@revfleet/hscli 0.8.10 → 0.8.12

package/docs/MCP.md

@@ -138,6 +138,7 @@ If your client accepts env vars, set:
 - `crm_properties_list`
 - `crm_properties_get`
 - `crm_properties_create` *(write, dry-run by default)*
+- `crm_properties_batch_create` *(write, dry-run by default; supports custom object type IDs, reserved-name skips, option cleanup, empty-enum demotion/skip)*
 - `crm_properties_update` *(write, dry-run by default)*
 
 ### Associations

package/docs/OPERATIONAL_PLAYBOOKS.md

@@ -78,7 +78,7 @@ cat /tmp/ratelimit-check.jsonl
 
 ### Mitigation
 1. **Stop batch operations** immediately
-2. **Wait for reset**: daily quota resets at UTC midnight
+2. **Wait for reset**: daily quota resets at midnight in the portal's time zone
 3. **Reduce batch sizes**: use `--limit 10` instead of `--limit 100`
 4. **Space out requests**: add delays between sync pull runs
 

package/docs/PORTAL_SETUP.md

@@ -153,7 +153,8 @@ Install the HubSpot tracking code on your website:
 3. Assign a permission set (determines what they can do)
 4. Users receive an email invitation and must accept
 
-> **API:** Yes — `settings.users.read/write` scopes. The User Provisioning API (`/settings/v3/users`) supports inviting and managing users.
+> **API:** Yes — `settings.users.read/write` scopes. The User Provisioning API (`/settings/v3/users`) supports inviting and managing users. Permission sets are available through an internal HubSpot session-auth endpoint in hscli:
+> `hscli settings permission-sets create --portal-id <id> --cookie-file cookies.txt --csrf <token> --data '{...}' --force`.
 
 ### 3.2 Create Teams
 
@@ -657,7 +658,7 @@ hscli crm deals search --data '{"filterGroups":[], "limit": 1}' --json 2>/dev/nu
 | Email auth | DKIM, SPF | None (DNS manual) | — |
 | Tracking code | JS snippet | Push events only | — |
 | Privacy/consent | GDPR, cookie banner | Partial | — |
-| Users | Invite, permissions | Full CRUD | — |
+| Users | Invite, permissions | Full CRUD; permission sets require session auth | `hscli settings users list`, `hscli settings permission-sets list` |
 | Owners | List portal owners | Read | `hscli crm owners list` |
 | Properties | Object fields | Full CRUD | `hscli crm properties list/create/update` |
 | Pipelines | Deal/ticket stages | Full CRUD | `hscli crm pipelines list/get` |

package/docs/SAFETY_MODEL.md

@@ -22,6 +22,9 @@
 - Retry on: `429`, `5xx`, and network errors.
 - Honor `Retry-After` header when present.
 - Use capped exponential backoff.
+- Share observed HubSpot rate-limit state across clients in the same process by profile + API base URL.
+- Enforce HubSpot `X-HubSpot-RateLimit-Secondly`, rolling interval, and daily remaining headers before the next request.
+- Stop before daily quota exhaustion with `RATE_LIMIT_DAILY_EXHAUSTED`.
 - Enforce request timeout (`30s`) to prevent hung command invocations.
 - Surface retry exhaustion as `HTTP_RETRY_EXHAUSTED`.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@revfleet/hscli",
-  "version": "0.8.10",
+  "version": "0.8.12",
   "description": "Agentic HubSpot CLI + MCP server. Covers ~all documented public endpoints (1180 across 55+ command domains). Reachability is tier/scope/auth-model gated — UI-only surfaces and deprecated APIs excluded. Enterprise safety rails, self-hosted.",
   "type": "module",
   "bin": {