jwt = requireJwt();
+    const { loadConfig, saveConfig } = await import('../src/config.js');
+    const oldKey    = loadConfig()?.apiKey;
+    const oldPrefix = oldKey ? oldKey.substring(0, 11) : null;
+    const name      = flags.name || 'Rotated key';
+    const revokeOld = !!flags['revoke-old'];
+
+    process.stdout.write('\n  Creating new key... ');
+    const result    = await api.createToken(jwt, { name });
+    const newKey    = result.key;
+    const newPrefix = result.prefix;
+    console.log('✓');
+
+    saveConfig({ apiKey: newKey });
+    console.log('  Saved to ~/.troxy/config.json ✓');
+
+    if (revokeOld && oldPrefix) {
+      process.stdout.write(`  Revoking old key ${oldPrefix}... `);
+      const { tokens = [] } = await api.listTokens(jwt);
+      const old = tokens.find(t => t.prefix === oldPrefix);
+      if (old) { await api.revokeToken(jwt, old.id); console.log('✓'); }
+      else console.log('(already revoked)');
+    }
+
+    console.log(`
+  Key rotated:
+    Old:  ${oldPrefix ? oldPrefix + '...' : '(none)'}
+    New:  ${newPrefix}...
+
+  New key (shown once — save it now):
+    ${newKey}
+
+  ~/.troxy/config.json updated ✓
+
+  ⚠  If this key runs an MCP, update TROXY_API_KEY in your MCP
+     config and restart the MCP server.
+`);
+    break;
+  }
+
   // ── MCP server (started by MCP clients) ───────────────────────
   case 'mcp':
     await runMcp();
     break;
 
+  // ── Simulate a payment evaluation ────────────────────────────
+  case 'pay': {
+    const apiKey   = requireKey(flags);
+    const merchant = flags.merchant;
+    const amount   = parseFloat(flags.amount);
+    const card     = flags.card || 'Work';
+    const category = flags.category;
+    if (!merchant)    { console.error('  --merchant is required\n'); process.exit(1); }
+    if (isNaN(amount)){ console.error('  --amount is required\n');   process.exit(1); }
+    const body = { card_alias: card, merchant_name: merchant, amount, agent: 'troxy-cli' };
+    if (category) body.merchant_category = category;
+    const result = await api.evaluate(body, apiKey);
+    const ICON = { ALLOW: '✓', BLOCK: '✗', ESCALATE: '⏳', NOTIFY: '~' };
+    const icon = ICON[result.decision] || '?';
+    console.log(`\n  ${icon} ${result.decision}${result.policy ? `  ←  "${result.policy}"` : '  (default action)'}`);
+    if (result.audit_id) console.log(`  audit: ${result.audit_id}`);
+    console.log();
+    break;
+  }
+
   // ── Resources (read-only: --key or saved config; write: login) ─
   case 'policies':
     await runPolicies(positional, flags);
@@ -192,9 +253,15 @@ switch (command) {
   Setup
     troxy connect --key <api-key>  Save API key (CLI only — no MCP setup)
     troxy init --key <api-key>     Full setup: save key + configure MCP
+    troxy rotate-key               Create new key + save it (requires login)
+    troxy rotate-key --revoke-old  Same + revoke the old key immediately
     troxy uninstall                Remove Troxy from this machine
     troxy status                   API health + which key is in use
 
+  Simulate
+    troxy pay --merchant "Amazon" --amount 50 --card "Work"
+    troxy pay --merchant "Google" --amount 300 --card "Work" --category software
+
   Inspect  (uses saved key — no flags needed after init)
     troxy policies list
     troxy policies describe --name "Block Amazon"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "description": "AI payment control — protect your agent's payments with policies",
   "type": "module",
   "bin": {