chore(oci): minimize shared integration churn

Author: Bill Leoutsakos

apps/docs/components/icons.tsx

@@ -9394,7 +9394,7 @@ export function NewRelicIcon(props: SVGProps<SVGSVGElement>) {
   )
 }
 
-export function OracleIcon(props: SVGProps<SVGSVGElement>) {
+export function NetSuiteIcon(props: SVGProps<SVGSVGElement>) {
   return (
     <svg {...props} viewBox='0 0 93.9 59.4' xmlns='http://www.w3.org/2000/svg'>
       <path
@@ -9405,7 +9405,7 @@ export function OracleIcon(props: SVGProps<SVGSVGElement>) {
   )
 }
 
-export const NetSuiteIcon = OracleIcon
+export const OracleIcon = NetSuiteIcon
 
 export function WizaIcon(props: SVGProps<SVGSVGElement>) {
   return (

apps/docs/openapi-v2-resources.json

@@ -9386,7 +9386,7 @@
             "writeOnly": true,
             "type": "string",
             "minLength": 1,
-            "maxLength": 65536
+            "maxLength": 8192
           },
           "username": {
             "description": "Provider run-as username.",

apps/sim/app/workspace/[workspaceId]/integrations/components/connect-service-account-modal/connect-service-account-modal.tsx

@@ -49,6 +49,7 @@ export type ServiceAccountProviderId =
   | TokenServiceAccountProviderId
   | ClientCredentialAccountProviderId
 
+/** Sim setup guides for each provider, docked bottom-left of each modal. */
 const GOOGLE_SERVICE_ACCOUNT_DOCS_URL = 'https://docs.sim.ai/integrations/google-service-account'
 const ATLASSIAN_SERVICE_ACCOUNT_DOCS_URL =
   'https://docs.sim.ai/integrations/atlassian-service-account'
@@ -128,6 +129,20 @@ interface ConnectServiceAccountModalProps {
   onCreated?: (credentialId: string) => void
 }
 
+/**
+ * Connect-service-account modal mounted from the per-integration detail page.
+ * Self-contained: takes the resolved SA provider + service metadata from the
+ * caller and submits via `useCreateWorkspaceCredential`. Branches the body
+ * based on `serviceAccountProviderId`:
+ *
+ * - `google-service-account`: JSON-paste + drag/drop. Validated client-side
+ *   against {@link serviceAccountJsonSchema} before submitting.
+ * - `atlassian-service-account`: API token + site domain. Validated by the
+ *   server against the Atlassian API; user-facing errors are mapped from the
+ *   route's `error.code`.
+ * - `oci-api-key-service-account`: API signing-key fields. Validated locally
+ *   and with a bounded OCI request before encrypted storage.
+ */
 export function ConnectServiceAccountModal({
   open,
   onOpenChange,

apps/sim/components/icons.tsx

@@ -9394,7 +9394,7 @@ export function NewRelicIcon(props: SVGProps<SVGSVGElement>) {
   )
 }
 
-export function OracleIcon(props: SVGProps<SVGSVGElement>) {
+export function NetSuiteIcon(props: SVGProps<SVGSVGElement>) {
   return (
     <svg {...props} viewBox='0 0 93.9 59.4' xmlns='http://www.w3.org/2000/svg'>
       <path
@@ -9405,7 +9405,7 @@ export function OracleIcon(props: SVGProps<SVGSVGElement>) {
   )
 }
 
-export const NetSuiteIcon = OracleIcon
+export const OracleIcon = NetSuiteIcon
 
 export function WizaIcon(props: SVGProps<SVGSVGElement>) {
   return (

apps/sim/lib/api/contracts/credentials.ts

@@ -158,7 +158,7 @@ export const createCredentialBodySchema = z
      */
     authMethod: z.string().trim().min(1).max(64).optional(),
     /** PEM private key for certificate/JWT-based grants (for example Salesforce or NetSuite). */
-    privateKey: z.string().trim().min(1).max(65_536).optional(),
+    privateKey: z.string().trim().min(1).max(8192).optional(),
     /** Run-as username for key-based grants (Salesforce JWT `sub`). */
     username: z.string().trim().min(1).max(255).optional(),
     tenancyOcid: z.string().trim().min(1).max(255).optional(),
@@ -245,7 +245,7 @@ export const updateCredentialByIdBodySchema = z
     orgId: z.string().trim().min(1).max(255).optional(),
     dataCenter: z.string().trim().min(1).max(32).optional(),
     authMethod: z.string().trim().min(1).max(64).optional(),
-    privateKey: z.string().trim().min(1).max(65_536).optional(),
+    privateKey: z.string().trim().min(1).max(8192).optional(),
     username: z.string().trim().min(1).max(255).optional(),
     tenancyOcid: z.string().trim().min(1).max(255).optional(),
     userOcid: z.string().trim().min(1).max(255).optional(),

apps/sim/lib/api/contracts/v2/credentials.ts

@@ -458,7 +458,7 @@ const v2ServiceAccountCredentialFieldsSchema = z
       .string()
       .trim()
       .min(1)
-      .max(65_536)
+      .max(8192)
       .optional()
       .describe('Write-only PEM private key.')
       .meta({ writeOnly: true }),
@@ -717,7 +717,7 @@ const v2ServiceAccountSecretFieldsShape = {
     .string()
     .trim()
     .min(1)
-    .max(65_536)
+    .max(8192)
     .optional()
     .describe('Write-only PEM private key.')
     .meta({ writeOnly: true }),

apps/sim/lib/credentials/service-account-fields.ts

@@ -35,7 +35,7 @@ export type ServiceAccountFieldId =
  * providers from descriptor fields, bespoke providers inline.) Token-paste
  * providers contribute their entries from
  * `TOKEN_SERVICE_ACCOUNT_REQUIRED_FIELDS`, client-credential providers from
- * `CLIENT_CREDENTIAL_ACCOUNT_REQUIRED_FIELDS`; the three bespoke providers are
+ * `CLIENT_CREDENTIAL_ACCOUNT_REQUIRED_FIELDS`; the four bespoke providers are
  * declared here.
  */
 export const SERVICE_ACCOUNT_REQUIRED_FIELDS: Record<string, readonly ServiceAccountFieldId[]> = {