squeezr-ai 1.14.0 → 1.14.4

package/bin/squeezr.js

@@ -190,10 +190,16 @@ function setupWindows() {
   console.log('Setting up Squeezr for Windows...\n')
 
   // 1. Set env vars permanently via setx (user scope, no admin needed)
+  const port = process.env.SQUEEZR_PORT || 8080
+  const mitmPort = Number(port) + 1
+  const caPath = path.join(os.homedir(), '.squeezr', 'mitm-ca', 'ca.crt')
   const vars = {
-    ANTHROPIC_BASE_URL: 'http://localhost:8080',
-    openai_base_url: 'http://localhost:8080',
-    GEMINI_API_BASE_URL: 'http://localhost:8080',
+    ANTHROPIC_BASE_URL: `http://localhost:${port}`,
+    openai_base_url: `http://localhost:${port}`,
+    GEMINI_API_BASE_URL: `http://localhost:${port}`,
+    HTTPS_PROXY: `http://localhost:${mitmPort}`,
+    // Node.js does NOT use the Windows Certificate Store — this makes Codex (Node.js) trust the MITM CA
+    NODE_EXTRA_CA_CERTS: caPath,
   }
   for (const [key, value] of Object.entries(vars)) {
     try {
@@ -277,18 +283,49 @@ function setupWindows() {
   console.log(`  [ok] Squeezr started in background (pid ${child.pid})`)
   console.log(`  [ok] Logs → ${logFile}`)
 
-  console.log(`
+  // 4. Trust MITM CA in Windows Certificate Store (for native apps like browsers)
+  //    Node.js apps (Codex) use NODE_EXTRA_CA_CERTS set above instead.
+  //    The CA is generated on first proxy start — wait briefly for it to appear
+  const waitForCa = (retries = 10, interval = 500) => new Promise(resolve => {
+    const check = (n) => {
+      if (fs.existsSync(caPath)) return resolve(true)
+      if (n <= 0) return resolve(false)
+      setTimeout(() => check(n - 1), interval)
+    }
+    check(retries)
+  })
+
+  waitForCa().then(found => {
+    if (!found) {
+      console.log(`  [warn] MITM CA not found yet — run 'squeezr setup' again after first start`)
+      printDone()
+      return
+    }
+    try {
+      execSync(`certutil -addstore -f Root "${caPath}"`, { stdio: 'pipe' })
+      console.log(`  [ok] MITM CA trusted in Windows Certificate Store (Codex TLS interception ready)`)
+    } catch {
+      console.log(`  [warn] Could not trust MITM CA — run as Administrator or trust manually:`)
+      console.log(`         certutil -addstore -f Root "${caPath}"`)
+    }
+    printDone()
+  })
+
+  function printDone() {
+    console.log(`
 Done!
 
-  Squeezr is running on http://localhost:8080
+  Squeezr is running on http://localhost:${port}
+  MITM proxy on http://localhost:${mitmPort} (Codex TLS interception)
   All CLIs (Claude Code, Codex, Aider, Gemini, Ollama) are configured.
 
-  Restart your terminal and Claude Code once for the env vars to take effect.
+  Restart your terminal once for the env vars to take effect.
   After that, everything is automatic — Squeezr starts silently on every login.
 
   squeezr status   — check it's running
   squeezr gain     — see token savings
 `)
+  }
 }
 
 function setupUnix() {

package/dist/compressor.js

@@ -25,7 +25,9 @@ async function compressWithHaiku(text, apiKey) {
     // The Anthropic SDK accepts both: apiKey → x-api-key header,
     // authToken → Authorization: Bearer header.
     const authOpts = apiKey.startsWith('sk-') ? { apiKey } : { authToken: apiKey };
-    const client = new Anthropic(authOpts);
+    // Force real API URL — ANTHROPIC_BASE_URL points to this proxy, which would cause
+    // infinite recursion if we let the SDK inherit it from the environment.
+    const client = new Anthropic({ ...authOpts, baseURL: 'https://api.anthropic.com' });
     const resp = await client.messages.create({
         model: 'claude-haiku-4-5-20251001',
         max_tokens: 300,

package/dist/server.js

@@ -1,3 +1,6 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
 import { Hono } from 'hono';
 import { stream } from 'hono/streaming';
 import { config } from './config.js';
@@ -13,6 +16,15 @@ const ANTHROPIC_API = 'https://api.anthropic.com';
 const OPENAI_API = 'https://api.openai.com';
 const GOOGLE_API = 'https://generativelanguage.googleapis.com';
 const SKIP_REQ_HEADERS = new Set(['host', 'content-length', 'transfer-encoding', 'connection']);
+function readCodexToken() {
+    try {
+        const d = JSON.parse(readFileSync(join(homedir(), '.codex', 'auth.json'), 'utf-8'));
+        return d?.tokens?.access_token ?? null;
+    }
+    catch {
+        return null;
+    }
+}
 const SKIP_RESP_HEADERS = new Set(['content-encoding', 'transfer-encoding', 'connection', 'content-length']);
 export const stats = new Stats();
 function forwardHeaders(headers) {
@@ -245,13 +257,23 @@ app.post('/oauth/token', async (c) => {
 });
 // ── Catch-all ─────────────────────────────────────────────────────────────────
 app.all('*', async (c) => {
-    const upstream = detectUpstream(c.req.raw.headers);
+    let upstream = detectUpstream(c.req.raw.headers);
     const url = new URL(c.req.url);
-    const NEEDS_V1 = new Set(['/models', '/engines', '/files', '/embeddings', '/moderations', '/completions', '/edits']);
+    const NEEDS_V1 = new Set(['/models', '/engines', '/files', '/embeddings', '/moderations', '/completions', '/edits', '/responses']);
     const pathname = NEEDS_V1.has(url.pathname) ? `/v1${url.pathname}` : url.pathname;
+    // /responses is exclusively an OpenAI Codex endpoint — override upstream regardless
+    // of what detectUpstream inferred from headers (Codex sends no auth to custom base URLs).
+    if (pathname === '/v1/responses')
+        upstream = OPENAI_API;
     const targetUrl = `${upstream}${pathname}${url.search}`;
     const body = await c.req.arrayBuffer();
     const fwdHeaders = forwardHeaders(c.req.raw.headers);
+    // Inject Codex OAuth token from ~/.codex/auth.json when no auth header present.
+    if (upstream === OPENAI_API && !fwdHeaders['authorization']) {
+        const codexToken = readCodexToken();
+        if (codexToken)
+            fwdHeaders['authorization'] = `Bearer ${codexToken}`;
+    }
     const resp = await fetch(targetUrl, {
         method: c.req.method,
         headers: fwdHeaders,

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.14.0";
+export declare const VERSION = "1.14.4";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = '1.14.0';
+export const VERSION = '1.14.4';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "squeezr-ai",
-  "version": "1.14.0",
+  "version": "1.14.4",
   "description": "AI proxy that compresses Claude Code, Codex, Aider, Gemini CLI and Ollama context windows to save thousands of tokens per session",
   "keywords": [
     "claude",