improvement(prefetch): skip the viewer proof when there is no session

Passing an empty-string userId ran a real permission query that could only
return null. Take an optional userId instead and skip straight to the
unauthorized path, matching how the home prefetch is called.

Author: waleedlatif1

apps/sim/app/workspace/[workspaceId]/knowledge/page.tsx

@@ -34,7 +34,7 @@ export default async function KnowledgePage({
    * data-layer reads need to authorize against.
    */
   const session = await getSession()
-  await prefetchKnowledgeBases(queryClient, workspaceId, session?.user?.id ?? '')
+  await prefetchKnowledgeBases(queryClient, workspaceId, session?.user?.id)
 
   return (
     <HydrationBoundary state={dehydrate(queryClient)}>

apps/sim/app/workspace/[workspaceId]/knowledge/prefetch.ts

@@ -30,9 +30,9 @@ import { KNOWLEDGE_BASE_LIST_STALE_TIME, knowledgeKeys } from '@/hooks/queries/u
 export async function prefetchKnowledgeBases(
   queryClient: QueryClient,
   workspaceId: string,
-  userId: string
+  userId: string | undefined
 ): Promise<void> {
-  const hostContext = await getWorkspaceHostContextForViewer(workspaceId, userId)
+  const hostContext = userId ? await getWorkspaceHostContextForViewer(workspaceId, userId) : null
 
   await Promise.all([
     queryClient.prefetchQuery({

apps/sim/app/workspace/[workspaceId]/tables/page.tsx

@@ -27,7 +27,7 @@ export default async function TablesPage({ params }: { params: Promise<{ workspa
    * data-layer reads need to authorize against.
    */
   const session = await getSession()
-  await prefetchTables(queryClient, workspaceId, session?.user?.id ?? '')
+  await prefetchTables(queryClient, workspaceId, session?.user?.id)
 
   return (
     <HydrationBoundary state={dehydrate(queryClient)}>

apps/sim/app/workspace/[workspaceId]/tables/prefetch.ts

@@ -29,9 +29,9 @@ import { TABLE_LIST_STALE_TIME, tableKeys } from '@/hooks/queries/utils/table-ke
 export async function prefetchTables(
   queryClient: QueryClient,
   workspaceId: string,
-  userId: string
+  userId: string | undefined
 ): Promise<void> {
-  const hostContext = await getWorkspaceHostContextForViewer(workspaceId, userId)
+  const hostContext = userId ? await getWorkspaceHostContextForViewer(workspaceId, userId) : null
 
   await Promise.all([
     queryClient.prefetchQuery({