esque-bridge 0.5.0 → 0.6.0

package/index.js

@@ -27,6 +27,10 @@ const fs = require('fs');
 const path = require('path');
 const os = require('os');
 
+// Windows has no POSIX process groups or `.cmd`-aware spawn, so several
+// process-management paths below branch on this.
+const isWindows = process.platform === 'win32';
+
 // --- Config ---------------------------------------------------------------
 
 const argv = parseArgs(process.argv.slice(2));
@@ -331,14 +335,19 @@ function runAgent(prompt, esqueSessionId) {
       usesStdin = !argv.some((a) => a.includes(prompt));
     }
 
-    // detached → its own process group so we can kill the WHOLE tree (the
-    // agent can spawn its own subprocesses) on timeout instead of orphaning
-    // zombies.
+    // POSIX: detach into its own process group so we can kill the WHOLE tree
+    // (the agent spawns subprocesses) on timeout instead of orphaning zombies.
+    // Windows: no detach (it would pop a console window) — we kill the tree
+    // via `taskkill /T` instead; and `shell: true` so spawn can resolve the
+    // `.cmd` shims npm installs global bins as (claude.cmd / codex.cmd). Our
+    // built-in adapters pass fixed flag args (the prompt rides via stdin), so
+    // there's no shell-injection surface here.
     const child = spawn(bin, argv, {
       cwd: WORKDIR,
       env: process.env,
       stdio: ['pipe', 'pipe', 'pipe'],
-      detached: true,
+      detached: !isWindows,
+      shell: isWindows,
     });
 
     const MAX_BUF = 16 * 1024 * 1024; // hard cap so a runaway agent can't OOM the bridge
@@ -356,6 +365,22 @@ function runAgent(prompt, esqueSessionId) {
     const rejectOnce = settle(reject);
 
     const killTree = (signal) => {
+      if (isWindows) {
+        // No process groups on Windows; force-kill the whole tree by PID.
+        // Signals don't map, so SIGTERM/SIGKILL both become a /F force-kill.
+        try {
+          spawn('taskkill', ['/pid', String(child.pid), '/T', '/F'], {
+            stdio: 'ignore',
+          });
+        } catch {
+          try {
+            child.kill();
+          } catch {
+            /* already gone */
+          }
+        }
+        return;
+      }
       try {
         process.kill(-child.pid, signal);
       } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "esque-bridge",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Desktop-side receiver for the Esque Agent mobile app. Pairs your phone with a local coding-agent CLI (Claude Code, Aider, or any custom command) via a tunnel + QR code, so prompts run through your subscription instead of per-token API billing.",
   "bin": {
     "esque-bridge": "index.js"