troxy-cli 1.29.52 → 1.29.53

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.29.52",
+  "version": "1.29.53",
   "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
   "homepage": "https://troxy.io",
   "bugs": {

package/src/daemon.js

@@ -23,7 +23,7 @@ import { api } from './api.js';
 import { createInterceptor } from './interceptor.js';
 import { enabledProviders, interceptHostsFor, troxyRouteFor } from './providers.js';
 import { ensureInterceptionCerts } from './tls-ca.js';
-import { migrateBaseUrlProxyToInterception, claudeCodeSettingsPath } from './init.js';
+import { migrateBaseUrlProxyToInterception, claudeCodeSettingsPath, refreshTroxyGuardMod } from './init.js';
 
 const INTERVAL_MS = 60_000;
 
@@ -139,6 +139,8 @@ export async function runDaemon() {
   process.on('unhandledRejection', (err) => {
     process.stderr.write(`[troxy-daemon] unhandled rejection (continuing): ${err?.stack || err}\n`);
   });
+  // A CLI upgrade (npm or troxy update) then a daemon restart brings the mod up to date.
+  refreshTroxyGuardMod().catch((err) => process.stderr.write(`[troxy-daemon] mod refresh failed: ${err.message}\n`));
 
   const cfg = loadConfig();
   if (!cfg?.apiKey) {

package/src/init.js

@@ -38,6 +38,18 @@ export async function installTroxyGuardMod(home = os.homedir(), detectFn = detec
   return true;
 }
 
+// Only `troxy init` used to install the mod, so a CLI upgrade left the old mod running.
+// Re-copy it when the installed one is stamped with a different CLI version; a machine
+// without the mod (never ran init, or uninstalled) is left alone.
+export async function refreshTroxyGuardMod(home = os.homedir(), detectFn = detectInstalledClaudeCodeVersion) {
+  const manifest = path.join(home, '.claude', 'skills', 'troxy-guard', '.claude-plugin', 'plugin.json');
+  let installed;
+  try { installed = JSON.parse(fs.readFileSync(manifest, 'utf8')).version; } catch { return false; }
+  const { version } = JSON.parse(fs.readFileSync(path.join(__dirname, '..', 'package.json'), 'utf8'));
+  if (installed === version) return false;
+  return installTroxyGuardMod(home, detectFn);
+}
+
 export function uninstallTroxyGuardMod(home = os.homedir()) {
   fs.rmSync(path.join(home, '.claude', 'skills', 'troxy-guard'), { recursive: true, force: true });
 }
@@ -113,6 +125,7 @@ export async function refreshHostedInstructions(key) {
 
 export async function reprovisionKeyConsumers(key, agentName, proxyOptIn = null, conciseOptIn = null) {
   const platform = process.platform;
+  try { if (await refreshTroxyGuardMod()) console.log('    • Troxy model routing updated  ✓'); } catch {}
   const { detected, hasOpenClaw, hasClaude, none } = detectMcpClients();
 
   if (none) {

package/src/tests/init-mods.test.js

@@ -3,7 +3,7 @@ import assert from 'node:assert/strict';
 import os from 'node:os';
 import path from 'node:path';
 import fs from 'node:fs';
-import { installTroxyGuardMod, uninstallTroxyGuardMod } from '../init.js';
+import { installTroxyGuardMod, uninstallTroxyGuardMod, refreshTroxyGuardMod } from '../init.js';
 
 test('installTroxyGuardMod: copies the mod when the version supports it', async () => {
   const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'troxy-mod-home-'));
@@ -77,3 +77,20 @@ test('uninstallTroxyGuardMod: a no-op (not a throw) when nothing was installed',
     fs.rmSync(tmpHome, { recursive: true, force: true });
   }
 });
+
+test('refreshTroxyGuardMod: re-copies a stale mod, leaves a current or missing one alone', async () => {
+  const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'troxy-mod-home-'));
+  const cc = async () => ({ major: 2, minor: 1, patch: 289 });
+  const manifest = path.join(tmpHome, '.claude', 'skills', 'troxy-guard', '.claude-plugin', 'plugin.json');
+  try {
+    assert.equal(await refreshTroxyGuardMod(tmpHome, cc), false); // never installed: stays off
+    assert.equal(fs.existsSync(manifest), false);
+    await installTroxyGuardMod(tmpHome, cc);
+    assert.equal(await refreshTroxyGuardMod(tmpHome, cc), false); // already current
+    fs.writeFileSync(manifest, JSON.stringify({ name: 'troxy-guard', version: '0.0.1' }));
+    assert.equal(await refreshTroxyGuardMod(tmpHome, cc), true);  // stale: re-copied and re-stamped
+    assert.notEqual(JSON.parse(fs.readFileSync(manifest, 'utf8')).version, '0.0.1');
+  } finally {
+    fs.rmSync(tmpHome, { recursive: true, force: true });
+  }
+});