troxy-cli 1.7.2 → 1.7.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.7.2",
+  "version": "1.7.4",
   "description": "AI payment control — protect your agent's payments with policies",
   "type": "module",
   "bin": {

package/src/api.js

@@ -58,7 +58,7 @@ export const api = {
   waitApprovalStatus: (token) => request('GET', `/approvals/${encodeURIComponent(token)}/wait`),
 
   // MCP heartbeat (agent API key)
-  mcpHeartbeat: (apiKey, agentName) => request('POST', '/mcp/heartbeat', { apiKey, body: agentName ? { agent_name: agentName } : undefined }),
+  mcpHeartbeat: (apiKey, agentName, force) => request('POST', '/mcp/heartbeat', { apiKey, body: agentName ? { agent_name: agentName, force_name: !!force } : undefined }),
 
   // MCP status (agent API key — no login needed)
   mcpStatus:  (apiKey) => request('GET', '/mcp/status', { apiKey }),

package/src/daemon.js

@@ -19,14 +19,17 @@ export async function runDaemon() {
 
   const { apiKey, agentName } = cfg;
 
-  const beat = () =>
-    api.mcpHeartbeat(apiKey, agentName)
+  // `force` pushes the config name as the authoritative display name. We only
+  // do this on the FIRST beat after (re)start, so a `troxy restart` overrides
+  // the dashboard, while regular beats never clobber a dashboard rename.
+  const beat = (force) =>
+    api.mcpHeartbeat(apiKey, agentName, force)
       .then(() => process.stderr.write(`[troxy-daemon] heartbeat ok\n`))
       .catch(err => process.stderr.write(`[troxy-daemon] heartbeat failed: ${err.message}\n`));
 
   process.stderr.write(`[troxy-daemon] starting (agent: ${agentName || 'unnamed'})\n`);
-  await beat();
-  setInterval(beat, INTERVAL_MS);
+  await beat(true);                       // startup beat: config name wins
+  setInterval(() => beat(false), INTERVAL_MS);  // regular beats: don't touch name
 
   // Keep process alive indefinitely
   process.stdin.resume();

package/src/uninstall.js

@@ -3,6 +3,7 @@ import os           from 'os';
 import path         from 'path';
 import { execSync } from 'child_process';
 import readline     from 'readline';
+import { loadConfig } from './config.js';
 
 const MCP_CLIENTS = [
   {
@@ -105,7 +106,15 @@ export async function runUninstall() {
     console.log('none found');
   }
 
-  // 3. Delete ~/.troxy config
+  // 3. Warn about API key (requires login to revoke — user must do it from dashboard)
+  const cfg = loadConfig();
+  if (cfg?.apiKey) {
+    const prefix = cfg.apiKey.slice(0, 12) + '...';
+    console.log(`\n  ⚠  API key ${prefix} was NOT revoked automatically.`);
+    console.log('     Go to dash.troxy.io → Settings → API Keys to revoke it.\n');
+  }
+
+  // 4. Delete ~/.troxy config
   process.stdout.write('  Removing config (~/.troxy)...  ');
   const configDir = path.join(os.homedir(), '.troxy');
   if (fs.existsSync(configDir)) {
@@ -115,5 +124,14 @@ export async function runUninstall() {
     console.log('not found');
   }
 
+  // 5. Remove npm package
+  process.stdout.write('  Uninstalling troxy CLI...      ');
+  try {
+    execSync('npm uninstall -g troxy-cli 2>/dev/null || npm uninstall -g troxy 2>/dev/null', { stdio: 'pipe' });
+    console.log('✓');
+  } catch {
+    console.log('skipped (run manually: sudo npm uninstall -g troxy-cli)');
+  }
+
   console.log('\n  Troxy removed. Your payments are no longer protected by Troxy.\n');
 }