Repository navigation
[pull] main from triggerdotdev:main - #733
Merged
Merged
Conversation
Adds a run-scoped route for downloading stored realtime payloads and outputs, and moves the SDK onto it. Public tokens can no longer create runs that point at existing stored packets. Mono-RevId: a39d74877a8b7823333f684e006d510c48e71b0b
…WT mint JWT minting now limits scopes and token lifetime to the presenting key's access, and rejects rotated keys. Mono-RevId: a5698c5cc89483a863a90332e120aef478750e13
Realtime session authorization is now limited to the requested channel and the operations it needs. Mono-RevId: 00b06dd590600adcb2fb2d6adbebde81fd3dd05f
Mono-RevId: 941c01f76cc443b5b6c74f3444029abf052163c1
Mono-RevId: 758ad3b12bbf52c279507669883135b1c1e441d9
Mono-RevId: 94d1f8a40178cfe84399d958596a96bcb83cfb70
Mono-RevId: 6df559943fc3405b2933bc652111a55634090cad
Mono-RevId: 8231f6bfa53faa16e02ac04ee785d2bfd2f14742
Public session access tokens can no longer request upload URLs for durable chat snapshots. Private runtimes can still upload snapshots, and scoped public reads continue to support chat resumption. Mono-RevId: e7b10f9fc6749dca7a9fb4cc096c0941a294d8ff
Mono-RevId: 3064956970461fff4c7221c24116e20fbeab7685
Mono-RevId: 0c9f0f925aaf8437831a105c9e3f3ce95495452e
Removes the native JSON attributes column from the task events table; attributes are stored as serialized text. Mono-RevId: e4c1daf4eb684f03e7edb16318b41c7ab1e3f0c9
## Summary 5 improvements, 4 bug fixes. ## Improvements - Authorize stored realtime payload and output downloads against their owning run. Large packet hydration continues to work for run-, task-, tag-, and batch-scoped public tokens without permitting arbitrary packet reads. ([`76031b0a1`](76031b0)) - Show warm idle time and durable waits separately in chat agent traces. Durable waits now open the waitpoint inspector while waiting and after completion. Message span names are shorter, and repeated session IDs no longer crowd message-wait and default output-stream spans. ([`0754931cc`](0754931)) - chat.agent: the between-turns compaction check now receives the last step's token usage (the context the model actually held) instead of the turn's sum over every tool-calling step, so a single tool-using turn no longer compacts a short conversation. The summed figure is still available as `turnUsage` on the event. A head-start handover whose pending tool call completes under the same message id now replaces its spliced partial in the model lane directly instead of falling back to a full reconversion. ([`04c837569`](04c8375)) - Validate resource IDs when creating scoped public tokens. Explicitly empty IDs are now rejected instead of being interpreted as type-wide permissions. ([`22f8fb2b5`](22f8fb2)) ## Server changes These changes affect the self-hosted Docker image and Trigger.dev Cloud: - The banner that prompts you to set a billing limit now lets you choose to run without one, so you don't have to open your billing limit settings to dismiss it. - Org member invites now match emails case-insensitively, so an invite whose email casing differs from the invitee's account email can be accepted. ([#3849](#3849)) - Limit public access tokens created through the JWT endpoint to the API key's permissions and a maximum 24-hour lifetime. Rotated environment keys can no longer create tokens during their grace period. - Realtime session writers now receive authorization limited to the requested session channel. - Prevent public session access tokens from authorizing durable chat snapshot uploads <details> <summary>Raw changeset output</summary> # Releases ## @trigger.dev/build@4.6.2 ### Patch Changes - Updated dependencies: - `@trigger.dev/core@4.6.2` ## trigger.dev@4.6.2 ### Patch Changes - Updated dependencies: - `@trigger.dev/core@4.6.2` - `@trigger.dev/build@4.6.2` - `@trigger.dev/schema-to-json@4.6.2` ## @trigger.dev/core@4.6.2 ### Patch Changes - Authorize stored realtime payload and output downloads against their owning run. Large packet hydration continues to work for run-, task-, tag-, and batch-scoped public tokens without permitting arbitrary packet reads. ([`76031b0a1`](76031b0)) ## @trigger.dev/python@4.6.2 ### Patch Changes - Updated dependencies: - `@trigger.dev/sdk@4.6.2` - `@trigger.dev/core@4.6.2` - `@trigger.dev/build@4.6.2` ## @trigger.dev/react-hooks@4.6.2 ### Patch Changes - Updated dependencies: - `@trigger.dev/core@4.6.2` ## @trigger.dev/redis-worker@4.6.2 ### Patch Changes - Updated dependencies: - `@trigger.dev/core@4.6.2` ## @trigger.dev/rsc@4.6.2 ### Patch Changes - Updated dependencies: - `@trigger.dev/core@4.6.2` ## @trigger.dev/schema-to-json@4.6.2 ### Patch Changes - Updated dependencies: - `@trigger.dev/core@4.6.2` ## @trigger.dev/sdk@4.6.2 ### Patch Changes - Show warm idle time and durable waits separately in chat agent traces. Durable waits now open the waitpoint inspector while waiting and after completion. Message span names are shorter, and repeated session IDs no longer crowd message-wait and default output-stream spans. ([`0754931cc`](0754931)) - chat.agent: the between-turns compaction check now receives the last step's token usage (the context the model actually held) instead of the turn's sum over every tool-calling step, so a single tool-using turn no longer compacts a short conversation. The summed figure is still available as `turnUsage` on the event. A head-start handover whose pending tool call completes under the same message id now replaces its spliced partial in the model lane directly instead of falling back to a full reconversion. ([`04c837569`](04c8375)) - Validate resource IDs when creating scoped public tokens. Explicitly empty IDs are now rejected instead of being interpreted as type-wide permissions. ([`22f8fb2b5`](22f8fb2)) - Updated dependencies: - `@trigger.dev/core@4.6.2` </details> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Extract shared dashboard authorization helpers for resolving tenant and environment scope before feature-specific permission checks. Existing route behavior remains unchanged until callers adopt them. Mono-RevId: 981f4694a2ab54f1c39867449704c317efc91b29
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )