troxy-cli 1.4.15 → 1.4.17

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.4.15",
+  "version": "1.4.17",
   "description": "AI payment control — protect your agent's payments with policies",
   "type": "module",
   "bin": {

package/src/api.js

@@ -55,6 +55,7 @@ export const api = {
   // Evaluate + confirm (agent API key)
   evaluate: (body, apiKey) => request('POST', '/evaluate', { apiKey, body }),
   confirmPayment: (auditId, body, apiKey) => request('POST', `/payments/${auditId}/confirm`, { apiKey, body }),
+  waitApprovalStatus: (token) => request('GET', `/approvals/${encodeURIComponent(token)}/wait`),
 
   // MCP heartbeat (agent API key)
   mcpHeartbeat: (apiKey, agentName) => request('POST', '/mcp/heartbeat', { apiKey, body: agentName ? { agent_name: agentName } : undefined }),

package/src/mcp-server.js

@@ -35,7 +35,7 @@ export async function runMcp() {
         'You MUST call the evaluate_payment tool before completing any purchase, payment, or financial transaction. ' +
         'Never submit a payment form, confirm a checkout, or transfer funds without first receiving an ALLOW decision from evaluate_payment. ' +
         'If the decision is BLOCK, abort the transaction and inform the user. ' +
-        'If the decision is ESCALATE, the response includes an approval_token. Wait for the user to approve, then call evaluate_payment again with the same payment details PLUS the approval_token field. The second call will return ALLOW without re-escalating. ' +
+        'If the decision is ESCALATE, the response includes an approval_token. Immediately call wait_for_payment_approval with that token — it polls automatically until the payment is approved or declined (up to 10 minutes). Once it returns approved, call evaluate_payment again with the same payment details PLUS the approval_token field. The second call will return ALLOW without re-escalating. ' +
         'If the decision is NOTIFY, proceed but the user will be notified. ' +
         'When calling evaluate_payment, use the merchant\'s domain name as merchant_name when available (e.g. "amazon.com", "indigobloom.co.il") — this ensures consistent matching against policies. ' +
         'After every ALLOW or NOTIFY decision, attempt the payment, then call confirm_payment with the audit_id and the outcome (success/failed/cancelled). Always include a reason when the charge fails.',
@@ -80,6 +80,23 @@ export async function runMcp() {
           },
         },
       },
+      {
+        name: 'wait_for_payment_approval',
+        description:
+          'Poll Troxy every 10 seconds until a pending payment approval is resolved. ' +
+          'Call this immediately after receiving an ESCALATE decision. ' +
+          'It will block until the account owner approves or declines (up to 10 minutes), then return the result automatically.',
+        inputSchema: {
+          type: 'object',
+          required: ['approval_token'],
+          properties: {
+            approval_token: {
+              type: 'string',
+              description: 'The approval_token from the ESCALATE response',
+            },
+          },
+        },
+      },
       {
         name: 'evaluate_payment',
         description:
@@ -123,6 +140,51 @@ export async function runMcp() {
     const toolName = request.params.name;
     const args = request.params.arguments ?? {};
 
+    if (toolName === 'wait_for_payment_approval') {
+      const { approval_token } = args;
+      const MAX_MS   = 60 * 60_000; // overall cap: 1 hour
+      const deadline = Date.now() + MAX_MS;
+
+      // Long-poll: each request blocks on the server for ~20s, returning the
+      // moment the approval is resolved. No sleep needed — instant detection.
+      while (Date.now() < deadline) {
+        let status;
+        try {
+          status = await api.waitApprovalStatus(approval_token);
+        } catch (err) {
+          return {
+            content: [{ type: 'text', text: `Troxy error waiting for approval: ${err.message}` }],
+            isError: true,
+          };
+        }
+
+        if (status.status === 'APPROVED') {
+          return {
+            content: [{ type: 'text', text: `✅ Payment approved! Call evaluate_payment again with the same payment details and approval_token: "${approval_token}" to proceed.` }],
+            isError: false,
+          };
+        }
+        if (status.status === 'DECLINED') {
+          return {
+            content: [{ type: 'text', text: `❌ Payment declined by the account owner. Do not proceed with this payment.` }],
+            isError: true,
+          };
+        }
+        if (status.status === 'EXPIRED') {
+          return {
+            content: [{ type: 'text', text: `⏱ Approval request has expired. The payment cannot be approved.` }],
+            isError: true,
+          };
+        }
+        // status === 'pending': server timed out its 20s window, loop immediately
+      }
+
+      return {
+        content: [{ type: 'text', text: `⏳ Still waiting for approval after 1 hour. The request has likely expired.` }],
+        isError: true,
+      };
+    }
+
     if (toolName === 'confirm_payment') {
       const { audit_id, status, provider, provider_transaction_id, reason } = args;
       try {
@@ -167,7 +229,7 @@ export async function runMcp() {
         text = `✗ Payment blocked by policy "${policy}". Do not proceed with this payment. (audit: ${audit_id})`;
         break;
       case 'ESCALATE':
-        text = `⏳ Payment requires human approval — a request has been sent to the account owner. Do not proceed until approved.\n\nApproval token: ${approval_token}\n\nWait for the owner to approve in the Troxy dashboard, then tell me "I approved it" or "continue" so I can proceed. Once you do, I will call evaluate_payment again with the same payment details and approval_token: "${approval_token}". (audit: ${audit_id})`;
+        text = `⏳ Payment requires human approval — a request has been sent to the account owner.\n\nApproval token: ${approval_token}\n\nNow call wait_for_payment_approval(approval_token="${approval_token}") to automatically detect approval. Do not proceed until it returns approved. (audit: ${audit_id})`;
         break;
       case 'NOTIFY':
         text = `✓ Payment approved with notification. Policy matched: "${policy}". (audit: ${audit_id})\n\nAfter the charge attempt completes, call confirm_payment with audit_id "${audit_id}" and status "success", "failed", or "cancelled".`;