feat(netsuite): add Oracle NetSuite integration

[BillLeoutsakosvl346]

Summary

• add an Oracle NetSuite block with 27 SuiteTalk operations
• support OAuth 2.0 client-credentials authentication with certificate signing
• add the official NetSuite icon, templates, skills, catalog metadata, tests, and setup documentation
• exclude RESTlets, arbitrary API requests, and triggers

Type of Change

• Feature

Testing

• 30 focused NetSuite tests
• full lint and type-check
• all 22 repository audits
• block registry, tool metadata, integration catalog, icon, and registry-boundary checks
• independent integration validation

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview	Aug 10, 2026 5:17am

[cursor]

PR Summary

Medium Risk
New ERP integration with inline private-key credentials and broad create/update/delete/batch capabilities against customer NetSuite data; implementation is scoped and tested but mistakes in workflows could affect production financial/operational records.

Overview
Adds a full Oracle NetSuite workflow integration wired through SuiteTalk REST with OAuth 2.0 client credentials (account ID, client ID, certificate ID, and masked PEM private key on the block—no RESTlets or generic HTTP escape hatch).

The new Oracle NetSuite block exposes 27 operations: record CRUD/upsert, subresources, forms, select options, attach/detach, actions, transforms, SuiteQL, SuiteAnalytics datasets, metadata discovery, async batch jobs (status/result polling), server time, and governance limits. Operation-specific sub-blocks handle paging, JSON record bodies, batch items, and advanced options; seven templates and five agent skills ship with the block.

Docs and catalog surfaces are updated: netsuite integration page, meta.json entry, NetSuiteIcon, icon mappings, block registry, and integrations.json metadata (27 operations, api-key auth, no triggers).

^{Reviewed by Cursor Bugbot for commit 61407f5. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

Greptile Summary

The PR adds an Oracle NetSuite integration backed by SuiteTalk REST Web Services and OAuth 2.0 client credentials.

• Adds 27 record, batch, SuiteQL, dataset, metadata, and asynchronous-job operations.
• Registers the block and tools across the application, generated metadata, integration catalog, and documentation.
• Adds focused tests for request construction, authentication, cache isolation, response handling, and block configuration.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
apps/sim/tools/netsuite/utils.ts	Implements account normalization, OAuth certificate signing, private-key-bound token caching, request construction, response normalization, and error sanitization.
apps/sim/tools/netsuite/utils.test.ts	Covers OAuth signing, token-cache isolation by private-key identity, request behavior, and utility validation.
apps/sim/blocks/blocks/netsuite.ts	Defines the 27-operation NetSuite block, its credential and operation inputs, parameter coercion, outputs, templates, and skills.
apps/sim/blocks/blocks/netsuite.test.ts	Verifies operation routing, required fields, coercion, metadata, and the configured absolute import alias.
apps/sim/tools/netsuite/netsuite.test.ts	Exercises the NetSuite tool configurations and operation-specific HTTP request contracts.
apps/sim/tools/registry.ts	Registers the new NetSuite tools for runtime dispatch.

Sequence Diagram

sequenceDiagram
  participant Workflow
  participant Block as NetSuite Block
  participant Tool as NetSuite Tool
  participant Cache as Token Cache
  participant OAuth as NetSuite OAuth
  participant API as SuiteTalk REST API
  Workflow->>Block: Execute selected operation
  Block->>Tool: Map and coerce operation parameters
  Tool->>Cache: Lookup by account, client, certificate, and key fingerprint
  alt Valid cached token
    Cache-->>Tool: Bearer token
  else Cache miss
    Tool->>OAuth: Signed client-credentials assertion
    OAuth-->>Tool: Access token
    Tool->>Cache: Store bounded token entry
  end
  Tool->>API: Authenticated SuiteTalk request
  API-->>Tool: Status, data, and location
  Tool-->>Workflow: Normalized operation result

Loading

_{Reviews (3): Last reviewed commit: "Merge remote-tracking branch 'origin/sta..." | Re-trigger Greptile}

[BillLeoutsakosvl346]

@greptile

[BillLeoutsakosvl346]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit cdd5240. Configure here.}

[BillLeoutsakosvl346]

@greptile

[BillLeoutsakosvl346]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 61407f5. Configure here.}