@bridge4dev/runner 0.57.0 → 0.58.2

package/dist/policy.js

@@ -802,7 +802,9 @@ export function evaluateGitPolicy(command, ctx) {
         if (policy.pushBanned) {
             return {
                 decision: 'deny',
-                reason: 'git push is not allowed — a human presses «Push» in the Git panel. (This project has «Принудительно запретить push» switched on.)',
+                reason: 
+                // eslint-disable-next-line @devbridge/no-cyrillic-ui-text -- quotes the Russian NAME of a project setting; it has to match the dashboard word for word (#269 leaves it alone on purpose).
+                'git push is not allowed — a human presses «Push» in the Git panel. (This project has «Принудительно запретить push» switched on.)',
             };
         }
         // Everything below exists only once pushing is permitted. With the shipped
@@ -1173,6 +1175,46 @@ export function effectiveTrust(trustMode, mode) {
     // ask / plan — at most NORMAL, never AUTO.
     return trustMode === 'AUTO' ? 'NORMAL' : trustMode;
 }
+/**
+ * The largest Node heap this command line asks for, in bytes — or null when it
+ * asks for none.
+ *
+ * Both spellings systemd-era Node accepts (`--max-old-space-size=N` and
+ * `--max_old_space_size N`), anywhere on the line: the flag arrives through
+ * `NODE_OPTIONS=`, through `node --…`, and through a `pnpm` script that passes
+ * it on, and it is the NUMBER that matters, not who wrote it.
+ *
+ * The unit is megabytes, which is V8's own unit for the flag — a plain number,
+ * never a suffix.
+ */
+/**
+ * Commands that RUN node, as opposed to commands that merely mention it.
+ *
+ * The gate reads the heap flag out of a shell line, and a shell line is not one
+ * command: `sed -i 's/--max-old-space-size=8192/…=3000/' package.json` contains
+ * the flag and asks Node for nothing at all. Denying that was worse than a
+ * nuisance — LOWERING the flag is exactly what the refusal tells the agent to
+ * do, so the gate forbade its own remedy (#398 S7, B10).
+ */
+const NODE_RUNNERS = /(^|[\s;&|(])(sudo\s+)?(env\s+)?([A-Za-z_][A-Za-z0-9_]*=\S*\s+)*(node|nodejs|npm|npx|pnpm|yarn|bun|deno|tsx|ts-node|vitest|jest)([\s;&|)]|$)/;
+export function requestedHeapBytes(command) {
+    let largest = null;
+    for (const segment of commandSegments(command)) {
+        // `NODE_OPTIONS=` carries the flag into whatever the segment starts, so it
+        // counts on its own; otherwise the segment has to actually start a runtime.
+        if (!/NODE_OPTIONS\s*=/.test(segment) && !NODE_RUNNERS.test(segment))
+            continue;
+        for (const match of segment.matchAll(/--?max[-_]old[-_]space[-_]size(?:\s*=\s*|\s+)(\d+)/gi)) {
+            const mb = Number(match[1]);
+            if (!Number.isSafeInteger(mb) || mb <= 0)
+                continue;
+            const bytes = mb * 1024 * 1024;
+            if (largest === null || bytes > largest)
+                largest = bytes;
+        }
+    }
+    return largest;
+}
 export function evaluateToolUse(toolName, input, ctx) {
     // Read ONCE, here, and never `ctx.trustMode` again below: the branches that
     // follow are the whole of layer 1, and a single one still reading the raw
@@ -1227,6 +1269,34 @@ export function evaluateToolUse(toolName, input, ctx) {
         }
         if (gitAsk)
             return gitAsk;
+        /**
+         * A heap the cage cannot honour (#398 S5).
+         *
+         * Same position as everything above it and for the same reason: under AUTO
+         * the Bash branch returns `allow` two lines down, and a rule placed below
+         * that line is dead in the one mode most sessions run in. That mistake cost
+         * a whole release once (session 13).
+         *
+         * From the incident this plan comes from: the agent raised its own heap to
+         * 4 GB, then to 6 GB, against a wall of 4296 MB, and each time made things
+         * worse — the ceiling is enforced OUTSIDE the process, so asking for more
+         * only means being stopped sooner. The reason is written for the model to
+         * read: it names the number and the way out.
+         */
+        if (ctx.sessionMemoryMaxBytes !== undefined && ctx.sessionMemoryMaxBytes > 0) {
+            for (const variant of [command, dequote(command)]) {
+                const asked = requestedHeapBytes(variant);
+                if (asked !== null && asked > ctx.sessionMemoryMaxBytes) {
+                    const mb = (bytes) => Math.round(bytes / (1024 * 1024));
+                    return {
+                        decision: 'deny',
+                        reason: `this command asks Node for a ${mb(asked)} MB heap, and this session cannot exceed ` +
+                            `${mb(ctx.sessionMemoryMaxBytes)} MB — the ceiling is enforced outside the process, so a ` +
+                            'bigger heap only means being stopped sooner. Lower --max-old-space-size, or split the work up',
+                    };
+                }
+            }
+        }
         if (trust === 'STRICT')
             return { decision: 'ask', reason: 'strict mode' };
         if (trust === 'AUTO')

package/dist/protocol.d.ts

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import type { HostLoadFrame } from './host-load.js';
+import type { SessionLimitsFrame } from './session-limits.js';
 export declare const SessionDescriptorSchema: z.ZodObject<{
     id: z.ZodString;
     kind: z.ZodEnum<["TICKET", "CHAT"]>;
@@ -102,8 +103,8 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
         budgetMinutes: z.ZodNullable<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
         path: string;
-        trustMode: "STRICT" | "NORMAL" | "AUTO";
         id: string;
+        trustMode: "STRICT" | "NORMAL" | "AUTO";
         projectId: string;
         budgetUsd: number | null;
         budgetMinutes: number | null;
@@ -115,8 +116,8 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
         agentAllowDestructiveGit?: boolean | undefined;
     }, {
         path: string;
-        trustMode: "STRICT" | "NORMAL" | "AUTO";
         id: string;
+        trustMode: "STRICT" | "NORMAL" | "AUTO";
         projectId: string;
         budgetUsd: number | null;
         budgetMinutes: number | null;
@@ -208,8 +209,8 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     mode: "ask" | "plan" | "auto" | "full";
     agent: "CLAUDE" | "CODEX";
-    id: string;
     status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+    id: string;
     kind: "TICKET" | "CHAT";
     model: string | null;
     effort: string | null;
@@ -222,8 +223,8 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
     extraBudgetMinutes: number | null;
     workspace: {
         path: string;
-        trustMode: "STRICT" | "NORMAL" | "AUTO";
         id: string;
+        trustMode: "STRICT" | "NORMAL" | "AUTO";
         projectId: string;
         budgetUsd: number | null;
         budgetMinutes: number | null;
@@ -256,15 +257,15 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
     } | undefined;
 }, {
     agent: "CLAUDE" | "CODEX";
-    id: string;
     status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+    id: string;
     kind: "TICKET" | "CHAT";
     prompt: string;
     providerSessionId: string | null;
     workspace: {
         path: string;
-        trustMode: "STRICT" | "NORMAL" | "AUTO";
         id: string;
+        trustMode: "STRICT" | "NORMAL" | "AUTO";
         projectId: string;
         budgetUsd: number | null;
         budgetMinutes: number | null;
@@ -520,8 +521,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             budgetMinutes: z.ZodNullable<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -533,8 +534,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentAllowDestructiveGit?: boolean | undefined;
         }, {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -626,8 +627,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     }, "strip", z.ZodTypeAny, {
         mode: "ask" | "plan" | "auto" | "full";
         agent: "CLAUDE" | "CODEX";
-        id: string;
         status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        id: string;
         kind: "TICKET" | "CHAT";
         model: string | null;
         effort: string | null;
@@ -640,8 +641,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         extraBudgetMinutes: number | null;
         workspace: {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -674,15 +675,15 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         } | undefined;
     }, {
         agent: "CLAUDE" | "CODEX";
-        id: string;
         status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        id: string;
         kind: "TICKET" | "CHAT";
         prompt: string;
         providerSessionId: string | null;
         workspace: {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -721,8 +722,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     sessions: {
         mode: "ask" | "plan" | "auto" | "full";
         agent: "CLAUDE" | "CODEX";
-        id: string;
         status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        id: string;
         kind: "TICKET" | "CHAT";
         model: string | null;
         effort: string | null;
@@ -735,8 +736,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         extraBudgetMinutes: number | null;
         workspace: {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -775,15 +776,15 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
 }, {
     sessions: {
         agent: "CLAUDE" | "CODEX";
-        id: string;
         status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        id: string;
         kind: "TICKET" | "CHAT";
         prompt: string;
         providerSessionId: string | null;
         workspace: {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -953,8 +954,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             budgetMinutes: z.ZodNullable<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -966,8 +967,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentAllowDestructiveGit?: boolean | undefined;
         }, {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -1059,8 +1060,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     }, "strip", z.ZodTypeAny, {
         mode: "ask" | "plan" | "auto" | "full";
         agent: "CLAUDE" | "CODEX";
-        id: string;
         status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        id: string;
         kind: "TICKET" | "CHAT";
         model: string | null;
         effort: string | null;
@@ -1073,8 +1074,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         extraBudgetMinutes: number | null;
         workspace: {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -1107,15 +1108,15 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         } | undefined;
     }, {
         agent: "CLAUDE" | "CODEX";
-        id: string;
         status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        id: string;
         kind: "TICKET" | "CHAT";
         prompt: string;
         providerSessionId: string | null;
         workspace: {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -1154,8 +1155,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     session: {
         mode: "ask" | "plan" | "auto" | "full";
         agent: "CLAUDE" | "CODEX";
-        id: string;
         status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        id: string;
         kind: "TICKET" | "CHAT";
         model: string | null;
         effort: string | null;
@@ -1168,8 +1169,8 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         extraBudgetMinutes: number | null;
         workspace: {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -1205,15 +1206,15 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
 }, {
     session: {
         agent: "CLAUDE" | "CODEX";
-        id: string;
         status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
+        id: string;
         kind: "TICKET" | "CHAT";
         prompt: string;
         providerSessionId: string | null;
         workspace: {
             path: string;
-            trustMode: "STRICT" | "NORMAL" | "AUTO";
             id: string;
+            trustMode: "STRICT" | "NORMAL" | "AUTO";
             projectId: string;
             budgetUsd: number | null;
             budgetMinutes: number | null;
@@ -1673,7 +1674,22 @@ export type RunnerFrame = {
  */
  | ({
     type: 'host_load';
-} & HostLoadFrame) | {
+} & HostLoadFrame)
+/**
+ * How this machine is dividing its memory between the sessions on it, right
+ * now (#398 S4).
+ *
+ * Machine-scoped with a `sessions` array rather than one frame per session:
+ * half of what has to be shown is about the MACHINE — what is free, what is
+ * held by things that are not DevBridge, how many guarantees fit — and a
+ * machine with no live sessions still has to be able to say it.
+ *
+ * Sent only when it moved, on the same tick that recomputes it. Fields mirror
+ * `@devbridge/shared` — see `session-limits.ts`.
+ */
+ | ({
+    type: 'session_limits';
+} & SessionLimitsFrame) | {
     type: 'pong';
 };
 //# sourceMappingURL=protocol.d.ts.map

package/dist/recipe-schema.d.ts

@@ -134,17 +134,17 @@ export declare const ProjectRecipeSchema: z.ZodObject<{
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        verify?: {
+        test?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        build?: {
+        verify?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        test?: {
+        build?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
@@ -160,17 +160,17 @@ export declare const ProjectRecipeSchema: z.ZodObject<{
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        verify?: {
+        test?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        build?: {
+        verify?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        test?: {
+        build?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
@@ -219,17 +219,17 @@ export declare const ProjectRecipeSchema: z.ZodObject<{
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        verify?: {
+        test?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        build?: {
+        verify?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        test?: {
+        build?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
@@ -268,17 +268,17 @@ export declare const ProjectRecipeSchema: z.ZodObject<{
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        verify?: {
+        test?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        build?: {
+        verify?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;
         } | undefined;
-        test?: {
+        build?: {
             run: string;
             env?: Record<string, string> | undefined;
             timeoutSec?: number | undefined;

package/dist/regex-guard.js

@@ -228,12 +228,12 @@ export function inspectPattern(pattern) {
     const worst = Math.max(...heavy.map((p) => p.bound ?? 0));
     return {
         dangerous: true,
-        reason: `Поиск остановлен: счётчик {…,${worst}} рядом с ещё одним участком переменной длины. ` +
-            `Встроенный в Claude Code движок на такой форме занимает ~5.4 ГБ и ~67 секунд ещё ` +
-            `на разборе шаблона — это роняет дев-сервер и рвёт связь по всем сессиям машины ` +
-            `(подробности: docs/standards/project-gotchas.md §345). ` +
-            `Повтори через «command grep» — системный grep обрабатывает этот шаблон нормально. ` +
-            `Либо уменьши границу счётчика ниже ${QUANTIFIER_DANGER_BOUND}.`,
+        reason: `Search blocked: quantifier {…,${worst}} sits next to another variable-length part. ` +
+            `On a pattern like this the engine built into Claude Code needs ~5.4 GB and ~67 seconds ` +
+            `just to parse it, and that takes the dev server down and drops every session on that ` +
+            `machine (details: docs/standards/project-gotchas.md §345). ` +
+            `Run it again with command grep: the system grep handles this pattern fine. ` +
+            `Or lower the quantifier bound below ${QUANTIFIER_DANGER_BOUND}.`,
     };
 }
 /**

package/dist/self-update.js

@@ -5,6 +5,7 @@ import path from 'node:path';
 import { promisify } from 'node:util';
 import { findClaudeCli, USE_BUNDLED_CLAUDE } from './agent-binary.js';
 import { systemdUserEnv } from './environment.js';
+import { cageAuthority, CageAuthorityError } from './cage-authority.js';
 import { log } from './log.js';
 import { stateDir } from './paths.js';
 import { RUNNER_VERSION } from './version.js';
@@ -386,8 +387,28 @@ function systemctlEnv() {
     return env;
 }
 export async function selfUpdate(options) {
+    /**
+     * The default executor installs software on somebody's machine and reloads
+     * their systemd, so it asks the same door the cages ask (#403).
+     *
+     * The check is on the DEFAULT and not on the injected one: a test hands its
+     * own executor and is testing the sequence of commands, which is exactly what
+     * it should be able to do. What must not happen is a call with no executor
+     * from a process that has no business updating anything — `npm install -g`
+     * from a vitest worker would be the incident of 10.09.2026 with a much longer
+     * tail.
+     */
     const exec = options.exec ??
-        ((file, args, opts) => execFileAsync(file, args, { timeout: opts.timeout, env: opts.env, maxBuffer: 4_000_000 }));
+        ((file, args, opts) => {
+            if (cageAuthority() === 'none') {
+                throw new CageAuthorityError(`this process may not run «${file}»: updating this machine's runner is the daemon's job`);
+            }
+            return execFileAsync(file, args, {
+                timeout: opts.timeout,
+                env: opts.env,
+                maxBuffer: 4_000_000,
+            });
+        });
     const fromVersion = RUNNER_VERSION;
     const fail = (detail, extra = {}) => ({
         ok: false,

package/dist/service-unit.d.ts

@@ -57,7 +57,7 @@ export declare function buildUnit(execStart?: string, nodeBinary?: string): stri
  * which is the only way to fix the servers that already have the bad numbers
  * baked in — and it never overwrites a unit the operator edited by hand.
  */
-export declare const LIMITS_VERSION = 5;
+export declare const LIMITS_VERSION = 6;
 /**
  * Where the agent sessions live once they have a cage of their own.
  *
@@ -239,6 +239,19 @@ export declare function managedUsageFloorBytes(facts: MemoryFacts): number;
  *  - cap 85 % of total: on an idle dedicated box `MemAvailable` is nearly the whole
  *    machine, and a ceiling of «everything» is the bug this function exists to fix.
  */
+/**
+ * What the machine keeps for itself, whatever the agents are doing.
+ *
+ * Enough for sshd, journald, the kernel and some page cache to keep working
+ * while our cgroups sit at their ceiling. Proportional on a big machine,
+ * absolute on a small one, because 15 % of 4 GB is not enough to stay reachable.
+ *
+ * Hoisted out of {@link memoryPolicy} for #398 S3: the live allocator has to
+ * subtract exactly the same reserve when it decides how much of the machine is
+ * free right now, and a second copy of this number would drift from this one on
+ * the first machine where it mattered.
+ */
+export declare function machineReserveBytes(totalBytes: number): number;
 export declare function memoryPolicy(facts: MemoryFacts, minCeilingBytes?: number): MemoryPolicy;
 /** `SwapTotal` of this machine, or null where `/proc/meminfo` will not say. */
 export declare function readSwapTotalBytes(): number | null;
@@ -418,7 +431,24 @@ export declare function buildLimitsOverride(cpuCount?: number, facts?: MemoryFac
  *                can measure one (the drift check treats a file with no
  *                `MemoryMax` as outdated).
  */
-export declare function buildSessionsSliceOverride(facts?: MemoryFacts | null, sessionsUsageBytes?: number | null): string;
+export declare function buildSessionsSliceOverride(facts?: MemoryFacts | null, sessionsUsageBytes?: number | null, maxSessions?: number): string;
+/**
+ * Where the collective brake sits under the collective ceiling.
+ *
+ * Nine tenths: close enough that the sessions get almost the whole pot before
+ * anything is throttled, far enough that the kernel has a tenth of the pot in
+ * which to slow everyone down and reclaim, instead of arriving at the hard
+ * ceiling and choosing a victim.
+ */
+export declare const SLICE_BRAKE_OF_CEILING = 0.9;
+/**
+ * Seats assumed when nobody has said otherwise.
+ *
+ * Three, which is what `DevServer.maxSessions` defaults to in the database. The
+ * runner's own config may say fewer; the slice's protection is sized for the
+ * seats the machine sells, not for the sessions that happen to be running.
+ */
+export declare const DEFAULT_MAX_SESSIONS = 3;
 /**
  * The CPU share of everything the agents run, against the daemon's own.
  *
@@ -453,7 +483,9 @@ export declare function limitsOverrideIsOutdated(readFile?: (p: string) => strin
  * arrive at the same number — otherwise a write whose floor was binding would be
  * seen as drifted on the very next call and rewritten forever.
  */
-export declare function writeLimitsOverride(force?: boolean, home?: string, facts?: MemoryFacts | null, sessionsUsageBytes?: number | null): boolean;
+export declare function writeLimitsOverride(force?: boolean, home?: string, facts?: MemoryFacts | null, sessionsUsageBytes?: number | null, 
+/** Seats this machine sells — sizes the slice's collective `MemoryLow` (#398 S3). */
+maxSessions?: number): boolean;
 /**
  * Does the installed unit point at something that no longer exists?
  *