windows-development-sandbox 1.9.0 → 1.10.0

package/dist/shared/io/index.d.ts

@@ -1,3 +1,5 @@
 export * from './json.js';
 export * from './json-file.js';
 export * from './safe-remove.js';
+export * from './robocopy-result.js';
+export * from './copy-tree.js';

package/dist/shared/io/index.js

@@ -1,3 +1,5 @@
 export * from './json.js';
 export * from './json-file.js';
 export * from './safe-remove.js';
+export * from './robocopy-result.js';
+export * from './copy-tree.js';

package/dist/shared/io/robocopy-result.d.ts

@@ -0,0 +1,6 @@
+/** Exit code 8 and up means something could not be copied; below that every file is in place. */
+export declare function robocopyFailed(code: number | null): boolean;
+/** The exit code in plain words (it is a bit field: 1 copied, 2 extras, 4 mismatches, 8 failures, 16 fatal). */
+export declare function robocopyMeaning(code: number | null): string;
+/** The first few ERROR lines of robocopy's output (what went wrong and on which file), one line each. */
+export declare function robocopyErrors(output: string, max?: number): string[];

package/dist/shared/io/robocopy-result.js

@@ -0,0 +1,23 @@
+// Reading robocopy's exit code and output (pure; the guest and the tests share it).
+/** Exit code 8 and up means something could not be copied; below that every file is in place. */
+export function robocopyFailed(code) {
+    return code === null || code >= 8;
+}
+/** The exit code in plain words (it is a bit field: 1 copied, 2 extras, 4 mismatches, 8 failures, 16 fatal). */
+export function robocopyMeaning(code) {
+    if (code === null)
+        return 'robocopy did not finish';
+    if (code >= 16)
+        return 'robocopy stopped with a fatal error (bad path or no access)';
+    if (code >= 8)
+        return code & 1 ? 'some files were copied and some could not be' : 'files could not be copied';
+    return code === 0 ? 'nothing to copy' : 'copied';
+}
+/** The first few ERROR lines of robocopy's output (what went wrong and on which file), one line each. */
+export function robocopyErrors(output, max = 3) {
+    const lines = output
+        .split(/\r?\n/)
+        .map((l) => l.trim())
+        .filter((l) => /\bERROR\b/.test(l) || /^The (process|system) cannot/i.test(l));
+    return lines.slice(0, max).map((l) => (l.length > 220 ? l.slice(0, 217) + '...' : l));
+}

package/dist/shared/memory/policy.d.ts

@@ -23,6 +23,9 @@ export interface HostThresholds {
     /** Total CPU above this (percent) for cpuSeconds. */
     readonly cpuPercent: number;
     readonly cpuSeconds: number;
+    /** The disks' queue length (all together) at or above this for diskSeconds: builds writing through mapped folders. */
+    readonly diskQueue: number;
+    readonly diskSeconds: number;
 }
 export declare const HOST_THRESHOLDS: Readonly<Record<LoadProfile, HostThresholds>>;
 /** The CPU cap (percent of the PC) the gentle profile uses: 15 points lower, never below 50. "none" = 100. */
@@ -31,3 +34,5 @@ export declare function gentleCpuLimit(cpuLimit: 'none' | number): number;
 export declare function effectiveCpuLimit(cpuLimit: 'none' | number, profile: LoadProfile): number | null;
 /** Cargo jobs that fit the memory (about 4 GB per rustc) and the CPUs, fewer when several agent sessions build. */
 export declare function cargoJobs(cpus: number, memoryGb: number, sessions: number): number;
+/** The most heavy compilers (rustc, clippy-driver, link ...) that run at once in the agents' job: only with vGPU on. */
+export declare function maxCompilers(cpus: number, profile: LoadProfile): number | null;

package/dist/shared/memory/policy.js

@@ -25,6 +25,8 @@ export const HOST_THRESHOLDS = {
         calmSamples: 3,
         cpuPercent: 95,
         cpuSeconds: 60,
+        diskQueue: 32,
+        diskSeconds: 40,
     },
     gentle: {
         availableMinMb: 6144,
@@ -33,6 +35,8 @@ export const HOST_THRESHOLDS = {
         calmSamples: 3,
         cpuPercent: 90,
         cpuSeconds: 45,
+        diskQueue: 16,
+        diskSeconds: 30,
     },
 };
 /** The CPU cap (percent of the PC) the gentle profile uses: 15 points lower, never below 50. "none" = 100. */
@@ -53,3 +57,7 @@ export function cargoJobs(cpus, memoryGb, sessions) {
     // All the agents' builds share the sandbox: about 8 jobs in total however many sessions there are.
     return Math.max(1, Math.min(jobs, Math.floor(8 / Math.max(1, sessions))));
 }
+/** The most heavy compilers (rustc, clippy-driver, link ...) that run at once in the agents' job: only with vGPU on. */
+export function maxCompilers(cpus, profile) {
+    return profile === 'gentle' ? Math.max(2, Math.floor(cpus / 4)) : null;
+}

package/dist/shared/network/firewall-rules.d.ts

@@ -22,3 +22,11 @@ export declare function parseDnsServers(ipconfigAll: string): string[];
  * keeps working.
  */
 export declare function buildFirewallCommands(exemptIps: string[]): string[][];
+export declare const ATTACH_RULE = "AgentSandbox-Attach";
+/**
+ * True when a Windows path has an 8.3 short name in it (`C:\Users\WDAGUT~1\...`). netsh refuses `program=` paths
+ * like that ("The application name could not be resolved"), so they are expanded first.
+ */
+export declare function hasShortName(file: string): boolean;
+/** Inbound rule for ptyhost only, and only from the sandbox's own subnet (where the host's Hyper-V adapter is). */
+export declare function attachRuleCommands(ptyHostExe: string): string[][];

package/dist/shared/network/firewall-rules.js

@@ -135,3 +135,31 @@ export function buildFirewallCommands(exemptIps) {
     }
     return commands;
 }
+export const ATTACH_RULE = 'AgentSandbox-Attach';
+/**
+ * True when a Windows path has an 8.3 short name in it (`C:\Users\WDAGUT~1\...`). netsh refuses `program=` paths
+ * like that ("The application name could not be resolved"), so they are expanded first.
+ */
+export function hasShortName(file) {
+    return file.split(/[/\\]/).some((part) => /~\d/.test(part));
+}
+/** Inbound rule for ptyhost only, and only from the sandbox's own subnet (where the host's Hyper-V adapter is). */
+export function attachRuleCommands(ptyHostExe) {
+    return [
+        ['advfirewall', 'firewall', 'delete', 'rule', 'name=' + ATTACH_RULE],
+        [
+            'advfirewall',
+            'firewall',
+            'add',
+            'rule',
+            'name=' + ATTACH_RULE,
+            'dir=in',
+            'action=allow',
+            'enable=yes',
+            'profile=any',
+            'protocol=tcp',
+            'remoteip=LocalSubnet',
+            'program=' + ptyHostExe,
+        ],
+    ];
+}

package/native/csharp/HcsHost/AssemblyInfo.cs

@@ -8,7 +8,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.9.0.0")]
-[assembly: AssemblyFileVersion("1.9.0.0")]
-[assembly: AssemblyInformationalVersion("1.9.0")]
+[assembly: AssemblyVersion("1.10.0.0")]
+[assembly: AssemblyFileVersion("1.10.0.0")]
+[assembly: AssemblyInformationalVersion("1.10.0")]
 [assembly: ComVisible(false)]

package/native/csharp/HostTools/AssemblyInfo.cs

@@ -8,7 +8,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.9.0.0")]
-[assembly: AssemblyFileVersion("1.9.0.0")]
-[assembly: AssemblyInformationalVersion("1.9.0")]
+[assembly: AssemblyVersion("1.10.0.0")]
+[assembly: AssemblyFileVersion("1.10.0.0")]
+[assembly: AssemblyInformationalVersion("1.10.0")]
 [assembly: ComVisible(false)]

package/native/csharp/HostTools/MemoryStatus.cs

@@ -1,107 +1,128 @@
-// This PC's memory right now (HostTools memory-status): physical RAM and the commit limit (RAM plus paging files) with
-// what is left of each. The commit limit is what a sandbox's memory is charged against, so it matters as much as RAM.
-// C# 5.
-using System;
-using System.ComponentModel;
-using System.Globalization;
-using System.Runtime.InteropServices;
-using Microsoft.Win32;
-
-namespace AgentSandbox
-{
-    public static class HostMemory
-    {
-        private const double BytesPerMb = 1024.0 * 1024.0;
-
-        // MEMORYSTATUSEX.
-        [StructLayout(LayoutKind.Sequential)]
-        private struct MemoryStatus
-        {
-            public uint Length;
-            public uint MemoryLoad;
-            public ulong TotalPhys;
-            public ulong AvailPhys;
-            public ulong TotalPageFile;
-            public ulong AvailPageFile;
-            public ulong TotalVirtual;
-            public ulong AvailVirtual;
-            public ulong AvailExtendedVirtual;
-        }
-
-        private static class NativeMethods
-        {
-            [DllImport("kernel32.dll", SetLastError = true)]
-            public static extern bool GlobalMemoryStatusEx(ref MemoryStatus status);
-        }
-
-        /// <summary>{"totalMb":..,"availableMb":..,"commitLimitMb":..,"commitAvailableMb":..}; throws Win32Exception on failure.</summary>
-        public static string Json()
-        {
-            MemoryStatus status = new MemoryStatus();
-            status.Length = (uint)Marshal.SizeOf(typeof(MemoryStatus));
-            if (!NativeMethods.GlobalMemoryStatusEx(ref status))
-            {
-                throw new Win32Exception(Marshal.GetLastWin32Error());
-            }
-            return "{\"totalMb\":" + Mb(status.TotalPhys) +
-                ",\"availableMb\":" + Mb(status.AvailPhys) +
-                ",\"commitLimitMb\":" + Mb(status.TotalPageFile) +
-                ",\"commitAvailableMb\":" + Mb(status.AvailPageFile) +
-                "," + PageFileJson() + "}";
-        }
-
-        /// <summary>
-        /// How this PC's paging file is set up, from the registry (read-only): "auto" (Windows manages it), "fixed"
-        /// (with the total of the maximum sizes) or "none". An unreadable setting is reported as "auto".
-        /// </summary>
-        private static string PageFileJson()
-        {
-            string kind = "auto";
-            long maxMb = 0;
-            try
-            {
-                using (RegistryKey key = Registry.LocalMachine.OpenSubKey(@"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management"))
-                {
-                    string[] files = key == null ? null : key.GetValue("PagingFiles") as string[];
-                    if (files != null)
-                    {
-                        kind = "none";
-                        foreach (string entry in files)
-                        {
-                            string[] parts = entry.Trim().Split(' ');
-                            if (entry.Trim().Length == 0)
-                            {
-                                continue;
-                            }
-                            long initial = 0;
-                            long max = 0;
-                            if (parts.Length >= 3)
-                            {
-                                long.TryParse(parts[parts.Length - 2], NumberStyles.Integer, CultureInfo.InvariantCulture, out initial);
-                                long.TryParse(parts[parts.Length - 1], NumberStyles.Integer, CultureInfo.InvariantCulture, out max);
-                            }
-                            if (entry.StartsWith("?:") || (initial == 0 && max == 0))
-                            {
-                                kind = "auto";
-                                maxMb = 0;
-                                break;
-                            }
-                            kind = "fixed";
-                            maxMb += max;
-                        }
-                    }
-                }
-            }
-            catch (Exception)
-            {
-                // Not readable: the caller treats "auto" as "no warning".
-            }
-            return "\"pageFile\":\"" + kind + "\",\"pageFileMaxMb\":" + maxMb.ToString(CultureInfo.InvariantCulture);
-        }
-
-        private static string Mb(ulong bytes)
-        {
-            return Math.Floor(bytes / BytesPerMb).ToString("0", CultureInfo.InvariantCulture);
-        }
-    }
-}
+// This PC's memory right now (HostTools memory-status): physical RAM and the commit limit (RAM plus paging files) with
+// what is left of each. The commit limit is what a sandbox's memory is charged against, so it matters as much as RAM.
+// C# 5.
+using System;
+using System.ComponentModel;
+using System.Diagnostics;
+using System.Globalization;
+using System.Runtime.InteropServices;
+using Microsoft.Win32;
+
+namespace AgentSandbox
+{
+    public static class HostMemory
+    {
+        private const double BytesPerMb = 1024.0 * 1024.0;
+
+        // MEMORYSTATUSEX.
+        [StructLayout(LayoutKind.Sequential)]
+        private struct MemoryStatus
+        {
+            public uint Length;
+            public uint MemoryLoad;
+            public ulong TotalPhys;
+            public ulong AvailPhys;
+            public ulong TotalPageFile;
+            public ulong AvailPageFile;
+            public ulong TotalVirtual;
+            public ulong AvailVirtual;
+            public ulong AvailExtendedVirtual;
+        }
+
+        private static class NativeMethods
+        {
+            [DllImport("kernel32.dll", SetLastError = true)]
+            public static extern bool GlobalMemoryStatusEx(ref MemoryStatus status);
+        }
+
+        /// <summary>{"totalMb":..,"availableMb":..,"commitLimitMb":..,"commitAvailableMb":..}; throws Win32Exception on failure.</summary>
+        public static string Json()
+        {
+            MemoryStatus status = new MemoryStatus();
+            status.Length = (uint)Marshal.SizeOf(typeof(MemoryStatus));
+            if (!NativeMethods.GlobalMemoryStatusEx(ref status))
+            {
+                throw new Win32Exception(Marshal.GetLastWin32Error());
+            }
+            return "{\"totalMb\":" + Mb(status.TotalPhys) +
+                ",\"availableMb\":" + Mb(status.AvailPhys) +
+                ",\"commitLimitMb\":" + Mb(status.TotalPageFile) +
+                ",\"commitAvailableMb\":" + Mb(status.AvailPageFile) +
+                "," + PageFileJson() + DiskQueueJson() + "}";
+        }
+
+        /// <summary>
+        /// How this PC's paging file is set up, from the registry (read-only): "auto" (Windows manages it), "fixed"
+        /// (with the total of the maximum sizes) or "none". An unreadable setting is reported as "auto".
+        /// </summary>
+        private static string PageFileJson()
+        {
+            string kind = "auto";
+            long maxMb = 0;
+            try
+            {
+                using (RegistryKey key = Registry.LocalMachine.OpenSubKey(@"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management"))
+                {
+                    string[] files = key == null ? null : key.GetValue("PagingFiles") as string[];
+                    if (files != null)
+                    {
+                        kind = "none";
+                        foreach (string entry in files)
+                        {
+                            string[] parts = entry.Trim().Split(' ');
+                            if (entry.Trim().Length == 0)
+                            {
+                                continue;
+                            }
+                            long initial = 0;
+                            long max = 0;
+                            if (parts.Length >= 3)
+                            {
+                                long.TryParse(parts[parts.Length - 2], NumberStyles.Integer, CultureInfo.InvariantCulture, out initial);
+                                long.TryParse(parts[parts.Length - 1], NumberStyles.Integer, CultureInfo.InvariantCulture, out max);
+                            }
+                            if (entry.StartsWith("?:") || (initial == 0 && max == 0))
+                            {
+                                kind = "auto";
+                                maxMb = 0;
+                                break;
+                            }
+                            kind = "fixed";
+                            maxMb += max;
+                        }
+                    }
+                }
+            }
+            catch (Exception)
+            {
+                // Not readable: the caller treats "auto" as "no warning".
+            }
+            return "\"pageFile\":\"" + kind + "\",\"pageFileMaxMb\":" + maxMb.ToString(CultureInfo.InvariantCulture);
+        }
+
+        /// <summary>
+        /// The disks' queue length now (all disks together), as ,"diskQueue":n; empty when the counter is not available.
+        /// Heavy builds through mapped folders show up here before anything else.
+        /// </summary>
+        private static string DiskQueueJson()
+        {
+            try
+            {
+                using (PerformanceCounter counter = new PerformanceCounter("PhysicalDisk", "Current Disk Queue Length", "_Total", true))
+                {
+                    return ",\"diskQueue\":" + Math.Round(counter.NextValue()).ToString("0", CultureInfo.InvariantCulture);
+                }
+            }
+            catch (Exception)
+            {
+                // No performance counters on this PC: the watchdog then looks at memory and CPU only.
+                return "";
+            }
+        }
+
+        private static string Mb(ulong bytes)
+        {
+            return Math.Floor(bytes / BytesPerMb).ToString("0", CultureInfo.InvariantCulture);
+        }
+    }
+}

package/native/scripts/memory-status.ps1

@@ -24,11 +24,19 @@ try {
 }
 
 # Win32_OperatingSystem counts in KB.
-ConvertTo-Json -Compress -InputObject ([ordered]@{
+$result = [ordered]@{
     totalMb           = [int64][math]::Floor($os.TotalVisibleMemorySize / 1024)
     availableMb       = [int64][math]::Floor($os.FreePhysicalMemory / 1024)
     commitLimitMb     = [int64][math]::Floor($os.TotalVirtualMemorySize / 1024)
     commitAvailableMb = [int64][math]::Floor($os.FreeVirtualMemory / 1024)
     pageFile          = $pageFile
     pageFileMaxMb     = [int64]$pageFileMax
-})
+}
+# The disks' queue length now (all together); left out when the counter is not there.
+try {
+    $disk = Get-CimInstance -ClassName Win32_PerfFormattedData_PerfDisk_PhysicalDisk -Filter "Name='_Total'" -ErrorAction Stop
+    if ($disk) { $result['diskQueue'] = [int64]$disk.CurrentDiskQueueLength }
+} catch {
+    # No counter: memory and CPU only.
+}
+ConvertTo-Json -Compress -InputObject $result

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",