troxy-cli 1.30.12 → 1.30.14

package/README.md

@@ -1,6 +1,6 @@
 # troxy-cli
 
-The official Troxy CLI — onboard AI agents, manage MCPs and policies from the terminal.
+The official Troxy CLI. Connect Claude Code and make your usage go further.
 
 ## Prerequisites
 

package/bin/troxy.js

@@ -570,14 +570,13 @@ switch (command) {
         const { account } = data;
         console.log(`
   Account
-    Active policies:  ${account.active_policies}
     MCPs total:       ${account.total_mcps}  (${account.connected_mcps} connected)
     Requests 24h:     ${account.requests_24h}
     Default action:   ${account.default_action}
 `);
       } catch { console.log(); }
     } else {
-      console.log('  Account:  not signed in. Run `troxy login` to manage policies and view activity from the CLI.\n');
+      console.log('  Account:  not signed in. Run `troxy login` to view usage and activity from the CLI.\n');
     }
 
     // Version check
@@ -771,106 +770,23 @@ switch (command) {
   default:
     if (command) console.error(`  Unknown command: ${command}\n`);
     console.log(`
-  Troxy: a secure control layer for AI agents
-
-  This CLI has two parts:
-    - Commands below (policies, mcps, activity, ...) are for YOU to run and manage your account.
-    - "troxy mcp" starts the MCP server an AI agent connects to. You don't run it by hand;
-      MCP clients (Claude Desktop, etc.) launch it after "troxy init" configures them.
-
-  First time? Run these two commands in order:
-    1) npx troxy-cli init --key txy-...   (get key from https://dash.troxy.io)
-    2) troxy login                         (start a 12h CLI session)
-
-  MCP setup (once per machine):  troxy init --key <api-key>
-  Login for CLI commands (12h):  troxy login
-
-  Setup (one time, API key required)
-    troxy init --key <api-key>     Connect this machine as an MCP + save key
-    troxy init --key <api-key> --name "My Agent"   Same, no interactive prompt
-                                    (for cloud/scripted agents that can't answer stdin)
-    troxy tools                    Scan for AI tools + report them to the dashboard
-    troxy restart                  Restart the MCP background service
-    troxy uninstall                Remove Troxy from this machine
-    troxy status                   API health + MCP status (no login needed)
-    troxy update                   Update to the latest version
+  Troxy: make your Claude usage go further
 
-  Proxy (experimental - routes Claude's own model calls through Troxy for
-  real-time policy enforcement and cost optimization, separate from the MCP
-  connection above)
-    troxy proxy status             Show whether it's on, and cert/interceptor health
-    troxy proxy enable --experimental   Turn it on (installs a local CA cert)
-    troxy proxy disable            Turn it off - removes the settings.json patch
-
-  Everything else requires: troxy login
-
-  MCP
-    troxy pause                        Pause this MCP (blocks all checkpoints)
-    troxy resume                       Resume this MCP
-    troxy mcps list                    All MCPs in your account
-    troxy mcps rename --name "x"       Rename this machine's MCP
-    troxy mcps create --name "x"       Create a key for another agent/machine
-    troxy mcps revoke --mcp "x"        Revoke an MCP's key
-    troxy mcps pause/resume --mcp "x"  Pause/resume any MCP (not just this one)
-    troxy mcps budget --mcp "x" --currency USD --limit 500
-    troxy mcps set-default-action --mcp "x" --action BLOCK
-
-  Keys
-    troxy rotate-key               Rotate MCP key (revokes old, saves new locally)
-
-  Policies (all six checkpoints: payment, comms, access, destructive, model, secrets)
-  Admin-only: every write below requires --org. Personal and per-MCP policies
-  no longer exist - a policy is always org-wide or space-wide, and org acts as
-  a ceiling a space policy can never be looser than. list/describe/test need
-  no --org and show every org + space policy that applies to you.
-    troxy policies list  /  list --org
-    troxy policies describe --name "Block Amazon"
-    troxy policies templates                                    (browse the built-in library)
-    troxy policies fields --domain secrets                      (see what each checkpoint supports)
-    troxy policies create --describe "block Amazon purchases over $200" --org   (AI builder, payment/comms only)
-    troxy policies create --name "X" --template "Block a secret going somewhere public" --org
-    troxy policies create --name "X" --action BLOCK --domain payment --field amount --operator gte --value 500 --org
-    troxy policies create --name "X" --action BLOCK --domain access --field login_action --operator eq --value signup --org
-    troxy policies create --name "X" --action BLOCK --domain comms --or "field=recipient_domain,operator=contains,value=gmail.com" --org
-    troxy policies create --name "X" --action BLOCK --domain secrets --field has_api_key --operator eq --value true --org
-    troxy policies test --domain payment --field amount --operator gt --value 100 --example '{"amount": 150}'
-    troxy policies set-priority --name "X" --priority 10  --org
-    troxy policies pause  --name "X"  --org
-    troxy policies resume --name "X"  --org
-    troxy policies delete --name "X"  --org
-    (--org needs admin access; run 'troxy policies create --help' for the full condition syntax)
-
-  Approvals (ESCALATE holds)
-    troxy approvals list
-    troxy approvals approve --id <id>
-    troxy approvals decline --id <id>
-
-  Settings
-    troxy settings show
-    troxy settings set --default-action BLOCK --approval-timeout 4
-
-  LLM provider keys
-    troxy secrets list
-    troxy secrets set --name "OpenAI"
-    troxy secrets delete --name "OpenAI"
-
-  Account
-    troxy account clear-data       Wipe activity/policies, keep account + keys
-    troxy account delete           Permanently delete your account (irreversible)
+  First time? Create a key at https://dash.troxy.io, then run:
+    npx troxy-cli init --key txy-...
 
-  Activity & insights
-    troxy activity [--limit 50] [--mine]
-    troxy insights [--period 7]
-    troxy usage-bar [--period 7]
+  Commands
+    troxy init --key <api-key>     Connect this machine (add --name "My Mac" to skip the prompt)
+    troxy status                   Health and connection status
+    troxy update                   Update to the latest version
+    troxy uninstall                Remove Troxy from this machine
+    troxy login                    Start a 12h CLI session for the commands below
+    troxy usage-bar [--period 7]   Your usage and what Troxy saved
+    troxy activity [--limit 50]    Recent requests
+    troxy insights [--period 7]    Trends
 
-  Simulate (test your policies against every checkpoint, not just payment)
-    troxy pay --merchant "Amazon" --amount 50
-    troxy pay --merchant "Google" --amount 300 --category software
-    troxy send --recipient jane@gmail.com --body "the password is hunter2"
-    troxy signin --site coinbase.com --type signup
-    troxy action --verb delete --resource "prod users table" --items 500
-    troxy model-call --model claude-opus-5 --provider anthropic --cost 4.50
-    troxy scan --content "AWS_SECRET_ACCESS_KEY=..." --destination public --do push
+  In Claude Code: /troxy status, /troxy off, /troxy on
+  Help: https://docs.troxy.io  or  support@troxy.io
 `);
     process.exit(command ? 1 : 0);
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "troxy-cli",
-  "version": "1.30.12",
-  "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
+  "version": "1.30.14",
+  "description": "Make your Claude Code usage go further: lighter requests, less usage, less money",
   "homepage": "https://troxy.io",
   "bugs": {
     "email": "support@troxy.io"

package/src/sandbox/posttooluse-hook.js

@@ -107,6 +107,23 @@ function rebuildWithText(toolResponse, text) {
   return { ...toolResponse, content: text };
 }
 
+// Only outputs Claude rarely fetches back get shortened. Measured 2026-10-23 on 1,435 shortened
+// outputs: Grep 0% recalled; wc, ls, head, tail, test runs and logs 0-15%; Read of .js/.html
+// 17-20%. Targeted reads (sed, cat, Bash grep, Read of .py/.md/.txt) came back 30-86%, so
+// shortening them only adds a recall step.
+const SHORTEN_COMMANDS = new Set(['wc', 'ls', 'head', 'tail', 'ps', 'gh', 'aws', 'pytest']);
+const SHORTEN_READ_EXT = /\.(js|html)$/i;
+
+export function isShortenable(toolName, toolInput) {
+  if (toolName === undefined) return true; // ponytail: payloads without tool_name (old tests); Claude Code always sends it
+  if (toolName === 'Grep') return true;
+  if (toolName === 'Read') return SHORTEN_READ_EXT.test(String(toolInput?.file_path || ''));
+  if (toolName !== 'Bash') return false;
+  const cmd = String(toolInput?.command || '').trim().replace(/^(cd\s+\S+\s*(&&|;)\s*)+/, '');
+  if (/^python3?\s+-m\s+pytest\b/.test(cmd)) return true;
+  return SHORTEN_COMMANDS.has(path.basename(cmd.split(/\s+/)[0] || ''));
+}
+
 export async function buildHookResponse(toolUseBlock, {
   sandboxFraction = 1,
   holdoutFraction = 0.2,
@@ -124,7 +141,7 @@ export async function buildHookResponse(toolUseBlock, {
     return undefined;
   }
   const output = extractText(toolResponse);
-  if (output === null || !shouldSandbox(output)) {
+  if (output === null || !shouldSandbox(output) || !isShortenable(toolUseBlock?.tool_name, toolUseBlock?.tool_input)) {
     writeState(storeDir, 'skipped');
     return undefined;
   }

package/src/tests/posttooluse-hook.test.js

@@ -271,3 +271,25 @@ test('posttooluse-hook is a no-op unless TROXY_COMPRESS=1', () => {
     fs.rmSync(tmpHome, { recursive: true, force: true });
   }
 });
+
+test('isShortenable: only output kinds Claude rarely fetches back', async () => {
+  const { isShortenable } = await import('../sandbox/posttooluse-hook.js');
+  assert.equal(isShortenable('Grep', {}), true);
+  assert.equal(isShortenable('Read', { file_path: '/a/b/app.js' }), true);
+  assert.equal(isShortenable('Read', { file_path: '/a/b/notes.md' }), false);
+  assert.equal(isShortenable('Read', { file_path: '/a/b/x.py' }), false);
+  assert.equal(isShortenable('Bash', { command: 'cd /repo && ls -la src' }), true);
+  assert.equal(isShortenable('Bash', { command: 'python3 -m pytest -q' }), true);
+  assert.equal(isShortenable('Bash', { command: 'sed -n 1,200p file.js' }), false);
+  assert.equal(isShortenable('Bash', { command: 'cat big.log' }), false);
+  assert.equal(isShortenable('mcp__claude_ai_Gmail__get_thread', {}), false);
+});
+
+test('a large sed output passes through unshortened', async () => {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'troxy-sandbox-'));
+  const response = await buildHookResponse(
+    { tool_name: 'Bash', tool_input: { command: 'sed -n 1,400p a.js' }, tool_response: bashResult('x'.repeat(5000)) },
+    { sandboxFraction: 1, holdoutFraction: 0, randomFn: () => 0.5, storeDir: dir });
+  assert.equal(response, undefined);
+  assert.equal(readState(dir).state, 'skipped');
+});

package/src/tests/proxy-wiring.test.js

@@ -89,12 +89,6 @@ describe('bin/troxy.js: proxy subcommand wiring', () => {
     assert.match(proxyBlock, /runProxyDisable/);
     assert.match(proxyBlock, /runProxyStatus/);
   });
-
-  it('is listed in the default help banner - init already enables it for real users', () => {
-    const helpBannerStart = binSrc.indexOf("Troxy: a secure control layer for AI agents");
-    const helpBanner = binSrc.slice(helpBannerStart);
-    assert.ok(helpBanner.includes('troxy proxy '), 'troxy proxy should appear in the printed help banner');
-  });
 });
 
 describe('uninstall.js: settings.json symmetry (fail-open layer 6)', () => {