windows-development-sandbox 1.18.0 → 1.18.3

package/native/csharp/HcsHost/AssemblyInfo.cs

@@ -8,9 +8,9 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.18.0.0")]
-[assembly: AssemblyFileVersion("1.18.0.0")]
-[assembly: AssemblyInformationalVersion("1.18.0")]
+[assembly: AssemblyVersion("1.18.3.0")]
+[assembly: AssemblyFileVersion("1.18.3.0")]
+[assembly: AssemblyInformationalVersion("1.18.3")]
 [assembly: ComVisible(false)]
 // computecore.dll and computestorage.dll are not KnownDLLs: load them from System32 only, never from the exe's folder.
 [assembly: DefaultDllImportSearchPaths(DllImportSearchPath.System32)]

package/native/csharp/HostTools/AssemblyInfo.cs

@@ -8,7 +8,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.18.0.0")]
-[assembly: AssemblyFileVersion("1.18.0.0")]
-[assembly: AssemblyInformationalVersion("1.18.0")]
+[assembly: AssemblyVersion("1.18.3.0")]
+[assembly: AssemblyFileVersion("1.18.3.0")]
+[assembly: AssemblyInformationalVersion("1.18.3")]
 [assembly: ComVisible(false)]

package/native/csharp/StorageHelper/AssemblyInfo.cs

@@ -9,7 +9,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.18.0.0")]
-[assembly: AssemblyFileVersion("1.18.0.0")]
-[assembly: AssemblyInformationalVersion("1.18.0")]
+[assembly: AssemblyVersion("1.18.3.0")]
+[assembly: AssemblyFileVersion("1.18.3.0")]
+[assembly: AssemblyInformationalVersion("1.18.3")]
 [assembly: ComVisible(false)]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.18.0",
+  "version": "1.18.3",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",

package/sandbox/csharp/MemGov.cs

@@ -6,6 +6,7 @@
 //     procs = the processes in the agents' job (the job ptyhost makes for everything the agents start), nothing else.
 //   stdin, one command per line:
 //     priority <pid> <idle|below|normal>   lowers (or restores) the priority of a process in that job
+//     iopriority <pid> <verylow|low|normal>  the disk queue priority of a process in that job
 //     suspend <pid> <ms>                   pauses a process in that job, resumes it after ms (at most 30000)
 //     exit
 //
@@ -45,6 +46,11 @@ static class MemGov
     private const int ProcessMemoryPriorityClass = 0;
     private const uint MemoryPriorityLow = 2;
     private const uint MemoryPriorityNormal = 5;
+    // NtSetInformationProcess(ProcessIoPriority): IO_PRIORITY_HINT VeryLow = 0, Low = 1, Normal = 2.
+    private const int ProcessIoPriority = 33;
+    private const int IoPriorityVeryLow = 0;
+    private const int IoPriorityLow = 1;
+    private const int IoPriorityNormal = 2;
 
     // JOBOBJECT_CPU_RATE_CONTROL_INFORMATION (CpuRate in hundredths of a percent).
     [StructLayout(LayoutKind.Sequential)]
@@ -133,6 +139,13 @@ static class MemGov
         [DllImport("kernel32.dll", EntryPoint = "K32GetProcessMemoryInfo", SetLastError = true)]
         public static extern bool GetProcessMemoryInfo(IntPtr process, ref MemoryCounters counters, uint size);
 
+        // NTSTATUS, not Win32: SetLastError does not apply, the status is the result (0 = success).
+        [DllImport("ntdll.dll")]
+        public static extern int NtSetInformationProcess(IntPtr process, int infoClass, ref int info, int length);
+
+        [DllImport("ntdll.dll")]
+        public static extern uint RtlNtStatusToDosError(int status);
+
         [DllImport("ntdll.dll")]
         public static extern int NtSuspendProcess(IntPtr process);
 
@@ -397,6 +410,14 @@ static class MemGov
         {
             SetMemoryPriority(pid, parts[2] == "low" ? MemoryPriorityLow : MemoryPriorityNormal);
         }
+        else if (parts[0] == "iopriority")
+        {
+            int level = ParseIoPriority(parts[2]);
+            if (level >= 0)
+            {
+                SetIoPriority(pid, level);
+            }
+        }
         else if (parts[0] == "priority")
         {
             uint cls = parts[2] == "idle" ? IdleClass : parts[2] == "below" ? BelowNormalClass : NormalClass;
@@ -487,6 +508,43 @@ static class MemGov
         }
     }
 
+    /// <summary>verylow, low or normal to the IO priority value; -1 when it is none of them.</summary>
+    private static int ParseIoPriority(string word)
+    {
+        if (word == "verylow")
+        {
+            return IoPriorityVeryLow;
+        }
+        if (word == "low")
+        {
+            return IoPriorityLow;
+        }
+        return word == "normal" ? IoPriorityNormal : -1;
+    }
+
+    /// <summary>The process's disk requests queue behind the others' (needs no privilege for very low and low).</summary>
+    private static void SetIoPriority(int pid, int level)
+    {
+        IntPtr process = NativeMethods.OpenProcess(ProcessSetInformation, false, pid);
+        if (process == IntPtr.Zero)
+        {
+            return;
+        }
+        try
+        {
+            int value = level;
+            int status = NativeMethods.NtSetInformationProcess(process, ProcessIoPriority, ref value, sizeof(int));
+            if (status != 0)
+            {
+                throw new Win32Exception((int)NativeMethods.RtlNtStatusToDosError(status));
+            }
+        }
+        finally
+        {
+            NativeMethods.CloseHandle(process);
+        }
+    }
+
     /// <summary>A waiting compiler's pages go to the paging file now, so the ones that run have the RAM.</summary>
     private static void Trim(int pid)
     {

package/schemas/config.schema.json

@@ -144,7 +144,7 @@
               "maximum": 9007199254740991
             }
           ],
-          "description": "Sandbox RAM in MB (>= 2048), or \"auto\": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 2 GB more with vGPU): a bigger value is lowered."
+          "description": "Sandbox RAM in MB (>= 2048), or \"auto\": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 4 GB more with vGPU): a bigger value is lowered."
         },
         "maxMemoryMb": {
           "type": "integer",
@@ -772,7 +772,7 @@
             "targetDir": {
               "type": "string",
               "minLength": 1,
-              "description": "\"shared\": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), \"separate\": <workspace>\\target\\sandbox (kept, no cross-talk), \"local\": on the sandbox's own disk (fastest, lost every boot), or a guest path."
+              "description": "\"auto\" (default): on the sandbox's own disk when C: has 25 GB free at boot, else \"separate\" (builds then write through the mapped workspace, which can overload this PC's disk). \"shared\": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), \"separate\": <workspace>\\target\\sandbox (kept, no cross-talk), \"local\": on the sandbox's own disk (fastest, lost every boot), or a guest path."
             },
             "linker": {
               "type": "string",
@@ -794,7 +794,7 @@
                   "maximum": 32
                 }
               ],
-              "description": "GNU host: how many programs may link at the same time in the whole sandbox (other links wait). \"auto\" = one per 3 GB of sandbox memory after 6 GB, 2 to 8 (the memory governor slows links down too when memory runs short)."
+              "description": "GNU host: how many programs may link at the same time in the whole sandbox (other links wait). \"auto\" = one per 6 GB of sandbox memory, 1 to 4 (the memory governor slows links down too when memory runs short)."
             }
           },
           "additionalProperties": false

package/schemas/sandbox-config.schema.json

@@ -105,7 +105,7 @@
               "maximum": 9007199254740991
             }
           ],
-          "description": "Sandbox RAM in MB (>= 2048), or \"auto\": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 2 GB more with vGPU): a bigger value is lowered."
+          "description": "Sandbox RAM in MB (>= 2048), or \"auto\": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 4 GB more with vGPU): a bigger value is lowered."
         },
         "vGpu": {
           "type": "boolean",
@@ -457,7 +457,7 @@
             "targetDir": {
               "type": "string",
               "minLength": 1,
-              "description": "\"shared\": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), \"separate\": <workspace>\\target\\sandbox (kept, no cross-talk), \"local\": on the sandbox's own disk (fastest, lost every boot), or a guest path."
+              "description": "\"auto\" (default): on the sandbox's own disk when C: has 25 GB free at boot, else \"separate\" (builds then write through the mapped workspace, which can overload this PC's disk). \"shared\": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), \"separate\": <workspace>\\target\\sandbox (kept, no cross-talk), \"local\": on the sandbox's own disk (fastest, lost every boot), or a guest path."
             },
             "linker": {
               "type": "string",
@@ -479,7 +479,7 @@
                   "maximum": 32
                 }
               ],
-              "description": "GNU host: how many programs may link at the same time in the whole sandbox (other links wait). \"auto\" = one per 3 GB of sandbox memory after 6 GB, 2 to 8 (the memory governor slows links down too when memory runs short)."
+              "description": "GNU host: how many programs may link at the same time in the whole sandbox (other links wait). \"auto\" = one per 6 GB of sandbox memory, 1 to 4 (the memory governor slows links down too when memory runs short)."
             }
           },
           "additionalProperties": false