squeezr-ai 1.14.0 → 1.14.2

package/bin/squeezr.js

@@ -190,10 +190,16 @@ function setupWindows() {
   console.log('Setting up Squeezr for Windows...\n')
 
   // 1. Set env vars permanently via setx (user scope, no admin needed)
+  const port = process.env.SQUEEZR_PORT || 8080
+  const mitmPort = Number(port) + 1
+  const caPath = path.join(os.homedir(), '.squeezr', 'mitm-ca', 'ca.crt')
   const vars = {
-    ANTHROPIC_BASE_URL: 'http://localhost:8080',
-    openai_base_url: 'http://localhost:8080',
-    GEMINI_API_BASE_URL: 'http://localhost:8080',
+    ANTHROPIC_BASE_URL: `http://localhost:${port}`,
+    openai_base_url: `http://localhost:${port}`,
+    GEMINI_API_BASE_URL: `http://localhost:${port}`,
+    HTTPS_PROXY: `http://localhost:${mitmPort}`,
+    // Node.js does NOT use the Windows Certificate Store — this makes Codex (Node.js) trust the MITM CA
+    NODE_EXTRA_CA_CERTS: caPath,
   }
   for (const [key, value] of Object.entries(vars)) {
     try {
@@ -277,18 +283,49 @@ function setupWindows() {
   console.log(`  [ok] Squeezr started in background (pid ${child.pid})`)
   console.log(`  [ok] Logs → ${logFile}`)
 
-  console.log(`
+  // 4. Trust MITM CA in Windows Certificate Store (for native apps like browsers)
+  //    Node.js apps (Codex) use NODE_EXTRA_CA_CERTS set above instead.
+  //    The CA is generated on first proxy start — wait briefly for it to appear
+  const waitForCa = (retries = 10, interval = 500) => new Promise(resolve => {
+    const check = (n) => {
+      if (fs.existsSync(caPath)) return resolve(true)
+      if (n <= 0) return resolve(false)
+      setTimeout(() => check(n - 1), interval)
+    }
+    check(retries)
+  })
+
+  waitForCa().then(found => {
+    if (!found) {
+      console.log(`  [warn] MITM CA not found yet — run 'squeezr setup' again after first start`)
+      printDone()
+      return
+    }
+    try {
+      execSync(`certutil -addstore -f Root "${caPath}"`, { stdio: 'pipe' })
+      console.log(`  [ok] MITM CA trusted in Windows Certificate Store (Codex TLS interception ready)`)
+    } catch {
+      console.log(`  [warn] Could not trust MITM CA — run as Administrator or trust manually:`)
+      console.log(`         certutil -addstore -f Root "${caPath}"`)
+    }
+    printDone()
+  })
+
+  function printDone() {
+    console.log(`
 Done!
 
-  Squeezr is running on http://localhost:8080
+  Squeezr is running on http://localhost:${port}
+  MITM proxy on http://localhost:${mitmPort} (Codex TLS interception)
   All CLIs (Claude Code, Codex, Aider, Gemini, Ollama) are configured.
 
-  Restart your terminal and Claude Code once for the env vars to take effect.
+  Restart your terminal once for the env vars to take effect.
   After that, everything is automatic — Squeezr starts silently on every login.
 
   squeezr status   — check it's running
   squeezr gain     — see token savings
 `)
+  }
 }
 
 function setupUnix() {

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.14.0";
+export declare const VERSION = "1.14.2";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = '1.14.0';
+export const VERSION = '1.14.2';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "squeezr-ai",
-  "version": "1.14.0",
+  "version": "1.14.2",
   "description": "AI proxy that compresses Claude Code, Codex, Aider, Gemini CLI and Ollama context windows to save thousands of tokens per session",
   "keywords": [
     "claude",