From 8c24f791c1395783a4fd442f65bf36774b746a1d Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Sat, 27 Jun 2026 01:22:49 +0000
Subject: [PATCH] fix(config): add UUID validation to run_id in
 cancel/commit/run route schemas
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds .uuid() to the yupString() validator for run_id in all three config
agent routes (cancel, commit, run). Without this, a non-UUID string
reaches lockConfigAgentRun's ::uuid SQL cast and causes a PostgreSQL
'invalid input syntax for type uuid' exception — surfacing as a 500
instead of a clean 400.

Co-Authored-By: mantra <mantra@stack-auth.com>
---
 .../src/app/api/latest/internal/config/github/cancel/route.tsx  | 2 +-
 .../src/app/api/latest/internal/config/github/commit/route.tsx  | 2 +-
 .../src/app/api/latest/internal/config/github/run/route.tsx     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/apps/backend/src/app/api/latest/internal/config/github/cancel/route.tsx b/apps/backend/src/app/api/latest/internal/config/github/cancel/route.tsx
index e0abb7612..d5f3d1d63 100644
--- a/apps/backend/src/app/api/latest/internal/config/github/cancel/route.tsx
+++ b/apps/backend/src/app/api/latest/internal/config/github/cancel/route.tsx
@@ -30,7 +30,7 @@ export const POST = createSmartRouteHandler({
       tenancy: adaptSchema,
     }).defined(),
     body: yupObject({
-      run_id: yupString().defined(),
+      run_id: yupString().uuid().defined(),
     }).defined(),
     method: yupString().oneOf(["POST"]).defined(),
   }),
diff --git a/apps/backend/src/app/api/latest/internal/config/github/commit/route.tsx b/apps/backend/src/app/api/latest/internal/config/github/commit/route.tsx
index 81cf9bf07..757e93c17 100644
--- a/apps/backend/src/app/api/latest/internal/config/github/commit/route.tsx
+++ b/apps/backend/src/app/api/latest/internal/config/github/commit/route.tsx
@@ -33,7 +33,7 @@ export const POST = createSmartRouteHandler({
       tenancy: adaptSchema,
     }).defined(),
     body: yupObject({
-      run_id: yupString().defined(),
+      run_id: yupString().uuid().defined(),
       github_access_token: yupString().defined(),
       commit_message: yupString().optional(),
     }).defined(),
diff --git a/apps/backend/src/app/api/latest/internal/config/github/run/route.tsx b/apps/backend/src/app/api/latest/internal/config/github/run/route.tsx
index 8498aa4af..dd1f035c3 100644
--- a/apps/backend/src/app/api/latest/internal/config/github/run/route.tsx
+++ b/apps/backend/src/app/api/latest/internal/config/github/run/route.tsx
@@ -21,7 +21,7 @@ export const GET = createSmartRouteHandler({
       tenancy: adaptSchema,
     }).defined(),
     query: yupObject({
-      run_id: yupString().defined(),
+      run_id: yupString().uuid().defined(),
     }).defined(),
   }),
   response: yupObject({