@trigger.dev/core 4.5.5 → 4.5.6

package/dist/esm/v3/workloadDeploymentToken.test.js

@@ -0,0 +1,108 @@
+import { describe, expect, it } from "vitest";
+import { generateJWT } from "./jwt.js";
+import { classifyDeploymentIdHeader, looksLikeWorkloadDeploymentToken, mintWorkloadDeploymentToken, verifyWorkloadDeploymentToken, WORKLOAD_DEPLOYMENT_TOKEN_VERSION, } from "./workloadDeploymentToken.js";
+const SECRET = "test-workload-token-secret";
+const EXP = Math.floor(Date.UTC(2032, 0, 1) / 1000);
+const claims = {
+    deployment: "deployment_abc123",
+    deployment_version: "20260709.1",
+    environment_id: "env_1",
+    environment_type: "PRODUCTION",
+    org_id: "org_1",
+    project_id: "proj_1",
+};
+describe("workloadDeploymentToken", () => {
+    it("mints a token that verifies and round-trips every claim", async () => {
+        const token = await mintWorkloadDeploymentToken(claims, SECRET, EXP);
+        const result = await verifyWorkloadDeploymentToken(token, SECRET);
+        expect(result.ok).toBe(true);
+        if (!result.ok)
+            return;
+        expect(result.claims.ver).toBe(WORKLOAD_DEPLOYMENT_TOKEN_VERSION);
+        expect(result.claims.deployment).toBe(claims.deployment);
+        expect(result.claims.deployment_version).toBe(claims.deployment_version);
+        expect(result.claims.environment_id).toBe(claims.environment_id);
+        expect(result.claims.environment_type).toBe(claims.environment_type);
+        expect(result.claims.org_id).toBe(claims.org_id);
+        expect(result.claims.project_id).toBe(claims.project_id);
+    });
+    it("sets the caller-supplied absolute exp", async () => {
+        const token = await mintWorkloadDeploymentToken(claims, SECRET, EXP);
+        const result = await verifyWorkloadDeploymentToken(token, SECRET);
+        expect(result.ok).toBe(true);
+        if (!result.ok)
+            return;
+        expect(result.claims.exp).toBe(EXP);
+    });
+    it("mints byte-identical tokens for identical claims (deterministic, no iat)", async () => {
+        const a = await mintWorkloadDeploymentToken(claims, SECRET, EXP);
+        const b = await mintWorkloadDeploymentToken(claims, SECRET, EXP);
+        expect(a).toBe(b);
+        const result = await verifyWorkloadDeploymentToken(a, SECRET);
+        expect(result.ok).toBe(true);
+        if (!result.ok)
+            return;
+        expect(result.claims.iat).toBeUndefined();
+    });
+    it("rejects a token signed with a different secret", async () => {
+        const token = await mintWorkloadDeploymentToken(claims, SECRET, EXP);
+        const result = await verifyWorkloadDeploymentToken(token, "wrong-secret");
+        expect(result.ok).toBe(false);
+        if (result.ok)
+            return;
+        expect(result.reason).toBe("invalid_signature");
+    });
+    it("rejects a tampered token", async () => {
+        const token = await mintWorkloadDeploymentToken(claims, SECRET, EXP);
+        const [header, payload, signature] = token.split(".");
+        const tampered = `${header}.${payload}x.${signature}`;
+        const result = await verifyWorkloadDeploymentToken(tampered, SECRET);
+        expect(result.ok).toBe(false);
+    });
+    it("rejects a valid JWT that is missing required claims", async () => {
+        // Signed with the right secret, but not a workload deployment token.
+        const token = await generateJWT({
+            secretKey: SECRET,
+            payload: { foo: "bar" },
+            expirationTime: "1825d",
+        });
+        const result = await verifyWorkloadDeploymentToken(token, SECRET);
+        expect(result.ok).toBe(false);
+        if (result.ok)
+            return;
+        expect(result.reason).toBe("malformed_claims");
+    });
+    describe("looksLikeWorkloadDeploymentToken", () => {
+        it("is true for a minted token", async () => {
+            const token = await mintWorkloadDeploymentToken(claims, SECRET, EXP);
+            expect(looksLikeWorkloadDeploymentToken(token)).toBe(true);
+        });
+        it("is false for a legacy bare friendlyId", () => {
+            expect(looksLikeWorkloadDeploymentToken("deployment_abc123")).toBe(false);
+        });
+        it("is false for empty and malformed values", () => {
+            expect(looksLikeWorkloadDeploymentToken("")).toBe(false);
+            expect(looksLikeWorkloadDeploymentToken("a.b")).toBe(false);
+            expect(looksLikeWorkloadDeploymentToken("a..c")).toBe(false);
+        });
+    });
+    describe("classifyDeploymentIdHeader", () => {
+        it("classifies a minted token as jwt_valid and returns claims", async () => {
+            const token = await mintWorkloadDeploymentToken(claims, SECRET, EXP);
+            const result = await classifyDeploymentIdHeader(token, SECRET);
+            expect(result.outcome).toBe("jwt_valid");
+            expect(result.claims?.deployment).toBe(claims.deployment);
+        });
+        it("classifies a JWT with a bad signature as jwt_invalid", async () => {
+            const token = await mintWorkloadDeploymentToken(claims, SECRET, EXP);
+            const result = await classifyDeploymentIdHeader(token, "wrong-secret");
+            expect(result.outcome).toBe("jwt_invalid");
+            expect(result.claims).toBeUndefined();
+        });
+        it("classifies a bare friendlyId as legacy_bare", async () => {
+            const result = await classifyDeploymentIdHeader("deployment_abc123", SECRET);
+            expect(result.outcome).toBe("legacy_bare");
+        });
+    });
+});
+//# sourceMappingURL=workloadDeploymentToken.test.js.map

package/dist/esm/v3/workloadDeploymentToken.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workloadDeploymentToken.test.js","sourceRoot":"","sources":["../../../src/v3/workloadDeploymentToken.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,2BAA2B,EAC3B,6BAA6B,EAC7B,iCAAiC,GAElC,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,GAAG,4BAA4B,CAAC;AAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAEpD,MAAM,MAAM,GAAiC;IAC3C,UAAU,EAAE,mBAAmB;IAC/B,kBAAkB,EAAE,YAAY;IAChC,cAAc,EAAE,OAAO;IACvB,gBAAgB,EAAE,YAAY;IAC9B,MAAM,EAAE,OAAO;IACf,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO;QAEvB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO;QAEvB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,CAAC,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAElB,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO;QACvB,MAAM,CAAE,MAAM,CAAC,MAAkC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO;QACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,qEAAqE;QACrE,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC;YAC9B,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;YACvB,cAAc,EAAE,OAAO;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO;QACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACrE,MAAM,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,gCAAgC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzD,MAAM,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5D,MAAM,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YACvE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;YAC7E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "4.5.5";
+export const VERSION = "4.5.6";
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/core",
-  "version": "4.5.5",
+  "version": "4.5.6",
   "description": "Core code used across the Trigger.dev SDK and platform",
   "license": "MIT",
   "publishConfig": {