@arbium/enterprise-agent-connect 0.0.0-stage → 0.1.2-dev.d2aa5ca

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,265 @@
-# Temporary Holding Version
+# Enterprise Agent Connect
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Connect your company's apps once, then give each AI agent its own key with only the access you
+grant it. Agents reach the apps through one MCP endpoint; every call is checked against the
+agent's grants and written to an audit log. Agents never hold the apps' credentials.
+
+- **Built-in apps:** Jira, Microsoft 365 (Outlook mail and calendar, SharePoint files and Excel,
+  Teams, Entra ID, Intune, Dynamics 365), Jamf Pro, Okta, Slack, Salesforce, Gong, SAP S/4HANA,
+  Oracle NetSuite, ServiceNow, Workday, FedEx, Dell TechDirect.
+- **Your own apps without code:** describe an internal REST API or a SaaS app's in one
+  `connector.json`, or draft one from its OpenAPI spec
+  ([docs/http-connector.md](docs/http-connector.md)); a SOAP service
+  ([docs/soap-connector.md](docs/soap-connector.md)) or an OData service such as SAP S/4HANA,
+  Dynamics 365 or SuccessFactors ([docs/odata-connector.md](docs/odata-connector.md)), drafted
+  from its WSDL or `$metadata`; or a database (PostgreSQL, SQL Server, MySQL, MariaDB, Oracle)
+  as named queries ([docs/sql-connector.md](docs/sql-connector.md)).
+- **Per-agent access:** tick what each agent can do per app, and limit it to values (mailboxes,
+  sites, projects, customers). Anything that deletes needs an explicit confirmation.
+- **Agents started by app events:** a Jira issue created or updated starts the agents you choose,
+  each within its own limits, by webhook or by polling apps that cannot send one
+  ([docs/triggers.md](docs/triggers.md)).
+- **Self-hosted:** one Node service and Postgres. No UI ships; the admin API
+  (`packages/server/openapi.json`) and the typed client (`packages/client`) are for building
+  your own admin pages.
+
+How it is secured: [docs/security.md](docs/security.md). Adding apps:
+[docs/connectors.md](docs/connectors.md).
+
+## Quick start (about 10 minutes)
+
+Needs Docker with Compose v2, `openssl` and `curl`. This runs the service, Postgres and a small
+example internal app (an orders API), then gives an agent read access to one customer's orders.
+
+```sh
+cd deploy/docker
+cp .env.example .env
+sed -i.bak "s|^CONNECT_ENCRYPTION_KEY=|CONNECT_ENCRYPTION_KEY=$(openssl rand -base64 32)|; \
+  s|^AGENT_CONNECT_ADMIN_TOKEN=|AGENT_CONNECT_ADMIN_TOKEN=$(openssl rand -hex 32)|; \
+  s|^POSTGRES_PASSWORD=|POSTGRES_PASSWORD=$(openssl rand -hex 24)|" .env && rm .env.bak
+docker compose -f docker-compose.yml -f docker-compose.example.yml up --build --wait
+```
+
+Keep `CONNECT_ENCRYPTION_KEY`: it seals every stored credential, and nothing saved opens without
+it. The service listens on port 3000 of this machine only and applies its database migrations.
+
+**1. Make an organization and connect the example app** (its API key is `example-key`):
+
+```sh
+TOKEN=$(grep ^AGENT_CONNECT_ADMIN_TOKEN .env | cut -d= -f2)
+admin() { curl -s -H "Authorization: Bearer $TOKEN" -H 'content-type: application/json' \
+  "http://localhost:3000/agent-connect/admin/v1$@"; }
+
+ORG=$(admin /orgs -X POST -d '{"name":"Example Org"}' | sed 's/.*"id":"\([^"]*\)".*/\1/')
+admin /orgs/$ORG/connections/orders -X PUT \
+  -d '{"capabilities":["read","notes"],"fields":{"api_key":"example-key"},"connectedBy":"Example Admin"}'
+```
+
+`capabilities` is the most any agent may get from this app; connecting runs the app's check.
+
+**2. Make an agent and grant it "Read orders" for customer `acme` only.** The key is shown once:
+
+```sh
+NEW=$(admin /orgs/$ORG/agents -X POST -d '{"name":"demo","createdBy":"Example Admin"}')
+KEY=$(echo "$NEW" | sed 's/.*"key":"\([^"]*\)".*/\1/')
+AGENT=$(echo "$NEW" | sed 's/.*"agent":{[^}]*"id":"\([^"]*\)".*/\1/')
+admin /orgs/$ORG/agents/$AGENT/grants/orders -X PUT \
+  -d '{"capabilities":["read"],"limits":{"customers":["acme"]},"by":"Example Admin"}'
+```
+
+**3. Use it from Claude Code:**
+
+```sh
+claude mcp add --transport http orders http://localhost:3000/agent-connect/mcp \
+  --header "Authorization: Bearer $KEY"
+```
+
+Ask Claude for acme's orders, then for order 1002 (a different customer's): the first works, the
+second is refused, and both are in the audit log (`admin /orgs/$ORG/audit`). Any MCP client works
+the same way, for example `curl`:
+
+```sh
+curl -s http://localhost:3000/agent-connect/mcp -H "Authorization: Bearer $KEY" \
+  -H 'content-type: application/json' -H 'accept: application/json, text/event-stream' \
+  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"orders_get","arguments":{"id":"1001"}}}'
+```
+
+Stop with `docker compose -f docker-compose.yml -f docker-compose.example.yml down` (add `-v` to
+delete the database too).
+
+**Going further:** connect a real app from `GET /agent-connect/admin/v1/connectors` (each one
+lists its setup steps, as click paths and as commands), add your own app
+([docs/http-connector.md](docs/http-connector.md)), or embed the service in your own Node app
+(below).
+
+Only `/agent-connect/mcp`, `/agent-connect/teams` and `/agent-connect/events` may be public. The admin API refuses any
+request that carries `X-Forwarded-For`, so never route it through a public load balancer.
+
+## Use it in your code
+
+```sh
+npm install @arbium/enterprise-agent-connect @arbium/enterprise-agent-connect-client
+```
+
+Both packages ship TypeScript types. Every snippet here is run by `scripts/consumer-test.sh`
+(full files: `scripts/consumer/`) against the packed packages, in CI.
+
+**Embed the service.** One instance per process, in a module of its own:
+
+```ts
+import { builtinConnectors, createAgentConnect } from "@arbium/enterprise-agent-connect";
+
+export const eac = await createAgentConnect({
+  database: { url: process.env.DATABASE_URL! }, // or a postgres.js instance
+  encryptionKey: process.env.CONNECT_ENCRYPTION_KEY!,
+  adminToken: process.env.AGENT_CONNECT_ADMIN_TOKEN!,
+  connectors: [...builtinConnectors, orders, inventory], // default: every built-in app
+});
+eac.start(); // the Teams and app event workers; await eac.stop() on shutdown
+```
+
+`connectors` is the list of apps this deployment offers. Leave it out for every built-in app;
+pass `builtinConnectors.filter((c) => ["jira", "fedex"].includes(c.id))` for only some.
+
+`eac.fetch` is a plain `(Request) => Promise<Response>` serving `/agent-connect/*`. Mount it at
+that path, before any body parser (Express and plain Node use `@hono/node-server`):
+
+```ts
+// Hono
+app.all("/agent-connect/*", (c) => eac.fetch(c.req.raw));
+
+// Express 5
+import { getRequestListener } from "@hono/node-server";
+app.all("/agent-connect/*splat", getRequestListener(eac.fetch));
+
+// Next.js: app/agent-connect/[...path]/route.ts (Node runtime)
+const handler = (req: Request) => eac.fetch(req);
+export { handler as GET, handler as POST, handler as PUT, handler as PATCH, handler as DELETE };
+
+// Plain Node
+import { serve } from "@hono/node-server";
+serve({ fetch: eac.fetch, port: 3000 });
+```
+
+**The typed admin client.** The admin API refuses requests that came through a load balancer
+(`X-Forwarded-For`), so call it from your server, over the network or in the same process:
+
+```ts
+import { createClient } from "@arbium/enterprise-agent-connect-client";
+
+const admin = createClient({ baseUrl: "http://localhost:3000", token: process.env.AGENT_CONNECT_ADMIN_TOKEN! });
+// In the same process as eac, with no network hop:
+// createClient({ baseUrl: "http://agent-connect", token, fetch: (input, init) => eac.fetch(new Request(input, init)) })
+
+const org = await admin.organizations.create("Example Org");
+await admin.connect(org.id, "orders", {
+  capabilities: ["read"],
+  fields: { api_key: "example-key" },
+  connectedBy: "Example Admin",
+});
+const { agent, key } = await admin.createAgent(org.id, { name: "demo", createdBy: "Example Admin" });
+await admin.setGrant(org.id, agent.id, "orders", ["read"], { customers: ["acme"] }, "Example Admin");
+const rows = await admin.audit(org.id, { agent: agent.id });
+```
+
+**Your own app, no code.** Pass a connector definition with an `http` block
+([docs/http-connector.md](docs/http-connector.md)), or a `soap` or `odata` block, straight into
+`connectors`. It is checked like
+a `connector.json`; the type is `ConnectorJson`:
+
+```ts
+import type { ConnectorJson } from "@arbium/enterprise-agent-connect";
+
+const orders: ConnectorJson = {
+  id: "orders",
+  name: "Orders",
+  // ...setup steps, fields, capabilities, limits and verify, as in a connector.json
+  http: {
+    baseUrl: "https://orders.internal.example.com/api",
+    auth: { type: "header", header: "X-Api-Key", value: "api_key" },
+    tools: [{ name: "orders_get", description: "Read one order by its id.", method: "GET", path: "/orders/{id}",
+      params: { id: { type: "string", description: "The order id", in: "path" } } }],
+  },
+};
+```
+
+**Your own app, as code.** Build a `ConnectorModule` on the connector kit and give it its
+definition as `connector` ([docs/connectors.md](docs/connectors.md)):
+
+```ts
+import { z } from "zod";
+import { audited, Denied, json, listLimit, type ConnectorModule } from "@arbium/enterprise-agent-connect/kit";
+
+const inventory: ConnectorModule = {
+  id: "inventory",
+  connector: { id: "inventory", /* ...the rest of its connector.json */ },
+  create: () => ({
+    vendor: { connect: async (fields) => ({ ... }), call: async (connection, request) => ({ ... }) },
+    toolset: {
+      names: ["inventory_get_stock"],
+      register(server, ctx, allowed) {
+        if (allowed.has("inventory_get_stock"))
+          server.registerTool("inventory_get_stock",
+            { description: "How many of one item are in stock.", inputSchema: z.object({ sku: z.string() }) },
+            ({ sku }) => audited(ctx, "inventory_get_stock", sku, async (mark) => {
+              const skus = listLimit(ctx.limits, "skus");
+              if (skus && !skus.includes(sku)) throw new Denied(`This agent may not read ${sku}`);
+              const res = await ctx.call({ method: "GET", path: `/stock/${encodeURIComponent(sku)}` });
+              mark(res.status);
+              return json(res.data);
+            }));
+      },
+    },
+  }),
+};
+```
+
+**Connect an agent.** Each agent uses its own key (`key` above) on one MCP endpoint,
+`<your origin>/agent-connect/mcp`:
+
+- Claude Code: `claude mcp add --transport http agent-connect https://agents.example.com/agent-connect/mcp --header "Authorization: Bearer $KEY"`
+- The Claude API's MCP connector (beta `mcp-client-2025-11-20`): `mcp_servers: [{ type: "url", url: "https://agents.example.com/agent-connect/mcp", name: "agent-connect", authorization_token: key }]` with `tools: [{ type: "mcp_toolset", mcp_server_name: "agent-connect" }]`. The endpoint must be reachable from the internet.
+- Claude Managed Agents: a vault `static_bearer` credential holding the key, keyed on the same URL.
+- Any MCP client over Streamable HTTP: `Authorization: Bearer <key>`; the quick start's `curl` shows the raw call.
+
+## Kubernetes
+
+To offer only some built-in apps, set `BUILTIN_APPS` to their ids, comma-separated (for example
+`jira,servicenow,sap-s4hana`; `GET /agent-connect/admin/v1/connectors` lists every id). Unset, every
+built-in app is offered. Apps you add with `CONNECTOR_DIRS` are always offered.
+
+`deploy/helm/agent-connect` is a small chart: one replica (Teams and app event run limits are
+counted in one process), a Service, and an optional Ingress with only the public paths. It needs the image
+(`image.repository`, `image.tag`; releases are `ghcr.io/try-caret/enterprise-agent-connect:<version>`) and a Secret with `DATABASE_URL`, `CONNECT_ENCRYPTION_KEY`
+and `AGENT_CONNECT_ADMIN_TOKEN` (`existingSecret`).
+
+## Layout
+
+- `packages/server`: the service (HTTP, admin API, MCP, Teams, app events, store,
+  migrations) and its tests
+- `packages/connector-kit`: what a connector builds on (schemas, tool helpers, vendor types)
+- `packages/client`: typed admin API client
+- `connectors/<app>`: one folder per app: `connector.json`, `index.ts`, `tools.ts`, `vendor.ts`
+- `connectors/http`, `connectors/soap`, `connectors/odata`, `connectors/sql`: run any app
+  described only in its `connector.json` (docs/http-connector.md, docs/soap-connector.md,
+  docs/odata-connector.md, docs/sql-connector.md)
+- `examples/internal-app`: a small internal API and its connector, for the quick start
+- `scripts/openapi-to-connector.ts`: drafts an http connector from an OpenAPI 3.x spec
+- `examples/legacy-apps`: a SOAP and an SAP OData connector, described only in JSON
+- `scripts/wsdl-to-connector.ts`, `scripts/odata-to-connector.ts`: draft a connector from a WSDL
+  or an OData `$metadata`
+- `examples/legacy-orders`: a small orders database and its connector
+- `deploy/docker`, `deploy/helm`: image, Compose file and chart
+
+## License
+
+[Apache License 2.0](LICENSE).
+
+## Development
+
+```sh
+npm ci
+npm run check
+scripts/test-databases.sh postgres://postgres@localhost:5432   # a scratch Postgres
+TEST_DATABASE_URL=postgres://postgres@localhost:5432/ac_test DATABASE_SSL=disable npm test
+```

package/dist/connectors/dell-techdirect/connector.json

@@ -0,0 +1,39 @@
+{
+  "id": "dell-techdirect",
+  "name": "Dell TechDirect",
+  "description": "Let agents look up warranty coverage for your Dell computers by service tag.",
+  "logo": "/brand/registry/dell.svg",
+  "identity": "An API key from your company's Dell TechDirect account, approved for the Warranty API.",
+  "accountKey": "keyId",
+  "connectionKind": "guided",
+  "setup": [
+    {
+      "title": "Request a Warranty API key",
+      "body": "Sign in to Dell TechDirect as your company's administrator, open APIs, and request access to the Warranty API. Dell reviews each request, which can take a few days.",
+      "link": { "label": "Dell TechDirect", "href": "https://techdirect.dell.com/" }
+    },
+    {
+      "title": "Copy the keys",
+      "body": "Once Dell approves the request, open APIs, then API Key Management, and copy the client ID and client secret of the production key."
+    }
+  ],
+  "afterConnect": [],
+  "fields": [
+    { "id": "client_id", "label": "Client ID", "secret": false },
+    { "id": "client_secret", "label": "Client secret", "secret": true }
+  ],
+  "capabilities": [
+    {
+      "id": "warranty",
+      "label": "Look up warranties",
+      "description": "Read the model, ship date and warranty coverage of Dell computers by service tag.",
+      "required": true,
+      "scopes": ["Warranty API"],
+      "permissions": [],
+      "tools": ["dell_warranty_lookup"]
+    }
+  ],
+  "limits": [],
+  "verify": { "label": "Dell answers", "check": "warranty" },
+  "revoke": "In Dell TechDirect, open APIs, then API Key Management, and delete the key."
+}

package/dist/connectors/dell-techdirect/index.d.ts

@@ -0,0 +1,8 @@
+declare const _default: {
+    id: string;
+    create: () => {
+        vendor: import("../../packages/connector-kit/src/types.js").Vendor;
+        toolset: import("../../packages/connector-kit/src/common.js").Toolset;
+    };
+};
+export default _default;

package/dist/connectors/dell-techdirect/index.js

@@ -0,0 +1,7 @@
+import { dellTools } from "./tools.js";
+import { dellVendor } from "./vendor.js";
+export default {
+    id: "dell-techdirect",
+    create: () => ({ vendor: dellVendor(), toolset: dellTools }),
+};
+//# sourceMappingURL=index.js.map

package/dist/connectors/dell-techdirect/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../connectors/dell-techdirect/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,eAAe;IACb,EAAE,EAAE,iBAAiB;IACrB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;CACnC,CAAC"}

package/dist/connectors/dell-techdirect/tools.d.ts

@@ -0,0 +1,2 @@
+import { type Toolset } from "../../packages/connector-kit/src/common.js";
+export declare const dellTools: Toolset;

package/dist/connectors/dell-techdirect/tools.js

@@ -0,0 +1,49 @@
+import { z } from "zod";
+import { ENTITLEMENTS_PATH } from "./vendor.js";
+import { vendorError } from "../../packages/connector-kit/src/oauth.js";
+import { audited, Denied, json, VendorFailed, } from "../../packages/connector-kit/src/common.js";
+const SERVICE_TAG = /^[A-Za-z0-9]{5,7}$/;
+export const dellTools = {
+    names: ["dell_warranty_lookup"],
+    register(server, ctx, allowed) {
+        if (allowed.has("dell_warranty_lookup"))
+            server.registerTool("dell_warranty_lookup", {
+                description: "Look up Dell warranty coverage for up to 100 service tags: the model, ship date and each support entitlement with its start and end dates.",
+                inputSchema: z.object({ service_tags: z.array(z.string()).min(1).max(100) }),
+                annotations: { readOnlyHint: true, openWorldHint: true },
+            }, ({ service_tags }) => audited(ctx, "dell_warranty_lookup", service_tags.join(","), async (mark) => {
+                const bad = service_tags.find((t) => !SERVICE_TAG.test(t));
+                if (bad)
+                    throw new Denied(`${bad} is not a Dell service tag`);
+                const tags = [...new Set(service_tags.map((t) => t.toUpperCase()))];
+                const res = await ctx.call({
+                    method: "GET",
+                    path: `${ENTITLEMENTS_PATH}?servicetags=${tags.join(",")}`,
+                });
+                mark(res.status);
+                if (res.status < 200 || res.status >= 300) {
+                    const detail = vendorError(res.data);
+                    throw new VendorFailed(res.status, `Dell answered ${res.status}${detail ? `: ${detail}` : ""}`);
+                }
+                if (!Array.isArray(res.data))
+                    throw new VendorFailed(res.status, "Dell answered without a list of assets");
+                const now = Date.now();
+                return json(res.data.map((a) => ({
+                    serviceTag: a.serviceTag,
+                    found: !a.invalid,
+                    product: a.productLineDescription ?? null,
+                    system: a.systemDescription ?? null,
+                    shipDate: a.shipDate ?? null,
+                    countryCode: a.countryCode ?? null,
+                    entitlements: (a.entitlements ?? []).map((e) => ({
+                        service: e.serviceLevelDescription ?? null,
+                        type: e.entitlementType ?? null,
+                        start: e.startDate ?? null,
+                        end: e.endDate ?? null,
+                        active: Date.parse(e.startDate ?? "") <= now && now <= Date.parse(e.endDate ?? ""),
+                    })),
+                })));
+            }));
+    },
+};
+//# sourceMappingURL=tools.js.map

package/dist/connectors/dell-techdirect/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../connectors/dell-techdirect/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EACL,OAAO,EACP,MAAM,EACN,IAAI,EACJ,YAAY,GAEb,MAAM,4CAA4C,CAAC;AAEpD,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAiBzC,MAAM,CAAC,MAAM,SAAS,GAAY;IAChC,KAAK,EAAE,CAAC,sBAAsB,CAAC;IAE/B,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO;QAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;YACrC,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;gBACE,WAAW,EACT,4IAA4I;gBAC9I,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5E,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;aACzD,EACD,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CACnB,OAAO,CAAC,GAAG,EAAE,sBAAsB,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC1E,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,IAAI,GAAG;oBAAE,MAAM,IAAI,MAAM,CAAC,GAAG,GAAG,4BAA4B,CAAC,CAAC;gBAC9D,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;gBACpE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC;oBACzB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,GAAG,iBAAiB,gBAAgB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;iBAC3D,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjB,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACrC,MAAM,IAAI,YAAY,CACpB,GAAG,CAAC,MAAM,EACV,iBAAiB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5D,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC1B,MAAM,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;gBAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,OAAO,IAAI,CACR,GAAG,CAAC,IAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAChC,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO;oBACjB,OAAO,EAAE,CAAC,CAAC,sBAAsB,IAAI,IAAI;oBACzC,MAAM,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;oBACnC,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;oBAC5B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;oBAClC,YAAY,EAAE,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC/C,OAAO,EAAE,CAAC,CAAC,uBAAuB,IAAI,IAAI;wBAC1C,IAAI,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;wBAC/B,KAAK,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;wBAC1B,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;wBACtB,MAAM,EACJ,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;qBAC7E,CAAC,CAAC;iBACJ,CAAC,CAAC,CACJ,CAAC;YACJ,CAAC,CAAC,CACL,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/connectors/dell-techdirect/vendor.d.ts

@@ -0,0 +1,6 @@
+import { type Fetch, type Vendor } from "../../packages/connector-kit/src/types.js";
+export declare const DELL_API = "https://apigtwb2c.us.dell.com";
+export declare const DELL_TOKEN_URL = "https://apigtwb2c.us.dell.com/auth/oauth/v2/token";
+export declare const ENTITLEMENTS_PATH = "/PROD/sbil/eapi/v5/asset-entitlements";
+export declare const PROBE_SERVICE_TAG = "0000000";
+export declare function dellVendor(fetchImpl?: Fetch): Vendor;