Connector SDK and protocol

// The connector key is secret: only on your server.
async function deliver(observations: Observation[]) {
  const res = await fetch(`${BASE}/internal/v1/connections/${CONNECTION_ID}/observations`, {
    method: "POST",
    headers: { Authorization: `Bearer ${process.env.CCT_KEY}`, "Content-Type": "application/json" },
    body: JSON.stringify({ observations }), // up to 500
  });
  const { results } = await res.json();
  return results; // one per position: accepted · unchanged · stale · quarantined
}

func deliver(ctx context.Context, observations []Observation) ([]ObservationResult, error) {
    body, _ := json.Marshal(map[string]any{"observations": observations}) // up to 500
    url := base + "/internal/v1/connections/" + connectionID + "/observations"
    req, _ := http.NewRequestWithContext(ctx, http.MethodPost, url, bytes.NewReader(body))
    req.Header.Set("Authorization", "Bearer "+os.Getenv("CCT_KEY")) // secret: only on your server
    req.Header.Set("Content-Type", "application/json")
    res, err := http.DefaultClient.Do(req)
    if err != nil {
        return nil, err
    }
    defer res.Body.Close()
    var out struct {
        Results []ObservationResult `json:"results"` // one per position
    }
    if err := json.NewDecoder(res.Body).Decode(&out); err != nil {
        return nil, err
    }
    return out.Results, nil
}

curl -X POST "$BASE/internal/v1/connections/$CONNECTION_ID/observations" \
  -H "Authorization: Bearer $CCT_KEY" -H "Content-Type: application/json" \
  -d '{ "observations": [ { "entity": "item", "external_id": "1003", "operation": "delete" } ] }'