Resource Limits

Configure bounded VM, process, JavaScript, Python, and WASM resources.

Pass a limits tree in the VM’s configuration. The sidecar applies it when the VM starts. Near-limit pressure is reported as the vm.limitWarning event on a hosted VM, or through onLimitWarning in the library.

import { createAgentOsClient } from "@rivet-dev/agentos";

const client = createAgentOsClient({ endpoint: "https://api.rivet.dev" });
const vm = client.agentOS.getOrCreate(["my-vm"]);

await vm.v1.config.set({
	config: {
		limits: {
			tls: { maxBufferedBytes: 2048 },
			execution: { completedTtlMs: 60_000, liveExecutionWarningThreshold: 32 },
			agentosPackages: { maxMounts: 8192 },
		},
	},
});

// Changed limits apply to the next VM generation.
await vm.v1.vm.restart({});

import { AgentOs } from "@rivet-dev/agentos-core";

const sidecar = await AgentOs.createSidecar({
	runtime: { executor: { maxActiveVms: 8 } },
});

// `onLimitWarning` surfaces near-limit pressure to the embedding process.
const vm = await AgentOs.create({
	sidecar: { kind: "explicit", handle: sidecar },
	limits: {
		resources: { maxProcesses: 64, maxFilesystemBytes: 256 * 1024 * 1024 },
		jsRuntime: { v8HeapLimitMb: 128, cpuTimeLimitMs: 30_000 },
	},
	onLimitWarning: (warning) => {
		console.warn("near limit:", warning);
	},
});
await vm.dispose();
await sidecar.dispose();

Use limits.tls.maxBufferedBytes to bound TLS plaintext buffering. limits.execution.completedTtlMs and limits.execution.maxCompletedExecutions bound retained completed language executions. limits.execution.liveExecutionWarningThreshold sets the live execution count that triggers a warning, not a rejection. These fields are optional; omission keeps the sidecar default.

Process output replay is also sidecar-owned. The defaults retain up to 1,024 events or 1 MiB for each opted-in process, return at most 256 events or 768 KiB per read, and retain at most 1,024 replay records per VM. Override them with limits.process.outputReplayEvents, outputReplayBytes, outputReplayPageEvents, outputReplayPageBytes, and maxOutputReplays. Page limits cannot exceed their corresponding retention limits. Omitting a page bound in process.readOutput uses the VM’s configured limit; explicit zero or a value above the limit is rejected.

Every queue, buffer, timeout, and resource collection has a bounded default. Near-capacity conditions call onLimitWarning; exhausted limits fail with a typed error naming the limit and the field used to raise it.

limits.reactor.shutdownDeadlineMs bounds the SQLite close wait and subsequent resource drain together. Process termination and filesystem flushing happen before this budget. If close exceeds the deadline, VM shutdown reports a typed timeout with the limit name instead of reporting a clean stop. Close completion can no longer be confirmed, so the VM stays quarantined until the sidecar process restarts, even if local resource counts reach zero. Quarantined VMs count toward VM admission capacity.

Limits are fixed for the life of a VM. To change them on a hosted VM, update the config and call v1.vm.restart. In the library, dispose the VM and create a new one with the new limits. The hosted actor also has a fixed ten-second shutdown wait; raising the sidecar deadline does not extend it.

Sidecar limits

Library VMs share a sidecar process by default. Limits that apply to the whole process, such as runtime.executor.maxActiveVms, are set when creating a dedicated sidecar with AgentOs.createSidecar(), as in the example above.

Embedded API

Limits apply to VMs created with AgentOs.create() and sidecars created with AgentOs.createSidecar(). Read more in the embedded API quickstart.