troxy-cli 1.8.7 → 1.8.9

package/bin/troxy.js

@@ -510,6 +510,8 @@ switch (command) {
 
   Setup (one time, API key required)
     troxy init --key <api-key>     Connect this machine as an MCP + save key
+    troxy init --key <api-key> --name "My Agent"   Same, no interactive prompt
+                                    (for cloud/scripted agents that can't answer stdin)
     troxy restart                  Restart the MCP background service
     troxy uninstall                Remove Troxy from this machine
     troxy status                   API health + MCP status (no login needed)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "troxy-cli",
-  "version": "1.8.7",
+  "version": "1.8.9",
   "description": "AI payment control — protect your agent's payments with policies",
   "type": "module",
   "bin": {

package/src/api.js

@@ -72,6 +72,7 @@ export const api = {
   // Evaluate + confirm (agent API key)
   evaluate: (body, apiKey) => request('POST', '/evaluate', { apiKey, body }),
   evaluateEmail: (body, apiKey) => request('POST', '/evaluate/email', { apiKey, body }),
+  evaluateLogin: (body, apiKey) => request('POST', '/evaluate/login', { apiKey, body }),
   selfRevoke: (apiKey) => request('POST', '/mcp/self-revoke', { apiKey }),
   confirmPayment: (auditId, body, apiKey) => request('POST', `/payments/${auditId}/confirm`, { apiKey, body }),
   waitApprovalStatus: (token) => request('GET', `/approvals/${encodeURIComponent(token)}/wait`),

package/src/init.js

@@ -121,7 +121,7 @@ const MCP_CLIENTS = [
   },
 ];
 
-export async function runInit({ key } = {}) {
+export async function runInit({ key, name } = {}) {
   if (!key || !key.startsWith('txy-')) {
     console.error('\n  Error: --key is required and must start with txy-');
     console.error('  Usage: npx troxy-cli init --key txy-...\n');
@@ -155,10 +155,19 @@ export async function runInit({ key } = {}) {
     console.log('✓');
   }
 
-  // Ask for agent name (default to hostname so users don't get stuck)
+  // Ask for agent name (default to hostname so users don't get stuck) — unless
+  // --name was passed, in which case skip the interactive prompt entirely.
+  // Needed for cloud agents (Base44 Superagent, etc.) that can't reliably
+  // respond to a stdin prompt and would otherwise hang init indefinitely.
   const defaultName = os.hostname() || 'my-agent';
-  const answer = await prompt(`  Name this agent (press Enter for "${defaultName}"): `);
-  const agentName = answer || defaultName;
+  let agentName;
+  if (name) {
+    agentName = name;
+    console.log(`  Naming this agent "${agentName}"`);
+  } else {
+    const answer = await prompt(`  Name this agent (press Enter for "${defaultName}"): `);
+    agentName = answer || defaultName;
+  }
 
   // Save config
   saveConfig({ apiKey: key, agentName });

package/src/mcp-server.js

@@ -8,6 +8,7 @@ import { loadConfig }      from './config.js';
 import { evaluatePayment, api } from './api.js';
 const confirmPayment = (auditId, body, apiKey) => api.confirmPayment(auditId, body, apiKey);
 const evaluateEmail   = (body, apiKey) => api.evaluateEmail(body, apiKey);
+const evaluateLogin   = (body, apiKey) => api.evaluateLogin(body, apiKey);
 
 export async function runMcp() {
   const config    = loadConfig();
@@ -40,7 +41,8 @@ export async function runMcp() {
         'If the decision is NOTIFY, proceed but the user will be notified. ' +
         'When calling evaluate_payment, use the merchant\'s domain name as merchant_name when available (e.g. "amazon.com", "indigobloom.co.il"); this ensures consistent matching against policies. ' +
         'After every ALLOW or NOTIFY decision, attempt the payment, then call confirm_payment with the audit_id and the outcome (success/failed/cancelled). Always include a reason when the charge fails. ' +
-        'You MUST also call the evaluate_email tool before sending any email on the user\'s behalf. Always include the full plaintext "body" argument, exactly as you intend to send it — Troxy policies inspect the body for secrets and confidential content, and cannot do so if it is omitted, summarized, or truncated. Never send an email without first receiving an ALLOW or NOTIFY decision. If BLOCK, do not send it. If ESCALATE, call wait_for_payment_approval with the returned approval_token (same wait mechanism payments use), then call evaluate_email again with the approval_token once approved.',
+        'You MUST also call the evaluate_email tool before sending any email on the user\'s behalf. Always include the full plaintext "body" argument, exactly as you intend to send it — Troxy policies inspect the body for secrets and confidential content, and cannot do so if it is omitted, summarized, or truncated. Never send an email without first receiving an ALLOW or NOTIFY decision. If BLOCK, do not send it. If ESCALATE, call wait_for_payment_approval with the returned approval_token (same wait mechanism payments use), then call evaluate_email again with the approval_token once approved. ' +
+        'You MUST also call the evaluate_login tool before logging into or signing up for any website on the user\'s behalf, giving the site\'s domain and whether it is a login or a signup. Never submit login credentials or a signup form without first receiving an ALLOW or NOTIFY decision. If BLOCK, do not proceed. If ESCALATE, call wait_for_payment_approval with the returned approval_token, then call evaluate_login again with the approval_token once approved.',
     },
     { capabilities: { tools: {} } },
   );
@@ -170,6 +172,35 @@ export async function runMcp() {
           },
         },
       },
+      {
+        name: 'evaluate_login',
+        description:
+          'Evaluate whether logging into or signing up for a website should be allowed, blocked, or escalated ' +
+          'based on your Troxy policies. Call this before submitting login credentials or a signup form on the user\'s behalf.',
+        inputSchema: {
+          type: 'object',
+          required: ['site', 'login_action'],
+          properties: {
+            site: {
+              type: 'string',
+              description: 'The domain of the site being logged into or signed up for, e.g. "example.com"',
+            },
+            login_action: {
+              type: 'string',
+              enum: ['login', 'signup'],
+              description: '"login" if authenticating to an existing account, "signup" if creating a new account',
+            },
+            agent: {
+              type: 'string',
+              description: 'Name of the agent performing the login/signup (optional)',
+            },
+            approval_token: {
+              type: 'string',
+              description: 'Approval token from a previous ESCALATE response. Include this to proceed after the user has approved.',
+            },
+          },
+        },
+      },
     ],
   }));
 
@@ -279,6 +310,46 @@ export async function runMcp() {
       };
     }
 
+    if (toolName === 'evaluate_login') {
+      if (agentName && !args.agent) args.agent = agentName;
+      let result;
+      try {
+        result = await evaluateLogin(args, apiKey);
+      } catch (err) {
+        return {
+          content: [{ type: 'text', text: `Troxy error: ${err.message}` }],
+          isError: true,
+        };
+      }
+      if (result.error) {
+        return {
+          content: [{ type: 'text', text: `Troxy error: ${result.error}` }],
+          isError: true,
+        };
+      }
+      const { decision, reason, audit_id, approval_token } = result;
+      const verb = args.login_action === 'signup' ? 'Signup' : 'Login';
+      let loginText;
+      switch (decision) {
+        case 'ALLOW':
+        case 'NOTIFY':
+          loginText = `✓ ${verb} approved.${reason ? ` ${reason}` : ''} You may proceed. (audit: ${audit_id})`;
+          break;
+        case 'BLOCK':
+          loginText = `✗ ${verb} blocked.${reason ? ` ${reason}` : ''} Do not proceed. (audit: ${audit_id})`;
+          break;
+        case 'ESCALATE':
+          loginText = `⏳ ${verb} requires human approval; a request has been sent to the account owner.\n\nApproval token: ${approval_token}\n\nNow call wait_for_payment_approval(approval_token="${approval_token}") to automatically detect approval, then call evaluate_login again with the same site/login_action PLUS this approval_token. Do not proceed until it returns approved.`;
+          break;
+        default:
+          loginText = JSON.stringify(result);
+      }
+      return {
+        content: [{ type: 'text', text: loginText }],
+        isError: decision === 'BLOCK',
+      };
+    }
+
     if (toolName !== 'evaluate_payment') {
       throw new Error(`Unknown tool: ${toolName}`);
     }

package/src/tests/init.test.js

@@ -20,3 +20,30 @@ describe('flag validation', () => {
     assert.ok(key.startsWith('txy-'));
   });
 });
+
+describe('agent name resolution (--name flag)', () => {
+  // Mirrors the branch added to runInit in src/init.js: a cloud/scripted agent
+  // (Base44 Superagent, etc.) can't answer an interactive stdin prompt, so
+  // `troxy init --key ... --name "X"` must skip the prompt entirely rather
+  // than hang waiting for input that will never come — found live testing a
+  // real Base44 agent against this exact CLI (TXY-128).
+  function resolveAgentName(name, promptAnswer, defaultName) {
+    if (name) return name;
+    return promptAnswer || defaultName;
+  }
+
+  it('uses --name directly, without ever consulting the prompt answer', () => {
+    const agentName = resolveAgentName('Lyra SuperAgent', undefined, 'some-hostname');
+    assert.equal(agentName, 'Lyra SuperAgent');
+  });
+
+  it('falls back to the interactive prompt answer when --name is not given', () => {
+    const agentName = resolveAgentName(undefined, 'Chosen Name', 'some-hostname');
+    assert.equal(agentName, 'Chosen Name');
+  });
+
+  it('falls back to the hostname default when neither --name nor a prompt answer is given', () => {
+    const agentName = resolveAgentName(undefined, '', 'some-hostname');
+    assert.equal(agentName, 'some-hostname');
+  });
+});