troxy-cli 1.30.7 → 1.30.9

package/bin/troxy.js

@@ -291,7 +291,7 @@ switch (command) {
     break;
   }
 
-  // ── Pause / resume payment evaluations ───────────────────────
+  // ── Pause / resume policy checkpoints ───────────────────────
   case 'pause':
     await runPause();
     break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.30.7",
+  "version": "1.30.9",
   "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
   "homepage": "https://troxy.io",
   "bugs": {

package/src/mcps.js

@@ -8,7 +8,7 @@ const HELP = {
   rename:             `  troxy mcps rename --name <new-name> [--mcp <target>]\n\n  Renames an MCP. Without --mcp, renames this machine's MCP.\n\n  Options:\n    --name   New name\n    --mcp    Name/prefix of the MCP to rename (default: this machine)\n\n  Example:\n    troxy mcps rename --name "My Laptop"\n    troxy mcps rename --mcp "old-name" --name "Staging Server"\n`,
   create:             `  troxy mcps create --name <name>\n\n  Creates a new API key for another agent/machine. The key is shown once.\n  Save it, then run 'troxy init --key <key>' on that machine.\n\n  Options:\n    --name   Label for the new key\n`,
   revoke:             `  troxy mcps revoke --mcp <name>\n\n  Permanently revokes an MCP's API key. That machine will stop being able\n  to evaluate payments until reconnected with a new key.\n`,
-  pause:              `  troxy pause / troxy mcps pause [--mcp <name>]\n\n  Pauses an MCP (blocks all its payment evaluations). Without --mcp, pauses\n  this machine's MCP, same as running 'troxy pause'.\n`,
+  pause:              `  troxy pause / troxy mcps pause [--mcp <name>]\n\n  Pauses an MCP (blocks all its policy checkpoints). Without --mcp, pauses\n  this machine's MCP, same as running 'troxy pause'.\n`,
   resume:             `  troxy resume / troxy mcps resume [--mcp <name>]\n\n  Resumes a paused MCP. Without --mcp, resumes this machine's MCP.\n`,
   budget:             `  troxy mcps budget --mcp <name> [options]\n\n  Sets or clears a monthly spend limit for a specific MCP.\n\n  Options:\n    --mcp <name>          MCP to configure (required)\n    --currency <cur>      USD, ILS, or EUR (default: USD)\n    --limit <n>           Monthly limit\n    --clear               Remove the limit for that currency\n    --action <action>     block, escalate, notify, or allow: what happens once hit\n    --reset-usage         Reset this cycle's usage back to 0\n\n  Example:\n    troxy mcps budget --mcp "My Laptop" --currency USD --limit 500\n`,
   'set-default-action': `  troxy mcps set-default-action --mcp <name> --action <action>\n\n  Sets the fallback decision for an MCP when no policy matches.\n\n  Options:\n    --mcp <name>       MCP to configure (required)\n    --action <action>  ALLOW, BLOCK, ESCALATE, or NOTIFY\n`,

package/src/pause.js

@@ -18,7 +18,7 @@ export async function runPause() {
   const id = await _localTokenId(jwt, config);
   await api.pauseToken(jwt, id);
   console.log('✓');
-  console.log('  ⏸  All payment evaluations are now blocked.');
+  console.log('  ⏸  Policy checkpoints are now blocked. This does not turn off model switching (use /troxy off in Claude Code).');
   console.log('  Run "troxy resume" to resume.\n');
 }
 
@@ -29,5 +29,5 @@ export async function runResume() {
   const id = await _localTokenId(jwt, config);
   await api.resumeToken(jwt, id);
   console.log('✓');
-  console.log('  ▶  Payment evaluations are active again.\n');
+  console.log('  ▶  Policy checkpoints are active again.\n');
 }

package/src/sandbox/posttooluse-hook.js

@@ -171,6 +171,9 @@ async function readStdin(timeoutMs) {
 // (`troxy posttooluse-hook`, registered via patchClaudeCodeHooks in
 // init.js) and, below, by this file's own direct-execution guard.
 export async function runPostToolUseHook() {
+  // Off by default: the 2026-10-22 split A/B showed output compression alone made the model
+  // re-run and re-read (about 4.5x the tool calls) and cost more bar. TROXY_COMPRESS=1 re-enables it.
+  if (process.env.TROXY_COMPRESS !== '1') process.exit(0);
   try {
     const raw = await readStdin(STDIN_TIMEOUT_MS);
     const input = JSON.parse(raw);

package/src/tests/e2e-sandbox-chain.test.js

@@ -114,6 +114,7 @@ test('end-to-end: real init -> real hook subprocess -> real recall, and real fai
       ...process.env,
       HOME: tmpHome,
       PATH: '/usr/bin:/bin',
+      TROXY_COMPRESS: '1',
     };
 
     let stdout = '';

package/src/tests/posttooluse-hook.test.js

@@ -255,3 +255,19 @@ test('the hook records the tokens fetched back with troxy_recall, per session, a
   await buildHookResponse({ tool_name: 'mcp__troxy__troxy_recall', tool_response: [{ type: 'text', text: 'z'.repeat(800) }] }, { storeDir: dir });
   assert.equal(fs.readdirSync(path.join(dir, 'recalled')).length, 1);
 });
+
+test('posttooluse-hook is a no-op unless TROXY_COMPRESS=1', () => {
+  const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'troxy-home-'));
+  try {
+    const run = (extra) => execFileSync(process.execPath, [troxyBin, 'posttooluse-hook'], {
+      input: JSON.stringify({ session_id: 's1', tool_name: 'Bash', tool_response: bashResult('x'.repeat(5000)) }),
+      env: { ...process.env, HOME: tmpHome, TROXY_COMPRESS: '', ...extra },
+      encoding: 'utf8',
+    });
+    assert.equal(run({}), '');
+    // Enabled: either compressed (treated arm) or left alone (holdout arm), never an error.
+    assert.doesNotThrow(() => run({ TROXY_COMPRESS: '1' }));
+  } finally {
+    fs.rmSync(tmpHome, { recursive: true, force: true });
+  }
+});