troxy-cli 1.29.4 → 1.29.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.29.4",
+  "version": "1.29.5",
   "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
   "homepage": "https://troxy.io",
   "bugs": {

package/src/interceptor.js

@@ -73,6 +73,21 @@ export function parseConnectTarget(url) {
 // meaningless (or wrong) to forward on either outbound leg.
 const _HOP_BY_HOP_HEADERS = new Set(['host', 'connection', 'content-length', 'transfer-encoding']);
 
+/** 'desktop' | 'terminal' | null. Verified live 2026-09-11 against two real
+ * captured user-agents from this same machine: terminal sends
+ * "claude-cli/2.1.236 (external, cli)", desktop sends "claude-cli/2.1.260
+ * (external, claude-desktop, agent-sdk/0.3.260)" - the literal substring
+ * "claude-desktop" is the one stable, explicit signal found; everything
+ * else in the string (version numbers) will drift across releases. null
+ * (never a guess) when the client sends no recognizable claude-cli
+ * user-agent at all - some other tool on this port, or a future format
+ * change this hasn't been updated for. */
+export function detectSurface(incomingHeaders) {
+  const ua = incomingHeaders['user-agent'] || '';
+  if (!/^claude-cli\//.test(ua)) return null;
+  return ua.includes('claude-desktop') ? 'desktop' : 'terminal';
+}
+
 /** Headers for the leg going to Troxy: the client's own Authorization (an
  * Anthropic API key or OAuth token) is never sent to Troxy as-is - it
  * rides the side channel app.py already knows how to consume
@@ -87,6 +102,8 @@ export function buildTroxyForwardHeaders(incomingHeaders, troxyKey) {
   if (incomingHeaders.authorization) {
     headers['x-troxy-upstream-authorization'] = incomingHeaders.authorization;
   }
+  const surface = detectSurface(incomingHeaders);
+  if (surface) headers['x-troxy-surface'] = surface;
   headers.authorization = `Bearer ${troxyKey}`;
   return headers;
 }

package/src/tests/interceptor.test.js

@@ -21,6 +21,7 @@ import { format } from 'node:util';
 
 import {
   parseConnectTarget,
+  detectSurface,
   buildTroxyForwardHeaders,
   buildRelayHeaders,
   createInterceptor,
@@ -41,7 +42,43 @@ describe('parseConnectTarget', () => {
   });
 });
 
+describe('detectSurface', () => {
+  // Real user-agents captured live 2026-09-11 from this same machine's own
+  // terminal and desktop-app traffic through this interceptor.
+  it('recognizes a real desktop-app user-agent', () => {
+    assert.equal(
+      detectSurface({ 'user-agent': 'claude-cli/2.1.260 (external, claude-desktop, agent-sdk/0.3.260)' }),
+      'desktop',
+    );
+  });
+
+  it('recognizes a real terminal user-agent', () => {
+    assert.equal(detectSurface({ 'user-agent': 'claude-cli/2.1.236 (external, cli)' }), 'terminal');
+  });
+
+  it('returns null when there is no user-agent at all', () => {
+    assert.equal(detectSurface({}), null);
+  });
+
+  it('returns null for a user-agent that is not claude-cli - never a guess', () => {
+    assert.equal(detectSurface({ 'user-agent': 'curl/8.4.0' }), null);
+  });
+});
+
 describe('buildTroxyForwardHeaders', () => {
+  it('sets x-troxy-surface from a recognized user-agent', () => {
+    const headers = buildTroxyForwardHeaders(
+      { 'user-agent': 'claude-cli/2.1.260 (external, claude-desktop, agent-sdk/0.3.260)' },
+      'txy-key',
+    );
+    assert.equal(headers['x-troxy-surface'], 'desktop');
+  });
+
+  it('omits x-troxy-surface entirely when the surface cannot be determined', () => {
+    const headers = buildTroxyForwardHeaders({ 'user-agent': 'curl/8.4.0' }, 'txy-key');
+    assert.equal(headers['x-troxy-surface'], undefined);
+  });
+
   it('translates the client\'s own Authorization into X-Troxy-Upstream-Authorization, ' +
      'and sets Authorization to the Troxy key instead', () => {
     const headers = buildTroxyForwardHeaders(