@hs-x/cli 0.3.0 → 0.3.6

package/dist/commands/account.d.ts

@@ -17,7 +17,7 @@ export declare function removeAccountBody(commandName: string, target: Option.Op
 declare const whoamiCmd: Command.Command<"whoami", AccountStore, CliError, {
     readonly json: boolean;
 }>;
-export declare const accountCmd: Command.Command<"account", Cwd | AccountStore, CliError, {
+export declare const accountCmd: Command.Command<"account", AccountStore | Cwd, CliError, {
     readonly subcommand: Option.Option<{
         readonly cwd: Option.Option<string>;
         readonly json: boolean;
@@ -42,20 +42,20 @@ export declare const accountCmd: Command.Command<"account", Cwd | AccountStore,
         readonly yes: boolean;
     }>;
 }>;
-export declare const accountsCmd: Command.Command<"accounts", Cwd | AccountStore, CliError, {
+export declare const accountsCmd: Command.Command<"accounts", AccountStore | Cwd, CliError, {
     readonly subcommand: Option.Option<{
+        readonly cwd: Option.Option<string>;
         readonly json: boolean;
     } | {
-        readonly 'account-id': Option.Option<string>;
+        readonly cwd: Option.Option<string>;
         readonly json: boolean;
     } | {
-        readonly 'account-id': Option.Option<string>;
         readonly json: boolean;
     } | {
-        readonly cwd: Option.Option<string>;
+        readonly 'account-id': Option.Option<string>;
         readonly json: boolean;
     } | {
-        readonly cwd: Option.Option<string>;
+        readonly 'account-id': Option.Option<string>;
         readonly json: boolean;
     } | {
         readonly 'account-id': Option.Option<string>;

package/dist/commands/api.js

@@ -521,7 +521,7 @@ Examples:
   hs-x api v1/accounts/me
   hs-x api v1/deploys --json
   hs-x api hubspot crm-dev-applications/v3/apps
-  hs-x api hubspot feature-flags/v3/<appId>/flags
+  hs-x api hubspot feature-flags/2026-03/<appId>/flags/hs-release-mcp-server
   hs-x api hubspot crm-dev-platform/v3/projects/<projectId>/builds
 `;
 }

package/dist/commands/control-plane-read.d.ts

@@ -40,7 +40,7 @@ export declare function resolveOperationProjectForRead(opts: CpReadOptions, inpu
     readonly message: string;
     readonly emptyMessage: string;
 }): Effect.Effect<OperationProjectSelection | undefined, CliError, AccountStore | ControlPlaneClient | Cwd | Reporter>;
-export declare const auditCmd: Command.Command<"audit", Cwd | AccountStore | ControlPlaneClient, CliError, {
+export declare const auditCmd: Command.Command<"audit", AccountStore | Cwd | ControlPlaneClient, CliError, {
     readonly limit: number;
     readonly since: Option.Option<string>;
     readonly action: Option.Option<string>;
@@ -53,7 +53,7 @@ export declare const auditCmd: Command.Command<"audit", Cwd | AccountStore | Con
     readonly projectId: Option.Option<string>;
     readonly userId: Option.Option<string>;
 }>;
-export declare const auditListCmd: Command.Command<"list", Cwd | AccountStore | ControlPlaneClient, CliError, {
+export declare const auditListCmd: Command.Command<"list", AccountStore | Cwd | ControlPlaneClient, CliError, {
     readonly limit: number;
     readonly since: Option.Option<string>;
     readonly action: Option.Option<string>;
@@ -73,7 +73,7 @@ export declare function parseAuditSince(value: string | undefined, now?: number)
     readonly ok: false;
     readonly message: string;
 };
-export declare const driftCmd: Command.Command<"drift", Cwd | AccountStore | ControlPlaneClient, CliError, {
+export declare const driftCmd: Command.Command<"drift", AccountStore | Cwd | ControlPlaneClient, CliError, {
     readonly json: boolean;
     readonly controlPlaneUrl: Option.Option<string>;
     readonly accountId: Option.Option<string>;
@@ -120,14 +120,14 @@ export declare function remoteStatusBody(opts: RemoteStatusOptions, projectId: s
 export declare function renderRemoteStatus(input: RemoteProjectStatus & {
     readonly projectId: string;
 }): string;
-export declare const checkpointCmd: Command.Command<"checkpoint", Cwd | AccountStore | ControlPlaneClient, CliError, {
+export declare const checkpointCmd: Command.Command<"checkpoint", AccountStore | Cwd | ControlPlaneClient, CliError, {
     readonly json: boolean;
     readonly controlPlaneUrl: Option.Option<string>;
     readonly accountId: Option.Option<string>;
     readonly projectId: Option.Option<string>;
     readonly userId: Option.Option<string>;
 }>;
-export declare const logsCmd: Command.Command<"logs", Cwd | AccountStore | ControlPlaneClient, CliError, {
+export declare const logsCmd: Command.Command<"logs", AccountStore | Cwd | ControlPlaneClient, CliError, {
     readonly limit: number;
     readonly sinceMinutes: number;
     readonly trace: Option.Option<string>;
@@ -152,21 +152,21 @@ export declare function logsBodyForCheckpoint(opts: CpReadOptions, selection: Op
 export declare function logsBodyForStatus(opts: RemoteStatusOptions, selection: OperationProjectSelection): Effect.Effect<void, CliError, AccountStore | ControlPlaneClient | Cwd | Reporter>;
 export declare function routesBodyForStatus(opts: RemoteStatusOptions, selection: OperationProjectSelection): Effect.Effect<void, CliError, AccountStore | ControlPlaneClient | Cwd | Reporter>;
 export declare function driftBodyForStatus(opts: RemoteStatusOptions, selection: OperationProjectSelection): Effect.Effect<void, CliError, AccountStore | ControlPlaneClient | Cwd | Reporter>;
-export declare const routingCmd: Command.Command<"routing" | "route" | "routes", Cwd | AccountStore | ControlPlaneClient, CliError, {
+export declare const routingCmd: Command.Command<"routes" | "routing" | "route", AccountStore | Cwd | ControlPlaneClient, CliError, {
     readonly json: boolean;
     readonly controlPlaneUrl: Option.Option<string>;
     readonly accountId: Option.Option<string>;
     readonly projectId: Option.Option<string>;
     readonly userId: Option.Option<string>;
 }>;
-export declare const routeCmd: Command.Command<"routing" | "route" | "routes", Cwd | AccountStore | ControlPlaneClient, CliError, {
+export declare const routeCmd: Command.Command<"routes" | "routing" | "route", AccountStore | Cwd | ControlPlaneClient, CliError, {
     readonly json: boolean;
     readonly controlPlaneUrl: Option.Option<string>;
     readonly accountId: Option.Option<string>;
     readonly projectId: Option.Option<string>;
     readonly userId: Option.Option<string>;
 }>;
-export declare const routesCmd: Command.Command<"routing" | "route" | "routes", Cwd | AccountStore | ControlPlaneClient, CliError, {
+export declare const routesCmd: Command.Command<"routes" | "routing" | "route", AccountStore | Cwd | ControlPlaneClient, CliError, {
     readonly json: boolean;
     readonly controlPlaneUrl: Option.Option<string>;
     readonly accountId: Option.Option<string>;

package/dist/commands/deploy-promote.d.ts

@@ -8,7 +8,7 @@ import { AccountStore } from '../services/account-store.js';
 import { ControlPlaneClient } from '../services/control-plane.js';
 import { Cwd } from '../services/cwd.js';
 import { CliHttp } from '../services/http.js';
-export declare const promoteCmd: Command.Command<"promote", Cwd | AccountStore | CliHttp | ControlPlaneClient, CliError, {
+export declare const promoteCmd: Command.Command<"promote", AccountStore | Cwd | CliHttp | ControlPlaneClient, CliError, {
     readonly cwd: Option.Option<string>;
     readonly json: boolean;
     readonly deployId: Option.Option<string>;

package/dist/commands/deploy.d.ts

@@ -1,6 +1,6 @@
 import * as Command from '@effect/cli/Command';
 import { type WorkerManifest } from '@hs-x/codegen';
-import type { AppAlertsConfiguration, AppEventBatchingConfiguration, AppEventDeclaration, AppObjectAssociationDeclaration, AppObjectDeclaration, AppRedactionConfiguration, CardDefinition, HubSpotRateLimitConfiguration } from '@hs-x/types';
+import type { AppAlertsConfiguration, AppEventBatchingConfiguration, AppEventDeclaration, AppObjectAssociationDeclaration, AppObjectDeclaration, AppRedactionConfiguration, CardDefinition, HubSpotRateLimitConfiguration, McpServerDefinition } from '@hs-x/types';
 import { Schema, schemas } from '@hs-x/types';
 import type { AppBillingDeclaration } from '@hs-x/types';
 import { Option } from 'effect';
@@ -132,8 +132,10 @@ interface HsxAppConfig {
     readonly alerts?: AppAlertsConfiguration;
     readonly redaction?: AppRedactionConfiguration;
     readonly cards: readonly CardDefinition[];
+    readonly mcpServers: readonly McpServerDefinition[];
     readonly billing?: AppBillingDeclaration;
 }
+export declare function readHsxAppConfig(root: string): Promise<HsxAppConfig>;
 export declare const deployCmd: Command.Command<"deploy", Cwd, import("../cli-error.js").CliError, {
     readonly json: boolean;
     readonly cwd: Option.Option<string>;

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAGL,KAAK,cAAc,EASpB,MAAM,eAAe,CAAC;AAGvB,OAAO,KAAK,EACV,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EAEnB,+BAA+B,EAC/B,oBAAoB,EACpB,yBAAyB,EACzB,cAAc,EACd,6BAA6B,EAC9B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAqB,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAC;AA8CxC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AA+KzC;;;;;;;;;;;;;GAaG;AACH,0EAA0E;AAC1E,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,CAAC,CAiCD;AAED,0EAA0E;AAC1E,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,YAAY,GAAG,SAAS,EACtC,OAAO,CAAC,EAAE,MAAM,GACf,YAAY,CAOd;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACnC,GAAG,OAAO,CAAC,IAAI,CAAC,CAkChB;AAyZD,wBAAsB,aAAa,CAAC,EAClC,IAAI,EACJ,IAAI,EACJ,IAAI,GACL,EAAE;IACD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,SAAS,CAAC,CA2yBrB;AA8kCD,UAAU,4BAA4B;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,4BAA4B,EAAE,CAAC;CAC3D;AAuBD,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;AA0sCpE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,wFAAwF;IACxF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,kFAAkF;IAClF,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,GAAG,MAAM,CA6ET;AAiFD,wBAAsB,oCAAoC,CAAC,EACzD,IAAI,EACJ,IAAI,EACJ,GAAG,EACH,OAAO,EACP,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,aAAa,GACd,EAAE;IACD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACpE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE;YAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;SAAE,CAAC;KACnE,CAAC;IACF,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,OAAO,CAAC,IAAI,CAAC,CA+ChB;AAWD,UAAU,YAAY;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACrD,QAAQ,CAAC,qBAAqB,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAC3E,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACnD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,6BAA6B,GAAG,KAAK,CAAC;IAClE,QAAQ,CAAC,UAAU,CAAC,EAAE,6BAA6B,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAC1C;AAk3DD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAqE,CAAC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAGL,KAAK,cAAc,EASpB,MAAM,eAAe,CAAC;AAGvB,OAAO,KAAK,EACV,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EAEnB,+BAA+B,EAC/B,oBAAoB,EACpB,yBAAyB,EACzB,cAAc,EACd,6BAA6B,EAC7B,mBAAmB,EACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAqB,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAC;AA8CxC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AA+KzC;;;;;;;;;;;;;GAaG;AACH,0EAA0E;AAC1E,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAAC;IACV,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,CAAC,CAiCD;AAED,0EAA0E;AAC1E,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,YAAY,GAAG,SAAS,EACtC,OAAO,CAAC,EAAE,MAAM,GACf,YAAY,CAOd;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACnC,GAAG,OAAO,CAAC,IAAI,CAAC,CAkChB;AAyZD,wBAAsB,aAAa,CAAC,EAClC,IAAI,EACJ,IAAI,EACJ,IAAI,GACL,EAAE;IACD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,SAAS,CAAC,CA4yBrB;AA8kCD,UAAU,4BAA4B;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,4BAA4B,EAAE,CAAC;CAC3D;AAuBD,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;AA0sCpE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,wFAAwF;IACxF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,kFAAkF;IAClF,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,GAAG,MAAM,CA6ET;AA0PD,wBAAsB,oCAAoC,CAAC,EACzD,IAAI,EACJ,IAAI,EACJ,GAAG,EACH,OAAO,EACP,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,aAAa,GACd,EAAE;IACD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACpE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE;YAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;SAAE,CAAC;KACnE,CAAC;IACF,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,OAAO,CAAC,IAAI,CAAC,CAiDhB;AAWD,UAAU,YAAY;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACrD,QAAQ,CAAC,qBAAqB,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAC3E,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACnD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,6BAA6B,GAAG,KAAK,CAAC;IAClE,QAAQ,CAAC,UAAU,CAAC,EAAE,6BAA6B,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAC1C;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA4C1E;AA01DD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAqE,CAAC"}

package/dist/commands/deploy.js

@@ -1,9 +1,9 @@
 import { spawn } from 'node:child_process';
 import { createHash, randomBytes } from 'node:crypto';
-import { cp, mkdir, mkdtemp, readFile, readdir, stat, writeFile } from 'node:fs/promises';
+import { cp, lstat, mkdir, mkdtemp, readFile, readdir, realpath, rename, rmdir, stat, unlink, writeFile, } from 'node:fs/promises';
 import { createServer } from 'node:http';
 import { tmpdir } from 'node:os';
-import { basename, dirname, join, relative, resolve } from 'node:path';
+import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
 import * as Command from '@effect/cli/Command';
 import * as Options from '@effect/cli/Options';
@@ -646,6 +646,7 @@ export async function deployCommand({ argv, root, json, }) {
         projectId = await readHsxConfigProjectId(root);
     }
     const needsRuntime = workers.some((worker) => worker.capabilities.some((capability) => capability.runtimeNeeds.some((need) => need !== 'hubspot-only')));
+    const needsHubSpotBundle = needsRuntime || app.mcpServers.length > 0;
     const cloudflareDeployRequested = !buildOnly &&
         (explicitCloudflareDeployRequested || (!planOnly && needsRuntime && !explicitHubspotUpload));
     const hubspotUploadRequested = !buildOnly && (explicitHubspotUpload || (!planOnly && !cloudflareDryRun && Boolean(projectId)));
@@ -1135,7 +1136,7 @@ export async function deployCommand({ argv, root, json, }) {
     // Default order (skipped when we already uploaded first above): generate the
     // HubSpot bundle from the deployed Worker URL, then upload.
     if (!uploadFirstOrigin && hubspotUploadRequested && validation.ok) {
-        const bundleStep = needsRuntime ? progress?.step('Generating HubSpot bundle') : undefined;
+        const bundleStep = needsHubSpotBundle ? progress?.step('Generating HubSpot bundle') : undefined;
         try {
             await ensureHubSpotRuntimeProjectArtifacts({
                 argv,
@@ -3121,8 +3122,161 @@ async function resolveUploadFirstRuntimeOrigin(input) {
         return undefined;
     }
 }
+const HUBSPOT_GENERATED_LEDGER = '.hs-x/hubspot-generated-files.json';
+const USER_OWNED_GENERATED_PATHS = new Set(['src/app/cards/package.json']);
+function generatedFileHash(contents) {
+    return createHash('sha256').update(contents).digest('hex');
+}
+function isKnownGeneratedHubSpotPath(file) {
+    return (file === 'hsproject.json' ||
+        file === 'src/app/app-hsmeta.json' ||
+        file === 'src/app/cards/package.json' ||
+        file === 'src/app/cards/_hsx-backend.ts' ||
+        /^src\/app\/(?:workflow-actions|app-objects|app-object-associations|app-events|mcp-server|cards)\/[^/]+-hsmeta\.json$/.test(file));
+}
+/** Resolve a ledger path only when it is a known, normalized root-relative artifact. */
+function resolveGeneratedFilePath(root, file) {
+    if (!isKnownGeneratedHubSpotPath(file) || isAbsolute(file) || file.includes('\\')) {
+        return undefined;
+    }
+    const segments = file.split('/');
+    if (segments.some((segment) => segment === '' || segment === '.' || segment === '..')) {
+        return undefined;
+    }
+    const rootPath = resolve(root);
+    const resolved = resolve(rootPath, file);
+    return resolved.startsWith(`${rootPath}/`) ? resolved : undefined;
+}
+async function assertGeneratedPathIsContained(root, path) {
+    const rootRealPath = await realpath(root);
+    let existingAncestor = dirname(path);
+    while (true) {
+        try {
+            const ancestorRealPath = await realpath(existingAncestor);
+            const fromRoot = relative(rootRealPath, ancestorRealPath);
+            if (fromRoot.startsWith('..') || isAbsolute(fromRoot)) {
+                throw new Error(`Generated HubSpot artifact parent escapes the project root: ${path}`);
+            }
+            break;
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+            const parent = dirname(existingAncestor);
+            if (parent === existingAncestor)
+                throw error;
+            existingAncestor = parent;
+        }
+    }
+    const target = await lstat(path).catch((error) => {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    });
+    if (target?.isSymbolicLink()) {
+        throw new Error(`Generated HubSpot artifact path must not be a symbolic link: ${path}`);
+    }
+}
+async function readGeneratedFileLedger(root) {
+    try {
+        const parsed = JSON.parse(await readFile(join(root, HUBSPOT_GENERATED_LEDGER), 'utf8'));
+        if (typeof parsed !== 'object' ||
+            parsed === null ||
+            parsed.version !== 1 ||
+            typeof parsed.files !== 'object' ||
+            parsed.files === null) {
+            return { version: 1, files: {} };
+        }
+        const files = {};
+        for (const [file, hash] of Object.entries(parsed.files)) {
+            if (resolveGeneratedFilePath(root, file) && /^[a-f0-9]{64}$/.test(String(hash))) {
+                files[file] = String(hash);
+            }
+        }
+        return { version: 1, files };
+    }
+    catch {
+        // No heuristic cleanup for projects that predate the ledger, or for a
+        // malformed ledger. Generation can safely establish a fresh ledger.
+        return { version: 1, files: {} };
+    }
+}
+async function pruneEmptyGeneratedDirectories(root, from) {
+    const rootPath = resolve(root);
+    let directory = resolve(from);
+    while (directory !== rootPath && directory.startsWith(`${rootPath}/`)) {
+        try {
+            if ((await readdir(directory)).length > 0)
+                return;
+            await rmdir(directory);
+        }
+        catch {
+            return;
+        }
+        directory = dirname(directory);
+    }
+}
+async function reconcileHubSpotRuntimeProjectFiles(root, generatedFiles, options = {}) {
+    const previous = await readGeneratedFileLedger(root);
+    const generatedPaths = new Set(Object.keys(generatedFiles));
+    const nextFiles = {};
+    for (const [file, expectedHash] of Object.entries(previous.files)) {
+        if (generatedPaths.has(file) || USER_OWNED_GENERATED_PATHS.has(file))
+            continue;
+        if (options.preservePrevious?.(file)) {
+            nextFiles[file] = expectedHash;
+            continue;
+        }
+        const path = resolveGeneratedFilePath(root, file);
+        if (!path)
+            continue;
+        try {
+            await assertGeneratedPathIsContained(root, path);
+            const current = await readFile(path);
+            if (generatedFileHash(current) !== expectedHash)
+                continue;
+            await unlink(path);
+            await pruneEmptyGeneratedDirectories(root, dirname(path));
+        }
+        catch {
+            // Missing and non-file paths are preserved; only a byte-for-byte owned
+            // regular file is eligible for removal.
+        }
+    }
+    for (const [file, contents] of Object.entries(generatedFiles)) {
+        const path = resolveGeneratedFilePath(root, file);
+        if (!path)
+            throw new Error(`Generated HubSpot artifact has an unsafe path: ${file}`);
+        await assertGeneratedPathIsContained(root, path);
+        // HubSpot tells card authors to add dependencies here. Once created, this
+        // file is user-owned and is deliberately never entered in the ledger.
+        if (USER_OWNED_GENERATED_PATHS.has(file)) {
+            if (!(await stat(path).catch(() => undefined))) {
+                await mkdir(dirname(path), { recursive: true });
+                await writeFile(path, contents);
+            }
+            continue;
+        }
+        await mkdir(dirname(path), { recursive: true });
+        await writeFile(path, contents);
+        nextFiles[file] = generatedFileHash(contents);
+    }
+    const ledgerPath = join(root, HUBSPOT_GENERATED_LEDGER);
+    await assertGeneratedPathIsContained(root, ledgerPath);
+    await mkdir(dirname(ledgerPath), { recursive: true });
+    const temporaryLedgerPath = `${ledgerPath}.${process.pid}.${randomBytes(6).toString('hex')}.tmp`;
+    await writeFile(temporaryLedgerPath, `${JSON.stringify({ version: 1, files: nextFiles }, null, 2)}\n`);
+    await rename(temporaryLedgerPath, ledgerPath);
+}
 export async function ensureHubSpotRuntimeProjectArtifacts({ argv, root, app, workers, cloudflareDeployResult, needsRuntime, controlPlanePlan, runtimeOrigin, }) {
-    if (!needsRuntime) {
+    const hasMcpServers = app.mcpServers.length > 0;
+    if (!needsRuntime && !hasMcpServers) {
+        // A prior MCP-only generation may have left ledger-owned MCP files. Remove
+        // those declarations, but retain other generated metadata: a display-only
+        // card or schema declaration remains valid when its runtime worker is gone.
+        await reconcileHubSpotRuntimeProjectFiles(root, {}, {
+            preservePrevious: (file) => !file.startsWith('src/app/mcp-server/'),
+        });
         return;
     }
     const runtimeBaseUrl = runtimeOrigin ??
@@ -3135,26 +3289,17 @@ export async function ensureHubSpotRuntimeProjectArtifacts({ argv, root, app, wo
     const redirectUrls = app.auth === 'oauth' && oauthCallbackPath
         ? [`${runtimeBaseUrl.replace(/\/$/, '')}${oauthCallbackPath}`]
         : [];
+    const platformVersion = resolveFlag(argv, '--platform-version') ?? app.platformVersion;
     const generated = generateHubSpotRuntimeProject({
         ...app,
+        platformVersion,
         workers,
         runtimeBaseUrl,
         redirectUrls,
     });
-    for (const [file, contents] of Object.entries(generated.files)) {
-        const path = join(root, file);
-        // src/app/cards/package.json is user-owned once it exists: HubSpot's own
-        // build errors instruct users to add card dependencies (e.g. hs-uix) to
-        // it, and regenerating the fixed-dep version here silently dropped those
-        // deps so the card never built (cold-stranger run #2 blocker B). Keep the
-        // user's file verbatim; only generate one when absent.
-        if (file === 'src/app/cards/package.json' && (await stat(path).catch(() => undefined))) {
-            continue;
-        }
-        await mkdir(dirname(path), { recursive: true });
-        await writeFile(path, contents);
-    }
+    await reconcileHubSpotRuntimeProjectFiles(root, generated.files);
     const migratedShimPath = join(root, 'src', 'app', 'cards', '_hsx-migration-run-serverless.ts');
+    await assertGeneratedPathIsContained(root, migratedShimPath);
     if (await stat(migratedShimPath).catch(() => undefined)) {
         const migratedShim = await readFile(migratedShimPath, 'utf8');
         await writeFile(migratedShimPath, stampMigratedRunServerlessShimOrigin(migratedShim, runtimeBaseUrl));
@@ -3169,9 +3314,19 @@ async function readHsxAppScopesForDeploy(root) {
         return [];
     }
 }
-async function readHsxAppConfig(root) {
+export async function readHsxAppConfig(root) {
     const raw = await readFile(join(root, 'hsx.config.ts'), 'utf8');
-    const loaded = parseHsxAppConfigLiteral(raw) ?? (await loadHsxAppConfigModule(root).catch(() => undefined));
+    let loaded = parseHsxAppConfigLiteral(raw);
+    if (!loaded) {
+        try {
+            loaded = await loadHsxAppConfigModule(root);
+        }
+        catch (error) {
+            if (/\bmcpServer\s*\(|\bmcpServers\b/.test(raw)) {
+                throw new Error('Could not evaluate helper-based MCP declarations in hsx.config.ts; refusing to treat the declaration set as empty because that could remove generated MCP metadata.', { cause: error });
+            }
+        }
+    }
     return {
         appName: loaded?.name ?? /name\s*:\s*["'`]([^"'`]+)["'`]/.exec(raw)?.[1] ?? basename(root),
         // No regex fallback for description: a raw-text match could pick up a
@@ -3193,9 +3348,10 @@ async function readHsxAppConfig(root) {
         ...(loaded?.rateLimits !== undefined ? { rateLimits: loaded.rateLimits } : {}),
         ...(loaded?.alerts !== undefined ? { alerts: loaded.alerts } : {}),
         ...(loaded?.redaction !== undefined ? { redaction: loaded.redaction } : {}),
-        // Cards are only recoverable from the loaded module (the literal parser
-        // can't evaluate `card(...)` calls); an unloadable config yields none.
+        // Helper-based declarations are only recoverable from the loaded module
+        // (the literal parser cannot evaluate card(...) or mcpServer(...) calls).
         cards: loaded?.cards ?? [],
+        mcpServers: loaded?.mcpServers ?? [],
         ...(loaded?.billing ? { billing: loaded.billing } : {}),
     };
 }
@@ -3527,11 +3683,13 @@ async function executeHubSpotOnlyUpload({ argv, root, local, uploadOnly, }) {
         cwd: root,
     });
     await client.projects.ensureProject({ projectName });
+    const hsproject = await readHubSpotProjectConfig(root);
+    const configuredPlatformVersion = typeof hsproject.platformVersion === 'string' ? hsproject.platformVersion : undefined;
     const upload = await client.projects.upload({
         projectName,
         archivePath,
         message: resolveFlag(argv, '--message') ?? 'HS-X HubSpot-only deploy',
-        platformVersion: resolveFlag(argv, '--platform-version') ?? '2026.03',
+        platformVersion: resolveFlag(argv, '--platform-version') ?? configuredPlatformVersion ?? '2026.03',
         intermediateRepresentation,
     });
     const buildStatus = await waitForHubSpotBuildStatus({