windows-development-sandbox 1.18.2 → 1.18.4

package/native/csharp/HcsHost/AssemblyInfo.cs

@@ -8,9 +8,9 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.18.0.0")]
-[assembly: AssemblyFileVersion("1.18.0.0")]
-[assembly: AssemblyInformationalVersion("1.18.0")]
+[assembly: AssemblyVersion("1.18.4.0")]
+[assembly: AssemblyFileVersion("1.18.4.0")]
+[assembly: AssemblyInformationalVersion("1.18.4")]
 [assembly: ComVisible(false)]
 // computecore.dll and computestorage.dll are not KnownDLLs: load them from System32 only, never from the exe's folder.
 [assembly: DefaultDllImportSearchPaths(DllImportSearchPath.System32)]

package/native/csharp/HostTools/AssemblyInfo.cs

@@ -8,7 +8,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.18.0.0")]
-[assembly: AssemblyFileVersion("1.18.0.0")]
-[assembly: AssemblyInformationalVersion("1.18.0")]
+[assembly: AssemblyVersion("1.18.4.0")]
+[assembly: AssemblyFileVersion("1.18.4.0")]
+[assembly: AssemblyInformationalVersion("1.18.4")]
 [assembly: ComVisible(false)]

package/native/csharp/HostTools/Program.cs

@@ -174,6 +174,10 @@ static class Program
             new[] { "Microsoft-Windows-Hyper-V-Compute-Admin", "*[System[(Level=1 or Level=2) and " + time + "]]" },
             // A crash report of the programs that hold the VM (kept only when it names one of them, see Detail).
             new[] { "Application", "*[System[(EventID=1000 or EventID=1001) and " + time + "]]" },
+            // The graphics driver stopped responding and was reset (with vGPU the sandbox shares the GPU).
+            new[] { "System", "*[System[Provider[@Name='Display'] and EventID=4101 and " + time + "]]" },
+            // Errors of the Hyper-V services that run the VM.
+            new[] { "System", "*[System[(Provider[@Name='Microsoft-Windows-Hyper-V-Worker'] or Provider[@Name='Microsoft-Windows-Hyper-V-VmSwitch'] or Provider[@Name='Microsoft-Windows-Hyper-V-Compute']) and (Level=1 or Level=2) and " + time + "]]" },
         };
         List<string> items = new List<string>();
         foreach (string[] query in queries)
@@ -261,7 +265,7 @@ static class Program
     static bool MentionsVmProgram(string detail)
     {
         string lower = detail.ToLowerInvariant();
-        return lower.Contains("vmwp.exe") || lower.Contains("vmmem") || lower.Contains("vmcompute") || lower.Contains("windowssandbox");
+        return lower.Contains("vmwp.exe") || lower.Contains("vmmem") || lower.Contains("vmcompute") || lower.Contains("windowssandbox") || lower.Contains("livekernelevent");
     }
 
     /// <summary>A JSON string literal.</summary>

package/native/csharp/StorageHelper/AssemblyInfo.cs

@@ -9,7 +9,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.18.0.0")]
-[assembly: AssemblyFileVersion("1.18.0.0")]
-[assembly: AssemblyInformationalVersion("1.18.0")]
+[assembly: AssemblyVersion("1.18.4.0")]
+[assembly: AssemblyFileVersion("1.18.4.0")]
+[assembly: AssemblyInformationalVersion("1.18.4")]
 [assembly: ComVisible(false)]

package/native/scripts/stop-events.ps1

@@ -13,8 +13,12 @@ $filters = @(
     # Any error or critical event of the Hyper-V worker and compute services (the VM's memory, start and stop).
     @{ LogName = 'Microsoft-Windows-Hyper-V-Worker-Admin'; Level = 1, 2; StartTime = $Since },
     @{ LogName = 'Microsoft-Windows-Hyper-V-Compute-Admin'; Level = 1, 2; StartTime = $Since },
-    # A crash report of the programs that hold the VM (kept only when it names one of them).
-    @{ LogName = 'Application'; Id = 1000, 1001; StartTime = $Since; OnlyVmPrograms = $true }
+    # A crash report of the programs that hold the VM, or a graphics driver (GPU) reset: kept only when it names one.
+    @{ LogName = 'Application'; Id = 1000, 1001; StartTime = $Since; OnlyVmPrograms = $true },
+    # The graphics driver stopped responding and was reset (with vGPU the sandbox shares the GPU).
+    @{ LogName = 'System'; ProviderName = 'Display'; Id = 4101; StartTime = $Since },
+    # Errors of the Hyper-V services that run the VM.
+    @{ LogName = 'System'; ProviderName = 'Microsoft-Windows-Hyper-V-Worker', 'Microsoft-Windows-Hyper-V-VmSwitch', 'Microsoft-Windows-Hyper-V-Compute'; Level = 1, 2; StartTime = $Since }
 )
 $maxMessage = 390
 $maxResourceMessage = 1500
@@ -38,7 +42,7 @@ $events = foreach ($filter in $filters) {
         $query.Remove('OnlyVmPrograms')
         Get-WinEvent -FilterHashtable $query -MaxEvents 100 | ForEach-Object {
             $detail = Get-EventDetail $_
-            if ($onlyVm -and $detail -notmatch 'vmwp\.exe|vmmem|vmcompute|windowssandbox') { return }
+            if ($onlyVm -and $detail -notmatch 'vmwp\.exe|vmmem|vmcompute|windowssandbox|LiveKernelEvent') { return }
             [pscustomobject]@{
                 at       = $_.TimeCreated.ToUniversalTime().ToString('o')
                 id       = $_.Id

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.18.2",
+  "version": "1.18.4",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",

package/sandbox/csharp/MemGov.cs

@@ -6,6 +6,7 @@
 //     procs = the processes in the agents' job (the job ptyhost makes for everything the agents start), nothing else.
 //   stdin, one command per line:
 //     priority <pid> <idle|below|normal>   lowers (or restores) the priority of a process in that job
+//     iopriority <pid> <verylow|low|normal>  the disk queue priority of a process in that job
 //     suspend <pid> <ms>                   pauses a process in that job, resumes it after ms (at most 30000)
 //     exit
 //
@@ -45,6 +46,11 @@ static class MemGov
     private const int ProcessMemoryPriorityClass = 0;
     private const uint MemoryPriorityLow = 2;
     private const uint MemoryPriorityNormal = 5;
+    // NtSetInformationProcess(ProcessIoPriority): IO_PRIORITY_HINT VeryLow = 0, Low = 1, Normal = 2.
+    private const int ProcessIoPriority = 33;
+    private const int IoPriorityVeryLow = 0;
+    private const int IoPriorityLow = 1;
+    private const int IoPriorityNormal = 2;
 
     // JOBOBJECT_CPU_RATE_CONTROL_INFORMATION (CpuRate in hundredths of a percent).
     [StructLayout(LayoutKind.Sequential)]
@@ -133,6 +139,13 @@ static class MemGov
         [DllImport("kernel32.dll", EntryPoint = "K32GetProcessMemoryInfo", SetLastError = true)]
         public static extern bool GetProcessMemoryInfo(IntPtr process, ref MemoryCounters counters, uint size);
 
+        // NTSTATUS, not Win32: SetLastError does not apply, the status is the result (0 = success).
+        [DllImport("ntdll.dll")]
+        public static extern int NtSetInformationProcess(IntPtr process, int infoClass, ref int info, int length);
+
+        [DllImport("ntdll.dll")]
+        public static extern uint RtlNtStatusToDosError(int status);
+
         [DllImport("ntdll.dll")]
         public static extern int NtSuspendProcess(IntPtr process);
 
@@ -397,6 +410,14 @@ static class MemGov
         {
             SetMemoryPriority(pid, parts[2] == "low" ? MemoryPriorityLow : MemoryPriorityNormal);
         }
+        else if (parts[0] == "iopriority")
+        {
+            int level = ParseIoPriority(parts[2]);
+            if (level >= 0)
+            {
+                SetIoPriority(pid, level);
+            }
+        }
         else if (parts[0] == "priority")
         {
             uint cls = parts[2] == "idle" ? IdleClass : parts[2] == "below" ? BelowNormalClass : NormalClass;
@@ -487,6 +508,43 @@ static class MemGov
         }
     }
 
+    /// <summary>verylow, low or normal to the IO priority value; -1 when it is none of them.</summary>
+    private static int ParseIoPriority(string word)
+    {
+        if (word == "verylow")
+        {
+            return IoPriorityVeryLow;
+        }
+        if (word == "low")
+        {
+            return IoPriorityLow;
+        }
+        return word == "normal" ? IoPriorityNormal : -1;
+    }
+
+    /// <summary>The process's disk requests queue behind the others' (needs no privilege for very low and low).</summary>
+    private static void SetIoPriority(int pid, int level)
+    {
+        IntPtr process = NativeMethods.OpenProcess(ProcessSetInformation, false, pid);
+        if (process == IntPtr.Zero)
+        {
+            return;
+        }
+        try
+        {
+            int value = level;
+            int status = NativeMethods.NtSetInformationProcess(process, ProcessIoPriority, ref value, sizeof(int));
+            if (status != 0)
+            {
+                throw new Win32Exception((int)NativeMethods.RtlNtStatusToDosError(status));
+            }
+        }
+        finally
+        {
+            NativeMethods.CloseHandle(process);
+        }
+    }
+
     /// <summary>A waiting compiler's pages go to the paging file now, so the ones that run have the RAM.</summary>
     private static void Trim(int pid)
     {

package/schemas/config.schema.json

@@ -144,7 +144,7 @@
               "maximum": 9007199254740991
             }
           ],
-          "description": "Sandbox RAM in MB (>= 2048), or \"auto\": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 2 GB more with vGPU): a bigger value is lowered."
+          "description": "Sandbox RAM in MB (>= 2048), or \"auto\": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 4 GB more with vGPU): a bigger value is lowered."
         },
         "maxMemoryMb": {
           "type": "integer",
@@ -772,7 +772,7 @@
             "targetDir": {
               "type": "string",
               "minLength": 1,
-              "description": "\"shared\": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), \"separate\": <workspace>\\target\\sandbox (kept, no cross-talk), \"local\": on the sandbox's own disk (fastest, lost every boot), or a guest path."
+              "description": "\"auto\" (default): on the sandbox's own disk when C: has 25 GB free at boot, else \"separate\" (builds then write through the mapped workspace, which can overload this PC's disk). \"shared\": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), \"separate\": <workspace>\\target\\sandbox (kept, no cross-talk), \"local\": on the sandbox's own disk (fastest, lost every boot), or a guest path."
             },
             "linker": {
               "type": "string",
@@ -794,7 +794,7 @@
                   "maximum": 32
                 }
               ],
-              "description": "GNU host: how many programs may link at the same time in the whole sandbox (other links wait). \"auto\" = one per 3 GB of sandbox memory after 6 GB, 2 to 8 (the memory governor slows links down too when memory runs short)."
+              "description": "GNU host: how many programs may link at the same time in the whole sandbox (other links wait). \"auto\" = one per 6 GB of sandbox memory, 1 to 4 (the memory governor slows links down too when memory runs short)."
             }
           },
           "additionalProperties": false

package/schemas/sandbox-config.schema.json

@@ -105,7 +105,7 @@
               "maximum": 9007199254740991
             }
           ],
-          "description": "Sandbox RAM in MB (>= 2048), or \"auto\": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 2 GB more with vGPU): a bigger value is lowered."
+          "description": "Sandbox RAM in MB (>= 2048), or \"auto\": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 4 GB more with vGPU): a bigger value is lowered."
         },
         "vGpu": {
           "type": "boolean",
@@ -457,7 +457,7 @@
             "targetDir": {
               "type": "string",
               "minLength": 1,
-              "description": "\"shared\": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), \"separate\": <workspace>\\target\\sandbox (kept, no cross-talk), \"local\": on the sandbox's own disk (fastest, lost every boot), or a guest path."
+              "description": "\"auto\" (default): on the sandbox's own disk when C: has 25 GB free at boot, else \"separate\" (builds then write through the mapped workspace, which can overload this PC's disk). \"shared\": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), \"separate\": <workspace>\\target\\sandbox (kept, no cross-talk), \"local\": on the sandbox's own disk (fastest, lost every boot), or a guest path."
             },
             "linker": {
               "type": "string",
@@ -479,7 +479,7 @@
                   "maximum": 32
                 }
               ],
-              "description": "GNU host: how many programs may link at the same time in the whole sandbox (other links wait). \"auto\" = one per 3 GB of sandbox memory after 6 GB, 2 to 8 (the memory governor slows links down too when memory runs short)."
+              "description": "GNU host: how many programs may link at the same time in the whole sandbox (other links wait). \"auto\" = one per 6 GB of sandbox memory, 1 to 4 (the memory governor slows links down too when memory runs short)."
             }
           },
           "additionalProperties": false