fix(core): set windowsHide: true on all child process spawns

On Windows, child_process.spawn/fork/exec default to windowsHide: false,
which creates a visible console window for each subprocess. This causes
command prompt windows to flash during project graph creation and task
execution.

This change sets windowsHide: true across all spawn/fork/exec calls in
the codebase and adds a custom ESLint rule (@nx/workspace/require-windows-hide)
to enforce this going forward.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: FrozenPandaz

.eslintrc.json

@@ -76,7 +76,8 @@
             ]
           }
         ],
-        "@nx/workspace/valid-command-object": "error"
+        "@nx/workspace/valid-command-object": "error",
+        "@nx/workspace/require-windows-hide": "error"
       }
     },
     {

astro-docs/src/plugins/utils/cnw-generation.ts

@@ -40,6 +40,7 @@ export async function loadCnwPackage(
     const child = fork(subprocessPath, [], {
       cwd: workspaceRoot,
       silent: true,
+      windowsHide: true,
     });
 
     let stdout = '';

astro-docs/src/plugins/utils/nx-cli-generation.ts

@@ -42,6 +42,7 @@ export async function loadNxCliPackage(
       cwd: workspaceRoot,
       silent: true,
       stdio: ['inherit', 'inherit', 'inherit', 'ipc'],
+      windowsHide: true,
     });
 
     child.on('message', (message: any) => {

packages/create-nx-workspace/src/utils/child-process-utils.ts

@@ -25,7 +25,7 @@ export function spawnAndWait(command: string, args: string[], cwd: string) {
         ESLINT_USE_FLAT_CONFIG: process.env.ESLINT_USE_FLAT_CONFIG ?? 'true',
       },
       shell: true,
-      windowsHide: false,
+      windowsHide: true,
     });
 
     childProcess.on('exit', (code, signal) => {
@@ -50,7 +50,7 @@ export function execAndWait(
       {
         cwd,
         env: { ...process.env, NX_DAEMON: 'false' },
-        windowsHide: false,
+        windowsHide: true,
         maxBuffer: 1024 * 1024 * 10, // 10MB — default 1MB can be exceeded by verbose PM output
       },
       (error, stdout, stderr) => {

packages/create-nx-workspace/src/utils/git/default-base.ts

@@ -8,7 +8,7 @@ export function deduceDefaultBase(): string {
   const nxDefaultBase = 'main';
   try {
     return (
-      execSync('git config --get init.defaultBranch', { windowsHide: false })
+      execSync('git config --get init.defaultBranch', { windowsHide: true })
         .toString()
         .trim() || nxDefaultBase
     );

packages/create-nx-workspace/src/utils/git/git.ts

@@ -36,7 +36,7 @@ export async function checkGitVersion(): Promise<string | null | undefined> {
  */
 export function isGitAvailable(): boolean {
   try {
-    execSync('git --version', { stdio: 'ignore' });
+    execSync('git --version', { stdio: 'ignore', windowsHide: true });
     return true;
   } catch {
     return false;
@@ -49,7 +49,7 @@ export function isGitAvailable(): boolean {
  */
 export function isGhCliAvailable(): boolean {
   try {
-    execSync('gh --version', { stdio: 'ignore' });
+    execSync('gh --version', { stdio: 'ignore', windowsHide: true });
     return true;
   } catch {
     return false;

packages/create-nx-workspace/src/utils/nx/ab-testing.ts

@@ -370,7 +370,7 @@ function shouldRecordStats(): boolean {
     // Use npm to check registry - this works regardless of which package manager invoked us
     const stdout = execSync('npm config get registry', {
       encoding: 'utf-8',
-      windowsHide: false,
+      windowsHide: true,
     });
     const url = new URL(stdout.trim());
 

packages/create-nx-workspace/src/utils/package-manager.ts

@@ -266,7 +266,7 @@ export function getPackageManagerVersion(
     const version = execSync(`${packageManager} --version`, {
       cwd,
       encoding: 'utf-8',
-      windowsHide: false,
+      windowsHide: true,
     }).trim();
     pmVersionCache.set(packageManager, version);
     return version;

packages/cypress/plugins/cypress-preset.ts

@@ -77,14 +77,14 @@ function startWebServer(webServerCommand: string) {
     // Windows is fine so we leave it attached to this process
     detached: process.platform !== 'win32',
     stdio: 'inherit',
-    windowsHide: false,
+    windowsHide: true,
   });
 
   return async () => {
     if (process.platform === 'win32') {
       try {
         execSync('taskkill /pid ' + serverProcess.pid + ' /T /F', {
-          windowsHide: false,
+          windowsHide: true,
         });
       } catch (e) {
         if (process.env.NX_VERBOSE_LOGGING === 'true') {

packages/detox/src/executors/build/build.impl.ts

@@ -41,6 +41,7 @@ export function runCliBuild(
       {
         cwd: pathResolve(workspaceRoot, projectRoot),
         env: process.env,
+        windowsHide: true,
       }
     );