@trigger.dev/sdk 4.5.7 → 4.5.9

package/dist/esm/v3/auth.d.ts

@@ -81,7 +81,9 @@ export type PublicTokenPermissions = {
 };
 export type CreatePublicTokenOptions = {
     /**
-     * A collection of permission scopes to be granted to the token.
+     * A collection of permission scopes to be granted to the token. This remains
+     * optional for root API key compatibility; additional API keys require at
+     * least one scope.
      *
      * @example
      *
@@ -95,7 +97,8 @@ export type CreatePublicTokenOptions = {
      */
     scopes?: PublicTokenPermissions;
     /**
-     * The expiration time for the token. This can be a number representing the time in milliseconds, a `Date` object, or a string.
+     * The expiration time for the token: a duration string, a `Date`, or a Unix
+     * timestamp in **seconds**.
      *
      * @example
      *
@@ -155,7 +158,8 @@ declare function createPublicToken(options?: CreatePublicTokenOptions): Promise<
 declare function withPublicToken(options: CreatePublicTokenOptions, fn: () => Promise<void>): Promise<void>;
 export type CreateTriggerTokenOptions = {
     /**
-     * The expiration time for the token. This can be a number representing the time in milliseconds, a `Date` object, or a string.
+     * The expiration time for the token: a duration string, a `Date`, or a Unix
+     * timestamp in **seconds**.
      *
      * @example
      *

package/dist/esm/v3/auth.js

@@ -1,4 +1,4 @@
-import { apiClientManager, generateJWT as internal_generateJWT, } from "@trigger.dev/core/v3";
+import { apiClientManager, generateJWT as internal_generateJWT, isAdditionalApiKey, } from "@trigger.dev/core/v3";
 import "@trigger.dev/core/v3/sdk-scope-storage";
 /**
  * Register the global API client configuration. Alternatively, you can set the `TRIGGER_SECRET_KEY` and `TRIGGER_API_URL` environment variables.
@@ -30,6 +30,26 @@ export const auth = {
     withTriggerPublicToken,
     withBatchTriggerPublicToken,
 };
+// A `Date` becomes Unix seconds; duration strings and numbers pass through. A
+// bare number is already Unix seconds, matching how the local signing path
+// reads it, so both key types treat the option the same.
+function serverExpirationTime(expirationTime) {
+    return expirationTime instanceof Date
+        ? Math.floor(expirationTime.getTime() / 1000)
+        : expirationTime;
+}
+async function createServerPublicToken(apiClient, body) {
+    try {
+        const result = await apiClient.createPublicToken(body);
+        return result.token;
+    }
+    catch (error) {
+        if (error !== null && typeof error === "object" && "status" in error && error.status === 404) {
+            throw new Error("This additional API key cannot self-sign public tokens, and the server does not support public-token minting. Upgrade the server or use the root API key.");
+        }
+        throw error;
+    }
+}
 /**
  * Creates a public token using the provided options.
  *
@@ -54,13 +74,28 @@ export const auth = {
  * ```
  */
 async function createPublicToken(options) {
+    const scopes = options?.scopes ? flattenScopes(options.scopes) : [];
     const apiClient = apiClientManager.clientOrThrow();
+    if (isAdditionalApiKey(apiClient.accessToken)) {
+        // Additional keys cannot self-sign, and the server rejects empty scope
+        // lists because they cannot authorize anything. Keep the legacy root-key
+        // behaviour unchanged while failing clearly for this new credential type.
+        if (scopes.length === 0) {
+            throw new Error("auth.createPublicToken() requires at least one scope when using an additional API key. " +
+                'For example: auth.createPublicToken({ scopes: { read: { runs: ["run_1234"] } } })');
+        }
+        return createServerPublicToken(apiClient, {
+            scopes,
+            expirationTime: serverExpirationTime(options?.expirationTime),
+            realtime: options?.realtime,
+        });
+    }
     const claims = await apiClient.generateJWTClaims();
     return await internal_generateJWT({
         secretKey: apiClient.accessToken,
         payload: {
             ...claims,
-            scopes: options?.scopes ? flattenScopes(options.scopes) : undefined,
+            scopes: options?.scopes ? scopes : undefined,
             realtime: options?.realtime,
         },
         expirationTime: options?.expirationTime,
@@ -110,18 +145,28 @@ async function withPublicToken(options, fn) {
  */
 async function createTriggerPublicToken(task, options) {
     const apiClient = apiClientManager.clientOrThrow();
+    const scopes = flattenScopes({
+        trigger: {
+            tasks: task,
+        },
+    });
+    const oneTimeUse = typeof options?.multipleUse === "boolean" ? !options.multipleUse : true;
+    if (isAdditionalApiKey(apiClient.accessToken)) {
+        return createServerPublicToken(apiClient, {
+            scopes,
+            expirationTime: serverExpirationTime(options?.expirationTime),
+            oneTimeUse,
+            realtime: options?.realtime,
+        });
+    }
     const claims = await apiClient.generateJWTClaims();
     return await internal_generateJWT({
         secretKey: apiClient.accessToken,
         payload: {
             ...claims,
-            otu: typeof options?.multipleUse === "boolean" ? !options.multipleUse : true,
+            otu: oneTimeUse,
             realtime: options?.realtime,
-            scopes: flattenScopes({
-                trigger: {
-                    tasks: task,
-                },
-            }),
+            scopes,
         },
         expirationTime: options?.expirationTime,
     });
@@ -170,18 +215,28 @@ async function withTriggerPublicToken(task, options = {}, fn) {
  */
 async function createBatchTriggerPublicToken(task, options) {
     const apiClient = apiClientManager.clientOrThrow();
+    const scopes = flattenScopes({
+        batchTrigger: {
+            tasks: task,
+        },
+    });
+    const oneTimeUse = typeof options?.multipleUse === "boolean" ? !options.multipleUse : true;
+    if (isAdditionalApiKey(apiClient.accessToken)) {
+        return createServerPublicToken(apiClient, {
+            scopes,
+            expirationTime: serverExpirationTime(options?.expirationTime),
+            oneTimeUse,
+            realtime: options?.realtime,
+        });
+    }
     const claims = await apiClient.generateJWTClaims();
     return await internal_generateJWT({
         secretKey: apiClient.accessToken,
         payload: {
             ...claims,
-            otu: typeof options?.multipleUse === "boolean" ? !options.multipleUse : true,
+            otu: oneTimeUse,
             realtime: options?.realtime,
-            scopes: flattenScopes({
-                batchTrigger: {
-                    tasks: task,
-                },
-            }),
+            scopes,
         },
         expirationTime: options?.expirationTime,
     });

package/dist/esm/v3/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/v3/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,gBAAgB,EAChB,WAAW,IAAI,oBAAoB,GACpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,wCAAwC,CAAC;AAEhD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,SAAS,CAAC,OAA+B;IACvD,gBAAgB,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,SAAS;IACT,iBAAiB;IACjB,wBAAwB;IACxB,6BAA6B;IAC7B,QAAQ;IACR,eAAe;IACf,sBAAsB;IACtB,2BAA2B;CAC5B,CAAC;AA8GF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,KAAK,UAAU,iBAAiB,CAAC,OAAkC;IACjE,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,CAAC;IAEnD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,iBAAiB,EAAE,CAAC;IAEnD,OAAO,MAAM,oBAAoB,CAAC;QAChC,SAAS,EAAE,SAAS,CAAC,WAAW;QAChC,OAAO,EAAE;YACP,GAAG,MAAM;YACT,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YACnE,QAAQ,EAAE,OAAO,EAAE,QAAQ;SAC5B;QACD,cAAc,EAAE,OAAO,EAAE,cAAc;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAAC,OAAiC,EAAE,EAAuB;IACvF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE/C,MAAM,QAAQ,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAuCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,KAAK,UAAU,wBAAwB,CACrC,IAAuB,EACvB,OAAmC;IAEnC,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,CAAC;IAEnD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,iBAAiB,EAAE,CAAC;IAEnD,OAAO,MAAM,oBAAoB,CAAC;QAChC,SAAS,EAAE,SAAS,CAAC,WAAW;QAChC,OAAO,EAAE;YACP,GAAG,MAAM;YACT,GAAG,EAAE,OAAO,OAAO,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YAC5E,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,MAAM,EAAE,aAAa,CAAC;gBACpB,OAAO,EAAE;oBACP,KAAK,EAAE,IAAI;iBACZ;aACF,CAAC;SACH;QACD,cAAc,EAAE,OAAO,EAAE,cAAc;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,sBAAsB,CACnC,IAAuB,EACvB,UAAqC,EAAE,EACvC,EAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE5D,MAAM,QAAQ,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,KAAK,UAAU,6BAA6B,CAC1C,IAAuB,EACvB,OAAmC;IAEnC,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,CAAC;IAEnD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,iBAAiB,EAAE,CAAC;IAEnD,OAAO,MAAM,oBAAoB,CAAC;QAChC,SAAS,EAAE,SAAS,CAAC,WAAW;QAChC,OAAO,EAAE;YACP,GAAG,MAAM;YACT,GAAG,EAAE,OAAO,OAAO,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YAC5E,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,MAAM,EAAE,aAAa,CAAC;gBACpB,YAAY,EAAE;oBACZ,KAAK,EAAE,IAAI;iBACZ;aACF,CAAC;SACH;QACD,cAAc,EAAE,OAAO,EAAE,cAAc;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,2BAA2B,CACxC,IAAuB,EACvB,UAAqC,EAAE,EACvC,EAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAEjE,MAAM,QAAQ,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,QAAQ,CACrB,MAA8B,EAC9B,EAAK;IAEL,OAAO,gBAAgB,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,WAAmC;IACxD,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/D,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,EAAE,CAAC;gBAClD,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC1C,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;4BACzB,oBAAoB,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;wBAC7D,CAAC;oBACH,CAAC;yBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACrC,oBAAoB,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC;oBAC9D,CAAC;yBAAM,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,EAAE,CAAC;wBAC/C,oBAAoB,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC;oBACrD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,oBAAoB,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/v3/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,gBAAgB,EAChB,WAAW,IAAI,oBAAoB,EACnC,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,wCAAwC,CAAC;AAEhD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,SAAS,CAAC,OAA+B;IACvD,gBAAgB,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,SAAS;IACT,iBAAiB;IACjB,wBAAwB;IACxB,6BAA6B;IAC7B,QAAQ;IACR,eAAe;IACf,sBAAsB;IACtB,2BAA2B;CAC5B,CAAC;AAiHF,8EAA8E;AAC9E,2EAA2E;AAC3E,yDAAyD;AACzD,SAAS,oBAAoB,CAC3B,cAAkD;IAElD,OAAO,cAAc,YAAY,IAAI;QACnC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;QAC7C,CAAC,CAAC,cAAc,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,SAAoB,EACpB,IAAkC;IAElC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7F,MAAM,IAAI,KAAK,CACb,2JAA2J,CAC5J,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,KAAK,UAAU,iBAAiB,CAAC,OAAkC;IACjE,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,CAAC;IAEnD,IAAI,kBAAkB,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,yFAAyF;gBACvF,mFAAmF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,uBAAuB,CAAC,SAAS,EAAE;YACxC,MAAM;YACN,cAAc,EAAE,oBAAoB,CAAC,OAAO,EAAE,cAAc,CAAC;YAC7D,QAAQ,EAAE,OAAO,EAAE,QAAQ;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,iBAAiB,EAAE,CAAC;IAEnD,OAAO,MAAM,oBAAoB,CAAC;QAChC,SAAS,EAAE,SAAS,CAAC,WAAW;QAChC,OAAO,EAAE;YACP,GAAG,MAAM;YACT,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YAC5C,QAAQ,EAAE,OAAO,EAAE,QAAQ;SAC5B;QACD,cAAc,EAAE,OAAO,EAAE,cAAc;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAAC,OAAiC,EAAE,EAAuB;IACvF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE/C,MAAM,QAAQ,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAwCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,KAAK,UAAU,wBAAwB,CACrC,IAAuB,EACvB,OAAmC;IAEnC,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,aAAa,CAAC;QAC3B,OAAO,EAAE;YACP,KAAK,EAAE,IAAI;SACZ;KACF,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,OAAO,OAAO,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3F,IAAI,kBAAkB,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,OAAO,uBAAuB,CAAC,SAAS,EAAE;YACxC,MAAM;YACN,cAAc,EAAE,oBAAoB,CAAC,OAAO,EAAE,cAAc,CAAC;YAC7D,UAAU;YACV,QAAQ,EAAE,OAAO,EAAE,QAAQ;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,iBAAiB,EAAE,CAAC;IAEnD,OAAO,MAAM,oBAAoB,CAAC;QAChC,SAAS,EAAE,SAAS,CAAC,WAAW;QAChC,OAAO,EAAE;YACP,GAAG,MAAM;YACT,GAAG,EAAE,UAAU;YACf,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,MAAM;SACP;QACD,cAAc,EAAE,OAAO,EAAE,cAAc;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,sBAAsB,CACnC,IAAuB,EACvB,UAAqC,EAAE,EACvC,EAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE5D,MAAM,QAAQ,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,KAAK,UAAU,6BAA6B,CAC1C,IAAuB,EACvB,OAAmC;IAEnC,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,aAAa,CAAC;QAC3B,YAAY,EAAE;YACZ,KAAK,EAAE,IAAI;SACZ;KACF,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,OAAO,OAAO,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3F,IAAI,kBAAkB,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,OAAO,uBAAuB,CAAC,SAAS,EAAE;YACxC,MAAM;YACN,cAAc,EAAE,oBAAoB,CAAC,OAAO,EAAE,cAAc,CAAC;YAC7D,UAAU;YACV,QAAQ,EAAE,OAAO,EAAE,QAAQ;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,iBAAiB,EAAE,CAAC;IAEnD,OAAO,MAAM,oBAAoB,CAAC;QAChC,SAAS,EAAE,SAAS,CAAC,WAAW;QAChC,OAAO,EAAE;YACP,GAAG,MAAM;YACT,GAAG,EAAE,UAAU;YACf,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,MAAM;SACP;QACD,cAAc,EAAE,OAAO,EAAE,cAAc;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,2BAA2B,CACxC,IAAuB,EACvB,UAAqC,EAAE,EACvC,EAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAEjE,MAAM,QAAQ,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,QAAQ,CACrB,MAA8B,EAC9B,EAAK;IAEL,OAAO,gBAAgB,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,WAAmC;IACxD,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/D,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,EAAE,CAAC;gBAClD,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC1C,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;4BACzB,oBAAoB,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;wBAC7D,CAAC;oBACH,CAAC;yBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACrC,oBAAoB,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC;oBAC9D,CAAC;yBAAM,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,EAAE,CAAC;wBAC/C,oBAAoB,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC;oBACrD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,oBAAoB,CAAC;AAC9B,CAAC"}

package/dist/esm/v3/auth.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/esm/v3/auth.test.js

@@ -0,0 +1,147 @@
+import { createServer } from "node:http";
+import { apiClientManager } from "@trigger.dev/core/v3";
+import { validateJWT } from "@trigger.dev/core/v3/jwt";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { auth } from "./auth.js";
+describe("public token API key routing", () => {
+    let server;
+    let baseUrl;
+    let requests;
+    let publicTokenStatus;
+    beforeEach(async () => {
+        requests = [];
+        publicTokenStatus = 200;
+        server = createServer((request, response) => {
+            void handleRequest(request, response, requests, () => publicTokenStatus);
+        });
+        await new Promise((resolve) => {
+            server.listen(0, "127.0.0.1", () => {
+                const address = server.address();
+                baseUrl = `http://127.0.0.1:${address.port}`;
+                resolve();
+            });
+        });
+    });
+    afterEach(async () => {
+        await new Promise((resolve) => server.close(() => resolve()));
+    });
+    it("uses server minting for additional keys", async () => {
+        const key = "tr_prod_sk_0123456789abcdefghijklmn";
+        const token = await apiClientManager.runWithConfig({ baseURL: baseUrl, accessToken: key }, () => auth.createPublicToken({
+            scopes: { read: { runs: ["run_123"] } },
+            expirationTime: new Date("2030-01-01T00:00:00.000Z"),
+            realtime: { skipColumns: ["payload"] },
+        }));
+        expect(token).toBe("server-minted-token");
+        expect(requests).toEqual([
+            {
+                method: "POST",
+                url: "/api/v1/auth/public-tokens",
+                authorization: `Bearer ${key}`,
+                body: {
+                    scopes: ["read:runs:run_123"],
+                    expirationTime: 1893456000,
+                    realtime: { skipColumns: ["payload"] },
+                },
+            },
+        ]);
+    });
+    it("server-mints trigger tokens with one-time-use semantics", async () => {
+        const key = "tr_dev_sk_0123456789abcdefghijklmn";
+        await apiClientManager.runWithConfig({ baseURL: baseUrl, accessToken: key }, () => auth.createTriggerPublicToken(["task-one", "task-two"], { multipleUse: true }));
+        expect(requests[0]?.body).toEqual({
+            scopes: ["trigger:tasks:task-one", "trigger:tasks:task-two"],
+            oneTimeUse: false,
+        });
+    });
+    it("server-mints batch trigger tokens for additional keys", async () => {
+        const key = "tr_stg_sk_0123456789abcdefghijklmn";
+        await apiClientManager.runWithConfig({ baseURL: baseUrl, accessToken: key }, () => auth.createBatchTriggerPublicToken("batch-task", {
+            expirationTime: "2h",
+            multipleUse: false,
+            realtime: { skipColumns: ["payload"] },
+        }));
+        expect(requests).toEqual([
+            {
+                method: "POST",
+                url: "/api/v1/auth/public-tokens",
+                authorization: `Bearer ${key}`,
+                body: {
+                    scopes: ["batchTrigger:tasks:batch-task"],
+                    expirationTime: "2h",
+                    oneTimeUse: true,
+                    realtime: { skipColumns: ["payload"] },
+                },
+            },
+        ]);
+    });
+    it("keeps root key self-minting unchanged", async () => {
+        const key = "tr_prod_0123456789abcdefghijklmn";
+        const token = await apiClientManager.runWithConfig({ baseURL: baseUrl, accessToken: key }, () => auth.createPublicToken({ scopes: { read: { runs: true } } }));
+        expect(requests.map((request) => request.url)).toEqual(["/api/v1/auth/jwt/claims"]);
+        const validation = await validateJWT(token, key);
+        expect(validation.ok).toBe(true);
+        if (!validation.ok)
+            return;
+        expect(validation.payload).toMatchObject({
+            sub: "env_test",
+            pub: true,
+            scopes: ["read:runs"],
+        });
+    });
+    it.each([
+        ["no options at all", undefined],
+        ["an empty scopes object", {}],
+        ["a scope group with nothing selected", { read: {} }],
+    ])("keeps root-key behavior unchanged for %s", async (_label, scopes) => {
+        const key = "tr_prod_0123456789abcdefghijklmn";
+        const token = await apiClientManager.runWithConfig({ baseURL: baseUrl, accessToken: key }, () => auth.createPublicToken(scopes === undefined ? undefined : { scopes }));
+        expect(requests.map((request) => request.url)).toEqual(["/api/v1/auth/jwt/claims"]);
+        const validation = await validateJWT(token, key);
+        expect(validation.ok).toBe(true);
+    });
+    it.each([
+        ["no options at all", undefined],
+        ["an empty scopes object", {}],
+        ["a scope group with nothing selected", { read: {} }],
+    ])("rejects %s clearly for additional keys", async (_label, scopes) => {
+        const key = "tr_prod_sk_0123456789abcdefghijklmn";
+        const promise = apiClientManager.runWithConfig({ baseURL: baseUrl, accessToken: key }, () => auth.createPublicToken(scopes === undefined ? undefined : { scopes }));
+        await expect(promise).rejects.toThrow("requires at least one scope when using an additional API key");
+        expect(requests).toEqual([]);
+    });
+    it("explains how to recover when the server lacks the mint endpoint", async () => {
+        publicTokenStatus = 404;
+        const promise = apiClientManager.runWithConfig({
+            baseURL: baseUrl,
+            accessToken: "tr_prod_sk_0123456789abcdefghijklmn",
+        }, () => auth.createPublicToken({ scopes: { read: { runs: true } } }));
+        await expect(promise).rejects.toThrow("Upgrade the server or use the root API key");
+    });
+});
+async function handleRequest(request, response, requests, publicTokenStatus) {
+    const chunks = [];
+    for await (const chunk of request) {
+        chunks.push(Buffer.from(chunk));
+    }
+    const rawBody = Buffer.concat(chunks).toString();
+    requests.push({
+        method: request.method ?? "",
+        url: request.url ?? "",
+        authorization: request.headers.authorization,
+        body: rawBody ? JSON.parse(rawBody) : undefined,
+    });
+    if (request.url === "/api/v1/auth/jwt/claims") {
+        return json(response, { sub: "env_test", pub: true });
+    }
+    if (request.url === "/api/v1/auth/public-tokens") {
+        const status = publicTokenStatus();
+        return json(response, status === 200 ? { token: "server-minted-token" } : { error: "Not found" }, status);
+    }
+    return json(response, { error: "Not found" }, 404);
+}
+function json(response, body, status = 200) {
+    response.writeHead(status, { "content-type": "application/json" });
+    response.end(JSON.stringify(body));
+}
+//# sourceMappingURL=auth.test.js.map

package/dist/esm/v3/auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../../src/v3/auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,IAAI,MAAc,CAAC;IACnB,IAAI,OAAe,CAAC;IACpB,IAAI,QAA2B,CAAC;IAChC,IAAI,iBAAyB,CAAC;IAE9B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,GAAG,EAAE,CAAC;QACd,iBAAiB,GAAG,GAAG,CAAC;QACxB,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC1C,KAAK,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;gBACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;gBAChD,OAAO,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC7C,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,qCAAqC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAC9F,IAAI,CAAC,iBAAiB,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE;YACvC,cAAc,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;YACpD,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE;SACvC,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB;gBACE,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,4BAA4B;gBACjC,aAAa,EAAE,UAAU,GAAG,EAAE;gBAC9B,IAAI,EAAE;oBACJ,MAAM,EAAE,CAAC,mBAAmB,CAAC;oBAC7B,cAAc,EAAE,UAAU;oBAC1B,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE;iBACvC;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,GAAG,GAAG,oCAAoC,CAAC;QACjD,MAAM,gBAAgB,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAChF,IAAI,CAAC,wBAAwB,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAC/E,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC;YAChC,MAAM,EAAE,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;YAC5D,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,oCAAoC,CAAC;QACjD,MAAM,gBAAgB,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAChF,IAAI,CAAC,6BAA6B,CAAC,YAAY,EAAE;YAC/C,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,KAAK;YAClB,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE;SACvC,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB;gBACE,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,4BAA4B;gBACjC,aAAa,EAAE,UAAU,GAAG,EAAE;gBAC9B,IAAI,EAAE;oBACJ,MAAM,EAAE,CAAC,+BAA+B,CAAC;oBACzC,cAAc,EAAE,IAAI;oBACpB,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE;iBACvC;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,kCAAkC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAC9F,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAC7D,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACpF,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO;QAC3B,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC;YACvC,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,CAAC,WAAW,CAAC;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,mBAAmB,EAAE,SAAS,CAAC;QAChC,CAAC,wBAAwB,EAAE,EAAE,CAAC;QAC9B,CAAC,qCAAqC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;KACtD,CAAC,CAAC,0CAA0C,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACtE,MAAM,GAAG,GAAG,kCAAkC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAC9F,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CACtE,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACpF,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,mBAAmB,EAAE,SAAS,CAAC;QAChC,CAAC,wBAAwB,EAAE,EAAE,CAAC;QAC9B,CAAC,qCAAqC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;KACtD,CAAC,CAAC,wCAAwC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACpE,MAAM,GAAG,GAAG,qCAAqC,CAAC;QAClD,MAAM,OAAO,GAAG,gBAAgB,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAC1F,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CACtE,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CACnC,8DAA8D,CAC/D,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,iBAAiB,GAAG,GAAG,CAAC;QACxB,MAAM,OAAO,GAAG,gBAAgB,CAAC,aAAa,CAC5C;YACE,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,qCAAqC;SACnD,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CACnE,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,aAAa,CAC1B,OAAwB,EACxB,QAAwB,EACxB,QAA2B,EAC3B,iBAA+B;IAE/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjD,QAAQ,CAAC,IAAI,CAAC;QACZ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC5B,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,EAAE;QACtB,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;QAC5C,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;KAChD,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,GAAG,KAAK,yBAAyB,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,4BAA4B,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,OAAO,IAAI,CACT,QAAQ,EACR,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAC1E,MAAM,CACP,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,IAAI,CAAC,QAAwB,EAAE,IAAa,EAAE,MAAM,GAAG,GAAG;IACjE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/esm/v3/createStartSessionAction.test.js

@@ -107,6 +107,39 @@ describe("chat.createStartSessionAction — runtime", () => {
         expect(lastStartBody?.triggerConfig.region).toBe("us-east-1");
         expect(lastStartBody?.triggerConfig.lockToVersion).toBe("20260101.1");
     });
+    it("server-mints override tokens for additional API keys", async () => {
+        const requests = [];
+        const start = chat.createStartSessionAction("fake-chat", {
+            apiClient: {
+                baseURL: "https://example.invalid",
+                accessToken: "tr_prod_sk_0123456789abcdefghijklmn",
+            },
+            tokenTTL: "30m",
+            fetch: async (url, init, context) => {
+                requests.push({
+                    url,
+                    body: typeof init.body === "string" ? JSON.parse(init.body) : undefined,
+                });
+                if (context.endpoint === "sessions") {
+                    return Response.json({
+                        id: "session_fixture",
+                        runId: "run_fixture",
+                        publicAccessToken: "session-token",
+                    });
+                }
+                return Response.json({ token: "server-minted-token" });
+            },
+        });
+        const result = await start({ chatId: "chat-additional-key" });
+        expect(result.publicAccessToken).toBe("server-minted-token");
+        expect(requests[1]).toEqual({
+            url: "https://example.invalid/api/v1/auth/public-tokens",
+            body: {
+                scopes: ["read:sessions:chat-additional-key", "write:sessions:chat-additional-key"],
+                expirationTime: "30m",
+            },
+        });
+    });
     it("keeps session-level metadata distinct from per-turn clientData", async () => {
         installStartFixture();
         const start = chat.createStartSessionAction("fake-chat");

package/dist/esm/v3/createStartSessionAction.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"createStartSessionAction.test.js","sourceRoot":"","sources":["../../../src/v3/createStartSessionAction.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,0EAA0E;AAC1E,yEAAyE;AACzE,2DAA2D;AAC3D,gBAAgB,CAAC,+BAA+B,CAAC;IAC/C,OAAO,EAAE,yBAAyB;IAClC,WAAW,EAAE,gBAAgB;CAC9B,CAAC,CAAC;AAEH,wEAAwE;AACxE,IAAI,aAAmD,CAAC;AAExD,SAAS,mBAAmB;IAC1B,6BAA6B,CAAC,KAAK,EAAE,IAAI,EAAuC,EAAE;QAChF,aAAa,GAAG,IAAI,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,iBAAiB;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,KAAK,EAAE,aAAa;YACpB,iBAAiB,EAAE,gBAAgB;YACnC,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,4BAA4B,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,6BAA6B,CAAC,SAAS,CAAC,CAAC;IACzC,4BAA4B,CAAC,SAAS,CAAC,CAAC;IACxC,aAAa,GAAG,SAAS,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,0EAA0E;AAC1E,6EAA6E;AAC7E,+DAA+D;AAC/D,MAAM,QAAQ,GAAG,IAAI;KAClB,cAAc,CAAC;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;KAC9B,CAAC;CACH,CAAC;KACD,KAAK,CAAC;IACL,EAAE,EAAE,WAAW;IACf,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,SAAgB;CAClC,CAAC,CAAC;AAEL,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,mBAAmB,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAkB,WAAW,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;YACzB,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;SAC3C,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC;YAC7D,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;YACxC,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,mBAAmB,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAElC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,mBAAmB,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE;YACvD,aAAa,EAAE;gBACb,IAAI,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;aAC5C;SACF,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAErC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAChD,gBAAgB;YAChB,UAAU;YACV,GAAG;YACH,GAAG;YACH,GAAG;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,mBAAmB,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE;YACvD,aAAa,EAAE;gBACb,WAAW,EAAE,GAAG;gBAChB,MAAM,EAAE,WAAW;gBACnB,aAAa,EAAE,YAAY;aAC5B;SACF,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QAEvC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,mBAAmB,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAkB,WAAW,CAAC,CAAC;QAC1E,MAAM,KAAK,CAAC;YACV,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;YAC3C,QAAQ,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;SACvC,CAAC,CAAC;QAEH,uDAAuD;QACvD,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC;YAC7D,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;SAC1C,CAAC,CAAC;QACH,mEAAmE;QACnE,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAkB,WAAW,CAAC,CAAC;QAE1E,wDAAwD;QACxD,YAAY,EAA6C,CAAC,aAAa,EAEpE,CAAC;QACJ,oEAAoE;QACpE,YAAY,EAA6C,CAAC,GAAG,CAAC,aAAa,EAAW,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACzD,YAAY,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC9D,6CAA6C;QAC7C,YAAY,EAA6C,CAAC,aAAa,EAAW,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"createStartSessionAction.test.js","sourceRoot":"","sources":["../../../src/v3/createStartSessionAction.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,0EAA0E;AAC1E,yEAAyE;AACzE,2DAA2D;AAC3D,gBAAgB,CAAC,+BAA+B,CAAC;IAC/C,OAAO,EAAE,yBAAyB;IAClC,WAAW,EAAE,gBAAgB;CAC9B,CAAC,CAAC;AAEH,wEAAwE;AACxE,IAAI,aAAmD,CAAC;AAExD,SAAS,mBAAmB;IAC1B,6BAA6B,CAAC,KAAK,EAAE,IAAI,EAAuC,EAAE;QAChF,aAAa,GAAG,IAAI,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,iBAAiB;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,KAAK,EAAE,aAAa;YACpB,iBAAiB,EAAE,gBAAgB;YACnC,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,4BAA4B,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,6BAA6B,CAAC,SAAS,CAAC,CAAC;IACzC,4BAA4B,CAAC,SAAS,CAAC,CAAC;IACxC,aAAa,GAAG,SAAS,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,0EAA0E;AAC1E,6EAA6E;AAC7E,+DAA+D;AAC/D,MAAM,QAAQ,GAAG,IAAI;KAClB,cAAc,CAAC;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;KAC9B,CAAC;CACH,CAAC;KACD,KAAK,CAAC;IACL,EAAE,EAAE,WAAW;IACf,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,SAAgB;CAClC,CAAC,CAAC;AAEL,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,mBAAmB,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAkB,WAAW,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;YACzB,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;SAC3C,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC;YAC7D,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;YACxC,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,mBAAmB,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAElC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,mBAAmB,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE;YACvD,aAAa,EAAE;gBACb,IAAI,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;aAC5C;SACF,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAErC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAChD,gBAAgB;YAChB,UAAU;YACV,GAAG;YACH,GAAG;YACH,GAAG;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,mBAAmB,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE;YACvD,aAAa,EAAE;gBACb,WAAW,EAAE,GAAG;gBAChB,MAAM,EAAE,WAAW;gBACnB,aAAa,EAAE,YAAY;aAC5B;SACF,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QAEvC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,QAAQ,GAA0C,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE;YACvD,SAAS,EAAE;gBACT,OAAO,EAAE,yBAAyB;gBAClC,WAAW,EAAE,qCAAqC;aACnD;YACD,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;gBAClC,QAAQ,CAAC,IAAI,CAAC;oBACZ,GAAG;oBACH,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;iBACxE,CAAC,CAAC;gBAEH,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;oBACpC,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,EAAE,EAAE,iBAAiB;wBACrB,KAAK,EAAE,aAAa;wBACpB,iBAAiB,EAAE,eAAe;qBACnC,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACzD,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1B,GAAG,EAAE,mDAAmD;YACxD,IAAI,EAAE;gBACJ,MAAM,EAAE,CAAC,mCAAmC,EAAE,oCAAoC,CAAC;gBACnF,cAAc,EAAE,KAAK;aACtB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,mBAAmB,EAAE,CAAC;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAkB,WAAW,CAAC,CAAC;QAC1E,MAAM,KAAK,CAAC;YACV,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;YAC3C,QAAQ,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;SACvC,CAAC,CAAC;QAEH,uDAAuD;QACvD,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC;YAC7D,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;SAC1C,CAAC,CAAC;QACH,mEAAmE;QACnE,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAkB,WAAW,CAAC,CAAC;QAE1E,wDAAwD;QACxD,YAAY,EAA6C,CAAC,aAAa,EAEpE,CAAC;QACJ,oEAAoE;QACpE,YAAY,EAA6C,CAAC,GAAG,CAAC,aAAa,EAAW,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACzD,YAAY,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC9D,6CAA6C;QAC7C,YAAY,EAA6C,CAAC,aAAa,EAAW,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "4.5.7";
+export const VERSION = "4.5.9";
 //# sourceMappingURL=version.js.map

package/docs/ai-chat/changelog.mdx

@@ -1,5 +1,5 @@
 ---
-title: "Changelog"
+title: "AI Agents SDK changelog"
 sidebarTitle: "Changelog"
 description: "Changelog for the AI Agents SDK."
 ---

package/docs/ai-chat/how-it-works.mdx

@@ -1,5 +1,5 @@
 ---
-title: "How it works"
+title: "How the AI Agents SDK works"
 sidebarTitle: "How it works"
 description: "End-to-end mechanics of a chat.agent turn: the two durable channels per session, the long-lived task that reads and writes them, and how a chat survives refreshes, deploys, and idle gaps."
 ---

package/docs/bulk-actions.mdx

@@ -1,5 +1,6 @@
 ---
-title: "Bulk actions"
+title: "Bulk actions in the dashboard"
+sidebarTitle: "Bulk actions"
 description: "Replay or cancel multiple runs from the dashboard using filters or selected run IDs."
 ---
 

package/docs/config/extensions/lightpanda.mdx

@@ -1,5 +1,5 @@
 ---
-title: "Lightpanda"
+title: "Lightpanda build extension"
 sidebarTitle: "lightpanda"
 description: "Use the lightpanda build extension to add Lightpanda browser to your project"
 tag: "v4"

package/docs/config/extensions/puppeteer.mdx

@@ -1,5 +1,5 @@
 ---
-title: "Puppeteer"
+title: "Puppeteer build extension"
 sidebarTitle: "puppeteer"
 description: "Use the puppeteer build extension to enable support for Puppeteer in your project"
 ---

package/docs/how-it-works.mdx

@@ -1,5 +1,5 @@
 ---
-title: "How it works"
+title: "How Trigger.dev works"
 sidebarTitle: "How it works"
 description: "Understand how Trigger.dev works and how it can help you."
 ---
@@ -148,7 +148,7 @@ Here's how the Checkpoint-Resume System works:
 
 2. **Subtask Handling**: If a task needs to trigger a subtask, it can do so and wait for its completion using `triggerAndWait`
 
-3. **State Checkpointing**: While waiting for a subtask or during a programmed pause (e.g., `wait.for({ seconds: 30 })`), the system uses CRIU (Checkpoint/Restore In Userspace) to create a checkpoint of the task's entire state, including memory, CPU registers, and open file descriptors.
+3. **State Checkpointing**: While waiting for a subtask or during a long programmed pause (e.g., `wait.for({ minutes: 5 })`), the system uses CRIU (Checkpoint/Restore In Userspace) to create a checkpoint of the task's entire state, including memory, CPU registers, and open file descriptors. A `wait.for()` or `wait.until()` shorter than 60 seconds doesn't checkpoint — see [Wait](/wait).
 
 4. **Resource Release**: After checkpointing, the parent task's resources are released, freeing up the execution environment.
 
@@ -178,9 +178,9 @@ export const parentTask = task({
     console.log("Child task result:", result);
 
     // This will also cause the task to be checkpointed and suspended
-    await wait.for({ seconds: 30 });
+    await wait.for({ minutes: 5 });
 
-    console.log("Resumed after 30 seconds");
+    console.log("Resumed after 5 minutes");
 
     return "Parent task completed";
   },

package/docs/how-to-reduce-your-spend.mdx

@@ -170,7 +170,7 @@ export const boundedTask = task({
 
 ## Use waitpoints instead of polling
 
-Waits longer than 5 seconds automatically checkpoint your task, meaning you don't pay for compute while waiting. Use `wait.for()`, `wait.until()`, or `triggerAndWait()` instead of polling loops.
+You don't pay for compute during any wait longer than 5 seconds. Use `wait.for()`, `wait.until()`, or `triggerAndWait()` instead of polling loops.
 
 ```ts
 import { task, wait } from "@trigger.dev/sdk";
@@ -178,17 +178,17 @@ import { task, wait } from "@trigger.dev/sdk";
 export const waitpointTask = task({
   id: "waitpoint-task",
   run: async (payload) => {
-    // This wait is free - your task is checkpointed
+    // You aren't charged for compute during this wait
     await wait.for({ minutes: 5 });
 
-    // Parent is also checkpointed while waiting for child tasks
+    // The parent isn't charged either while it waits for a child task
     const result = await childTask.triggerAndWait({ data: payload });
     return result;
   },
 });
 ```
 
-[Read more about waitpoints](/wait-for).
+Waiting saves you compute, but it doesn't always free up concurrency — see [Wait](/wait).
 
 ## Use debounce to consolidate multiple triggers
 

package/docs/queue-concurrency.mdx

@@ -199,6 +199,10 @@ For example, if you have a queue with a `concurrencyLimit` of 1:
 - When the executing run reaches a waitpoint and checkpoints, it releases its slot
 - The next queued run can then begin execution
 
+### Short time-based waits keep their slot
+
+Checkpointing takes time, so a run doesn't checkpoint the moment it reaches a waitpoint. For [`wait.for()`](/wait-for) and [`wait.until()`](/wait-until) it happens 60 seconds into the wait, so anything shorter stays `EXECUTING` and holds its slot for the whole wait. If you're polling in a loop, use an interval comfortably above 60 seconds so the slot is actually released between polls.
+
 ### Waiting for a subtask on a different queue
 
 When a parent task triggers and waits for a subtask on a different queue, the parent task will checkpoint and release its concurrency slot once it reaches the wait point. This prevents environment deadlocks where all concurrency slots would be occupied by waiting tasks.

package/docs/runs/bulk-actions.mdx

@@ -1,5 +1,6 @@
 ---
-title: "Bulk actions"
+title: "Bulk actions with the SDK"
+sidebarTitle: "Bulk actions"
 description: "Cancel or replay many runs from the SDK using run IDs or SDK run-list filters."
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/sdk",
-  "version": "4.5.7",
+  "version": "4.5.9",
   "description": "trigger.dev Node.JS SDK",
   "license": "MIT",
   "publishConfig": {
@@ -66,7 +66,7 @@
   "dependencies": {
     "@opentelemetry/api": "1.9.1",
     "@opentelemetry/semantic-conventions": "1.41.1",
-    "@trigger.dev/core": "4.5.7",
+    "@trigger.dev/core": "4.5.9",
     "chalk": "^5.2.0",
     "cronstrue": "^2.21.0",
     "debug": "^4.3.4",