@revfleet/hscli 0.5.3

package/dist/core/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/core/output.ts"],"names":[],"mappings":"AAgBA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAExB;IAEA;IACA;IAJT,YACS,IAAY,EACnB,OAAe,EACR,MAAe,EACf,OAAiB;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QALR,SAAI,GAAJ,IAAI,CAAQ;QAEZ,WAAM,GAAN,MAAM,CAAS;QACf,YAAO,GAAP,OAAO,CAAU;IAG1B,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AAC/G,MAAM,cAAc,GAAG,8BAA8B,CAAC;AACtD,MAAM,iCAAiC,GAAG,0BAA0B,CAAC;AACrE,MAAM,0BAA0B,GAAG;IACjC,wHAAwH;IACxH,yGAAyG;CAC1G,CAAC;AAEF,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IAClE,KAAK,MAAM,OAAO,IAAI,0BAA0B,EAAE,CAAC;QACjD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;IAClF,CAAC;IACD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,iCAAiC,EAAE,YAAY,CAAC,CAAC;IAC7E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAI,KAAQ;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAExD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,KAAK,CAAM,CAAC;IAClC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAM,CAAC;IACzD,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC5E,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,GAAQ,CAAC;IAClB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAe,EAAE,IAAa;IACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC;IAEnE,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;QAC7B,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7B,OAAO;IACT,CAAC;IACD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAe,EAAE,GAAY;IACtD,MAAM,CAAC,GAAG,GAAG,YAAY,QAAQ;QAC/B,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,QAAQ,CAAC,kBAAkB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAEvF,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAE/C,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC;IAEnE,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/I,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,IAAI,WAAW;YAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;aAC1E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAA+B,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,MAAM,CAAC,OAAO;iBAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;iBAC1E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAA+B,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,IAAa;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAExC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAClC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CACtF,CAAC,CAAC;IACH,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,KAAK,CAAC,IAAa;IAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE;QACvC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACzF,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC;IAC5C,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACjD,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KACrF,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,MAAM,CAAC,IAAa,EAAE,MAAM,GAAG,CAAC;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IACjC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/E,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAE5D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACvB,IAAI,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,GAAG,OAAO,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;YACxC,OAAO,GAAG,OAAO,MAAM,MAAM,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,GAAG,OAAO,GAAG,OAAO,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9D,CAAC;QACD,OAAO,GAAG,OAAO,GAAG,OAAO,MAAM,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC;AACvI,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/core/permissions.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Check if the given profile is configured as read-only.
+ */
+export declare function isReadOnlyProfile(profile: string): boolean;
+/**
+ * Enforce permission profile before executing an HTTP request.
+ * Throws if the profile is read-only and the method is a write operation.
+ */
+export declare function enforcePermissionProfile(profile: string, method: string): void;

package/dist/core/permissions.js

@@ -0,0 +1,27 @@
+import { getProfile } from "./auth.js";
+import { CliError } from "./output.js";
+const WRITE_METHODS = new Set(["POST", "PATCH", "PUT", "DELETE"]);
+/**
+ * Check if the given profile is configured as read-only.
+ */
+export function isReadOnlyProfile(profile) {
+    try {
+        const data = getProfile(profile);
+        return data.mode === "read-only";
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Enforce permission profile before executing an HTTP request.
+ * Throws if the profile is read-only and the method is a write operation.
+ */
+export function enforcePermissionProfile(profile, method) {
+    if (!WRITE_METHODS.has(method))
+        return;
+    if (!isReadOnlyProfile(profile))
+        return;
+    throw new CliError("PERMISSION_DENIED", `Profile '${profile}' is configured as read-only. Write operations (${method}) are not allowed. Use 'hubcli auth set-mode ${profile} read-write' to enable writes.`);
+}
+//# sourceMappingURL=permissions.js.map

package/dist/core/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/core/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElE;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,MAAc;IACtE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO;IACvC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAAE,OAAO;IAExC,MAAM,IAAI,QAAQ,CAChB,mBAAmB,EACnB,YAAY,OAAO,mDAAmD,MAAM,gDAAgD,OAAO,gCAAgC,CACpK,CAAC;AACJ,CAAC"}

package/dist/core/plugins.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Plugin system for hubcli.
+ *
+ * Plugins are discovered from:
+ * 1. HSCLI_PLUGINS env var (comma-separated paths or package names)
+ * 2. node_modules packages with "hubcli-plugin" in keywords
+ *
+ * Each plugin must export: register(program: Command, context: PluginContext)
+ */
+import { Command } from "commander";
+import { CliError, printResult, printError, type CliContext } from "./output.js";
+import { maybeWrite } from "../commands/crm/shared.js";
+import type { HubSpotClient } from "./http.js";
+/**
+ * Context provided to plugins — gives access to core utilities
+ * without requiring knowledge of internal import paths.
+ */
+export interface PluginContext {
+    /** Get the current CLI context (profile, flags, etc). Call inside .action(), not at registration time. */
+    getCtx: () => CliContext;
+    /** Create an authenticated HubSpot API client for a profile. */
+    createClient: (profile: string) => HubSpotClient;
+    /** Print a successful result to stdout. */
+    printResult: typeof printResult;
+    /** Print an error to stderr. */
+    printError: typeof printError;
+    /** Structured CLI error constructor. */
+    CliError: typeof CliError;
+    /** Write-safe helper: enforces --dry-run, --force, and --policy-file gates. */
+    maybeWrite: typeof maybeWrite;
+}
+/**
+ * The contract a plugin package must satisfy.
+ */
+export interface HubcliPlugin {
+    register(program: Command, context: PluginContext): void | Promise<void>;
+}
+/**
+ * Load and register all discovered plugins.
+ * Plugin failures are logged to stderr but never crash the CLI.
+ */
+export declare function loadPlugins(program: Command, getCtx: () => CliContext): Promise<void>;

package/dist/core/plugins.js

@@ -0,0 +1,94 @@
+import { readdirSync, readFileSync } from "node:fs";
+import { resolve, join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { createClient } from "./http.js";
+import { CliError, printResult, printError } from "./output.js";
+import { maybeWrite } from "../commands/crm/shared.js";
+/**
+ * Discover plugin package names from node_modules with "hubcli-plugin" keyword.
+ */
+function discoverFromNodeModules() {
+    const pkgRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
+    const nmDir = join(pkgRoot, "node_modules");
+    try {
+        return readdirSync(nmDir, { withFileTypes: true })
+            .filter((d) => d.isDirectory() && !d.name.startsWith("."))
+            .flatMap((d) => {
+            // Handle scoped packages (@scope/pkg)
+            if (d.name.startsWith("@")) {
+                try {
+                    return readdirSync(join(nmDir, d.name), { withFileTypes: true })
+                        .filter((sd) => sd.isDirectory())
+                        .map((sd) => `${d.name}/${sd.name}`);
+                }
+                catch {
+                    return [];
+                }
+            }
+            return [d.name];
+        })
+            .filter((name) => {
+            try {
+                const pj = JSON.parse(readFileSync(join(nmDir, name, "package.json"), "utf8"));
+                return Array.isArray(pj.keywords) && pj.keywords.includes("hubcli-plugin");
+            }
+            catch {
+                return false;
+            }
+        });
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Discover plugin specifiers from HSCLI_PLUGINS env var.
+ */
+function discoverFromEnv() {
+    const raw = process.env.HSCLI_PLUGINS?.trim();
+    if (!raw)
+        return [];
+    return raw.split(",").map((s) => s.trim()).filter(Boolean);
+}
+/**
+ * Resolve a specifier to an importable path.
+ */
+function resolveSpecifier(specifier) {
+    if (specifier.startsWith(".") || specifier.startsWith("/")) {
+        return resolve(process.cwd(), specifier);
+    }
+    return specifier;
+}
+/**
+ * Load and register all discovered plugins.
+ * Plugin failures are logged to stderr but never crash the CLI.
+ */
+export async function loadPlugins(program, getCtx) {
+    const context = {
+        getCtx,
+        createClient,
+        printResult,
+        printError,
+        CliError,
+        maybeWrite,
+    };
+    const specifiers = [...new Set([...discoverFromEnv(), ...discoverFromNodeModules()])];
+    if (specifiers.length === 0)
+        return;
+    for (const raw of specifiers) {
+        const specifier = resolveSpecifier(raw);
+        try {
+            const mod = await import(specifier);
+            const plugin = mod.default ?? mod;
+            if (typeof plugin.register !== "function") {
+                console.error(`[plugin] ${raw}: missing register() function, skipping`);
+                continue;
+            }
+            await plugin.register(program, context);
+        }
+        catch (err) {
+            console.error(`[plugin] Failed to load '${raw}': ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+}
+//# sourceMappingURL=plugins.js.map

package/dist/core/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../src/core/plugins.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAmB,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AA6BvD;;GAEG;AACH,SAAS,uBAAuB;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;aACzD,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACb,sCAAsC;YACtC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;yBAC7D,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;yBAChC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC/E,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,SAAiB;IACzC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,MAAwB;IAC1E,MAAM,OAAO,GAAkB;QAC7B,MAAM;QACN,YAAY;QACZ,WAAW;QACX,UAAU;QACV,QAAQ;QACR,UAAU;KACX,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,EAAE,EAAE,GAAG,uBAAuB,EAAE,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEpC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,MAAM,GAAiB,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;YAChD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC1C,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,yCAAyC,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/core/policy.d.ts

@@ -0,0 +1,2 @@
+import type { CliContext } from "./output.js";
+export declare function enforceWritePolicy(ctx: CliContext, method: "POST" | "PATCH" | "PUT" | "DELETE", path: string): void;

package/dist/core/policy.js

@@ -0,0 +1,38 @@
+import { existsSync, readFileSync } from "node:fs";
+import { CliError } from "./output.js";
+function readPolicyFile(path) {
+    if (!existsSync(path)) {
+        throw new CliError("POLICY_FILE_NOT_FOUND", `Policy file not found: ${path}`);
+    }
+    try {
+        return JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch {
+        throw new CliError("POLICY_INVALID_JSON", `Invalid policy JSON: ${path}`);
+    }
+}
+export function enforceWritePolicy(ctx, method, path) {
+    const policyPath = ctx.policyFile?.trim() || process.env.HSCLI_POLICY_FILE?.trim();
+    if (!policyPath)
+        return;
+    const config = readPolicyFile(policyPath);
+    const profileRule = config.profiles?.[ctx.profile] ?? {};
+    const defaults = config.defaults ?? {};
+    const allowWrite = profileRule.allowWrite ?? defaults.allowWrite ?? true;
+    const allowDelete = profileRule.allowDelete ?? defaults.allowDelete ?? false;
+    const requireChangeTicket = profileRule.requireChangeTicket ?? defaults.requireChangeTicket ?? false;
+    if (!allowWrite) {
+        throw new CliError("POLICY_WRITE_BLOCKED", `Policy blocks write operations for profile '${ctx.profile}'.`);
+    }
+    if (method === "DELETE" && !allowDelete) {
+        throw new CliError("POLICY_DELETE_BLOCKED", `Policy blocks delete operations for profile '${ctx.profile}'.`);
+    }
+    if (requireChangeTicket && !ctx.changeTicket?.trim()) {
+        throw new CliError("POLICY_CHANGE_TICKET_REQUIRED", `Profile '${ctx.profile}' requires --change-ticket for write operations.`);
+    }
+    const blockedPrefixes = config.blockedMethodPathPrefixes?.[method] ?? [];
+    if (blockedPrefixes.some((prefix) => path.startsWith(prefix))) {
+        throw new CliError("POLICY_PATH_BLOCKED", `Policy blocks ${method} on path '${path}'.`);
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/core/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/core/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAcvC,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,0BAA0B,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,wBAAwB,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAe,EAAE,MAA2C,EAAE,IAAY;IAC3G,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACnF,IAAI,CAAC,UAAU;QAAE,OAAO;IAExB,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAe,MAAM,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAe,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC;IACzE,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,IAAI,KAAK,CAAC;IAC7E,MAAM,mBAAmB,GAAG,WAAW,CAAC,mBAAmB,IAAI,QAAQ,CAAC,mBAAmB,IAAI,KAAK,CAAC;IAErG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,+CAA+C,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,gDAAgD,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,mBAAmB,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,+BAA+B,EAAE,YAAY,GAAG,CAAC,OAAO,kDAAkD,CAAC,CAAC;IACjI,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,yBAAyB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACzE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,iBAAiB,MAAM,aAAa,IAAI,IAAI,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC"}

package/dist/core/schema-cache.d.ts

@@ -0,0 +1,56 @@
+export interface CrmPropertyOption {
+    label: string;
+    value: string;
+}
+export interface CrmPropertySchema {
+    name: string;
+    label: string;
+    type: string;
+    fieldType?: string;
+    required: boolean;
+    options: CrmPropertyOption[];
+}
+export interface CrmPipelineSchema {
+    id: string;
+    label: string;
+    stages: Array<{
+        id: string;
+        label: string;
+    }>;
+}
+export interface CrmAssociationLabelSchema {
+    category?: string;
+    typeId?: number;
+    label: string;
+}
+export interface CrmObjectSchema {
+    objectType: string;
+    fetchedAt: string;
+    properties: CrmPropertySchema[];
+    pipelines: CrmPipelineSchema[];
+    associationLabels: Record<string, CrmAssociationLabelSchema[]>;
+}
+export interface LoadCrmObjectSchemaOptions {
+    profile: string;
+    token: string;
+    objectType: string;
+    offline?: boolean;
+    refresh?: boolean;
+    ttlMs?: number;
+}
+export interface LoadedCrmObjectSchema {
+    source: "cache" | "api";
+    stale?: boolean;
+    schema: CrmObjectSchema;
+}
+export interface PayloadValidationIssue {
+    field: string;
+    message: string;
+}
+export interface PayloadValidationResult {
+    valid: boolean;
+    errors: PayloadValidationIssue[];
+    warnings: PayloadValidationIssue[];
+}
+export declare function loadCrmObjectSchema(options: LoadCrmObjectSchemaOptions): Promise<LoadedCrmObjectSchema>;
+export declare function validateCrmPayload(schema: CrmObjectSchema, payload: Record<string, unknown>): PayloadValidationResult;

package/dist/core/schema-cache.js

@@ -0,0 +1,338 @@
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { getHubcliHomeDir, getProfile, getApiBaseUrl } from "./auth.js";
+import { HubSpotClient } from "./http.js";
+import { CliError } from "./output.js";
+const SCHEMA_CACHE_VERSION = 1;
+const SCHEMA_CACHE_FILENAME = "schema-cache.json";
+const DEFAULT_SCHEMA_CACHE_TTL_MS = 24 * 60 * 60 * 1000;
+const ASSOCIATION_OBJECT_TYPES = ["contacts", "companies", "deals", "tickets", "notes", "calls", "tasks", "emails", "meetings"];
+export async function loadCrmObjectSchema(options) {
+    const objectType = options.objectType.trim().toLowerCase();
+    if (!objectType) {
+        throw new CliError("SCHEMA_OBJECT_TYPE_REQUIRED", "objectType cannot be empty");
+    }
+    const ttlMs = options.ttlMs && options.ttlMs > 0 ? options.ttlMs : DEFAULT_SCHEMA_CACHE_TTL_MS;
+    const portalId = resolvePortalId(options.profile);
+    const key = buildSchemaCacheKey(options.profile, objectType, portalId);
+    const cache = readSchemaCache();
+    const existing = cache.entries.find((entry) => entry.key === key);
+    if (options.offline) {
+        if (!existing) {
+            throw new CliError("SCHEMA_CACHE_MISS", `No cached schema found for '${objectType}'. Run 'hubcli crm describe ${objectType}' online first.`);
+        }
+        return {
+            source: "cache",
+            stale: isExpired(existing.expiresAt),
+            schema: existing.schema,
+        };
+    }
+    if (existing && !options.refresh && !isExpired(existing.expiresAt)) {
+        return {
+            source: "cache",
+            schema: existing.schema,
+        };
+    }
+    try {
+        const schema = await fetchCrmObjectSchema({
+            profile: options.profile,
+            token: options.token,
+            objectType,
+        });
+        const nowIso = new Date().toISOString();
+        const updated = {
+            key,
+            profile: options.profile,
+            portalId,
+            objectType,
+            fetchedAt: nowIso,
+            expiresAt: new Date(Date.now() + ttlMs).toISOString(),
+            schema,
+        };
+        if (existing) {
+            const index = cache.entries.findIndex((entry) => entry.key === key);
+            cache.entries[index] = updated;
+        }
+        else {
+            cache.entries.push(updated);
+        }
+        writeSchemaCache(cache);
+        return {
+            source: "api",
+            schema,
+        };
+    }
+    catch (error) {
+        if (existing) {
+            return {
+                source: "cache",
+                stale: true,
+                schema: existing.schema,
+            };
+        }
+        throw error;
+    }
+}
+export function validateCrmPayload(schema, payload) {
+    const errors = [];
+    const warnings = [];
+    const propertiesValue = payload.properties ?? payload;
+    if (!propertiesValue || typeof propertiesValue !== "object" || Array.isArray(propertiesValue)) {
+        errors.push({ field: "properties", message: "Payload must be an object or include a 'properties' object." });
+        return { valid: false, errors, warnings };
+    }
+    const provided = propertiesValue;
+    const index = new Map(schema.properties.map((property) => [property.name, property]));
+    for (const property of schema.properties) {
+        if (!property.required)
+            continue;
+        if (!(property.name in provided)) {
+            errors.push({ field: property.name, message: "Required property is missing." });
+        }
+    }
+    for (const [field, value] of Object.entries(provided)) {
+        const property = index.get(field);
+        if (!property) {
+            warnings.push({ field, message: "Property not found in local schema cache (cache may be stale)." });
+            continue;
+        }
+        if (property.options.length > 0 && value !== undefined && value !== null) {
+            const allowed = new Set(property.options.map((option) => option.value));
+            const submittedValues = normalizeCandidateValues(value);
+            for (const candidate of submittedValues) {
+                if (!allowed.has(candidate)) {
+                    errors.push({
+                        field,
+                        message: `Value '${candidate}' is not allowed. Allowed: ${Array.from(allowed).join(", ")}`,
+                    });
+                }
+            }
+        }
+    }
+    return { valid: errors.length === 0, errors, warnings };
+}
+async function fetchCrmObjectSchema(options) {
+    const client = new HubSpotClient(options.token, { profile: options.profile, apiBaseUrl: getApiBaseUrl(options.profile) });
+    const objectTypeSegment = encodePathSegment(options.objectType, "objectType");
+    const propertiesResponse = await client.request(`/crm/v3/properties/${objectTypeSegment}`);
+    const properties = parseProperties(propertiesResponse);
+    const pipelines = await maybeLoadPipelines(client, objectTypeSegment, options.objectType);
+    const associationLabels = await loadAssociationLabels(client, objectTypeSegment, options.objectType);
+    return {
+        objectType: options.objectType,
+        fetchedAt: new Date().toISOString(),
+        properties,
+        pipelines,
+        associationLabels,
+    };
+}
+async function maybeLoadPipelines(client, objectTypeSegment, objectType) {
+    if (objectType !== "deals" && objectType !== "tickets") {
+        return [];
+    }
+    try {
+        const response = await client.request(`/crm/v3/pipelines/${objectTypeSegment}`);
+        return parsePipelines(response);
+    }
+    catch (error) {
+        if (error instanceof CliError && (error.status === 403 || error.status === 404)) {
+            return [];
+        }
+        throw error;
+    }
+}
+async function loadAssociationLabels(client, fromObjectTypeSegment, fromObjectType) {
+    const output = {};
+    for (const toObjectType of ASSOCIATION_OBJECT_TYPES) {
+        const toObjectTypeSegment = encodePathSegment(toObjectType, "toObjectType");
+        try {
+            const response = await client.request(`/crm/v4/associations/${fromObjectTypeSegment}/${toObjectTypeSegment}/labels`);
+            output[toObjectType] = parseAssociationLabels(response);
+        }
+        catch (error) {
+            if (error instanceof CliError && (error.status === 403 || error.status === 404)) {
+                output[toObjectType] = [];
+                continue;
+            }
+            if (error instanceof CliError && error.code === "UNSUPPORTED_OBJECT_TYPE" && fromObjectType !== toObjectType) {
+                output[toObjectType] = [];
+                continue;
+            }
+            throw error;
+        }
+    }
+    return output;
+}
+function parseProperties(payload) {
+    return asResultArray(payload).map((item) => {
+        const name = asString(item.name) || "";
+        const label = asString(item.label) || name;
+        const type = asString(item.type) || "string";
+        const fieldType = asString(item.fieldType) || undefined;
+        const required = typeof item.required === "boolean" ? item.required : false;
+        const options = Array.isArray(item.options)
+            ? item.options
+                .map((value) => {
+                const record = asRecord(value);
+                const optionValue = asString(record.value);
+                if (!optionValue)
+                    return undefined;
+                return {
+                    label: asString(record.label) || optionValue,
+                    value: optionValue,
+                };
+            })
+                .filter((value) => Boolean(value))
+            : [];
+        return {
+            name,
+            label,
+            type,
+            fieldType,
+            required,
+            options,
+        };
+    }).filter((property) => property.name.length > 0);
+}
+function parsePipelines(payload) {
+    return asResultArray(payload).map((item) => {
+        const id = asString(item.id) || "";
+        const label = asString(item.label) || id;
+        const stages = Array.isArray(item.stages)
+            ? item.stages
+                .map((stage) => {
+                const record = asRecord(stage);
+                const stageId = asString(record.id);
+                if (!stageId)
+                    return undefined;
+                return {
+                    id: stageId,
+                    label: asString(record.label) || stageId,
+                };
+            })
+                .filter((stage) => Boolean(stage))
+            : [];
+        return { id, label, stages };
+    }).filter((pipeline) => pipeline.id.length > 0);
+}
+function parseAssociationLabels(payload) {
+    return asResultArray(payload).map((item) => {
+        const typeIdValue = item.typeId;
+        const typeId = typeof typeIdValue === "number"
+            ? typeIdValue
+            : (typeof typeIdValue === "string" && Number.isFinite(Number(typeIdValue)) ? Number(typeIdValue) : undefined);
+        return {
+            category: asString(item.category) || undefined,
+            typeId,
+            label: asString(item.label) || "",
+        };
+    }).filter((label) => label.label.length > 0);
+}
+function normalizeCandidateValues(value) {
+    if (Array.isArray(value)) {
+        return value
+            .map((item) => (typeof item === "string" ? item.trim() : String(item)))
+            .filter(Boolean);
+    }
+    if (typeof value === "string") {
+        if (value.includes(";")) {
+            return value.split(";").map((item) => item.trim()).filter(Boolean);
+        }
+        return [value.trim()].filter(Boolean);
+    }
+    return [String(value)];
+}
+function asResultArray(payload) {
+    if (Array.isArray(payload)) {
+        return payload.map((item) => asRecord(item));
+    }
+    const record = asRecord(payload);
+    if (Array.isArray(record.results)) {
+        return record.results.map((item) => asRecord(item));
+    }
+    return [];
+}
+function asRecord(value) {
+    if (value && typeof value === "object" && !Array.isArray(value)) {
+        return value;
+    }
+    return {};
+}
+function asString(value) {
+    if (typeof value === "string")
+        return value;
+    if (typeof value === "number" || typeof value === "boolean")
+        return String(value);
+    return undefined;
+}
+function buildSchemaCacheKey(profile, objectType, portalId) {
+    return `${profile.trim()}|${portalId?.trim() || "unknown"}|${objectType.trim().toLowerCase()}`;
+}
+function resolvePortalId(profile) {
+    try {
+        const value = getProfile(profile).portalId?.trim();
+        return value || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isExpired(expiresAt) {
+    const parsed = Date.parse(expiresAt);
+    if (!Number.isFinite(parsed))
+        return true;
+    return parsed <= Date.now();
+}
+function schemaCachePaths() {
+    const dir = getHubcliHomeDir();
+    return { dir, file: join(dir, SCHEMA_CACHE_FILENAME) };
+}
+function readSchemaCache() {
+    const { file } = schemaCachePaths();
+    if (!existsSync(file)) {
+        return { version: SCHEMA_CACHE_VERSION, entries: [] };
+    }
+    try {
+        const parsed = JSON.parse(readFileSync(file, "utf8"));
+        if (parsed.version !== SCHEMA_CACHE_VERSION || !Array.isArray(parsed.entries)) {
+            return { version: SCHEMA_CACHE_VERSION, entries: [] };
+        }
+        return {
+            version: SCHEMA_CACHE_VERSION,
+            entries: parsed.entries,
+        };
+    }
+    catch {
+        return { version: SCHEMA_CACHE_VERSION, entries: [] };
+    }
+}
+function writeSchemaCache(cache) {
+    const { dir, file } = schemaCachePaths();
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    if (process.platform !== "win32") {
+        chmodSync(dir, 0o700);
+    }
+    writeFileSync(file, JSON.stringify(cache, null, 2), { mode: 0o600 });
+    if (process.platform !== "win32") {
+        chmodSync(file, 0o600);
+    }
+}
+// eslint-disable-next-line no-control-regex
+const CONTROL_CHAR_PATTERN = /[\x00-\x1f\x7f]/;
+function encodePathSegment(raw, segmentName) {
+    const value = raw?.trim();
+    if (!value) {
+        throw new CliError("INVALID_PATH_SEGMENT", `${segmentName} cannot be empty`);
+    }
+    if (CONTROL_CHAR_PATTERN.test(value)) {
+        throw new CliError("INVALID_PATH_SEGMENT", `${segmentName} must not contain control characters`);
+    }
+    if (value.includes("/") || value.includes("\\")) {
+        throw new CliError("INVALID_PATH_SEGMENT", `${segmentName} must not contain path separators`);
+    }
+    if (value === "." || value === "..") {
+        throw new CliError("INVALID_PATH_SEGMENT", `${segmentName} cannot be '.' or '..'`);
+    }
+    return encodeURIComponent(value);
+}
+//# sourceMappingURL=schema-cache.js.map