Fixes

Author: Sg312

apps/sim/lib/api/contracts/workflows.ts

@@ -3,7 +3,14 @@ import { defineRouteContract } from '@/lib/api/contracts/types'
 import { getNextWorkflowColor } from '@/lib/workflows/colors'
 
 const subBlockValuesSchema = z.record(z.string(), z.record(z.string(), z.unknown()))
-const executionIdSchema = z.string().uuid('Invalid execution ID')
+const executionIdSchema = z
+  .string()
+  .min(1, 'Invalid execution ID')
+  .max(128, 'Execution ID too long')
+  .regex(
+    /^[A-Za-z0-9._:-]+$/,
+    'Execution ID can only contain letters, numbers, dots, underscores, colons, and hyphens'
+  )
 
 const workflowPositionSchema = z.object({
   x: z.number(),

apps/sim/lib/uploads/contexts/workspace/workspace-file-manager.ts

@@ -3,12 +3,12 @@
  * Files uploaded at workspace level persist indefinitely and are accessible across all workflows
  */
 
+import { randomBytes } from 'crypto'
 import { db } from '@sim/db'
 import { workspaceFiles } from '@sim/db/schema'
 import { createLogger } from '@sim/logger'
 import { getPostgresConstraintName, getPostgresErrorCode } from '@sim/utils/errors'
 import { generateShortId } from '@sim/utils/id'
-import { randomBytes } from 'crypto'
 import { and, eq, isNull, sql } from 'drizzle-orm'
 import {
   checkStorageQuota,

apps/sim/lib/uploads/core/storage-service.ts

@@ -1,5 +1,5 @@
-import { createLogger } from '@sim/logger'
 import { randomBytes } from 'crypto'
+import { createLogger } from '@sim/logger'
 import { getStorageConfig, USE_BLOB_STORAGE, USE_S3_STORAGE } from '@/lib/uploads/config'
 import type { BlobConfig } from '@/lib/uploads/providers/blob/types'
 import type { S3Config } from '@/lib/uploads/providers/s3/types'