feat(scim): SCIM 2.0 directory provisioning with group-to-access projection #30587
waleedlatif1ci.yml
on: pull_request
Detect Version
0s
Migrate Dev DB
/
Apply Database Migrations
Detect Desktop Changes
Matrix: Build AMD64
Matrix: Build ARM64 (GHCR Only)
Matrix: Test and Build / test-shard
Test and Build
/
Lint and Test
39s
Test and Build
/
Build App
2m 24s
Check Docs Changes
0s
Matrix: Build Dev ECR
Deploy Trigger.dev (Dev)
0s
Matrix: Create GHCR Manifests
Process Docs
/
Process Documentation Embeddings
Prune Desktop Prereleases
Matrix: Attest Images
Desktop Release
/
Build, Sign, Notarize
Annotations
16 errors and 21 warnings
|
Test and Build / Lint and Test
Process completed with exit code 1.
|
|
error: Generated docs manifest is stale — the docs tree changed (page added, removed, or renamed). Run: bun run docs-manifest:generate:
scripts/sync-docs-manifest.ts#L102
at main (/home/runner/_work/sim/sim/scripts/sync-docs-manifest.ts:102:17)
|
|
Test and Build / Lint and Test
Process completed with exit code 1.
|
|
ee/access-control/utils/permission-check.test.ts > assertPermissionsAllowed (MCP tools) > throws McpToolsNotAllowedError when disableMcpTools is set:
apps/sim/ee/access-control/utils/permission-check.test.ts#L645
AssertionError: promise resolved "undefined" instead of rejecting
- Expected:
Error {
"message": "rejected promise",
}
+ Received:
undefined
❯ ee/access-control/utils/permission-check.test.ts:645:5
|
|
ee/access-control/utils/permission-check.test.ts > validateModelProvider > enforces the denylist even when no provider allowlist is set:
apps/sim/ee/access-control/utils/permission-check.test.ts#L610
AssertionError: promise resolved "undefined" instead of rejecting
- Expected:
Error {
"message": "rejected promise",
}
+ Received:
undefined
❯ ee/access-control/utils/permission-check.test.ts:610:75
|
|
ee/access-control/utils/permission-check.test.ts > validateModelProvider > denylist match is case-insensitive:
apps/sim/ee/access-control/utils/permission-check.test.ts#L603
AssertionError: promise resolved "undefined" instead of rejecting
- Expected:
Error {
"message": "rejected promise",
}
+ Received:
undefined
❯ ee/access-control/utils/permission-check.test.ts:603:5
|
|
ee/access-control/utils/permission-check.test.ts > validateModelProvider > throws ModelNotAllowedError when the model is on the denylist:
apps/sim/ee/access-control/utils/permission-check.test.ts#L592
AssertionError: promise resolved "undefined" instead of rejecting
- Expected:
Error {
"message": "rejected promise",
}
+ Received:
undefined
❯ ee/access-control/utils/permission-check.test.ts:592:75
|
|
ee/access-control/utils/permission-check.test.ts > validateModelProvider > throws ProviderNotAllowedError when provider is not in allowlist:
apps/sim/ee/access-control/utils/permission-check.test.ts#L576
AssertionError: promise resolved "undefined" instead of rejecting
- Expected:
Error {
"message": "rejected promise",
}
+ Received:
undefined
❯ ee/access-control/utils/permission-check.test.ts:576:75
|
|
ee/access-control/utils/permission-check.test.ts > validateBlockType > when no env allowlist is configured > still rejects a block absent from a mixed-case stored allowlist:
apps/sim/ee/access-control/utils/permission-check.test.ts#L483
AssertionError: promise resolved "undefined" instead of rejecting
- Expected:
Error {
"message": "rejected promise",
}
+ Received:
undefined
❯ ee/access-control/utils/permission-check.test.ts:483:75
|
|
ee/access-control/utils/permission-check.test.ts > getUserPermissionConfig (workspace-group precedence) > governs an external member via an all-members group:
apps/sim/ee/access-control/utils/permission-check.test.ts#L391
AssertionError: expected undefined to be true // Object.is equality
- Expected:
true
+ Received:
undefined
❯ ee/access-control/utils/permission-check.test.ts:391:40
|
|
ee/access-control/utils/permission-check.test.ts > getUserPermissionConfig (workspace-group precedence) > governs all members (including non-listed) via an all-members group:
apps/sim/ee/access-control/utils/permission-check.test.ts#L381
AssertionError: expected undefined to be true // Object.is equality
- Expected:
true
+ Received:
undefined
❯ ee/access-control/utils/permission-check.test.ts:381:35
|
|
ee/access-control/utils/permission-check.test.ts > access control context resolution > identifies an all-members governing group:
apps/sim/ee/access-control/utils/permission-check.test.ts#L283
AssertionError: expected null to deeply equal { id: 'group-all-members', …(2) }
- Expected:
{
"id": "group-all-members",
"name": "All workspace members",
"resolution": "all-members",
}
+ Received:
null
❯ ee/access-control/utils/permission-check.test.ts:283:37
|
|
Test and Build / Test (shard 2)
@sim/app#test: command (/home/runner/_work/sim/sim/apps/sim) /home/runner/.bun/bin/bun run test exited (1)
|
|
Test and Build / Test (shard 3)
Process completed with exit code 1.
|
|
lib/core/config/deployment-shape.test.ts > resolveDeploymentShape > packages the resolved env flags:
apps/sim/lib/core/config/deployment-shape.test.ts#L25
AssertionError: expected { hosted: true, …(5) } to deeply equal { hosted: true, …(5) }
- Expected
+ Received
@@ -9,10 +9,11 @@
"customBlocks": false,
"dataDrains": false,
"dataRetention": false,
"inbox": true,
"sandboxes": true,
+ "scim": false,
"sessionPolicies": true,
"sso": true,
"usageMonitoring": false,
"whitelabeling": true,
},
❯ lib/core/config/deployment-shape.test.ts:25:38
|
|
Test and Build / Test (shard 3)
@sim/app#test: command (/home/runner/_work/sim/sim/apps/sim) /home/runner/.bun/bin/bun run test exited (1)
|
|
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Lint and Test
- Step: unknown (failed)
|
|
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Lint and Test
- Step: unknown (failed)
|
|
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Lint and Test
- Step: unknown (failed)
|
|
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Test (shard 2)
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Test (shard 2)
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Test (shard 2)
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Test (shard 2)
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Test (shard 2)
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Test (shard 2)
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Test (shard 3)
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Test (shard 3)
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Test (shard 3)
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Test (shard 3)
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Test (shard 3)
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Test (shard 3)
Found 2 failed/cancelled steps in previous workflow steps
|