fix(oci-compute): register a distinct service with shared OCI credentials

Author: Bill Leoutsakos

apps/sim/lib/internal/oci-compute/projection-contract.test.ts

@@ -1,5 +1,10 @@
 import { describe, expect, it } from 'vitest'
 import { projectOciComputeResource } from '@/lib/internal/oci-compute/operations'
+import {
+  credentialProviderMatchesService,
+  getServiceConfigByProviderId,
+  getServiceConfigByServiceId,
+} from '@/lib/oauth/utils'
 import {
   buildSelectorContextFromValues,
   getSelectorContextSubBlocks,
@@ -8,6 +13,17 @@ import { OciComputeBlock } from '@/blocks/blocks/oci_compute'
 import { INSTANCE_OUTPUT_PROPERTIES, ociComputeOperationInput } from '@/tools/oci_compute/types'
 
 describe('OCI Compute input and resource projections', () => {
+  it('uses a distinct service identity with the shared OCI signing-key credential provider', () => {
+    const service = getServiceConfigByServiceId('oci_compute')!
+    expect(service).toMatchObject({
+      providerId: 'oci_compute',
+      serviceAccountProviderId: 'oci-api-key-service-account',
+      authType: 'service_account',
+    })
+    expect(credentialProviderMatchesService('oci-api-key-service-account', service)).toBe(true)
+    expect(getServiceConfigByProviderId('oci-api-key-service-account')?.providerId).toBe('oci')
+  })
+
   it('keeps resource discovery in the source compartment without falling back to the destination', () => {
     const selector = OciComputeBlock.subBlocks.find((field) => field.id === 'instanceIdSelector')!
     const contextFor = (resourceCompartmentId: string | undefined) => {

apps/sim/lib/oauth/oauth.ts

@@ -1036,16 +1036,6 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
     name: 'Oracle Cloud Infrastructure',
     icon: OracleIcon,
     services: {
-      oci_compute: {
-        name: 'OCI Compute',
-        description: 'Manage OCI Compute instances, images, configurations, and pools.',
-        providerId: 'oci',
-        serviceAccountProviderId: 'oci-api-key-service-account',
-        icon: NetSuiteIcon,
-        baseProviderIcon: NetSuiteIcon,
-        scopes: [],
-        authType: 'service_account',
-      },
       oci: {
         name: 'Oracle Cloud Infrastructure',
         description: 'Connect OCI services with an API signing key.',
@@ -1056,6 +1046,16 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
         scopes: [],
         authType: 'service_account',
       },
+      oci_compute: {
+        name: 'OCI Compute',
+        description: 'Manage OCI Compute instances, images, configurations, and pools.',
+        providerId: 'oci_compute',
+        serviceAccountProviderId: 'oci-api-key-service-account',
+        icon: NetSuiteIcon,
+        baseProviderIcon: NetSuiteIcon,
+        scopes: [],
+        authType: 'service_account',
+      },
     },
     defaultService: 'oci',
   },