squeezr-ai 1.17.11 → 1.17.13

package/bin/squeezr.js

@@ -248,6 +248,7 @@ async function startDaemon() {
       console.log(`Squeezr is already running (v${pkg.version})`)
       console.log(`  HTTP proxy (Claude/Aider/Gemini): http://localhost:${port}`)
       console.log(`  MITM proxy (Codex):               http://localhost:${mitmPort}`)
+      console.log(`  Dashboard:                        http://localhost:${port}/squeezr/dashboard`)
       return
     }
     // Version mismatch — old process from before npm update. Kill and restart.
@@ -275,6 +276,7 @@ async function startDaemon() {
   console.log(`Squeezr started (pid ${child.pid})`)
   console.log(`  HTTP proxy (Claude/Aider/Gemini): http://localhost:${port}`)
   console.log(`  MITM proxy (Codex):               http://localhost:${mitmPort}`)
+  console.log(`  Dashboard:                        http://localhost:${port}/squeezr/dashboard`)
   console.log(`  Logs: ${logFile}`)
 
 }
@@ -296,6 +298,20 @@ function showLogs() {
   console.log(tail.join('\n'))
 }
 
+function killMcpProcesses() {
+  if (process.platform === 'win32') {
+    try {
+      execSync(
+        `powershell -NoProfile -Command "Get-CimInstance Win32_Process -Filter \\"name='node.exe'\\" | Where-Object { $_.CommandLine -like '*squeezr*mcp*' -or $_.CommandLine -like '*mcp.js*' } | ForEach-Object { Stop-Process -Id $_.ProcessId -Force }"`,
+        { stdio: 'pipe' }
+      )
+    } catch {}
+  } else {
+    try { execSync(`pkill -f 'squeezr.*mcp' 2>/dev/null`, { stdio: 'pipe' }) } catch {}
+    try { execSync(`pkill -f 'mcp\\.js' 2>/dev/null`, { stdio: 'pipe' }) } catch {}
+  }
+}
+
 function stopProxy() {
   const port = getPort()
   const mitmPort = getMitmPort(port)
@@ -332,6 +348,10 @@ function stopProxy() {
       }
     } catch {}
   }
+
+  // Also stop the MCP server process
+  killMcpProcesses()
+
   // Clear HTTPS_PROXY so npm and other tools don't try to use the dead proxy
   if (process.platform === 'win32') {
     try { execSync('setx HTTPS_PROXY ""', { stdio: 'pipe' }) } catch {}
@@ -344,8 +364,6 @@ function stopProxy() {
 
   if (killed) {
     console.log(`Squeezr stopped`)
-    console.log(`  HTTP proxy (Claude/Aider/Gemini): http://localhost:${port}`)
-    console.log(`  MITM proxy (Codex):               http://localhost:${mitmPort}`)
   } else {
     console.log(`Squeezr is not running`)
   }
@@ -364,6 +382,7 @@ async function checkStatus() {
           console.log(`Squeezr is running  (v${json.version})`)
           console.log(`  HTTP proxy (Claude/Aider/Gemini): http://localhost:${port}`)
           console.log(`  MITM proxy (Codex):               http://localhost:${mitmPort}`)
+          console.log(`  Dashboard:                        http://localhost:${port}/squeezr/dashboard`)
         } catch {
           console.log(`Squeezr is running on port ${port}`)
         }
@@ -507,7 +526,8 @@ async function configurePorts() {
 
   console.log(`\nCurrent ports:`)
   console.log(`  HTTP proxy (Claude/Aider/Gemini): ${currentPort}`)
-  console.log(`  MITM proxy (Codex):               ${currentMitm}\n`)
+  console.log(`  MITM proxy (Codex):               ${currentMitm}`)
+  console.log(`  Dashboard:                        ${currentPort}/squeezr/dashboard  (same port as proxy)\n`)
 
   const newPort = await ask(`HTTP proxy port [${currentPort}]: `)
   const newMitm = await ask(`MITM proxy port [${currentMitm}]: `)
@@ -720,7 +740,11 @@ async function uninstall() {
     } catch {}
   }
 
-  // 8. npm uninstall -g (clear HTTPS_PROXY first so npm doesn't hit dead proxy)
+  // 8. Remove MCP registrations
+  console.log('  [..] Removing MCP registrations...')
+  try { await mcpUninstall() } catch {}
+
+  // 9. npm uninstall -g (clear HTTPS_PROXY first so npm doesn't hit dead proxy)
   console.log('  [..] Uninstalling npm package...')
   const cleanEnv = { ...process.env, HTTPS_PROXY: '', https_proxy: '', HTTP_PROXY: '', http_proxy: '' }
   try {
@@ -1369,22 +1393,9 @@ switch (command) {
   case 'update':
     await (async () => {
       console.log('Stopping Squeezr...')
-      stopProxy()
-      // Also kill anything on the ports by brute force
-      const uPort = getPort()
-      const uMitmPort = getMitmPort(uPort)
-      if (process.platform === 'win32') {
-        try { execSync(`for /f "tokens=5" %a in ('netstat -ano ^| findstr ":${uPort} " ^| findstr LISTENING') do taskkill /F /PID %a`, { stdio: 'pipe', shell: 'cmd.exe' }) } catch {}
-        try { execSync(`for /f "tokens=5" %a in ('netstat -ano ^| findstr ":${uMitmPort} " ^| findstr LISTENING') do taskkill /F /PID %a`, { stdio: 'pipe', shell: 'cmd.exe' }) } catch {}
-        // Kill squeezr-mcp (Claude Code MCP server) — it holds dist/mcp.js locked on Windows
-        console.log('Releasing file locks...')
-        try { execSync(`wmic process where "commandline like '%squeezr-ai%dist%mcp%'" call terminate`, { stdio: 'pipe', shell: 'cmd.exe' }) } catch {}
-        try { execSync(`wmic process where "commandline like '%-mcp.js%'" call terminate`, { stdio: 'pipe', shell: 'cmd.exe' }) } catch {}
-        try { execSync(`wmic process where "commandline like '%squeezr-mcp%'" call terminate`, { stdio: 'pipe', shell: 'cmd.exe' }) } catch {}
-      } else {
-        try { execSync(`kill -9 $(lsof -ti:${uPort}) 2>/dev/null`, { stdio: 'pipe' }) } catch {}
-        try { execSync(`kill -9 $(lsof -ti:${uMitmPort}) 2>/dev/null`, { stdio: 'pipe' }) } catch {}
-      }
+      stopProxy()  // also kills MCP via killMcpProcesses()
+      console.log('Releasing file locks...')
+      killMcpProcesses()  // double-kill in case stopProxy was too fast
       await new Promise(r => setTimeout(r, 2000))
 
       console.log('Installing latest version...')
@@ -1400,9 +1411,7 @@ switch (command) {
           if ((msg.includes('EBUSY') || msg.includes('EPERM')) && attempt < 4) {
             console.log(`  Files still locked, retrying in 3s (attempt ${attempt}/4)...`)
             // Try harder to release locks on retry
-            if (process.platform === 'win32') {
-              try { execSync(`wmic process where "commandline like '%squeezr-ai%'" call terminate`, { stdio: 'pipe', shell: 'cmd.exe' }) } catch {}
-            }
+            killMcpProcesses()
             await new Promise(r => setTimeout(r, 3000))
           } else if (!msg.includes('EBUSY') && !msg.includes('EPERM') && process.platform !== 'win32') {
             // On Unix, try sudo as fallback (not useful on Windows)
@@ -1462,6 +1471,7 @@ switch (command) {
       console.log(`Squeezr started (pid ${child.pid})`)
       console.log(`  HTTP proxy (Claude/Aider/Gemini): http://localhost:${startPort}`)
       console.log(`  MITM proxy (Codex):               http://localhost:${startMitmPort}`)
+      console.log(`  Dashboard:                        http://localhost:${startPort}/squeezr/dashboard`)
       console.log(`  Logs: ${logFile}`)
 
       // Ensure PowerShell wrapper is installed (so env vars refresh automatically)

package/dist/codexMitm.js

@@ -16,33 +16,35 @@ export const BUNDLE_PATH = join(CA_DIR, 'bundle.crt');
 export const MITM_PORT = config.mitmPort;
 // ── CA generation ─────────────────────────────────────────────────────────────
 function ensureCA() {
-    if (fs.existsSync(CA_KEY_PATH) && fs.existsSync(CA_CERT_PATH))
-        return;
-    fs.mkdirSync(CA_DIR, { recursive: true, mode: 0o700 });
-    const keys = forge.pki.rsa.generateKeyPair(2048);
-    const cert = forge.pki.createCertificate();
-    cert.publicKey = keys.publicKey;
-    cert.serialNumber = '01';
-    cert.validity.notBefore = new Date();
-    cert.validity.notAfter = new Date();
-    cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 10);
-    const attrs = [{ name: 'commonName', value: 'Squeezr-MITM-CA' }];
-    cert.setSubject(attrs);
-    cert.setIssuer(attrs);
-    cert.setExtensions([
-        { name: 'basicConstraints', cA: true },
-        { name: 'keyUsage', keyCertSign: true, cRLSign: true },
-    ]);
-    cert.sign(keys.privateKey, forge.md.sha256.create());
-    fs.writeFileSync(CA_KEY_PATH, forge.pki.privateKeyToPem(keys.privateKey), { mode: 0o600 });
-    fs.writeFileSync(CA_CERT_PATH, forge.pki.certificateToPem(cert), { mode: 0o644 });
-    const systemCAs = [
-        '/etc/ssl/certs/ca-certificates.crt',
-        '/etc/ssl/cert.pem',
-    ].find(p => fs.existsSync(p));
-    const bundle = forge.pki.certificateToPem(cert) + (systemCAs ? fs.readFileSync(systemCAs, 'utf-8') : '');
-    fs.writeFileSync(BUNDLE_PATH, bundle, { mode: 0o644 });
-    console.log(`[squeezr/mitm] CA generated → ${CA_CERT_PATH}`);
+    const certsExist = fs.existsSync(CA_KEY_PATH) && fs.existsSync(CA_CERT_PATH);
+    if (!certsExist) {
+        fs.mkdirSync(CA_DIR, { recursive: true, mode: 0o700 });
+        const keys = forge.pki.rsa.generateKeyPair(2048);
+        const cert = forge.pki.createCertificate();
+        cert.publicKey = keys.publicKey;
+        cert.serialNumber = '01';
+        cert.validity.notBefore = new Date();
+        cert.validity.notAfter = new Date();
+        cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 10);
+        const attrs = [{ name: 'commonName', value: 'Squeezr-MITM-CA' }];
+        cert.setSubject(attrs);
+        cert.setIssuer(attrs);
+        cert.setExtensions([
+            { name: 'basicConstraints', cA: true },
+            { name: 'keyUsage', keyCertSign: true, cRLSign: true },
+        ]);
+        cert.sign(keys.privateKey, forge.md.sha256.create());
+        fs.writeFileSync(CA_KEY_PATH, forge.pki.privateKeyToPem(keys.privateKey), { mode: 0o600 });
+        fs.writeFileSync(CA_CERT_PATH, forge.pki.certificateToPem(cert), { mode: 0o644 });
+        console.log(`[squeezr/mitm] CA generated → ${CA_CERT_PATH}`);
+    }
+    // Always regenerate bundle.crt from the CA cert only.
+    // Avoid concatenating system CA bundles — they can contain certs that
+    // BoringSSL/Node.js rejects (e.g. on WSL), causing NODE_EXTRA_CA_CERTS to fail.
+    // Node.js already trusts its own built-in root CAs, so only the squeezr CA
+    // cert is needed here.
+    const caCertPem = fs.readFileSync(CA_CERT_PATH, 'utf-8');
+    fs.writeFileSync(BUNDLE_PATH, caCertPem, { mode: 0o644 });
 }
 // ── Per-host cert (cached) ────────────────────────────────────────────────────
 const certCache = new Map();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "squeezr-ai",
-  "version": "1.17.11",
+  "version": "1.17.13",
   "description": "AI proxy that compresses Claude Code, Codex, Aider, Gemini CLI and Ollama context windows to save thousands of tokens per session",
   "keywords": [
     "claude",