squeezr-ai 1.13.1 → 1.14.2

package/README.md

@@ -564,8 +564,30 @@ The installer configures Squeezr to start automatically on login:
 | macOS | launchd (`~/Library/LaunchAgents/com.squeezr.plist`) | Shell auto-heal |
 | Linux | systemd user service (`~/.config/systemd/user/squeezr.service`) | Shell auto-heal |
 | Windows | Task Scheduler (runs at login, restarts on failure) | — |
+| Windows (robust) | **NSSM Windows Service** (auto-restart on crash) | — |
 | **WSL2** | systemd → Task Scheduler (cascade) | Shell auto-heal |
 
+### Windows: NSSM (recommended over Task Scheduler)
+
+The built-in Task Scheduler setup requires admin on every reinstall and does **not** restart Squeezr if it crashes mid-session (e.g. due to `ECONNRESET`). For a more robust setup, use [NSSM](https://nssm.cc) to run Squeezr as a proper Windows service:
+
+```powershell
+# Install NSSM
+winget install nssm
+
+# Create the service (run as Administrator, adjust paths if needed)
+$node   = (where.exe node | Select-Object -First 1)
+$script = "$(npm root -g)\squeezr-ai\bin\squeezr.js"
+nssm install SqueezrProxy $node $script
+nssm set SqueezrProxy AppExit Default Restart
+nssm set SqueezrProxy AppRestartDelay 3000
+nssm start SqueezrProxy
+```
+
+NSSM gives you: auto-start on boot, automatic restart on crash, stdout/stderr logs, and control via `services.msc`.
+
+See [NSSM_WINDOWS_SERVICE.md](./NSSM_WINDOWS_SERVICE.md) for the full guide including log setup, troubleshooting, and uninstall steps.
+
 ### WSL2 support
 
 `squeezr setup` detects WSL2 automatically and configures both sides:

package/bin/squeezr.js

@@ -190,10 +190,16 @@ function setupWindows() {
   console.log('Setting up Squeezr for Windows...\n')
 
   // 1. Set env vars permanently via setx (user scope, no admin needed)
+  const port = process.env.SQUEEZR_PORT || 8080
+  const mitmPort = Number(port) + 1
+  const caPath = path.join(os.homedir(), '.squeezr', 'mitm-ca', 'ca.crt')
   const vars = {
-    ANTHROPIC_BASE_URL: 'http://localhost:8080',
-    openai_base_url: 'http://localhost:8080',
-    GEMINI_API_BASE_URL: 'http://localhost:8080',
+    ANTHROPIC_BASE_URL: `http://localhost:${port}`,
+    openai_base_url: `http://localhost:${port}`,
+    GEMINI_API_BASE_URL: `http://localhost:${port}`,
+    HTTPS_PROXY: `http://localhost:${mitmPort}`,
+    // Node.js does NOT use the Windows Certificate Store — this makes Codex (Node.js) trust the MITM CA
+    NODE_EXTRA_CA_CERTS: caPath,
   }
   for (const [key, value] of Object.entries(vars)) {
     try {
@@ -204,29 +210,65 @@ function setupWindows() {
     }
   }
 
-  // 2. Register Task Scheduler with hidden window so no console pops up on login.
-  // The action runs: powershell -WindowStyle Hidden -Command "node dist/index.js"
-  const taskName = 'Squeezr'
-  const nodeArg = `${nodeExe} \`"${distIndex}\`"`
-  const ps = [
-    `$e = Get-ScheduledTask -TaskName '${taskName}' -ErrorAction SilentlyContinue`,
-    `if ($e) { Unregister-ScheduledTask -TaskName '${taskName}' -Confirm:$false }`,
-    `$a = New-ScheduledTaskAction -Execute 'powershell.exe' -Argument '-WindowStyle Hidden -NonInteractive -Command "${nodeArg}"' -WorkingDirectory '${ROOT}'`,
-    `$t = New-ScheduledTaskTrigger -AtLogon`,
-    `$s = New-ScheduledTaskSettingsSet -ExecutionTimeLimit 0 -RestartCount 5 -RestartInterval (New-TimeSpan -Minutes 1)`,
-    `Register-ScheduledTask -TaskName '${taskName}' -Action $a -Trigger $t -Settings $s -RunLevel Highest -Force | Out-Null`,
-  ].join('; ')
+  // 2. Auto-start: try NSSM (Windows service, survives crashes) → fallback to Task Scheduler
+  const logDir = path.join(os.homedir(), '.squeezr')
+  const serviceName = 'SqueezrProxy'
+  let autoStartOk = false
 
-  try {
-    execSync(`powershell -NoProfile -Command "${ps}"`, { stdio: 'pipe' })
-    console.log(`  [ok] Auto-start registered in Task Scheduler (hidden, starts on login)`)
-  } catch {
-    console.log(`  [warn] Task Scheduler failed — run as admin for auto-start on login`)
+  const nssmAvailable = (() => {
+    try { execSync('where nssm', { stdio: 'pipe' }); return true } catch { return false }
+  })()
+
+  if (nssmAvailable) {
+    try {
+      // Remove existing service if present (ignore errors)
+      try { execSync(`nssm stop ${serviceName}`, { stdio: 'pipe' }) } catch {}
+      try { execSync(`nssm remove ${serviceName} confirm`, { stdio: 'pipe' }) } catch {}
+
+      execSync(`nssm install ${serviceName} "${nodeExe}" "${distIndex}"`, { stdio: 'pipe' })
+      execSync(`nssm set ${serviceName} AppDirectory "${ROOT}"`, { stdio: 'pipe' })
+      execSync(`nssm set ${serviceName} AppStdout "${logDir}\\service-stdout.log"`, { stdio: 'pipe' })
+      execSync(`nssm set ${serviceName} AppStderr "${logDir}\\service-stderr.log"`, { stdio: 'pipe' })
+      execSync(`nssm set ${serviceName} AppRotateFiles 1`, { stdio: 'pipe' })
+      execSync(`nssm set ${serviceName} AppRotateSeconds 86400`, { stdio: 'pipe' })
+      execSync(`nssm set ${serviceName} AppExit Default Restart`, { stdio: 'pipe' })
+      execSync(`nssm set ${serviceName} AppRestartDelay 3000`, { stdio: 'pipe' })
+      execSync(`nssm set ${serviceName} Description "Squeezr AI token compression proxy on port 8080"`, { stdio: 'pipe' })
+      execSync(`nssm start ${serviceName}`, { stdio: 'pipe' })
+      console.log(`  [ok] Auto-start registered as Windows service via NSSM (auto-restart on crash)`)
+      autoStartOk = true
+    } catch (err) {
+      const msg = err.stderr?.toString() || err.message || ''
+      if (msg.includes('Access') || msg.includes('admin') || msg.includes('5')) {
+        console.log(`  [warn] NSSM requires admin — run as Administrator for service install`)
+      } else {
+        console.log(`  [warn] NSSM install failed: ${msg.trim().split('\n')[0]}`)
+      }
+    }
+  }
+
+  if (!autoStartOk) {
+    // Fallback: Task Scheduler (no crash recovery, but no admin needed for user tasks)
+    const taskName = 'Squeezr'
+    const nodeArg = `${nodeExe} \`"${distIndex}\`"`
+    const ps = [
+      `$e = Get-ScheduledTask -TaskName '${taskName}' -ErrorAction SilentlyContinue`,
+      `if ($e) { Unregister-ScheduledTask -TaskName '${taskName}' -Confirm:$false }`,
+      `$a = New-ScheduledTaskAction -Execute 'powershell.exe' -Argument '-WindowStyle Hidden -NonInteractive -Command "${nodeArg}"' -WorkingDirectory '${ROOT}'`,
+      `$t = New-ScheduledTaskTrigger -AtLogon`,
+      `$s = New-ScheduledTaskSettingsSet -ExecutionTimeLimit 0 -RestartCount 5 -RestartInterval (New-TimeSpan -Minutes 1)`,
+      `Register-ScheduledTask -TaskName '${taskName}' -Action $a -Trigger $t -Settings $s -RunLevel Highest -Force | Out-Null`,
+    ].join('; ')
+    try {
+      execSync(`powershell -NoProfile -Command "${ps}"`, { stdio: 'pipe' })
+      console.log(`  [ok] Auto-start registered in Task Scheduler (install NSSM for crash recovery)`)
+    } catch {
+      console.log(`  [warn] Auto-start failed — install NSSM or run as admin: https://nssm.cc`)
+    }
   }
 
   // 3. Start Squeezr right now as a detached background process (no window)
   //    Logs go to ~/.squeezr/squeezr.log
-  const logDir = path.join(os.homedir(), '.squeezr')
   const logFile = path.join(logDir, 'squeezr.log')
   fs.mkdirSync(logDir, { recursive: true })
   const logFd = fs.openSync(logFile, 'a')
@@ -241,18 +283,49 @@ function setupWindows() {
   console.log(`  [ok] Squeezr started in background (pid ${child.pid})`)
   console.log(`  [ok] Logs → ${logFile}`)
 
-  console.log(`
+  // 4. Trust MITM CA in Windows Certificate Store (for native apps like browsers)
+  //    Node.js apps (Codex) use NODE_EXTRA_CA_CERTS set above instead.
+  //    The CA is generated on first proxy start — wait briefly for it to appear
+  const waitForCa = (retries = 10, interval = 500) => new Promise(resolve => {
+    const check = (n) => {
+      if (fs.existsSync(caPath)) return resolve(true)
+      if (n <= 0) return resolve(false)
+      setTimeout(() => check(n - 1), interval)
+    }
+    check(retries)
+  })
+
+  waitForCa().then(found => {
+    if (!found) {
+      console.log(`  [warn] MITM CA not found yet — run 'squeezr setup' again after first start`)
+      printDone()
+      return
+    }
+    try {
+      execSync(`certutil -addstore -f Root "${caPath}"`, { stdio: 'pipe' })
+      console.log(`  [ok] MITM CA trusted in Windows Certificate Store (Codex TLS interception ready)`)
+    } catch {
+      console.log(`  [warn] Could not trust MITM CA — run as Administrator or trust manually:`)
+      console.log(`         certutil -addstore -f Root "${caPath}"`)
+    }
+    printDone()
+  })
+
+  function printDone() {
+    console.log(`
 Done!
 
-  Squeezr is running on http://localhost:8080
+  Squeezr is running on http://localhost:${port}
+  MITM proxy on http://localhost:${mitmPort} (Codex TLS interception)
   All CLIs (Claude Code, Codex, Aider, Gemini, Ollama) are configured.
 
-  Restart your terminal and Claude Code once for the env vars to take effect.
+  Restart your terminal once for the env vars to take effect.
   After that, everything is automatic — Squeezr starts silently on every login.
 
   squeezr status   — check it's running
   squeezr gain     — see token savings
 `)
+  }
 }
 
 function setupUnix() {

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.13.1";
+export declare const VERSION = "1.14.2";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = '1.13.1';
+export const VERSION = '1.14.2';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "squeezr-ai",
-  "version": "1.13.1",
+  "version": "1.14.2",
   "description": "AI proxy that compresses Claude Code, Codex, Aider, Gemini CLI and Ollama context windows to save thousands of tokens per session",
   "keywords": [
     "claude",