fix(invites): remove uuid validation from inv api

[aadamgough]

Summary

• remove uuid validation from inv api that was causing errors when switching permissions
• remove uuid validation from billed user id api for the same reason

Type of Change

• Bug fix

Testing

Tested manually

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Preview	Comments	Updated (UTC)
docs	Skipped			Nov 12, 2025 2:16am

[greptile-apps]

Greptile Overview

Greptile Summary

Removed UUID validation from the userId field in the workspace permissions API schema.

• Changed z.string().uuid() to z.string() in updatePermissionsSchema
• Allows non-UUID user IDs from OAuth providers (GitHub, Wealthbox, Supabase, Slack, etc.) to update workspace permissions
• Database schema uses text type for user IDs, not UUID type, supporting various ID formats

Confidence Score: 5/5

• This PR is safe to merge with no risk
• The change correctly aligns validation with the actual data model. User IDs in the system can come from various OAuth providers and are stored as text, not UUIDs. The overly restrictive UUID validation was causing legitimate requests to fail.
• No files require special attention

Important Files Changed

File Analysis

Filename	Score	Overview
apps/sim/app/api/workspaces/[id]/permissions/route.ts	5/5	Removed UUID validation from userId field in updatePermissionsSchema - correctly reflects that user IDs can be non-UUID strings from OAuth providers

Sequence Diagram

sequenceDiagram
participant Client
participant API as PATCH /api/workspaces/[id]/permissions
participant Zod as updatePermissionsSchema
participant DB as Database
Client->>API: PATCH with {updates: [{userId, permissions}]}
API->>API: Check session auth
API->>API: Verify admin access
API->>Zod: Parse request body
Note over Zod: userId: z.string()<br/>(Previously: z.string().uuid())
Zod->>API: Validated data
API->>DB: Check workspace exists
API->>API: Validate self-update & billing user
API->>DB: Transaction: delete old permissions
API->>DB: Transaction: insert new permissions
DB->>API: Success
API->>Client: Updated permissions list

Loading

[greptile-apps]

_{1 file reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}