refactor(trigger): run the per-attempt setup through one module

The init hook loads app modules by relative path, which the source-convention
ratchet caps. Warming Redis and refreshing workload-identity credentials now
sit behind prepareTriggerAttempt, so init still imports one module.

Author: waleedlatif1

apps/sim/lib/core/config/trigger-attempt.ts

@@ -0,0 +1,13 @@
+import { refreshAwsCredentialsForRun } from '@/lib/core/config/aws'
+import { warmRedisConnection } from '@/lib/core/config/redis'
+
+/**
+ * The per-attempt setup the Trigger.dev `init` hook awaits before `run()`. Warms the shared Redis
+ * connection, and refreshes workload-identity AWS credentials while the attempt is executing and a
+ * token can still be minted, so work a run leaves behind (the hosted-key metrics flush) has
+ * credentials after the attempt ends. Never throws, like each step: a throw in `init` fails the
+ * attempt.
+ */
+export async function prepareTriggerAttempt(): Promise<void> {
+  await Promise.all([warmRedisConnection(), refreshAwsCredentialsForRun()])
+}

apps/sim/trigger.config.ts

@@ -160,12 +160,8 @@ export default defineConfig({
    * because a throw here fails the run. The execution-signal subscriber is
    * deliberately not warmed here: only the tasks that execute a workflow ever
    * subscribe, and they are a minority of runs, so that connection is warmed
-   * on intent at the execution entry point instead.
-   *
-   * Also refreshes workload-identity AWS credentials, alongside the Redis
-   * warm-up, while the attempt is executing and a token can still be minted,
-   * so work a run leaves behind (the hosted-key metrics flush) has credentials
-   * after the attempt ends. Never throws, like the warm-up.
+   * on intent at the execution entry point instead. The same step refreshes
+   * workload-identity AWS credentials (`prepareTriggerAttempt`).
    *
    * @see https://trigger.dev/docs/config/config-file#lifecycle-functions
    */
@@ -177,9 +173,8 @@ export default defineConfig({
     markInsideTriggerRun()
     const { reportAccountTokenSealing } = await import('@sim/db/sealed-text')
     reportAccountTokenSealing()
-    const { warmRedisConnection } = await import('./lib/core/config/redis')
-    const { refreshAwsCredentialsForRun } = await import('./lib/core/config/aws')
-    await Promise.all([warmRedisConnection(), refreshAwsCredentialsForRun()])
+    const { prepareTriggerAttempt } = await import('./lib/core/config/trigger-attempt')
+    await prepareTriggerAttempt()
   },
   ...(grafanaTelemetry ? { telemetry: grafanaTelemetry } : {}),
   build: {