fix(oracle-fusion): follow service-account-only catalog convention

Author: Bill Leoutsakos

apps/docs/content/docs/integrations/oracle_fusion_risk_management.mdx

@@ -3626,7 +3626,7 @@ Update Test Plan Step in Oracle Fusion Risk Management using documented record f
 {/* MANUAL-CONTENT-START:notes */}
 ## Prerequisites and API contract
 
-Use an Oracle Fusion integration-user credential containing the application URL, username, and password. The existing Fusion connection supplies Basic authentication over HTTPS. The integration user needs the relevant Financial Reporting Compliance or Advanced Controls REST privileges, the feature's duty roles, and access to the individual records. Assignment-group security permissions apply to the group itself; membership does not automatically assign every compliance record.
+Create or select a reusable Oracle Fusion integration-user connection in the block, containing the application URL, username, and password. The existing Fusion connection supplies Basic authentication over HTTPS. The integration user needs the relevant Financial Reporting Compliance or Advanced Controls REST privileges, the feature's duty roles, and access to the individual records. Assignment-group security permissions apply to the group itself; membership does not automatically assign every compliance record.
 
 Financial Reporting Compliance and Advanced Controls capabilities depend on the customer's Oracle subscriptions and enabled tenant features. Assigning privileges can affect license consumption even when those privileges are unused. Customer entitlement, feature configuration, and live tenant behavior have not been verified. Consult Oracle's [REST quick start](https://docs.oracle.com/en/cloud/saas/risk-management-and-compliance/26c/farkm/Quick_Start.html), [26C API reference](https://docs.oracle.com/en/cloud/saas/risk-management-and-compliance/26c/farkm/index.html), and [licensing advisory](https://docs.oracle.com/en/cloud/saas/risk-management-and-compliance/26c/farsr/advisory-note-on-licensing-impact.html).
 

apps/sim/blocks/blocks/oracle_fusion_risk_management.test.ts

@@ -8,6 +8,7 @@ import {
   OracleFusionRiskManagementBlock,
   OracleFusionRiskManagementBlockMeta,
 } from '@/blocks/blocks/oracle_fusion_risk_management'
+import { AuthMode } from '@/blocks/types'
 import * as riskTools from '@/tools/oracle_fusion_risk_management'
 
 const block = OracleFusionRiskManagementBlock
@@ -60,6 +61,11 @@ describe('Risk Management block contracts', () => {
   })
 
   it('binds selectors to the shared service and credential context', () => {
+    expect(block.authMode).toBe(AuthMode.ApiKey)
+    expect(block.subBlocks.find((field) => field.type === 'oauth-input')).toMatchObject({
+      credentialKind: 'service-account',
+      serviceId: 'oracle_fusion_risk_management',
+    })
     for (const field of block.subBlocks) {
       if (!field.selectorKey) continue
       const manifest = selectorManifest[field.selectorKey]

apps/sim/blocks/blocks/oracle_fusion_risk_management.ts

@@ -1,7 +1,7 @@
 import { NetSuiteIcon } from '@/components/icons'
 import { getScopesForService } from '@/lib/oauth/utils'
 import type { BlockConfig, BlockMeta, SubBlockConfig } from '@/blocks/types'
-import { IntegrationType } from '@/blocks/types'
+import { AuthMode, IntegrationType } from '@/blocks/types'
 import { parseOptionalBooleanInput, parseOptionalNumberInput } from '@/blocks/utils'
 import {
   RISK_OPERATIONS,
@@ -454,6 +454,7 @@ export const OracleFusionRiskManagementBlock: BlockConfig = {
   docsLink: 'https://docs.sim.ai/integrations/oracle_fusion_risk_management',
   category: 'tools',
   integrationType: IntegrationType.Security,
+  authMode: AuthMode.ApiKey,
   bgColor: '#FFFFFF',
   icon: NetSuiteIcon,
   canvasPresentation: {

apps/sim/lib/integrations/credential-display.test.ts

@@ -68,7 +68,8 @@ const EXPECTED_COVERAGE: Record<string, string[]> = {
   // NetSuite remains an API-key catalog integration, like Snowflake, while its
   // block uses the shared reusable-credential selector.
   'netsuite-service-account': [],
-  'oracle-fusion-service-account': ['oracle-fusion-risk-management'],
+  /** Fusion uses its reusable credential on the block, like NetSuite and Snowflake. */
+  'oracle-fusion-service-account': [],
   'pipedrive-service-account': ['pipedrive'],
   'salesforce-service-account': ['salesforce'],
   'shopify-service-account': ['shopify'],

packages/deployment-config/src/integrations.json

@@ -16482,8 +16482,7 @@
       "operationCount": 115,
       "triggers": [],
       "triggerCount": 0,
-      "authType": "oauth",
-      "oauthServiceId": "oracle_fusion_risk_management",
+      "authType": "api-key",
       "category": "tools",
       "integrationType": "security",
       "tags": ["automation", "data-analytics"]

packages/deployment-config/src/service-account-providers.generated.ts

@@ -27,7 +27,6 @@ export const SERVICE_ACCOUNT_PROVIDER_BY_OAUTH_SERVICE_ID = {
   linear: 'linear-service-account',
   monday: 'monday-service-account',
   notion: 'notion-service-account',
-  oracle_fusion_risk_management: 'oracle-fusion-service-account',
   pipedrive: 'pipedrive-service-account',
   salesforce: 'salesforce-service-account',
   shopify: 'shopify-service-account',