@arbium/enterprise-agent-connect 0.0.0-stage → 0.1.1

package/dist/connectors/entra/tools.js

@@ -0,0 +1,262 @@
+import { z } from "zod";
+import { audited, Denied, json, listLimit, VendorFailed, } from "../../packages/connector-kit/src/common.js";
+import { cursorArg, nextCursor, ok, pageQuery } from "../sharepoint-files/tools.js";
+// People and groups in Microsoft Entra ID, read-only. A key's `groups` and `units` limits
+// (group and administrative unit ids) keep it to the people and groups inside them, checked on
+// every call, lookups by id included, with checkMemberObjects (transitive). Request shapes:
+// learn.microsoft.com/graph/api/user-get, user-list, user-list-transitivememberof,
+// user-list-directreports, group-list, group-list-members, subscribedsku-list and
+// directoryobject-checkmemberobjects.
+const GUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const UPN = /^[^\s/\\?#%'"]+@[^\s/\\?#%'"]+$/;
+// checkMemberObjects takes at most 20 ids.
+export const MAX_SCOPE_IDS = 20;
+const PERSON_FIELDS = "id,displayName,userPrincipalName,mail,jobTitle,department,officeLocation,accountEnabled";
+const BRIEF_FIELDS = "id,displayName,userPrincipalName,mail,jobTitle,department";
+const GROUP_FIELDS = "id,displayName,mail,description,securityEnabled,groupTypes";
+const MEMBER_FIELDS = [...new Set(`${BRIEF_FIELDS},${GROUP_FIELDS}`.split(","))].join(",");
+// Directory searches and casts need this header (and $count).
+const EVENTUAL = { consistencylevel: "eventual" };
+/** The key's group and administrative unit ids, lowercased; null when it has neither. */
+export function directoryScope(ctx) {
+    const groups = (listLimit(ctx.limits, "groups") ?? []).map((g) => g.toLowerCase());
+    const units = (listLimit(ctx.limits, "units") ?? []).map((u) => u.toLowerCase());
+    if (!groups.length && !units.length)
+        return null;
+    if (groups.length + units.length > MAX_SCOPE_IDS)
+        throw new Denied(`This key names more than ${MAX_SCOPE_IDS} groups and administrative units. Ask an administrator to narrow it.`);
+    return { groups, units, all: [...groups, ...units] };
+}
+/** Which of `ids` the user or group is in, directly or through other groups. */
+export async function memberOf(ctx, mark, kind, id, ids) {
+    const data = await ok(ctx, mark, {
+        method: "POST",
+        path: `/v1.0/${kind}/${encodeURIComponent(id)}/checkMemberObjects`,
+        body: { ids },
+    });
+    return (data?.value ?? []).map((v) => v.toLowerCase());
+}
+async function personAllowed(ctx, mark, scope, id) {
+    return !scope || (await memberOf(ctx, mark, "users", id, scope.all)).length > 0;
+}
+// "all": the group, and so everyone in it, is inside the key's groups. "checked": it is only
+// in one of the key's administrative units, so each member is checked on its own.
+async function groupAccess(ctx, mark, scope, id) {
+    if (!scope || scope.groups.includes(id.toLowerCase()))
+        return "all";
+    const hits = await memberOf(ctx, mark, "groups", id, scope.all);
+    if (hits.some((h) => scope.groups.includes(h)))
+        return "all";
+    return hits.length ? "checked" : null;
+}
+const kindOf = (o) => o["@odata.type"] === "#microsoft.graph.user"
+    ? "users"
+    : o["@odata.type"] === "#microsoft.graph.group"
+        ? "groups"
+        : null;
+const brief = (u) => ({
+    id: u.id,
+    name: u.displayName ?? null,
+    email: u.mail ?? u.userPrincipalName ?? null,
+    title: u.jobTitle ?? null,
+    department: u.department ?? null,
+});
+const groupBrief = (g) => ({
+    id: g.id,
+    name: g.displayName ?? null,
+    email: g.mail ?? null,
+    description: g.description ?? null,
+    kind: g.groupTypes?.includes("Unified")
+        ? "Microsoft 365"
+        : g.securityEnabled
+            ? "security"
+            : "distribution",
+});
+/** A person given as an object id or a sign-in name, as a Graph path segment. */
+function personRef(raw) {
+    const value = raw.trim();
+    if (!GUID.test(value) && !UPN.test(value))
+        throw new Denied("Give a person's id or sign-in name, such as ada@contoso.com");
+    return encodeURIComponent(value);
+}
+const searchWords = (raw) => {
+    const words = raw.replace(/["\\]/g, "").trim();
+    if (!words)
+        throw new Denied("Give a few letters of a name to search for");
+    return words;
+};
+/** The person, read and checked against the key's limits. */
+async function openPerson(ctx, mark, raw, query) {
+    const scope = directoryScope(ctx);
+    const denied = new Denied("This agent may not look up that person");
+    let person;
+    try {
+        person = await ok(ctx, mark, { method: "GET", path: `/v1.0/users/${personRef(raw)}?${query}` });
+    }
+    catch (error) {
+        // A kept key must not learn which sign-in names exist outside its groups.
+        if (scope && error instanceof VendorFailed && error.status === 404)
+            throw denied;
+        throw error;
+    }
+    if (!(await personAllowed(ctx, mark, scope, person.id)))
+        throw denied;
+    return person;
+}
+const page = z.number().int().min(1);
+// Under limits, filtering follows Graph's paging, so one page can keep nothing. A kept
+// listing reads on, at most this many pages, until it has `max` or the listing ends.
+export const MAX_SCOPED_PAGES = 5;
+/** A listing page kept to what `keep` allows; `next` continues after the last page read. */
+async function keptPage(ctx, mark, path, max, cursor, scoped, keep) {
+    const kept = [];
+    let next = cursor;
+    for (let read = 0; read < (scoped ? MAX_SCOPED_PAGES : 1); read++) {
+        const data = await ok(ctx, mark, { method: "GET", path: path(next), headers: EVENTUAL });
+        for (const item of await Promise.all(data.value.map(keep)))
+            if (item !== null)
+                kept.push(item);
+        next = nextCursor(data) ?? undefined;
+        if (!next || kept.length >= max)
+            break;
+    }
+    return { kept, more: Boolean(next), next: next ?? null };
+}
+export const entraTools = {
+    names: [
+        "entra_get_person",
+        "entra_search_people",
+        "entra_person_groups",
+        "entra_group_members",
+        "entra_search_groups",
+    ],
+    register(server, ctx, allowed) {
+        const readOnly = { readOnlyHint: true, openWorldHint: true };
+        const person = z
+            .string()
+            .max(320)
+            .describe("A person's id or sign-in name, such as ada@contoso.com.");
+        const groupId = z.string().max(36).describe("A group's id, from entra_search_groups.");
+        if (allowed.has("entra_get_person"))
+            server.registerTool("entra_get_person", {
+                description: "Look up one person: name, sign-in name, email, job title, department, office, whether the account is on, manager, direct reports and licenses (by product name).",
+                inputSchema: z.object({ person }),
+                annotations: readOnly,
+            }, ({ person: p }) => audited(ctx, "entra_get_person", p, async (mark) => {
+                const scope = directoryScope(ctx);
+                const u = await openPerson(ctx, mark, p, `$select=${PERSON_FIELDS},assignedLicenses&$expand=manager($select=${BRIEF_FIELDS})`);
+                const reports = await ok(ctx, mark, {
+                    method: "GET",
+                    path: `/v1.0/users/${encodeURIComponent(u.id)}/directReports/microsoft.graph.user?$select=${BRIEF_FIELDS}&$top=100&$count=true`,
+                    headers: EVENTUAL,
+                });
+                const shown = [];
+                for (const r of reports.value)
+                    if (await personAllowed(ctx, mark, scope, r.id))
+                        shown.push(brief(r));
+                const manager = u.manager;
+                const skuIds = (u.assignedLicenses ?? []).map((l) => l.skuId);
+                let licenses = [];
+                if (skuIds.length) {
+                    const skus = await ok(ctx, mark, {
+                        method: "GET",
+                        path: "/v1.0/subscribedSkus?$select=skuId,skuPartNumber",
+                    });
+                    const names = new Map(skus.value.map((s) => [
+                        s.skuId,
+                        s.skuPartNumber,
+                    ]));
+                    licenses = skuIds.map((id) => names.get(id) ?? id);
+                }
+                return json({
+                    ...brief(u),
+                    sign_in_name: u.userPrincipalName ?? null,
+                    office: u.officeLocation ?? null,
+                    account_enabled: u.accountEnabled ?? null,
+                    manager: manager?.id && (await personAllowed(ctx, mark, scope, manager.id))
+                        ? brief(manager)
+                        : null,
+                    direct_reports: shown,
+                    more_direct_reports: Boolean(reports["@odata.nextLink"]),
+                    licenses,
+                });
+            }));
+        if (allowed.has("entra_search_people"))
+            server.registerTool("entra_search_people", {
+                description: "Find people by part of their name or email. When `more` is true, call again with `cursor` set to `next`.",
+                inputSchema: z.object({
+                    query: z.string().max(100),
+                    max_results: page.max(50).default(25),
+                    cursor: cursorArg,
+                }),
+                annotations: readOnly,
+            }, ({ query, max_results, cursor }) => audited(ctx, "entra_search_people", query, async (mark) => {
+                const words = searchWords(query);
+                const scope = directoryScope(ctx);
+                const search = encodeURIComponent(`"displayName:${words}" OR "mail:${words}"`);
+                const { kept, more, next } = await keptPage(ctx, mark, (c) => `/v1.0/users?$search=${search}&$select=${BRIEF_FIELDS}&$count=true&${pageQuery(max_results, c)}`, max_results, cursor, Boolean(scope), async (u) => ((await personAllowed(ctx, mark, scope, u.id)) ? brief(u) : null));
+                return json({ people: kept, more, next });
+            }));
+        if (allowed.has("entra_person_groups"))
+            server.registerTool("entra_person_groups", {
+                description: "List the groups a person is in, directly or through other groups. When `more` is true, call again with `cursor` set to `next`.",
+                inputSchema: z.object({
+                    person,
+                    max_results: page.max(100).default(50),
+                    cursor: cursorArg,
+                }),
+                annotations: readOnly,
+            }, ({ person: p, max_results, cursor }) => audited(ctx, "entra_person_groups", p, async (mark) => {
+                const scope = directoryScope(ctx);
+                const u = await openPerson(ctx, mark, p, "$select=id");
+                const { kept, more, next } = await keptPage(ctx, mark, (c) => `/v1.0/users/${encodeURIComponent(u.id)}/transitiveMemberOf/microsoft.graph.group?$select=${GROUP_FIELDS}&$count=true&${pageQuery(max_results, c)}`, max_results, cursor, Boolean(scope), async (g) => ((await groupAccess(ctx, mark, scope, g.id)) ? groupBrief(g) : null));
+                return json({ groups: kept, more, next });
+            }));
+        if (allowed.has("entra_group_members"))
+            server.registerTool("entra_group_members", {
+                description: "List a group's direct members: people and groups inside it. When `more` is true, call again with `cursor` set to `next`.",
+                inputSchema: z.object({
+                    group_id: groupId,
+                    max_results: page.max(100).default(50),
+                    cursor: cursorArg,
+                }),
+                annotations: readOnly,
+            }, ({ group_id, max_results, cursor }) => audited(ctx, "entra_group_members", group_id, async (mark) => {
+                if (!GUID.test(group_id))
+                    throw new Denied("Give a group id from entra_search_groups");
+                const scope = directoryScope(ctx);
+                const access = await groupAccess(ctx, mark, scope, group_id);
+                if (!access)
+                    throw new Denied("This agent may not read that group");
+                const { kept, more, next } = await keptPage(ctx, mark, (c) => `/v1.0/groups/${group_id}/members?$select=${MEMBER_FIELDS}&$count=true&${pageQuery(max_results, c)}`, max_results, cursor, access === "checked", async (m) => {
+                    const kind = kindOf(m);
+                    if (!kind)
+                        return null;
+                    if (access === "checked" &&
+                        !(await memberOf(ctx, mark, kind, m.id, scope.all)).length)
+                        return null;
+                    return kind === "users"
+                        ? { type: "person", ...brief(m) }
+                        : { type: "group", ...groupBrief(m) };
+                });
+                return json({ members: kept, more, next });
+            }));
+        if (allowed.has("entra_search_groups"))
+            server.registerTool("entra_search_groups", {
+                description: "Find groups by part of their name. When `more` is true, call again with `cursor` set to `next`.",
+                inputSchema: z.object({
+                    query: z.string().max(100),
+                    max_results: page.max(50).default(25),
+                    cursor: cursorArg,
+                }),
+                annotations: readOnly,
+            }, ({ query, max_results, cursor }) => audited(ctx, "entra_search_groups", query, async (mark) => {
+                const words = searchWords(query);
+                const scope = directoryScope(ctx);
+                const search = encodeURIComponent(`"displayName:${words}"`);
+                const { kept, more, next } = await keptPage(ctx, mark, (c) => `/v1.0/groups?$search=${search}&$select=${GROUP_FIELDS}&$count=true&${pageQuery(max_results, c)}`, max_results, cursor, Boolean(scope), async (g) => ((await groupAccess(ctx, mark, scope, g.id)) ? groupBrief(g) : null));
+                return json({ groups: kept, more, next });
+            }));
+    },
+};
+//# sourceMappingURL=tools.js.map

package/dist/connectors/entra/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../connectors/entra/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,OAAO,EACP,MAAM,EACN,IAAI,EACJ,SAAS,EACT,YAAY,GAGb,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEpF,0FAA0F;AAC1F,+FAA+F;AAC/F,4FAA4F;AAC5F,mFAAmF;AACnF,kFAAkF;AAClF,sCAAsC;AAEtC,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAC/E,MAAM,GAAG,GAAG,iCAAiC,CAAC;AAC9C,2CAA2C;AAC3C,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,aAAa,GACjB,yFAAyF,CAAC;AAC5F,MAAM,YAAY,GAAG,2DAA2D,CAAC;AACjF,MAAM,YAAY,GAAG,4DAA4D,CAAC;AAClF,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,YAAY,IAAI,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3F,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;AAKlD,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,GAAgB;IAC7C,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,aAAa;QAC9C,MAAM,IAAI,MAAM,CACd,4BAA4B,aAAa,sEAAsE,CAChH,CAAC;IACJ,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAgB,EAChB,IAAU,EACV,IAAwB,EACxB,EAAU,EACV,GAAa;IAEb,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,SAAS,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,qBAAqB;QAClE,IAAI,EAAE,EAAE,GAAG,EAAE;KACd,CAAC,CAAC;IACH,OAAQ,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACvE,CAAC;AAID,KAAK,UAAU,aAAa,CAAC,GAAgB,EAAE,IAAU,EAAE,KAAmB,EAAE,EAAU;IACxF,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAClF,CAAC;AAED,6FAA6F;AAC7F,kFAAkF;AAClF,KAAK,UAAU,WAAW,CACxB,GAAgB,EAChB,IAAU,EACV,KAAmB,EACnB,EAAU;IAEV,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAY,EAAE,EAAE,CAC9B,CAAC,CAAC,aAAa,CAAC,KAAK,uBAAuB;IAC1C,CAAC,CAAC,OAAO;IACT,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,wBAAwB;QAC7C,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,IAAI,CAAC;AAEb,MAAM,KAAK,GAAG,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,EAAE;IACR,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;IAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,iBAAiB,IAAI,IAAI;IAC5C,KAAK,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;IACzB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;CACjC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC;IAClD,EAAE,EAAE,CAAC,CAAC,EAAE;IACR,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;IAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;IACrB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;IAClC,IAAI,EAAG,CAAC,CAAC,UAAmC,EAAE,QAAQ,CAAC,SAAS,CAAC;QAC/D,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,cAAc;CACrB,CAAC,CAAC;AAEH,iFAAiF;AACjF,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;QACvC,MAAM,IAAI,MAAM,CAAC,6DAA6D,CAAC,CAAC;IAClF,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,4CAA4C,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,6DAA6D;AAC7D,KAAK,UAAU,UAAU,CAAC,GAAgB,EAAE,IAAU,EAAE,GAAW,EAAE,KAAa;IAChF,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,wCAAwC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,IAAI,KAAK,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,MAAM,CAAC;QACjF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAAE,MAAM,MAAM,CAAC;IACtE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAErC,uFAAuF;AACvF,qFAAqF;AACrF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,4FAA4F;AAC5F,KAAK,UAAU,QAAQ,CACrB,GAAgB,EAChB,IAAU,EACV,IAA4C,EAC5C,GAAW,EACX,MAA0B,EAC1B,MAAe,EACf,IAAyC;IAEzC,MAAM,IAAI,GAAQ,EAAE,CAAC;IACrB,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzF,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,GAAG,CAAE,IAAI,CAAC,KAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzE,IAAI,IAAI,KAAK,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM;IACzC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAY;IACjC,KAAK,EAAE;QACL,kBAAkB;QAClB,qBAAqB;QACrB,qBAAqB;QACrB,qBAAqB;QACrB,qBAAqB;KACtB;IAED,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO;QAC3B,MAAM,QAAQ,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAW,CAAC;QACtE,MAAM,MAAM,GAAG,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,CAAC,yDAAyD,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;QAEvF,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACjC,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;gBACE,WAAW,EACT,kKAAkK;gBACpK,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;gBACjC,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAChB,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;gBAClC,MAAM,CAAC,GAAG,MAAM,UAAU,CACxB,GAAG,EACH,IAAI,EACJ,CAAC,EACD,WAAW,aAAa,6CAA6C,YAAY,GAAG,CACrF,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE;oBAClC,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,eAAe,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,+CAA+C,YAAY,uBAAuB;oBAC/H,OAAO,EAAE,QAAQ;iBAClB,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAoB;oBAC1C,IAAI,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAgC,CAAC;gBACnD,MAAM,MAAM,GAAI,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACvF,IAAI,QAAQ,GAAa,EAAE,CAAC;gBAC5B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE;wBAC/B,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,kDAAkD;qBACzD,CAAC,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAClB,IAAI,CAAC,KAAoD,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;wBACpE,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,aAAa;qBAChB,CAAC,CACH,CAAC;oBACF,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO,IAAI,CAAC;oBACV,GAAG,KAAK,CAAC,CAAC,CAAC;oBACX,YAAY,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;oBACzC,MAAM,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;oBAChC,eAAe,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;oBACzC,OAAO,EACL,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;wBAChE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;wBAChB,CAAC,CAAC,IAAI;oBACV,cAAc,EAAE,KAAK;oBACrB,mBAAmB,EAAE,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;oBACxD,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACpC,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;gBACE,WAAW,EACT,0GAA0G;gBAC5G,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;oBAC1B,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrC,MAAM,EAAE,SAAS;iBAClB,CAAC;gBACF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CACjC,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACxD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,KAAK,cAAc,KAAK,GAAG,CAAC,CAAC;gBAC/E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CACzC,GAAG,EACH,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE,CACJ,uBAAuB,MAAM,YAAY,YAAY,gBAAgB,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAClG,WAAW,EACX,MAAM,EACN,OAAO,CAAC,KAAK,CAAC,EACd,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAC/E,CAAC;gBACF,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACpC,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;gBACE,WAAW,EACT,gIAAgI;gBAClI,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,MAAM;oBACN,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtC,MAAM,EAAE,SAAS;iBAClB,CAAC;gBACF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CACrC,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACpD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;gBAClC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;gBACvD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CACzC,GAAG,EACH,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE,CACJ,eAAe,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,qDAAqD,YAAY,gBAAgB,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EACrJ,WAAW,EACX,MAAM,EACN,OAAO,CAAC,KAAK,CAAC,EACd,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAClF,CAAC;gBACF,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACpC,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;gBACE,WAAW,EACT,0HAA0H;gBAC5H,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,QAAQ,EAAE,OAAO;oBACjB,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtC,MAAM,EAAE,SAAS;iBAClB,CAAC;gBACF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CACpC,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,MAAM,CAAC,0CAA0C,CAAC,CAAC;gBACvF,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC7D,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,MAAM,CAAC,oCAAoC,CAAC,CAAC;gBACpE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CACzC,GAAG,EACH,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE,CACJ,gBAAgB,QAAQ,oBAAoB,aAAa,gBAAgB,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EACtG,WAAW,EACX,MAAM,EACN,MAAM,KAAK,SAAS,EACpB,KAAK,EAAE,CAAC,EAAE,EAAE;oBACV,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBACvB,IAAI,CAAC,IAAI;wBAAE,OAAO,IAAI,CAAC;oBACvB,IACE,MAAM,KAAK,SAAS;wBACpB,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,KAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;wBAE3D,OAAO,IAAI,CAAC;oBACd,OAAO,IAAI,KAAK,OAAO;wBACrB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;wBACjC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,CAAC,CACF,CAAC;gBACF,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACpC,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;gBACE,WAAW,EACT,iGAAiG;gBACnG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;oBAC1B,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrC,MAAM,EAAE,SAAS;iBAClB,CAAC;gBACF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CACjC,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACxD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,KAAK,GAAG,CAAC,CAAC;gBAC5D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CACzC,GAAG,EACH,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE,CACJ,wBAAwB,MAAM,YAAY,YAAY,gBAAgB,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EACnG,WAAW,EACX,MAAM,EACN,OAAO,CAAC,KAAK,CAAC,EACd,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAClF,CAAC;gBACF,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,CAAC,CAAC,CACL,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/connectors/fedex/connector.json

@@ -0,0 +1,118 @@
+{
+  "id": "fedex",
+  "name": "FedEx",
+  "description": "Let agents track shipments, compare rates and, if you allow it, create and cancel shipments on the FedEx accounts you choose.",
+  "logo": "/brand/registry/fedex.svg",
+  "identity": "A FedEx Developer Portal project named \"{brand.microsoft.appName}\", using the FedEx account numbers you enter here.",
+  "accountKey": "project",
+  "connectionKind": "guided",
+  "setup": [
+    {
+      "title": "Create a FedEx developer project",
+      "body": "Sign in to the FedEx Developer Portal with the FedEx user ID that manages your shipping accounts, open My Projects, and create an API project named \"{brand.microsoft.appName}\".",
+      "link": {
+        "label": "FedEx Developer Portal",
+        "href": "https://developer.fedex.com/api/en-us/home.html"
+      }
+    },
+    {
+      "title": "Choose its APIs",
+      "body": "Select these APIs for the project:",
+      "copy": ["{scope}"]
+    },
+    {
+      "title": "Add your account numbers",
+      "body": "Add the FedEx account numbers agents may rate and ship on to the project. You can narrow each agent to some of them here later."
+    },
+    {
+      "title": "Copy the keys",
+      "body": "Open the project's overview and copy its API key and secret key. Test keys work only with Sandbox; production keys appear once FedEx moves the project to production."
+    }
+  ],
+  "afterConnect": [],
+  "fields": [
+    {
+      "id": "environment",
+      "label": "Environment",
+      "secret": false,
+      "options": [
+        {
+          "value": "sandbox",
+          "label": "Sandbox",
+          "description": "FedEx's test system, with the project's test keys. Nothing is really shipped or charged."
+        },
+        {
+          "value": "production",
+          "label": "Production",
+          "description": "Real tracking, rates and shipments, with the project's production keys. Shipments are charged to your account."
+        }
+      ]
+    },
+    {
+      "id": "api_key",
+      "label": "API key",
+      "secret": false
+    },
+    {
+      "id": "secret_key",
+      "label": "Secret key",
+      "secret": true
+    },
+    {
+      "id": "account_numbers",
+      "label": "Account numbers",
+      "help": "The FedEx account numbers agents may use, separated by commas. Agents can never rate or ship on another.",
+      "placeholder": "123456789",
+      "secret": false
+    }
+  ],
+  "capabilities": [
+    {
+      "id": "track",
+      "label": "Track shipments",
+      "description": "Look up the status and scan history of shipments by tracking number.",
+      "required": true,
+      "scopes": ["Track API"],
+      "permissions": [],
+      "tools": ["fedex_track_shipments"]
+    },
+    {
+      "id": "rate",
+      "label": "Get rates",
+      "description": "Quote rates and transit times on your account numbers. Nothing is shipped.",
+      "scopes": ["Rates and Transit Times API"],
+      "permissions": [],
+      "tools": ["fedex_get_rates"]
+    },
+    {
+      "id": "ship",
+      "label": "Create and cancel shipments",
+      "description": "Create shipments and their labels, and cancel them. Each shipment is charged to your FedEx account unless it is cancelled.",
+      "destructive": true,
+      "costs": true,
+      "note": "Agents with this can spend money on your FedEx account. Keep each agent to the account numbers it needs.",
+      "scopes": ["Ship API"],
+      "permissions": [],
+      "tools": ["fedex_create_shipment", "fedex_cancel_shipment"]
+    }
+  ],
+  "limits": [
+    {
+      "id": "accounts",
+      "label": "Account numbers",
+      "help": "Leave empty to allow every account number connected here.",
+      "kind": "list",
+      "required": false,
+      "pattern": "^[0-9]{9,12}$"
+    }
+  ],
+  "verify": {
+    "label": "Track API reached",
+    "check": "track"
+  },
+  "discover": {
+    "label": "Account numbers",
+    "check": "accounts"
+  },
+  "revoke": "In the FedEx Developer Portal, open My Projects, then {brand.microsoft.appName}, and delete the project or regenerate its secret key."
+}

package/dist/connectors/fedex/index.js

@@ -0,0 +1,7 @@
+import { fedexTools } from "./tools.js";
+import { fedexVendor } from "./vendor.js";
+export default {
+    id: "fedex",
+    create: () => ({ vendor: fedexVendor(), toolset: fedexTools }),
+};
+//# sourceMappingURL=index.js.map

package/dist/connectors/fedex/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../connectors/fedex/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,eAAe;IACb,EAAE,EAAE,OAAO;IACX,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;CACrC,CAAC"}

package/dist/connectors/fedex/tools.js

@@ -0,0 +1,152 @@
+import { z } from "zod";
+import { vendorError } from "../../packages/connector-kit/src/oauth.js";
+import { connectedAccounts } from "./vendor.js";
+import { audited, Denied, json, listLimit, VendorFailed, } from "../../packages/connector-kit/src/common.js";
+// FedEx Track, Rate and Ship (developer.fedex.com OpenAPI files: /track/v1/trackingnumbers,
+// /rate/v1/rates/quotes, /ship/v1/shipments, PUT /ship/v1/shipments/cancel).
+const TRACKING_NUMBER = /^[A-Za-z0-9]{8,40}$/;
+async function ok(ctx, mark, req) {
+    const res = await ctx.call(req);
+    mark(res.status);
+    if (res.status < 200 || res.status >= 300) {
+        const detail = vendorError(res.data);
+        throw new VendorFailed(res.status, `FedEx answered ${res.status}${detail ? `: ${detail}` : ""}`);
+    }
+    return res.data;
+}
+// The account numbers this key may bill or quote on: the key's limit, and never one the
+// connection was not set up with.
+function allowedAccounts(ctx) {
+    const connected = connectedAccounts(ctx.config);
+    const limit = listLimit(ctx.limits, "accounts");
+    return new Set(limit ? connected.filter((a) => limit.includes(a)) : connected);
+}
+// Every account number anywhere in the request (the shipper's, a payor's for shipping or
+// duties, a third party's, a freight account) must be one this key may use. FedEx names them
+// accountNumber or ...AccountNumber, as { value } or a plain string.
+export function checkAccounts(ctx, body) {
+    const allowed = allowedAccounts(ctx);
+    const walk = (node) => {
+        if (Array.isArray(node))
+            return node.forEach(walk);
+        if (!node || typeof node !== "object")
+            return;
+        for (const [key, value] of Object.entries(node)) {
+            if (key.toLowerCase().endsWith("accountnumber")) {
+                const number = typeof value === "string"
+                    ? value
+                    : value &&
+                        typeof value === "object" &&
+                        typeof value.value === "string"
+                        ? value.value
+                        : null;
+                if (number === null)
+                    throw new Denied('Give each account number as { "value": "<account number>" }');
+                if (!allowed.has(number))
+                    throw new Denied(`This agent is not allowed to use FedEx account ${number}`);
+            }
+            walk(value);
+        }
+    };
+    walk(body);
+}
+const accountNumber = z.string().describe("A FedEx account number this agent may use.");
+const shipment = z
+    .record(z.string(), z.unknown())
+    .describe("FedEx requestedShipment object, as in FedEx's API (shipper, recipient(s), pickupType, serviceType, packagingType, requestedPackageLineItems, and for shipments shippingChargesPayment and labelSpecification).");
+export const fedexTools = {
+    names: [
+        "fedex_track_shipments",
+        "fedex_get_rates",
+        "fedex_create_shipment",
+        "fedex_cancel_shipment",
+    ],
+    register(server, ctx, allowed) {
+        const readOnly = { readOnlyHint: true, openWorldHint: true };
+        if (allowed.has("fedex_track_shipments"))
+            server.registerTool("fedex_track_shipments", {
+                description: "Track up to 30 FedEx shipments by tracking number.",
+                inputSchema: z.object({
+                    tracking_numbers: z.array(z.string()).min(1).max(30),
+                    include_detailed_scans: z
+                        .boolean()
+                        .default(false)
+                        .describe("Every scan event, not only the latest status."),
+                }),
+                annotations: readOnly,
+            }, ({ tracking_numbers, include_detailed_scans }) => audited(ctx, "fedex_track_shipments", tracking_numbers.join(","), async (mark) => {
+                const bad = tracking_numbers.find((t) => !TRACKING_NUMBER.test(t));
+                if (bad)
+                    throw new Denied(`${bad} is not a FedEx tracking number`);
+                const data = await ok(ctx, mark, {
+                    method: "POST",
+                    path: "/track/v1/trackingnumbers",
+                    body: {
+                        includeDetailedScans: include_detailed_scans,
+                        trackingInfo: tracking_numbers.map((trackingNumber) => ({
+                            trackingNumberInfo: { trackingNumber },
+                        })),
+                    },
+                });
+                return json(data);
+            }));
+        if (allowed.has("fedex_get_rates"))
+            server.registerTool("fedex_get_rates", {
+                description: "Get FedEx rates and transit times for a shipment, billed to an account this agent may use. Nothing is shipped.",
+                inputSchema: z.object({ account_number: accountNumber, requested_shipment: shipment }),
+                annotations: readOnly,
+            }, ({ account_number, requested_shipment }) => audited(ctx, "fedex_get_rates", account_number, async (mark) => {
+                const body = {
+                    accountNumber: { value: account_number },
+                    requestedShipment: requested_shipment,
+                };
+                checkAccounts(ctx, body);
+                const data = await ok(ctx, mark, {
+                    method: "POST",
+                    path: "/rate/v1/rates/quotes",
+                    body,
+                });
+                return json(data);
+            }));
+        if (allowed.has("fedex_create_shipment"))
+            server.registerTool("fedex_create_shipment", {
+                description: "Create a FedEx shipment and its label, billed to an account this agent may use. This buys the label: charges apply unless it is cancelled. Returns the tracking number and a label link valid for 12 hours.",
+                inputSchema: z.object({ account_number: accountNumber, requested_shipment: shipment }),
+                annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
+            }, ({ account_number, requested_shipment }) => audited(ctx, "fedex_create_shipment", account_number, async (mark, retarget) => {
+                const body = {
+                    accountNumber: { value: account_number },
+                    labelResponseOptions: "URL_ONLY",
+                    requestedShipment: requested_shipment,
+                };
+                checkAccounts(ctx, body);
+                const data = await ok(ctx, mark, { method: "POST", path: "/ship/v1/shipments", body });
+                const shipments = data.output?.transactionShipments;
+                const tracking = shipments?.map((s) => s.masterTrackingNumber).filter(Boolean) ?? [];
+                retarget(`${account_number}:${tracking.join(",") || "no tracking number"}`);
+                return json(data);
+            }));
+        if (allowed.has("fedex_cancel_shipment"))
+            server.registerTool("fedex_cancel_shipment", {
+                description: "Cancel a FedEx shipment (all of its packages) created on an account this agent may use.",
+                inputSchema: z.object({ account_number: accountNumber, tracking_number: z.string() }),
+                annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
+            }, ({ account_number, tracking_number }) => audited(ctx, "fedex_cancel_shipment", `${account_number}:${tracking_number}`, async (mark) => {
+                if (!TRACKING_NUMBER.test(tracking_number))
+                    throw new Denied(`${tracking_number} is not a FedEx tracking number`);
+                const body = {
+                    accountNumber: { value: account_number },
+                    trackingNumber: tracking_number,
+                    deletionControl: "DELETE_ALL_PACKAGES",
+                };
+                checkAccounts(ctx, body);
+                const data = await ok(ctx, mark, {
+                    method: "PUT",
+                    path: "/ship/v1/shipments/cancel",
+                    body,
+                });
+                return json(data);
+            }));
+    },
+};
+//# sourceMappingURL=tools.js.map

package/dist/connectors/fedex/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../connectors/fedex/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,OAAO,EACP,MAAM,EACN,IAAI,EACJ,SAAS,EACT,YAAY,GAGb,MAAM,4CAA4C,CAAC;AAEpD,4FAA4F;AAC5F,6EAA6E;AAE7E,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C,KAAK,UAAU,EAAE,CACf,GAAgB,EAChB,IAAyB,EACzB,GAAuC;IAEvC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjB,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,YAAY,CACpB,GAAG,CAAC,MAAM,EACV,kBAAkB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,IAA4B,CAAC;AAC1C,CAAC;AAED,wFAAwF;AACxF,kCAAkC;AAClC,SAAS,eAAe,CAAC,GAAgB;IACvC,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACjF,CAAC;AAED,yFAAyF;AACzF,6FAA6F;AAC7F,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,GAAgB,EAAE,IAAa;IAC3D,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBAChD,MAAM,MAAM,GACV,OAAO,KAAK,KAAK,QAAQ;oBACvB,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,KAAK;wBACH,OAAO,KAAK,KAAK,QAAQ;wBACzB,OAAQ,KAA6B,CAAC,KAAK,KAAK,QAAQ;wBAC1D,CAAC,CAAE,KAA2B,CAAC,KAAK;wBACpC,CAAC,CAAC,IAAI,CAAC;gBACb,IAAI,MAAM,KAAK,IAAI;oBACjB,MAAM,IAAI,MAAM,CAAC,6DAA6D,CAAC,CAAC;gBAClF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;oBACtB,MAAM,IAAI,MAAM,CAAC,kDAAkD,MAAM,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC;AACb,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC;AACxF,MAAM,QAAQ,GAAG,CAAC;KACf,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KAC/B,QAAQ,CACP,gNAAgN,CACjN,CAAC;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAY;IACjC,KAAK,EAAE;QACL,uBAAuB;QACvB,iBAAiB;QACjB,uBAAuB;QACvB,uBAAuB;KACxB;IAED,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO;QAC3B,MAAM,QAAQ,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAW,CAAC;QAEtE,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;YACtC,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;gBACE,WAAW,EAAE,oDAAoD;gBACjE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpD,sBAAsB,EAAE,CAAC;yBACtB,OAAO,EAAE;yBACT,OAAO,CAAC,KAAK,CAAC;yBACd,QAAQ,CAAC,+CAA+C,CAAC;iBAC7D,CAAC;gBACF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAC/C,OAAO,CAAC,GAAG,EAAE,uBAAuB,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC/E,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnE,IAAI,GAAG;oBAAE,MAAM,IAAI,MAAM,CAAC,GAAG,GAAG,iCAAiC,CAAC,CAAC;gBACnE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE;oBAC/B,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,2BAA2B;oBACjC,IAAI,EAAE;wBACJ,oBAAoB,EAAE,sBAAsB;wBAC5C,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;4BACtD,kBAAkB,EAAE,EAAE,cAAc,EAAE;yBACvC,CAAC,CAAC;qBACJ;iBACF,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAChC,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;gBACE,WAAW,EACT,gHAAgH;gBAClH,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;gBACtF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,EAAE,CACzC,OAAO,CAAC,GAAG,EAAE,iBAAiB,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC7D,MAAM,IAAI,GAAG;oBACX,aAAa,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;oBACxC,iBAAiB,EAAE,kBAAkB;iBACtC,CAAC;gBACF,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACzB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE;oBAC/B,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,uBAAuB;oBAC7B,IAAI;iBACL,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;YACtC,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;gBACE,WAAW,EACT,6MAA6M;gBAC/M,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;gBACtF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;aACjF,EACD,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,EAAE,CACzC,OAAO,CAAC,GAAG,EAAE,uBAAuB,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBAC7E,MAAM,IAAI,GAAG;oBACX,aAAa,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;oBACxC,oBAAoB,EAAE,UAAU;oBAChC,iBAAiB,EAAE,kBAAkB;iBACtC,CAAC;gBACF,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACzB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvF,MAAM,SAAS,GACb,IAAI,CAAC,MACN,EAAE,oBAAoB,CAAC;gBACxB,MAAM,QAAQ,GAAG,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrF,QAAQ,CAAC,GAAG,cAAc,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;gBAC5E,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;YACtC,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;gBACE,WAAW,EACT,yFAAyF;gBAC3F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACrF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;aACjF,EACD,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE,EAAE,EAAE,CACtC,OAAO,CACL,GAAG,EACH,uBAAuB,EACvB,GAAG,cAAc,IAAI,eAAe,EAAE,EACtC,KAAK,EAAE,IAAI,EAAE,EAAE;gBACb,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC;oBACxC,MAAM,IAAI,MAAM,CAAC,GAAG,eAAe,iCAAiC,CAAC,CAAC;gBACxE,MAAM,IAAI,GAAG;oBACX,aAAa,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;oBACxC,cAAc,EAAE,eAAe;oBAC/B,eAAe,EAAE,qBAAqB;iBACvC,CAAC;gBACF,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACzB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE;oBAC/B,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,2BAA2B;oBACjC,IAAI;iBACL,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC,CACF,CACJ,CAAC;IACN,CAAC;CACF,CAAC"}