fix(core,sdk): use _sk_ additional API key infix

Author: carderne

packages/core/src/v3/apiKeys.test.ts

@@ -3,15 +3,15 @@ import { isAdditionalApiKey } from "./apiKeys.js";
 
 describe("isAdditionalApiKey", () => {
   it.each(["dev", "stg", "prod", "preview"])("recognizes %s additional keys", (environment) => {
-    expect(isAdditionalApiKey(`tr_${environment}_ak_0123456789abcdefghijklmn`)).toBe(true);
+    expect(isAdditionalApiKey(`tr_${environment}_sk_0123456789abcdefghijklmn`)).toBe(true);
   });
 
   it.each([
     "tr_prod_0123456789abcdefghijklmn",
-    "tr_prod_ak_too-short",
-    "tr_prod_ak_0123456789abcdefghijklmn_extra",
-    "tr_test_ak_0123456789abcdefghijklmn",
-    "tr_prod_ak_0123456789abcdefghijkl_",
+    "tr_prod_sk_too-short",
+    "tr_prod_sk_0123456789abcdefghijklmn_extra",
+    "tr_test_sk_0123456789abcdefghijklmn",
+    "tr_prod_sk_0123456789abcdefghijkl_",
   ])("rejects %s", (key) => {
     expect(isAdditionalApiKey(key)).toBe(false);
   });

packages/core/src/v3/apiKeys.ts

@@ -1,4 +1,4 @@
-const ADDITIONAL_API_KEY_PATTERN = /^tr_(dev|stg|prod|preview)_ak_[0-9a-zA-Z]{24}$/;
+const ADDITIONAL_API_KEY_PATTERN = /^tr_(dev|stg|prod|preview)_sk_[0-9a-zA-Z]{24}$/;
 
 /**
  * Returns whether a key has the additional environment API key format.

packages/trigger-sdk/src/v3/auth.test.ts

@@ -38,7 +38,7 @@ describe("public token API key routing", () => {
   });
 
   it("uses server minting for additional keys", async () => {
-    const key = "tr_prod_ak_0123456789abcdefghijklmn";
+    const key = "tr_prod_sk_0123456789abcdefghijklmn";
     const token = await apiClientManager.runWithConfig({ baseURL: baseUrl, accessToken: key }, () =>
       auth.createPublicToken({
         scopes: { read: { runs: ["run_123"] } },
@@ -63,7 +63,7 @@ describe("public token API key routing", () => {
   });
 
   it("server-mints trigger tokens with one-time-use semantics", async () => {
-    const key = "tr_dev_ak_0123456789abcdefghijklmn";
+    const key = "tr_dev_sk_0123456789abcdefghijklmn";
     await apiClientManager.runWithConfig({ baseURL: baseUrl, accessToken: key }, () =>
       auth.createTriggerPublicToken(["task-one", "task-two"], { multipleUse: true })
     );
@@ -75,7 +75,7 @@ describe("public token API key routing", () => {
   });
 
   it("server-mints batch trigger tokens for additional keys", async () => {
-    const key = "tr_stg_ak_0123456789abcdefghijklmn";
+    const key = "tr_stg_sk_0123456789abcdefghijklmn";
     await apiClientManager.runWithConfig({ baseURL: baseUrl, accessToken: key }, () =>
       auth.createBatchTriggerPublicToken("batch-task", {
         expirationTime: "2h",
@@ -136,7 +136,7 @@ describe("public token API key routing", () => {
     ["an empty scopes object", {}],
     ["a scope group with nothing selected", { read: {} }],
   ])("rejects %s clearly for additional keys", async (_label, scopes) => {
-    const key = "tr_prod_ak_0123456789abcdefghijklmn";
+    const key = "tr_prod_sk_0123456789abcdefghijklmn";
     const promise = apiClientManager.runWithConfig({ baseURL: baseUrl, accessToken: key }, () =>
       auth.createPublicToken(scopes === undefined ? undefined : { scopes })
     );
@@ -152,7 +152,7 @@ describe("public token API key routing", () => {
     const promise = apiClientManager.runWithConfig(
       {
         baseURL: baseUrl,
-        accessToken: "tr_prod_ak_0123456789abcdefghijklmn",
+        accessToken: "tr_prod_sk_0123456789abcdefghijklmn",
       },
       () => auth.createPublicToken({ scopes: { read: { runs: true } } })
     );

packages/trigger-sdk/src/v3/createStartSessionAction.test.ts

@@ -137,7 +137,7 @@ describe("chat.createStartSessionAction — runtime", () => {
     const start = chat.createStartSessionAction("fake-chat", {
       apiClient: {
         baseURL: "https://example.invalid",
-        accessToken: "tr_prod_ak_0123456789abcdefghijklmn",
+        accessToken: "tr_prod_sk_0123456789abcdefghijklmn",
       },
       tokenTTL: "30m",
       fetch: async (url, init, context) => {