Cover carriage-return baseURL whitespace validation

Co-authored-by: Eric Allam <eric@trigger.dev>

Author: cursoragent

docs/tasks/streams.mdx

@@ -675,6 +675,7 @@ Examples:
 - ❌ `ws://api.trigger.dev` / `wss://api.trigger.dev`
 - ❌ `https://api.trigger.dev/\ninternal`
 - ❌ `https://api.trigger.dev/\tinternal`
+- ❌ `https://api.trigger.dev/\rinternal`
 
 Validation errors use these exact messages:
 

packages/ai/README.md

@@ -182,6 +182,7 @@ Examples:
 - ❌ `ws://api.trigger.dev` / `wss://api.trigger.dev` (websocket protocols are rejected)
 - ❌ `https://api.trigger.dev/\ninternal` (internal whitespace characters)
 - ❌ `https://api.trigger.dev/\tinternal` (internal tab characters)
+- ❌ `https://api.trigger.dev/\rinternal` (internal carriage-return characters)
 
 Validation errors use these exact messages:
 

packages/ai/src/chatTransport.test.ts

@@ -742,6 +742,17 @@ describe("TriggerChatTransport", function () {
     }).toThrowError("baseURL must not contain internal whitespace characters");
   });
 
+  it("throws when baseURL contains internal carriage-return characters", function () {
+    expect(function () {
+      new TriggerChatTransport({
+        task: "chat-task",
+        accessToken: "pk_trigger",
+        baseURL: "https://api.trigger.dev/\rinternal",
+        stream: "chat-stream",
+      });
+    }).toThrowError("baseURL must not contain internal whitespace characters");
+  });
+
   it("throws when baseURL is a relative path", function () {
     expect(function () {
       new TriggerChatTransport({
@@ -3327,6 +3338,17 @@ describe("TriggerChatTransport", function () {
     }).toThrowError("baseURL must not contain internal whitespace characters");
   });
 
+  it("throws from factory when baseURL contains internal carriage-return characters", function () {
+    expect(function () {
+      createTriggerChatTransport({
+        task: "chat-task",
+        accessToken: "pk_trigger",
+        baseURL: "https://api.trigger.dev/\rinternal",
+        stream: "chat-stream",
+      });
+    }).toThrowError("baseURL must not contain internal whitespace characters");
+  });
+
   it("throws from factory when baseURL protocol is not http or https", function () {
     expect(function () {
       createTriggerChatTransport({