termbeam 1.21.0 → 1.21.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.21.1] - 2026-04-21
+
+- fix(windows): service wizard uses getDefaultShell instead of COMSPEC
+- fix(windows): use tasklist fallback when wmic unavailable for shell detection
+- fix(windows): add windowsHide to all child_process calls
+- fix(windows): hide devtunnel console windows and fix DEP0190 deprecation
+
 ## [1.21.0] - 2026-04-20
 
 - feat(review): add Review Mode to diff viewer + SessionsHub filter chips (#195)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "termbeam",
-  "version": "1.21.0",
+  "version": "1.21.1",
   "description": "Beam your terminal to any device — mobile-optimized web terminal with multi-session support",
   "main": "src/server/index.js",
   "bin": {

package/src/cli/index.js

@@ -75,48 +75,66 @@ function getWindowsAncestors(startPid, maxDepth = 4) {
   const safePid = parseInt(startPid, 10);
   if (!Number.isFinite(safePid) || safePid <= 0) return names;
 
+  // Strategy 1: wmic (available on older Windows builds)
   try {
     const result = execFileSync(
       'wmic',
       ['process', 'get', 'Name,ParentProcessId,ProcessId', '/format:csv'],
-      { stdio: ['pipe', 'pipe', 'ignore'], encoding: 'utf8', timeout: 5000 },
+      { stdio: ['pipe', 'pipe', 'ignore'], encoding: 'utf8', timeout: 5000, windowsHide: true },
     );
 
-    // Parse CSV output — first non-empty line is the header
     const lines = result.split(/\r?\n/).filter((l) => l.trim());
-    if (lines.length === 0) return names;
-
-    const header = lines[0].split(',').map((h) => h.trim());
-    const nameIdx = header.indexOf('Name');
-    const pidIdx = header.indexOf('ProcessId');
-    const ppidIdx = header.indexOf('ParentProcessId');
-    if (nameIdx === -1 || pidIdx === -1 || ppidIdx === -1) return names;
-
-    const processes = new Map();
-    for (let i = 1; i < lines.length; i++) {
-      const cols = lines[i].split(',');
-      if (cols.length <= Math.max(nameIdx, pidIdx, ppidIdx)) continue;
-      const pid = parseInt(cols[pidIdx], 10);
-      if (Number.isFinite(pid)) {
-        processes.set(pid, {
-          name: cols[nameIdx].trim().toLowerCase(),
-          ppid: parseInt(cols[ppidIdx], 10),
-        });
+    if (lines.length > 0) {
+      const header = lines[0].split(',').map((h) => h.trim());
+      const nameIdx = header.indexOf('Name');
+      const pidIdx = header.indexOf('ProcessId');
+      const ppidIdx = header.indexOf('ParentProcessId');
+      if (nameIdx !== -1 && pidIdx !== -1 && ppidIdx !== -1) {
+        const processes = new Map();
+        for (let i = 1; i < lines.length; i++) {
+          const cols = lines[i].split(',');
+          if (cols.length <= Math.max(nameIdx, pidIdx, ppidIdx)) continue;
+          const pid = parseInt(cols[pidIdx], 10);
+          if (Number.isFinite(pid)) {
+            processes.set(pid, {
+              name: cols[nameIdx].trim().toLowerCase(),
+              ppid: parseInt(cols[ppidIdx], 10),
+            });
+          }
+        }
+
+        let currentPid = safePid;
+        for (let i = 0; i < maxDepth; i++) {
+          const proc = processes.get(currentPid);
+          if (!proc) break;
+          log.debug(`Process tree: ${proc.name}`);
+          names.push(proc.name);
+          if (!Number.isFinite(proc.ppid) || proc.ppid === 0 || proc.ppid === currentPid) break;
+          currentPid = proc.ppid;
+        }
+        if (names.length > 0) return names;
       }
     }
+  } catch (err) {
+    log.debug(`wmic not available: ${err.message}`);
+  }
 
-    // Walk up the tree in memory — no more subprocess calls
-    let currentPid = safePid;
-    for (let i = 0; i < maxDepth; i++) {
-      const proc = processes.get(currentPid);
-      if (!proc) break;
-      log.debug(`Process tree: ${proc.name}`);
-      names.push(proc.name);
-      if (!Number.isFinite(proc.ppid) || proc.ppid === 0 || proc.ppid === currentPid) break;
-      currentPid = proc.ppid;
+  // Strategy 2: tasklist for direct parent name (always available on Windows)
+  try {
+    const result = execFileSync('tasklist', ['/FI', `PID eq ${safePid}`, '/FO', 'CSV', '/NH'], {
+      stdio: ['pipe', 'pipe', 'ignore'],
+      encoding: 'utf8',
+      timeout: 5000,
+      windowsHide: true,
+    });
+    const match = result.match(/"([^"]+)"/);
+    if (match) {
+      const name = match[1].toLowerCase();
+      log.debug(`Process tree (tasklist): ${name}`);
+      names.push(name);
     }
   } catch (err) {
-    log.debug(`Could not query process tree: ${err.message}`);
+    log.debug(`tasklist failed: ${err.message}`);
   }
 
   return names;
@@ -188,6 +206,19 @@ function getDefaultShell() {
       log.debug(`Using detected shell: cmd.exe`);
       return 'cmd.exe';
     }
+
+    // Heuristic: PSModulePath env var is set by PowerShell and inherited by children.
+    // When the tree walk only found intermediaries (node.exe), this detects the real shell.
+    const psModulePath = (process.env.PSModulePath || '').toLowerCase();
+    if (psModulePath.includes('\\powershell\\')) {
+      log.debug('Detected pwsh.exe via PSModulePath');
+      return 'pwsh.exe';
+    }
+    if (psModulePath.includes('\\windowspowershell\\')) {
+      log.debug('Detected powershell.exe via PSModulePath');
+      return 'powershell.exe';
+    }
+
     const fallback = process.env.COMSPEC || 'cmd.exe';
     log.debug(`Falling back to: ${fallback}`);
     return fallback;
@@ -384,4 +415,4 @@ function parseArgs() {
   return config;
 }
 
-module.exports = { parseArgs, printHelp, isKnownShell, getWindowsAncestors };
+module.exports = { parseArgs, printHelp, isKnownShell, getWindowsAncestors, getDefaultShell };

package/src/cli/service.js

@@ -32,6 +32,7 @@ function findPm2() {
       encoding: 'utf8',
       stdio: ['pipe', 'pipe', 'ignore'],
       timeout: 5000,
+      windowsHide: true,
     });
     return result.trim().split('\n')[0].trim();
   } catch {
@@ -43,10 +44,13 @@ function installPm2Global() {
   log.info('Installing PM2 globally');
   console.log(yellow('\nInstalling PM2 globally...'));
   try {
-    execFileSync('npm', ['install', '-g', 'pm2'], {
+    const isWin = os.platform() === 'win32';
+    const cmd = isWin ? process.env.ComSpec || 'cmd.exe' : 'npm';
+    const cmdArgs = isWin ? ['/c', 'npm', 'install', '-g', 'pm2'] : ['install', '-g', 'pm2'];
+    execFileSync(cmd, cmdArgs, {
       stdio: 'inherit',
       timeout: 120000,
-      shell: os.platform() === 'win32',
+      windowsHide: true,
     });
     console.log(green('✓ PM2 installed successfully.\n'));
     return true;
@@ -141,13 +145,17 @@ function readEcosystemName() {
 
 function pm2Exec(args, opts = {}) {
   log.debug(`PM2 command: pm2 ${args.join(' ')}`);
+  const isWin = os.platform() === 'win32';
+  // Windows npm globals are .cmd wrappers — use cmd.exe /c to resolve them
+  // without shell:true (which triggers DEP0190 when combined with args).
+  const cmd = isWin ? process.env.ComSpec || 'cmd.exe' : 'pm2';
+  const cmdArgs = isWin ? ['/c', 'pm2', ...args] : args;
   try {
-    return execFileSync('pm2', args, {
+    return execFileSync(cmd, cmdArgs, {
       encoding: 'utf8',
       stdio: opts.inherit ? 'inherit' : ['pipe', 'pipe', 'pipe'],
       timeout: 30000,
-      // Windows npm globals are .cmd wrappers; execFileSync needs shell to resolve them
-      shell: os.platform() === 'win32',
+      windowsHide: true,
       ...opts,
     });
   } catch (err) {
@@ -347,8 +355,9 @@ async function actionInstall() {
   config.cwd = await ask(rl, 'Working directory:', process.cwd());
   decisions.push({ label: 'Directory', value: config.cwd });
 
-  // Shell — use current shell automatically
-  config.shell = process.env.SHELL || (os.platform() === 'win32' ? process.env.COMSPEC : '/bin/sh');
+  // Shell — detect the actual shell the user is running from
+  const { getDefaultShell } = require('./index');
+  config.shell = getDefaultShell();
   decisions.push({ label: 'Shell', value: config.shell });
 
   // Log level
@@ -665,9 +674,13 @@ function actionLogs() {
     process.exit(1);
   }
   const { spawn } = require('child_process');
-  const child = spawn('pm2', ['logs', readEcosystemName(), '--lines', '200'], {
+  const isWin = os.platform() === 'win32';
+  const cmd = isWin ? process.env.ComSpec || 'cmd.exe' : 'pm2';
+  const logsArgs = ['logs', readEcosystemName(), '--lines', '200'];
+  const cmdArgs = isWin ? ['/c', 'pm2', ...logsArgs] : logsArgs;
+  const child = spawn(cmd, cmdArgs, {
     stdio: 'inherit',
-    shell: os.platform() === 'win32',
+    windowsHide: true,
   });
   child.on('error', (err) => {
     console.error(red(`✗ Failed to stream logs: ${err.message}`));

package/src/tunnel/index.js

@@ -106,6 +106,7 @@ function isLoggedIn() {
       encoding: 'utf-8',
       stdio: ['pipe', 'pipe', 'pipe'],
       timeout: 10_000,
+      windowsHide: true,
     });
     return out && !out.toLowerCase().includes('not logged in');
   } catch {
@@ -119,6 +120,7 @@ function getLoginInfo() {
       encoding: 'utf-8',
       stdio: ['pipe', 'pipe', 'pipe'],
       timeout: 10_000,
+      windowsHide: true,
     });
     return parseLoginInfo(out);
   } catch {
@@ -148,6 +150,7 @@ function deviceCodeLogin(cmd) {
   return new Promise((resolve, reject) => {
     const proc = spawn(cmd, ['user', 'login', '-e', '-d'], {
       stdio: ['inherit', 'pipe', 'pipe'],
+      windowsHide: true,
     });
 
     let gotOutput = false;
@@ -197,7 +200,7 @@ function deviceCodeLogin(cmd) {
 function findDevtunnel() {
   // Try devtunnel directly
   try {
-    execSync('devtunnel --version', { stdio: 'pipe' });
+    execSync('devtunnel --version', { stdio: 'pipe', windowsHide: true });
     return 'devtunnel';
   } catch {}
 
@@ -222,7 +225,7 @@ function findDevtunnel() {
   );
   if (fs.existsSync(homeBin)) {
     try {
-      execFileSync(homeBin, ['--version'], { stdio: 'pipe' });
+      execFileSync(homeBin, ['--version'], { stdio: 'pipe', windowsHide: true });
       return homeBin;
     } catch {}
   }
@@ -253,6 +256,7 @@ function isTunnelValid(id) {
     execFileSync(devtunnelCmd, ['show', id, '--json'], {
       encoding: 'utf-8',
       stdio: ['pipe', 'pipe', 'pipe'],
+      windowsHide: true,
     });
     return true;
   } catch {
@@ -273,7 +277,7 @@ function checkTunnelHealth() {
   execFile(
     devtunnelCmd,
     ['show', tunnelId],
-    { encoding: 'utf-8', signal: abortCtrl.signal },
+    { encoding: 'utf-8', signal: abortCtrl.signal, windowsHide: true },
     (err, stdout) => {
       clearTimeout(timer);
 
@@ -401,6 +405,7 @@ function killTunnelProc() {
         execFileSync('taskkill', ['/pid', String(tunnelProc.pid), '/T', '/F'], {
           stdio: 'pipe',
           timeout: 5000,
+          windowsHide: true,
         });
       } catch {
         /* best effort */
@@ -566,6 +571,7 @@ function scheduleRestart() {
 function hostTunnel() {
   const hostProc = spawn(devtunnelCmd, ['host', tunnelId], {
     stdio: ['pipe', 'pipe', 'pipe'],
+    windowsHide: true,
   });
   tunnelProc = hostProc;
 
@@ -657,7 +663,11 @@ async function startTunnel(port, options = {}) {
     if (!loggedIn) {
       log.info('Logging in to DevTunnel with Microsoft Entra (recommended for long sessions)...');
       try {
-        execFileSync(devtunnelCmd, ['user', 'login', '-e'], { stdio: 'inherit', timeout: 30000 });
+        execFileSync(devtunnelCmd, ['user', 'login', '-e'], {
+          stdio: 'inherit',
+          timeout: 30000,
+          windowsHide: true,
+        });
       } catch {
         log.info('Browser login failed or unavailable, falling back to device code flow...');
         log.info('A code will be displayed — open the URL on any device to authenticate.');
@@ -694,6 +704,7 @@ async function startTunnel(port, options = {}) {
         }
         const createOut = execFileSync(devtunnelCmd, ['create', '--expiration', '30d', '--json'], {
           encoding: 'utf-8',
+          windowsHide: true,
         });
         const tunnelData = JSON.parse(createOut);
         tunnelId = tunnelData.tunnel.tunnelId;
@@ -706,6 +717,7 @@ async function startTunnel(port, options = {}) {
       // Ephemeral tunnel — create fresh, will be deleted on shutdown
       const createOut = execFileSync(devtunnelCmd, ['create', '--expiration', '1d', '--json'], {
         encoding: 'utf-8',
+        windowsHide: true,
       });
       const tunnelData = JSON.parse(createOut);
       tunnelId = tunnelData.tunnel.tunnelId;
@@ -717,7 +729,7 @@ async function startTunnel(port, options = {}) {
       execFileSync(
         devtunnelCmd,
         ['port', 'create', tunnelId, '-p', String(port), '--protocol', 'http'],
-        { stdio: 'pipe' },
+        { stdio: 'pipe', windowsHide: true },
       );
     } catch {}
     // Set tunnel access: public (anonymous) or private (owner-only via Microsoft login)
@@ -726,7 +738,7 @@ async function startTunnel(port, options = {}) {
         execFileSync(
           devtunnelCmd,
           ['access', 'create', tunnelId, '-p', String(port), '--anonymous'],
-          { stdio: 'pipe' },
+          { stdio: 'pipe', windowsHide: true },
         );
       } catch {}
       log.info('Tunnel access: public (anonymous)');
@@ -735,6 +747,7 @@ async function startTunnel(port, options = {}) {
       try {
         execFileSync(devtunnelCmd, ['access', 'reset', tunnelId], {
           stdio: 'pipe',
+          windowsHide: true,
         });
       } catch {}
       log.info('Tunnel access: private (owner-only via Microsoft login)');
@@ -773,7 +786,11 @@ function cleanupTunnel() {
       log.info('Tunnel host stopped (tunnel preserved for reuse)');
     } else {
       try {
-        execFileSync(devtunnelCmd, ['delete', id, '-f'], { stdio: 'pipe', timeout: 10000 });
+        execFileSync(devtunnelCmd, ['delete', id, '-f'], {
+          stdio: 'pipe',
+          timeout: 10000,
+          windowsHide: true,
+        });
         log.info('Tunnel cleaned up');
       } catch {
         /* best effort — tunnel will expire on its own */

package/src/tunnel/install.js

@@ -98,7 +98,7 @@ async function installDevtunnel() {
 function findInstalledBinary() {
   // Check PATH first
   try {
-    execSync('devtunnel --version', { stdio: 'pipe', timeout: 10000 });
+    execSync('devtunnel --version', { stdio: 'pipe', timeout: 10000, windowsHide: true });
     return 'devtunnel';
   } catch {}
 
@@ -110,6 +110,7 @@ function findInstalledBinary() {
         encoding: 'utf-8',
         stdio: 'pipe',
         timeout: 10000,
+        windowsHide: true,
       })
         .trim()
         .split(/\r?\n/)[0];
@@ -130,7 +131,7 @@ function findInstalledBinary() {
   const homeBin = path.join(os.homedir(), 'bin', getBinaryName());
   if (fs.existsSync(homeBin)) {
     try {
-      execFileSync(homeBin, ['--version'], { stdio: 'pipe', timeout: 10000 });
+      execFileSync(homeBin, ['--version'], { stdio: 'pipe', timeout: 10000, windowsHide: true });
       return homeBin;
     } catch {}
   }

package/src/utils/agents.js

@@ -62,24 +62,29 @@ function tryDetectAgent(agent) {
     let remaining = candidates.length;
 
     for (const bin of candidates) {
-      child_process.execFile(bin, args, { timeout: 5000, encoding: 'utf8' }, (err, stdout) => {
-        remaining--;
-        if (resolved) return;
-        if (!err) {
-          resolved = true;
-          const version = (stdout || '').trim().split('\n')[0] || 'unknown';
-          resolve({
-            id: agent.id,
-            name: agent.name,
-            cmd: agent.cmd,
-            args: agent.args || [],
-            icon: agent.icon,
-            version,
-          });
-        } else if (remaining === 0) {
-          resolve(null);
-        }
-      });
+      child_process.execFile(
+        bin,
+        args,
+        { timeout: 5000, encoding: 'utf8', windowsHide: true },
+        (err, stdout) => {
+          remaining--;
+          if (resolved) return;
+          if (!err) {
+            resolved = true;
+            const version = (stdout || '').trim().split('\n')[0] || 'unknown';
+            resolve({
+              id: agent.id,
+              name: agent.name,
+              cmd: agent.cmd,
+              args: agent.args || [],
+              icon: agent.icon,
+              version,
+            });
+          } else if (remaining === 0) {
+            resolve(null);
+          }
+        },
+      );
     }
   });
 }

package/src/utils/git.js

@@ -3,7 +3,9 @@ const path = require('path');
 const log = require('./logger');
 
 function git(cmd, cwd) {
-  return execSync(`git ${cmd}`, { cwd, stdio: 'pipe', timeout: 3000 }).toString().trim();
+  return execSync(`git ${cmd}`, { cwd, stdio: 'pipe', timeout: 3000, windowsHide: true })
+    .toString()
+    .trim();
 }
 
 function getGitInfo(cwd) {
@@ -144,7 +146,7 @@ async function getGitRoot(cwd) {
       require('child_process').execFile(
         'git',
         ['rev-parse', '--show-toplevel'],
-        { cwd, timeout: GIT_TIMEOUT },
+        { cwd, timeout: GIT_TIMEOUT, windowsHide: true },
         (err, stdout) => {
           if (err) return reject(err);
           resolve(stdout.trim());
@@ -167,6 +169,7 @@ async function gitAsync(args, cwd, options = {}) {
         cwd,
         timeout: options.timeout || GIT_TIMEOUT,
         maxBuffer: options.maxBuffer || MAX_DIFF_BUFFER,
+        windowsHide: true,
       },
       (err, stdout) => {
         if (err) return reject(err);
@@ -343,6 +346,7 @@ async function getFileDiff(cwd, filePath, options = {}) {
             cwd: root,
             timeout: GIT_TIMEOUT,
             maxBuffer: MAX_DIFF_BUFFER,
+            windowsHide: true,
           },
           (err, stdout) => {
             // git diff --no-index exits with 1 when files differ — that's expected

package/src/utils/shells.js

@@ -25,6 +25,7 @@ function detectWindowsShells() {
         stdio: ['pipe', 'pipe', 'ignore'],
         encoding: 'utf8',
         timeout: 3000,
+        windowsHide: true,
       });
       const fullPath = result.trim().split('\n')[0].trim();
       if (fullPath) {

package/src/utils/update-executor.js

@@ -339,15 +339,20 @@ function clearUpdateResult() {
 
 function execFilePromise(cmd, args, options = {}) {
   return new Promise((resolve, reject) => {
-    execFile(cmd, args, { encoding: 'utf8', ...options }, (err, stdout, stderr) => {
-      if (err) {
-        err.stdout = stdout;
-        err.stderr = stderr;
-        reject(err);
-      } else {
-        resolve({ stdout, stderr });
-      }
-    });
+    execFile(
+      cmd,
+      args,
+      { encoding: 'utf8', windowsHide: true, ...options },
+      (err, stdout, stderr) => {
+        if (err) {
+          err.stdout = stdout;
+          err.stderr = stderr;
+          reject(err);
+        } else {
+          resolve({ stdout, stderr });
+        }
+      },
+    );
   });
 }
 

package/src/utils/version.js

@@ -23,6 +23,7 @@ function getVersion() {
       cwd: path.join(__dirname, '..', '..'),
       encoding: 'utf-8',
       stdio: ['pipe', 'pipe', 'pipe'],
+      windowsHide: true,
     }).trim();
 
     const tagMatch = gitDesc.match(/^v(\d+\.\d+\.\d+)(?:-(\d+)-g([0-9a-f]+))?(-dirty)?$/);