Cover trimmed hash and credential baseURL rejection

Co-authored-by: Eric Allam <eric@trigger.dev>

Author: cursoragent

packages/ai/src/chatTransport.test.ts

@@ -686,6 +686,17 @@ describe("TriggerChatTransport", function () {
     }).toThrowError("baseURL must not include query parameters or hash fragments");
   });
 
+  it("throws when trimmed baseURL includes hash fragments", function () {
+    expect(function () {
+      new TriggerChatTransport({
+        task: "chat-task",
+        accessToken: "pk_trigger",
+        baseURL: "  https://example.com/base/#fragment  ",
+        stream: "chat-stream",
+      });
+    }).toThrowError("baseURL must not include query parameters or hash fragments");
+  });
+
   it("throws when baseURL includes username or password credentials", function () {
     expect(function () {
       new TriggerChatTransport({
@@ -697,6 +708,17 @@ describe("TriggerChatTransport", function () {
     }).toThrowError("baseURL must not include username or password credentials");
   });
 
+  it("throws when trimmed baseURL includes username or password credentials", function () {
+    expect(function () {
+      new TriggerChatTransport({
+        task: "chat-task",
+        accessToken: "pk_trigger",
+        baseURL: "  https://user:pass@example.com/base/  ",
+        stream: "chat-stream",
+      });
+    }).toThrowError("baseURL must not include username or password credentials");
+  });
+
   it("accepts https baseURL values without throwing", function () {
     expect(function () {
       new TriggerChatTransport({
@@ -2958,6 +2980,17 @@ describe("TriggerChatTransport", function () {
     }).toThrowError("baseURL must not include query parameters or hash fragments");
   });
 
+  it("throws from factory when trimmed baseURL includes hash fragments", function () {
+    expect(function () {
+      createTriggerChatTransport({
+        task: "chat-task",
+        accessToken: "pk_trigger",
+        baseURL: "  https://example.com/base/#fragment  ",
+        stream: "chat-stream",
+      });
+    }).toThrowError("baseURL must not include query parameters or hash fragments");
+  });
+
   it("throws from factory when baseURL includes username or password credentials", function () {
     expect(function () {
       createTriggerChatTransport({
@@ -2969,6 +3002,17 @@ describe("TriggerChatTransport", function () {
     }).toThrowError("baseURL must not include username or password credentials");
   });
 
+  it("throws from factory when trimmed baseURL includes username or password credentials", function () {
+    expect(function () {
+      createTriggerChatTransport({
+        task: "chat-task",
+        accessToken: "pk_trigger",
+        baseURL: "  https://user:pass@example.com/base/  ",
+        stream: "chat-stream",
+      });
+    }).toThrowError("baseURL must not include username or password credentials");
+  });
+
   it("accepts https baseURL values from factory without throwing", function () {
     expect(function () {
       createTriggerChatTransport({