windows-development-sandbox 1.18.3 → 1.18.4

package/dist/runtime/db.js

@@ -5546,6 +5546,7 @@ var SYSTEM = {
   cmd: () => system32("cmd.exe"),
   powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
   tasklist: () => system32("tasklist.exe"),
+  taskkill: () => system32("taskkill.exe"),
   whoami: () => system32("whoami.exe"),
   icacls: () => system32("icacls.exe"),
   tar: () => system32("tar.exe"),
@@ -27295,7 +27296,8 @@ var HeartbeatSchema = external_exports.object({
   topProcesses: external_exports.array(external_exports.object({ name: Text(64), privateMb: external_exports.number().int().min(0).max(1e7) })).max(5),
   /** The disk queue this PC last reported while asking the sandbox to slow down. */
   diskQueueReported: external_exports.number().min(0).max(1e5).optional(),
-  phase: external_exports.enum(["ready", "working"])
+  /** "ending": the sandbox is shutting down in order (idle shutdown, sandbox stop, Windows shutting down). */
+  phase: external_exports.enum(["ready", "working", "ending"])
 });
 var GuestResponseSchema = external_exports.object({
   id: IdSchema,

package/dist/runtime/main.js

@@ -27425,7 +27425,8 @@ var HeartbeatSchema = external_exports.object({
   topProcesses: external_exports.array(external_exports.object({ name: Text(64), privateMb: external_exports.number().int().min(0).max(1e7) })).max(5),
   /** The disk queue this PC last reported while asking the sandbox to slow down. */
   diskQueueReported: external_exports.number().min(0).max(1e5).optional(),
-  phase: external_exports.enum(["ready", "working"])
+  /** "ending": the sandbox is shutting down in order (idle shutdown, sandbox stop, Windows shutting down). */
+  phase: external_exports.enum(["ready", "working", "ending"])
 });
 var GuestResponseSchema = external_exports.object({
   id: IdSchema,
@@ -27883,6 +27884,7 @@ var SYSTEM = {
   cmd: () => system32("cmd.exe"),
   powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
   tasklist: () => system32("tasklist.exe"),
+  taskkill: () => system32("taskkill.exe"),
   whoami: () => system32("whoami.exe"),
   icacls: () => system32("icacls.exe"),
   tar: () => system32("tar.exe"),

package/dist/runtime/netproxy.js

@@ -27348,7 +27348,8 @@ var HeartbeatSchema = external_exports.object({
   topProcesses: external_exports.array(external_exports.object({ name: Text(64), privateMb: external_exports.number().int().min(0).max(1e7) })).max(5),
   /** The disk queue this PC last reported while asking the sandbox to slow down. */
   diskQueueReported: external_exports.number().min(0).max(1e5).optional(),
-  phase: external_exports.enum(["ready", "working"])
+  /** "ending": the sandbox is shutting down in order (idle shutdown, sandbox stop, Windows shutting down). */
+  phase: external_exports.enum(["ready", "working", "ending"])
 });
 var GuestResponseSchema = external_exports.object({
   id: IdSchema,
@@ -27681,6 +27682,7 @@ var SYSTEM = {
   cmd: () => system32("cmd.exe"),
   powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
   tasklist: () => system32("tasklist.exe"),
+  taskkill: () => system32("taskkill.exe"),
   whoami: () => system32("whoami.exe"),
   icacls: () => system32("icacls.exe"),
   tar: () => system32("tar.exe"),

package/dist/runtime/tool.js

@@ -25775,6 +25775,7 @@ var SYSTEM = {
   cmd: () => system32("cmd.exe"),
   powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
   tasklist: () => system32("tasklist.exe"),
+  taskkill: () => system32("taskkill.exe"),
   whoami: () => system32("whoami.exe"),
   icacls: () => system32("icacls.exe"),
   tar: () => system32("tar.exe"),
@@ -27902,7 +27903,8 @@ var HeartbeatSchema = external_exports.object({
   topProcesses: external_exports.array(external_exports.object({ name: Text(64), privateMb: external_exports.number().int().min(0).max(1e7) })).max(5),
   /** The disk queue this PC last reported while asking the sandbox to slow down. */
   diskQueueReported: external_exports.number().min(0).max(1e5).optional(),
-  phase: external_exports.enum(["ready", "working"])
+  /** "ending": the sandbox is shutting down in order (idle shutdown, sandbox stop, Windows shutting down). */
+  phase: external_exports.enum(["ready", "working", "ending"])
 });
 var GuestResponseSchema = external_exports.object({
   id: IdSchema,

package/dist/runtime/view.js

@@ -5756,6 +5756,7 @@ var SYSTEM = {
   cmd: () => system32("cmd.exe"),
   powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
   tasklist: () => system32("tasklist.exe"),
+  taskkill: () => system32("taskkill.exe"),
   whoami: () => system32("whoami.exe"),
   icacls: () => system32("icacls.exe"),
   tar: () => system32("tar.exe"),
@@ -27923,7 +27924,8 @@ var HeartbeatSchema = external_exports.object({
   topProcesses: external_exports.array(external_exports.object({ name: Text(64), privateMb: external_exports.number().int().min(0).max(1e7) })).max(5),
   /** The disk queue this PC last reported while asking the sandbox to slow down. */
   diskQueueReported: external_exports.number().min(0).max(1e5).optional(),
-  phase: external_exports.enum(["ready", "working"])
+  /** "ending": the sandbox is shutting down in order (idle shutdown, sandbox stop, Windows shutting down). */
+  phase: external_exports.enum(["ready", "working", "ending"])
 });
 var GuestResponseSchema = external_exports.object({
   id: IdSchema,

package/dist/selftest/heavy-load.test.js

@@ -10,9 +10,12 @@ import { SYSTEM } from '../shared/system.js';
 import { GuestRequestSchema, PressureStatusSchema } from '../shared/channel/index.js';
 import { compilersAllowed, DIAL_CALM_SAMPLES, DIAL_STEPS, HOST_THRESHOLDS, buildJobs, cargoJobs, linkSlotsFor, usableCpus, effectiveCpuLimit, gentleCpuLimit, maxCompilers, chooseTargetDir, } from '../shared/memory/index.js';
 import { HeartbeatSchema } from '../shared/channel/index.js';
-import { heartbeatLine, lastEndOf } from '../host/life/index.js';
+import { heartbeatLine, lastEndOf, vanishedCause, stopWarning } from '../host/life/index.js';
 import { cappedMemoryMb, decideMemory, memoryNote, residentCapMb, residentNote, resolveMemoryMb, } from '../host/launch/index.js';
 import { vgpuWarning, GENTLE_NOTE } from '../host/launch/risk-notes.js';
+import { judgeSandbox } from '../host/health/index.js';
+import { cleanUpLeftovers, cleanupQuestion, killArgs } from '../host/sandbox/index.js';
+import { parseTasklist } from '../host/sharing/index.js';
 import { bugcheckCode, cpuPercentBetween, explainStop, findDumps, findingLines, freezeLine, hostPressure, lowReason, severeHost, pageFileRisk, parseHostMemory, crashReportText, watchdogStep, WATCHDOG_START, } from '../host/life/index.js';
 // The pure governor files only: governor.ts loads the guest runtime (session.json), which exists only in a sandbox.
 import { canLower, canPause, decide, INITIAL_STATE, isLinker, linkerSlots, ROTATE_MS, } from '../guest/governor/decide.js';
@@ -252,12 +255,79 @@ export const heavyLoadSuite = {
         t.check(!HeartbeatSchema.safeParse({ ...beat, topProcesses: Array.from({ length: 6 }, () => beat.topProcesses[0]) })
             .success &&
             !HeartbeatSchema.safeParse({ ...beat, topProcesses: [{ name: 'x'.repeat(500), privateMb: 1 }] }).success, 'an oversize heartbeat is refused');
-        t.check(heartbeatLine({ ...beat, topProcesses: [{ name: 'ab', privateMb: 5 }] }).includes('') === false, 'guest text in the heartbeat line goes through safeText');
+        t.check(heartbeatLine({ ...beat, topProcesses: [{ name: 'a\u0007b', privateMb: 5 }] }).includes('\u0007') === false, 'guest text in the heartbeat line goes through safeText');
         const life = { started: '2026-11-02T20:45:00.000Z', lastSeen: '2026-11-02T21:31:30.000Z', keepAwake: false };
         t.check((lastEndOf(life, beat, false)?.text ?? '').includes('disks were overloaded') &&
             lastEndOf(life, beat, true) === null &&
             lastEndOf(null, beat, false) === null &&
             lastEndOf({ ...life, ended: { at: life.lastSeen, cause: null } }, beat, false) === null, 'last end: an unexpected end names the disks; running, no record or a normal close say nothing');
+        t.section('Windows Sandbox programs left behind by a dead sandbox');
+        const list = [
+            '"explorer.exe","1200","Console","1","90,000 K"',
+            '"WindowsSandboxClient.exe","4100","Console","1","30,000 K"',
+            '"WindowsSandboxRemoteSession.exe","4200","Console","1","40,000 K"',
+            '"vmwp.exe","4300","Services","0","50,000 K"',
+            '"WindowsSandboxServer.exe","4400","Console","2","30,000 K"',
+        ].join('\n');
+        const baseFacts = {
+            rows: parseTasklist(list),
+            mySession: 1,
+            heartbeatAgeMs: null,
+            lifeEnded: false,
+            startedAgeMs: 3_600_000,
+            answers: null,
+        };
+        const judged = (patch) => judgeSandbox({ ...baseFacts, ...patch });
+        t.check(judged({ rows: parseTasklist('"explorer.exe","1200","Console","1","1 K"') }).state === 'none', 'no Windows Sandbox program: none');
+        t.check(judged({ heartbeatAgeMs: 10_000 }).state === 'running' &&
+            judged({ answers: true, lifeEnded: true }).state === 'running', 'a fresh heartbeat, or a ping answered: the sandbox is ours and running');
+        t.check(judged({ startedAgeMs: 60_000 }).state === 'starting', 'started a minute ago, no heartbeat yet: starting');
+        const leftoverJudged = judged({ lifeEnded: true });
+        t.check(leftoverJudged.state === 'leftover' &&
+            leftoverJudged.pids.join() === '4100,4200' &&
+            leftoverJudged.images.join() === 'WindowsSandboxClient.exe,WindowsSandboxRemoteSession.exe', 'the watcher saw it end but the programs remain: leftover; only this session, only the user programs (not vmwp.exe, not session 2)', leftoverJudged.pids.join());
+        t.check(judged({ heartbeatAgeMs: 600_000 }).state === 'leftover', 'a heartbeat that stopped ten minutes ago: leftover');
+        t.check(judged({ heartbeatAgeMs: 100_000 }).state === 'running', 'a heartbeat 100 seconds old is not yet "gone"');
+        t.check(judged({}).state === 'running', 'no heartbeat at all (an older sandbox) and no end: treated as running, never ended');
+        t.check(judged({ mySession: null, lifeEnded: true }).state === 'foreign' &&
+            judged({ mySession: 3, lifeEnded: true }).pids.length === 0, "another session's sandbox is never touched");
+        t.check(killArgs([4100, 4200, 0, 2, -5, 1.5]).join(' ') === '/F /PID 4100 /PID 4200' &&
+            cleanupQuestion(leftoverJudged).lines.join(' ').includes('Nothing else'), 'taskkill gets only real process ids; the question names what is closed');
+        const run = async (facts, answers, over = {}) => {
+            const did = [];
+            let n = 0;
+            let asked = 0;
+            const outcome = await cleanUpLeftovers({
+                facts: () => Promise.resolve(facts[Math.min(n++, facts.length - 1)]),
+                end: (pids) => {
+                    did.push('end ' + pids.join(','));
+                    return true;
+                },
+                restartService: () => {
+                    did.push('service');
+                    return true;
+                },
+                confirm: () => Promise.resolve(answers[asked++] ?? false),
+                say: (line) => did.push('say ' + line),
+                ...over,
+            });
+            return { outcome, did };
+        };
+        const noneLeft = { ...baseFacts, rows: [] };
+        const asked = await run([{ ...baseFacts, lifeEnded: true }, noneLeft], [true]);
+        t.check(asked.outcome === 'cleaned' && asked.did[0] === 'end 4100,4200' && !asked.did.includes('service'), 'leftover, yes: they are closed and nothing else happens');
+        const declinedRun = await run([{ ...baseFacts, lifeEnded: true }], [false]);
+        t.check(declinedRun.outcome === 'declined' && declinedRun.did.length === 0, 'leftover, no: nothing is closed');
+        const live = await run([{ ...baseFacts, heartbeatAgeMs: 5000 }], [true]);
+        t.check(live.outcome === 'alive' && !live.did.some((d) => d.startsWith('end')), 'a sandbox that is alive is never closed, whatever the answer');
+        t.check((await run([noneLeft], [true])).outcome === 'nothing', 'nothing left: nothing to do');
+        const stuck = { ...baseFacts, lifeEnded: true };
+        const serviceYes = await run([stuck, stuck], [true, true]);
+        t.check(serviceYes.outcome === 'service-restarted' && serviceYes.did.includes('service'), 'programs that will not go: asks, then restarts the service (elevated)');
+        const serviceNo = await run([stuck, stuck], [true, false]);
+        t.check(serviceNo.outcome === 'declined' && !serviceNo.did.includes('service'), 'the service is only restarted when you say yes');
+        const forced = await run([stuck, noneLeft], [true], { alsoService: true });
+        t.check(forced.outcome === 'service-restarted', 'asked to restart the service as well: it does, without a second question');
         t.section('the governor over a port (fake Windows)');
         const calls = [];
         const port = {
@@ -403,6 +473,53 @@ export const heavyLoadSuite = {
         t.check(pageFileRisk(pc({ pageFile: 'fixed', commitLimitMb: 90000, commitAvailableMb: 80000 }), 20000) === null, 'a fixed but large one is fine');
         t.section('the crash report');
         const ev = (id, provider, at, process = '') => ({ id, provider, at, process });
+        t.section('a sandbox that vanishes');
+        const kindOf = (events) => explainStop(events)?.kind ?? 'none';
+        t.check(kindOf([
+            ev(4101, 'Display', '2026-11-02T21:31:00Z', 'Display driver nvlddmkm stopped responding and has successfully recovered.'),
+        ]) === 'gpu' && explainStop([ev(4101, 'Display', '2026-11-02T21:31:00Z')]).text.includes('graphics driver'), 'Display 4101: the graphics driver reset (gpu)');
+        t.check(kindOf([
+            ev(1001, 'Windows Error Reporting', '2026-11-02T21:31:00Z', 'Fault bucket 1, type 5' + ' Event Name: LiveKernelEvent' + ' P1: 141' + ' P2: ffff'),
+        ]) === 'gpu' &&
+            kindOf([
+                ev(1001, 'Windows Error Reporting', '2026-11-02T21:31:00Z', 'Event Name: LiveKernelEvent P1: 1a8 P2: 0'),
+            ]) === 'gpu' &&
+            kindOf([
+                ev(1001, 'Windows Error Reporting', '2026-11-02T21:31:00Z', 'Event Name: LiveKernelEvent P1: 999 P2: 0'),
+            ]) === 'none', 'LiveKernelEvent 117, 141 and 1a8 are GPU resets; other codes are not a cause');
+        t.check(explainStop([ev(1000, 'Application Error', '2026-11-02T21:31:00Z', 'Faulting application name: vmwp.exe')])
+            ?.kind === 'hyperv' &&
+            kindOf([ev(1001, 'Windows Error Reporting', '2026-11-02T21:31:00Z', 'vmmemWindowsSandbox crashed')]) ===
+                'hyperv' &&
+            kindOf([ev(1000, 'Application Error', '2026-11-02T21:31:00Z', 'Faulting application name: notepad.exe')]) ===
+                'none', 'a crash report of vmwp.exe or vmmem is a cause; another program is not');
+        t.check(kindOf([ev(12010, 'Microsoft-Windows-Hyper-V-VmSwitch', '2026-11-02T21:31:00Z')]) === 'hyperv' &&
+            kindOf([ev(40001, 'Microsoft-Windows-Hyper-V-Worker', '2026-11-02T21:31:00Z')]) === 'none' &&
+            kindOf([ev(18590, 'Microsoft-Windows-Hyper-V-Worker', '2026-11-02T21:31:00Z', 'ErrorCode0: 0x50')]) ===
+                'sandboxCrash', 'Hyper-V worker, switch and compute errors are a cause; the sandbox crashing inside is still its own kind');
+        const started = '2026-11-02T20:45:00.000Z';
+        const endMs = Date.parse('2026-11-02T21:32:00.000Z');
+        const working = {
+            at: '2026-11-02T21:31:50.000Z',
+            uptimeS: 2800,
+            ramFreePct: 60,
+            commitPct: 30,
+            step: 0,
+            hostStep: 0,
+            topProcesses: [],
+            phase: 'working',
+        };
+        t.check(vanishedCause(working, started, false, endMs)?.kind === 'vanished', 'busy, fresh heartbeat, no word of leaving: vanished');
+        t.check(vanishedCause({ ...working, phase: 'ending' }, started, false, endMs) === null &&
+            vanishedCause(working, started, true, endMs) === null &&
+            vanishedCause(null, started, false, endMs) === null, 'an orderly end, a stop on purpose, or no heartbeat is not a vanishing');
+        t.check(vanishedCause({ ...working, phase: 'ready' }, started, false, endMs) === null &&
+            vanishedCause({ ...working, phase: 'ready', step: 2 }, started, false, endMs)?.kind === 'vanished', 'an idle sandbox (window closed by hand) is on purpose; one that was slowing builds down is not');
+        t.check(vanishedCause({ ...working, at: '2026-11-02T21:20:00.000Z' }, started, false, endMs) === null &&
+            vanishedCause({ ...working, at: '2026-11-01T21:31:50.000Z' }, started, false, endMs) === null, 'a stale heartbeat, or one from an earlier run, says nothing about this end');
+        const gone = vanishedCause(working, started, false, endMs);
+        const warning = stopWarning({ started, lastSeen: '2026-11-02T21:31:30.000Z', keepAwake: false, ended: { at: gone.at, cause: gone } }, () => null);
+        t.check((warning ?? '').includes('ended suddenly') && (warning ?? '').includes('vGPU'), 'the next launch warns about a vanished sandbox, and says what usually causes it');
         t.check(bugcheckCode('BugcheckCode 209') === '0xD1' && bugcheckCode('BugcheckCode 0') === null, 'Kernel-Power 41 stop code');
         const cause = explainStop([ev(41, 'Microsoft-Windows-Kernel-Power', '2026-10-15T20:53:47Z', 'BugcheckCode 0')]);
         t.check(cause?.kind === 'crash' && cause.text.includes('freeze'), 'no stop code: a freeze, crash or power cut');

package/dist/shared/channel/schema.d.ts

@@ -828,6 +828,7 @@ export declare const HeartbeatSchema: z.ZodObject<{
     phase: z.ZodEnum<{
         ready: "ready";
         working: "working";
+        ending: "ending";
     }>;
 }, z.core.$strip>;
 export type Heartbeat = z.output<typeof HeartbeatSchema>;

package/dist/shared/channel/schema.js

@@ -150,7 +150,8 @@ export const HeartbeatSchema = z.object({
     topProcesses: z.array(z.object({ name: Text(64), privateMb: z.number().int().min(0).max(1e7) })).max(5),
     /** The disk queue this PC last reported while asking the sandbox to slow down. */
     diskQueueReported: z.number().min(0).max(100000).optional(),
-    phase: z.enum(['ready', 'working']),
+    /** "ending": the sandbox is shutting down in order (idle shutdown, sandbox stop, Windows shutting down). */
+    phase: z.enum(['ready', 'working', 'ending']),
 });
 /** C:\AgentData\run\responses\<id>.json: the guest's reply. */
 export const GuestResponseSchema = z.object({

package/dist/shared/system.d.ts

@@ -3,6 +3,7 @@ export declare const SYSTEM: {
     readonly cmd: () => string;
     readonly powershell: () => string;
     readonly tasklist: () => string;
+    readonly taskkill: () => string;
     readonly whoami: () => string;
     readonly icacls: () => string;
     readonly tar: () => string;

package/dist/shared/system.js

@@ -9,6 +9,7 @@ export const SYSTEM = {
     cmd: () => system32('cmd.exe'),
     powershell: () => system32('WindowsPowerShell\\v1.0\\powershell.exe'),
     tasklist: () => system32('tasklist.exe'),
+    taskkill: () => system32('taskkill.exe'),
     whoami: () => system32('whoami.exe'),
     icacls: () => system32('icacls.exe'),
     tar: () => system32('tar.exe'),

package/dist/sync/watcher.js

@@ -13,7 +13,7 @@ import { readForwards, sandboxAddress, startPortForwards } from '../host/network
 import { AuditCollector, AuditLog, readAuditSettings } from '../host/audit/index.js';
 import { readMarkedProjects, saveDataSize, watchAndMark } from '../host/guard/index.js';
 import { sizeWithin } from '../core/disk.js';
-import { autoRestartAllowed, causeSince, appendHostMemory, cpuPercentBetween, KeepAwake, LifeRecord, HostMemoryStream, readHostMemoryAsync, readLoadSettings, REQUEST_SECONDS, WATCHDOG_START, watchdogStep, saveCrashReport, SessionLedger, } from '../host/life/index.js';
+import { autoRestartAllowed, causeSince, readHeartbeat, vanishedCause, appendHostMemory, cpuPercentBetween, KeepAwake, LifeRecord, HostMemoryStream, readHostMemoryAsync, readLoadSettings, REQUEST_SECONDS, WATCHDOG_START, watchdogStep, saveCrashReport, SessionLedger, } from '../host/life/index.js';
 import { SandboxChannel } from '../host/channel/index.js';
 import { ProjectRegistry } from '../host/projects/registry.js';
 import { ContainedStorage, setNameOf, storageOf } from '../host/storage/index.js';
@@ -67,7 +67,7 @@ export function watcherRunning(dataPath) {
     }
 }
 /** The ways the sandbox itself ends badly (the PC going down takes the watcher with it, so it never gets here). */
-const RESTARTABLE = ['sandboxCrash', 'memory'];
+const RESTARTABLE = ['sandboxCrash', 'memory', 'gpu', 'hyperv', 'vanished'];
 /**
  * The background watcher of one data folder: while the sandbox runs it syncs history back every minute, guards the
  * projects' git folders, keeps filtered workspaces in step, forwards ports, marks downloaded files, records the audit
@@ -318,8 +318,13 @@ export class Watcher {
     recordEnd() {
         try {
             const last = this.life.read();
-            const cause = last ? causeSince(last.lastSeen, this.storageRoot) : null;
-            const report = last && cause ? saveCrashReport(this.storageRoot, this.dataPath, last.lastSeen) : null;
+            // Windows' own log first; when it says nothing, a sandbox that was busy and left no word of leaving "vanished".
+            const logged = last ? causeSince(last.lastSeen, this.storageRoot) : null;
+            const cause = logged ??
+                (last
+                    ? vanishedCause(readHeartbeat(this.dataPath), last.started, this.ledger.read()?.closedOnPurpose === true, Date.now())
+                    : null);
+            const report = last && cause ? saveCrashReport(this.storageRoot, this.dataPath, last.lastSeen, cause) : null;
             this.life.end(cause, new Date(), report);
             this.cause = cause;
             // Ended with nothing wrong (its window closed, or it shut itself down idle): on purpose.

package/dist/web/index.html

@@ -6,7 +6,7 @@
     <title>Sandbox</title>
     <link rel="icon" href="data:," />
     <link rel="stylesheet" href="/main-XT7T6ODM.css" />
-    <script type="module" src="/main-6XYO5FZC.js"></script>
+    <script type="module" src="/main-GVZWWP4I.js"></script>
   </head>
   <body>
     <div id="root"></div>