fix: security release 2026-07-06 (#4199)

Author: carderne

.changeset/mcp-thread-dev-only-flag.md

@@ -0,0 +1,5 @@
+---
+"trigger.dev": patch
+---
+
+fix(cli): honor the MCP server's `--dev-only` flag

.server-changes/account-access-control-hardening.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Harden account and access-control handling across auth, RBAC, org membership, and impersonation

.server-changes/harden-alert-webhook-and-notification-urls.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Harden URL handling for alert webhooks and platform notifications

.server-changes/query-and-api-endpoint-hardening.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Harden the query and prompt-override APIs and rate-limit the query ai-title endpoint

.server-changes/redact-secrets-from-logs.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Improve redaction of secrets from debug logs

.server-changes/reject-cross-project-replay-environment.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Tighten environment scoping when replaying a run.

.server-changes/scope-run-batch-trigger-to-tenant.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Scope run, batch, and trigger lookups to the caller's tenant

apps/webapp/app/components/navigation/HelpAndFeedbackPopover.tsx

@@ -8,6 +8,7 @@ import { QuestionMarkIcon } from "~/assets/icons/QuestionMarkIcon";
 import { RadarPulseIcon } from "~/assets/icons/RadarPulseIcon";
 import { StarIcon } from "~/assets/icons/StarIcon";
 import { useShortcutKeys } from "~/hooks/useShortcutKeys";
+import { sanitizeHttpUrl } from "~/utils/sanitizeUrl";
 import { useCurrentPlan } from "~/routes/_app.orgs.$organizationSlug/route";
 import { useRecentChangelogs } from "~/routes/resources.platform-changelogs";
 import { cn } from "~/utils/cn";
@@ -158,7 +159,7 @@ export function HelpAndFeedback({
                   trailingIconClassName="text-text-dimmed"
                   inactiveIconColor="text-text-dimmed"
                   activeIconColor="text-text-dimmed"
-                  to={entry.actionUrl ?? "https://trigger.dev/changelog"}
+                  to={sanitizeHttpUrl(entry.actionUrl) ?? "https://trigger.dev/changelog"}
                   target="_blank"
                 />
               ))}

apps/webapp/app/models/member.server.ts

@@ -74,43 +74,6 @@ export async function getTeamMembersAndInvites({
   return { members: org.members, invites: org.invites };
 }
 
-export async function removeTeamMember({
-  userId,
-  slug,
-  memberId,
-}: {
-  userId: string;
-  slug: string;
-  memberId: string;
-}) {
-  const org = await prisma.organization.findFirst({
-    where: { slug, members: { some: { userId } } },
-  });
-
-  if (!org) {
-    throw new Error("User does not have access to this organization");
-  }
-
-  // Scope the target to this org. A member id is a globally unique key, so
-  // deleting by id alone would remove members of other orgs; bind it to the
-  // resolved org and reject a foreign id.
-  const member = await prisma.orgMember.findFirst({
-    where: { id: memberId, organizationId: org.id },
-    include: {
-      organization: true,
-      user: true,
-    },
-  });
-
-  if (!member) {
-    throw new Error("Member not found in this organization");
-  }
-
-  await prisma.orgMember.delete({ where: { id: member.id } });
-
-  return member;
-}
-
 export async function inviteMembers({
   slug,
   emails,

apps/webapp/app/models/orgIntegration.server.ts

@@ -9,6 +9,8 @@ import { z } from "zod";
 import { $transaction, prisma } from "~/db.server";
 import { env } from "~/env.server";
 import { logger } from "~/services/logger.server";
+import { slackSecretLogFields } from "./safeIntegrationLog";
+import { slackAccessResultLogFields } from "./slackOAuthResultLog";
 import { getSecretStore } from "~/services/secrets/secretStore.server";
 import { commitSession, getUserSession } from "~/services/sessionStorage.server";
 import { generateFriendlyId } from "~/v3/friendlyIdentifiers";
@@ -205,9 +207,8 @@ export class OrgIntegrationRepository {
         });
 
         if (result.ok) {
-          logger.debug("Received slack access token", {
-            result,
-          });
+          // `result` carries Slack tokens; log only non-secret diagnostics.
+          logger.debug("Received slack access token", slackAccessResultLogFields(result));
 
           if (!result.access_token) {
             throw new Error("Failed to get access token");
@@ -230,9 +231,12 @@ export class OrgIntegrationRepository {
               raw: result,
             };
 
-            logger.debug("Setting secret", {
-              secretValue,
-            });
+            // `secretValue` carries the tokens encrypted below; log only
+            // non-secret fields.
+            logger.debug(
+              "Setting secret",
+              slackSecretLogFields(integrationFriendlyId, secretValue)
+            );
 
             await secretStore.setSecret(integrationFriendlyId, secretValue);