windows-development-sandbox 1.27.3 → 1.29.0

package/dist/runtime/daemon.js

@@ -25521,7 +25521,7 @@ var SandboxSchema = external_exports.strictObject({
     'The last resort that keeps the sandbox up, in MB below its commit limit (RAM plus paging file): builds are slowed down long before (sandbox.pressureResponse); only if everything the agents start together would take the sandbox to the very edge of its memory, where Windows inside it would start failing, is a build refused memory instead of Windows. "auto" = the larger of 1536 MB and 3 % of the commit limit; "none" = no backstop. Yours only: a project file cannot change it.'
   ),
   pressureResponse: external_exports.boolean().describe(
-    "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it."
+    "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. A memory gate also holds new compilers and linkers for a moment when the memory of the build programs grows faster than 4 GB in 3 seconds (3 GB with vGPU), and lets them go one at a time. Yours only: a project file cannot change it."
   ),
   vGpu: external_exports.boolean().describe(
     "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
@@ -25535,7 +25535,7 @@ var SandboxSchema = external_exports.strictObject({
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
   headless: external_exports.boolean().describe(
-    "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+    'Hide the sandbox window ("Show the window" brings it back). A headless sandbox shuts down when its last session ends.'
   ),
   keepAwake: external_exports.boolean().describe(
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."
@@ -27922,6 +27922,8 @@ var PressureStatusSchema = external_exports.object({
   lowered: external_exports.number().int().min(0).max(1024),
   /** Compilers waiting their turn right now (name, process id, seconds until they may go on). */
   paused: external_exports.array(external_exports.object({ name: Text(64), pid: external_exports.number().int(), seconds: external_exports.number().int().min(0).max(60) })).max(8),
+  /** Build programs the memory gate holds right now (let go one at a time). */
+  held: external_exports.number().int().min(0).max(1024).optional(),
   /** The CPU share the compilers get together (percent; 100 = no cap). */
   cpuPercent: external_exports.number().int().min(0).max(100).optional(),
   /** The PC itself asked for slowing down (its memory or CPU is low). */
@@ -27942,6 +27944,8 @@ var HeartbeatSchema = external_exports.object({
   topProcesses: external_exports.array(external_exports.object({ name: Text(64), privateMb: external_exports.number().int().min(0).max(1e7) })).max(5),
   /** The disk queue this PC last reported while asking the sandbox to slow down. */
   diskQueueReported: external_exports.number().min(0).max(1e5).optional(),
+  /** Build programs the memory gate holds right now (let go one at a time). */
+  held: external_exports.number().int().min(0).max(1024).optional(),
   /** "ending": the sandbox is shutting down in order (idle shutdown, sandbox stop, Windows shutting down). */
   phase: external_exports.enum(["ready", "working", "ending"])
 });
@@ -30036,6 +30040,10 @@ function toolLines(primaryName, toolSummary, projects) {
     "- Tools by project: each project gets the tools its own files ask for; python and rust already installed here are on every project's PATH."
   ];
 }
+function pcLogsGuideLine(launchDir2, exists2) {
+  const dir = path31.win32.join(launchDir2, "pc-logs");
+  return exists2(dir) ? ["- PC crash reports and logs (this project only, read-only, never commit them): `" + dir + "`"] : [];
+}
 
 // src/shared/unreal/engines.ts
 import crypto3 from "node:crypto";
@@ -31911,6 +31919,7 @@ function sandboxGuide(toolSummary, lan = "blocked", projects = [], addons = [])
     "- RW, persists: `" + stateDir + "` (agent config/history; do not edit logins) \xB7 logs: `" + path46.join(dataDir, "logs") + "`",
     "- RO: `" + launchDir + "` (this boot's scripts) \xB7 lost on close: everything else, incl. `C:\\nvm` (Node symlink)",
     ...mirrorLine(),
+    ...pcLogsGuideLine(launchDir, fs28.existsSync),
     ...toolLines(session.project, toolSummary, projects),
     ...unrealLines(projects),
     ...unityLines(projects),
@@ -32109,11 +32118,10 @@ async function setupBun(env) {
     tool("bun", "bin"),
     { size: "35 MB" }
   );
-  Object.assign(env.vars, {
-    BUN_INSTALL: tool("bun"),
-    BUN_INSTALL_CACHE_DIR: path48.join(localDir, "bun-cache"),
-    BUN_TMPDIR: path48.join(localDir, "bun-tmp")
-  });
+  const cache = path48.join(localDir, "bun-cache");
+  const temp = path48.join(localDir, "bun-tmp");
+  if (!dryRun) [cache, temp].forEach((dir) => mkdirp(dir));
+  Object.assign(env.vars, { BUN_INSTALL: tool("bun"), BUN_INSTALL_CACHE_DIR: cache, BUN_TMPDIR: temp });
 }
 async function setupDeno(env) {
   await setupSingleExe(
@@ -32687,9 +32695,10 @@ function fileSha256(file3) {
     stream.on("end", () => resolve2(hash2.digest("hex")));
   });
 }
+var MISSING_PACKAGE = 'this PC did not hand over its package (it could not fetch it: see the launch notes). Fix: on this PC run "winget download --id <product id> --source msstore", then launch again';
 async function checkedPackage(dir) {
   const manifest2 = readValid(StorePackageManifestSchema, path55.join(dir, STORE_PACKAGE_MANIFEST));
-  if (!manifest2) throw new Error("the package was not handed over (this PC could not fetch it: see the launch notes)");
+  if (!manifest2) throw new Error(MISSING_PACKAGE);
   for (const f of manifest2.files) {
     if (await fileSha256(path55.join(dir, f.name)).catch(() => "") !== f.sha256)
       throw new Error(f.name + " is missing or changed");
@@ -33069,7 +33078,9 @@ var AppInstaller = class {
       warn(
         entry.name + " could not be installed and is skipped; the other apps are not affected. Reason: " + errMsg(e)
       );
-      this.env.summary.push(entry.name + ": FAILED");
+      this.env.summary.push(
+        "store" in entry.source ? entry.name + ": not installed - " + errMsg(e).slice(0, 300) : entry.name + ": FAILED"
+      );
     }
   }
   /** The command line an app's shortcut starts it with (Comet: its own profile, DevTools on 127.0.0.1). */
@@ -37686,6 +37697,10 @@ function maxCompilers(cpus, profile) {
 function cargoLinkerVar(host) {
   return "CARGO_TARGET_" + host.toUpperCase().replace(/[^A-Z0-9]/g, "_") + "_LINKER";
 }
+var BURST_GATE = {
+  normal: { growthMb: 4096, windowMs: 3e3, releaseMs: 1500, maxHoldMs: 3e4 },
+  gentle: { growthMb: 3072, windowMs: 3e3, releaseMs: 2e3, maxHoldMs: 3e4 }
+};
 
 // src/guest/governor/decide.ts
 var COMPILERS = /* @__PURE__ */ new Set([
@@ -37786,6 +37801,7 @@ function linkerSlots(totalMb, cpus) {
 }
 var isHeavyCompiler = (name) => !isNeverTouched(name) && HEAVY.has(key(name));
 var canPause = (name) => !isNeverTouched(name) && COMPILERS.has(key(name));
+var GATE_NAMES = [...COMPILERS, "shadercompileworker"].filter((n) => !NEVER2.has(n)).sort();
 var INITIAL_STATE = {
   step: 0,
   calm: 0,
@@ -38748,6 +38764,9 @@ async function sendControl(endpoint, type) {
 // src/shared/pty/output-filter.ts
 var MAX_CLIPBOARD_STRING = 1024 * 1024;
 
+// src/shared/web/protocol.ts
+var MAX_CLIENT_MESSAGE_BYTES = 256 * 1024;
+
 // src/guest/sessions/cmdline.ts
 import path106 from "node:path";
 var quoted = (arg) => '"' + arg.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/, "$1$1") + '"';
@@ -39240,6 +39259,63 @@ async function flushAccounts(final = false) {
 import os15 from "node:os";
 
 // src/guest/governor/core.ts
+function memgovArgs(profile) {
+  const g = BURST_GATE[profile];
+  return [
+    "serve",
+    "--interval",
+    "2",
+    "--gate",
+    [g.growthMb, g.windowMs, g.releaseMs, g.maxHoldMs].join(":"),
+    "--gate-names",
+    GATE_NAMES.join(",")
+  ];
+}
+var GateBase = { event: external_exports.literal("gate"), at: external_exports.number() };
+var GateName = external_exports.string().max(128);
+var GateCount = external_exports.number().int().min(0);
+var GateEventSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({
+    ...GateBase,
+    kind: external_exports.literal("ready"),
+    mode: external_exports.enum(["notify", "poll"]),
+    growthMb: GateCount,
+    windowMs: GateCount
+  }),
+  external_exports.strictObject({ ...GateBase, kind: external_exports.literal("off"), reason: external_exports.string().max(200) }),
+  external_exports.strictObject({
+    ...GateBase,
+    kind: external_exports.literal("trip"),
+    grewMb: GateCount,
+    ms: GateCount,
+    jobMb: GateCount,
+    held: external_exports.array(external_exports.strictObject({ pid: external_exports.number().int(), name: GateName })).max(64)
+  }),
+  external_exports.strictObject({ ...GateBase, kind: external_exports.literal("hold"), pid: external_exports.number().int(), name: GateName }),
+  external_exports.strictObject({
+    ...GateBase,
+    kind: external_exports.literal("release"),
+    pid: external_exports.number().int(),
+    name: GateName,
+    heldMs: GateCount,
+    forced: external_exports.boolean()
+  })
+]);
+function gateLine(e) {
+  const cut = (s) => s.slice(0, 64);
+  switch (e.kind) {
+    case "ready":
+      return "gate: on (" + e.mode + "): new compilers wait when the agents' programs grow by more than " + e.growthMb + " MB within " + e.windowMs / 1e3 + " s";
+    case "off":
+      return "gate: off (" + e.reason + "): builds are only slowed down by the dial";
+    case "trip":
+      return "gate: the agents' programs grew " + e.grewMb + " MB in " + (e.ms / 1e3).toFixed(1) + " s (now " + e.jobMb + " MB); holding " + e.held.length + ": " + e.held.slice(0, 8).map((p) => cut(p.name) + " (" + p.pid + ")").join(", ") + (e.held.length > 8 ? " \u2026" : "");
+    case "hold":
+      return "gate: " + cut(e.name) + " (" + e.pid + ") waits at start while a build burst goes through in turn";
+    case "release":
+      return "gate: " + cut(e.name) + " (" + e.pid + ") goes on after " + (e.heldMs / 1e3).toFixed(1) + " s" + (e.forced ? " (the longest it may wait)" : "");
+  }
+}
 var STEP_TEXT = [
   "builds back to normal",
   "build programs at lower priority",
@@ -39289,6 +39365,7 @@ var GovernorCore = class {
       commitPercent: d.commitPercent,
       step: d.state.step,
       hostStep: nowMs < d.state.hostUntil ? d.state.hostStep : 0,
+      held: sample.gateHeld ?? 0,
       diskQueue: null,
       top: [...sample.procs].sort((a, b) => b.mb - a.mb).slice(0, 5).map((p) => ({ name: p.name.slice(0, 64), mb: Math.round(p.mb) }))
     };
@@ -39310,6 +39387,7 @@ var GovernorCore = class {
       commitPercent: Math.max(0, Math.min(100, d.commitPercent)),
       lowered: Object.keys(d.state.lowered).length,
       paused: [...this.held].slice(0, 8).map(([pid, name]) => ({ name: name.slice(0, 64), pid, seconds: HOLD_MS / 1e3 })),
+      held: sample.gateHeld ?? 0,
       cpuPercent: d.state.cpuRate,
       pcLow: nowMs < d.state.hostUntil,
       lastAction: this.lastAction.slice(0, 300),
@@ -39322,6 +39400,10 @@ var GovernorCore = class {
       this.deps.saveStatus(status);
     }
   }
+  /** An event from the memory gate in memgov: goes to the memory log. */
+  onGate(event) {
+    this.note(gateLine(event));
+  }
   apply(action) {
     const port = this.deps.port;
     try {
@@ -39382,26 +39464,34 @@ var SampleSchema = external_exports.object({
       mb: external_exports.number(),
       prio: external_exports.enum(["idle", "below", "normal"]).catch("normal")
     })
-  ).max(1024)
+  ).max(1024),
+  gateHeld: external_exports.number().int().min(0).max(1024).optional().catch(void 0)
 });
 var MemGovProcess = class {
-  constructor(onSample) {
+  constructor(args, onSample, onGate) {
+    this.args = args;
     this.onSample = onSample;
+    this.onGate = onGate;
   }
+  args;
   onSample;
+  onGate;
   child = null;
   start() {
     try {
-      const child = spawn12(ensureCompiled("memgov"), ["serve", "--interval", "2"], {
+      const child = spawn12(ensureCompiled("memgov"), [...this.args], {
         stdio: ["pipe", "pipe", "ignore"],
         windowsHide: true
       });
       this.child = child;
       createInterface({ input: child.stdout }).on("line", (line) => {
         try {
-          this.onSample(SampleSchema.parse(JSON.parse(line)));
+          const raw = JSON.parse(line);
+          if (typeof raw === "object" && raw !== null && raw.event === "gate")
+            this.onGate(GateEventSchema.parse(raw));
+          else this.onSample(SampleSchema.parse(raw));
         } catch (e) {
-          warn("governor: bad sample: " + errMsg(e));
+          warn("governor: bad line from memgov: " + errMsg(e));
         }
       });
       child.stdin.on("error", () => void 0);
@@ -39454,12 +39544,16 @@ var Governor = class {
   describe() {
     const profile = session.loadProfile === "gentle" ? "gentle" : "normal";
     const first = DIAL_STEPS[profile][0];
-    return session.pressureResponse === false ? "off (sandbox.pressureResponse)" : profile + " profile: slows builds down from " + first.availablePercent + "% free RAM or " + first.commitPercent + "% commit, in steps";
+    return session.pressureResponse === false ? "off (sandbox.pressureResponse)" : profile + " profile: slows builds down from " + first.availablePercent + "% free RAM or " + first.commitPercent + "% commit, in steps; holds new compilers when memory grows faster than " + BURST_GATE[profile].growthMb + " MB in " + BURST_GATE[profile].windowMs / 1e3 + " s";
   }
   start() {
     if (session.pressureResponse === false) return;
     const profile = session.loadProfile === "gentle" ? "gentle" : "normal";
-    const proc = new MemGovProcess((s) => this.core?.onSample(s));
+    const proc = new MemGovProcess(
+      memgovArgs(profile),
+      (s) => this.core?.onSample(s),
+      (e) => this.core?.onGate(e)
+    );
     this.core = new GovernorCore({
       port: proc,
       profile,
@@ -39502,6 +39596,7 @@ function buildHeartbeat(snapshot2, sessionCount, uptimeSeconds, freeBytes2, tota
     hostStep: clamp(snapshot2?.hostStep ?? 0, 0, 4),
     topProcesses: (snapshot2?.top ?? []).slice(0, 5).map((p) => ({ name: p.name.slice(0, 64), privateMb: p.mb })),
     ...snapshot2?.diskQueue !== null && snapshot2?.diskQueue !== void 0 ? { diskQueueReported: snapshot2.diskQueue } : {},
+    ...snapshot2 && snapshot2.held > 0 ? { held: Math.min(1024, snapshot2.held) } : {},
     phase: ending ? "ending" : sessionCount > 0 ? "working" : "ready"
   };
 }

package/dist/runtime/db.js

@@ -25478,7 +25478,7 @@ var SandboxSchema = external_exports.strictObject({
     'The last resort that keeps the sandbox up, in MB below its commit limit (RAM plus paging file): builds are slowed down long before (sandbox.pressureResponse); only if everything the agents start together would take the sandbox to the very edge of its memory, where Windows inside it would start failing, is a build refused memory instead of Windows. "auto" = the larger of 1536 MB and 3 % of the commit limit; "none" = no backstop. Yours only: a project file cannot change it.'
   ),
   pressureResponse: external_exports.boolean().describe(
-    "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it."
+    "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. A memory gate also holds new compilers and linkers for a moment when the memory of the build programs grows faster than 4 GB in 3 seconds (3 GB with vGPU), and lets them go one at a time. Yours only: a project file cannot change it."
   ),
   vGpu: external_exports.boolean().describe(
     "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
@@ -25492,7 +25492,7 @@ var SandboxSchema = external_exports.strictObject({
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
   headless: external_exports.boolean().describe(
-    "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+    'Hide the sandbox window ("Show the window" brings it back). A headless sandbox shuts down when its last session ends.'
   ),
   keepAwake: external_exports.boolean().describe(
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."
@@ -27676,6 +27676,8 @@ var PressureStatusSchema = external_exports.object({
   lowered: external_exports.number().int().min(0).max(1024),
   /** Compilers waiting their turn right now (name, process id, seconds until they may go on). */
   paused: external_exports.array(external_exports.object({ name: Text(64), pid: external_exports.number().int(), seconds: external_exports.number().int().min(0).max(60) })).max(8),
+  /** Build programs the memory gate holds right now (let go one at a time). */
+  held: external_exports.number().int().min(0).max(1024).optional(),
   /** The CPU share the compilers get together (percent; 100 = no cap). */
   cpuPercent: external_exports.number().int().min(0).max(100).optional(),
   /** The PC itself asked for slowing down (its memory or CPU is low). */
@@ -27696,6 +27698,8 @@ var HeartbeatSchema = external_exports.object({
   topProcesses: external_exports.array(external_exports.object({ name: Text(64), privateMb: external_exports.number().int().min(0).max(1e7) })).max(5),
   /** The disk queue this PC last reported while asking the sandbox to slow down. */
   diskQueueReported: external_exports.number().min(0).max(1e5).optional(),
+  /** Build programs the memory gate holds right now (let go one at a time). */
+  held: external_exports.number().int().min(0).max(1024).optional(),
   /** "ending": the sandbox is shutting down in order (idle shutdown, sandbox stop, Windows shutting down). */
   phase: external_exports.enum(["ready", "working", "ending"])
 });