feat(hubspot): bidirectional HubSpot CRM integration

.gitignore

@@ -65,6 +65,9 @@ yarn-debug.log*
 yarn-error.log*
 .pnpm-debug.log*
 
+# Git worktrees
+.worktrees/
+
 # Misc
 *.pem
 *.log

package.json

@@ -49,6 +49,7 @@
     "clsx": "^2.1.1",
     "lucide-react": "^0.562.0",
     "next": "16.1.1",
+    "postgres": "^3.4.8",
     "react": "19.2.3",
     "react-dom": "19.2.3",
     "recharts": "^3.6.0",

packages/mcp-server/src/lib/proxy.ts

@@ -50,6 +50,8 @@ export async function callApi(
     params?: Record<string, string>
     /** Tool name for request logging. If set, the invocation is logged. */
     toolName?: string
+    /** Additional headers to include in the request */
+    extraHeaders?: Record<string, string>
   }
 ): Promise<{ data: unknown; status: number }> {
   // M18 fix: Validate path against allowlist
@@ -77,6 +79,11 @@ export async function callApi(
     headers['Authorization'] = authHeader
   }
 
+  // Merge extra headers (e.g., x-agent-secret for agent routes)
+  if (options?.extraHeaders) {
+    Object.assign(headers, options.extraHeaders)
+  }
+
   // M16 fix: AbortController with 30s timeout
   const controller = new AbortController()
   const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS)

packages/mcp-server/src/server.ts

@@ -14,6 +14,8 @@ import { registerJoinsTools } from './tools/joins.js'
 import { registerMappingTools } from './tools/mapping.js'
 import { registerBillingTools } from './tools/billing.js'
 import { registerWorkspaceTools } from './tools/workspace.js'
+import { registerPostgresTools } from './tools/postgres.js'
+import { registerHubSpotTools } from './tools/hubspot.js'
 
 /**
  * Create a fully configured MCP server with all tools.
@@ -36,6 +38,8 @@ export function createMcpServer(
   registerMappingTools(server, getAuthHeader)
   registerBillingTools(server, getAuthHeader)
   registerWorkspaceTools(server, getAuthHeader)
+  registerPostgresTools(server, getAuthHeader)
+  registerHubSpotTools(server, getAuthHeader)
 
   return server
 }