@blazingagents/sdk 0.23.0 → 0.25.0

package/dist/contracts/limitations.d.ts

@@ -2,33 +2,14 @@
  * Effort-wide convention: every coded limit lives here as an UPPER_SNAKE_CASE
  * constant. No scattered magic numbers.
  */
-/**
- * API keys — max 5 per tenant, name ≤ 80 (docs/adr/0004).
- */
-export declare const MAX_API_KEYS_PER_TENANT = 5;
-export declare const MAX_API_KEY_NAME_LENGTH = 80;
-/** API key token shape — `ba_` + 40 base62 chars (~230 bits entropy). */
-export declare const API_KEY_BODY_LENGTH = 40;
-export declare const API_KEY_FRAGMENT_BODY_LENGTH = 2;
 export declare const MAX_WORKSPACE_NAME_LENGTH = 80;
-export declare const MAX_WORKSPACE_ARCHIVE_ENTRIES = 16384;
-export declare const DEFAULT_WORKSPACES_LIST_LIMIT = 50;
-export declare const MAX_WORKSPACES_LIST_LIMIT = 200;
 /**
- * Agent Skills — at most 100 per Agent, 10 MiB per upload/archive and stored
- * namespace, and 100 regular files. Frontmatter follows the Agent Skills
- * specification accepted in ADR-0028.
+ * Agent Skills — frontmatter follows the Agent Skills specification accepted
+ * in ADR-0028.
  */
-export declare const MAX_SKILLS_PER_AGENT = 100;
-export declare const MAX_SKILL_UPLOAD_BYTES: number;
-export declare const MAX_SKILL_UNCOMPRESSED_BYTES: number;
-export declare const MAX_SKILL_FILES = 100;
 export declare const MAX_SKILL_NAME_LENGTH = 64;
 export declare const MAX_SKILL_DESCRIPTION_LENGTH = 1024;
-export declare const MAX_SKILL_COMPATIBILITY_LENGTH = 500;
 export declare const MAX_SKILL_COPY_DESTINATIONS = 30;
-export declare const DEFAULT_SKILLS_LIST_LIMIT = 50;
-export declare const MAX_SKILLS_LIST_LIMIT = 100;
 export declare const DEFAULT_PROMPTS_LIST_LIMIT = 50;
 export declare const MAX_PROMPTS_LIST_LIMIT = 100;
 export declare const MAX_PROMPT_TEMPLATE_BYTES: number;
@@ -38,16 +19,9 @@ export declare const MAX_PROMPT_NAME_LENGTH = 80;
 export declare const MAX_TASK_NAME_LENGTH = 80;
 export declare const MAX_TASK_PROMPT_LENGTH = 6000;
 export declare const MIN_TASK_INTERVAL_MS = 60000;
-/**
- * Providers — max 20 per tenant, name ≤ 80.
- */
-export declare const MAX_PROVIDERS_PER_TENANT = 20;
+/** Providers — name ≤ 80. */
 export declare const MAX_PROVIDER_NAME_LENGTH = 80;
-export declare const PROVIDER_KEY_FRAGMENT_LENGTH = 4;
-/**
- * MCP Connections — max 50 per tenant, name ≤ 80, URL ≤ 2048.
- */
-export declare const MAX_MCP_CONNECTIONS_PER_TENANT = 50;
+/** MCP Connections — name ≤ 80, URL ≤ 2048. */
 export declare const MAX_MCP_CONNECTIONS_PER_AGENT = 10;
 export declare const MAX_MCP_CONNECTION_NAME_LENGTH = 80;
 export declare const MAX_MCP_CONNECTION_URL_LENGTH = 2048;
@@ -60,54 +34,17 @@ export declare const MAX_MCP_SERVER_NAME_LENGTH = 200;
 export declare const MAX_MCP_SERVER_VERSION_LENGTH = 100;
 export declare const MAX_MCP_TOOL_NAME_LENGTH = 256;
 export declare const MAX_MCP_TOOLS_PER_CONNECTION = 128;
-export declare const MAX_MCP_TOOLS_PER_TURN = 256;
-export declare const MAX_MCP_CONNECTION_SETUP_CONCURRENCY = 4;
-export declare const MAX_MCP_TOOL_KEY_LENGTH = 63;
-export declare const MAX_MCP_TOOL_DEFINITION_BYTES: number;
-export declare const MAX_MCP_CONNECTION_TOOL_DEFINITIONS_BYTES: number;
-export declare const MAX_MCP_TOOL_RESULT_BYTES: number;
 export declare const MAX_MCP_ATTACHMENT_METADATA_KEYS = 32;
 export declare const MAX_MCP_ATTACHMENT_METADATA_KEY_LENGTH = 64;
-export declare const MAX_MCP_REQUEST_CONTEXT_BYTES: number;
 /** Agents — name ≤ 80, instructions ≤ 3000. */
 export declare const MAX_AGENT_NAME_LENGTH = 80;
 export declare const DEFAULT_AGENTS_LIST_LIMIT = 50;
 export declare const MAX_AGENTS_LIST_LIMIT = 100;
 export declare const MAX_AGENT_INSTRUCTIONS_LENGTH = 3000;
-/**
- * Artifacts — 10 MiB per file, 10 publications per Tool call, and 100
- * Artifacts per Session.
- */
+/** Artifacts — 10 MiB per file. */
 export declare const MAX_ARTIFACT_BYTES: number;
-export declare const MAX_ARTIFACT_PUBLICATIONS_PER_CALL = 10;
-export declare const MAX_ARTIFACTS_PER_SESSION = 100;
-/**
- * Sandbox operations — 30-second native Cloudflare commands under a bounded
- * private HTTP caller budget that includes cold Container startup. File
- * transfers are 10 MiB decoded under a 15 MiB authenticated internal JSON
- * request.
- */
-export declare const CLOUDFLARE_SANDBOX_EXEC_MS = 30000;
-export declare const MAX_SANDBOX_OPERATION_HTTP_MS = 160000;
-export declare const MAX_SANDBOX_FILE_TRANSFER_BYTES: number;
-export declare const MAX_SANDBOX_FILE_CHUNK_BYTES: number;
-export declare const MAX_SANDBOX_REQUEST_BODY_BYTES: number;
-/**
- * Memories — one pool per Agent spanning all `userId` partitions, capped
- * globally at 500 rows (LRU eviction on create), 10 KiB of text per memory
- * (zod byte refine + DB `octet_length` check).
- */
-export declare const MAX_MEMORIES_PER_AGENT = 500;
+/** Memories — 10 KiB of text per memory. */
 export declare const MAX_MEMORY_TEXT_BYTES: number;
-export declare const DEFAULT_MEMORIES_LIST_LIMIT = 50;
-export declare const MAX_MEMORIES_LIST_LIMIT = 100;
-export declare const DEFAULT_MEMORY_TOOL_SEARCH_LIMIT = 10;
-export declare const MAX_MEMORY_TOOL_SEARCH_LIMIT = 20;
-/**
- * Sessions — messages endpoint default limit 50, max 200.
- */
-export declare const DEFAULT_SESSION_MESSAGES_LIMIT = 50;
-export declare const MAX_SESSION_MESSAGES_LIMIT = 200;
 /**
  * Usage — range cap 31 days, default 30 days; top-N sessions default 50, max 200.
  */
@@ -124,19 +61,9 @@ export declare const MAX_QUOTA_RESET_DAY = 28;
  */
 export declare const MAX_TENANT_NAME_LENGTH = 80;
 /**
- * Tenant resource creation — provisional abuse-protection throughput, applied
- * independently to Agent, Task, and Workspace creation.
- */
-export declare const TENANT_CREATION_BURST_LIMIT = 60;
-export declare const TENANT_CREATION_BURST_WINDOW_MS = 60000;
-export declare const TENANT_CREATION_SUSTAINED_LIMIT = 1000;
-export declare const TENANT_CREATION_SUSTAINED_WINDOW_MS = 86400000;
-/**
- * Merchant monetization (ADR-0048) — bindings/usage-event list paging, guard
- * rule bounds, and the delivery-health summary window.
+ * Merchant monetization (ADR-0048) — guard rule bounds and the delivery-health
+ * summary window.
  */
-export declare const DEFAULT_MERCHANT_LIST_LIMIT = 50;
-export declare const MAX_MERCHANT_LIST_LIMIT = 200;
 export declare const MAX_MERCHANT_PRODUCT_IDS = 100;
 export declare const DEFAULT_MERCHANT_USAGE_SUMMARY_DAYS = 14;
 export declare const MAX_MERCHANT_USAGE_SUMMARY_DAYS = 90;

package/dist/contracts/limitations.js

@@ -2,34 +2,14 @@
  * Effort-wide convention: every coded limit lives here as an UPPER_SNAKE_CASE
  * constant. No scattered magic numbers.
  */
-/**
- * API keys — max 5 per tenant, name ≤ 80 (docs/adr/0004).
- */
-export const MAX_API_KEYS_PER_TENANT = 5;
-export const MAX_API_KEY_NAME_LENGTH = 80;
-/** API key token shape — `ba_` + 40 base62 chars (~230 bits entropy). */
-export const API_KEY_BODY_LENGTH = 40;
-// Display fragment — `ba_` + first 2 chars of the random body.
-export const API_KEY_FRAGMENT_BODY_LENGTH = 2;
 export const MAX_WORKSPACE_NAME_LENGTH = 80;
-export const MAX_WORKSPACE_ARCHIVE_ENTRIES = 16_384;
-export const DEFAULT_WORKSPACES_LIST_LIMIT = 50;
-export const MAX_WORKSPACES_LIST_LIMIT = 200;
 /**
- * Agent Skills — at most 100 per Agent, 10 MiB per upload/archive and stored
- * namespace, and 100 regular files. Frontmatter follows the Agent Skills
- * specification accepted in ADR-0028.
+ * Agent Skills — frontmatter follows the Agent Skills specification accepted
+ * in ADR-0028.
  */
-export const MAX_SKILLS_PER_AGENT = 100;
-export const MAX_SKILL_UPLOAD_BYTES = 10 * 1024 * 1024;
-export const MAX_SKILL_UNCOMPRESSED_BYTES = 10 * 1024 * 1024;
-export const MAX_SKILL_FILES = 100;
 export const MAX_SKILL_NAME_LENGTH = 64;
 export const MAX_SKILL_DESCRIPTION_LENGTH = 1024;
-export const MAX_SKILL_COMPATIBILITY_LENGTH = 500;
 export const MAX_SKILL_COPY_DESTINATIONS = 30;
-export const DEFAULT_SKILLS_LIST_LIMIT = 50;
-export const MAX_SKILLS_LIST_LIMIT = 100;
 export const DEFAULT_PROMPTS_LIST_LIMIT = 50;
 export const MAX_PROMPTS_LIST_LIMIT = 100;
 export const MAX_PROMPT_TEMPLATE_BYTES = 10 * 1024;
@@ -39,16 +19,9 @@ export const MAX_PROMPT_NAME_LENGTH = 80;
 export const MAX_TASK_NAME_LENGTH = 80;
 export const MAX_TASK_PROMPT_LENGTH = 6000;
 export const MIN_TASK_INTERVAL_MS = 60_000;
-/**
- * Providers — max 20 per tenant, name ≤ 80.
- */
-export const MAX_PROVIDERS_PER_TENANT = 20;
+/** Providers — name ≤ 80. */
 export const MAX_PROVIDER_NAME_LENGTH = 80;
-export const PROVIDER_KEY_FRAGMENT_LENGTH = 4;
-/**
- * MCP Connections — max 50 per tenant, name ≤ 80, URL ≤ 2048.
- */
-export const MAX_MCP_CONNECTIONS_PER_TENANT = 50;
+/** MCP Connections — name ≤ 80, URL ≤ 2048. */
 export const MAX_MCP_CONNECTIONS_PER_AGENT = 10;
 export const MAX_MCP_CONNECTION_NAME_LENGTH = 80;
 export const MAX_MCP_CONNECTION_URL_LENGTH = 2048;
@@ -61,54 +34,17 @@ export const MAX_MCP_SERVER_NAME_LENGTH = 200;
 export const MAX_MCP_SERVER_VERSION_LENGTH = 100;
 export const MAX_MCP_TOOL_NAME_LENGTH = 256;
 export const MAX_MCP_TOOLS_PER_CONNECTION = 128;
-export const MAX_MCP_TOOLS_PER_TURN = 256;
-export const MAX_MCP_CONNECTION_SETUP_CONCURRENCY = 4;
-export const MAX_MCP_TOOL_KEY_LENGTH = 63;
-export const MAX_MCP_TOOL_DEFINITION_BYTES = 256 * 1024;
-export const MAX_MCP_CONNECTION_TOOL_DEFINITIONS_BYTES = 1024 * 1024;
-export const MAX_MCP_TOOL_RESULT_BYTES = 1024 * 1024;
 export const MAX_MCP_ATTACHMENT_METADATA_KEYS = 32;
 export const MAX_MCP_ATTACHMENT_METADATA_KEY_LENGTH = 64;
-export const MAX_MCP_REQUEST_CONTEXT_BYTES = 16 * 1024;
 /** Agents — name ≤ 80, instructions ≤ 3000. */
 export const MAX_AGENT_NAME_LENGTH = 80;
 export const DEFAULT_AGENTS_LIST_LIMIT = 50;
 export const MAX_AGENTS_LIST_LIMIT = 100;
 export const MAX_AGENT_INSTRUCTIONS_LENGTH = 3000;
-/**
- * Artifacts — 10 MiB per file, 10 publications per Tool call, and 100
- * Artifacts per Session.
- */
+/** Artifacts — 10 MiB per file. */
 export const MAX_ARTIFACT_BYTES = 10 * 1024 * 1024;
-export const MAX_ARTIFACT_PUBLICATIONS_PER_CALL = 10;
-export const MAX_ARTIFACTS_PER_SESSION = 100;
-/**
- * Sandbox operations — 30-second native Cloudflare commands under a bounded
- * private HTTP caller budget that includes cold Container startup. File
- * transfers are 10 MiB decoded under a 15 MiB authenticated internal JSON
- * request.
- */
-export const CLOUDFLARE_SANDBOX_EXEC_MS = 30_000;
-export const MAX_SANDBOX_OPERATION_HTTP_MS = 160_000;
-export const MAX_SANDBOX_FILE_TRANSFER_BYTES = 10 * 1024 * 1024;
-export const MAX_SANDBOX_FILE_CHUNK_BYTES = 1024 * 1024;
-export const MAX_SANDBOX_REQUEST_BODY_BYTES = 15 * 1024 * 1024;
-/**
- * Memories — one pool per Agent spanning all `userId` partitions, capped
- * globally at 500 rows (LRU eviction on create), 10 KiB of text per memory
- * (zod byte refine + DB `octet_length` check).
- */
-export const MAX_MEMORIES_PER_AGENT = 500;
+/** Memories — 10 KiB of text per memory. */
 export const MAX_MEMORY_TEXT_BYTES = 10 * 1024;
-export const DEFAULT_MEMORIES_LIST_LIMIT = 50;
-export const MAX_MEMORIES_LIST_LIMIT = 100;
-export const DEFAULT_MEMORY_TOOL_SEARCH_LIMIT = 10;
-export const MAX_MEMORY_TOOL_SEARCH_LIMIT = 20;
-/**
- * Sessions — messages endpoint default limit 50, max 200.
- */
-export const DEFAULT_SESSION_MESSAGES_LIMIT = 50;
-export const MAX_SESSION_MESSAGES_LIMIT = 200;
 /**
  * Usage — range cap 31 days, default 30 days; top-N sessions default 50, max 200.
  */
@@ -126,19 +62,9 @@ export const MAX_QUOTA_RESET_DAY = 28;
  */
 export const MAX_TENANT_NAME_LENGTH = 80;
 /**
- * Tenant resource creation — provisional abuse-protection throughput, applied
- * independently to Agent, Task, and Workspace creation.
- */
-export const TENANT_CREATION_BURST_LIMIT = 60;
-export const TENANT_CREATION_BURST_WINDOW_MS = 60_000;
-export const TENANT_CREATION_SUSTAINED_LIMIT = 1000;
-export const TENANT_CREATION_SUSTAINED_WINDOW_MS = 86_400_000;
-/**
- * Merchant monetization (ADR-0048) — bindings/usage-event list paging, guard
- * rule bounds, and the delivery-health summary window.
+ * Merchant monetization (ADR-0048) — guard rule bounds and the delivery-health
+ * summary window.
  */
-export const DEFAULT_MERCHANT_LIST_LIMIT = 50;
-export const MAX_MERCHANT_LIST_LIMIT = 200;
 export const MAX_MERCHANT_PRODUCT_IDS = 100;
 export const DEFAULT_MERCHANT_USAGE_SUMMARY_DAYS = 14;
 export const MAX_MERCHANT_USAGE_SUMMARY_DAYS = 90;

package/dist/direct-chat-transport.d.ts

@@ -17,6 +17,12 @@ export type BlazingAgentsDirectChatTransportOptions = {
      * @param sessionId - Session to look up or record.
      */
     onSessionId?: (sessionId: string) => Promise<void> | void;
+    /**
+     * Receives the running Turn ID before the response stream is consumed.
+     * Pass it to Stop.
+     * @param turnId - Turn the response runs.
+     */
+    onTurnId?: (turnId: string) => Promise<void> | void;
     sessionId?: string;
     userId?: string;
 } & ({

package/dist/direct-chat-transport.js

@@ -96,7 +96,8 @@ export class BlazingAgentsDirectChatTransport extends ChatStreamTransport {
         return this.#processChatResult(result);
     }
     /**
-     * Claims the chat stream and records the first Session ID before decoding chunks.
+     * Claims the chat stream and records the first Session ID and the Turn ID
+     * before decoding chunks.
      */
     async #processChatResult(result) {
         const stream = result.toStream();
@@ -106,6 +107,7 @@ export class BlazingAgentsDirectChatTransport extends ChatStreamTransport {
                 this.#sessionId = sessionId;
                 await this.#options.onSessionId?.(sessionId);
             }
+            await this.#reportTurnId(result);
         }
         catch (error) {
             await stream.cancel(error).catch(() => undefined);
@@ -141,6 +143,21 @@ export class BlazingAgentsDirectChatTransport extends ChatStreamTransport {
             decisions,
             functions: this.#options.functions ?? {},
         });
-        return this.processResponseStream(continuation.toStream());
+        const stream = continuation.toStream();
+        try {
+            await this.#reportTurnId(continuation);
+        }
+        catch (error) {
+            await stream.cancel(error).catch(() => undefined);
+            throw error;
+        }
+        return this.processResponseStream(stream);
+    }
+    /** Reports the Turn ID when the response names one. */
+    async #reportTurnId(result) {
+        const turnId = await result.turnId.catch(() => undefined);
+        if (turnId !== undefined) {
+            await this.#options.onTurnId?.(turnId);
+        }
     }
 }

package/dist/generation.js

@@ -1,5 +1,5 @@
 import { createTextStreamResponse, parsePartialJson } from "ai";
-import { sessionIdSchema } from "./contracts/ids.js";
+import { sessionIdSchema, turnIdSchema } from "./contracts/ids.js";
 import { BlazingAgentsError } from "./errors.js";
 import { dispatchChatFunctions, toChatFunctionDefinitions, } from "./functions.js";
 import { requestStream } from "./http.js";
@@ -165,12 +165,24 @@ function buildChatResult(config, response, resumeSessionId, dispatch) {
     sessionIdPromise.catch(() => {
         /* no-op — prevents unhandled rejection if the caller never awaits */
     });
+    const turnId = turnIdSchema.safeParse(response.headers.get("x-ba-turn-id"));
+    const turnIdPromise = turnId.success
+        ? Promise.resolve(turnId.data)
+        : Promise.reject(new BlazingAgentsError({
+            code: "stream_error",
+            message: "The server did not return a valid turn id (X-BA-Turn-Id header).",
+            requestId: response.headers.get("x-request-id") ?? undefined,
+        }, { cause: turnId.error }));
+    turnIdPromise.catch(() => {
+        /* no-op — prevents unhandled rejection if the caller never awaits */
+    });
     const { functions } = dispatch;
     const streamResponse = functions && sessionId !== undefined
         ? withFilteredBody(response, (body) => dispatchChatFunctions(config, { ...dispatch, functions, sessionId }, body))
         : response;
     return {
         sessionId: sessionIdPromise,
+        turnId: turnIdPromise,
         ...buildTerminalStreamResult(streamResponse, "chat"),
     };
 }
@@ -183,6 +195,7 @@ function buildChatResult(config, response, resumeSessionId, dispatch) {
 export function buildTerminalStreamResult(response, resourceName, filter) {
     const requestId = response.headers.get("x-request-id") ?? undefined;
     const location = response.headers.get("location");
+    const turnId = response.headers.get("x-ba-turn-id");
     let bodyClaimed = false;
     /**
      * Claims the response body once and normalizes stream failures.
@@ -207,7 +220,7 @@ export function buildTerminalStreamResult(response, resourceName, filter) {
         toStream: claimBody,
         /** Claims the response relay once. */
         toResponse: () => {
-            const headers = replacementResponseHeaders(requestId, location);
+            const headers = replacementResponseHeaders(requestId, location, turnId);
             headers.set("content-type", "text/event-stream");
             headers.set("cache-control", "no-cache");
             headers.set("connection", "keep-alive");
@@ -318,7 +331,7 @@ function responseBodyStream(response, requestId, resourceName) {
 /**
  * Copies request correlation and Session location into relay response headers.
  */
-function replacementResponseHeaders(requestId, location) {
+function replacementResponseHeaders(requestId, location, turnId) {
     const headers = new Headers();
     if (requestId !== undefined) {
         headers.set("x-request-id", requestId);
@@ -326,6 +339,9 @@ function replacementResponseHeaders(requestId, location) {
     if (location !== null) {
         headers.set("location", location);
     }
+    if (turnId !== null) {
+        headers.set("x-ba-turn-id", turnId);
+    }
     return headers;
 }
 /**
@@ -501,7 +517,7 @@ function buildStatelessGenerationStreams(response, resourceName) {
                 }, { cause: new Error(message) });
             }
             responseBodyClaimed = true;
-            const headers = replacementResponseHeaders(requestId, location);
+            const headers = replacementResponseHeaders(requestId, location, null);
             headers.set("content-type", "text/plain; charset=utf-8");
             try {
                 return createTextStreamResponse({

package/dist/types.d.ts

@@ -200,6 +200,12 @@ export interface ChatResult {
      * @throws BlazingAgentsError - If the response body has already been claimed.
      */
     toStream: () => ReadableStream<Uint8Array>;
+    /**
+     * Resolves to the id of the Turn this response runs, read from the
+     * `X-BA-Turn-Id` header. Pass it to `sessions.stop()` to stop the Turn.
+     * Rejects with `stream_error` when the header is missing or malformed.
+     */
+    turnId: Promise<string>;
 }
 export interface TerminalStreamResult {
     requestId?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blazingagents/sdk",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "TypeScript SDK for the Blazing Agents API",
   "homepage": "https://docs.blazingagents.com",
   "bugs": {
@@ -30,18 +30,17 @@
   ],
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.build.json",
-    "check": "npm run typecheck && npm run test && npm run lint",
+    "check": "npm run typecheck && npm run test && npm run lint && npm run unused",
     "fix": "ultracite fix",
     "lint": "ultracite check",
     "prepack": "npm run build",
     "test": "vitest run --coverage",
     "test:consumer": "node test-consumer.mjs",
-    "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.tests.json"
+    "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.tests.json",
+    "unused": "knip && knip --production --include exports,types,duplicates"
   },
   "dependencies": {
-    "croner": "10.0.1",
-    "nanoid": "6.0.1",
-    "yaml": "2.9.0"
+    "croner": "10.0.1"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.8",
@@ -49,6 +48,7 @@
     "@types/node": "^26.4.0",
     "@vitest/coverage-v8": "^4.1.10",
     "ai": "^7.0.84",
+    "knip": "^6.41.0",
     "typescript": "^7.0.2",
     "ultracite": "^7.10.2",
     "vitest": "^4.1.10",