feat(integrations): add Oracle Fusion Cloud HCM by BillLeoutsakosvl346 · Pull Request #7415 · simstudioai/sim

BillLeoutsakosvl346 · 2026-09-02T20:54:47Z

Summary

Adds a strictly read-only Oracle Fusion Cloud HCM integration on top of the reusable Oracle Fusion foundation in #7427.

The product layer keeps 18 public operations:

Workers: list/get public worker profiles
Assignments and reporting: list/get assignments, managers, and direct reports
Absence management: list/get absences and list absence types
Workforce structures: jobs, job families, departments, locations, positions, business units, legal employers, grades, and person types

It also keeps four server-side selectors, eight templates, and seven grounded integration skills.

Shared foundation and transport

Depends on feat(oracle-fusion): add shared integration foundation #7427 and uses its requestOracleFusionJson transport for every Oracle request
Uses Oracle REST Framework version 9 and the versioned 11.13.18.05 HCM resources
Inherits the shared 5 MiB response cap, 30-second timeout, two bounded GET retries, redirect prohibition, canonical-origin validation, DNS/IP protection, and lossless integer parsing
Uses the shared collection protocol and propagates its returned nextOffset
Resolves Oracle opaque worker and assignment keys through exact business-ID lookups and validated same-origin self-links before item or nested traversal

Reusable credentials and security

Registers OAuth group oracle_fusion and service oracle_fusion_hcm
Uses the foundation-owned oracle-fusion-service-account provider with no scopes
Presents only reusable credential / manualCredential inputs under canonical oauthCredential
Removes raw tenant URL, username, and password block inputs
Keeps accessToken and instanceUrl hidden and internal; the stored credential bundle is authoritative for the destination
Rejects wrong credential kinds, wrong stored providers, and caller-supplied destination spoofing before Oracle execution
Uses OracleIcon across the block, templates, integration registries, and generated docs

Data boundaries

GET-only; there are no mutation tools or triggers
Worker access is limited to the documented active/public-worker resources and fixed safe field projections
Collection pages are explicitly bounded to 100 rows; selectors are bounded to 50 rows and do not auto-load full datasets
Absence detail retains the documented exact finder flow and person-ownership enforcement
Provider failures are mapped to fixed HCM-facing errors; unexpected failures remain generic and non-reflective

Verification

Exact request-contract coverage for all 18 operations, including paths, fields, queries, finders, pagination, and REST v9 escaping
Opaque-key, self-link, exact-ID, nullable/boolean, cancellation, absence ownership, credential binding, selector authorization, and spoof-rejection coverage
Focused HCM/foundation/auth/selector/executor test suites
Repository type-check, lint, format, all 45 audits, boundary checks, and generated-file freshness checks
Independent read-only fix/re-audit loop completed with 0 critical findings and 0 warnings

Oracle references

Dependency and rollout

This PR is intentionally based on feat/oracle-fusion-foundation and should merge only after #7427. The foundation-owned service-account provider/minter projection is unchanged here.

No live Oracle tenant was available; provider transport and schema behavior are covered with documentation-grounded mocks and fixtures.

vercel · 2026-09-02T20:54:53Z

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 3, 2026 6:44pm UTC

greptile-apps · 2026-09-02T20:58:46Z

Greptile Summary

Adds a read-only Oracle Fusion Cloud HCM integration backed by the shared Oracle Fusion transport and reusable credentials.

Registers 18 HCM operations for workers, assignments, reporting relationships, absences, and workforce structures.
Adds credential-bound execution, protected selectors, bounded pagination, field projections, validation, and error mapping.
Aligns block metadata, tool registries, generated contracts, documentation, icons, OAuth configuration, and deployment availability.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
apps/sim/lib/internal/oracle-fusion-hcm/operations.ts	Implements the 18 bounded, read-only Oracle HCM request flows and opaque-key resolution.
apps/sim/lib/internal/oracle-fusion-hcm/execute-tool.ts	Dispatches validated operations through credential-bound Oracle transport and stable error projection.
apps/sim/lib/internal/oracle-fusion-hcm/projectors.ts	Projects provider payloads into minimized public HCM output shapes while preserving identifier strings.
apps/sim/lib/selectors/server/providers/oracle-fusion-hcm.ts	Adds bounded, authorized Oracle-backed selectors for workers, assignments, absences, and absence types.
apps/sim/tools/oracle_fusion_hcm/definitions.ts	Defines the public tool contracts and credential visibility for all HCM operations.
apps/sim/blocks/blocks/oracle_fusion_hcm.ts	Registers the workflow-facing block, operation controls, selectors, templates, and skills.

Sequence Diagram

sequenceDiagram
    participant User as Workflow user
    participant Block as Oracle HCM block
    participant Exec as HCM executor
    participant Auth as Credential resolution
    participant Transport as Shared Oracle transport
    participant Oracle as Oracle Fusion HCM
    User->>Block: Select operation and inputs
    Block->>Exec: Execute registered HCM tool
    Exec->>Auth: Resolve credential-bound token and origin
    Auth-->>Exec: Internal access token and canonical instance URL
    Exec->>Transport: Send bounded GET request
    Transport->>Oracle: Validated same-origin request
    Oracle-->>Transport: HCM JSON response
    Transport-->>Exec: Losslessly parsed response
    Exec-->>Block: Projected read-only result
    Block-->>User: Structured operation output

_{Reviews (8): Last reviewed commit: "test(integrations): clarify Oracle HCM t..." | Re-trigger Greptile}

cubic-dev-ai

All reported issues were addressed across 31 files

_{Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-02T21:55:21Z

@greptile-apps @cubic-dev-ai please re-review the latest commit (20724c1), including the fixes and dispositions on the prior review threads.

cubic-dev-ai · 2026-09-02T21:55:29Z

@greptile-apps @cubic-dev-ai please re-review the latest commit (20724c1), including the fixes and dispositions on the prior review threads.

@BillLeoutsakosvl346 Incremental reviews are turned off for this repository. Comment @cubic review to run a full review.

cubic-dev-ai

All reported issues were addressed across 44 files

_{Fix all with cubic | Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-02T22:11:26Z

@greptile

BillLeoutsakosvl346 · 2026-09-02T22:11:26Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-02T22:11:33Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 45 files

_{Fix all with cubic | Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-02T22:24:57Z

@greptile

BillLeoutsakosvl346 · 2026-09-02T22:25:00Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-02T22:25:06Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 45 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Re-trigger cubic}

BillLeoutsakosvl346 · 2026-09-02T22:43:29Z

@greptile

BillLeoutsakosvl346 · 2026-09-02T22:43:33Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-02T22:43:38Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 33 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Re-trigger cubic}

gitguardian · 2026-09-03T18:40:10Z

️✅ There are no secrets present in this pull request anymore.

If these secrets were true positive and are still valid, we highly recommend you to revoke them.
While these secrets were previously flagged, we no longer have a reference to the
specific commits where they were detected. Once a secret has been leaked into a git
repository, you should consider it compromised, even if it was deleted immediately.
Find here more information about risks.

^{_{🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}}

BillLeoutsakosvl346 · 2026-09-03T18:40:48Z

@greptile

BillLeoutsakosvl346 · 2026-09-03T18:40:53Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-03T18:41:00Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

BillLeoutsakosvl346 · 2026-09-03T18:42:31Z

@greptile

BillLeoutsakosvl346 · 2026-09-03T18:42:35Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-03T18:42:42Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

BillLeoutsakosvl346 · 2026-09-03T18:44:54Z

@greptile

BillLeoutsakosvl346 · 2026-09-03T18:44:58Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-03T18:45:04Z

@cubic-dev-ai review this PR

@BillLeoutsakosvl346 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 38 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Re-trigger cubic}

vercel Bot deployed to Preview September 2, 2026 20:56 View deployment

greptile-apps Bot reviewed Sep 2, 2026

View reviewed changes

Comment thread apps/sim/lib/internal/oracle-fusion-hcm/client.ts Outdated

BillLeoutsakosvl346 force-pushed the investigate/oracle-fusion-hcm-integration branch from 6350f0b to b477451 Compare September 2, 2026 21:00

vercel Bot deployed to Preview September 2, 2026 21:02 View deployment

cubic-dev-ai Bot reviewed Sep 2, 2026

View reviewed changes

BillLeoutsakosvl346 force-pushed the investigate/oracle-fusion-hcm-integration branch from b477451 to 151a5fa Compare September 2, 2026 21:07

vercel Bot deployed to Preview September 2, 2026 21:09 View deployment

BillLeoutsakosvl346 force-pushed the investigate/oracle-fusion-hcm-integration branch from 151a5fa to 8b79d3c Compare September 2, 2026 21:11

vercel Bot deployed to Preview September 2, 2026 21:13 View deployment

BillLeoutsakosvl346 force-pushed the investigate/oracle-fusion-hcm-integration branch from 8b79d3c to 20724c1 Compare September 2, 2026 21:45

vercel Bot deployed to Preview September 2, 2026 21:47 View deployment

cubic-dev-ai Bot reviewed Sep 2, 2026

View reviewed changes

Comment thread apps/sim/lib/selectors/server/providers/oracle-fusion-hcm.ts Outdated

Comment thread apps/sim/lib/selectors/server/providers/oracle-fusion-hcm.ts Outdated

Comment thread packages/deployment-config/src/integrations.json Outdated

vercel Bot temporarily deployed to Preview September 2, 2026 22:10 Inactive

cubic-dev-ai Bot reviewed Sep 2, 2026

View reviewed changes

Comment thread apps/sim/lib/selectors/server/providers/oracle-fusion-hcm.ts Outdated

BillLeoutsakosvl346 force-pushed the investigate/oracle-fusion-hcm-integration branch from 83e7bcb to 1c2968f Compare September 2, 2026 22:23

vercel Bot deployed to Preview September 2, 2026 22:26 View deployment

cubic-dev-ai Bot reviewed Sep 2, 2026

View reviewed changes

vercel Bot deployed to Preview September 2, 2026 22:45 View deployment

cubic-dev-ai Bot reviewed Sep 2, 2026

View reviewed changes

Bill Leoutsakos added 4 commits September 3, 2026 10:38

feat(integrations): add Oracle Fusion Cloud HCM

04ff987

fix(integrations): tighten Oracle HCM selectors

badc951

fix(integrations): validate Oracle selector detail IDs

a3e4110

refactor(integrations): align Oracle HCM auth metadata

e7da78a

BillLeoutsakosvl346 force-pushed the investigate/oracle-fusion-hcm-integration branch from 04be977 to 7521992 Compare September 3, 2026 18:39

BillLeoutsakosvl346 changed the base branch from staging to feat/oracle-fusion-foundation September 3, 2026 18:40

refactor(integrations): use shared Oracle Fusion foundation

4144899

vercel Bot deployed to Preview September 3, 2026 18:42 View deployment

BillLeoutsakosvl346 force-pushed the investigate/oracle-fusion-hcm-integration branch from 7521992 to 4144899 Compare September 3, 2026 18:42

test(integrations): clarify Oracle HCM token fixtures

39a17d1

vercel Bot deployed to Preview September 3, 2026 18:44 View deployment

vercel Bot temporarily deployed to Preview September 3, 2026 18:44 Inactive

cubic-dev-ai Bot reviewed Sep 3, 2026

View reviewed changes

Uh oh!

Conversation

BillLeoutsakosvl346 commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Shared foundation and transport

Reusable credentials and security

Data boundaries

Verification

Oracle references

Dependency and rollout

Uh oh!

vercel Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

greptile-apps Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Sequence Diagram

Uh oh!

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Sep 2, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 2, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Sep 2, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 2, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 2, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

BillLeoutsakosvl346 commented Sep 2, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 2, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 2, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

BillLeoutsakosvl346 commented Sep 2, 2026

Uh oh!

BillLeoutsakosvl346 commented Sep 2, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 2, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

gitguardian Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

️✅ There are no secrets present in this pull request anymore.

BillLeoutsakosvl346 commented Sep 2, 2026 •

edited

Loading

vercel Bot commented Sep 2, 2026 •

edited

Loading

greptile-apps Bot commented Sep 2, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

gitguardian Bot commented Sep 3, 2026 •

edited

Loading