troxy-cli 1.23.0 → 1.24.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.23.0",
+  "version": "1.24.0",
   "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
   "homepage": "https://troxy.io",
   "bugs": {

package/src/mcp-server.js

@@ -578,17 +578,23 @@ export async function runMcp() {
       if (result.error) {
         return { content: [{ type: 'text', text: `Troxy error: ${result.error}` }], isError: true };
       }
-      const { decision, reason, audit_id, approval_token } = result;
+      const { decision, reason, audit_id, approval_token, suggested_model, suggestion_reason } = result;
       const what = `${args.model}${args.effort ? ` at ${args.effort} effort` : ''}`;
       // Every non-blocked branch repeats the audit_id and the instruction to
       // report back. Half the value of this checkpoint is the second call, and
       // an agent that is only told "approved" has no reason to make it.
       const followUp = ` When this turn finishes, call report_model_usage(audit_id="${audit_id}", actual_tokens=<real total>).`;
+      // Advisory only, dark-shipped per org - most orgs never see this field.
+      // Same "call again with the new id" pattern a BLOCK already teaches,
+      // just optional here: the call is still approved either way.
+      const suggestionText = suggested_model
+        ? ` Suggestion: ${suggestion_reason || `${suggested_model} would likely work just as well here.`} If you'd like to use it, call evaluate_model again with model="${suggested_model}" — no obligation, this run is already approved as-is.`
+        : '';
       let modelText;
       switch (decision) {
         case 'ALLOW':
         case 'NOTIFY':
-          modelText = `✓ Approved: ${what}.${reason ? ` ${reason}` : ''} You may run it.${followUp} (audit: ${audit_id})`;
+          modelText = `✓ Approved: ${what}.${reason ? ` ${reason}` : ''} You may run it.${followUp}${suggestionText} (audit: ${audit_id})`;
           break;
         case 'BLOCK':
           modelText = `✗ Blocked: ${what}.${reason ? ` ${reason}` : ''} Do not use this model for this task. Choose a cheaper or smaller model and call evaluate_model again with the new model id. (audit: ${audit_id})`;