fix(gmail-poller): resolve OAuth credential provider aliases

[j15z]

Summary

• Canonicalize Gmail trigger service IDs before deploy-time credential lookup
• Add regression coverage for provider aliases and workspace credential isolation

Type of Change

• Bug fix

Testing

• 93 focused tests passed
• App type-check passed
• bun run lint passed
• bun run check:api-validation:strict passed

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Jul 20, 2026 6:43pm

[cursor]

PR Summary

Low Risk
Small, targeted change at deploy credential validation with regression test; no new auth paths or data model changes.

Overview
Fixes Gmail (and similar) trigger deploy failures where valid workspace OAuth credentials were rejected because deploy compared the trigger’s service ID (e.g. gmail) directly to credential.providerId in the database (e.g. google-email).

resolveTriggerCredentialId now runs the trigger serviceId through getProviderIdFromServiceId before the DB lookup, so aliases resolve to the canonical OAuth provider ID while workspace, type, and credential reference checks stay the same.

The function is exported for unit tests, with a new test that asserts a gmail service ID queries providerId google-email.

^{Reviewed by Cursor Bugbot for commit 3943e5e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

Greptile Summary

This PR fixes deploy-time OAuth credential lookup for Gmail triggers. The main changes are:

• Maps trigger service aliases to canonical provider IDs before querying credentials.
• Preserves workspace, credential type, credential ID, and account ID filters.
• Adds focused tests for Gmail alias resolution.

Confidence Score: 5/5

This looks safe to merge.

• No blocking issues found in the changed code.
• Unknown service IDs retain the previous identity lookup behavior.
• Workspace and OAuth credential isolation remain unchanged.

Important Files Changed

Filename	Overview
apps/sim/lib/webhooks/deploy.ts	Canonicalizes OAuth service IDs before credential lookup without weakening workspace or credential constraints.
apps/sim/lib/webhooks/deploy.test.ts	Adds focused coverage for Gmail provider alias resolution and the credential query predicates.

_{Reviews (1): Last reviewed commit: "fix(gmail-poller): resolve OAuth credent..." | Re-trigger Greptile}