fix(ci): include auth package in app Docker prune

[TheodoreSpeaks]

Summary

Declare @sim/auth as a direct workspace dependency of apps/sim and update the lockfile.

Root cause

The v2 application code imports @sim/auth/principal, but apps/sim/package.json did not declare @sim/auth. Full-monorepo CI installs every workspace and therefore resolved the undeclared package, while docker/app.Dockerfile runs turbo prune sim --docker. Turbo correctly omitted packages/auth from that pruned build graph, causing the staging image build to fail with Module not found: Can't resolve '@sim/auth/principal'.

Impact

The app Docker image can include and resolve @sim/auth/principal during the staging build.

Verification

• Ran turbo prune sim --docker from this branch.
• Confirmed the prune output reports Added @sim/auth.
• Confirmed the diff contains only the apps/sim/package.json and bun.lock dependency entries.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview	Aug 11, 2026 10:06am

[cursor]

PR Summary

Low Risk
Dependency and lockfile-only change; no runtime logic changes, only fixes the Docker prune/build graph for an already-used package.

Overview
Adds @sim/auth as a direct workspace dependency on apps/sim and updates bun.lock.

The sim app already imports @sim/auth/principal in API and lib code, but the package was not listed in package.json. Full-repo installs still worked; turbo prune sim --docker did not include packages/auth, so the app Docker staging build failed with a missing module for @sim/auth/principal. Declaring the dependency puts @sim/auth in the pruned graph so the image build can resolve it.

^{Reviewed by Cursor Bugbot for commit 9d7861c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

Greptile Summary

Declares @sim/auth as a direct dependency of apps/sim, ensuring Turbo includes the package when pruning the Docker build graph.

• Adds @sim/auth to the app’s workspace dependencies.
• Synchronizes the corresponding bun.lock workspace entry.

Confidence Score: 5/5

The PR appears safe to merge, with the manifest and lockfile consistently correcting the pruned dependency graph.

The declared package exists, exports the subpaths imported by the app, follows the repository’s existing workspace dependency convention, and is represented consistently in the lockfile.

Important Files Changed

Filename	Overview
apps/sim/package.json	Adds the missing direct @sim/auth workspace dependency used by the application.
bun.lock	Mirrors the manifest update in the app workspace’s locked dependency list.

_{Reviews (1): Last reviewed commit: "fix(ci): include auth package in app pru..." | Re-trigger Greptile}