troxy-cli 1.4.21 → 1.4.23

package/bin/troxy.js

@@ -170,6 +170,10 @@ switch (command) {
   Simulates a payment evaluation request — identical to what your AI agent sends.
   Use this to test your policies. Login required.
 
+  By default, payments that come back ALLOW or NOTIFY are auto-confirmed as
+  successful charges, so rows land on their final badge in the dashboard
+  instead of sitting in PENDING. Pass --no-confirm to skip that step.
+
   Required:
     --merchant <name>   Merchant name (e.g. "Amazon")
     --amount <n>        Payment amount in USD
@@ -177,11 +181,14 @@ switch (command) {
   Optional:
     --card <alias>      Card alias (default: "Work")
     --category <cat>    Merchant category (e.g. travel, software, food)
+    --no-confirm        Don't auto-confirm — leaves the row PENDING
+    --fail              Confirm as a failed charge instead of success
+                        (simulates a declined card)
 
   Examples:
     troxy pay --merchant "Amazon" --amount 50
-    troxy pay --merchant "Amazon" --amount 350 --card "Work"
-    troxy pay --merchant "Delta"  --amount 250 --card "Work" --category travel
+    troxy pay --merchant "Amazon" --amount 350 --no-confirm
+    troxy pay --merchant "Delta"  --amount 250 --fail
 `);
       process.exit(0);
     }
@@ -192,6 +199,8 @@ switch (command) {
     const amount   = parseFloat(flags.amount);
     const card     = flags.card || 'Work';
     const category = flags.category;
+    const noConfirm = !!flags['no-confirm'];
+    const failCharge = !!flags.fail;
     if (!merchant)    { console.error('  --merchant is required\n'); process.exit(1); }
     if (isNaN(amount)){ console.error('  --amount is required\n');   process.exit(1); }
     const agentName = loadConfig()?.agentName || 'troxy-cli';
@@ -203,6 +212,25 @@ switch (command) {
     const suffix = result.policy ? `  ←  "${result.policy}"` : result.reason ? `  —  ${result.reason}` : '  (default action)';
     console.log(`\n  ${icon} ${result.decision}${suffix}`);
     if (result.audit_id) console.log(`  audit: ${result.audit_id}`);
+
+    // Auto-confirm so the dashboard badge lands on its final state. ALLOW and
+    // NOTIFY decisions normally leave the row PENDING until the agent reports
+    // back; for CLI testing that's just noise, so we confirm-success by
+    // default. BLOCK and ESCALATE are final / human-gated and aren't touched.
+    const shouldConfirm = !noConfirm && result.audit_id && ['ALLOW', 'NOTIFY'].includes(result.decision);
+    if (shouldConfirm) {
+      const status = failCharge ? 'failed' : 'success';
+      try {
+        await api.confirmPayment(result.audit_id, {
+          status,
+          provider: 'troxy-cli',
+          ...(failCharge ? { reason: 'simulated card decline (--fail)' } : {}),
+        }, apiKey);
+        console.log(`  confirmed: charge ${status}`);
+      } catch (e) {
+        console.log(`  (confirm step failed — row will stay PENDING)`);
+      }
+    }
     console.log();
     break;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.4.21",
+  "version": "1.4.23",
   "description": "AI payment control — protect your agent's payments with policies",
   "type": "module",
   "bin": {

package/src/config.js

@@ -14,6 +14,12 @@ export function loadConfig() {
 }
 
 export function saveConfig(data) {
-  fs.mkdirSync(CONFIG_DIR, { recursive: true });
-  fs.writeFileSync(CONFIG_FILE, JSON.stringify(data, null, 2));
+  // Owner-only permissions on dir + file — matches what AWS CLI does with
+  // ~/.aws/credentials. Stops other users on the same machine from reading
+  // the API key. mkdirSync's `mode` is only honoured for newly-created dirs,
+  // so we chmod afterwards too to also fix existing pre-secured installs.
+  fs.mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
+  try { fs.chmodSync(CONFIG_DIR, 0o700); } catch {}
+  fs.writeFileSync(CONFIG_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
+  try { fs.chmodSync(CONFIG_FILE, 0o600); } catch {}
 }