troxy-cli 1.30.8 → 1.30.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.30.8",
+  "version": "1.30.9",
   "description": "A secure control layer for AI agents: policies across payments, messages, logins, destructive actions, model usage, and secrets, all enforceable from the CLI",
   "homepage": "https://troxy.io",
   "bugs": {

package/src/sandbox/posttooluse-hook.js

@@ -171,6 +171,9 @@ async function readStdin(timeoutMs) {
 // (`troxy posttooluse-hook`, registered via patchClaudeCodeHooks in
 // init.js) and, below, by this file's own direct-execution guard.
 export async function runPostToolUseHook() {
+  // Off by default: the 2026-10-22 split A/B showed output compression alone made the model
+  // re-run and re-read (about 4.5x the tool calls) and cost more bar. TROXY_COMPRESS=1 re-enables it.
+  if (process.env.TROXY_COMPRESS !== '1') process.exit(0);
   try {
     const raw = await readStdin(STDIN_TIMEOUT_MS);
     const input = JSON.parse(raw);

package/src/tests/e2e-sandbox-chain.test.js

@@ -114,6 +114,7 @@ test('end-to-end: real init -> real hook subprocess -> real recall, and real fai
       ...process.env,
       HOME: tmpHome,
       PATH: '/usr/bin:/bin',
+      TROXY_COMPRESS: '1',
     };
 
     let stdout = '';

package/src/tests/posttooluse-hook.test.js

@@ -255,3 +255,19 @@ test('the hook records the tokens fetched back with troxy_recall, per session, a
   await buildHookResponse({ tool_name: 'mcp__troxy__troxy_recall', tool_response: [{ type: 'text', text: 'z'.repeat(800) }] }, { storeDir: dir });
   assert.equal(fs.readdirSync(path.join(dir, 'recalled')).length, 1);
 });
+
+test('posttooluse-hook is a no-op unless TROXY_COMPRESS=1', () => {
+  const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'troxy-home-'));
+  try {
+    const run = (extra) => execFileSync(process.execPath, [troxyBin, 'posttooluse-hook'], {
+      input: JSON.stringify({ session_id: 's1', tool_name: 'Bash', tool_response: bashResult('x'.repeat(5000)) }),
+      env: { ...process.env, HOME: tmpHome, TROXY_COMPRESS: '', ...extra },
+      encoding: 'utf8',
+    });
+    assert.equal(run({}), '');
+    // Enabled: either compressed (treated arm) or left alone (holdout arm), never an error.
+    assert.doesNotThrow(() => run({ TROXY_COMPRESS: '1' }));
+  } finally {
+    fs.rmSync(tmpHome, { recursive: true, force: true });
+  }
+});