[waleedlatif1]

Summary

• Add Help Scout (Inbox API v2) integration: 25 tools for conversations (list/search, get, create, reply/draft, note, status, subject, assign/unassign, move, tags, delete, threads), customers (list/search, get, create, update), inboxes, folders, users, current user, tags, teams, and workflows (list, run)
• Both documented auth flows on one credential picker (credentialKind: 'any'): browser OAuth (authorization code, refresh-token rotation, HELPSCOUT_CLIENT_ID/HELPSCOUT_CLIENT_SECRET) and a customer-owned app saved as a client-credentials service account (helpscout-service-account, no deployment OAuth requirement); connect verifies the acting user via /v2/users/me
• Inbox and assignee selectors through the shared selectors.execute path (page-number cursor from _links.next, detail lookups)
• 13 webhook triggers (conversation created/replied/note/assigned/status/tags/moved/merged/deleted, customer created/updated, all events) with required HMAC-SHA1 X-HelpScout-Signature verification, event matching on X-HelpScout-Event, and an event+signature idempotency key since Help Scout sends no delivery ID
• helpscout-errors extractor surfaces field-level _embedded.errors without the rejected value
• Icon, white tile, docs page with intro, self-hosting OAuth row, regenerated tool metadata, catalog, deployment config, OpenAPI, CLI types, and docs manifest

Type of Change

• New feature

Testing

• lib/webhooks/providers/helpscout.test.ts (15): Help Scout's published signature vector accepted; tampered body, wrong secret, missing header, missing secret rejected; event matching; formatInput keys equal declared trigger outputs. Verified red by switching the HMAC to SHA-256
• Offline contract harness (27 checks) driving every tool's request builder and transformResponse, the minter, selectors, error extractor, webhook handler, and block param mapping against Help Scout's documented request/response examples
• Targeted tests: credential display, integration availability, selectors manifest/access, OAuth, client-credential descriptors, request transport, error extractors, blocks, triggers
• check-block-registry vs staging, check:canvas-sentences --block=helpscout, check:docs, check:integration-catalog, check:deployment-config, check:tool-request-boundary, check:tool-param-reachability, check:bare-icons, check:fork-dependent-coverage, check:client-boundary, check:file-names, check:source-conventions, check:utils, check:comment-hygiene, biome on changed files
• Not verified against a live Help Scout account; full type-check, check:audits, and test suite left to CI

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Oct 20, 2026 8:40pm UTC

[parameterai]

Parameter Secret Detection — all current findings are reported as inline comments on this PR. See the check run for the overall status.

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The latest changes appear safe to merge, with no new actionable issues found.

Summary

Adds Help Scout with 25 tools, OAuth and app credentials, inbox and user selectors, and 13 webhook triggers.

• Help Scout actions let workflows read and update support records.
• Help Scout webhook events can start workflows after signed deliveries.
• Help Scout accounts connect through OAuth or customer-owned app credentials.
• Builders can pick Help Scout inboxes and users from selectors.
• Help Scout appears in setup, reference guides, and integration catalogs.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  Credential[OAuth or app credential] --> Tools[25 Help Scout tools]
  Credential --> Selectors[Inbox and user selectors]
  Tools --> HelpScout[Help Scout API]
  Selectors --> HelpScout
  Events[Help Scout webhook] --> Signature[Check signature]
  Signature --> Match[Match selected event]
  Match --> Format[Build trigger fields]
  Format --> Workflow[Workflow run]

Loading

_{Reviews (3) · Last reviewed commit: "fix(helpscout): mark nullable trigger ou..." · Reviewed by Greptile}

[cubic-dev-ai]

All reported issues were addressed across 84 files

<sub>Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic</sub>

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

All reported issues were addressed across 86 files

<sub>Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic</sub>

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 86 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}