Document trimmed-wrapper hash and credential baseURL rejections

Co-authored-by: Eric Allam <eric@trigger.dev>

Author: cursoragent

docs/tasks/streams.mdx

@@ -689,6 +689,8 @@ Examples:
 - ❌ `\u205F///\u205F` (empty after trimming wrapper whitespace)
 - ❌ `\u3000///\u3000` (empty after trimming wrapper whitespace)
 - ❌ `\n\thttps://api.trigger.dev/base/?query=1\t\n` (query is still rejected after trimming wrappers)
+- ❌ `\n\thttps://api.trigger.dev/base/#fragment\t\n` (hash is still rejected after trimming wrappers)
+- ❌ `\n\thttps://user:pass@api.trigger.dev/base/\t\n` (credentials are still rejected after trimming wrappers)
 - ❌ `\n\tws://api.trigger.dev\t\n` / `\n\twss://api.trigger.dev\t\n` (trimmed wrappers still reject websocket protocols)
 - ❌ `https://api.trigger.dev/\ninternal`
 - ❌ `https://api.trigger.dev/in valid`

packages/ai/README.md

@@ -196,6 +196,8 @@ Examples:
 - ❌ `\u205F///\u205F` (empty after trimming wrapper whitespace)
 - ❌ `\u3000///\u3000` (empty after trimming wrapper whitespace)
 - ❌ `\n\thttps://api.trigger.dev/base/?query=1\t\n` (query is still rejected after trimming wrappers)
+- ❌ `\n\thttps://api.trigger.dev/base/#fragment\t\n` (hash is still rejected after trimming wrappers)
+- ❌ `\n\thttps://user:pass@api.trigger.dev/base/\t\n` (credentials are still rejected after trimming wrappers)
 - ❌ `\n\tws://api.trigger.dev\t\n` / `\n\twss://api.trigger.dev\t\n` (trimmed wrappers still reject websocket protocols)
 - ❌ `https://api.trigger.dev/\ninternal` (internal whitespace characters)
 - ❌ `https://api.trigger.dev/in valid` (internal space characters)