Initial updates for windows support (#19)

* Initial updates for windows support

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* Add CI

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* Fixups after rebase

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* Further clean up for windows

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* fix invalidate cachces

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* Further just file clean up

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* only invalidate if missing

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* only invalidate if missing

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* trying stale cahce cleanup

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* trying stale cahce cleanup inline

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* Remove unicode for windows

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* Remove more unicocde

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* Don't fail on windows when not present

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

---------

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

Author: jsturtevant

.copilot/skills/justfile-ci/SKILL.md

@@ -19,7 +19,7 @@ This repo uses a **hierarchical Justfile** structure with a matching **GitHub Ac
 ```
 Justfile (root)                    ← orchestrates everything
 ├── mod wasm 'src/wasm_sandbox/Justfile'
-├── mod jssandbox 'src/javascript_sandbox/Justfile'
+├── mod js 'src/javascript_sandbox/Justfile'
 ├── mod nanvix 'src/nanvix_sandbox/Justfile'
 ├── mod python 'src/sdk/python/Justfile'
 └── mod examples_mod 'examples/Justfile'
@@ -99,3 +99,47 @@ test-rust:
 lint-rust:
     cargo clippy -p hyperlight-sandbox --all-targets --features test-utils -- -D warnings
 ```
+
+## Cross-Platform (Windows/Linux) Patterns
+
+### Windows Shell
+- Add `set windows-shell := ["pwsh", "-NoLogo", "-Command"]` at the top of subproject Justfiles that need Windows support
+- Each recipe line is passed as a `-Command` argument; use `\` line continuations for multi-line PowerShell
+- Do NOT use `#!/usr/bin/env pwsh` shebangs — `just` writes temp files without `.ps1` extension and PowerShell refuses to run them
+
+### Paths on Windows
+- `invocation_directory()` returns MSYS-style paths (`/c/Users/...`) when `just` is invoked with `set windows-shell` it breaks
+- Use `invocation_directory_native()` instead — always returns native OS paths (`C:\Users\...` on Windows, `/home/...` on Linux)
+- No `replace()` needed — PowerShell and cargo handle both `\` and `/`
+- Standard pattern: `repo-root := invocation_directory_native()`
+
+### Environment Variables
+- Use `export WIT_WORLD := ...` instead of `WIT_WORLD=... command` prefix (bash-only syntax)
+- `export` is cross-platform and sets the env var for all recipes automatically
+
+### Platform-Specific Recipes
+- Use `[unix]` and `[windows]` attributes for platform-specific recipe variants
+- Both variants must have the same recipe name; `just` picks the right one automatically
+- Prefix with `_` to hide helper recipes from `just --list`
+
+```just
+[unix]
+_clean-stale:
+    #!/usr/bin/env bash
+    rm -rf some/path
+
+[windows]
+_clean-stale:
+    Remove-Item -Recurse -Force 'some/path' -ErrorAction SilentlyContinue
+```
+
+### Bash → PowerShell Equivalents
+
+| Bash | PowerShell |
+|------|------------|
+| `compgen -G "pattern"` | `Get-ChildItem -Path $dir -Filter 'pattern' -ErrorAction SilentlyContinue` |
+| `[ ! -f path ]` | `-not (Test-Path path)` |
+| `rm -rf path` | `Remove-Item -Recurse -Force path -ErrorAction SilentlyContinue` |
+| `echo "msg"` | `Write-Host 'msg'` |
+| `for x in a b; do ... done` | `foreach ($x in @('a','b')) { ... }` |
+| `command -v tool` | `Get-Command tool -ErrorAction SilentlyContinue` |

.copilot/skills/justfile-ci/references/architecture.md

@@ -4,13 +4,13 @@
 
 | Recipe | Delegates to | Purpose |
 |--------|-------------|---------|
-| `build-all` | `wasm::build`, `jssandbox::build`, `nanvix::build`, `python::build` | Build everything |
+| `build-all` | `wasm::build`, `jss::build`, `nanvix::build`, `python::build` | Build everything |
 | `test` | `test-rust`, `wasm::test`, `python::python-test` | All tests |
 | `test-rust` | (direct cargo) | Core crate unit + integration tests |
-| `lint` | `lint-rust`, `wasm::lint`, `jssandbox::lint`, `python::lint` | All linters |
+| `lint` | `lint-rust`, `wasm::lint`, `js::lint`, `python::lint` | All linters |
 | `fmt` | `fmt-rust`, `python::fmt` | Format all code |
 | `fmt-check` | `fmt-check-rust`, `python::fmt-check` | Check formatting |
-| `examples` | `wasm::examples`, `jssandbox::examples`, `python::examples` | Run all examples |
+| `examples` | `wasm::examples`, `js::examples`, `python::examples` | Run all examples |
 | `fuzz` | `python::python-fuzz` | Python fuzz tests |
 | `benchmark` | `python::python-sandbox-benchmark` | Python benchmark |
 | `clean` | `wasm::clean`, `python::clean` | Clean build artifacts |
@@ -21,7 +21,7 @@
 ci.yml
 ├── rust           — fmt-check-rust, lint-rust, test-rust
 ├── wasm-sandbox   — wasm build, lint, test, examples + python fmt-check/lint/build/examples/python-test/fuzz/benchmark/integration-examples
-├── javascript-sandbox — jssandbox build, lint, test, examples
+├── javascript-sandbox — js build, lint, test, examples
 └── nanvix-sandbox — nanvix build (examples skipped pending upstream)
 ```
 
@@ -34,7 +34,7 @@ ci.yml
 - Recipes: `guest-build`, `js-guest-build`, `build`, `test`, `examples`, `lint`, `clean`
 - `examples` is a flat recipe listing all `cargo run` commands (no per-example sub-recipes)
 
-### jssandbox (`src/javascript_sandbox/Justfile`)
+### js (`src/javascript_sandbox/Justfile`)
 - Needs WIT world from wasm for compilation
 - Recipes: `build`, `test`, `examples`, `lint`
 - `examples` is a flat recipe listing all `cargo run` commands

.github/copilot-instructions.md

@@ -2,7 +2,7 @@
 
 - When running examples in this repository, use the `Justfile` recipes instead of invoking `cargo run` or `python` directly.
 - Use `just examples` from the repository root to run the full example suite.
-- To run examples for a specific sandbox, use module-scoped recipes: `just wasm examples`, `just jssandbox examples`, `just python examples`.
+- To run examples for a specific sandbox, use module-scoped recipes: `just wasm examples`, `just js examples`, `just python examples`.
 - Use `just build-all` from the repository root to build all subprojects and SDKs.
 - Reason: the example commands depend on `WIT_WORLD` being set to `src/wasm_sandbox/wit/sandbox-world.wasm`; the `Justfile` handles that setup.
 

.github/workflows/ci.yml

@@ -17,8 +17,11 @@ env:
 
 jobs:
   rust:
-    name: Rust · fmt / lint / test
-    runs-on: ubuntu-latest
+    name: Rust (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
@@ -41,8 +44,11 @@ jobs:
         run: just test-rust
 
   wasm-sandbox:
-    name: WASM Sandbox · lint / build / examples
-    runs-on: ubuntu-latest
+    name: WASM Sandbox (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
@@ -65,11 +71,16 @@ jobs:
       - name: Install just
         run: cargo install --locked just
 
-      - name: Install clang
+      - name: Install clang (Linux)
+        if: runner.os == 'Linux'
         run: sudo apt-get update && sudo apt-get install -y clang
 
+      - name: Install LLVM (Windows)
+        if: runner.os == 'Windows'
+        run: choco install llvm -y
+
       - name: Enable KVM
-        if: ${{ !env.ACT }}
+        if: runner.os == 'Linux' && !env.ACT
         run: |
           echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
           sudo udevadm control --reload-rules
@@ -92,7 +103,7 @@ jobs:
       # Build JS sandbox first — the Python hyperlight-js backend shares the root
       # workspace target/ and needs hyperlight-js-runtime to be compiled.
       - name: Build JS sandbox
-        run: just jssandbox build
+        run: just js build
 
       - name: Python SDK Format check
         run: just python fmt-check
@@ -111,7 +122,7 @@ jobs:
 
       - name: Python SDK Fuzz
         run: just fuzz 30
-      
+
       # this is too flaky in github actions to run on PRs
       # copilot fails to repsond in a timely fashion
       # - name: Run Python SDK integration examples
@@ -124,8 +135,11 @@ jobs:
         run: just benchmark
 
   python-wheelhouse:
-    name: Python SDK · wheelhouse test
-    runs-on: ubuntu-latest
+    name: Python SDK wheelhouse test  (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
@@ -148,11 +162,16 @@ jobs:
       - name: Install just
         run: cargo install --locked just
 
-      - name: Install clang
+      - name: Install clang (Linux)
+        if: runner.os == 'Linux'
         run: sudo apt-get update && sudo apt-get install -y clang
 
+      - name: Install LLVM (Windows)
+        if: runner.os == 'Windows'
+        run: choco install llvm -y
+
       - name: Enable KVM
-        if: ${{ !env.ACT }}
+        if: runner.os == 'Linux' && !env.ACT
         run: |
           echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
           sudo udevadm control --reload-rules
@@ -163,8 +182,11 @@ jobs:
         run: just python-wheelhouse-test
 
   javascript-sandbox:
-    name: JS Sandbox · lint / build / examples
-    runs-on: ubuntu-latest
+    name: JS Sandbox (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
@@ -176,11 +198,16 @@ jobs:
       - name: Install just
         run: cargo install --locked just
 
-      - name: Install clang
+      - name: Install clang (Linux)
+        if: runner.os == 'Linux'
         run: sudo apt-get update && sudo apt-get install -y clang
 
+      - name: Install LLVM (Windows)
+        if: runner.os == 'Windows'
+        run: choco install llvm -y
+
       - name: Enable KVM
-        if: ${{ !env.ACT }}
+        if: runner.os == 'Linux' && !env.ACT
         run: |
           echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
           sudo udevadm control --reload-rules
@@ -191,20 +218,20 @@ jobs:
         run: just wasm guest-compile-wit
 
       - name: Build
-        run: just jssandbox build
+        run: just js build
 
       - name: Lint
-        run: just jssandbox lint
+        run: just js lint
 
       - name: Tests
-        run: just jssandbox test
+        run: just js test
 
       - name: Run examples
-        run: just jssandbox examples
+        run: just js examples
 
   nanvix-sandbox:
     name: Nanvix Sandbox · build
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest #current linux only
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 

.gitignore

@@ -4,6 +4,8 @@ target/
 *.wasm
 __pycache__/
 *.so
+*.pyd
+*.pdb
 *.pyc
 node_modules/
 build/

Justfile

@@ -1,7 +1,7 @@
 set unstable := true
 
 mod wasm 'src/wasm_sandbox/Justfile'
-mod jssandbox 'src/javascript_sandbox/Justfile'
+mod js 'src/javascript_sandbox/Justfile'
 mod nanvix 'src/nanvix_sandbox/Justfile'
 mod python 'src/sdk/python/Justfile'
 mod examples_mod 'examples/Justfile'
@@ -13,9 +13,9 @@ clean: wasm::clean python::clean
 
 #### BUILD TARGETS ####
 
-build-all target=default-target: (wasm::build target) (jssandbox::build target) nanvix::build python::build
+build-all target=default-target: (wasm::build target) (js::build target) nanvix::build python::build
 
-lint: lint-rust wasm::lint jssandbox::lint python::lint
+lint: lint-rust wasm::lint js::lint python::lint
 
 lint-rust:
     cargo clippy -p hyperlight-sandbox --all-targets --features test-utils -- -D warnings
@@ -41,11 +41,11 @@ test-rust:
 
 benchmark: python::python-sandbox-benchmark
 
-python-dist: (wasm::build "release") (jssandbox::build "release") python::python-dist
+python-dist: (wasm::build "release") (js::build "release") python::python-dist
 
 python-wheelhouse-test: python-dist python::python-wheelhouse-test
 
-examples target=default-target: (wasm::examples target) (jssandbox::examples target) python::examples
+examples target=default-target: (wasm::examples target) (js::examples target) python::examples
 
 integration-examples target=default-target: (wasm::guest-build target) wasm::js-guest-build python::build examples_mod::integration-examples
 
@@ -60,13 +60,14 @@ slides:
 
 ##### Run GitHub Actions CI locally using act (https://nektosact.com) #######
 
+[unix]
 ci job="":
     #!/usr/bin/env bash
     if ! command -v act &>/dev/null; then
         echo "act is not installed. Install it from: https://nektosact.com/installation/index.html"
         exit 1
     fi
-    args=(-e {{ justfile_directory() }}/.github/act-event.json)
+    args=(-e {{ replace(justfile_directory(), "\\", "/") }}/.github/act-event.json)
     if [ -e /dev/kvm ]; then
         args+=(--container-options "--device /dev/kvm")
     fi

examples/Justfile

@@ -1,6 +1,4 @@
-repo-root := invocation_directory()
-wit-world := if os() == "windows" { "$env:WIT_WORLD=\"" + repo-root + "/src/wasm_sandbox/wit/sandbox-world.wasm\";" } else { "WIT_WORLD=" + repo-root + "/src/wasm_sandbox/wit/sandbox-world.wasm" }
-
+repo-root := invocation_directory_native()
 integration-copilot-sdk-deps:
     uv sync --group copilot-sdk --inexact --no-install-package hyperlight-sandbox-backend-wasm --no-install-package hyperlight-sandbox-backend-hyperlight-js
 
@@ -11,15 +9,15 @@ integration-agent-framework-devui-deps:
     uv sync --group agent-framework-devui
 
 copilot-sdk-example: integration-copilot-sdk-deps
-    {{ wit-world }} uv run python {{repo-root}}/examples/copilot-sdk/copilot_sdk_tools.py
+    uv run python {{repo-root}}/examples/copilot-sdk/copilot_sdk_tools.py
 
 agent-framework-example: integration-agent-framework-deps
-    {{ wit-world }} uv run python {{repo-root}}/examples/agent-framework/copilot_agent.py --no-wait
+    uv run python {{repo-root}}/examples/agent-framework/copilot_agent.py --no-wait
 
 agent-framework-example-interactive: integration-agent-framework-deps
-    {{ wit-world }} uv run python {{repo-root}}/examples/agent-framework/copilot_agent.py --interactive
+    uv run python {{repo-root}}/examples/agent-framework/copilot_agent.py --interactive
 
 agent-framework-example-devui: integration-agent-framework-deps integration-agent-framework-devui-deps
-    {{ wit-world }} uv run python {{repo-root}}/examples/agent-framework/copilot_agent.py --devui
+    uv run python {{repo-root}}/examples/agent-framework/copilot_agent.py --devui
 
 integration-examples: copilot-sdk-example agent-framework-example

src/hyperlight_sandbox/src/lib.rs

@@ -26,6 +26,18 @@ pub use tools::{ArgType, ToolRegistry, ToolSchema};
 // Configuration
 // ---------------------------------------------------------------------------
 
+/// Default guest heap size in bytes (platform-dependent).
+#[cfg(windows)]
+pub const DEFAULT_HEAP_SIZE: u64 = 400 * 1024 * 1024;
+#[cfg(not(windows))]
+pub const DEFAULT_HEAP_SIZE: u64 = 200 * 1024 * 1024;
+
+/// Default guest stack / scratch size in bytes (platform-dependent).
+#[cfg(windows)]
+pub const DEFAULT_STACK_SIZE: u64 = 200 * 1024 * 1024;
+#[cfg(not(windows))]
+pub const DEFAULT_STACK_SIZE: u64 = 100 * 1024 * 1024;
+
 /// Configuration for building a sandbox guest.
 #[derive(Debug, Clone)]
 pub struct SandboxConfig {
@@ -41,8 +53,8 @@ impl Default for SandboxConfig {
     fn default() -> Self {
         Self {
             module_path: String::new(),
-            heap_size: 200 * 1024 * 1024,
-            stack_size: 100 * 1024 * 1024,
+            heap_size: DEFAULT_HEAP_SIZE,
+            stack_size: DEFAULT_STACK_SIZE,
         }
     }
 }