feat: source worker.id telemetry from the deployment friendlyId (#78)

* feat(supervisor,cli): source worker.id telemetry from the deployment friendlyId

The runner stamps the OTel worker.id from TRIGGER_DEPLOYMENT_ID, which the
supervisor may set to an opaque token. Have the supervisor also pass the plain
friendlyId in TRIGGER_DEPLOYMENT_FRIENDLY_ID, and have the runner prefer it for
the telemetry worker.id (falling back to TRIGGER_DEPLOYMENT_ID for older
supervisors). The auth header keeps using TRIGGER_DEPLOYMENT_ID unchanged. New
deploys then report a stable deployment id in telemetry with no decode -
including to customers' own external exporters.

Refs TRI-11974

* fix(cli): redact TRIGGER_DEPLOYMENT_ID from managed run debug logs

Author: nicktrn

.changeset/worker-id-deployment-friendly-id.md

@@ -0,0 +1,5 @@
+---
+"trigger.dev": patch
+---
+
+Deployed task telemetry now reports the deployment identifier (e.g. `deployment_abc123`) in the `worker.id` attribute, instead of an opaque internal value. Upgrade to get the readable identifier in your own OpenTelemetry exporters.

apps/supervisor/src/workloadManager/compute.ts

@@ -152,6 +152,8 @@ export class ComputeWorkloadManager implements WorkloadManager {
       TRIGGER_POD_SCHEDULED_AT_MS: String(Date.now()),
       TRIGGER_ENV_ID: opts.envId,
       TRIGGER_DEPLOYMENT_ID: opts.deploymentToken ?? opts.deploymentFriendlyId,
+      // Plain friendlyId for telemetry (worker.id), so it isn't the opaque token in DEPLOYMENT_ID.
+      TRIGGER_DEPLOYMENT_FRIENDLY_ID: opts.deploymentFriendlyId,
       TRIGGER_DEPLOYMENT_VERSION: opts.deploymentVersion,
       TRIGGER_RUN_ID: opts.runFriendlyId,
       TRIGGER_SNAPSHOT_ID: opts.snapshotFriendlyId,

apps/supervisor/src/workloadManager/docker.ts

@@ -73,6 +73,8 @@ export class DockerWorkloadManager implements WorkloadManager {
       `TRIGGER_POD_SCHEDULED_AT_MS=${Date.now()}`,
       `TRIGGER_ENV_ID=${opts.envId}`,
       `TRIGGER_DEPLOYMENT_ID=${opts.deploymentToken ?? opts.deploymentFriendlyId}`,
+      // Plain friendlyId for telemetry (worker.id), so it isn't the opaque token in DEPLOYMENT_ID.
+      `TRIGGER_DEPLOYMENT_FRIENDLY_ID=${opts.deploymentFriendlyId}`,
       `TRIGGER_DEPLOYMENT_VERSION=${opts.deploymentVersion}`,
       `TRIGGER_RUN_ID=${opts.runFriendlyId}`,
       `TRIGGER_SNAPSHOT_ID=${opts.snapshotFriendlyId}`,

apps/supervisor/src/workloadManager/kubernetes.ts

@@ -160,6 +160,11 @@ export class KubernetesWorkloadManager implements WorkloadManager {
                     name: "TRIGGER_DEPLOYMENT_ID",
                     value: opts.deploymentToken ?? opts.deploymentFriendlyId,
                   },
+                  {
+                    // Plain friendlyId for telemetry (worker.id), not the opaque token in DEPLOYMENT_ID.
+                    name: "TRIGGER_DEPLOYMENT_FRIENDLY_ID",
+                    value: opts.deploymentFriendlyId,
+                  },
                   {
                     name: "TRIGGER_DEPLOYMENT_VERSION",
                     value: opts.deploymentVersion,

packages/cli-v3/src/entryPoints/managed/controller.ts

@@ -76,7 +76,7 @@ export class ManagedRunController {
     });
 
     const properties = {
-      ...env.raw,
+      ...env.rawForLogging,
       TRIGGER_POD_SCHEDULED_AT_MS: env.TRIGGER_POD_SCHEDULED_AT_MS.toISOString(),
       TRIGGER_DEQUEUED_AT_MS: env.TRIGGER_DEQUEUED_AT_MS.toISOString(),
     };

packages/cli-v3/src/entryPoints/managed/env.ts

@@ -27,6 +27,9 @@ const Env = z.object({
 
   // Set at runtime
   TRIGGER_DEPLOYMENT_ID: z.string(),
+  // Plain deployment friendlyId for telemetry. Optional: older supervisors don't set it, in which
+  // case we fall back to TRIGGER_DEPLOYMENT_ID.
+  TRIGGER_DEPLOYMENT_FRIENDLY_ID: z.string().optional(),
   TRIGGER_DEPLOYMENT_VERSION: z.string(),
   TRIGGER_WORKLOAD_CONTROLLER_ID: z.string().default(`controller_${randomUUID()}`),
   TRIGGER_ENV_ID: z.string(),
@@ -74,6 +77,11 @@ export class RunnerEnv {
     return this.env;
   }
 
+  // TRIGGER_DEPLOYMENT_ID carries the deployment token; redact it before logging.
+  get rawForLogging() {
+    return { ...this.env, TRIGGER_DEPLOYMENT_ID: "[redacted]" };
+  }
+
   // Base environment variables
   get NODE_ENV() {
     return this.env.NODE_ENV;
@@ -93,6 +101,9 @@ export class RunnerEnv {
   get TRIGGER_DEPLOYMENT_ID() {
     return this.env.TRIGGER_DEPLOYMENT_ID;
   }
+  get TRIGGER_DEPLOYMENT_FRIENDLY_ID() {
+    return this.env.TRIGGER_DEPLOYMENT_FRIENDLY_ID;
+  }
   get TRIGGER_DEPLOYMENT_VERSION() {
     return this.env.TRIGGER_DEPLOYMENT_VERSION;
   }

packages/cli-v3/src/entryPoints/managed/execution.ts

@@ -951,7 +951,7 @@ export class RunExecution {
 
     this.sendDebugLog(`[override] processing: ${reason}`, {
       overrides,
-      currentEnv: this.env.raw,
+      currentEnv: this.env.rawForLogging,
     });
 
     // Override the env with the new values

packages/cli-v3/src/entryPoints/managed/taskRunProcessProvider.ts

@@ -252,11 +252,14 @@ export class TaskRunProcessProvider {
       workerManifest: this.workerManifest,
       env: processEnv,
       serverWorker: {
-        id: this.env.TRIGGER_DEPLOYMENT_ID,
+        // Telemetry-only (becomes OTel worker.id). Prefer the plain friendlyId; fall back to
+        // DEPLOYMENT_ID (which may be an opaque token) only when an older supervisor didn't set it.
+        id: this.env.TRIGGER_DEPLOYMENT_FRIENDLY_ID ?? this.env.TRIGGER_DEPLOYMENT_ID,
         contentHash: this.env.TRIGGER_CONTENT_HASH,
         version: this.env.TRIGGER_DEPLOYMENT_VERSION,
         engine: "V2",
       },
+
       machineResources: {
         cpu: Number(this.env.TRIGGER_MACHINE_CPU),
         memory: Number(this.env.TRIGGER_MACHINE_MEMORY),