troxy-cli 1.29.20 → 1.29.22

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.29.20",
+  "version": "1.29.22",
   "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
   "homepage": "https://troxy.io",
   "bugs": {

package/src/init.js

@@ -115,10 +115,12 @@ export async function reprovisionKeyConsumers(key, agentName, proxyOptIn = null,
         const entry = JSON.stringify({ command: 'npx', args: ['troxy-cli', 'mcp'], env: { TROXY_API_KEY: key } });
         // execFileSync passes args directly to the process (no shell), so the
         // key can't break out of a quoted string and inject shell commands.
-        execFileSync('openclaw', ['mcp', 'set', 'troxy', entry], { stdio: 'ignore' });
+        execFileSync('openclaw', ['mcp', 'set', 'troxy', entry], { stdio: ['ignore', 'ignore', 'pipe'] });
         console.log(`    • OpenClaw  ✓`);
       } catch (err) {
-        console.log(`    • OpenClaw  ✗  (${err.message})`);
+        // err.message embeds the full argv, key included: never print it.
+        const reason = err.stderr?.toString().trim().split('\n').pop() || `exit code ${err.status}`;
+        console.log(`    • OpenClaw  ✗  (${reason.replaceAll(key, key.substring(0, 12) + '...')})`);
       }
     }
     // Claude Desktop's Code tab runs the same Claude Code engine under the
@@ -949,10 +951,20 @@ async function maybeEnableTroxyInterception(proxyOptIn, hasDesktop, configPath =
 
   if (interceptionIsConfigured(configPath)) return; // already set up correctly, nothing to ask
 
+  // No auto-started background service on Windows yet (installService throws
+  // there), so pointing Claude Code at 127.0.0.1 would break every call
+  // after a reboot. Policies still work; the engine waits for Windows support.
+  if (process.platform === 'win32') {
+    console.log('\n  The Troxy engine (lighter Claude Code requests) is not available on');
+    console.log('  Windows yet. Policies work. Mac and Linux get the engine today.');
+    return;
+  }
+
   let enable = proxyOptIn === true;
   if (proxyOptIn === null && process.stdin.isTTY) {
-    console.log("\n  Route Claude Code's model calls through Troxy for automatic cost");
-    console.log('  optimization? Your normal Claude login (subscription or API key) still');
+    console.log("\n  Turn on the Troxy engine? Claude Code's requests go through Troxy and");
+    console.log('  are made lighter, so your usage goes further. Your normal Claude login');
+    console.log('  (subscription or API key) still');
     console.log('  pays - Troxy never substitutes its own credential. Troxy does see your');
     console.log('  real credential in transit, forwarded upstream to actually make the');
     console.log('  call to Anthropic on your behalf.');

package/src/tests/proxy-wiring.test.js

@@ -69,7 +69,7 @@ describe('reprovisionKeyConsumers: desktop detection gate', () => {
   it('maybeEnableTroxyInterception runs migration before the enable/proxyOptIn decision, so it always fires', () => {
     const fnStart = initSrc.indexOf('async function maybeEnableTroxyInterception');
     assert.ok(fnStart !== -1, 'maybeEnableTroxyInterception not found');
-    const fnBody = initSrc.slice(fnStart, fnStart + 1000);
+    const fnBody = initSrc.slice(fnStart, fnStart + 2000);
     const migrateIdx = fnBody.indexOf('migrateBaseUrlProxyToInterception(');
     const optInIdx = fnBody.indexOf('proxyOptIn === true');
     assert.ok(migrateIdx !== -1, 'migrateBaseUrlProxyToInterception call not found in function body');