fix(data-drains): allow org-account Snowflake identifier with region suffix

The account validation rejected `<orgname>-<acctname>.<region>.<cloud>`
because `ACCOUNT_LOCATOR_RE`'s first segment forbade hyphens, while
`ACCOUNT_ORG_RE` forbade dots. `normalizeAccountForJwt` already handles
this composite form. Widen the first segment of `ACCOUNT_LOCATOR_RE` to
allow hyphens so the boundary contract and the runtime schema accept
what the JWT layer was already designed to process.

Author: waleedlatif1

apps/sim/lib/api/contracts/data-drains.ts

@@ -41,8 +41,9 @@ const BQ_DATASET_RE = /^[A-Za-z0-9_]{1,1024}$/
 const BQ_TABLE_RE = /^[\p{L}\p{M}\p{N}\p{Pc}\p{Pd} ]{1,1024}$/u
 /** Snowflake account + identifier shapes — mirrored from snowflake.ts. */
 const SNOWFLAKE_ACCOUNT_ORG_RE = /^[A-Za-z0-9][A-Za-z0-9_]*(?:-[A-Za-z0-9_]+)+$/
+/** First segment allows hyphens so org-account identifiers carrying a region/cloud suffix match. Mirrors snowflake.ts. */
 const SNOWFLAKE_ACCOUNT_LOCATOR_RE =
-  /^[A-Za-z0-9][A-Za-z0-9_]*(?:\.[A-Za-z0-9][A-Za-z0-9_-]*){0,2}$/
+  /^[A-Za-z0-9][A-Za-z0-9_-]*(?:\.[A-Za-z0-9][A-Za-z0-9_-]*){0,2}$/
 const SNOWFLAKE_IDENTIFIER_RE = /^[A-Za-z_][A-Za-z0-9_$]{0,254}$/
 /** Reserved Sim-namespaced header names that cannot be reused as the webhook signature header. */
 const RESERVED_WEBHOOK_SIGNATURE_HEADER_NAMES = new Set([

apps/sim/lib/data-drains/destinations/snowflake.ts

@@ -19,7 +19,12 @@ const logger = createLogger('DataDrainSnowflakeDestination')
  * - Legacy account locator: `<locator>` or `<locator>.<region>[.<cloud>]` — dots allowed.
  */
 const ACCOUNT_ORG_RE = /^[A-Za-z0-9][A-Za-z0-9_]*(?:-[A-Za-z0-9_]+)+$/
-const ACCOUNT_LOCATOR_RE = /^[A-Za-z0-9][A-Za-z0-9_]*(?:\.[A-Za-z0-9][A-Za-z0-9_-]*){0,2}$/
+/**
+ * First segment allows hyphens so org-account identifiers (`<orgname>-<acctname>`)
+ * carrying a legacy region/cloud suffix (e.g. `myorg-acct.us-east-1.aws`) match.
+ * `normalizeAccountForJwt` strips the dotted suffix for JWT `iss`/`sub`.
+ */
+const ACCOUNT_LOCATOR_RE = /^[A-Za-z0-9][A-Za-z0-9_-]*(?:\.[A-Za-z0-9][A-Za-z0-9_-]*){0,2}$/
 function isValidAccount(v: string): boolean {
   return ACCOUNT_ORG_RE.test(v) || ACCOUNT_LOCATOR_RE.test(v)
 }