feat(oracle-fusion): add shared integration foundation by BillLeoutsakosvl346 · Pull Request #7427 · simstudioai/sim

BillLeoutsakosvl346 · 2026-09-03T02:16:57Z

Summary

Adds the shared Oracle Fusion foundation used by sibling product integrations without registering or advertising any product service.

Registers one reusable integration-user credential with strict Oracle-assigned origin validation, encrypted username/password storage, local Basic derivation, and no save-time provider probe.
Adds canonical fixed-version HCM, FSCM, and CRM resource addressing plus shared exact decimal-identifier and opaque-key validation.
Adds a DNS-pinned client limited to GET, POST, PATCH, PUT, and DELETE. GET may retry once for 429, 503, or 504 when the execution deadline permits; mutations never retry.
Restricts mutations to bounded plain JSON, three documented media types, and the Effective-Of, If-Match, and Upsert-Mode operation headers. Callers cannot supply arbitrary URLs, roots, versions, methods, or headers.
Provides separate bounded JSON and empty-response APIs, 30-second wall-clock attempt deadlines, fixed provider-message-free errors, safe collection parsing, expected offsets, pre-projection item limits, and nextOffset.
Uses the existing client-credential and service-account registries without changing platform-wide token resolution, selector authorization, shared cache policy, or icon exports.

Oracle addressing/protocol stabilization and bounded mutations remain separate commits for independent review.

Product-specific services, blocks, routes below the family root, schemas, selectors, registrations, operations, and documentation remain child-owned. Downloads, binary bodies, streaming, automatic pagination, mutation retries, arbitrary transport inputs, and async-job infrastructure are intentionally excluded.

Fixes: N/A

Type of Change

Testing

Focused Oracle credential, addressing, identifier, protocol, serializer, and client tests
bun run type-check in apps/sim
bun run agent-stream-docs:generate
bun run skills:sync
bun run lint
bun run apps/sim/scripts/check-block-registry.ts origin/staging
bun run check:audits
git diff --check

Reviewers should focus on fixed-origin and family-root enforcement, exact identifiers, mutation serialization/header constraints, retry/deadline behavior, and product-neutral protocol invariants.

Checklist

Code follows project style guidelines
Self-reviewed my changes
Tests added or updated and passing
No new warnings introduced
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement

Screenshots/Videos

Not applicable. This foundation does not add a product UI surface.

vercel · 2026-09-03T02:17:03Z

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Oct 3, 2026 12:38am UTC

greptile-apps · 2026-09-03T02:19:19Z

Greptile Summary

The PR adds a product-neutral Oracle Fusion credential and transport foundation without registering product-facing services.

Registers a canonical Oracle Fusion integration-user credential backed by locally derived Basic authentication.
Adds fixed HCM, FSCM, and CRM resource addressing with constrained paths, identifiers, request bodies, methods, headers, and media types.
Adds DNS-pinned requests, bounded responses, attempt deadlines, limited GET retries, stable provider errors, and collection parsing utilities.

Confidence Score: 5/5

The PR appears safe to merge because no blocking failure remains in the eligible follow-up scope.

No blocking failure remains.

Important Files Changed

Filename	Overview
apps/sim/lib/credentials/client-credential-accounts/descriptors.ts	Adds the Oracle Fusion provider descriptor and strict canonical application-origin normalization.
apps/sim/lib/credentials/client-credential-accounts/minters/oracle-fusion.ts	Validates integration-user fields and derives bounded, locally cached Basic authentication material.
apps/sim/lib/internal/oracle-fusion/client.ts	Adds the DNS-pinned, deadline-aware Oracle request boundary with constrained methods, headers, retries, and response handling.
apps/sim/lib/internal/oracle-fusion/paths.ts	Defines fixed-version family roots and validates family-relative resource paths.
apps/sim/lib/internal/oracle-fusion/protocol.ts	Adds bounded collection parsing, self-link validation, opaque-key handling, and pagination metadata.
apps/sim/lib/internal/oracle-fusion/request-body.ts	Adds bounded plain-JSON serialization with exact integer token support.

Sequence Diagram

sequenceDiagram
  participant Caller
  participant Credential as Credential Resolver
  participant Client as Oracle Fusion Client
  participant DNS as DNS Validation
  participant Oracle as Oracle Fusion
  Caller->>Credential: Resolve integration-user credential
  Credential-->>Caller: Canonical origin and Basic material
  Caller->>Client: Bounded family-relative request
  Client->>DNS: Validate origin and pin public IP
  DNS-->>Client: Validated address
  Client->>Oracle: Fixed-root request with constrained method and headers
  Oracle-->>Client: Bounded JSON or empty response
  alt Transient GET and deadline permits
    Client->>Oracle: Retry once
    Oracle-->>Client: Final response
  end
  Client-->>Caller: Parsed result or fixed error

_{Reviews (14): Last reviewed commit: "feat(oracle-fusion): serialize exact int..." | Re-trigger Greptile}

cubic-dev-ai

All reported issues were addressed across 18 files

_{Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-03T02:25:07Z

@greptile

BillLeoutsakosvl346 · 2026-09-03T02:25:13Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-03T02:25:19Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 18 files

_{Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-03T02:34:04Z

@greptile

BillLeoutsakosvl346 · 2026-09-03T02:34:05Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-03T02:34:11Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 18 files

_{Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-03T02:46:49Z

@greptile

BillLeoutsakosvl346 · 2026-09-03T02:46:50Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-03T02:46:55Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 18 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-04T01:06:49Z

@greptile

BillLeoutsakosvl346 · 2026-09-04T16:38:24Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-04T16:38:30Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 19 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-05T01:07:19Z

@greptile

BillLeoutsakosvl346 · 2026-09-05T01:07:19Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-05T01:07:24Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 19 files

_{Heads up: you’re close to your flex budget. Increase your flex budget so reviews don’t pause.

You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Fix all with cubic | Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-05T01:14:32Z

@greptile

BillLeoutsakosvl346 · 2026-09-05T01:14:33Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-05T01:14:39Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 19 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Heads up: you’re close to your flex budget. Increase your flex budget so reviews don’t pause.

You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Re-trigger cubic}

Retain the Oracle origin and credential safeguards while respecting staging test cleanup. Adopt shared test mocks and keep unused internal types private for current audit compatibility.

feat(oracle-fusion): add shared integration foundation

abb64b8

vercel Bot deployed to Preview September 3, 2026 02:18 View deployment

cubic-dev-ai Bot reviewed Sep 3, 2026

View reviewed changes

Comment thread apps/sim/lib/internal/oracle-fusion/client.ts Outdated

Comment thread apps/sim/lib/credentials/client-credential-accounts/descriptors.ts

fix(oracle-fusion): harden numeric and origin parsing

a7ae174

vercel Bot temporarily deployed to Preview September 3, 2026 02:25 Inactive

cubic-dev-ai Bot reviewed Sep 3, 2026

View reviewed changes

Comment thread apps/sim/lib/internal/oracle-fusion/client.ts Outdated

fix(oracle-fusion): handle large integral exponents

7b669e7

vercel Bot temporarily deployed to Preview September 3, 2026 02:33 Inactive

cubic-dev-ai Bot reviewed Sep 3, 2026

View reviewed changes

Comment thread apps/sim/lib/internal/oracle-fusion/client.ts Outdated

fix(oracle-fusion): classify rejected redirects

b0d41e7

vercel Bot temporarily deployed to Preview September 3, 2026 02:46 Inactive

cubic-dev-ai Bot reviewed Sep 3, 2026

View reviewed changes

This was referenced Sep 3, 2026

feat(oracle-fusion): add SCM integration #7439

Open

feat(integrations): expand Oracle Fusion HCM workforce payroll talent and time #7415

Open

Bill Leoutsakos added 3 commits September 3, 2026 17:48

fix(credentials): enforce service-account provider and kind centrally

623fc6e

refactor(oracle-fusion): stabilize addressing and protocol primitives

a63a436

feat(oracle-fusion): add bounded JSON mutations

c8c83c8

vercel Bot temporarily deployed to Preview September 4, 2026 01:06 Inactive

vercel Bot deployed to Preview September 4, 2026 16:40 View deployment

cubic-dev-ai Bot reviewed Sep 4, 2026

View reviewed changes

Bill Leoutsakos added 2 commits September 4, 2026 17:37

fix(oracle-fusion): support framework-v9 self links

631cbab

feat(oracle-fusion): serialize exact integer request values

29d3eee

vercel Bot temporarily deployed to Preview September 5, 2026 00:38 Inactive

cubic-dev-ai Bot reviewed Sep 5, 2026

View reviewed changes

Comment thread apps/sim/lib/internal/oracle-fusion/request-body.test.ts

cubic-dev-ai Bot reviewed Sep 5, 2026

View reviewed changes

fix(oracle-fusion): treat collection totals as estimates

15294a2

vercel Bot temporarily deployed to Preview September 5, 2026 16:44 Inactive

Merge staging into Oracle Fusion foundation

0030a36

Retain the Oracle origin and credential safeguards while respecting staging test cleanup. Adopt shared test mocks and keep unused internal types private for current audit compatibility.

vercel Bot deployed to Preview October 3, 2026 00:29 View deployment

fix(oracle-fusion): use shared record utility in request serializer

6bc1422

vercel Bot temporarily deployed to Preview October 3, 2026 00:38 Inactive

Conversation

BillLeoutsakosvl346 commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Type of Change

Testing

Checklist

Screenshots/Videos

Uh oh!

vercel Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

greptile-apps Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Sequence Diagram

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Sep 3, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 3, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 3, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Sep 3, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 3, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 3, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Sep 3, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 3, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 3, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 4, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

BillLeoutsakosvl346 commented Sep 5, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 5, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 5, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Sep 5, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 5, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 3, 2026 •

edited

Loading

vercel Bot commented Sep 3, 2026 •

edited

Loading

greptile-apps Bot commented Sep 3, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading