esque-bridge 0.2.0 → 0.2.2

package/index.js

@@ -71,7 +71,10 @@ const PORT = Number(argv.port || process.env.PORT || 3030);
 const WORKDIR = path.resolve(
   argv.workdir || process.env.CLAUDE_WORKDIR || process.cwd(),
 );
-const TIMEOUT_MS = Number(argv.timeout || 5 * 60 * 1000);
+// 20 min default. With the async protocol the phone no longer holds a
+// connection open, so a generous ceiling just lets big agentic tasks (full
+// scaffolds) finish. Override with --timeout.
+const TIMEOUT_MS = Number(argv.timeout || 20 * 60 * 1000);
 const AGENT_TYPE = String(argv.agent || process.env.ESQUE_AGENT || 'claude').toLowerCase();
 const CUSTOM_CMD = argv.cmd || process.env.ESQUE_CMD || null;
 const BIN_OVERRIDE = argv.bin || null;
@@ -138,7 +141,20 @@ const ADAPTERS = {
     // `--output-format json` returns a single JSON object with
     // {result, session_id, is_error, ...} — easy to parse, exact.
     buildArgs(_prompt, prevSessionId) {
-      const args = ['--print', '--output-format', 'json'];
+      // `--dangerously-skip-permissions` lets Claude actually use its
+      // Write / Edit / Bash tools without an interactive approval prompt.
+      // In headless `--print` mode there's no way to say "yes" to a
+      // permission request, so without this every file write is silently
+      // blocked — the agent looks busy but can't touch the disk. This is
+      // the autonomous-bridge use case the flag exists for; access is
+      // already gated by the per-session pairing secret. (Mirrors Aider's
+      // `--yes-always` below.)
+      const args = [
+        '--print',
+        '--output-format',
+        'json',
+        '--dangerously-skip-permissions',
+      ];
       if (prevSessionId) args.push('--resume', prevSessionId);
       return args;
     },
@@ -357,6 +373,26 @@ function requireAuth(req, res, next) {
   next();
 }
 
+// ── Async job store ───────────────────────────────────────────────────
+// A prompt can run for minutes (e.g. a full project scaffold). Holding one
+// HTTP connection open that long is fragile over tunnels and times the
+// phone out. Newer phones advertise `x-esque-async`; they get a jobId back
+// immediately and poll GET /result/:id while the agent runs in the
+// background. Jobs are evicted after a TTL so the map can't grow unbounded.
+const jobs = new Map(); // jobId -> { status, text, createdAt }
+const RESULT_TTL_MS = 30 * 60 * 1000;
+let jobSeq = 0;
+function newJobId() {
+  jobSeq += 1;
+  return `j${Date.now().toString(36)}${jobSeq.toString(36)}`;
+}
+function gcJobs() {
+  const now = Date.now();
+  for (const [id, j] of jobs) {
+    if (now - j.createdAt > RESULT_TTL_MS) jobs.delete(id);
+  }
+}
+
 async function executeHandler(req, res) {
   const body = req.body || {};
   const prompt = String(body.prompt || '');
@@ -371,22 +407,89 @@ async function executeHandler(req, res) {
     `[bridge] POST  ${preview}…  esque=${esqueSessionId ?? '-'}  ${AGENT_TYPE}=${prev ?? 'new'}`,
   );
 
+  // ── Async path (polling-capable phones) ─────────────────────────────
+  // Return a jobId instantly and run the agent in the background. The phone
+  // polls GET /result/:id every few seconds — tiny requests that survive
+  // any tunnel and never time out, no matter how long the task runs.
+  const wantsAsync = req.header('x-esque-async') === '1' || body.async === true;
+  if (wantsAsync) {
+    gcJobs();
+    const jobId = newJobId();
+    jobs.set(jobId, { status: 'working', text: '', createdAt: Date.now() });
+    res.json({ jobId, status: 'working' });
+    runAgent(prompt, esqueSessionId)
+      .then((result) => {
+        jobs.set(jobId, {
+          status: result.isError ? 'blocked' : 'finished',
+          text: result.text,
+          createdAt: Date.now(),
+        });
+        console.log(
+          `[bridge] done  job=${jobId}  ${result.isError ? 'blocked' : 'finished'}`,
+        );
+      })
+      .catch((err) => {
+        jobs.set(jobId, {
+          status: 'blocked',
+          text: `${adapter.label} failed: ${err.message}`,
+          createdAt: Date.now(),
+        });
+        console.error(`[bridge] error  job=${jobId}:`, err.message);
+      });
+    return;
+  }
+
+  // ── Legacy synchronous path (older phones) ──────────────────────────
+  // Hold the connection open with a keep-alive heartbeat so idle-closing
+  // proxies don't drop it while the agent thinks. The phone trims the body
+  // before JSON.parse, so the leading whitespace is harmless.
+  res.status(200);
+  res.setHeader('Content-Type', 'application/json; charset=utf-8');
+  res.setHeader('Cache-Control', 'no-cache, no-transform');
+  const heartbeat = setInterval(() => {
+    try {
+      res.write(' ');
+    } catch {
+      /* socket already closed */
+    }
+  }, 5000);
+  const finish = (payload) => {
+    clearInterval(heartbeat);
+    try {
+      res.end(JSON.stringify(payload));
+    } catch {
+      /* socket already closed */
+    }
+  };
+
   try {
     const result = await runAgent(prompt, esqueSessionId);
-    res.json({
+    finish({
       text: result.text,
       status: result.isError ? 'blocked' : 'finished',
     });
   } catch (err) {
     console.error('[bridge] error:', err.message);
-    res
-      .status(500)
-      .json({ text: `${adapter.label} failed: ${err.message}`, status: 'blocked' });
+    finish({ text: `${adapter.label} failed: ${err.message}`, status: 'blocked' });
+  }
+}
+
+// Poll endpoint for the async protocol. Returns the job's current state:
+// { status: 'working' | 'finished' | 'blocked', text }.
+function resultHandler(req, res) {
+  const job = jobs.get(req.params.id);
+  if (!job) {
+    return res.status(404).json({
+      status: 'blocked',
+      text: 'That task is no longer available — the bridge may have restarted.',
+    });
   }
+  res.json({ status: job.status, text: job.text });
 }
 
 app.post('/execute', requireAuth, executeHandler);
 app.post('/', requireAuth, executeHandler);
+app.get('/result/:id', requireAuth, resultHandler);
 app.use((_req, res) => res.status(405).json({ error: 'POST only' }));
 
 // --- Boot -----------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "esque-bridge",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Desktop-side receiver for the Esque Agent mobile app. Pairs your phone with a local coding-agent CLI (Claude Code, Aider, or any custom command) via a tunnel + QR code, so prompts run through your subscription instead of per-token API billing.",
   "bin": {
     "esque-bridge": "index.js"