[comp] Production Deploy

.github/workflows/trigger-api-tasks-deploy-main.yml

@@ -18,6 +18,8 @@ jobs:
           node-version: "22.x" # Updated to match Node.js w/ Vercel
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.4"
       - name: Clear cache
         run: rm -rf node_modules .bun
       - name: Install dependencies

.github/workflows/trigger-api-tasks-deploy-release.yml

@@ -21,6 +21,8 @@ jobs:
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.4"
 
       - name: Install dependencies
         run: bun install --frozen-lockfile || bun install --frozen-lockfile --ignore-scripts

.github/workflows/trigger-tasks-deploy-main.yml

@@ -14,6 +14,8 @@ jobs:
           node-version: "22.x" # Updated to match Node.js w/ Vercel
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.4"
       - name: Clear cache
         run: rm -rf node_modules .bun
       - name: Install dependencies

.github/workflows/trigger-tasks-deploy-release.yml

@@ -18,6 +18,8 @@ jobs:
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.4"
 
       - name: Install dependencies
         run: bun install --frozen-lockfile || bun install --frozen-lockfile --ignore-scripts

apps/api/package.json

@@ -12,7 +12,7 @@
         "@aws-sdk/client-securityhub": "^3.948.0",
         "@aws-sdk/client-sts": "^3.948.0",
         "@aws-sdk/s3-request-presigner": "^3.859.0",
-        "@browserbasehq/sdk": "^2.6.0",
+        "@browserbasehq/sdk": "2.6.0",
         "@browserbasehq/stagehand": "^3.0.5",
         "@mendable/firecrawl-js": "^4.9.3",
         "@nestjs/common": "^11.0.1",

apps/api/src/trigger/browser-automation/run-browser-automation.ts

@@ -1,5 +1,5 @@
 import { db } from '@db';
-import { logger, task } from '@trigger.dev/sdk';
+import { logger, tags, task } from '@trigger.dev/sdk';
 import { BrowserbaseService } from '../../browserbase/browserbase.service';
 import { triggerEmail } from '../../email/trigger-email';
 import { TaskStatusChangedEmail } from '../../email/templates/task-status-changed';
@@ -187,6 +187,8 @@ export const runBrowserAutomation = task({
   }) => {
     const { automationId, automationName, organizationId, taskId } = payload;
 
+    await tags.add([`org:${organizationId}`]);
+
     logger.info(`Running browser automation "${automationName}"`, {
       automationId,
       organizationId,

apps/api/src/trigger/cloud-security/run-cloud-security-scan.ts

@@ -1,5 +1,5 @@
 import { db } from '@db';
-import { logger, task } from '@trigger.dev/sdk';
+import { logger, tags, task } from '@trigger.dev/sdk';
 
 /**
  * Trigger task that runs a cloud security scan for a single connection.
@@ -20,6 +20,8 @@ export const runCloudSecurityScan = task({
     const { connectionId, organizationId, providerSlug, connectionName } =
       payload;
 
+    await tags.add([`org:${organizationId}`]);
+
     logger.info(
       `Starting cloud security scan for connection: ${connectionName}`,
       {

apps/api/src/trigger/integration-platform/run-connection-checks.ts

@@ -1,6 +1,6 @@
 import { getManifest, runAllChecks } from '@trycompai/integration-platform';
 import { db } from '@db';
-import { logger, task } from '@trigger.dev/sdk';
+import { logger, tags, task } from '@trigger.dev/sdk';
 
 /**
  * Trigger task that runs all checks for a connection.
@@ -22,6 +22,8 @@ export const runConnectionChecks = task({
   }) => {
     const { connectionId, organizationId, providerSlug } = payload;
 
+    await tags.add([`org:${organizationId}`]);
+
     logger.info(`Auto-running checks for connection ${connectionId}`, {
       provider: providerSlug,
       organizationId,

apps/api/src/trigger/integration-platform/run-task-integration-checks.ts

@@ -1,6 +1,6 @@
 import { getManifest, runAllChecks } from '@trycompai/integration-platform';
 import { db } from '@db';
-import { logger, task } from '@trigger.dev/sdk';
+import { logger, tags, task } from '@trigger.dev/sdk';
 import { triggerEmail } from '../../email/trigger-email';
 import { TaskStatusChangedEmail } from '../../email/templates/task-status-changed';
 import { isUserUnsubscribed } from '@trycompai/email';
@@ -185,6 +185,8 @@ export const runTaskIntegrationChecks = task({
       checkIds,
     } = payload;
 
+    await tags.add([`org:${organizationId}`]);
+
     logger.info(`Running integration checks for task "${taskTitle}"`, {
       taskId,
       connectionId,

apps/api/src/trigger/policies/update-policy.ts

@@ -1,4 +1,4 @@
-import { logger, metadata, queue, schemaTask } from '@trigger.dev/sdk';
+import { logger, metadata, queue, schemaTask, tags } from '@trigger.dev/sdk';
 import { z } from 'zod';
 import { processPolicyUpdate } from './update-policy-helpers';
 
@@ -29,6 +29,8 @@ export const updatePolicy = schemaTask({
     memberId: z.string().optional(),
   }),
   run: async (params) => {
+    await tags.add([`org:${params.organizationId}`]);
+
     try {
       logger.info(`Starting policy update for policy ${params.policyId}`);
 

apps/api/src/trigger/questionnaire/answer-question.ts

@@ -1,5 +1,5 @@
 import { syncOrganizationEmbeddings } from '@/vector-store/lib';
-import { logger, metadata, task } from '@trigger.dev/sdk';
+import { logger, metadata, tags, task } from '@trigger.dev/sdk';
 import { generateAnswerWithRAG } from './answer-question-helpers';
 
 export interface AnswerQuestionPayload {
@@ -177,6 +177,8 @@ export const answerQuestionTask = task({
     questionIndex: number;
     totalQuestions: number;
   }) => {
+    await tags.add([`org:${payload.organizationId}`]);
+
     return await answerQuestion(payload);
   },
 });

apps/api/src/trigger/questionnaire/parse-questionnaire.ts

@@ -1,7 +1,7 @@
 import { extractS3KeyFromUrl } from '@/app/s3';
 import { GetObjectCommand, S3Client } from '@aws-sdk/client-s3';
 import { db } from '@db';
-import { logger, task } from '@trigger.dev/sdk';
+import { logger, tags, task } from '@trigger.dev/sdk';
 
 // Import shared utilities
 import {
@@ -253,6 +253,8 @@ export const parseQuestionnaireTask = task({
   }) => {
     const taskStartTime = Date.now();
 
+    await tags.add([`org:${payload.organizationId}`]);
+
     logger.info('Starting parse questionnaire task', {
       inputType: payload.inputType,
       organizationId: payload.organizationId,

apps/api/src/trigger/tasks/onboarding/migrate-policies-for-org.ts

@@ -1,5 +1,5 @@
 import { db, PolicyStatus, type Prisma } from '@db';
-import { logger, schemaTask } from '@trigger.dev/sdk';
+import { logger, schemaTask, tags } from '@trigger.dev/sdk';
 import { z } from 'zod';
 
 const POLICY_BATCH_SIZE = 50;
@@ -10,6 +10,8 @@ export const migratePoliciesForOrg = schemaTask({
     organizationId: z.string(),
   }),
   run: async ({ organizationId }) => {
+    await tags.add([`org:${organizationId}`]);
+
     // Find policies without any versions
     const policiesWithoutVersions = await db.policy.findMany({
       where: {

apps/api/src/trigger/vector-store/delete-all-manual-answers-orchestrator.ts

@@ -1,4 +1,4 @@
-import { logger, metadata, task } from '@trigger.dev/sdk';
+import { logger, metadata, tags, task } from '@trigger.dev/sdk';
 import { db } from '@db';
 import { deleteManualAnswerTask } from './delete-manual-answer';
 
@@ -17,6 +17,8 @@ export const deleteAllManualAnswersOrchestratorTask = task({
     organizationId: string;
     manualAnswerIds?: string[]; // Optional: IDs passed directly to avoid race condition
   }) => {
+    await tags.add([`org:${payload.organizationId}`]);
+
     logger.info('Starting delete all manual answers from vector DB', {
       organizationId: payload.organizationId,
       manualAnswerIdsProvided: !!payload.manualAnswerIds,

apps/api/src/trigger/vector-store/delete-knowledge-base-document.ts

@@ -1,4 +1,4 @@
-import { logger, task } from '@trigger.dev/sdk';
+import { logger, tags, task } from '@trigger.dev/sdk';
 import { findEmbeddingsForSource } from '@/vector-store/lib/core/find-existing-embeddings';
 import { vectorIndex } from '@/vector-store/lib/core/client';
 import { db } from '@db';
@@ -12,6 +12,8 @@ export const deleteKnowledgeBaseDocumentTask = task({
     maxAttempts: 3,
   },
   run: async (payload: { documentId: string; organizationId: string }) => {
+    await tags.add([`org:${payload.organizationId}`]);
+
     logger.info('Deleting Knowledge Base document from vector DB', {
       documentId: payload.documentId,
       organizationId: payload.organizationId,

apps/api/src/trigger/vector-store/delete-manual-answer.ts

@@ -1,4 +1,4 @@
-import { logger, task } from '@trigger.dev/sdk';
+import { logger, tags, task } from '@trigger.dev/sdk';
 import { deleteManualAnswerFromVector } from '@/vector-store/lib/sync/sync-manual-answer';
 
 /**
@@ -11,6 +11,8 @@ export const deleteManualAnswerTask = task({
     maxAttempts: 3,
   },
   run: async (payload: { manualAnswerId: string; organizationId: string }) => {
+    await tags.add([`org:${payload.organizationId}`]);
+
     logger.info('Deleting manual answer from vector DB', {
       manualAnswerId: payload.manualAnswerId,
       organizationId: payload.organizationId,

apps/api/src/trigger/vector-store/process-knowledge-base-document.ts

@@ -1,4 +1,4 @@
-import { logger, task } from '@trigger.dev/sdk';
+import { logger, tags, task } from '@trigger.dev/sdk';
 import { GetObjectCommand, S3Client } from '@aws-sdk/client-s3';
 import { db } from '@db';
 import { batchUpsertEmbeddings } from '@/vector-store/lib/core/upsert-embedding';
@@ -86,6 +86,8 @@ export const processKnowledgeBaseDocumentTask = task({
   },
   maxDuration: 1000 * 60 * 30, // 30 minutes for large files
   run: async (payload: { documentId: string; organizationId: string }) => {
+    await tags.add([`org:${payload.organizationId}`]);
+
     logger.info('Processing Knowledge Base document', {
       documentId: payload.documentId,
       organizationId: payload.organizationId,

apps/api/src/trigger/vector-store/process-knowledge-base-documents-orchestrator.ts

@@ -1,4 +1,4 @@
-import { logger, metadata, task } from '@trigger.dev/sdk';
+import { logger, metadata, tags, task } from '@trigger.dev/sdk';
 import { processKnowledgeBaseDocumentTask } from './process-knowledge-base-document';
 
 const BATCH_SIZE = 10; // Process 10 documents at a time
@@ -14,6 +14,8 @@ export const processKnowledgeBaseDocumentsOrchestratorTask = task({
   },
   maxDuration: 60 * 60, // 1 hour (in seconds) for large document batches
   run: async (payload: { documentIds: string[]; organizationId: string }) => {
+    await tags.add([`org:${payload.organizationId}`]);
+
     logger.info('Starting Knowledge Base documents processing orchestrator', {
       organizationId: payload.organizationId,
       documentCount: payload.documentIds.length,

apps/api/src/trigger/vendor/vendor-risk-assessment-task.ts

@@ -10,7 +10,7 @@ import {
 import { openai } from '@ai-sdk/openai';
 import type { Prisma } from '@db';
 import type { Task } from '@trigger.dev/sdk';
-import { logger, metadata, queue, schemaTask } from '@trigger.dev/sdk';
+import { logger, metadata, queue, schemaTask, tags } from '@trigger.dev/sdk';
 import { generateObject } from 'ai';
 import { z } from 'zod';
 
@@ -478,6 +478,8 @@ export const vendorRiskAssessmentTask: Task<
   },
   maxDuration: 1000 * 60 * 10,
   run: async (payload) => {
+    await tags.add([`org:${payload.organizationId}`]);
+
     const vendor = await db.vendor.findFirst({
       where: {
         id: payload.vendorId,

apps/app/package.json

@@ -15,7 +15,7 @@
         "@aws-sdk/client-sts": "^3.808.0",
         "@aws-sdk/s3-request-presigner": "^3.859.0",
         "@azure/core-rest-pipeline": "^1.21.0",
-        "@browserbasehq/sdk": "^2.5.0",
+        "@browserbasehq/sdk": "2.6.0",
         "@browserbasehq/stagehand": "^3.0.5",
         "@calcom/atoms": "^1.0.102-framer",
         "@calcom/embed-react": "^1.5.3",
@@ -60,9 +60,9 @@
         "@tanstack/react-form": "^1.23.8",
         "@tanstack/react-query": "^5.90.7",
         "@tanstack/react-table": "^8.21.3",
-        "@tiptap/extension-mention": "3.16.0",
-        "@tiptap/extension-table": "3.16.0",
-        "@tiptap/react": "3.16.0",
+        "@tiptap/extension-mention": "3.22.1",
+        "@tiptap/extension-table": "3.22.1",
+        "@tiptap/react": "3.22.1",
         "@trigger.dev/react-hooks": "4.4.3",
         "@trigger.dev/sdk": "4.4.3",
         "@trycompai/auth": "workspace:*",
@@ -96,7 +96,7 @@
         "framer-motion": "^12.18.1",
         "geist": "^1.3.1",
         "jspdf": "^4.2.0",
-        "lucide-react": "^0.577.0",
+        "lucide-react": "^1.7.0",
         "mammoth": "^1.11.0",
         "motion": "^12.35.0",
         "nanoid": "^5.1.6",

apps/app/src/app/(app)/[orgId]/documents/components/CompanySubmissionWizard.tsx

@@ -251,6 +251,14 @@ export function CompanySubmissionWizard({
 
   const validateRequiredMatrixCells = () => {
     for (const field of matrixFields) {
+      // Skip matrix validation when a companion file has been uploaded
+      // (e.g. RBAC matrix allows uploading a spreadsheet instead of filling rows)
+      const companionFileKey = `${field.key.replace('Rows', '')}File`;
+      const companionFile = getValues(companionFileKey as never);
+      if (companionFile && typeof companionFile === 'object' && 'fileKey' in companionFile) {
+        continue;
+      }
+
       const rows = normalizeMatrixRows(getValues(field.key as never));
       const rowValues = rows.length > 0 ? rows : [createEmptyMatrixRow(field.columns)];
 
@@ -672,6 +680,15 @@ export function CompanySubmissionWizard({
                                           if (trimmed === '.svg') return ['image/svg+xml', []];
                                           if (trimmed === '.vsdx')
                                             return ['application/vnd.visio', []];
+                                          if (trimmed === '.csv') return ['text/csv', []];
+                                          if (trimmed === '.xlsx') {
+                                            return [
+                                              'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+                                              [],
+                                            ];
+                                          }
+                                          if (trimmed === '.xls')
+                                            return ['application/vnd.ms-excel', []];
                                           return null;
                                         })
                                         .filter(
@@ -830,6 +847,15 @@ export function CompanySubmissionWizard({
                                     if (trimmed === '.txt') return ['text/plain', []];
                                     if (trimmed === '.svg') return ['image/svg+xml', []];
                                     if (trimmed === '.vsdx') return ['application/vnd.visio', []];
+                                    if (trimmed === '.csv') return ['text/csv', []];
+                                    if (trimmed === '.xlsx') {
+                                      return [
+                                        'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+                                        [],
+                                      ];
+                                    }
+                                    if (trimmed === '.xls')
+                                      return ['application/vnd.ms-excel', []];
                                     return null;
                                   })
                                   .filter((entry): entry is [string, string[]] => entry !== null),

apps/app/src/components/ai-elements/reasoning.tsx

@@ -218,7 +218,7 @@ export const ReasoningContent = memo(
       )}
       {...props}
     >
-      <Streamdown plugins={streamdownPlugins} {...props}>
+      <Streamdown plugins={streamdownPlugins}>
         {children}
       </Streamdown>
     </CollapsibleContent>

apps/app/src/trigger/tasks/auditor/generate-auditor-content.ts

@@ -1,7 +1,7 @@
 import { getOrganizationContext } from '@/trigger/tasks/onboarding/onboard-organization-helpers';
 import { openai } from '@ai-sdk/openai';
 import { db } from '@db/server';
-import { logger, metadata, schemaTask } from '@trigger.dev/sdk';
+import { logger, metadata, schemaTask, tags } from '@trigger.dev/sdk';
 import { generateText } from 'ai';
 import { z } from 'zod';
 
@@ -299,6 +299,7 @@ export const generateAuditorContentTask = schemaTask({
   },
   run: async (payload) => {
     const { organizationId } = payload;
+    await tags.add([`org:${organizationId}`]);
 
     logger.info(`Starting auditor content generation for org ${organizationId}`);
 

apps/app/src/trigger/tasks/device/create-fleet-label-for-org.ts

@@ -1,7 +1,7 @@
 import { getFleetInstance } from '@/lib/fleet';
 import { db } from '@db/server';
 
-import { logger, queue, task } from '@trigger.dev/sdk';
+import { logger, queue, tags, task } from '@trigger.dev/sdk';
 import { AxiosError } from 'axios';
 // Optional: define a queue if we want to control concurrency in v4
 const fleetQueue = queue({ name: 'create-fleet-label-for-org', concurrencyLimit: 10 });
@@ -13,6 +13,8 @@ export const createFleetLabelForOrg = task({
     maxAttempts: 3,
   },
   run: async ({ organizationId }: { organizationId: string }) => {
+    await tags.add([`org:${organizationId}`]);
+
     const organization = await db.organization.findUnique({
       where: {
         id: organizationId,