troxy-cli 1.29.12 → 1.29.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.29.12",
+  "version": "1.29.14",
   "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
   "homepage": "https://troxy.io",
   "bugs": {

package/src/proxy.js

@@ -172,6 +172,13 @@ export async function runProxyEnable(flags = {}) {
 
 export function runProxyDisable() {
   const settingsPath = claudeCodeSettingsPath();
+
+  // Same restart hazard as uninstall.js's own fix: a Claude Code process
+  // already running has these two env vars loaded in memory, independent of
+  // what settings.json says from this point on. Check BEFORE unpatching so
+  // this reflects the state the running process actually launched with.
+  const wasIntercepting = interceptionIsConfigured(settingsPath);
+
   process.stdout.write('\n  Removing HTTPS_PROXY / NODE_EXTRA_CA_CERTS from settings.json...  ');
   try {
     unpatchClaudeCodeInterception(settingsPath);
@@ -181,4 +188,14 @@ export function runProxyDisable() {
     console.error(`\n  ${err.message}\n`);
     process.exit(1);
   }
+
+  if (wasIntercepting) {
+    console.log('  ⚠  Restart Claude Code / Claude Desktop now for this to take effect -');
+    console.log('     the running process still has the old proxy settings loaded in');
+    console.log('     memory and will keep routing through Troxy until you do.\n');
+  }
+
+  console.log('  The CLI, background daemon, certificate, and your API key are all still');
+  console.log('  in place - this only stops routing calls through Troxy. Turn it back on');
+  console.log('  any time with: troxy proxy enable --experimental\n');
 }

package/src/tests/proxy-wiring.test.js

@@ -116,3 +116,25 @@ describe('uninstall.js: settings.json symmetry (fail-open layer 6)', () => {
     assert.match(surrounding, /try\s*\{[\s\S]*unpatchClaudeCodeConfig[\s\S]*\}\s*catch/);
   });
 });
+
+describe('proxy.js: runProxyDisable restart warning (same hazard as uninstall.js)', () => {
+  const proxySrc = readFileSync(join(__dirname, '..', 'proxy.js'), 'utf8');
+
+  it('checks interceptionIsConfigured BEFORE unpatching, not after', () => {
+    const checkIdx = proxySrc.indexOf('interceptionIsConfigured(settingsPath)');
+    const unpatchIdx = proxySrc.indexOf('unpatchClaudeCodeInterception(settingsPath)');
+    assert.ok(checkIdx !== -1 && unpatchIdx !== -1);
+    assert.ok(checkIdx < unpatchIdx, 'must read whether interception was configured before unpatching removes the evidence');
+  });
+
+  it('warns to restart Claude Code only when it was actually intercepting', () => {
+    const warnIdx = proxySrc.indexOf('now for this to take effect');
+    assert.ok(warnIdx !== -1, 'restart warning text not found');
+    const guardIdx = proxySrc.lastIndexOf('if (wasIntercepting)', warnIdx);
+    assert.ok(guardIdx !== -1 && guardIdx < warnIdx, 'restart warning must be gated behind an if (wasIntercepting) check');
+  });
+
+  it('reassures the user that disable leaves the CLI, daemon, cert and API key untouched', () => {
+    assert.match(proxySrc, /CLI, background daemon, certificate, and your API key are all still/);
+  });
+});

package/src/uninstall.js

@@ -134,7 +134,10 @@ export async function runUninstall() {
     const settingsPath = claudeCodeSettingsPath();
     if (fs.existsSync(settingsPath)) {
       const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
-      wasIntercepting = !!(settings.env?.HTTPS_PROXY || settings.env?.NODE_EXTRA_CA_CERTS);
+      wasIntercepting = !!(
+        settings.env?.HTTPS_PROXY || settings.env?.NODE_EXTRA_CA_CERTS ||
+        settings.env?.ANTHROPIC_BASE_URL || settings.env?.ANTHROPIC_AUTH_TOKEN
+      );
     }
   } catch {}