troxy-cli 1.29.10 → 1.29.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.29.10",
+  "version": "1.29.12",
   "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
   "homepage": "https://troxy.io",
   "bugs": {

package/src/init.js

@@ -12,6 +12,34 @@ import { probePort } from './proxy.js';
 import { launchdUserDomain } from './launchd.js';
 import { reclaimOwnership } from './sudo-ownership.js';
 
+// `npx troxy-cli@latest <cmd>` puts a `troxy` shim on PATH only for that one
+// child process (npx's own temp-PATH trick) - it never installs a persistent
+// binary. installService()'s `which troxy` lookup succeeds during that npx
+// run and wires the background service to the real (but ephemeral) npx-cache
+// path, so "Background service installed ✓" is honest in the moment - but
+// the user is left with no actual `troxy` command afterward, so every
+// follow-up instruction we print (`troxy uninstall`, `troxy daemon &`, ...)
+// 404s with "command not found". Detect that case so we can tell the truth
+// about how to run follow-up commands instead of implying one that doesn't exist.
+function ranViaEphemeralNpx() {
+  if (process.env.npm_execpath && /npx|_npx/.test(process.env.npm_execpath)) return true;
+  try {
+    const resolved = execSync('which troxy', { stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();
+    return /\/_npx\//.test(resolved);
+  } catch {
+    return true; // no `troxy` resolvable at all outside this process either
+  }
+}
+
+function printPersistentInstallHint() {
+  console.log('\n  ⚠  troxy isn\'t on your PATH as a permanent command - this run was');
+  console.log('     via npx, which only makes it available for this one command.');
+  console.log('     For uninstall, status, or anything else later, either:');
+  console.log('       npm install -g troxy-cli   (then use `troxy <command>` directly)');
+  console.log('     or:');
+  console.log('       npx troxy-cli@latest <command>   (repeat the npx prefix each time)\n');
+}
+
 // Re-point every consumer of the API key (MCP client configs, the background service /
 // systemd env file / launchd plist, OpenClaw) at `key`. Shared by runInit and rotate-key
 // (H6): rotate-key used to write the new key only to config.json and then revoke the old
@@ -136,12 +164,18 @@ export async function reprovisionKeyConsumers(key, agentName, proxyOptIn = null)
   }
 
   console.log('\n  Setting up background service...');
+  const viaEphemeralNpx = ranViaEphemeralNpx();
   try {
     installService(key, agentName);
     console.log('  Background service installed  ✓');
+    if (viaEphemeralNpx) printPersistentInstallHint();
   } catch (err) {
     console.log(`  Background service  ✗  (${err.message})`);
-    console.log('  You can start it manually with: troxy daemon &');
+    if (viaEphemeralNpx) {
+      printPersistentInstallHint();
+    } else {
+      console.log('  You can start it manually with: troxy daemon &');
+    }
   }
 
   // Sudo safety net, not part of the normal (unprivileged) flow's own

package/src/uninstall.js

@@ -129,6 +129,15 @@ export async function runUninstall() {
   // is listening" outage this plan's fail-open design exists to prevent.
   // Each is independently best-effort: a missing/corrupt config file must
   // never stop the rest of uninstall from proceeding.
+  let wasIntercepting = false;
+  try {
+    const settingsPath = claudeCodeSettingsPath();
+    if (fs.existsSync(settingsPath)) {
+      const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
+      wasIntercepting = !!(settings.env?.HTTPS_PROXY || settings.env?.NODE_EXTRA_CA_CERTS);
+    }
+  } catch {}
+
   process.stdout.write('  Reverting Claude Code settings...  ');
   try {
     unpatchClaudeCodeConfig(claudeCodeConfigPath());
@@ -200,4 +209,11 @@ export async function runUninstall() {
   }
 
   console.log('\n  Troxy removed. All agent keys revoked. Your AI agents are no longer protected by Troxy.\n');
+
+  if (wasIntercepting) {
+    console.log('  ⚠  IMPORTANT: fully quit and restart Claude Code / Claude Desktop now.');
+    console.log('     Your current session was launched with Troxy\'s proxy settings still');
+    console.log('     loaded in memory, and the certificate they point to has just been');
+    console.log('     deleted — it will fail to reach Anthropic until you restart.\n');
+  }
 }