squeezr-ai 1.14.2 → 1.14.5

package/bin/squeezr.js

@@ -198,8 +198,9 @@ function setupWindows() {
     openai_base_url: `http://localhost:${port}`,
     GEMINI_API_BASE_URL: `http://localhost:${port}`,
     HTTPS_PROXY: `http://localhost:${mitmPort}`,
-    // Node.js does NOT use the Windows Certificate Store — this makes Codex (Node.js) trust the MITM CA
     NODE_EXTRA_CA_CERTS: caPath,
+    // Bypass MITM for OpenAI auth and non-Codex endpoints — only chatgpt.com needs interception
+    NO_PROXY: 'auth.openai.com,login.openai.com,api.openai.com,api.anthropic.com,generativelanguage.googleapis.com',
   }
   for (const [key, value] of Object.entries(vars)) {
     try {

package/dist/compressor.js

@@ -25,7 +25,9 @@ async function compressWithHaiku(text, apiKey) {
     // The Anthropic SDK accepts both: apiKey → x-api-key header,
     // authToken → Authorization: Bearer header.
     const authOpts = apiKey.startsWith('sk-') ? { apiKey } : { authToken: apiKey };
-    const client = new Anthropic(authOpts);
+    // Force real API URL — ANTHROPIC_BASE_URL points to this proxy, which would cause
+    // infinite recursion if we let the SDK inherit it from the environment.
+    const client = new Anthropic({ ...authOpts, baseURL: 'https://api.anthropic.com' });
     const resp = await client.messages.create({
         model: 'claude-haiku-4-5-20251001',
         max_tokens: 300,
@@ -35,7 +37,9 @@ async function compressWithHaiku(text, apiKey) {
 }
 async function compressWithGptMini(text, apiKey) {
     // apiKey can be a real key (sk-...) or an OAuth bearer token
-    const client = new OpenAI({ apiKey });
+    // Force real API URL — openai_base_url points to this proxy, which would cause
+    // infinite recursion if we let the SDK inherit it from the environment.
+    const client = new OpenAI({ apiKey, baseURL: 'https://api.openai.com/v1' });
     const resp = await client.chat.completions.create({
         model: 'gpt-4o-mini',
         max_tokens: 300,

package/dist/config.js

@@ -107,7 +107,8 @@ export class Config {
         if (!this.localEnabled)
             return false;
         const k = key.trim().toLowerCase();
-        return this.localDummyKeys.has(k) || (k.length > 0 && !k.startsWith('sk-') && !k.startsWith('aiza'));
+        // JWT OAuth tokens (Codex) start with 'eyj' — never route those to local
+        return this.localDummyKeys.has(k) || (k.length > 0 && !k.startsWith('sk-') && !k.startsWith('aiza') && !k.startsWith('eyj'));
     }
 }
 export const config = new Config();

package/dist/server.js

@@ -1,3 +1,6 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
 import { Hono } from 'hono';
 import { stream } from 'hono/streaming';
 import { config } from './config.js';
@@ -13,6 +16,15 @@ const ANTHROPIC_API = 'https://api.anthropic.com';
 const OPENAI_API = 'https://api.openai.com';
 const GOOGLE_API = 'https://generativelanguage.googleapis.com';
 const SKIP_REQ_HEADERS = new Set(['host', 'content-length', 'transfer-encoding', 'connection']);
+function readCodexToken() {
+    try {
+        const d = JSON.parse(readFileSync(join(homedir(), '.codex', 'auth.json'), 'utf-8'));
+        return d?.tokens?.access_token ?? null;
+    }
+    catch {
+        return null;
+    }
+}
 const SKIP_RESP_HEADERS = new Set(['content-encoding', 'transfer-encoding', 'connection', 'content-length']);
 export const stats = new Stats();
 function forwardHeaders(headers) {
@@ -245,13 +257,23 @@ app.post('/oauth/token', async (c) => {
 });
 // ── Catch-all ─────────────────────────────────────────────────────────────────
 app.all('*', async (c) => {
-    const upstream = detectUpstream(c.req.raw.headers);
+    let upstream = detectUpstream(c.req.raw.headers);
     const url = new URL(c.req.url);
-    const NEEDS_V1 = new Set(['/models', '/engines', '/files', '/embeddings', '/moderations', '/completions', '/edits']);
+    const NEEDS_V1 = new Set(['/models', '/engines', '/files', '/embeddings', '/moderations', '/completions', '/edits', '/responses']);
     const pathname = NEEDS_V1.has(url.pathname) ? `/v1${url.pathname}` : url.pathname;
+    // /responses is exclusively an OpenAI Codex endpoint — override upstream regardless
+    // of what detectUpstream inferred from headers (Codex sends no auth to custom base URLs).
+    if (pathname === '/v1/responses')
+        upstream = OPENAI_API;
     const targetUrl = `${upstream}${pathname}${url.search}`;
     const body = await c.req.arrayBuffer();
     const fwdHeaders = forwardHeaders(c.req.raw.headers);
+    // Inject Codex OAuth token from ~/.codex/auth.json when no auth header present.
+    if (upstream === OPENAI_API && !fwdHeaders['authorization']) {
+        const codexToken = readCodexToken();
+        if (codexToken)
+            fwdHeaders['authorization'] = `Bearer ${codexToken}`;
+    }
     const resp = await fetch(targetUrl, {
         method: c.req.method,
         headers: fwdHeaders,

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.14.2";
+export declare const VERSION = "1.14.5";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = '1.14.2';
+export const VERSION = '1.14.5';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "squeezr-ai",
-  "version": "1.14.2",
+  "version": "1.14.5",
   "description": "AI proxy that compresses Claude Code, Codex, Aider, Gemini CLI and Ollama context windows to save thousands of tokens per session",
   "keywords": [
     "claude",