squeezr-ai 1.16.24 → 1.17.1

package/README.md

@@ -23,13 +23,12 @@ squeezr setup   # configures env vars, auto-start, and CA trust
 squeezr start
 ```
 
-> **WSL users:** After `squeezr setup` or `squeezr update`, close the terminal and open a new one so the environment variables take effect.
-
 `squeezr setup` handles everything automatically:
-- Sets `ANTHROPIC_BASE_URL`, `GEMINI_API_BASE_URL`, `HTTPS_PROXY`, `NODE_EXTRA_CA_CERTS`
+- Sets `ANTHROPIC_BASE_URL`, `GEMINI_API_BASE_URL`, `NODE_EXTRA_CA_CERTS`
+- Installs a shell wrapper (PowerShell on Windows, bash/zsh on Linux/macOS/WSL) that auto-refreshes env vars after `squeezr start/setup/update` — no need to restart the terminal
 - Registers auto-start (launchd on macOS, systemd on Linux, Task Scheduler/NSSM on Windows)
 - **Windows:** imports the MITM CA into the Windows Certificate Store (user-level, no admin required) so Rust-based CLIs like Codex trust the proxy's TLS certificates
-- **macOS/Linux:** generates a CA bundle at `~/.squeezr/mitm-ca/bundle.crt` for `SSL_CERT_FILE`
+- **macOS/Linux/WSL:** generates a CA bundle at `~/.squeezr/mitm-ca/bundle.crt` for `SSL_CERT_FILE`
 
 ## How it works
 
@@ -188,8 +187,8 @@ squeezr version    # print version
 
 ## Requirements
 
-- Node.js 18+
-- For Codex MITM: `HTTPS_PROXY=http://localhost:8081` (set automatically by `squeezr setup`)
+- Node.js 18+ (compatible with Node.js 24)
+- For Codex MITM: set `HTTPS_PROXY=http://localhost:8081` in the terminal where you run Codex (not set globally to avoid interfering with other tools)
 - For local compression: [Ollama](https://ollama.ai) with `qwen2.5-coder:1.5b`
 
 ## License

package/bin/squeezr.js

@@ -100,7 +100,6 @@ function installShellWrapper() {
 
 function installBashWrapper() {
   const port = getPort()
-  const mitmPort = getMitmPort(port)
   const bundlePath = path.join(os.homedir(), '.squeezr', 'mitm-ca', 'bundle.crt')
   const marker = '# squeezr shell wrapper'
   const endMarker = '# end squeezr shell wrapper'
@@ -111,11 +110,7 @@ squeezr() {
     start|setup|update)
       export ANTHROPIC_BASE_URL=http://localhost:${port}
       export GEMINI_API_BASE_URL=http://localhost:${port}
-      export HTTPS_PROXY=http://localhost:${mitmPort}
-      export SSL_CERT_FILE=${bundlePath}
-      ;;
-    stop)
-      unset HTTPS_PROXY
+      export NODE_EXTRA_CA_CERTS=${bundlePath}
       ;;
   esac
 }
@@ -469,7 +464,6 @@ async function configurePorts() {
       `export SQUEEZR_MITM_PORT=${finalMitm}`,
       `export ANTHROPIC_BASE_URL=http://localhost:${finalPort}`,
       `export GEMINI_API_BASE_URL=http://localhost:${finalPort}`,
-      `export HTTPS_PROXY=http://localhost:${finalMitm}`,
     ].join('\n')
     for (const p of profiles) {
       try {
@@ -494,7 +488,6 @@ async function configurePorts() {
         try { execSync(`"${setx}" SQUEEZR_MITM_PORT "${finalMitm}"`, { stdio: 'pipe' }) } catch {}
         try { execSync(`"${setx}" ANTHROPIC_BASE_URL "http://localhost:${finalPort}"`, { stdio: 'pipe' }) } catch {}
         try { execSync(`"${setx}" GEMINI_API_BASE_URL "http://localhost:${finalPort}"`, { stdio: 'pipe' }) } catch {}
-        try { execSync(`"${setx}" HTTPS_PROXY "http://localhost:${finalMitm}"`, { stdio: 'pipe' }) } catch {}
       }
     } catch {}
   }
@@ -503,7 +496,6 @@ async function configurePorts() {
   process.env.SQUEEZR_PORT = String(finalPort)
   process.env.SQUEEZR_MITM_PORT = String(finalMitm)
   process.env.ANTHROPIC_BASE_URL = `http://localhost:${finalPort}`
-  process.env.HTTPS_PROXY = `http://localhost:${finalMitm}`
 
   // Auto stop + start
   console.log('')
@@ -822,9 +814,10 @@ function setupUnix() {
     `export ANTHROPIC_BASE_URL=http://localhost:${port}`,
     `export openai_base_url=http://localhost:${port}`,
     `export GEMINI_API_BASE_URL=http://localhost:${port}`,
-    `# squeezr MITM proxy for Codex (TLS interception)`,
-    `export HTTPS_PROXY=http://localhost:${mitmPort}`,
-    `export SSL_CERT_FILE=${bundlePath}`,
+    `export NODE_EXTRA_CA_CERTS=${bundlePath}`,
+    `# NOTE: HTTPS_PROXY is intentionally NOT set globally — it would route ALL HTTPS`,
+    `# (including Claude Code) through the MITM proxy and cause 502 errors.`,
+    `# For Codex, set it per-session only: HTTPS_PROXY=http://localhost:${mitmPort} codex`,
     `# squeezr auto-heal: start proxy if not running`,
     `if ! curl -sf http://localhost:${port}/squeezr/health >/dev/null 2>&1; then`,
     `  nohup ${nodeExe} ${distIndex} >> "${os.homedir()}/.squeezr/squeezr.log" 2>&1 &`,
@@ -840,8 +833,7 @@ function setupUnix() {
     `export ANTHROPIC_BASE_URL=http://localhost:${port}`,
     `export openai_base_url=http://localhost:${port}`,
     `export GEMINI_API_BASE_URL=http://localhost:${port}`,
-    `export HTTPS_PROXY=http://localhost:${mitmPort}`,
-    `export SSL_CERT_FILE=${bundlePath}`,
+    `export NODE_EXTRA_CA_CERTS=${bundlePath}`,
   ].join('\n')
 
   // Write env vars to ~/.profile (login shell — always loaded)
@@ -905,6 +897,28 @@ function setupUnix() {
       spawn(nodeExe, [squeezrBin], { detached: true, stdio: 'ignore' }).unref()
     }
 
+    // Trust MITM CA in macOS Keychain (for Codex TLS interception)
+    // CA is generated on first proxy start — wait briefly for it to appear
+    const caPath = path.join(os.homedir(), '.squeezr', 'mitm-ca', 'ca.crt')
+    const waitForCa = (retries = 10, interval = 500) => new Promise(resolve => {
+      const check = (n) => {
+        if (fs.existsSync(caPath)) return resolve(true)
+        if (n <= 0) return resolve(false)
+        setTimeout(() => check(n - 1), interval)
+      }
+      check(retries)
+    })
+    waitForCa().then(found => {
+      if (found) {
+        try {
+          execSync(`security add-trusted-cert -d -r trustRoot -k ~/Library/Keychains/login.keychain-db "${caPath}" 2>/dev/null`, { stdio: 'pipe' })
+          console.log(`  [ok] MITM CA trusted in macOS Keychain`)
+        } catch {
+          console.log(`  [info] To trust MITM CA for Codex: security add-trusted-cert -d -r trustRoot -k ~/Library/Keychains/login.keychain-db "${caPath}"`)
+        }
+      }
+    })
+
   // 2b. Linux — systemd
   } else {
     const serviceDir = path.join(os.homedir(), '.config', 'systemd', 'user')
@@ -978,8 +992,9 @@ function setupWSL() {
     `export ANTHROPIC_BASE_URL=http://localhost:${port}`,
     `export openai_base_url=http://localhost:${port}`,
     `export GEMINI_API_BASE_URL=http://localhost:${port}`,
-    `export HTTPS_PROXY=http://localhost:${mitmPort}`,
-    `export SSL_CERT_FILE=${bundlePath}`,
+    `export NODE_EXTRA_CA_CERTS=${bundlePath}`,
+    `# NOTE: HTTPS_PROXY is intentionally NOT set globally — set per-session for Codex only:`,
+    `# HTTPS_PROXY=http://localhost:${mitmPort} codex`,
     `# squeezr auto-heal: start proxy if not running`,
     `if ! curl -sf http://localhost:${port}/squeezr/health >/dev/null 2>&1; then`,
     `  nohup ${nodeExe} ${distIndex} >> "${os.homedir()}/.squeezr/squeezr.log" 2>&1 &`,
@@ -994,8 +1009,7 @@ function setupWSL() {
     `export ANTHROPIC_BASE_URL=http://localhost:${port}`,
     `export openai_base_url=http://localhost:${port}`,
     `export GEMINI_API_BASE_URL=http://localhost:${port}`,
-    `export HTTPS_PROXY=http://localhost:${mitmPort}`,
-    `export SSL_CERT_FILE=${bundlePath}`,
+    `export NODE_EXTRA_CA_CERTS=${bundlePath}`,
   ].join('\n')
 
   const profilePath = path.join(os.homedir(), '.profile')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "squeezr-ai",
-  "version": "1.16.24",
+  "version": "1.17.1",
   "description": "AI proxy that compresses Claude Code, Codex, Aider, Gemini CLI and Ollama context windows to save thousands of tokens per session",
   "keywords": [
     "claude",