troxy-cli 1.8.6 → 1.8.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.8.6",
+  "version": "1.8.7",
   "description": "AI payment control — protect your agent's payments with policies",
   "type": "module",
   "bin": {

package/src/mcp-server.js

@@ -40,7 +40,7 @@ export async function runMcp() {
         'If the decision is NOTIFY, proceed but the user will be notified. ' +
         'When calling evaluate_payment, use the merchant\'s domain name as merchant_name when available (e.g. "amazon.com", "indigobloom.co.il"); this ensures consistent matching against policies. ' +
         'After every ALLOW or NOTIFY decision, attempt the payment, then call confirm_payment with the audit_id and the outcome (success/failed/cancelled). Always include a reason when the charge fails. ' +
-        'You MUST also call the evaluate_email tool before sending any email on the user\'s behalf. Never send an email without first receiving an ALLOW or NOTIFY decision. If BLOCK, do not send it. If ESCALATE, call wait_for_payment_approval with the returned approval_token (same wait mechanism payments use), then call evaluate_email again with the approval_token once approved.',
+        'You MUST also call the evaluate_email tool before sending any email on the user\'s behalf. Always include the full plaintext "body" argument, exactly as you intend to send it — Troxy policies inspect the body for secrets and confidential content, and cannot do so if it is omitted, summarized, or truncated. Never send an email without first receiving an ALLOW or NOTIFY decision. If BLOCK, do not send it. If ESCALATE, call wait_for_payment_approval with the returned approval_token (same wait mechanism payments use), then call evaluate_email again with the approval_token once approved.',
     },
     { capabilities: { tools: {} } },
   );
@@ -142,7 +142,7 @@ export async function runMcp() {
           'based on your Troxy policies. Call this before sending any email on the user\'s behalf.',
         inputSchema: {
           type: 'object',
-          required: ['recipient'],
+          required: ['recipient', 'body'],
           properties: {
             recipient: {
               type: 'string',
@@ -152,6 +152,13 @@ export async function runMcp() {
               type: 'string',
               description: 'Subject line of the email (optional)',
             },
+            body: {
+              type: 'string',
+              description:
+                'The full plaintext body of the email, exactly as it will be sent. REQUIRED — ' +
+                'Troxy policies scan this to catch secrets, credentials, or confidential content ' +
+                'before the email goes out. Never omit, summarize, or truncate it.',
+            },
             agent: {
               type: 'string',
               description: 'Name of the agent sending the email (optional)',
@@ -261,7 +268,7 @@ export async function runMcp() {
           emailText = `✗ Email blocked.${reason ? ` ${reason}` : ''} Do not send it. (audit: ${audit_id})`;
           break;
         case 'ESCALATE':
-          emailText = `⏳ Email requires human approval; a request has been sent to the account owner.\n\nApproval token: ${approval_token}\n\nNow call wait_for_payment_approval(approval_token="${approval_token}") to automatically detect approval, then call evaluate_email again with the same recipient/subject PLUS this approval_token. Do not send until it returns approved.`;
+          emailText = `⏳ Email requires human approval; a request has been sent to the account owner.\n\nApproval token: ${approval_token}\n\nNow call wait_for_payment_approval(approval_token="${approval_token}") to automatically detect approval, then call evaluate_email again with the same recipient/subject/body PLUS this approval_token. Do not send until it returns approved.`;
           break;
         default:
           emailText = JSON.stringify(result);