fix(invites): remove uuid validation from inv api

[aadamgough]

Summary

• remove uuid validation from inv api that was causing errors when switching permissions
• remove uuid validation from billed user id api for the same reason

Type of Change

• Bug fix

Testing

Tested manually

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Preview	Comments	Updated (UTC)
docs	Skipped			Nov 12, 2025 2:16am

[greptile-apps]

Greptile Overview

Greptile Summary

Removed UUID validation from the userId field in the workspace permissions API schema.

• Changed z.string().uuid() to z.string() in updatePermissionsSchema
• Allows non-UUID user IDs from OAuth providers (GitHub, Wealthbox, Supabase, Slack, etc.) to update workspace permissions
• Database schema uses text type for user IDs, not UUID type, supporting various ID formats

Confidence Score: 5/5

• This PR is safe to merge with no risk
• The change correctly aligns validation with the actual data model. User IDs in the system can come from various OAuth providers and are stored as text, not UUIDs. The overly restrictive UUID validation was causing legitimate requests to fail.
• No files require special attention

Important Files Changed

File Analysis

Filename	Score	Overview
apps/sim/app/api/workspaces/[id]/permissions/route.ts	5/5	Removed UUID validation from userId field in updatePermissionsSchema - correctly reflects that user IDs can be non-UUID strings from OAuth providers

Sequence Diagram

sequenceDiagram
    participant Client
    participant API as PATCH /api/workspaces/[id]/permissions
    participant Zod as updatePermissionsSchema
    participant DB as Database
    
    Client->>API: PATCH with {updates: [{userId, permissions}]}
    API->>API: Check session auth
    API->>API: Verify admin access
    API->>Zod: Parse request body
    Note over Zod: userId: z.string()<br/>(Previously: z.string().uuid())
    Zod->>API: Validated data
    API->>DB: Check workspace exists
    API->>API: Validate self-update & billing user
    API->>DB: Transaction: delete old permissions
    API->>DB: Transaction: insert new permissions
    DB->>API: Success
    API->>Client: Updated permissions list

Loading

[greptile-apps]

_{1 file reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}