fix(hubspot): remove unused scopes

[icecrasher321]

Summary

Remove unused scopes from Hubspot block

Type of Change

• Other: Cleanup

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Jun 2, 2026 4:30am

[cursor]

PR Summary

Low Risk
Config-only scope reduction for new authorizations; no runtime logic changes, with minor risk only if a workflow still depended on a removed write/import scope without re-auth.

Overview
Narrows the HubSpot OAuth consent request in oauth.ts by dropping six scopes that are not needed for current HubSpot block behavior: write access for users, marketing events, quotes, and carts, plus crm.import.

New HubSpot connections will be asked for fewer permissions; existing tokens are unchanged until users reconnect. Read scopes for quotes, marketing events, carts, and users remain where still listed.

^{Reviewed by Cursor Bugbot for commit 9635d99. Configure here.}

[greptile-apps]

Greptile Summary

This PR removes five unused OAuth scopes from the HubSpot provider configuration in apps/sim/lib/oauth/oauth.ts. Cross-referencing the apps/sim/tools/hubspot/ directory confirms that no write tools exist for users, marketing events, quotes, or carts, and no import tooling is present — making these scopes genuinely dead weight.

• Removes crm.objects.users.write, crm.objects.marketing_events.write, crm.objects.quotes.write, crm.objects.carts.write, and crm.import from the HubSpot OAuth scope list.
• All five removed scopes are confirmed unused: the tools directory contains only read-side implementations (get_users.ts, get_marketing_event.ts, get_quote.ts, get_cart.ts) with no corresponding write or import tools.

Confidence Score: 5/5

Safe to merge — removes write scopes that have no corresponding tool implementations in the codebase.

All five removed scopes have no matching write or import tool files under apps/sim/tools/hubspot/, confirming they are genuinely unused. The remaining scope list is consistent with the read/write tools that do exist.

No files require special attention.

Important Files Changed

Filename	Overview
apps/sim/lib/oauth/oauth.ts	Removes 5 unused write/import scopes from the HubSpot OAuth provider — verified safe by inspecting the HubSpot tools directory, which contains no write tools for users, marketing events, quotes, carts, or import.

_{Reviews (1): Last reviewed commit: "fix(hubspot): remove unused scopes" | Re-trigger Greptile}