@arbium/enterprise-agent-connect 0.2.0 → 0.2.1-dev.7b4e802

package/dist/connectors/gitlab/connector.json

@@ -0,0 +1,263 @@
+{
+  "id": "gitlab",
+  "name": "GitLab",
+  "description": "Let agents read merge requests, pipelines, job logs and commits in the GitLab projects you choose, and comment on merge requests. For review prep, failed pipeline triage, release checks and status reports.",
+  "logo": "/brand/registry/gitlab.svg",
+  "identity": "A GitLab project or group access token. It acts as a bot member of that project or group, with the role you give it, and reaches nothing outside it.",
+  "accountKey": "host",
+  "connectionKind": "guided",
+  "setup": [
+    {
+      "title": "Create an access token",
+      "body": "Create the token on the group that holds the projects agents should see, or on one project. Give it the Reporter role and the read_api scope. If agents may comment on merge requests, keep the Reporter role and choose the api scope instead: Reporter can comment but cannot push code, merge or run pipelines. GitLab shows the token only once.",
+      "link": {
+        "label": "GitLab: project access tokens",
+        "href": "https://docs.gitlab.com/user/project/settings/project_access_tokens/"
+      },
+      "click": [
+        "In GitLab, open the group (or the project), then select Settings > Access tokens > Add new token.",
+        "Token name: AI agents. Set an expiration date.",
+        "Role: Reporter. Scopes: read_api (api if agents may comment).",
+        "Select Create group access token (or Create project access token) and copy the token."
+      ]
+    },
+    {
+      "title": "Find your GitLab address",
+      "body": "Enter the host name of your GitLab, such as gitlab.com or gitlab.example.com, without https://. You can test the token with the command below: it shows the token's bot user and changes nothing.",
+      "click": ["Copy the host name from your browser's address bar while you are in GitLab."],
+      "copy": [
+        "GITLAB_HOST=gitlab.example.com",
+        "curl -s --header \"PRIVATE-TOKEN: $GITLAB_TOKEN\" \"https://$GITLAB_HOST/api/v4/user\""
+      ],
+      "shell": "bash"
+    }
+  ],
+  "afterConnect": [],
+  "fields": [
+    {
+      "id": "host",
+      "label": "GitLab address",
+      "help": "The host name only, such as gitlab.com or gitlab.example.com.",
+      "placeholder": "gitlab.example.com",
+      "secret": false
+    },
+    { "id": "token", "label": "Access token", "secret": true }
+  ],
+  "capabilities": [
+    {
+      "id": "read",
+      "label": "Read merge requests and pipelines",
+      "description": "List and read merge requests with their changes and comments, list and read pipelines and their jobs, read a job's log, and list commits.",
+      "required": true,
+      "note": "Reaches every project the token can see unless you keep a key to chosen projects. Read-only.",
+      "scopes": ["read_api"],
+      "permissions": [],
+      "tools": [
+        "gitlab_list_merge_requests",
+        "gitlab_get_merge_request",
+        "gitlab_list_merge_request_changes",
+        "gitlab_list_merge_request_comments",
+        "gitlab_list_pipelines",
+        "gitlab_get_pipeline",
+        "gitlab_list_pipeline_jobs",
+        "gitlab_get_job_log",
+        "gitlab_list_commits"
+      ]
+    },
+    {
+      "id": "comment",
+      "label": "Comment on merge requests",
+      "description": "Add a comment to a merge request, such as a review brief. It can be marked internal, so only project members see it.",
+      "note": "Needs a token with the api scope. Keep its role at Reporter.",
+      "scopes": ["api"],
+      "permissions": [],
+      "tools": ["gitlab_add_merge_request_comment"]
+    }
+  ],
+  "limits": [
+    {
+      "id": "projects",
+      "label": "Projects",
+      "help": "Optional: only these projects, by their full path as in the project's address, such as platform/payments-api. Agents must then name projects by that path. Leave empty for every project the token can see.",
+      "kind": "list",
+      "required": false,
+      "pattern": "^[A-Za-z0-9_.-]+(/[A-Za-z0-9_.-]+)+$"
+    }
+  ],
+  "verify": { "method": "GET", "path": "/user", "label": "GitLab token user", "show": "username" },
+  "revoke": "In GitLab, open the group or project, go to Settings > Access tokens and revoke the token. Agents lose access to GitLab at once.",
+  "http": {
+    "baseUrl": "https://{host}/api/v4",
+    "auth": { "type": "header", "header": "PRIVATE-TOKEN", "value": "token" },
+    "tools": [
+      {
+        "name": "gitlab_list_merge_requests",
+        "description": "List a project's merge requests, newest first. Pass next from the answer as page for the next page.",
+        "method": "GET",
+        "path": "/projects/{project}/merge_requests",
+        "params": {
+          "project": {
+            "type": "string",
+            "description": "The project's full path, such as platform/payments-api, or its numeric id",
+            "in": "path",
+            "limit": "projects"
+          },
+          "state": {
+            "type": "string",
+            "enum": ["opened", "closed", "locked", "merged", "all"],
+            "description": "Only merge requests in this state",
+            "in": "query",
+            "default": "opened"
+          },
+          "target_branch": { "type": "string", "description": "Only those merging into this branch", "in": "query", "required": false },
+          "source_branch": { "type": "string", "description": "Only those from this branch", "in": "query", "required": false },
+          "labels": { "type": "string", "description": "Comma-separated labels, all of which must be on the merge request", "in": "query", "required": false },
+          "author_username": { "type": "string", "description": "Only those opened by this username", "in": "query", "required": false },
+          "reviewer_username": { "type": "string", "description": "Only those with this reviewer", "in": "query", "required": false },
+          "search": { "type": "string", "description": "Words in the title or description", "in": "query", "required": false },
+          "updated_after": { "type": "string", "description": "Only those updated after this time, ISO 8601, such as 2026-10-01T00:00:00Z", "in": "query", "required": false },
+          "per_page": { "type": "integer", "description": "How many per page, at most 100", "in": "query", "default": 20 },
+          "page": { "type": "integer", "description": "The next value of the previous answer", "in": "query", "required": false }
+        },
+        "paging": { "param": "page", "header": "X-Next-Page" },
+        "result": {
+          "fields": ["iid", "title", "state", "draft", "author.username", "reviewers.username", "source_branch", "target_branch", "labels", "detailed_merge_status", "has_conflicts", "updated_at", "web_url"]
+        }
+      },
+      {
+        "name": "gitlab_get_merge_request",
+        "description": "Read one merge request: description, branches, approvals state, merge status and its latest pipeline.",
+        "method": "GET",
+        "path": "/projects/{project}/merge_requests/{iid}",
+        "params": {
+          "project": { "type": "string", "description": "The project's full path or numeric id", "in": "path", "limit": "projects" },
+          "iid": { "type": "integer", "description": "The merge request number within the project (its iid)", "in": "path" }
+        }
+      },
+      {
+        "name": "gitlab_list_merge_request_changes",
+        "description": "List the files a merge request changes, with each file's diff. Pass next from the answer as page for the next page.",
+        "method": "GET",
+        "path": "/projects/{project}/merge_requests/{iid}/diffs",
+        "params": {
+          "project": { "type": "string", "description": "The project's full path or numeric id", "in": "path", "limit": "projects" },
+          "iid": { "type": "integer", "description": "The merge request number within the project (its iid)", "in": "path" },
+          "per_page": { "type": "integer", "description": "How many files per page, at most 100", "in": "query", "default": 20 },
+          "page": { "type": "integer", "description": "The next value of the previous answer", "in": "query", "required": false }
+        },
+        "paging": { "param": "page", "header": "X-Next-Page" }
+      },
+      {
+        "name": "gitlab_list_merge_request_comments",
+        "description": "List the comments on a merge request, newest first, including system notes such as approvals. Pass next from the answer as page for the next page.",
+        "method": "GET",
+        "path": "/projects/{project}/merge_requests/{iid}/notes",
+        "params": {
+          "project": { "type": "string", "description": "The project's full path or numeric id", "in": "path", "limit": "projects" },
+          "iid": { "type": "integer", "description": "The merge request number within the project (its iid)", "in": "path" },
+          "per_page": { "type": "integer", "description": "How many per page, at most 100", "in": "query", "default": 20 },
+          "page": { "type": "integer", "description": "The next value of the previous answer", "in": "query", "required": false }
+        },
+        "paging": { "param": "page", "header": "X-Next-Page" },
+        "result": { "fields": ["id", "author.username", "body", "system", "internal", "created_at"] }
+      },
+      {
+        "name": "gitlab_list_pipelines",
+        "description": "List a project's pipelines, newest first. Pass next from the answer as page for the next page.",
+        "method": "GET",
+        "path": "/projects/{project}/pipelines",
+        "params": {
+          "project": { "type": "string", "description": "The project's full path or numeric id", "in": "path", "limit": "projects" },
+          "status": {
+            "type": "string",
+            "enum": ["created", "waiting_for_resource", "preparing", "pending", "running", "success", "failed", "canceled", "skipped", "manual", "scheduled"],
+            "description": "Only pipelines in this status",
+            "in": "query",
+            "required": false
+          },
+          "ref": { "type": "string", "description": "Only pipelines for this branch or tag", "in": "query", "required": false },
+          "sha": { "type": "string", "description": "Only pipelines for this commit", "in": "query", "required": false },
+          "updated_after": { "type": "string", "description": "Only those updated after this time, ISO 8601", "in": "query", "required": false },
+          "per_page": { "type": "integer", "description": "How many per page, at most 100", "in": "query", "default": 20 },
+          "page": { "type": "integer", "description": "The next value of the previous answer", "in": "query", "required": false }
+        },
+        "paging": { "param": "page", "header": "X-Next-Page" },
+        "result": { "fields": ["id", "status", "ref", "sha", "source", "created_at", "updated_at", "web_url"] }
+      },
+      {
+        "name": "gitlab_get_pipeline",
+        "description": "Read one pipeline: status, branch, commit, who started it, timing and the reason it failed, if GitLab gives one.",
+        "method": "GET",
+        "path": "/projects/{project}/pipelines/{pipeline_id}",
+        "params": {
+          "project": { "type": "string", "description": "The project's full path or numeric id", "in": "path", "limit": "projects" },
+          "pipeline_id": { "type": "integer", "description": "The pipeline id", "in": "path" }
+        }
+      },
+      {
+        "name": "gitlab_list_pipeline_jobs",
+        "description": "List a pipeline's jobs with their stage, status and failure reason. Pass next from the answer as page for the next page.",
+        "method": "GET",
+        "path": "/projects/{project}/pipelines/{pipeline_id}/jobs",
+        "params": {
+          "project": { "type": "string", "description": "The project's full path or numeric id", "in": "path", "limit": "projects" },
+          "pipeline_id": { "type": "integer", "description": "The pipeline id", "in": "path" },
+          "scope": {
+            "type": "array",
+            "items": "string",
+            "enum": ["created", "pending", "running", "failed", "success", "canceled", "skipped", "waiting_for_resource", "manual"],
+            "description": "Only jobs in these statuses",
+            "in": "query",
+            "name": "scope[]",
+            "required": false
+          },
+          "include_retried": { "type": "boolean", "description": "Include jobs that were retried", "in": "query", "required": false },
+          "per_page": { "type": "integer", "description": "How many per page, at most 100", "in": "query", "default": 50 },
+          "page": { "type": "integer", "description": "The next value of the previous answer", "in": "query", "required": false }
+        },
+        "paging": { "param": "page", "header": "X-Next-Page" },
+        "result": { "fields": ["id", "name", "stage", "status", "failure_reason", "allow_failure", "duration", "started_at", "finished_at", "web_url"] }
+      },
+      {
+        "name": "gitlab_get_job_log",
+        "description": "Read a job's log as text, to see why it failed. Logs larger than 1 MB cannot be read.",
+        "method": "GET",
+        "path": "/projects/{project}/jobs/{job_id}/trace",
+        "params": {
+          "project": { "type": "string", "description": "The project's full path or numeric id", "in": "path", "limit": "projects" },
+          "job_id": { "type": "integer", "description": "The job id", "in": "path" }
+        }
+      },
+      {
+        "name": "gitlab_list_commits",
+        "description": "List commits on a branch, newest first, optionally only within dates or by one author. Pass next from the answer as page for the next page.",
+        "method": "GET",
+        "path": "/projects/{project}/repository/commits",
+        "params": {
+          "project": { "type": "string", "description": "The project's full path or numeric id", "in": "path", "limit": "projects" },
+          "ref_name": { "type": "string", "description": "The branch or tag; the default branch when left out", "in": "query", "required": false },
+          "since": { "type": "string", "description": "Only commits after this time, ISO 8601", "in": "query", "required": false },
+          "until": { "type": "string", "description": "Only commits before this time, ISO 8601", "in": "query", "required": false },
+          "author": { "type": "string", "description": "Only commits by this author name or email", "in": "query", "required": false },
+          "per_page": { "type": "integer", "description": "How many per page, at most 100", "in": "query", "default": 20 },
+          "page": { "type": "integer", "description": "The next value of the previous answer", "in": "query", "required": false }
+        },
+        "paging": { "param": "page", "header": "X-Next-Page" },
+        "result": { "fields": ["short_id", "title", "author_name", "author_email", "committed_date", "web_url"] }
+      },
+      {
+        "name": "gitlab_add_merge_request_comment",
+        "description": "Add a comment to a merge request. Markdown is allowed.",
+        "method": "POST",
+        "path": "/projects/{project}/merge_requests/{iid}/notes",
+        "params": {
+          "project": { "type": "string", "description": "The project's full path or numeric id", "in": "path", "limit": "projects" },
+          "iid": { "type": "integer", "description": "The merge request number within the project (its iid)", "in": "path" },
+          "body": { "type": "string", "description": "The comment, in Markdown", "in": "body" },
+          "internal": { "type": "boolean", "description": "Only project members can see it", "in": "body", "required": false }
+        },
+        "result": { "fields": ["id", "body", "internal", "created_at"] }
+      }
+    ]
+  }
+}

package/dist/connectors/grafana/connector.json

@@ -0,0 +1,162 @@
+{
+  "id": "grafana",
+  "name": "Grafana",
+  "description": "Let agents find and read Grafana dashboards and alert rules, and read alert state changes and annotations around an incident. For first response to production alerts.",
+  "logo": "/brand/registry/grafana.svg",
+  "identity": "A Grafana service account token. The service account has the Viewer role, so it reads what a viewer in your organization may read.",
+  "accountKey": "host",
+  "connectionKind": "guided",
+  "setup": [
+    {
+      "title": "Create a service account with the Viewer role",
+      "body": "You need a Grafana organization administrator for this. Viewer lets agents read dashboards, alert rules and annotations and change nothing.",
+      "link": {
+        "label": "Grafana: service accounts",
+        "href": "https://grafana.com/docs/grafana/latest/administration/service-accounts/"
+      },
+      "click": [
+        "In Grafana, select Administration > Users and access > Service accounts > Add service account.",
+        "Display name: AI agents. Select Create.",
+        "On the AI agents service account, set its role to Viewer with the role picker."
+      ]
+    },
+    {
+      "title": "Add a token",
+      "body": "Grafana shows the token only once. You can test it with the command below: it shows your organization's name and changes nothing.",
+      "click": [
+        "On the AI agents service account, select Add service account token.",
+        "Name: AI agents. Set an expiration date, then select Generate token and copy it."
+      ],
+      "copy": [
+        "GRAFANA_HOST=grafana.example.com",
+        "curl -s -H \"Authorization: Bearer $GRAFANA_TOKEN\" \"https://$GRAFANA_HOST/api/org/\""
+      ],
+      "shell": "bash"
+    }
+  ],
+  "afterConnect": [],
+  "fields": [
+    {
+      "id": "host",
+      "label": "Grafana address",
+      "help": "The host name of your Grafana, such as grafana.example.com or yourstack.grafana.net, without https://.",
+      "placeholder": "grafana.example.com",
+      "secret": false
+    },
+    { "id": "token", "label": "Service account token", "secret": true }
+  ],
+  "capabilities": [
+    {
+      "id": "read",
+      "label": "Read dashboards and alert rules",
+      "description": "Search dashboards and folders, read a dashboard's panels and queries, and list and read alert rules.",
+      "required": true,
+      "note": "Read-only. Reaches every dashboard and alert rule a viewer can see unless you keep a key to chosen folders. Reading alert rules with the Viewer role needs Grafana 11 or later.",
+      "scopes": [],
+      "permissions": ["Viewer"],
+      "tools": ["grafana_search", "grafana_get_dashboard", "grafana_list_alert_rules", "grafana_get_alert_rule"]
+    },
+    {
+      "id": "read_annotations",
+      "label": "Read annotations",
+      "description": "Read annotations in a time window, such as alert state changes, deployments and notes people added to graphs.",
+      "note": "Annotations are read across the organization, whatever folders a key is kept to.",
+      "scopes": [],
+      "permissions": ["Viewer"],
+      "tools": ["grafana_list_annotations"]
+    }
+  ],
+  "limits": [
+    {
+      "id": "folders",
+      "label": "Folders",
+      "help": "Optional: only dashboards and alert rules in these folders, by folder UID (in the folder's address after /dashboards/f/). Leave empty for every folder.",
+      "kind": "list",
+      "required": false,
+      "pattern": "^[A-Za-z0-9_-]{1,40}$"
+    }
+  ],
+  "verify": { "method": "GET", "path": "/api/org/", "label": "Grafana organization", "show": "name" },
+  "revoke": "In Grafana, go to Administration > Users and access > Service accounts, select AI agents and delete its token, or the service account. Agents lose access to Grafana at once.",
+  "http": {
+    "baseUrl": "https://{host}",
+    "auth": { "type": "bearer", "token": "token" },
+    "tools": [
+      {
+        "name": "grafana_search",
+        "description": "Search dashboards or folders by title, tag or folder. Pass page to read further pages, from 1.",
+        "method": "GET",
+        "path": "/api/search",
+        "params": {
+          "query": { "type": "string", "description": "Words in the title", "in": "query", "required": false },
+          "tag": { "type": "array", "items": "string", "description": "Only those with all these tags", "in": "query", "required": false },
+          "type": { "type": "string", "enum": ["dash-db", "dash-folder"], "description": "Dashboards or folders", "in": "query", "default": "dash-db" },
+          "folder_uids": {
+            "type": "array",
+            "items": "string",
+            "description": "Only in these folders, by UID",
+            "in": "query",
+            "name": "folderUIDs",
+            "required": false,
+            "limit": "folders"
+          },
+          "limit": { "type": "integer", "description": "Results per page", "in": "query", "default": 50 },
+          "page": { "type": "integer", "description": "The page, from 1", "in": "query", "default": 1 }
+        },
+        "result": { "fields": ["uid", "title", "type", "tags", "folderUid", "folderTitle", "url"] }
+      },
+      {
+        "name": "grafana_get_dashboard",
+        "description": "Read a dashboard by UID: its panels with their titles, queries and data sources, its variables and its folder.",
+        "method": "GET",
+        "path": "/api/dashboards/uid/{uid}",
+        "params": { "uid": { "type": "string", "description": "The dashboard UID", "in": "path" } },
+        "answerLimits": [{ "field": "meta.folderUid", "limit": "folders" }],
+        "result": {
+          "fields": [
+            "dashboard.uid",
+            "dashboard.title",
+            "dashboard.tags",
+            "dashboard.panels",
+            "dashboard.templating",
+            "meta.folderUid",
+            "meta.folderTitle",
+            "meta.url",
+            "meta.updated"
+          ]
+        }
+      },
+      {
+        "name": "grafana_list_alert_rules",
+        "description": "List every alert rule with its folder, group, condition and labels. Under a key kept to some folders, this answers only when every rule is in them; read one rule instead.",
+        "method": "GET",
+        "path": "/api/v1/provisioning/alert-rules",
+        "answerLimits": [{ "field": "folderUID", "limit": "folders" }],
+        "result": { "fields": ["uid", "title", "folderUID", "ruleGroup", "condition", "for", "labels", "annotations", "isPaused"] }
+      },
+      {
+        "name": "grafana_get_alert_rule",
+        "description": "Read one alert rule by UID: its queries, condition, labels, annotations such as the runbook, and how long it must hold before firing.",
+        "method": "GET",
+        "path": "/api/v1/provisioning/alert-rules/{uid}",
+        "params": { "uid": { "type": "string", "description": "The alert rule UID", "in": "path" } },
+        "answerLimits": [{ "field": "folderUID", "limit": "folders" }]
+      },
+      {
+        "name": "grafana_list_annotations",
+        "description": "List annotations in a time window, newest first: alert state changes (type alert) or notes people added (type annotation), optionally on one dashboard or with tags.",
+        "method": "GET",
+        "path": "/api/annotations",
+        "params": {
+          "from": { "type": "integer", "description": "Start of the window, milliseconds since 1970", "in": "query", "required": false },
+          "to": { "type": "integer", "description": "End of the window, milliseconds since 1970", "in": "query", "required": false },
+          "type": { "type": "string", "enum": ["alert", "annotation"], "description": "Alert state changes or notes", "in": "query", "required": false },
+          "dashboard_uid": { "type": "string", "description": "Only on this dashboard", "in": "query", "name": "dashboardUID", "required": false },
+          "tags": { "type": "array", "items": "string", "description": "Only those with all these tags", "in": "query", "required": false },
+          "limit": { "type": "integer", "description": "At most this many", "in": "query", "default": 100 }
+        },
+        "result": { "fields": ["id", "time", "timeEnd", "text", "tags", "dashboardUID", "panelId", "alertName", "newState", "prevState"] }
+      }
+    ]
+  }
+}

package/dist/connectors/http/index.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
 import { type Toolset } from "../../packages/connector-kit/src/common.js";
-import type { Connector, HttpApp, HttpAuth } from "../../packages/connector-kit/src/connector.js";
+import { type Connector, type HttpApp, type HttpAuth } from "../../packages/connector-kit/src/connector.js";
 import { type Fetch, type Limits, type Vendor, type VendorConnection } from "../../packages/connector-kit/src/types.js";
 export declare const MAX_RESPONSE_BYTES: number;
 export declare const MAX_BODY_BYTES: number;
@@ -11,6 +11,10 @@ export declare function formValues(connector: Connector, fields: Record<string,
     config: Record<string, string>;
     secret: Record<string, string>;
 };
+export declare function connectionAddress(connector: Connector, address: string, allowedHosts: string[] | undefined, tokenUrl: string | null, fetchImpl: Fetch, types?: RegExp, passed?: string): (c: Pick<VendorConnection, "config">) => {
+    url: import("node:url").URL;
+    safe: typeof fetch;
+};
 export declare function httpVendor(connector: Connector, fetchImpl?: Fetch): Vendor;
 export declare function answerWithin(data: unknown, path: string, values: string[]): boolean;
 export declare function paramLimits(limits: Limits, params: Record<string, {

package/dist/connectors/http/index.js

@@ -1,5 +1,8 @@
+import { lookup } from "node:dns/promises";
+import { isIP } from "node:net";
 import { z } from "zod";
 import { audited, Denied, json, listLimit, VendorFailed, } from "../../packages/connector-kit/src/common.js";
+import { checkHost, fillAddress, } from "../../packages/connector-kit/src/connector.js";
 import { clientCredentials, vendorError } from "../../packages/connector-kit/src/oauth.js";
 import { ConnectError, } from "../../packages/connector-kit/src/types.js";
 // The generic module behind every connector.json with an `http` block: an app described as
@@ -8,6 +11,20 @@ export const MAX_RESPONSE_BYTES = 1024 * 1024;
 export const MAX_BODY_BYTES = 256 * 1024;
 export const MAX_TARGET_BYTES = 8 * 1024;
 const TIMEOUT_MS = 30_000;
+// Cloud metadata services (169.254.169.254, fd00:ec2::254) hand out the server's own credentials,
+// and no app is served from a link-local address, so an address that resolves there is refused.
+// ponytail: checked at lookup, so a DNS answer that changes before the connect is not caught.
+// IPv4-mapped IPv6 comes back from URL as hex: ::ffff:a9fe:a9fe is 169.254.169.254.
+const LINK_LOCAL = /^(169\.254\.|::ffff:(169\.254\.|a9fe:)|fe[89ab][0-9a-f]:|fd00:ec2::254$)/i;
+async function refuseLinkLocal(hostname) {
+    const host = hostname.replace(/^\[|\]$/g, "");
+    // A name that does not resolve is left to the call itself to fail on.
+    const addresses = isIP(host)
+        ? [host]
+        : await lookup(host, { all: true }).then((all) => all.map((a) => a.address), () => []);
+    if (addresses.some((a) => LINK_LOCAL.test(a)))
+        throw new ConnectError(`${hostname} is a link-local address, which no app is reached at`);
+}
 // fetch that reaches only `allowed` origins, follows no redirect, gives up after TIMEOUT_MS and
 // reads at most MAX_RESPONSE_BYTES of JSON or text (or what `types` matches). Its refusals are
 // ConnectError.
@@ -18,6 +35,7 @@ passed = "JSON or text") {
         const url = new URL(input instanceof Request ? input.url : input);
         if (!allowed.includes(url.origin))
             throw new ConnectError(`${url.origin} is not this app's address`);
+        await refuseLinkLocal(url.hostname);
         const res = await fetchImpl(url, {
             ...init,
             redirect: "manual",
@@ -82,13 +100,35 @@ export function formValues(connector, fields) {
     }
     return { config, secret };
 }
+// An app's address filled in for one connection (its {field}s), and the guarded fetch reaching
+// only that origin (and the token service's), kept per origin so a token cache survives calls.
+export function connectionAddress(connector, address, allowedHosts, tokenUrl, fetchImpl, types, passed) {
+    const label = (id) => connector.fields.find((f) => f.id === id)?.label ?? id;
+    const fetches = new Map();
+    return (c) => {
+        const url = new URL(fillAddress(address, c.config, label));
+        checkHost(url, allowedHosts);
+        let safe = fetches.get(url.origin);
+        if (!safe) {
+            const origins = [url.origin, ...(tokenUrl ? [new URL(tokenUrl).origin] : [])];
+            safe = guardedFetch(origins, fetchImpl, types, passed);
+            fetches.set(url.origin, safe);
+        }
+        return { url, safe };
+    };
+}
 export function httpVendor(connector, fetchImpl = fetch) {
     const http = connector.http;
-    const base = new URL(http.baseUrl);
-    const prefix = base.pathname.replace(/\/+$/, "");
     const auth = http.auth;
-    const safe = guardedFetch([base.origin, ...(auth.type === "oauth2" ? [new URL(auth.tokenUrl).origin] : [])], fetchImpl);
-    const oauth = auth.type === "oauth2" ? clientCredentials(connector.name, safe) : null;
+    const addressOf = connectionAddress(connector, http.baseUrl, http.allowedHosts, auth.type === "oauth2" ? auth.tokenUrl : null, fetchImpl);
+    const clients = new Map();
+    const oauthFor = (origin, safe) => {
+        if (auth.type !== "oauth2")
+            return null;
+        if (!clients.has(origin))
+            clients.set(origin, clientCredentials(connector.name, safe));
+        return clients.get(origin);
+    };
     // Lower-case, so a configured Accept replaces the default rather than joining it.
     const fixed = Object.fromEntries(Object.entries(http.headers).map(([k, v]) => [k.toLowerCase(), v]));
     const oauthCreds = (c) => auth.type === "oauth2"
@@ -97,9 +137,22 @@ export function httpVendor(connector, fetchImpl = fetch) {
             clientId: c.config[auth.clientId],
             clientSecret: c.secret[auth.clientSecret],
             scope: auth.scope,
+            clientAuth: auth.clientAuth,
+            audience: auth.audience,
         }
         : null;
+    const fieldHeaders = (c) => Object.fromEntries(Object.entries(http.fieldHeaders).flatMap(([name, id]) => {
+        const value = c.secret[id] ?? c.config[id];
+        if (!value)
+            return [];
+        if (!/^[\x20-\x7E]*$/.test(value))
+            throw new ConnectError(`${name} can only hold plain letters, digits and symbols`);
+        return [[name.toLowerCase(), value]];
+    }));
     const call = async (c, request) => {
+        const { url: base, safe } = addressOf(c);
+        const prefix = base.pathname.replace(/\/+$/, "");
+        const oauth = oauthFor(base.origin, safe);
         // The path is the tool's, already encoded; it must stay under baseUrl's path.
         const url = new URL(`${base.origin}${prefix}${request.path}`);
         if (url.origin !== base.origin || !`${url.pathname}/`.startsWith(`${prefix}/`))
@@ -111,13 +164,14 @@ export function httpVendor(connector, fetchImpl = fetch) {
             path: `${url.pathname}${url.search}`,
             body: request.body,
         };
+        const headers = { ...fixed, ...fieldHeaders(c) };
         if (oauth)
-            return oauth.call(oauthCreds(c), base.origin, req, fixed);
+            return oauth.call(oauthCreds(c), base.origin, req, headers);
         const res = await safe(`${base.origin}${req.path}`, {
             method: req.method,
             headers: {
                 accept: "application/json",
-                ...fixed,
+                ...headers,
                 ...authHeaders(auth, c),
                 ...(req.body === undefined ? {} : { "content-type": "application/json" }),
             },
@@ -133,9 +187,9 @@ export function httpVendor(connector, fetchImpl = fetch) {
     return {
         async connect(fields) {
             const { config, secret } = formValues(connector, fields);
+            const { url: base, safe } = addressOf({ config });
             const conn = { config: { host: base.host, ...config }, secret };
-            if (oauth)
-                await oauth.signIn(oauthCreds(conn));
+            await oauthFor(base.origin, safe)?.signIn(oauthCreds(conn));
             return { ...conn, accountLabel: conn.config[connector.accountKey] ?? base.host };
         },
         call,