snipeit-eosl 1.0.0__tar.gz

snipeit_eosl-1.0.0/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and do
+          not modify the License. You may add Your own attribution notices
+          within Derivative Works that You distribute, alongside or as an
+          addendum to the NOTICE text from the Work, provided that such
+          additional attribution notices cannot be construed as modifying
+          the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions for
+      use, reproduction, or distribution of Your modifications, or for any
+      such Derivative Works as a whole, provided Your use, reproduction,
+      and distribution of the Work otherwise complies with the conditions
+      stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 EOSL.ai
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

snipeit_eosl-1.0.0/PKG-INFO

@@ -0,0 +1,130 @@
+Metadata-Version: 2.4
+Name: snipeit-eosl
+Version: 1.0.0
+Summary: Audit a Snipe-IT inventory against the EOSL.ai hardware end-of-service-life database.
+Author-email: "EOSL.ai" <hello@eosl.ai>
+License: Apache-2.0
+Project-URL: Homepage, https://eosl.ai
+Project-URL: Source, https://github.com/EOSL-AI/snipeit-eosl
+Project-URL: Issues, https://github.com/EOSL-AI/snipeit-eosl/issues
+Project-URL: Dataset, https://eosl.ai/dataset/
+Keywords: snipe-it,snipeit,itam,asset-management,eol,eosl,end-of-life,lifecycle
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: System :: Systems Administration
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+# snipeit-eosl
+
+Audit a [Snipe-IT](https://snipeitapp.com/) inventory against the
+[EOSL.ai](https://eosl.ai) hardware end-of-service-life database.
+
+Snipe-IT knows what hardware you own. It does not know when the manufacturer stops supporting it.
+This tells you, and links the manufacturer's own bulletin for every date so you can check it.
+
+**Read-only. Zero dependencies. One HTTP request to EOSL.ai regardless of inventory size.**
+
+```
+$ snipeit-eosl --url https://snipe.example.com
+
+EOSL.ai audit of Snipe-IT inventory
+==============================================================
+  Past end of service life          3 models    129 units
+  Tracked, still supported          2 models     18 units
+  Not tracked by EOSL.ai            3 models     13 units
+  TOTAL                             8 models    160 units
+
+PAST END OF SERVICE LIFE (3)
+--------------------------------------------------------------
+  Catalyst 3850 24-port          40 units  EOS 2020-10 EOSL 2025-10
+      source: https://www.cisco.com/c/en/us/products/collateral/...
+  MR33-HW                        85 units  EOS 2021-05 EOSL 2026-07
+      source: https://documentation.meraki.com/...
+```
+
+## Install
+
+```bash
+pip install snipeit-eosl
+```
+
+## Use
+
+Generate an API token in Snipe-IT under **Account → API Keys**. A read-only user is enough.
+
+```bash
+export SNIPEIT_URL=https://snipe.example.com
+export SNIPEIT_TOKEN=eyJ0eXAi...
+
+snipeit-eosl                       # human-readable summary
+snipeit-eosl --all                 # include current and untracked models
+snipeit-eosl --format csv -o eol-audit.csv
+snipeit-eosl --format json | jq '.rows[] | select(.status=="unsupported")'
+```
+
+**Exit codes:** `0` nothing past end of service life · `1` something is · `2` the audit could not run.
+That third one matters: a failed audit must never be mistakable for a clean one. Use it in CI:
+
+```yaml
+- run: snipeit-eosl        # fails the job when EOL hardware appears in the inventory
+```
+
+## How matching works
+
+Deterministic and conservative, in this order:
+
+1. **Exact** match on the part number.
+2. **Loose** match ignoring case and punctuation — `ws c3850 24t l` finds `WS-C3850-24T-L`.
+3. **Vendor-gated alias** — `FG-60E` finds `FortiGate-60E`, but *only* when the Snipe-IT manufacturer
+   is Fortinet, so one vendor's SKU can never land on another vendor's record.
+
+**It never fuzzy- or substring-matches.** `WS-C3850` does not resolve to `WS-C3850-24T-L`. An unknown
+part returns nothing rather than a plausible neighbour, because a confident wrong end-of-life date is
+worse than no date.
+
+It reads `model_number` first and falls back to the model `name`, since many real installs leave
+`model_number` blank. Which field matched is reported in `matched_on`, so a result is always
+traceable.
+
+### Snipe-IT already has an "EOL" field. It does not mean this.
+
+Snipe-IT models carry their own `eol` value, and its API returns it as a string like `"36 months"`.
+That is a **depreciation-style estimate of useful life measured from purchase** — a number somebody
+at your organisation typed in. It is not a manufacturer date and it has no source behind it.
+
+This tool reports the **manufacturer's published end-of-service-life date**, with a link to the
+bulletin it came from. The two answer different questions, and the built-in field is the one people
+mistake for this. `snipeit-eosl` reads it never and writes it never.
+
+### "Not tracked" is not "supported"
+
+Models EOSL.ai has no record for are reported as **unknown**, never folded in with the healthy ones.
+It means this database holds no date for that part — not that the part is fine. The tooling says so
+in every output format on purpose.
+
+## What this does not do
+
+- **It never writes to Snipe-IT.** Snipe-IT is a system of record, and a tool that quietly edits one
+  is a tool nobody should point at production. Write-back into a custom field was considered and
+  deliberately left out.
+- **It does not warrant the dates.** Every record links the manufacturer's bulletin. That bulletin
+  governs; this is a convenience layer over it.
+- **It does not invent dates.** If a manufacturer has published nothing, nothing is shown.
+
+## Related integrations
+
+Same data, same matching logic, different place to stand:
+
+- **[netbox-eosl](https://github.com/EOSL-AI/netbox-eosl)** — NetBox plugin
+- **[ansible-eosl](https://github.com/EOSL-AI/ansible-eosl)** — `eosl.lifecycle` Ansible collection
+- **[EOSL.ai API](https://eosl.ai/api/)** — public JSON API, MCP server, and CC BY dataset
+
+## Licence
+
+Apache-2.0. The underlying dataset is **CC BY 4.0** — free for commercial use with attribution.

snipeit_eosl-1.0.0/README.md

@@ -0,0 +1,108 @@
+# snipeit-eosl
+
+Audit a [Snipe-IT](https://snipeitapp.com/) inventory against the
+[EOSL.ai](https://eosl.ai) hardware end-of-service-life database.
+
+Snipe-IT knows what hardware you own. It does not know when the manufacturer stops supporting it.
+This tells you, and links the manufacturer's own bulletin for every date so you can check it.
+
+**Read-only. Zero dependencies. One HTTP request to EOSL.ai regardless of inventory size.**
+
+```
+$ snipeit-eosl --url https://snipe.example.com
+
+EOSL.ai audit of Snipe-IT inventory
+==============================================================
+  Past end of service life          3 models    129 units
+  Tracked, still supported          2 models     18 units
+  Not tracked by EOSL.ai            3 models     13 units
+  TOTAL                             8 models    160 units
+
+PAST END OF SERVICE LIFE (3)
+--------------------------------------------------------------
+  Catalyst 3850 24-port          40 units  EOS 2020-10 EOSL 2025-10
+      source: https://www.cisco.com/c/en/us/products/collateral/...
+  MR33-HW                        85 units  EOS 2021-05 EOSL 2026-07
+      source: https://documentation.meraki.com/...
+```
+
+## Install
+
+```bash
+pip install snipeit-eosl
+```
+
+## Use
+
+Generate an API token in Snipe-IT under **Account → API Keys**. A read-only user is enough.
+
+```bash
+export SNIPEIT_URL=https://snipe.example.com
+export SNIPEIT_TOKEN=eyJ0eXAi...
+
+snipeit-eosl                       # human-readable summary
+snipeit-eosl --all                 # include current and untracked models
+snipeit-eosl --format csv -o eol-audit.csv
+snipeit-eosl --format json | jq '.rows[] | select(.status=="unsupported")'
+```
+
+**Exit codes:** `0` nothing past end of service life · `1` something is · `2` the audit could not run.
+That third one matters: a failed audit must never be mistakable for a clean one. Use it in CI:
+
+```yaml
+- run: snipeit-eosl        # fails the job when EOL hardware appears in the inventory
+```
+
+## How matching works
+
+Deterministic and conservative, in this order:
+
+1. **Exact** match on the part number.
+2. **Loose** match ignoring case and punctuation — `ws c3850 24t l` finds `WS-C3850-24T-L`.
+3. **Vendor-gated alias** — `FG-60E` finds `FortiGate-60E`, but *only* when the Snipe-IT manufacturer
+   is Fortinet, so one vendor's SKU can never land on another vendor's record.
+
+**It never fuzzy- or substring-matches.** `WS-C3850` does not resolve to `WS-C3850-24T-L`. An unknown
+part returns nothing rather than a plausible neighbour, because a confident wrong end-of-life date is
+worse than no date.
+
+It reads `model_number` first and falls back to the model `name`, since many real installs leave
+`model_number` blank. Which field matched is reported in `matched_on`, so a result is always
+traceable.
+
+### Snipe-IT already has an "EOL" field. It does not mean this.
+
+Snipe-IT models carry their own `eol` value, and its API returns it as a string like `"36 months"`.
+That is a **depreciation-style estimate of useful life measured from purchase** — a number somebody
+at your organisation typed in. It is not a manufacturer date and it has no source behind it.
+
+This tool reports the **manufacturer's published end-of-service-life date**, with a link to the
+bulletin it came from. The two answer different questions, and the built-in field is the one people
+mistake for this. `snipeit-eosl` reads it never and writes it never.
+
+### "Not tracked" is not "supported"
+
+Models EOSL.ai has no record for are reported as **unknown**, never folded in with the healthy ones.
+It means this database holds no date for that part — not that the part is fine. The tooling says so
+in every output format on purpose.
+
+## What this does not do
+
+- **It never writes to Snipe-IT.** Snipe-IT is a system of record, and a tool that quietly edits one
+  is a tool nobody should point at production. Write-back into a custom field was considered and
+  deliberately left out.
+- **It does not warrant the dates.** Every record links the manufacturer's bulletin. That bulletin
+  governs; this is a convenience layer over it.
+- **It does not invent dates.** If a manufacturer has published nothing, nothing is shown.
+
+## Related integrations
+
+Same data, same matching logic, different place to stand:
+
+- **[netbox-eosl](https://github.com/EOSL-AI/netbox-eosl)** — NetBox plugin
+- **[ansible-eosl](https://github.com/EOSL-AI/ansible-eosl)** — `eosl.lifecycle` Ansible collection
+- **[EOSL.ai API](https://eosl.ai/api/)** — public JSON API, MCP server, and CC BY dataset
+
+## Licence
+
+Apache-2.0. The underlying dataset is **CC BY 4.0** — free for commercial use with attribution.

snipeit_eosl-1.0.0/pyproject.toml

@@ -0,0 +1,35 @@
+[build-system]
+requires = ["setuptools>=61"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "snipeit-eosl"
+version = "1.0.0"
+description = "Audit a Snipe-IT inventory against the EOSL.ai hardware end-of-service-life database."
+readme = "README.md"
+requires-python = ">=3.8"
+license = { text = "Apache-2.0" }
+authors = [{ name = "EOSL.ai", email = "hello@eosl.ai" }]
+keywords = ["snipe-it", "snipeit", "itam", "asset-management", "eol", "eosl", "end-of-life", "lifecycle"]
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Environment :: Console",
+  "Intended Audience :: System Administrators",
+  "License :: OSI Approved :: Apache Software License",
+  "Programming Language :: Python :: 3",
+  "Topic :: System :: Systems Administration",
+]
+# Zero runtime dependencies, matching the rest of the EOSL.ai project. stdlib only.
+dependencies = []
+
+[project.urls]
+Homepage = "https://eosl.ai"
+Source = "https://github.com/EOSL-AI/snipeit-eosl"
+Issues = "https://github.com/EOSL-AI/snipeit-eosl/issues"
+Dataset = "https://eosl.ai/dataset/"
+
+[project.scripts]
+snipeit-eosl = "snipeit_eosl.cli:main"
+
+[tool.setuptools]
+packages = ["snipeit_eosl"]

snipeit_eosl-1.0.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

snipeit_eosl-1.0.0/snipeit_eosl/cli.py

@@ -0,0 +1,91 @@
+"""snipeit-eosl — audit a Snipe-IT inventory against the EOSL.ai lifecycle database.
+
+Read-only. Exit codes: 0 nothing past EOSL, 1 something past EOSL (so it is usable in CI),
+2 an error occurred. The distinction matters: "the check failed to run" must never look like
+"the check passed".
+"""
+
+import argparse
+import csv
+import json
+import os
+import sys
+
+from . import eosl, report
+from .snipeit import SnipeIt, SnipeItError
+
+__version__ = "1.0.0"
+
+
+def build_parser():
+    p = argparse.ArgumentParser(
+        prog="snipeit-eosl",
+        description="Audit a Snipe-IT inventory against the EOSL.ai hardware lifecycle database.",
+        epilog="Credentials may also come from SNIPEIT_URL and SNIPEIT_TOKEN.",
+    )
+    p.add_argument("--url", default=os.environ.get("SNIPEIT_URL"),
+                   help="Snipe-IT base URL, e.g. https://snipe.example.com")
+    p.add_argument("--token", default=os.environ.get("SNIPEIT_TOKEN"),
+                   help="Snipe-IT API token (prefer the SNIPEIT_TOKEN env var)")
+    p.add_argument("--format", choices=("text", "json", "csv"), default="text")
+    p.add_argument("--all", action="store_true",
+                   help="include current and untracked models in the output")
+    p.add_argument("--output", "-o", help="write to a file instead of stdout")
+    p.add_argument("--timeout", type=int, default=30)
+    p.add_argument("--api-url", default=eosl.DEFAULT_API_URL,
+                   help="override the EOSL.ai lookup URL (for a mirror or an air-gapped copy)")
+    p.add_argument("--insecure", action="store_true",
+                   help="skip TLS verification for Snipe-IT (self-signed internal certs only)")
+    p.add_argument("--fail-on", choices=("never", "unsupported"), default="unsupported",
+                   help="exit 1 when models past end of service life are found (default) or never")
+    p.add_argument("--version", action="version", version="%(prog)s " + __version__)
+    return p
+
+
+def main(argv=None):
+    args = build_parser().parse_args(argv)
+    if not args.url or not args.token:
+        print("error: --url and --token are required (or set SNIPEIT_URL / SNIPEIT_TOKEN)",
+              file=sys.stderr)
+        return 2
+
+    try:
+        client = SnipeIt(args.url, args.token, timeout=args.timeout, insecure=args.insecure)
+        models = client.models()
+        skus = eosl.fetch_lookup(api_url=args.api_url, timeout=args.timeout)
+    except (SnipeItError, eosl.EoslError) as e:
+        # Exit 2, never 0. An audit that could not run has not found "no problems".
+        print("error: %s" % e, file=sys.stderr)
+        return 2
+
+    if not models:
+        print("error: Snipe-IT returned no models — nothing to audit. This is reported as an error "
+              "rather than a clean result on purpose.", file=sys.stderr)
+        return 2
+
+    rep = report.build(models, skus)
+
+    if args.format == "json":
+        text = json.dumps(rep, indent=2, sort_keys=True)
+    elif args.format == "csv":
+        import io
+        buf = io.StringIO()
+        csv.writer(buf, lineterminator="\n").writerows(report.to_csv_rows(rep))
+        text = buf.getvalue()
+    else:
+        text = report.to_text(rep, show_all=args.all)
+
+    if args.output:
+        with open(args.output, "w", encoding="utf-8", newline="") as fh:
+            fh.write(text if text.endswith("\n") else text + "\n")
+        print("wrote %s" % args.output, file=sys.stderr)
+    else:
+        print(text)
+
+    if args.fail_on == "unsupported" and rep["summary"]["unsupported"]["models"]:
+        return 1
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

snipeit_eosl-1.0.0/snipeit_eosl/eosl.py

@@ -0,0 +1,83 @@
+"""HTTP client for the EOSL.ai lifecycle dataset. Stdlib only — no third-party dependencies.
+
+ONE FETCH, NOT N. https://eosl.ai/data/lookup.json carries every tracked part number in a single
+document (~93 KB gzipped), so auditing an inventory of any size is one round trip.
+"""
+
+import gzip
+import io
+import json
+import urllib.error
+import urllib.request
+
+from . import matching
+
+DEFAULT_API_URL = "https://eosl.ai/data/lookup.json"
+USER_AGENT = "snipeit-eosl (+https://eosl.ai/)"
+
+
+class EoslError(Exception):
+    """Raised for any failure to obtain or parse the lifecycle data."""
+
+
+def fetch_lookup(api_url=DEFAULT_API_URL, timeout=30):
+    """Fetch and parse the lifecycle lookup document. Returns the list of sku records."""
+    req = urllib.request.Request(
+        api_url,
+        headers={
+            "Accept": "application/json",
+            "User-Agent": USER_AGENT,
+            "Accept-Encoding": "gzip",
+        },
+    )
+    try:
+        with urllib.request.urlopen(req, timeout=timeout) as resp:
+            raw = resp.read()
+    except urllib.error.HTTPError as e:
+        raise EoslError("HTTP %s fetching %s" % (e.code, api_url)) from e
+    except urllib.error.URLError as e:
+        raise EoslError("could not reach %s: %s" % (api_url, e.reason)) from e
+    except Exception as e:  # noqa: BLE001 - surface the cause, never proceed on partial data
+        raise EoslError("failed fetching %s: %s" % (api_url, e)) from e
+
+    # SNIFF THE BYTES, DO NOT TRUST Content-Encoding. Some clients decompress transparently but leave
+    # the header on, so branching on the header gunzips already-plain JSON. The magic number
+    # describes what the bytes ARE, which is the only thing that matters. (This exact bug shipped in
+    # ansible-eosl and was caught only in CI.)
+    if raw[:2] == b"\x1f\x8b":
+        raw = gzip.GzipFile(fileobj=io.BytesIO(raw)).read()
+
+    try:
+        data = json.loads(raw.decode("utf-8"))
+    except (ValueError, UnicodeDecodeError) as e:
+        raise EoslError("response from %s was not valid JSON: %s" % (api_url, e)) from e
+
+    skus = data.get("skus") if isinstance(data, dict) else None
+    if not isinstance(skus, list) or not skus:
+        # A 200 with an empty or truncated body is the exact failure that silently deleted 124
+        # families from this database in July 2026. Treat it as an error, NEVER as "no results" —
+        # otherwise every model in the inventory reports as untracked and the run looks clean.
+        raise EoslError(
+            "response from %s carried no part numbers — refusing to report an empty payload "
+            "as 'nothing tracked'" % api_url
+        )
+    return skus
+
+
+def resolve_many(parts, vendor_of=None, api_url=DEFAULT_API_URL, timeout=30, skus=None):
+    """Resolve an iterable of part numbers to normalised records.
+
+    `vendor_of` is an optional callable part -> vendor name, used only to gate vendor-specific SKU
+    aliases. Returns {part_as_supplied: record_or_None}.
+    """
+    if skus is None:
+        skus = fetch_lookup(api_url=api_url, timeout=timeout)
+    exact, loose_index = matching.build_index(skus)
+    out = {}
+    for p in parts:
+        if p is None or str(p).strip() == "":
+            continue
+        key = str(p)
+        vendor = vendor_of(key) if vendor_of else None
+        out[key] = matching.normalise(matching.match(key, vendor, exact, loose_index))
+    return out