merge: propagate review fixes from feat/dashboard-agent-flows

Author: kathiekiwi

.changeset/split-image-dependency-layers.md

@@ -0,0 +1,5 @@
+---
+"trigger.dev": patch
+---
+
+Deployed images now ship dependencies and bundled task code as separate layers. Repeat deploys with unchanged dependencies typically push and pull far less data, making deploys and worker image pulls faster.

.claude/skills/errors-api-e2e/SKILL.md

@@ -154,7 +154,7 @@ PASS: one run, `run_<RID>` (status maps to `FAILED`). Proves `filter[error]` ->
 ### 6. Attribution — `mint-token` -> JWT exchange records the acting user
 
 ```bash
-TOKEN=$(cli mint-token --profile $PROFILE --client errors-api-e2e 2>/dev/null)            # UAT
+TOKEN=$(cli mint-token --profile $PROFILE --client errors-api-e2e --cap read:errors,write:errors 2>/dev/null)            # UAT
 ENVJWT=$(curl -sS -X POST "$B/api/v1/projects/$REF/dev/jwt" -H "Authorization: Bearer $TOKEN" \
   -H 'Content-Type: application/json' -d '{"claims":{"scopes":["read:errors","write:errors"]}}' \
   | python3 -c "import sys,json;print(json.load(sys.stdin)['token'])")

.server-changes/agent-body-cap-task-id.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Triggering a task whose id contains "dashboard-agent" is no longer subject to the smaller chat request size limit, so larger payloads go through as expected.

.server-changes/agent-env-jwt-scope-ceiling.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Delegated read-only tokens can no longer be exchanged for a token with broader access.

.server-changes/agent-env-jwt-ttl-clamp.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+A delegated token can no longer be exchanged for a longer-lived token than itself.

.server-changes/agent-response-remote-images.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Images in AI and agent responses are no longer loaded from arbitrary remote websites, closing a way a response could quietly signal an outside server.

.server-changes/db-pool-metrics-per-client.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: improvement
+---
+
+Database connection metrics are now reported for every configured database connection instead of only the primary one, and stay accurate regardless of connection type.

.server-changes/environment-variable-value-reference-id-index.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: improvement
+---
+
+Deleting or editing a secret environment variable is now fast and no longer slows down as a project accumulates variables.

.server-changes/prisma-driver-adapter-per-client.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: improvement
+---
+
+Groundwork for an alternative database connection driver, gated behind configuration and disabled by default, so there is no change to default behavior.

.server-changes/project-alert-channel-id-index.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: improvement
+---
+
+Deleting an alert channel is now fast and no longer slows down as a project builds up alert history.