troxy-cli 1.30.13 → 1.30.15

package/README.md

@@ -1,6 +1,6 @@
 # troxy-cli
 
-The official Troxy CLI — onboard AI agents, manage MCPs and policies from the terminal.
+The official Troxy CLI. Connect Claude Code and make your usage go further.
 
 ## Prerequisites
 

package/bin/troxy.js

@@ -5,7 +5,6 @@ import { runMcp }                      from '../src/mcp-server.js';
 import { runPause, runResume }         from '../src/pause.js';
 import { runLogin, clearSession, requireKey, requireJwt, loadSession, getKeySource } from '../src/auth.js';
 import { loadConfig } from '../src/config.js';
-import { runPolicies }                 from '../src/policies.js';
 import { runMcps }                     from '../src/mcps.js';
 import { runActivity }                 from '../src/activity.js';
 import { runSettings }                 from '../src/settings.js';
@@ -307,7 +306,7 @@ switch (command) {
   troxy pay --merchant <name> --amount <n> [options]
 
   Simulates a payment evaluation request, identical to what your AI agent sends.
-  Use this to test your policies. Login required.
+  Login required.
 
   By default, payments that come back ALLOW or NOTIFY are auto-confirmed as
   successful charges, so rows land on their final badge in the dashboard
@@ -403,10 +402,6 @@ switch (command) {
     break;
 
   // ── Resources (read-only: --key or saved config; write: login) ─
-  case 'policies':
-    await runPolicies(positional, flags, multiFlags);
-    break;
-
   case 'mcps':
     await runMcps(positional, flags);
     break;
@@ -516,12 +511,11 @@ switch (command) {
 
   // ── Shorthand: troxy list [resource] ──────────────────────────
   case 'list':
-    if (!sub || sub === 'policies') { await runPolicies(['list'], flags); break; }
     if (sub === 'mcps')             { await runMcps(['list'], flags);     break; }
     if (sub === 'activity')         { await runActivity(flags);           break; }
     if (sub === 'approvals')        { await runApprovals(['list'], flags); break; }
     if (sub === 'secrets')          { await runSecrets(['list'], flags);  break; }
-    console.error(`  Unknown resource: ${sub}. Try: policies, mcps, activity, approvals, secrets\n`);
+    console.error(`  Unknown resource: ${sub}. Try: mcps, activity, approvals, secrets\n`);
     process.exit(1);
 
   // ── Status ────────────────────────────────────────────────────
@@ -570,14 +564,13 @@ switch (command) {
         const { account } = data;
         console.log(`
   Account
-    Active policies:  ${account.active_policies}
     MCPs total:       ${account.total_mcps}  (${account.connected_mcps} connected)
     Requests 24h:     ${account.requests_24h}
     Default action:   ${account.default_action}
 `);
       } catch { console.log(); }
     } else {
-      console.log('  Account:  not signed in. Run `troxy login` to manage policies and view activity from the CLI.\n');
+      console.log('  Account:  not signed in. Run `troxy login` to view usage and activity from the CLI.\n');
     }
 
     // Version check
@@ -771,106 +764,23 @@ switch (command) {
   default:
     if (command) console.error(`  Unknown command: ${command}\n`);
     console.log(`
-  Troxy: a secure control layer for AI agents
-
-  This CLI has two parts:
-    - Commands below (policies, mcps, activity, ...) are for YOU to run and manage your account.
-    - "troxy mcp" starts the MCP server an AI agent connects to. You don't run it by hand;
-      MCP clients (Claude Desktop, etc.) launch it after "troxy init" configures them.
-
-  First time? Run these two commands in order:
-    1) npx troxy-cli init --key txy-...   (get key from https://dash.troxy.io)
-    2) troxy login                         (start a 12h CLI session)
-
-  MCP setup (once per machine):  troxy init --key <api-key>
-  Login for CLI commands (12h):  troxy login
-
-  Setup (one time, API key required)
-    troxy init --key <api-key>     Connect this machine as an MCP + save key
-    troxy init --key <api-key> --name "My Agent"   Same, no interactive prompt
-                                    (for cloud/scripted agents that can't answer stdin)
-    troxy tools                    Scan for AI tools + report them to the dashboard
-    troxy restart                  Restart the MCP background service
-    troxy uninstall                Remove Troxy from this machine
-    troxy status                   API health + MCP status (no login needed)
-    troxy update                   Update to the latest version
+  Troxy: make your Claude usage go further
 
-  Proxy (experimental - routes Claude's own model calls through Troxy for
-  real-time policy enforcement and cost optimization, separate from the MCP
-  connection above)
-    troxy proxy status             Show whether it's on, and cert/interceptor health
-    troxy proxy enable --experimental   Turn it on (installs a local CA cert)
-    troxy proxy disable            Turn it off - removes the settings.json patch
-
-  Everything else requires: troxy login
-
-  MCP
-    troxy pause                        Pause this MCP (blocks all checkpoints)
-    troxy resume                       Resume this MCP
-    troxy mcps list                    All MCPs in your account
-    troxy mcps rename --name "x"       Rename this machine's MCP
-    troxy mcps create --name "x"       Create a key for another agent/machine
-    troxy mcps revoke --mcp "x"        Revoke an MCP's key
-    troxy mcps pause/resume --mcp "x"  Pause/resume any MCP (not just this one)
-    troxy mcps budget --mcp "x" --currency USD --limit 500
-    troxy mcps set-default-action --mcp "x" --action BLOCK
-
-  Keys
-    troxy rotate-key               Rotate MCP key (revokes old, saves new locally)
-
-  Policies (all six checkpoints: payment, comms, access, destructive, model, secrets)
-  Admin-only: every write below requires --org. Personal and per-MCP policies
-  no longer exist - a policy is always org-wide or space-wide, and org acts as
-  a ceiling a space policy can never be looser than. list/describe/test need
-  no --org and show every org + space policy that applies to you.
-    troxy policies list  /  list --org
-    troxy policies describe --name "Block Amazon"
-    troxy policies templates                                    (browse the built-in library)
-    troxy policies fields --domain secrets                      (see what each checkpoint supports)
-    troxy policies create --describe "block Amazon purchases over $200" --org   (AI builder, payment/comms only)
-    troxy policies create --name "X" --template "Block a secret going somewhere public" --org
-    troxy policies create --name "X" --action BLOCK --domain payment --field amount --operator gte --value 500 --org
-    troxy policies create --name "X" --action BLOCK --domain access --field login_action --operator eq --value signup --org
-    troxy policies create --name "X" --action BLOCK --domain comms --or "field=recipient_domain,operator=contains,value=gmail.com" --org
-    troxy policies create --name "X" --action BLOCK --domain secrets --field has_api_key --operator eq --value true --org
-    troxy policies test --domain payment --field amount --operator gt --value 100 --example '{"amount": 150}'
-    troxy policies set-priority --name "X" --priority 10  --org
-    troxy policies pause  --name "X"  --org
-    troxy policies resume --name "X"  --org
-    troxy policies delete --name "X"  --org
-    (--org needs admin access; run 'troxy policies create --help' for the full condition syntax)
-
-  Approvals (ESCALATE holds)
-    troxy approvals list
-    troxy approvals approve --id <id>
-    troxy approvals decline --id <id>
-
-  Settings
-    troxy settings show
-    troxy settings set --default-action BLOCK --approval-timeout 4
-
-  LLM provider keys
-    troxy secrets list
-    troxy secrets set --name "OpenAI"
-    troxy secrets delete --name "OpenAI"
+  First time? Create a key at https://dash.troxy.io, then run:
+    npx troxy-cli init --key txy-...
 
-  Account
-    troxy account clear-data       Wipe activity/policies, keep account + keys
-    troxy account delete           Permanently delete your account (irreversible)
-
-  Activity & insights
-    troxy activity [--limit 50] [--mine]
-    troxy insights [--period 7]
-    troxy usage-bar [--period 7]
+  Commands
+    troxy init --key <api-key>     Connect this machine (add --name "My Mac" to skip the prompt)
+    troxy status                   Health and connection status
+    troxy update                   Update to the latest version
+    troxy uninstall                Remove Troxy from this machine
+    troxy login                    Start a 12h CLI session for the commands below
+    troxy usage-bar [--period 7]   Your usage and what Troxy saved
+    troxy activity [--limit 50]    Recent requests
+    troxy insights [--period 7]    Trends
 
-  Simulate (test your policies against every checkpoint, not just payment)
-    troxy pay --merchant "Amazon" --amount 50
-    troxy pay --merchant "Google" --amount 300 --category software
-    troxy send --recipient jane@gmail.com --body "the password is hunter2"
-    troxy signin --site coinbase.com --type signup
-    troxy action --verb delete --resource "prod users table" --items 500
-    troxy model-call --model claude-opus-5 --provider anthropic --cost 4.50
-    troxy scan --content "AWS_SECRET_ACCESS_KEY=..." --destination public --do push
+  In Claude Code: /troxy status, /troxy off, /troxy on
+  Help: https://docs.troxy.io  or  support@troxy.io
 `);
     process.exit(command ? 1 : 0);
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "troxy-cli",
-  "version": "1.30.13",
-  "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
+  "version": "1.30.15",
+  "description": "Make your Claude Code usage go further: lighter requests, less usage, less money",
   "homepage": "https://troxy.io",
   "bugs": {
     "email": "support@troxy.io"

package/src/mcps.js

@@ -49,18 +49,17 @@ export async function runMcps([sub, ...args], flags) {
       if (!mcps.length) { console.log('\n  No MCP connections yet.\n'); return; }
       console.log();
       table(
-        ['Name', 'Prefix', 'Status', 'Last Seen', 'Policies', 'Default Action', 'Me'],
+        ['Name', 'Prefix', 'Status', 'Last Seen', 'Default Action', 'Me'],
         mcps.map(m => [
           m.name,
           m.token_prefix,
           m.connected ? '● connected' : '○ offline',
           m.last_seen,
-          m.policies_assigned,
           m.default_action,
           m.is_me ? '← you' : '',
         ]),
       );
-      console.log('  Policies: org + space policies apply account-wide, so this count is the same for every agent.\n');
+      console.log();
       break;
     }
 

package/src/simulate.js

@@ -47,7 +47,7 @@ const HELP = {
 
   Simulates a message evaluation (/evaluate/email) - the checkpoint an agent
   calls before sending on any channel: email, WhatsApp, Telegram, Slack,
-  Teams, Discord, SMS. Use this to test your Messages policies. Login required.
+  Teams, Discord, SMS. Login required.
 
   Required:
     --recipient <address>   Who it's going to (address, phone, handle, or channel name)
@@ -65,8 +65,7 @@ const HELP = {
 `,
   signin: `  troxy signin --site <domain> [--type login|signup]
 
-  Simulates a login/signup evaluation (/evaluate/login). Use this to test your
-  Access & privacy policies. Login required.
+  Simulates a login/signup evaluation (/evaluate/login). Login required.
 
   Required:
     --site <domain>   Site the agent is signing into (e.g. "coinbase.com")
@@ -82,7 +81,7 @@ const HELP = {
 
   Simulates a consequential-action evaluation (/evaluate/action) - deletes,
   drops, overwrites, force-pushes, grants, exports, and other actions with
-  real consequences. Use this to test your Destructive/Access policies. Login required.
+  real consequences. Login required.
 
   Required:
     --verb <verb>        delete, drop, destroy, overwrite, force_push, share,
@@ -104,8 +103,7 @@ const HELP = {
   'model-call': `  troxy model-call --model <id> --provider <name> [options]
 
   Simulates a model-usage evaluation (/evaluate/model) - what an agent calls
-  before starting a run on a given model. Use this to test your AI & models
-  policies. Login required.
+  before starting a run on a given model. Login required.
 
   Required:
     --model <id>         Model id, e.g. claude-opus-5
@@ -125,7 +123,7 @@ const HELP = {
   Simulates a sensitive-data evaluation (/evaluate/secrets) - the checkpoint
   an agent calls before sending, writing, or publishing content that might
   contain a secret. Content is scanned server-side; you don't pre-classify it.
-  Use this to test your Secrets & credentials policies. Login required.
+  Login required.
 
   Required:
     --content <text>    The text/code/data about to be sent or written

package/src/tests/proxy-wiring.test.js

@@ -89,12 +89,6 @@ describe('bin/troxy.js: proxy subcommand wiring', () => {
     assert.match(proxyBlock, /runProxyDisable/);
     assert.match(proxyBlock, /runProxyStatus/);
   });
-
-  it('is listed in the default help banner - init already enables it for real users', () => {
-    const helpBannerStart = binSrc.indexOf("Troxy: a secure control layer for AI agents");
-    const helpBanner = binSrc.slice(helpBannerStart);
-    assert.ok(helpBanner.includes('troxy proxy '), 'troxy proxy should appear in the printed help banner');
-  });
 });
 
 describe('uninstall.js: settings.json symmetry (fail-open layer 6)', () => {