troxy-cli 1.8.4 → 1.8.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.8.4",
+  "version": "1.8.6",
   "description": "AI payment control — protect your agent's payments with policies",
   "type": "module",
   "bin": {

package/src/api.js

@@ -71,6 +71,8 @@ export const api = {
 
   // Evaluate + confirm (agent API key)
   evaluate: (body, apiKey) => request('POST', '/evaluate', { apiKey, body }),
+  evaluateEmail: (body, apiKey) => request('POST', '/evaluate/email', { apiKey, body }),
+  selfRevoke: (apiKey) => request('POST', '/mcp/self-revoke', { apiKey }),
   confirmPayment: (auditId, body, apiKey) => request('POST', `/payments/${auditId}/confirm`, { apiKey, body }),
   waitApprovalStatus: (token) => request('GET', `/approvals/${encodeURIComponent(token)}/wait`),
 

package/src/mcp-server.js

@@ -7,6 +7,7 @@ import {
 import { loadConfig }      from './config.js';
 import { evaluatePayment, api } from './api.js';
 const confirmPayment = (auditId, body, apiKey) => api.confirmPayment(auditId, body, apiKey);
+const evaluateEmail   = (body, apiKey) => api.evaluateEmail(body, apiKey);
 
 export async function runMcp() {
   const config    = loadConfig();
@@ -38,7 +39,8 @@ export async function runMcp() {
         'If the decision is ESCALATE, the response includes an approval_token. Immediately call wait_for_payment_approval with that token; it polls automatically until the payment is approved or declined (up to 10 minutes). Once it returns approved, call evaluate_payment again with the same payment details PLUS the approval_token field. The second call will return ALLOW without re-escalating. ' +
         'If the decision is NOTIFY, proceed but the user will be notified. ' +
         'When calling evaluate_payment, use the merchant\'s domain name as merchant_name when available (e.g. "amazon.com", "indigobloom.co.il"); this ensures consistent matching against policies. ' +
-        'After every ALLOW or NOTIFY decision, attempt the payment, then call confirm_payment with the audit_id and the outcome (success/failed/cancelled). Always include a reason when the charge fails.',
+        'After every ALLOW or NOTIFY decision, attempt the payment, then call confirm_payment with the audit_id and the outcome (success/failed/cancelled). Always include a reason when the charge fails. ' +
+        'You MUST also call the evaluate_email tool before sending any email on the user\'s behalf. Never send an email without first receiving an ALLOW or NOTIFY decision. If BLOCK, do not send it. If ESCALATE, call wait_for_payment_approval with the returned approval_token (same wait mechanism payments use), then call evaluate_email again with the approval_token once approved.',
     },
     { capabilities: { tools: {} } },
   );
@@ -133,6 +135,34 @@ export async function runMcp() {
           },
         },
       },
+      {
+        name: 'evaluate_email',
+        description:
+          'Evaluate whether sending an email should be allowed, blocked, or escalated ' +
+          'based on your Troxy policies. Call this before sending any email on the user\'s behalf.',
+        inputSchema: {
+          type: 'object',
+          required: ['recipient'],
+          properties: {
+            recipient: {
+              type: 'string',
+              description: 'Email address of the recipient',
+            },
+            subject: {
+              type: 'string',
+              description: 'Subject line of the email (optional)',
+            },
+            agent: {
+              type: 'string',
+              description: 'Name of the agent sending the email (optional)',
+            },
+            approval_token: {
+              type: 'string',
+              description: 'Approval token from a previous ESCALATE response. Include this to proceed after the user has approved.',
+            },
+          },
+        },
+      },
     ],
   }));
 
@@ -203,6 +233,45 @@ export async function runMcp() {
       }
     }
 
+    if (toolName === 'evaluate_email') {
+      if (agentName && !args.agent) args.agent = agentName;
+      let result;
+      try {
+        result = await evaluateEmail(args, apiKey);
+      } catch (err) {
+        return {
+          content: [{ type: 'text', text: `Troxy error: ${err.message}` }],
+          isError: true,
+        };
+      }
+      if (result.error) {
+        return {
+          content: [{ type: 'text', text: `Troxy error: ${result.error}` }],
+          isError: true,
+        };
+      }
+      const { decision, reason, audit_id, approval_token } = result;
+      let emailText;
+      switch (decision) {
+        case 'ALLOW':
+        case 'NOTIFY':
+          emailText = `✓ Email approved.${reason ? ` ${reason}` : ''} You may send it now. (audit: ${audit_id})`;
+          break;
+        case 'BLOCK':
+          emailText = `✗ Email blocked.${reason ? ` ${reason}` : ''} Do not send it. (audit: ${audit_id})`;
+          break;
+        case 'ESCALATE':
+          emailText = `⏳ Email requires human approval; a request has been sent to the account owner.\n\nApproval token: ${approval_token}\n\nNow call wait_for_payment_approval(approval_token="${approval_token}") to automatically detect approval, then call evaluate_email again with the same recipient/subject PLUS this approval_token. Do not send until it returns approved.`;
+          break;
+        default:
+          emailText = JSON.stringify(result);
+      }
+      return {
+        content: [{ type: 'text', text: emailText }],
+        isError: decision === 'BLOCK',
+      };
+    }
+
     if (toolName !== 'evaluate_payment') {
       throw new Error(`Unknown tool: ${toolName}`);
     }

package/src/uninstall.js

@@ -4,6 +4,7 @@ import path         from 'path';
 import { execSync } from 'child_process';
 import readline     from 'readline';
 import { loadConfig } from './config.js';
+import { api }        from './api.js';
 
 const MCP_CLIENTS = [
   {
@@ -107,12 +108,21 @@ export async function runUninstall() {
     console.log('none found');
   }
 
-  // 3. Warn about API key (requires login to revoke — user must do it from dashboard)
+  // 3. Revoke the API key. /mcp/self-revoke only lets a key revoke the exact
+  // token it authenticates as — it can't touch or list any other token — so
+  // this doesn't need a login/JWT, the key on disk is enough.
   const cfg = loadConfig();
   if (cfg?.apiKey) {
     const prefix = cfg.apiKey.slice(0, 12) + '...';
-    console.log(`\n  ⚠  API key ${prefix} was NOT revoked automatically.`);
-    console.log('     Go to dash.troxy.io → Settings → API Keys to revoke it.\n');
+    process.stdout.write(`  Revoking API key ${prefix}...  `);
+    try {
+      await api.selfRevoke(cfg.apiKey);
+      console.log('✓');
+    } catch (err) {
+      console.log('✗');
+      console.log(`     Couldn't revoke automatically (${err.message}).`);
+      console.log('     Go to dash.troxy.io → Settings → API Keys to revoke it.\n');
+    }
   }
 
   // 4. Delete ~/.troxy config