runline 0.33.0 → 0.34.0

package/dist/plugins/microsoftMail/src/index.js

@@ -1,4 +1,4 @@
-import { graphRequest, microsoftSetupHelp, userBase } from "../../_shared/microsoftAuth.js";
+import { graphRequest, microsoftCredential, microsoftSetupHelp, userBase, } from "../../_shared/microsoftAuth.js";
 const NAME = "microsoftMail";
 const SCOPES = [
     "https://graph.microsoft.com/Mail.Send",
@@ -11,7 +11,10 @@ const recipients = (addrs) => (Array.isArray(addrs) ? addrs : addrs ? [addrs] :
 function toMessage(input) {
     return {
         subject: input.subject,
-        body: { contentType: input.html ? "HTML" : "Text", content: input.body ?? "" },
+        body: {
+            contentType: input.html ? "HTML" : "Text",
+            content: input.body ?? "",
+        },
         toRecipients: recipients(input.to),
         ccRecipients: recipients(input.cc),
     };
@@ -19,13 +22,43 @@ function toMessage(input) {
 export default function microsoftMail(rl) {
     rl.setName(NAME);
     rl.setVersion("1.0.0");
+    rl.setCredential(microsoftCredential(NAME, SCOPES));
     rl.setConnectionSchema({
-        authMethod: { type: "string", required: false, description: "delegated or appOnly; legacy configs infer the method from existing credentials" },
-        tenantId: { type: "string", required: false, env: "MS_GRAPH_TENANT_ID", description: "Entra tenant id (app-only) or omit for OAuth /common" },
-        clientId: { type: "string", required: false, env: "MS_GRAPH_CLIENT_ID", description: "App (client) id" },
-        clientSecret: { type: "string", required: false, env: "MS_GRAPH_CLIENT_SECRET", description: "Client secret VALUE" },
-        refreshToken: { type: "string", required: false, env: "MICROSOFTMAIL_REFRESH_TOKEN", description: "OAuth2 refresh token (set by the login flow)" },
-        userUpn: { type: "string", required: false, env: "MS_GRAPH_USER_UPN", description: "App-only only: target mailbox UPN (e.g. agent@contoso.com)" },
+        authMethod: {
+            type: "string",
+            required: false,
+            description: "delegated or appOnly; legacy configs infer the method from existing credentials",
+        },
+        tenantId: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_TENANT_ID",
+            description: "Entra tenant id (app-only) or omit for OAuth /common",
+        },
+        clientId: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_CLIENT_ID",
+            description: "App (client) id",
+        },
+        clientSecret: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_CLIENT_SECRET",
+            description: "Client secret VALUE",
+        },
+        refreshToken: {
+            type: "string",
+            required: false,
+            env: "MICROSOFTMAIL_REFRESH_TOKEN",
+            description: "OAuth2 refresh token (set by the login flow)",
+        },
+        userUpn: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_USER_UPN",
+            description: "App-only only: target mailbox UPN (e.g. agent@contoso.com)",
+        },
     });
     rl.setOAuth({
         authUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
@@ -37,11 +70,19 @@ export default function microsoftMail(rl) {
         access: "write",
         description: "Send an email as the connected mailbox. Returns {success}. Get user approval before sending external mail.",
         inputSchema: {
-            to: { type: "array", required: true, description: "Recipient address(es)" },
+            to: {
+                type: "array",
+                required: true,
+                description: "Recipient address(es)",
+            },
             subject: { type: "string", required: true },
             body: { type: "string", required: true },
             cc: { type: "array", required: false },
-            html: { type: "boolean", required: false, description: "Body is HTML (default plain text)" },
+            html: {
+                type: "boolean",
+                required: false,
+                description: "Body is HTML (default plain text)",
+            },
         },
         async execute(input, ctx) {
             await graphRequest(ctx, NAME, SCOPES, "POST", `${userBase(ctx)}/sendMail`, {
@@ -70,17 +111,22 @@ export default function microsoftMail(rl) {
         access: "read",
         description: "List recent messages. Optional KQL search. Returns [{id,subject,from,receivedDateTime,bodyPreview,hasAttachments}].",
         inputSchema: {
-            search: { type: "string", required: false, description: "KQL search across the mailbox" },
+            search: {
+                type: "string",
+                required: false,
+                description: "KQL search across the mailbox",
+            },
             top: { type: "number", required: false, default: 20 },
         },
         async execute(input, ctx) {
+            const p = input;
             const qs = new URLSearchParams({
-                $top: String(input.top ?? 20),
+                $top: String(p.top ?? 20),
                 $select: "id,subject,from,receivedDateTime,bodyPreview,hasAttachments",
                 $orderby: "receivedDateTime desc",
             });
-            if (input.search)
-                qs.set("$search", `"${input.search}"`);
+            if (p.search)
+                qs.set("$search", `"${p.search}"`);
             const r = await graphRequest(ctx, NAME, SCOPES, "GET", `${userBase(ctx)}/messages?${qs}`);
             return r.value;
         },
@@ -90,7 +136,8 @@ export default function microsoftMail(rl) {
         description: "Get one message with full body by id.",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
-            return graphRequest(ctx, NAME, SCOPES, "GET", `${userBase(ctx)}/messages/${encodeURIComponent(input.id)}`);
+            const p = input;
+            return graphRequest(ctx, NAME, SCOPES, "GET", `${userBase(ctx)}/messages/${encodeURIComponent(p.id)}`);
         },
     });
 }

package/dist/plugins/misp/src/credentials.js

@@ -0,0 +1,16 @@
+import { httpsBase, staticCredential } from "../../_shared/credentials.js";
+/**
+ * A MISP automation key, sent raw in the Authorization header to the
+ * connection's own instance.
+ */
+export const mispCredential = staticCredential({
+    id: "misp",
+    auth: { kind: "apiKey", header: "Authorization" },
+    local: { secret: "apiKey" },
+    targets: (config) => ({
+        api: {
+            baseUrl: httpsBase(config.baseUrl, ""),
+            methods: ["GET", "POST", "PUT", "DELETE"],
+        },
+    }),
+});

package/dist/plugins/misp/src/index.js

@@ -1,25 +1,22 @@
-async function apiRequest(baseUrl, apiKey, method, endpoint, body) {
-    const opts = {
+import { credentialJson, pathSegment } from "../../_shared/credentials.js";
+import { mispCredential } from "./credentials.js";
+function req(ctx, method, path, body) {
+    return credentialJson(ctx, mispCredential, "misp", {
+        target: "api",
+        path,
         method,
-        headers: {
-            Authorization: apiKey,
-            Accept: "application/json",
-            "Content-Type": "application/json",
-        },
-    };
-    if (body &&
-        Object.keys(body).length > 0 &&
-        method !== "GET" &&
-        method !== "DELETE")
-        opts.body = JSON.stringify(body);
-    const res = await fetch(`${baseUrl}${endpoint}`, opts);
-    if (!res.ok)
-        throw new Error(`MISP API error ${res.status}: ${await res.text()}`);
-    return res.json();
+        ...(body &&
+            Object.keys(body).length > 0 &&
+            method !== "GET" &&
+            method !== "DELETE"
+            ? { json: body }
+            : {}),
+    });
 }
 export default function misp(rl) {
     rl.setName("misp");
     rl.setVersion("0.1.0");
+    rl.setCredential(mispCredential);
     rl.setConnectionSchema({
         baseUrl: {
             type: "string",
@@ -34,14 +31,6 @@ export default function misp(rl) {
             env: "MISP_API_KEY",
         },
     });
-    const conn = (ctx) => ({
-        baseUrl: ctx.connection.config.baseUrl.replace(/\/$/, ""),
-        apiKey: ctx.connection.config.apiKey,
-    });
-    const req = (ctx, method, ep, body) => {
-        const c = conn(ctx);
-        return apiRequest(c.baseUrl, c.apiKey, method, ep, body);
-    };
     // ── Attribute ───────────────────────────────────────
     rl.registerAction("attribute.create", {
         access: "write",
@@ -65,7 +54,7 @@ export default function misp(rl) {
             const body = { type, value };
             if (additionalFields)
                 Object.assign(body, additionalFields);
-            const data = (await req(ctx, "POST", `/attributes/add/${eventId}`, body));
+            const data = (await req(ctx, "POST", `attributes/add/${pathSegment(eventId)}`, body));
             return data.Attribute;
         },
     });
@@ -74,7 +63,7 @@ export default function misp(rl) {
         description: "Get an attribute by ID",
         inputSchema: { attributeId: { type: "string", required: true } },
         async execute(input, ctx) {
-            const data = (await req(ctx, "GET", `/attributes/view/${input.attributeId}`));
+            const data = (await req(ctx, "GET", `attributes/view/${pathSegment(input.attributeId)}`));
             return data.Attribute;
         },
     });
@@ -83,7 +72,7 @@ export default function misp(rl) {
         description: "List all attributes",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
-            let data = (await req(ctx, "GET", "/attributes"));
+            let data = (await req(ctx, "GET", "attributes"));
             if (input?.limit)
                 data = data.slice(0, input.limit);
             return data;
@@ -105,7 +94,7 @@ export default function misp(rl) {
             const body = searchBody ?? {};
             if (value)
                 body.value = value;
-            const data = (await req(ctx, "POST", "/attributes/restSearch", body));
+            const data = (await req(ctx, "POST", "attributes/restSearch", body));
             return data.response?.Attribute ?? [];
         },
     });
@@ -118,7 +107,7 @@ export default function misp(rl) {
         },
         async execute(input, ctx) {
             const { attributeId, updateFields } = input;
-            const data = (await req(ctx, "PUT", `/attributes/edit/${attributeId}`, updateFields));
+            const data = (await req(ctx, "PUT", `attributes/edit/${pathSegment(attributeId)}`, updateFields));
             return data.Attribute;
         },
     });
@@ -127,7 +116,7 @@ export default function misp(rl) {
         description: "Delete an attribute",
         inputSchema: { attributeId: { type: "string", required: true } },
         async execute(input, ctx) {
-            return req(ctx, "DELETE", `/attributes/delete/${input.attributeId}`);
+            return req(ctx, "DELETE", `attributes/delete/${pathSegment(input.attributeId)}`);
         },
     });
     // ── Event ───────────────────────────────────────────
@@ -152,7 +141,7 @@ export default function misp(rl) {
             const body = { org_id: orgId, info };
             if (additionalFields)
                 Object.assign(body, additionalFields);
-            const data = (await req(ctx, "POST", "/events", body));
+            const data = (await req(ctx, "POST", "events", body));
             return data.Event;
         },
     });
@@ -161,7 +150,7 @@ export default function misp(rl) {
         description: "Get an event by ID",
         inputSchema: { eventId: { type: "string", required: true } },
         async execute(input, ctx) {
-            const data = (await req(ctx, "GET", `/events/view/${input.eventId}`));
+            const data = (await req(ctx, "GET", `events/view/${pathSegment(input.eventId)}`));
             const event = data.Event;
             delete event.Attribute; // prevent excessive payload
             return event;
@@ -172,7 +161,7 @@ export default function misp(rl) {
         description: "List all events",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
-            let data = (await req(ctx, "GET", "/events"));
+            let data = (await req(ctx, "GET", "events"));
             if (input?.limit)
                 data = data.slice(0, input.limit);
             return data;
@@ -194,7 +183,7 @@ export default function misp(rl) {
             const body = searchBody ?? {};
             if (value)
                 body.value = value;
-            const data = (await req(ctx, "POST", "/events/restSearch", body));
+            const data = (await req(ctx, "POST", "events/restSearch", body));
             const response = data.response;
             return response?.map((e) => e.Event) ?? [];
         },
@@ -208,7 +197,7 @@ export default function misp(rl) {
         },
         async execute(input, ctx) {
             const { eventId, updateFields } = input;
-            const data = (await req(ctx, "PUT", `/events/edit/${eventId}`, updateFields));
+            const data = (await req(ctx, "PUT", `events/edit/${pathSegment(eventId)}`, updateFields));
             const event = data.Event;
             delete event.Attribute;
             return event;
@@ -219,7 +208,7 @@ export default function misp(rl) {
         description: "Publish an event",
         inputSchema: { eventId: { type: "string", required: true } },
         async execute(input, ctx) {
-            return req(ctx, "POST", `/events/publish/${input.eventId}`);
+            return req(ctx, "POST", `events/publish/${pathSegment(input.eventId)}`);
         },
     });
     rl.registerAction("event.unpublish", {
@@ -227,7 +216,7 @@ export default function misp(rl) {
         description: "Unpublish an event",
         inputSchema: { eventId: { type: "string", required: true } },
         async execute(input, ctx) {
-            return req(ctx, "POST", `/events/unpublish/${input.eventId}`);
+            return req(ctx, "POST", `events/unpublish/${pathSegment(input.eventId)}`);
         },
     });
     rl.registerAction("event.delete", {
@@ -235,7 +224,7 @@ export default function misp(rl) {
         description: "Delete an event",
         inputSchema: { eventId: { type: "string", required: true } },
         async execute(input, ctx) {
-            return req(ctx, "DELETE", `/events/delete/${input.eventId}`);
+            return req(ctx, "DELETE", `events/delete/${pathSegment(input.eventId)}`);
         },
     });
     // ── Event Tag ───────────────────────────────────────
@@ -248,7 +237,7 @@ export default function misp(rl) {
         },
         async execute(input, ctx) {
             const { eventId, tagId } = input;
-            return req(ctx, "POST", "/events/addTag", { event: eventId, tag: tagId });
+            return req(ctx, "POST", "events/addTag", { event: eventId, tag: tagId });
         },
     });
     rl.registerAction("eventTag.remove", {
@@ -260,7 +249,7 @@ export default function misp(rl) {
         },
         async execute(input, ctx) {
             const { eventId, tagId } = input;
-            return req(ctx, "POST", `/events/removeTag/${eventId}/${tagId}`);
+            return req(ctx, "POST", `events/removeTag/${pathSegment(eventId)}/${pathSegment(tagId)}`);
         },
     });
     // ── Feed ────────────────────────────────────────────
@@ -282,7 +271,7 @@ export default function misp(rl) {
             const body = { name, provider, url };
             if (additionalFields)
                 Object.assign(body, additionalFields);
-            const data = (await req(ctx, "POST", "/feeds/add", body));
+            const data = (await req(ctx, "POST", "feeds/add", body));
             return data.Feed;
         },
     });
@@ -291,7 +280,7 @@ export default function misp(rl) {
         description: "Get a feed by ID",
         inputSchema: { feedId: { type: "string", required: true } },
         async execute(input, ctx) {
-            const data = (await req(ctx, "GET", `/feeds/view/${input.feedId}`));
+            const data = (await req(ctx, "GET", `feeds/view/${pathSegment(input.feedId)}`));
             return data.Feed;
         },
     });
@@ -300,7 +289,7 @@ export default function misp(rl) {
         description: "List all feeds",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
-            let data = (await req(ctx, "GET", "/feeds"));
+            let data = (await req(ctx, "GET", "feeds"));
             data = data.map((e) => e.Feed);
             if (input?.limit)
                 data = data.slice(0, input.limit);
@@ -316,7 +305,7 @@ export default function misp(rl) {
         },
         async execute(input, ctx) {
             const { feedId, updateFields } = input;
-            const data = (await req(ctx, "PUT", `/feeds/edit/${feedId}`, updateFields));
+            const data = (await req(ctx, "PUT", `feeds/edit/${pathSegment(feedId)}`, updateFields));
             return data.Feed;
         },
     });
@@ -325,7 +314,7 @@ export default function misp(rl) {
         description: "Enable a feed",
         inputSchema: { feedId: { type: "string", required: true } },
         async execute(input, ctx) {
-            return req(ctx, "POST", `/feeds/enable/${input.feedId}`);
+            return req(ctx, "POST", `feeds/enable/${pathSegment(input.feedId)}`);
         },
     });
     rl.registerAction("feed.disable", {
@@ -333,7 +322,7 @@ export default function misp(rl) {
         description: "Disable a feed",
         inputSchema: { feedId: { type: "string", required: true } },
         async execute(input, ctx) {
-            return req(ctx, "POST", `/feeds/disable/${input.feedId}`);
+            return req(ctx, "POST", `feeds/disable/${pathSegment(input.feedId)}`);
         },
     });
     // ── Galaxy ──────────────────────────────────────────
@@ -342,7 +331,7 @@ export default function misp(rl) {
         description: "Get a galaxy by ID",
         inputSchema: { galaxyId: { type: "string", required: true } },
         async execute(input, ctx) {
-            const data = (await req(ctx, "GET", `/galaxies/view/${input.galaxyId}`));
+            const data = (await req(ctx, "GET", `galaxies/view/${pathSegment(input.galaxyId)}`));
             return data.Galaxy;
         },
     });
@@ -351,7 +340,7 @@ export default function misp(rl) {
         description: "List all galaxies",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
-            let data = (await req(ctx, "GET", "/galaxies"));
+            let data = (await req(ctx, "GET", "galaxies"));
             data = data.map((e) => e.Galaxy);
             if (input?.limit)
                 data = data.slice(0, input.limit);
@@ -363,7 +352,7 @@ export default function misp(rl) {
         description: "Delete a galaxy",
         inputSchema: { galaxyId: { type: "string", required: true } },
         async execute(input, ctx) {
-            return req(ctx, "DELETE", `/galaxies/delete/${input.galaxyId}`);
+            return req(ctx, "DELETE", `galaxies/delete/${pathSegment(input.galaxyId)}`);
         },
     });
     // ── Noticelist ──────────────────────────────────────
@@ -372,7 +361,7 @@ export default function misp(rl) {
         description: "Get a noticelist by ID",
         inputSchema: { noticelistId: { type: "string", required: true } },
         async execute(input, ctx) {
-            const data = (await req(ctx, "GET", `/noticelists/view/${input.noticelistId}`));
+            const data = (await req(ctx, "GET", `noticelists/view/${pathSegment(input.noticelistId)}`));
             return data.Noticelist;
         },
     });
@@ -381,7 +370,7 @@ export default function misp(rl) {
         description: "List all noticelists",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
-            let data = (await req(ctx, "GET", "/noticelists"));
+            let data = (await req(ctx, "GET", "noticelists"));
             data = data.map((e) => e.Noticelist);
             if (input?.limit)
                 data = data.slice(0, input.limit);
@@ -401,7 +390,7 @@ export default function misp(rl) {
             const body = searchBody ?? {};
             if (value)
                 body.value = value;
-            const data = (await req(ctx, "POST", "/objects/restSearch", body));
+            const data = (await req(ctx, "POST", "objects/restSearch", body));
             const response = data.response;
             return response?.map((o) => o.Object) ?? [];
         },
@@ -423,7 +412,7 @@ export default function misp(rl) {
             const body = { name };
             if (additionalFields)
                 Object.assign(body, additionalFields);
-            const data = (await req(ctx, "POST", "/admin/organisations/add", body));
+            const data = (await req(ctx, "POST", "admin/organisations/add", body));
             return data.Organisation;
         },
     });
@@ -432,7 +421,7 @@ export default function misp(rl) {
         description: "Get an organisation by ID",
         inputSchema: { organisationId: { type: "string", required: true } },
         async execute(input, ctx) {
-            const data = (await req(ctx, "GET", `/organisations/view/${input.organisationId}`));
+            const data = (await req(ctx, "GET", `organisations/view/${pathSegment(input.organisationId)}`));
             return data.Organisation;
         },
     });
@@ -441,7 +430,7 @@ export default function misp(rl) {
         description: "List all organisations",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
-            let data = (await req(ctx, "GET", "/organisations"));
+            let data = (await req(ctx, "GET", "organisations"));
             data = data.map((e) => e.Organisation);
             if (input?.limit)
                 data = data.slice(0, input.limit);
@@ -457,7 +446,7 @@ export default function misp(rl) {
         },
         async execute(input, ctx) {
             const { organisationId, updateFields } = input;
-            const data = (await req(ctx, "PUT", `/admin/organisations/edit/${organisationId}`, updateFields));
+            const data = (await req(ctx, "PUT", `admin/organisations/edit/${pathSegment(organisationId)}`, updateFields));
             return data.Organisation;
         },
     });
@@ -466,7 +455,7 @@ export default function misp(rl) {
         description: "Delete an organisation",
         inputSchema: { organisationId: { type: "string", required: true } },
         async execute(input, ctx) {
-            return req(ctx, "DELETE", `/admin/organisations/delete/${input.organisationId}`);
+            return req(ctx, "DELETE", `admin/organisations/delete/${pathSegment(input.organisationId)}`);
         },
     });
     // ── Tag ─────────────────────────────────────────────
@@ -487,8 +476,8 @@ export default function misp(rl) {
             if (colour)
                 body.colour = colour.startsWith("#")
                     ? colour
-                    : `#${colour}`;
-            const data = (await req(ctx, "POST", "/tags/add", body));
+                    : `#${encodeURIComponent(colour)}`;
+            const data = (await req(ctx, "POST", "tags/add", body));
             return data.Tag;
         },
     });
@@ -497,7 +486,7 @@ export default function misp(rl) {
         description: "List all tags",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
-            const data = (await req(ctx, "GET", "/tags"));
+            const data = (await req(ctx, "GET", "tags"));
             let tags = data.Tag;
             if (input?.limit)
                 tags = tags.slice(0, input.limit);
@@ -520,8 +509,8 @@ export default function misp(rl) {
             if (colour)
                 body.colour = colour.startsWith("#")
                     ? colour
-                    : `#${colour}`;
-            const data = (await req(ctx, "POST", `/tags/edit/${tagId}`, body));
+                    : `#${encodeURIComponent(colour)}`;
+            const data = (await req(ctx, "POST", `tags/edit/${pathSegment(tagId)}`, body));
             return data.Tag;
         },
     });
@@ -530,7 +519,7 @@ export default function misp(rl) {
         description: "Delete a tag",
         inputSchema: { tagId: { type: "string", required: true } },
         async execute(input, ctx) {
-            return req(ctx, "POST", `/tags/delete/${input.tagId}`);
+            return req(ctx, "POST", `tags/delete/${pathSegment(input.tagId)}`);
         },
     });
     // ── User ────────────────────────────────────────────
@@ -551,7 +540,7 @@ export default function misp(rl) {
             const body = { email, role_id: roleId };
             if (additionalFields)
                 Object.assign(body, additionalFields);
-            const data = (await req(ctx, "POST", "/admin/users/add", body));
+            const data = (await req(ctx, "POST", "admin/users/add", body));
             return data.User;
         },
     });
@@ -560,7 +549,7 @@ export default function misp(rl) {
         description: "Get a user by ID",
         inputSchema: { userId: { type: "string", required: true } },
         async execute(input, ctx) {
-            const data = (await req(ctx, "GET", `/admin/users/view/${input.userId}`));
+            const data = (await req(ctx, "GET", `admin/users/view/${pathSegment(input.userId)}`));
             return data.User;
         },
     });
@@ -569,7 +558,7 @@ export default function misp(rl) {
         description: "List all users",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
-            let data = (await req(ctx, "GET", "/admin/users"));
+            let data = (await req(ctx, "GET", "admin/users"));
             data = data.map((e) => e.User);
             if (input?.limit)
                 data = data.slice(0, input.limit);
@@ -585,7 +574,7 @@ export default function misp(rl) {
         },
         async execute(input, ctx) {
             const { userId, updateFields } = input;
-            const data = (await req(ctx, "PUT", `/admin/users/edit/${userId}`, updateFields));
+            const data = (await req(ctx, "PUT", `admin/users/edit/${pathSegment(userId)}`, updateFields));
             return data.User;
         },
     });
@@ -594,7 +583,7 @@ export default function misp(rl) {
         description: "Delete a user",
         inputSchema: { userId: { type: "string", required: true } },
         async execute(input, ctx) {
-            return req(ctx, "DELETE", `/admin/users/delete/${input.userId}`);
+            return req(ctx, "DELETE", `admin/users/delete/${pathSegment(input.userId)}`);
         },
     });
     // ── Warninglist ─────────────────────────────────────
@@ -603,7 +592,7 @@ export default function misp(rl) {
         description: "Get a warninglist by ID",
         inputSchema: { warninglistId: { type: "string", required: true } },
         async execute(input, ctx) {
-            const data = (await req(ctx, "GET", `/warninglists/view/${input.warninglistId}`));
+            const data = (await req(ctx, "GET", `warninglists/view/${pathSegment(input.warninglistId)}`));
             return data.Warninglist;
         },
     });
@@ -612,7 +601,7 @@ export default function misp(rl) {
         description: "List all warninglists",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
-            const data = (await req(ctx, "GET", "/warninglists"));
+            const data = (await req(ctx, "GET", "warninglists"));
             let lists = (data.Warninglists ?? []).map((e) => e.Warninglist);
             if (input?.limit)
                 lists = lists.slice(0, input.limit);

package/dist/plugins/mocean/src/credentials.js

@@ -0,0 +1,17 @@
+import { staticCredential } from "../../_shared/credentials.js";
+/** An API key and secret, added by the transport as the mocean-api-key and mocean-api-secret fields of every Mocean form. */
+export const moceanCredential = staticCredential({
+    id: "mocean",
+    auth: {
+        kind: "static",
+        parts: ["key", "secret"],
+        placements: [
+            { in: "body", part: "key", name: "mocean-api-key" },
+            { in: "body", part: "secret", name: "mocean-api-secret" },
+        ],
+    },
+    local: { key: "apiKey", secret: "apiSecret" },
+    targets: {
+        api: { baseUrl: "https://rest.moceanapi.com/rest/2/", methods: ["POST"] },
+    },
+});