feat(oracle-epm): add guarded foundation by BillLeoutsakosvl346 · Pull Request #7469 · simstudioai/sim

BillLeoutsakosvl346 · 2026-09-04T01:32:53Z

Summary

Add the Oracle EPM integration-user credential with locally minted Basic authentication bound to one environment
Add guarded child-owned route, endpoint, returned-link, polling, and bounded file primitives without a product integration
Keep shared runtime behavior unchanged outside the additive credential descriptor and minter registrations

Type of Change

New feature

Testing

Targeted Vitest suites (18 files, 217 tests)
Root type-check and lint
Block-registry audit, all repository audits, and docs-manifest check

Deferred Platform Work

Generic credential resolution does not enforce that a selected credential matches the tool's registered service; address this in a separate platform-security PR before the first EPM child
Client-credential reconnect may read and decrypt stored credentials while looking for dataCenter on providers that do not declare it; address this in a separate orchestration cleanup PR

Checklist

Code follows project style guidelines
Self-reviewed my changes
Tests added/updated and passing
No new warnings introduced
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

vercel · 2026-09-04T01:32:58Z

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 4, 2026 10:39pm UTC

gitguardian · 2026-09-04T01:33:01Z

️✅ There are no secrets present in this pull request anymore.

If these secrets were true positive and are still valid, we highly recommend you to revoke them.
While these secrets were previously flagged, we no longer have a reference to the
specific commits where they were detected. Once a secret has been leaked into a git
repository, you should consider it compromised, even if it was deleted immediately.
Find here more information about risks.

^{_{🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}}

greptile-apps · 2026-09-04T01:35:50Z

Greptile Summary

Adds a guarded Oracle EPM foundation without introducing a product-facing integration.

Registers an environment-bound integration-user credential and local Basic-auth minter.
Adds fixed-destination request, endpoint, returned-link, polling, and bounded file primitives.
Serializes cancellation cleanup after multipart completion and presigning, and bounds non-cooperative polling reads.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
apps/sim/lib/internal/oracle-epm/files.server.ts	Implements bounded file streaming and serialized cancellation cleanup; the previously reported completion and presigning races are addressed.
apps/sim/lib/internal/oracle-epm/jobs.ts	Implements deadline-aware polling and races non-cooperative reads against the combined abort signal, addressing the previous thread.
apps/sim/lib/internal/oracle-epm/client.server.ts	Adds a fixed-origin, SSRF-guarded client with bounded requests, responses, retries, and opaque returned-link capabilities.
apps/sim/lib/internal/oracle-epm/endpoint.ts	Adds validated and frozen endpoint declarations for child-owned Oracle EPM operations.
apps/sim/lib/credentials/client-credential-accounts/minters/oracle-epm.ts	Adds local Basic-auth minting with normalized environment binding and credential-text validation.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  C[Oracle EPM credential] --> M[Local Basic-auth minter]
  M --> G[Fixed-destination guarded client]
  G --> E[Branded endpoint declarations]
  G --> L[Validated returned-link capabilities]
  G --> J[Bounded job polling]
  G --> F[Bounded file streaming and storage]

_{Reviews (9): Last reviewed commit: "refactor(oracle-epm): keep API contract ..." | Re-trigger Greptile}

cubic-dev-ai

All reported issues were addressed across 33 files

_{Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-04T01:53:11Z

@greptile

BillLeoutsakosvl346 · 2026-09-04T01:53:17Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-04T01:53:23Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

BillLeoutsakosvl346 · 2026-09-04T01:56:11Z

@greptile

BillLeoutsakosvl346 · 2026-09-04T01:56:15Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-04T01:56:22Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 34 files

_{Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-04T02:10:20Z

@cubic-dev-ai review this PR

BillLeoutsakosvl346 · 2026-09-04T02:10:20Z

@greptile

cubic-dev-ai · 2026-09-04T02:10:27Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 34 files

_{Fix all with cubic | Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-04T02:24:28Z

@cubic-dev-ai review this PR

BillLeoutsakosvl346 · 2026-09-04T02:24:29Z

@greptile

cubic-dev-ai · 2026-09-04T02:24:34Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 34 files

_{Fix all with cubic | Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-04T02:37:59Z

@greptile

BillLeoutsakosvl346 · 2026-09-04T02:37:59Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-04T02:38:07Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 34 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-04T16:46:02Z

@greptile

BillLeoutsakosvl346 · 2026-09-04T16:46:06Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-04T16:46:14Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 30 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-04T17:22:50Z

@greptile

BillLeoutsakosvl346 · 2026-09-04T17:22:53Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-04T17:23:00Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 26 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Re-trigger cubic}

greptile-apps Bot reviewed Sep 4, 2026

View reviewed changes

Comment thread apps/sim/lib/internal/oracle-epm/files.server.ts

Comment thread apps/sim/lib/internal/oracle-epm/jobs.ts Outdated

cubic-dev-ai Bot reviewed Sep 4, 2026

View reviewed changes

vercel Bot temporarily deployed to Preview September 4, 2026 01:51 Inactive

Bill Leoutsakos added 2 commits September 3, 2026 18:55

feat(oracle-epm): add guarded foundation

287603d

fix(oracle-epm): harden guarded foundation

7ba3213

BillLeoutsakosvl346 force-pushed the feat/oracle-epm-foundation branch from ff77e58 to 7ba3213 Compare September 4, 2026 01:55

vercel Bot temporarily deployed to Preview September 4, 2026 01:56 Inactive

cubic-dev-ai Bot reviewed Sep 4, 2026

View reviewed changes

fix(oracle-epm): address follow-up review findings

c000b7b

vercel Bot temporarily deployed to Preview September 4, 2026 02:09 Inactive

cubic-dev-ai Bot reviewed Sep 4, 2026

View reviewed changes

Comment thread apps/sim/lib/internal/oracle-epm/client.server.ts Outdated

Comment thread apps/sim/lib/internal/oracle-epm/client.server.ts

fix(oracle-epm): validate raw returned-link paths

5e32a64

vercel Bot temporarily deployed to Preview September 4, 2026 02:24 Inactive

cubic-dev-ai Bot reviewed Sep 4, 2026

View reviewed changes

Comment thread apps/sim/lib/internal/oracle-epm/client.server.ts

fix(oracle-epm): reject unusable link policies

893d086

fix(credentials): authorize before provider matching

849968a

vercel Bot temporarily deployed to Preview September 4, 2026 02:37 Inactive

cubic-dev-ai Bot reviewed Sep 4, 2026

View reviewed changes

refactor(oracle-epm): narrow shared infrastructure changes

1a37ec6

vercel Bot temporarily deployed to Preview September 4, 2026 16:45 Inactive

cubic-dev-ai Bot reviewed Sep 4, 2026

View reviewed changes

refactor(oracle-epm): defer shared tool auth helper

3f631c6

vercel Bot temporarily deployed to Preview September 4, 2026 17:12 Inactive

refactor(oracle-epm): keep API contract tests provider-neutral

fa2fc7f

vercel Bot temporarily deployed to Preview September 4, 2026 17:15 Inactive

cubic-dev-ai Bot reviewed Sep 4, 2026

View reviewed changes

fix(oracle-epm): clarify credential REST base URL

ad88fb2

vercel Bot temporarily deployed to Preview September 4, 2026 20:43 Inactive

fix(oracle-epm): correct credential authentication docs link

cb8b98a

vercel Bot temporarily deployed to Preview September 4, 2026 21:01 Inactive

feat(oracle-epm): support repository-path parameters

b81803b

vercel Bot temporarily deployed to Preview September 4, 2026 21:47 Inactive

fix(oracle-epm): support multiword returned-link relations

a818f7a

vercel Bot temporarily deployed to Preview September 4, 2026 22:25 Inactive

test(oracle-epm): cover credential setup guidance

8c5f26c

vercel Bot temporarily deployed to Preview September 4, 2026 22:39 Inactive

Uh oh!

Conversation

BillLeoutsakosvl346 commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Type of Change

Testing

Deferred Platform Work

Checklist

Uh oh!

vercel Bot commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

gitguardian Bot commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

️✅ There are no secrets present in this pull request anymore.

Uh oh!

greptile-apps Bot commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Flowchart

Uh oh!

Uh oh!

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 4, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 4, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 4, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 4, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 4, 2026 •

edited

Loading

vercel Bot commented Sep 4, 2026 •

edited

Loading

gitguardian Bot commented Sep 4, 2026 •

edited

Loading

greptile-apps Bot commented Sep 4, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading