troxy-cli 1.29.18 → 1.29.20

package/bin/troxy.js

@@ -227,7 +227,7 @@ switch (command) {
 
     // Re-point every real consumer (MCP client configs, the background service) at the new
     // key BEFORE revoking the old one — otherwise every consumer, which holds the key via
-    // ENV rather than config.json, keeps presenting the now-revoked key and payment control
+    // ENV rather than config.json, keeps presenting the now-revoked key and policy enforcement
     // goes down until the user thinks to re-run init. (H6)
     await reprovisionKeyConsumers(newKey, existing.agentName || 'my-agent');
 
@@ -484,22 +484,16 @@ switch (command) {
     process.stdout.write(`  DB:   ${health.db}\n`);
     process.stdout.write(`  Env:  ${health.env}\n`);
 
-    // Account info from login session
-    const session = loadSession();
-    if (session?.jwt) {
-      try {
-        const data = await api.agentStatus(session.jwt);
-        const { account } = data;
-        console.log(`
-  Account
-    Active policies:  ${account.active_policies}
-    MCPs total:       ${account.total_mcps}  (${account.connected_mcps} connected)
-    Requests 24h:     ${account.requests_24h}
-    Default action:   ${account.default_action}
-`);
-      } catch { console.log(); }
+    const { proxyState } = await import('../src/proxy.js');
+    const { INTERCEPTOR_PORT } = await import('../src/daemon.js');
+    const proxy = await proxyState();
+    console.log();
+    if (proxy === 'on') {
+      console.log(`  Proxy:    ✓ on  (Claude traffic routed through Troxy, 127.0.0.1:${INTERCEPTOR_PORT})`);
+    } else if (proxy === 'down') {
+      console.log(`  Proxy:    ⚠  configured, but nothing is listening on 127.0.0.1:${INTERCEPTOR_PORT}. Run: troxy restart`);
     } else {
-      console.log('\n  Not logged in. Run: troxy login\n');
+      console.log('  Proxy:    off  (turn on: troxy proxy enable --experimental)');
     }
 
     // MCP connection info from local config (set by troxy init)
@@ -519,7 +513,24 @@ switch (command) {
       } catch {
         process.stdout.write('\n');
       }
-      console.log();
+    }
+
+    // Login only unlocks account commands; protection runs off the key + proxy above.
+    const session = loadSession();
+    if (session?.jwt) {
+      try {
+        const data = await api.agentStatus(session.jwt);
+        const { account } = data;
+        console.log(`
+  Account
+    Active policies:  ${account.active_policies}
+    MCPs total:       ${account.total_mcps}  (${account.connected_mcps} connected)
+    Requests 24h:     ${account.requests_24h}
+    Default action:   ${account.default_action}
+`);
+      } catch { console.log(); }
+    } else {
+      console.log('  Account:  not signed in. Run `troxy login` to manage policies and view activity from the CLI.\n');
     }
 
     // Version check
@@ -747,7 +758,7 @@ switch (command) {
   Everything else requires: troxy login
 
   MCP
-    troxy pause                        Pause this MCP (blocks all payments)
+    troxy pause                        Pause this MCP (blocks all checkpoints)
     troxy resume                       Resume this MCP
     troxy mcps list                    All MCPs in your account
     troxy mcps rename --name "x"       Rename this machine's MCP

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.29.18",
+  "version": "1.29.20",
   "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
   "homepage": "https://troxy.io",
   "bugs": {
@@ -11,6 +11,7 @@
     "troxy": "bin/troxy.js"
   },
   "scripts": {
+    "preinstall": "node scripts/check-node.js",
     "test": "node --test src/tests/*.test.js"
   },
   "dependencies": {
@@ -30,7 +31,8 @@
   },
   "files": [
     "bin/",
-    "src/"
+    "src/",
+    "scripts/check-node.js"
   ],
   "keywords": [
     "mcp",

package/scripts/check-node.js

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+const major = parseInt(process.versions.node.split('.')[0], 10);
+if (major < 18) {
+  console.error(`\ntroxy-cli requires Node >=18, you have ${process.version}.\nInstall a newer Node (e.g. via nvm: https://github.com/nvm-sh/nvm) and retry.\n`);
+  process.exit(1);
+}

package/src/proxy.js

@@ -40,6 +40,12 @@ export function probePort(port, timeoutMs = 800) {
   });
 }
 
+// 'on' | 'down' (settings point at the interceptor but nothing is listening) | 'off'
+export async function proxyState() {
+  if (!interceptionIsConfigured(claudeCodeSettingsPath())) return 'off';
+  return (await probePort(INTERCEPTOR_PORT)) ? 'on' : 'down';
+}
+
 function _readCert(certPath) {
   try { return fs.readFileSync(certPath, 'utf8'); } catch { return null; }
 }