@volter/twin-hubspot 0.1.36 → 1.0.0

package/dist/src/portal.d.ts

@@ -1,20 +0,0 @@
-/** The World's own account: every request whose credential names no account the twin made acts here. */
-export declare const TWIN_HUB_ID = 2953265;
-/** Who is acting, in which account, for a write's webhook events: `changeSource` and `sourceId` as HubSpot names
- *  them in an event ("The source of the change", "The user or source of the triggered webhook event"). */
-export type PortalScope = {
-    hub: number;
-    source: string;
-    sourceId?: string;
-};
-/** Run `fn` acting in `hub`. */
-export declare function inPortal<T>(s: PortalScope, fn: () => T): T;
-/** The scope the current request acts in; the World's own account, through the API, when none was opened. */
-export declare function currentPortal(): PortalScope;
-/** A subject's kernel id in an account: the World's own account keeps the ids it always had. */
-export declare function scopedId(hub: number, id: string): string;
-/** A stored subject's id as its account sees it, and the account it belongs to. */
-export declare function unscoped(id: string): {
-    hub: number;
-    id: string;
-};

package/dist/src/portal.js

@@ -1,30 +0,0 @@
-// THE PORTAL A REQUEST ACTS IN — HubSpot keeps each account's CRM apart: a record, a property, a pipeline and an owner
-// belong to one account ("portal", its Hub ID), a token acts in the account its app was installed in (the token
-// exchange answers that account's `hub_id`), and a webhook event names the account where it occurred in its `portalId`
-// (https://developers.hubspot.com/docs/apps/legacy-apps/public-apps/create-generic-webhook-subscriptions).
-//
-// The request handler (hubspot-twin.ts) reads and writes through `inPortal`'s scope: a subject of an account other than
-// the World's own is stored under the account's id and read only in its scope. A request whose credential the twin
-// never issued acts in the World's own account, `TWIN_HUB_ID`, as every request did before accounts were modelled, so a
-// World pointing an app at the twin with a token of its own keeps working.
-import { AsyncLocalStorage } from 'node:async_hooks';
-/** The World's own account: every request whose credential names no account the twin made acts here. */
-export const TWIN_HUB_ID = 2953265;
-const scope = new AsyncLocalStorage();
-/** Run `fn` acting in `hub`. */
-export function inPortal(s, fn) {
-    return scope.run(s, fn);
-}
-/** The scope the current request acts in; the World's own account, through the API, when none was opened. */
-export function currentPortal() {
-    return scope.getStore() ?? { hub: TWIN_HUB_ID, source: 'API' };
-}
-/** A subject's kernel id in an account: the World's own account keeps the ids it always had. */
-export function scopedId(hub, id) {
-    return hub === TWIN_HUB_ID ? id : `p${hub}~${id}`;
-}
-/** A stored subject's id as its account sees it, and the account it belongs to. */
-export function unscoped(id) {
-    const m = /^p(\d+)~(.*)$/.exec(id);
-    return m ? { hub: Number(m[1]), id: m[2] } : { hub: TWIN_HUB_ID, id };
-}

package/dist/src/screens/account.d.ts

@@ -1 +0,0 @@
-export declare function accountPages(request: Request, root: string | undefined, at: string): Promise<Response | undefined>;

package/dist/src/screens/account.js

@@ -1,139 +0,0 @@
-// AN ACCOUNT'S OWN SETTINGS — its home, the apps connected to it (where a super admin uninstalls one), and its account
-// and billing pages (where a super admin cancels a subscription's auto-renewal, and deletes the account).
-//
-// - app.hubspot.com/ : the signed-in person's account, with the pages the twin serves for it.
-// - app.hubspot.com/connected-apps/:hubId/installed : the apps installed in the account. "Click Actions on the app you
-//   want to disconnect, then click Uninstall. In the dialog box, type "uninstall" in the text field and click Uninstall"
-//   (https://knowledge.hubspot.com/marketplace/install-apps-in-the-hubspot-marketplace, Uninstall an app). An
-//   uninstalled app's tokens stop working and it is sent no more webhook events (oauth: tokenPortal; webhooks.ts).
-// - app.hubspot.com/account-and-billing/:hubId/subscriptions : the account's subscription and its auto-renewal terms;
-//   **Cancel auto-renewal**, choosing the products and a cancellation reason, then reviewing and confirming. "Mid-contract
-//   cancellations are not permitted": the subscription ends on its renewal date, when "your account will be downgraded to
-//   HubSpot's free tools" (accounts.ts, subscriptionAt).
-// - app.hubspot.com/account-and-billing/:hubId/delete-account : the Delete Account tab. "Click Delete account. You'll be
-//   prompted to enter your Hub ID to confirm the deletion. Click Yes, delete"; "You cannot delete your account if any
-//   HubSpot subscriptions still have active commitments"
-//   (https://knowledge.hubspot.com/account/how-do-i-cancel-my-hubspot-account). A deleted account's pages, tokens and
-//   forms stop answering.
-//
-// Where the documentation stops and the twin decides: the pages' paths and layout; only a super admin may uninstall an
-// app, cancel auto-renewal or delete the account (the page also admits billing admins, whom the twin does not model); a
-// cancelled subscription ends at 00:00 UTC on its renewal date; the cancellation reasons offered; HubSpot's words for a
-// refused deletion.
-import { appById, installsIn, keep, subscriptionAt } from "../accounts.js";
-import { formOf, personFor, portalPage, who } from "./page.js";
-export async function accountPages(request, root, at) {
-    const path = new URL(request.url).pathname.replace(/\/+$/, '') || '/';
-    if (path === '/' && request.method === 'GET') {
-        const got = personFor(request, undefined, root);
-        if (got instanceof Response)
-            return got;
-        const hub = Number(got.person.hubId);
-        const links = [['Contacts', `/contacts/${hub}/objects/0-1/views/all/list`], ['Companies', `/contacts/${hub}/objects/0-2/views/all/list`],
-            ['Forms', `/forms/${hub}`], ['Deal pipelines', `/settings/${hub}/objects/deals/pipelines`], ['Connected apps', `/connected-apps/${hub}/installed`], ['Account & billing', `/account-and-billing/${hub}/subscriptions`]];
-        return portalPage('Home', { merchant: who(got.account, got.person), sections: [{ heading: `${String(got.account.name)} · Hub ID ${hub}`, items: links.map(([title, href]) => ({ title, actions: [{ label: 'Open', action: href, method: 'get' }] })) }] });
-    }
-    const m = /^\/(connected-apps|account-and-billing)\/(\d+)(?:\/(installed|installed\/uninstall|subscriptions|subscriptions\/cancel-auto-renewal|delete-account|delete-account\/delete|delete-account\/confirm))?$/.exec(path);
-    if (!m)
-        return undefined;
-    const hub = Number(m[2]);
-    const got = personFor(request, hub, root);
-    if (got instanceof Response)
-        return got;
-    const { person, account } = got;
-    const actor = String(person.email);
-    const admin = person.superAdmin === true;
-    if (m[1] === 'connected-apps') {
-        let notice;
-        if (m[3] === 'installed/uninstall' && request.method === 'POST') {
-            const f = await formOf(request);
-            const appId = Number(f.appId);
-            const install = installsIn(hub, root).find((i) => i.appId === appId);
-            const name = String(appById(appId, root)?.name ?? appId);
-            if (!admin)
-                notice = 'Only a super admin can uninstall apps.';
-            else if (!install)
-                notice = 'This app is not installed.';
-            else if (f.confirm !== 'uninstall') {
-                return portalPage(`Uninstall ${name}`, { merchant: who(account, person), notice: `Uninstall ${name}? Its access to this account ends.`, sections: [],
-                    forms: [{ heading: `Uninstall ${name}`, action: `/connected-apps/${hub}/installed/uninstall`, submit: { label: 'Uninstall' },
-                            fields: [{ id: 'appId', label: '', type: 'hidden', value: String(appId) }, { id: 'confirm', label: 'Type uninstall' }] }] }, f.confirm === undefined ? 200 : 422);
-            }
-            else {
-                await keep('_install', String(install.id), { ...ownOf(install), uninstalled_at: at, uninstalled_by: actor }, root, at, actor);
-                notice = `${name} was uninstalled.`;
-            }
-        }
-        else if (m[3] !== 'installed' || request.method !== 'GET')
-            return undefined;
-        return portalPage('Connected apps', { merchant: who(account, person), ...(notice ? { notice } : {}), sections: [{ heading: 'Connected apps', empty: 'No apps are connected to this account.',
-                    items: installsIn(hub, root).map((i) => ({ title: String(appById(Number(i.appId), root)?.name ?? i.appId), note: `Installed ${String(i.installed_at).slice(0, 10)} by ${String(i.installed_by ?? '')}`,
-                        actions: [{ label: 'Uninstall', action: `/connected-apps/${hub}/installed/uninstall`, tone: 'danger', fields: { appId: String(i.appId) } }] })) }] });
-    }
-    const billing = `/account-and-billing/${hub}`;
-    const tab = m[3];
-    if (tab === undefined)
-        return request.method === 'GET' ? subscriptionsPage(hub, account, person, at) : undefined;
-    if (tab === 'subscriptions' && request.method === 'GET')
-        return subscriptionsPage(hub, account, person, at);
-    if (tab === 'subscriptions/cancel-auto-renewal' && request.method === 'POST') {
-        const f = await formOf(request);
-        const paid = subscriptionAt(account, at);
-        if (!admin)
-            return subscriptionsPage(hub, account, person, at, 'Only a super admin can cancel auto-renewal.', 403);
-        if (paid === 'free' || account.auto_renew === false)
-            return subscriptionsPage(hub, account, person, at, 'No subscription renews automatically.', 422);
-        if (f.product !== paid || !f.reason) {
-            return portalPage('Cancel auto-renewal', { merchant: who(account, person), ...(f.product !== undefined ? { notice: 'Select the products to cancel and a cancellation reason.' } : {}),
-                sections: [{ heading: 'Features you lose', items: [{ title: paid, detail: `Your account will be downgraded to HubSpot's free tools on ${String(account.renews_on)}.` }] }],
-                forms: [{ heading: 'Cancel auto-renewal', action: `${billing}/subscriptions/cancel-auto-renewal`, submit: { label: 'Next' }, fields: [
-                            { id: 'product', label: 'Products to cancel', options: [{ value: paid, label: paid }] },
-                            { id: 'reason', label: 'Cancellation reason', options: REASONS.map((r) => ({ value: r, label: r })) },
-                        ] }] }, f.product === undefined ? 200 : 422);
-        }
-        if (f.confirm !== 'yes') {
-            return portalPage('Cancel auto-renewal', { merchant: who(account, person), notice: `${paid} will be canceled on ${String(account.renews_on)}, the end of its commitment term. Reason: ${f.reason}.`, sections: [],
-                forms: [{ heading: 'Review the cancellation', action: `${billing}/subscriptions/cancel-auto-renewal`, submit: { label: 'Cancel auto-renewal' }, fields: [
-                            { id: 'product', label: '', type: 'hidden', value: paid }, { id: 'reason', label: '', type: 'hidden', value: f.reason }, { id: 'confirm', label: '', type: 'hidden', value: 'yes' },
-                        ] }] });
-        }
-        await keep('_account', String(account.id), { ...ownOf(account), auto_renew: false, cancellation_reason: f.reason, auto_renew_cancelled_at: at, auto_renew_cancelled_by: actor }, root, at, actor);
-        return subscriptionsPage(hub, { ...account, auto_renew: false }, person, at, `Auto-renewal canceled. ${paid} ends on ${String(account.renews_on)}; a notice of non-renewal was sent to the billing admin.`);
-    }
-    if (tab === 'delete-account' && request.method === 'GET')
-        return deletePage(hub, account, person);
-    if ((tab === 'delete-account/delete' || tab === 'delete-account/confirm') && request.method === 'POST') {
-        const paid = subscriptionAt(account, at);
-        if (!admin)
-            return deletePage(hub, account, person, 'Only a super admin can delete this account.', 403);
-        if (paid !== 'free')
-            return deletePage(hub, account, person, `You cannot delete your account while ${paid} still has an active commitment (it renews on ${String(account.renews_on)}).`, 422);
-        const typed = ((await formOf(request)).hubId ?? '').trim();
-        if (tab === 'delete-account/delete' || typed !== String(hub)) {
-            return portalPage('Delete account', { merchant: who(account, person), ...(tab === 'delete-account/confirm' ? { notice: 'Enter this account\'s Hub ID to confirm.' } : {}), sections: [],
-                forms: [{ heading: `Delete ${String(account.name)}?`, action: `${billing}/delete-account/confirm`, submit: { label: 'Yes, delete' }, fields: [{ id: 'hubId', label: 'Enter your Hub ID to confirm' }] }] }, tab === 'delete-account/confirm' ? 422 : 200);
-        }
-        await keep('_account', String(account.id), { ...ownOf(account), closed_at: at, closed_by: actor }, root, at, actor);
-        return portalPage('Account deleted', { merchant: String(account.name), notice: `${String(account.name)} (Hub ID ${hub}) has been deleted.`, sections: [] });
-    }
-    return undefined;
-}
-const REASONS = ['Business is closing or merging', 'Moving to another product', 'Too expensive', 'Not using it enough', 'Other'];
-function subscriptionsPage(hub, account, person, at, notice, status = 200) {
-    const now = subscriptionAt(account, at);
-    const billing = `/account-and-billing/${hub}`;
-    return portalPage('Account & billing', { merchant: who(account, person), back: { href: `${billing}/delete-account`, label: 'Delete Account' }, ...(notice ? { notice } : {}),
-        sections: [{ heading: 'Subscriptions', items: [{ title: now === 'free' ? "HubSpot's free tools" : now, detail: `Hub ID ${hub}`,
-                        ...(now !== 'free' ? { note: account.auto_renew === false ? `Canceled: ends on ${String(account.renews_on)}` : `Renews automatically on ${String(account.renews_on)}` } : {}),
-                        ...(now !== 'free' && account.auto_renew !== false ? { actions: [{ label: 'Cancel auto-renewal', action: `${billing}/subscriptions/cancel-auto-renewal` }] } : {}) }] }] }, status);
-}
-function deletePage(hub, account, person, notice, status = 200) {
-    return portalPage('Delete Account', { merchant: who(account, person), back: { href: `/account-and-billing/${hub}/subscriptions`, label: 'Subscriptions' }, ...(notice ? { notice } : {}),
-        sections: [{ heading: 'Delete Account', items: [{ title: String(account.name), detail: `Hub ID ${hub}`, note: 'Deleting the account permanently removes it and its data.',
-                        actions: [{ label: 'Delete account', action: `/account-and-billing/${hub}/delete-account/delete`, tone: 'danger' }] }] }] }, status);
-}
-/** A stored row's own fields, without the kernel's. */
-function ownOf(r) {
-    const { id: _id, type: _type, updatedAt: _u, deleted: _d, ...rest } = r;
-    return rest;
-}

package/dist/src/screens/crm.d.ts

@@ -1,2 +0,0 @@
-/** app.hubspot.com/contacts/… and /settings/…/pipelines, or undefined for another path. */
-export declare function crmPages(request: Request, root: string | undefined, at: string): Promise<Response | undefined>;

package/dist/src/screens/crm.js

@@ -1,153 +0,0 @@
-// THE CRM PAGES PEOPLE WORK IN — an account's contacts, a contact's record (where a rep creates a deal for the contact),
-// a deal's record (where a rep moves its stage), its companies (where an account manager adds one), and its deal
-// pipelines' settings (where a stage's internal ID is read). HubSpot's record pages live at
-// app.hubspot.com/contacts/:hubId/record/:objectTypeId/:id; the twin builds only the acts the life takes on them, from
-// @volter/world-ui's portal piece under HubSpot's skin. Every act is the request handler's own operation, in the
-// account, as the signed-in user (portal.ts: `CRM_UI`, `userId:<id>`), so its webhook events are the API's.
-//
-// Where the documentation stops and the twin decides: the pages' layout and paths other than a record's; a deal made
-// on a contact's record is associated with it (HubSpot's default deal-to-contact association, type 3) and owned by the
-// rep who made it; the pipelines settings page is at /settings/:hubId/objects/deals/pipelines and shows each stage's
-// internal ID beside its label; a pipeline made there takes its stages in order, separated by commas, and names its closed won and closed
-// lost stages.
-import { handleHubspotTwinRequest } from "../hubspot-twin.js";
-import { inPortal } from "../portal.js";
-import { formOf, personFor, portalPage, redirect, who } from "./page.js";
-function caller(hub, person, root, at) {
-    return async (method, path, body) => {
-        const res = await inPortal({ hub, source: 'CRM_UI', sourceId: `userId:${String(person.userId)}` }, () => handleHubspotTwinRequest({ method, path, ...(body !== undefined ? { body: JSON.stringify(body) } : {}), root, occurredAt: at }));
-        return { status: res.status, body: (res.body ?? {}) };
-    };
-}
-const CONTACT_PROPS = ['email', 'firstname', 'lastname', 'lifecyclestage', 'dub_id', 'dub_link', 'dub_partner_email'];
-const nameOf = (p) => [p.firstname, p.lastname].filter(Boolean).join(' ') || String(p.email ?? '');
-async function stageOptions(call) {
-    const pipelines = ((await call('GET', '/crm/v3/pipelines/deals')).body.results ?? []);
-    return pipelines.flatMap((p) => (p.stages ?? []).map((s) => ({ value: `${String(p.id)}/${String(s.id)}`, label: `${String(p.label)} · ${String(s.label)}` })));
-}
-/** app.hubspot.com/contacts/… and /settings/…/pipelines, or undefined for another path. */
-export async function crmPages(request, root, at) {
-    const url = new URL(request.url);
-    const path = url.pathname.replace(/\/+$/, '');
-    const m = /^\/(contacts|settings)\/(\d+)\/(.*)$/.exec(path);
-    if (!m)
-        return undefined;
-    const hub = Number(m[2]);
-    const rest = m[3];
-    const got = personFor(request, hub, root);
-    if (got instanceof Response)
-        return got;
-    const { person, account } = got;
-    const call = caller(hub, person, root, at);
-    const side = who(account, person);
-    const R = `/contacts/${hub}`;
-    if (m[1] === 'settings') {
-        if (rest !== 'objects/deals/pipelines')
-            return undefined;
-        if (request.method === 'POST') {
-            const f = await formOf(request);
-            const labels = (f.stages ?? '').split(/\r?\n|,/).map((s) => s.trim()).filter(Boolean);
-            const stages = labels.map((label, i) => ({ label, displayOrder: i, metadata: label === f.won ? { isClosed: 'true', probability: '1.0' } : label === f.lost ? { isClosed: 'true', probability: '0.0' } : { isClosed: 'false', probability: String(Math.round(((i + 1) / (labels.length + 1)) * 10) / 10) } }));
-            const made = await call('POST', '/crm/v3/pipelines/deals', { label: f.label, displayOrder: 1, stages });
-            if (made.status !== 201)
-                return pipelinesPage(call, side, hub, String(made.body.message ?? 'The pipeline could not be created.'), 422);
-            return pipelinesPage(call, side, hub, `Pipeline ${String(f.label)} created.`);
-        }
-        return pipelinesPage(call, side, hub);
-    }
-    if (rest === 'objects/0-1/views/all/list' && request.method === 'GET') {
-        const list = ((await call('GET', `/crm/v3/objects/contacts?limit=100&properties=${CONTACT_PROPS.join(',')}`)).body.results ?? []);
-        return portalPage('Contacts', { merchant: side, sections: [{ heading: 'Contacts', empty: 'No contacts yet.', items: list.map((c) => {
-                        const p = c.properties;
-                        return { title: nameOf(p), detail: String(p.email ?? ''), note: `Record ID ${String(c.id)}`, actions: [{ label: 'Open', action: `${R}/record/0-1/${String(c.id)}`, method: 'get' }] };
-                    }) }] });
-    }
-    if (rest === 'objects/0-2/views/all/list') {
-        let notice;
-        if (request.method === 'POST') {
-            const f = await formOf(request);
-            const properties = Object.fromEntries(Object.entries(f).filter(([, v]) => v !== ''));
-            const made = await call('POST', '/crm/v3/objects/companies', { properties });
-            notice = made.status === 201 ? `Company ${String(f.name)} created.` : String(made.body.message ?? 'The company could not be created.');
-        }
-        const list = ((await call('GET', '/crm/v3/objects/companies?limit=100')).body.results ?? []);
-        const owners = ((await call('GET', '/crm/v3/owners')).body.results ?? []);
-        const custom = ((await call('GET', '/crm/v3/properties/companies')).body.results ?? []);
-        return portalPage('Companies', { merchant: side, ...(notice ? { notice } : {}),
-            sections: [{ heading: 'Companies', empty: 'No companies yet.', items: list.map((c) => ({ title: String(c.properties.name ?? ''), detail: String(c.properties.domain ?? ''), note: `Record ID ${String(c.id)}` })) }],
-            forms: [{ heading: 'Create company', action: `${R}/objects/0-2/views/all/list`, submit: { label: 'Create' }, fields: [
-                        { id: 'name', label: 'Company name' }, { id: 'domain', label: 'Company domain name' },
-                        { id: 'hubspot_owner_id', label: 'Company owner', options: owners.map((o) => ({ value: String(o.id), label: `${String(o.firstName)} ${String(o.lastName)}` })) },
-                        ...custom.filter((p) => p.hubspotDefined !== true && p.archived !== true).map((p) => ({ id: String(p.name), label: String(p.label) })),
-                    ] }] });
-    }
-    const rec = /^record\/(0-1|0-3)\/(\d+)(?:\/(deals|stage))?$/.exec(rest);
-    if (!rec)
-        return undefined;
-    const [, type, id, act] = rec;
-    if (type === '0-1') {
-        if (act === 'deals' && request.method === 'POST') {
-            const f = await formOf(request);
-            const [pipeline, dealstage] = (f.stage ?? '').split('/');
-            const made = await call('POST', '/crm/v3/objects/0-3', {
-                properties: { dealname: f.dealname, amount: f.amount, pipeline, dealstage, hubspot_owner_id: String(person.ownerId) },
-                associations: [{ to: { id }, types: [{ associationCategory: 'HUBSPOT_DEFINED', associationTypeId: 3 }] }],
-            });
-            if (made.status !== 201)
-                return contactPage(call, side, hub, id, String(made.body.message ?? 'The deal could not be created.'), 422);
-            return redirect(`${R}/record/0-3/${String(made.body.id)}`);
-        }
-        if (act || request.method !== 'GET')
-            return undefined;
-        return contactPage(call, side, hub, id);
-    }
-    if (act === 'stage' && request.method === 'POST') {
-        const f = await formOf(request);
-        const [pipeline, dealstage] = (f.stage ?? '').split('/');
-        const moved = await call('PATCH', `/crm/v3/objects/0-3/${id}`, { properties: { pipeline, dealstage } });
-        if (moved.status !== 200)
-            return dealPage(call, side, hub, id, String(moved.body.message ?? 'The deal could not be saved.'), 422);
-        return redirect(`${R}/record/0-3/${id}`);
-    }
-    if (act || request.method !== 'GET')
-        return undefined;
-    return dealPage(call, side, hub, id);
-}
-async function contactPage(call, side, hub, id, notice, status = 200) {
-    const got = await call('GET', `/crm/v3/objects/contacts/${id}?properties=${CONTACT_PROPS.join(',')}&associations=deals`);
-    if (got.status !== 200)
-        return portalPage('Contact', { merchant: side, notice: 'This record does not exist.', sections: [] }, 404);
-    const p = got.body.properties;
-    const deals = (got.body.associations?.deals?.results ?? []);
-    return portalPage(nameOf(p), { merchant: side, back: { href: `/contacts/${hub}/objects/0-1/views/all/list`, label: 'Contacts' }, ...(notice ? { notice } : {}), sections: [
-            { heading: 'About this contact', items: CONTACT_PROPS.filter((k) => p[k] !== undefined && p[k] !== null).map((k) => ({ title: k, detail: String(p[k]) })) },
-            { heading: 'Deals', empty: 'No deals.', items: deals.map((d) => ({ title: `Deal ${String(d.id)}`, actions: [{ label: 'Open', action: `/contacts/${hub}/record/0-3/${String(d.id)}`, method: 'get' }] })) },
-        ], forms: [{ heading: 'Create deal', action: `/contacts/${hub}/record/0-1/${id}/deals`, submit: { label: 'Create' }, fields: [
-                    { id: 'dealname', label: 'Deal name' }, { id: 'amount', label: 'Amount' },
-                    { id: 'stage', label: 'Pipeline and deal stage', options: await stageOptions(call) },
-                ] }] }, status);
-}
-async function dealPage(call, side, hub, id, notice, status = 200) {
-    const got = await call('GET', `/crm/v3/objects/0-3/${id}?properties=dealname,amount,pipeline,dealstage,closedate&associations=contacts`);
-    if (got.status !== 200)
-        return portalPage('Deal', { merchant: side, notice: 'This record does not exist.', sections: [] }, 404);
-    const p = got.body.properties;
-    const contacts = (got.body.associations?.contacts?.results ?? []);
-    return portalPage(String(p.dealname ?? 'Deal'), { merchant: side, ...(notice ? { notice } : {}), sections: [
-            { heading: 'About this deal', items: ['dealname', 'amount', 'pipeline', 'dealstage'].map((k) => ({ title: k, detail: String(p[k] ?? '') })) },
-            { heading: 'Contacts', empty: 'No contacts.', items: contacts.map((c) => ({ title: `Contact ${String(c.id)}`, actions: [{ label: 'Open', action: `/contacts/${hub}/record/0-1/${String(c.id)}`, method: 'get' }] })) },
-        ], forms: [{ heading: 'Deal stage', action: `/contacts/${hub}/record/0-3/${id}/stage`, submit: { label: 'Save' }, fields: [
-                    { id: 'stage', label: 'Deal stage', value: `${String(p.pipeline)}/${String(p.dealstage)}`, options: await stageOptions(call) },
-                ] }] }, status);
-}
-async function pipelinesPage(call, side, hub, notice, status = 200) {
-    const pipelines = ((await call('GET', '/crm/v3/pipelines/deals')).body.results ?? []);
-    return portalPage('Deal pipelines', { merchant: side, ...(notice ? { notice } : {}),
-        sections: pipelines.map((p) => ({ heading: `${String(p.label)} (pipeline ID ${String(p.id)})`, items: (p.stages ?? []).map((s) => ({
-                title: String(s.label), detail: `Stage ID: ${String(s.id)}`, note: s.metadata?.isClosed === 'true' ? `Closed (probability ${String(s.metadata.probability)})` : 'Open'
-            })) })),
-        forms: [{ heading: 'Create pipeline', action: `/settings/${hub}/objects/deals/pipelines`, submit: { label: 'Create pipeline' }, fields: [
-                    { id: 'label', label: 'Pipeline name' }, { id: 'stages', label: 'Stages, in order, separated by commas' },
-                    { id: 'won', label: 'Closed won stage' }, { id: 'lost', label: 'Closed lost stage' },
-                ] }] }, status);
-}

package/dist/src/screens/developer.d.ts

@@ -1,4 +0,0 @@
-/** The door standing in for `hs project upload`. */
-export declare function uploadDoor(hubId: number, request: Request, root: string | undefined, at: string): Promise<Response>;
-/** app.hubspot.com/developer-projects/…, or undefined for another path. */
-export declare function developerPages(request: Request, root: string | undefined, at: string): Promise<Response | undefined>;

package/dist/src/screens/developer.js

@@ -1,191 +0,0 @@
-import { jsx as _jsx } from "react/jsx-runtime";
-// AN ACCOUNT'S APPS — the developer projects an account builds and the pages it manages each app on
-// (https://developers.hubspot.com/docs/apps/developer-platform/build-apps/manage-apps-in-hubspot).
-//
-// - POST /_twin/accounts/:hubId/projects {name, uploadedBy, platformVersion, app, webhooks?}: stands in for `hs project
-//   upload`, the HubSpot CLI's upload of a project to the account's developer file system, whose API HubSpot does not
-//   document (the CLI's requests are its own: a zip of the project and the intermediate representation
-//   @hubspot/project-parsing-lib makes of it, then a build and a deploy it polls). `app` is the project's
-//   `app-hsmeta.json` and `webhooks` its `webhooks/*-hsmeta.json`, as the configuration pages define them
-//   (https://developers.hubspot.com/docs/apps/developer-platform/build-apps/app-configuration,
-//   https://developers.hubspot.com/docs/apps/developer-platform/add-features/configure-webhooks); a second upload of a
-//   project updates its app, keeping the app's id, client ID and secret. 201 with the build's app.
-// - /developer-projects/:hubId/project/:name/component/:uid/auth: the app's authentication details, "Your app's
-//   *Client ID* and *Client secret* will appear in the *Client credentials* section", and its redirect URLs and scopes.
-// - /developer-projects/:hubId/project/:name/component/:uid/distribution: for an OAuth marketplace app, **Begin
-//   publishing** and the Acceptable Use Policy ("Until the AUP is signed, you won't be able to install your app in
-//   accounts other than developer test accounts"), then the sample install URL and the installed accounts ("Until your
-//   app is reviewed … you'll be limited to 25 installs"); for a static-token app, **Install now**, HubSpot's consent
-//   (**Connect app**), and the access token, which **Show** reveals.
-// - POST /developer-projects/:hubId/project/:name/delete: deletes the project and its app.
-//
-// Where the documentation stops and the twin decides: the pages' paths and layout; an app id counts from 30000001; a
-// client ID and secret are UUIDs (the OAuth page's `client_id=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx`), a static token is
-// `pat-na1-` and a UUID (the authentication overview masks one as `***-***-*********-…`); only a super admin of the
-// account may manage its apps; the AUP panel's text is the twin's summary, not HubSpot's policy; no app the World builds
-// is ever reviewed, so every install of a marketplace app is of an unverified app.
-import { accountOf, appsOf, hex, installOf, keep, personOf, stored } from "../accounts.js";
-import { CSS, formOf, page, personFor, portalPage, redirect, who } from "./page.js";
-import { Consent } from '@volter/world-ui';
-const uuid = (seed) => { const h = hex(seed); return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20, 32)}`; };
-const INSTALL_CAP = 25;
-/** The door standing in for `hs project upload`. */
-export async function uploadDoor(hubId, request, root, at) {
-    let body = {};
-    try {
-        body = JSON.parse(await request.text());
-    }
-    catch { /* refused below */ }
-    const refuse = (message) => Response.json({ status: 'error', message, category: 'VALIDATION_ERROR' }, { status: 400 });
-    const account = accountOf(hubId, root);
-    const uploader = personOf(String(body.uploadedBy ?? ''), root);
-    if (!account || account.closed_at)
-        return refuse(`no open account ${hubId}`);
-    if (!uploader || uploader.hubId !== hubId || uploader.superAdmin !== true)
-        return refuse('uploadedBy must be a super admin of the account');
-    const name = typeof body.name === 'string' ? body.name.trim() : '';
-    const app = body.app;
-    const c = app?.config;
-    const auth = c?.auth;
-    if (!name || !app || app.type !== 'app' || typeof app.uid !== 'string' || !c)
-        return refuse('a project name and its app component (app-hsmeta.json: uid, type "app", config) are required');
-    if (typeof c.name !== 'string' || typeof c.description !== 'string')
-        return refuse('app config requires name and description');
-    if (c.distribution !== 'marketplace' && c.distribution !== 'private')
-        return refuse('distribution must be marketplace or private');
-    if (!auth || (auth.type !== 'oauth' && auth.type !== 'static'))
-        return refuse('auth.type must be oauth or static');
-    if (c.distribution === 'marketplace' && auth.type !== 'oauth')
-        return refuse('a marketplace app must use oauth');
-    const redirectUrls = Array.isArray(auth.redirectUrls) ? auth.redirectUrls.map(String) : [];
-    // "Each app must have at least one auth redirect URL, and it must use HTTPS. The only exception is that http://localhost is allowed"
-    if (auth.type === 'oauth' && (!redirectUrls.length || redirectUrls.some((u) => !u.startsWith('https://') && !u.startsWith('http://localhost'))))
-        return refuse('an oauth app needs at least one redirect URL, each HTTPS (or http://localhost)');
-    const requiredScopes = Array.isArray(auth.requiredScopes) ? auth.requiredScopes.map(String) : [];
-    if (!requiredScopes.length)
-        return refuse('an app must include at least one required scope');
-    const hooks = body.webhooks;
-    const settings = (hooks?.config?.settings ?? {});
-    const crmObjects = ((hooks?.config?.subscriptions ?? {}).crmObjects ?? []);
-    if (hooks && (hooks.type !== 'webhooks' || typeof settings.targetUrl !== 'string'))
-        return refuse('the webhooks component needs type "webhooks" and settings.targetUrl');
-    const existing = stored('_app', root).find((a) => a.hubId === hubId && a.project === name && !a.deleted_at);
-    const appId = existing ? Number(existing.appId) : 30000000 + stored('_app', root).length + 1;
-    const fields = {
-        appId, hubId, project: name, uid: app.uid, name: c.name, description: c.description, distribution: c.distribution,
-        authType: auth.type, redirectUrls, requiredScopes,
-        optionalScopes: Array.isArray(auth.optionalScopes) ? auth.optionalScopes.map(String) : [],
-        platformVersion: typeof body.platformVersion === 'string' ? body.platformVersion : '2026.03',
-        client_id: existing?.client_id ?? uuid(`hubspot-client:${appId}`),
-        client_secret: existing?.client_secret ?? uuid(`hubspot-secret:${appId}:${at}`),
-        webhooks: hooks ? {
-            targetUrl: settings.targetUrl,
-            subscriptions: crmObjects.map((s, i) => ({ id: appId * 100 + i + 1, subscriptionType: s.subscriptionType, objectType: s.objectType, ...(s.propertyName ? { propertyName: s.propertyName } : {}), active: s.active !== false })),
-        } : null,
-        publishing: existing?.publishing ?? null, aup_signed_at: existing?.aup_signed_at ?? null, aup_signed_by: existing?.aup_signed_by ?? null,
-        created_at: existing?.created_at ?? at, uploaded_at: at, uploaded_by: uploader.email, deleted_at: null,
-    };
-    await keep('_app', `app:${appId}`, fields, root, at, String(uploader.email));
-    return Response.json({ project: name, appId, uid: app.uid, url: `/developer-projects/${hubId}/project/${encodeURIComponent(name)}/component/${encodeURIComponent(String(app.uid))}/auth` }, { status: 201 });
-}
-const base = (a) => `/developer-projects/${String(a.hubId)}/project/${encodeURIComponent(String(a.project))}/component/${encodeURIComponent(String(a.uid))}`;
-function authPage(a, account, person) {
-    return portalPage(`${String(a.name)} · Auth`, {
-        merchant: who(account, person), back: { href: `${base(a)}/distribution`, label: 'Distribution' },
-        sections: [
-            { heading: 'Client credentials', items: a.authType === 'oauth'
-                    ? [{ title: 'Client ID', detail: String(a.client_id) }, { title: 'Client secret', detail: String(a.client_secret) }]
-                    : [], empty: 'A static-token app has no client credentials; its access token is on the Distribution tab.' },
-            { heading: 'Redirect URLs', items: a.redirectUrls.map((u) => ({ title: u })), empty: 'None.' },
-            { heading: 'Scopes', items: [...a.requiredScopes.map((s) => ({ title: s, detail: 'Required' })), ...a.optionalScopes.map((s) => ({ title: s, detail: 'Optional' }))] },
-        ],
-    });
-}
-function installUrl(a) {
-    const q = new URLSearchParams({ client_id: String(a.client_id), redirect_uri: a.redirectUrls[0] ?? '', scope: ['oauth', ...a.requiredScopes].join(' ') });
-    return `https://app.hubspot.com/oauth/authorize?${q.toString()}`;
-}
-function distributionPage(a, account, person, root, opts = {}) {
-    const installs = stored('_install', root).filter((i) => i.appId === a.appId && !i.uninstalled_at);
-    const d = `${base(a)}/distribution`;
-    if (a.authType === 'static') {
-        const install = installOf(Number(a.appId), Number(a.hubId), root);
-        return portalPage(`${String(a.name)} · Distribution`, {
-            merchant: who(account, person), back: { href: `${base(a)}/auth`, label: 'Auth' }, ...(opts.notice ? { notice: opts.notice } : {}),
-            sections: [{ heading: 'Manage distribution', items: [install
-                            ? { title: String(account.name), detail: `Access token: ${opts.show ? String(install.static_token) : `${String(install.static_token).slice(0, 8)}${'•'.repeat(12)}`}`, note: `Installed ${String(install.installed_at).slice(0, 10)}`, actions: opts.show ? [] : [{ label: 'Show', action: `${d}?show=token`, method: 'get' }] }
-                            : { title: String(account.name), detail: 'Not installed', actions: [{ label: 'Install now', action: `${d}/install` }] }] }],
-        });
-    }
-    const published = !!a.publishing;
-    const signed = !!a.aup_signed_at;
-    return portalPage(`${String(a.name)} · Distribution`, {
-        merchant: who(account, person), back: { href: `${base(a)}/auth`, label: 'Auth' }, ...(opts.notice ? { notice: opts.notice } : {}),
-        sections: [
-            { heading: 'Distribution', items: [signed
-                        ? { title: 'Unlisted marketplace app', detail: `Install URL: ${installUrl(a)}`, note: `${installs.length} of ${INSTALL_CAP} installs before listing` }
-                        : { title: 'Not published', detail: 'Until the AUP is signed, you won\'t be able to install your app in accounts other than developer test accounts.', actions: [{ label: published ? 'Continue publishing' : 'Begin publishing', action: `${d}/begin-publishing`, tone: 'primary' }] }] },
-            ...(opts.aup && !signed ? [{ heading: 'Acceptable Use Policy', items: [{ title: 'HubSpot App Acceptable Use Policy', detail: 'Review and sign the policy to install this app in accounts other than developer test accounts.', actions: [{ label: 'Sign', action: `${d}/aup`, tone: 'primary', fields: { accept: 'yes' } }] }] }] : []),
-            { heading: 'Installed accounts', items: installs.map((i) => ({ title: String(accountOf(Number(i.hubId), root)?.name ?? i.hubId), note: `Installed ${String(i.installed_at).slice(0, 10)}` })), empty: 'No installs yet.' },
-        ],
-    });
-}
-/** app.hubspot.com/developer-projects/…, or undefined for another path. */
-export async function developerPages(request, root, at) {
-    const url = new URL(request.url);
-    const m = /^\/developer-projects\/(\d+)\/project\/([^/]+)(?:\/component\/([^/]+)\/(auth|distribution)(?:\/(begin-publishing|aup|install|install\/confirm))?|\/(delete))$/.exec(url.pathname.replace(/\/+$/, ''));
-    if (!m)
-        return undefined;
-    const hubId = Number(m[1]);
-    const got = personFor(request, hubId, root);
-    if (got instanceof Response)
-        return got;
-    const { person, account } = got;
-    if (person.superAdmin !== true)
-        return page('HubSpot', CSS.portal, _jsx("main", { className: "portal-main", children: _jsx("h1", { children: "Only a super admin can manage this account's apps." }) }), 403);
-    const app = appsOf(hubId, root).find((a) => a.project === decodeURIComponent(m[2]) && (m[3] === undefined || a.uid === decodeURIComponent(m[3])));
-    if (!app)
-        return page('HubSpot', CSS.portal, _jsx("main", { className: "portal-main", children: _jsx("h1", { children: "This project doesn't exist." }) }), 404);
-    const actor = String(person.email);
-    if (m[6] === 'delete') {
-        if (request.method !== 'POST')
-            return undefined;
-        await keep('_app', `app:${String(app.appId)}`, { ...app, deleted_at: at, deleted_by: actor }, root, at, actor);
-        return portalPage('Projects', { merchant: who(account, person), notice: `Project ${String(app.project)} deleted.`, sections: [] });
-    }
-    const tab = m[4];
-    const act = m[5];
-    if (!act) {
-        if (request.method !== 'GET')
-            return undefined;
-        return tab === 'auth' ? authPage(app, account, person) : distributionPage(app, account, person, root, { show: url.searchParams.get('show') === 'token' });
-    }
-    if (request.method !== 'POST' || tab !== 'distribution')
-        return undefined;
-    if (act === 'begin-publishing' && app.distribution === 'marketplace') {
-        const withPanel = { ...app, publishing: app.publishing ?? at };
-        if (!app.publishing)
-            await keep('_app', `app:${String(app.appId)}`, withPanel, root, at, actor);
-        return distributionPage(withPanel, account, person, root, { aup: true });
-    }
-    if (act === 'aup' && app.distribution === 'marketplace' && app.publishing) {
-        if ((await formOf(request)).accept !== 'yes')
-            return distributionPage(app, account, person, root, { aup: true, notice: 'Sign the Acceptable Use Policy to continue.' });
-        const signed = { ...app, aup_signed_at: at, aup_signed_by: actor };
-        await keep('_app', `app:${String(app.appId)}`, signed, root, at, actor);
-        return distributionPage(signed, account, person, root, { notice: 'Acceptable Use Policy signed. You can install this app with its install URL.' });
-    }
-    if (act === 'install' && app.authType === 'static') {
-        return page(`Connect ${String(app.name)}`, CSS.consent, (_jsx(Consent, { heading: `Connect ${String(app.name)} to ${String(account.name)}`, app: { name: String(app.name) }, request: `${String(account.name)} · Hub ID ${hubId}`, permissions: app.requiredScopes.map((s) => ({ title: s, detail: 'Requested scope' })), action: `${base(app)}/distribution/install/confirm`, fields: {}, deny: { name: 'answer', value: 'cancel', label: 'Cancel' }, allow: { name: 'answer', value: 'allow', label: 'Connect app' } })));
-    }
-    if (act === 'install/confirm' && app.authType === 'static') {
-        if ((await formOf(request)).answer !== 'allow')
-            return redirect(`${base(app)}/distribution`);
-        if (installOf(Number(app.appId), hubId, root))
-            return distributionPage(app, account, person, root, { notice: 'This app is already installed.' });
-        const token = `pat-na1-${uuid(`hubspot-static:${String(app.appId)}:${at}`)}`;
-        await keep('_install', `install:${String(app.appId)}:${hubId}:${at}`, { appId: app.appId, hubId, installed_by: actor, scopes: app.requiredScopes, installed_at: at, uninstalled_at: null, static_token: token }, root, at, actor);
-        return redirect(`${base(app)}/distribution`);
-    }
-    return undefined;
-}

package/dist/src/screens/forms.d.ts

@@ -1,5 +0,0 @@
-export declare const FORMS_HOST = "api.hsforms.com";
-/** app.hubspot.com/forms/…, or undefined for another path. */
-export declare function formPages(request: Request, root: string | undefined, at: string): Promise<Response | undefined>;
-/** api.hsforms.com's submission, or undefined for another request. */
-export declare function formSubmission(request: Request, root: string | undefined, at: string): Promise<Response | undefined>;