runline 0.33.0 → 0.35.0

package/dist/plugins/erpnext/src/index.js

@@ -1,45 +1,24 @@
-async function apiRequest(host, apiKey, apiSecret, method, endpoint, body, qs) {
-    const url = new URL(`${host}${endpoint}`);
-    if (qs) {
-        for (const [k, v] of Object.entries(qs)) {
-            if (v !== undefined && v !== null)
-                url.searchParams.set(k, String(v));
-        }
-    }
-    const opts = {
-        method,
-        headers: {
-            Authorization: `token ${apiKey}:${apiSecret}`,
-            "Content-Type": "application/json",
-            Accept: "application/json",
-        },
-    };
-    if (body &&
-        Object.keys(body).length > 0 &&
-        method !== "GET" &&
-        method !== "DELETE") {
-        opts.body = JSON.stringify(body);
-    }
-    const res = await fetch(url.toString(), opts);
-    if (!res.ok)
-        throw new Error(`ERPNext API error ${res.status}: ${await res.text()}`);
-    return res.json();
-}
-function getConn(ctx) {
-    const cfg = ctx.connection.config;
-    return {
-        host: cfg.host.replace(/\/$/, ""),
-        apiKey: cfg.apiKey,
-        apiSecret: cfg.apiSecret,
-    };
-}
+import { credentialJson, pathSegment } from "../../_shared/credentials.js";
+import { erpnextCredential } from "./credentials.js";
+/** One ERPNext call: every endpoint is a path beneath the instance's /api/. */
 function req(ctx, method, endpoint, body, qs) {
-    const { host, apiKey, apiSecret } = getConn(ctx);
-    return apiRequest(host, apiKey, apiSecret, method, endpoint, body, qs);
+    return credentialJson(ctx, erpnextCredential, "erpnext", {
+        target: "api",
+        path: endpoint,
+        method,
+        query: qs,
+        ...(body &&
+            Object.keys(body).length > 0 &&
+            method !== "GET" &&
+            method !== "DELETE"
+            ? { json: body }
+            : {}),
+    });
 }
 export default function erpnext(rl) {
     rl.setName("erpnext");
     rl.setVersion("0.1.0");
+    rl.setCredential(erpnextCredential);
     rl.setConnectionSchema({
         host: {
             type: "string",
@@ -77,7 +56,7 @@ export default function erpnext(rl) {
         },
         async execute(input, ctx) {
             const { docType, documentName } = input;
-            const data = (await req(ctx, "GET", `/api/resource/${encodeURIComponent(docType)}/${encodeURIComponent(documentName)}`));
+            const data = (await req(ctx, "GET", `resource/${pathSegment(docType)}/${pathSegment(documentName)}`));
             return data.data;
         },
     });
@@ -122,7 +101,7 @@ export default function erpnext(rl) {
                 qs.limit_start = offset;
             if (orderBy)
                 qs.order_by = orderBy;
-            const data = (await req(ctx, "GET", `/api/resource/${encodeURIComponent(docType)}`, undefined, qs));
+            const data = (await req(ctx, "GET", `resource/${pathSegment(docType)}`, undefined, qs));
             return data.data;
         },
     });
@@ -139,7 +118,7 @@ export default function erpnext(rl) {
         },
         async execute(input, ctx) {
             const { docType, properties } = input;
-            const data = (await req(ctx, "POST", `/api/resource/${encodeURIComponent(docType)}`, properties));
+            const data = (await req(ctx, "POST", `resource/${pathSegment(docType)}`, properties));
             return data.data;
         },
     });
@@ -161,7 +140,7 @@ export default function erpnext(rl) {
         },
         async execute(input, ctx) {
             const { docType, documentName, properties } = input;
-            const data = (await req(ctx, "PUT", `/api/resource/${encodeURIComponent(docType)}/${encodeURIComponent(documentName)}`, properties));
+            const data = (await req(ctx, "PUT", `resource/${pathSegment(docType)}/${pathSegment(documentName)}`, properties));
             return data.data;
         },
     });
@@ -178,7 +157,7 @@ export default function erpnext(rl) {
         },
         async execute(input, ctx) {
             const { docType, documentName } = input;
-            await req(ctx, "DELETE", `/api/resource/${encodeURIComponent(docType)}/${encodeURIComponent(documentName)}`);
+            await req(ctx, "DELETE", `resource/${pathSegment(docType)}/${pathSegment(documentName)}`);
             return { success: true };
         },
     });

package/dist/plugins/facebookGraph/src/credentials.js

@@ -0,0 +1,20 @@
+import { staticCredential } from "../../_shared/credentials.js";
+/**
+ * A Meta access token, added by the transport as the access_token query
+ * parameter on Meta's Graph API host and its video-upload host.
+ */
+export const facebookGraphCredential = staticCredential({
+    id: "facebookGraph",
+    auth: { kind: "queryKey", param: "access_token" },
+    local: { secret: "accessToken" },
+    targets: {
+        graph: {
+            baseUrl: "https://graph.facebook.com/",
+            methods: ["GET", "POST", "DELETE"],
+        },
+        video: {
+            baseUrl: "https://graph-video.facebook.com/",
+            methods: ["GET", "POST", "DELETE"],
+        },
+    },
+});

package/dist/plugins/facebookGraph/src/index.js

@@ -1,6 +1,15 @@
+import { AuthError } from "runline";
+import { credentialJson, pathSegment } from "../../_shared/credentials.js";
+import { facebookGraphCredential } from "./credentials.js";
+/** Meta's hosts, by the target each is declared as. */
+const HOSTS = {
+    "graph.facebook.com": "graph",
+    "graph-video.facebook.com": "video",
+};
 export default function facebookGraph(rl) {
     rl.setName("facebookGraph");
     rl.setVersion("0.1.0");
+    rl.setCredential(facebookGraphCredential);
     rl.setConnectionSchema({
         accessToken: {
             type: "string",
@@ -56,44 +65,37 @@ export default function facebookGraph(rl) {
         },
         async execute(input, ctx) {
             const { hostUrl = "graph.facebook.com", method = "GET", graphApiVersion = "", node, edge, fields, queryParameters, body, } = input;
-            const versionPrefix = graphApiVersion ? `${graphApiVersion}/` : "";
-            let uri = `https://${hostUrl}/${versionPrefix}${node}`;
-            if (edge)
-                uri = `${uri}/${edge}`;
-            const url = new URL(uri);
-            url.searchParams.set("access_token", ctx.connection.config.accessToken);
-            if (fields && Array.isArray(fields) && fields.length > 0) {
-                url.searchParams.set("fields", fields.join(","));
-            }
-            if (queryParameters && typeof queryParameters === "object") {
-                for (const [k, v] of Object.entries(queryParameters)) {
-                    if (v !== undefined && v !== null)
-                        url.searchParams.set(k, String(v));
-                }
-            }
-            const httpMethod = method.toUpperCase();
-            const opts = {
+            const target = Object.hasOwn(HOSTS, String(hostUrl))
+                ? HOSTS[String(hostUrl)]
+                : undefined;
+            if (!target ||
+                (graphApiVersion && !/^v\d+\.\d+$/.test(String(graphApiVersion))))
+                throw new AuthError("request_not_allowed");
+            const httpMethod = String(method).toUpperCase();
+            const path = [
+                graphApiVersion,
+                pathSegment(node),
+                edge ? pathSegment(edge) : "",
+            ]
+                .filter(Boolean)
+                .join("/");
+            return credentialJson(ctx, facebookGraphCredential, "facebookGraph", {
+                target,
+                path,
                 method: httpMethod,
-                headers: { Accept: "application/json,text/*;q=0.99" },
-            };
-            if (body &&
-                typeof body === "object" &&
-                Object.keys(body).length > 0 &&
-                httpMethod === "POST") {
-                opts.headers["Content-Type"] =
-                    "application/json";
-                opts.body = JSON.stringify(body);
-            }
-            const res = await fetch(url.toString(), opts);
-            if (!res.ok)
-                throw new Error(`Facebook Graph API error ${res.status}: ${await res.text()}`);
-            const text = await res.text();
-            try {
-                return JSON.parse(text);
-            }
-            catch {
-                return { message: text };
-            }
+                query: {
+                    ...queryParameters,
+                    ...(Array.isArray(fields) && fields.length
+                        ? { fields: fields.join(",") }
+                        : {}),
+                },
+                ...(httpMethod === "POST" &&
+                    body &&
+                    typeof body === "object" &&
+                    Object.keys(body).length
+                    ? { json: body }
+                    : {}),
+            });
         },
     });
 }

package/dist/plugins/fal/src/credentials.js

@@ -0,0 +1,14 @@
+import { staticCredential } from "../../_shared/credentials.js";
+/** An API key, sent as `Authorization: Key {key}` to fal's queue origin.
+ *  CDN media downloads are credential-free and stay outside the broker. */
+export const falCredential = staticCredential({
+    id: "fal",
+    auth: { kind: "apiKey", header: "Authorization", prefix: "Key " },
+    local: { secret: "apiKey" },
+    targets: {
+        queue: {
+            baseUrl: "https://queue.fal.run/",
+            methods: ["GET", "POST", "PUT"],
+        },
+    },
+});

package/dist/plugins/fal/src/index.js

@@ -1,6 +1,7 @@
 import * as t from "typebox";
 import { readImageInput } from "../../_shared/mediaFile.js";
 import { parseSize } from "../../_shared/parseSize.js";
+import { falCredential } from "./credentials.js";
 import { assertModelId, cancel, DEFAULT_TIMEOUT_MS, extraInputSchema, result, runModel, STRICT, saveDirSchema, savedResult, status, submit, timeoutSchema, } from "./shared.js";
 const IMAGE_MODEL = "fal-ai/flux/schnell";
 const EDIT_MODEL = "fal-ai/flux-pro/kontext";
@@ -81,6 +82,7 @@ async function generate(ctx, p, model, input, kind) {
 export default function fal(rl) {
     rl.setName("fal");
     rl.setVersion("0.1.0");
+    rl.setCredential(falCredential);
     rl.setConnectionSchema(t.Object({
         apiKey: t.String({
             minLength: 1,
@@ -107,7 +109,7 @@ export default function fal(rl) {
         inputSchema: editSchema,
         async execute(input, ctx) {
             const p = input;
-            const image = readImageInput(p.imagePath, "fal");
+            const image = await readImageInput(p.imagePath, "fal");
             const key = p.imageInputKey ?? "image_url";
             return generate(ctx, p, p.model ?? EDIT_MODEL, {
                 prompt: p.prompt,
@@ -126,7 +128,7 @@ export default function fal(rl) {
     });
     rl.registerAction("run", {
         access: "write",
-        description: "Run a fal endpoint with its model-specific input (billed), and wait. Returns raw output plus downloaded files from common top-level image/video/audio/file fields. Automatic downloads accept HTTPS fal.media URLs or data URIs only, up to 512 MiB per file; JSON responses are limited to 32 MiB.",
+        description: "Run a fal endpoint with its model-specific input (billed), and wait. Returns raw output plus downloaded files from common top-level image/video/audio/file fields. Automatic downloads accept HTTPS fal.media URLs or data URIs only, up to 512 MiB per file; JSON responses are limited to 64 MiB.",
         inputSchema: runSchema,
         async execute(input, ctx) {
             const p = input;
@@ -161,7 +163,7 @@ export default function fal(rl) {
     });
     rl.registerAction("queue.result", {
         access: "write",
-        description: "Retrieve completed output without re-running or re-billing. Writes common image/video/audio/file outputs to disk and returns files[].path. Download limits: HTTPS fal.media URLs or data URIs, 512 MiB per file, 60 seconds per file; JSON responses up to 32 MiB.",
+        description: "Retrieve completed output without re-running or re-billing. Writes common image/video/audio/file outputs to disk and returns files[].path. Download limits: HTTPS fal.media URLs or data URIs, 512 MiB per file, 60 seconds per file; JSON responses up to 64 MiB.",
         inputSchema: resultInput,
         async execute(input, ctx) {
             const p = input;

package/dist/plugins/fal/src/shared.js

@@ -1,14 +1,13 @@
 import { setTimeout as sleep } from "node:timers/promises";
 import * as t from "typebox";
 import { Check } from "typebox/value";
-import { authedFetch } from "../../_shared/authedFetch.js";
+import { credentialJson, pathSegment } from "../../_shared/credentials.js";
 import { SEND_FILE_NOTE, writeMediaFile, } from "../../_shared/mediaFile.js";
-import { readBounded, readBoundedBytes, seg } from "../../_shared/provider.js";
+import { readBoundedBytes } from "../../_shared/provider.js";
+import { falCredential } from "./credentials.js";
 export const STRICT = { additionalProperties: false };
 export const DEFAULT_TIMEOUT_MS = 300_000;
-const QUEUE_BASE = "https://queue.fal.run";
 const MAX_DOWNLOAD_BYTES = 512 * 1024 * 1024;
-const MAX_JSON_BYTES = 32 * 1024 * 1024;
 const receiptSchema = t.Object({
     request_id: t.String({ minLength: 1 }),
     status_url: t.Optional(t.String()),
@@ -40,84 +39,75 @@ export function assertModelId(model) {
     return id;
 }
 /** Queue operations address the application, excluding its inference sub-path. */
-function queueUrl(model, suffix = "") {
+function queuePath(model, suffix = "") {
     const id = assertModelId(model);
     const parts = id.split("/");
     const count = parts[0] === "workflows" || parts[0] === "comfy" ? 3 : 2;
-    return `${QUEUE_BASE}/${suffix ? parts.slice(0, count).join("/") : id}${suffix}`;
+    return `${suffix ? parts.slice(0, count).join("/") : id}${suffix}`;
 }
-/** Keep validation field names and error types, without echoing model inputs. */
-export function explainFalError(status, body) {
-    const data = object(body) ? body : {};
-    const detail = data.detail;
-    const message = Array.isArray(detail)
-        ? detail
-            .filter(object)
-            .map((entry) => {
-            const field = Array.isArray(entry.loc) ? entry.loc.join(".") : "body";
-            return `${field}: ${String(entry.msg ?? "invalid")} [${String(entry.type ?? "error")}]`;
-        })
-            .join("; ")
-        : typeof detail === "string"
-            ? detail
-            : typeof data.status === "string"
-                ? data.status
-                : "request failed";
-    const type = typeof data.error_type === "string" ? ` [${data.error_type}]` : "";
-    return `fal ${status}: ${message.slice(0, 1000)}${type}`;
-}
-/** All credential-bearing calls use a fixed origin and refuse redirects. */
-async function request(ctx, url, init = {}) {
+/**
+ * All credential-bearing calls go through the queue target; the transport
+ * pins the origin and refuses redirects. Failures are reported by status
+ * alone, without echoing provider text.
+ */
+async function request(ctx, path, init = {}) {
     const key = ctx.connection.config.apiKey;
-    if (typeof key !== "string" || !key.trim())
+    if (!ctx.credentials && (typeof key !== "string" || !key.trim()))
         throw new Error("Missing FAL_KEY. Create a key at https://fal.ai/dashboard/keys.");
-    const response = await authedFetch(url, {
-        ...init,
-        headers: {
-            authorization: `Key ${key.trim()}`,
-            accept: "application/json",
-            "content-type": "application/json",
-        },
-        signal: init.signal ?? AbortSignal.timeout(60_000),
+    return credentialJson(ctx, falCredential, "fal", {
+        target: "queue",
+        path,
+        method: init.method ?? "GET",
+        // Every queue call declares a JSON body type, even bodyless GETs.
+        headers: { "Content-Type": "application/json" },
+        ...(init.json !== undefined ? { body: JSON.stringify(init.json) } : {}),
+    });
+}
+/** The queue deadline stops the wait; the transport bounds the request itself. */
+function raceSignal(promise, signal) {
+    // The transport settles the abandoned request on its own; its rejection is handled here.
+    promise.catch(() => { });
+    return new Promise((resolve, reject) => {
+        if (signal.aborted) {
+            reject(signal.reason);
+            return;
+        }
+        const onAbort = () => reject(signal.reason);
+        signal.addEventListener("abort", onAbort, { once: true });
+        promise.then((value) => {
+            signal.removeEventListener("abort", onAbort);
+            resolve(value);
+        }, (error) => {
+            signal.removeEventListener("abort", onAbort);
+            reject(error);
+        });
     });
-    const text = await readBounded(response, MAX_JSON_BYTES, "fal: response exceeds 32 MiB");
-    let body;
-    try {
-        body = JSON.parse(text);
-    }
-    catch {
-        throw new Error(`fal HTTP ${response.status}: non-JSON response`);
-    }
-    if (!response.ok)
-        throw new Error(explainFalError(response.status, body));
-    return body;
 }
-export async function submit(ctx, model, input, signal) {
+export async function submit(ctx, model, input) {
     // A failed POST can have been accepted, so submissions are never retried here.
-    const receipt = await request(ctx, queueUrl(model), {
+    const receipt = await request(ctx, queuePath(model), {
         method: "POST",
-        body: JSON.stringify(input),
-        signal,
+        json: input,
     });
     if (!Check(receiptSchema, receipt))
         throw new Error("fal: invalid submission receipt or no request id; do not resubmit automatically");
-    seg(receipt.request_id, "request id", "fal");
+    pathSegment(receipt.request_id);
     return receipt;
 }
-export async function status(ctx, model, requestId, logs = false, signal) {
-    const body = await request(ctx, queueUrl(model, `/requests/${seg(requestId, "request id", "fal")}/status${logs ? "?logs=1" : ""}`), { signal });
+export async function status(ctx, model, requestId, logs = false) {
+    const body = await request(ctx, queuePath(model, `/requests/${pathSegment(requestId)}/status${logs ? "?logs=1" : ""}`));
     if (!Check(statusSchema, body))
         throw new Error("fal: invalid queue status response");
     return body;
 }
-export async function result(ctx, model, requestId, signal) {
-    const body = await request(ctx, queueUrl(model, `/requests/${seg(requestId, "request id", "fal")}`), { signal });
+export async function result(ctx, model, requestId) {
+    const body = await request(ctx, queuePath(model, `/requests/${pathSegment(requestId)}`));
     if (!object(body))
         throw new Error("fal: expected an object result");
     return body;
 }
 export async function cancel(ctx, model, requestId) {
-    const body = await request(ctx, queueUrl(model, `/requests/${seg(requestId, "request id", "fal")}/cancel`), { method: "PUT" });
+    const body = await request(ctx, queuePath(model, `/requests/${pathSegment(requestId)}/cancel`), { method: "PUT" });
     if (!object(body) || body.status !== "CANCELLATION_REQUESTED")
         throw new Error("fal: cancellation was not confirmed");
     return body;
@@ -127,15 +117,16 @@ export async function runModel(ctx, model, input, timeoutMs) {
     const signal = AbortSignal.timeout(timeoutMs);
     let requestId;
     try {
-        requestId = (await submit(ctx, model, input, signal)).request_id;
+        requestId = (await raceSignal(submit(ctx, model, input), signal))
+            .request_id;
         for (;;) {
             signal.throwIfAborted();
-            const current = await status(ctx, model, requestId, false, signal);
+            const current = await raceSignal(status(ctx, model, requestId, false), signal);
             if (current.status === "COMPLETED") {
                 if (current.error || current.error_type)
                     throw new Error(`fal: ${current.error ?? "generation failed"}${current.error_type ? ` [${current.error_type}]` : ""}`);
                 return {
-                    output: await result(ctx, model, requestId, signal),
+                    output: await raceSignal(result(ctx, model, requestId), signal),
                     requestId,
                 };
             }
@@ -190,7 +181,11 @@ export function collectMedia(output, kind) {
         push(output[field]);
     return found;
 }
-/** Restrict automatic downloads to fal's CDN, including every redirect target. */
+/**
+ * Restrict automatic downloads to fal's CDN, including every redirect target.
+ * These reads carry no credential, so they do not use the broker:
+ * redirects are followed manually, each hop re-validated here.
+ */
 function mediaUrl(value) {
     const url = new URL(value);
     if (url.protocol !== "https:" ||
@@ -299,5 +294,5 @@ export const saveDirSchema = t.String({
     description: "Existing directory for generated files; defaults to the OS temp directory.",
 });
 export const extraInputSchema = t.Record(t.String(), t.Unknown(), {
-    description: "Model-specific fields, overriding action defaults. See https://fal.ai/models/<model>/api. Media downloads support HTTPS fal.media URLs and data URIs, up to 512 MiB each; JSON responses are limited to 32 MiB.",
+    description: "Model-specific fields, overriding action defaults. See https://fal.ai/models/<model>/api. Media downloads support HTTPS fal.media URLs and data URIs, up to 512 MiB each; JSON responses are limited to 64 MiB.",
 });

package/dist/plugins/freshdesk/src/credentials.js

@@ -0,0 +1,20 @@
+import { hostLabel, staticCredential } from "../../_shared/credentials.js";
+/** An agent API key as the Basic username, with the fixed dummy password "X",
+ *  to the account's own Freshdesk subdomain. */
+export const freshdeskCredential = staticCredential({
+    id: "freshdesk",
+    auth: { kind: "basic" },
+    local: { username: "apiKey", password: { value: "X" } },
+    targets: (config) => ({
+        api: {
+            baseUrl: `https://${hostLabel(config.domain)}.freshdesk.com/api/v2/`,
+            methods: ["GET", "POST", "PUT", "DELETE"],
+        },
+    }),
+    probe: {
+        target: "api",
+        path: "agents/me",
+        method: "GET",
+        acceptedStatuses: [200],
+    },
+});

package/dist/plugins/freshdesk/src/index.js

@@ -1,3 +1,5 @@
+import { credentialJson, pathSegment } from "../../_shared/credentials.js";
+import { freshdeskCredential } from "./credentials.js";
 const STATUS = {
     open: 2,
     pending: 3,
@@ -19,47 +21,24 @@ const SOURCE = {
     feedbackWidget: 9,
     outboundEmail: 10,
 };
-async function apiRequest(domain, apiKey, method, endpoint, body, qs) {
-    const url = new URL(`https://${domain}.freshdesk.com/api/v2${endpoint}`);
-    if (qs) {
-        for (const [k, v] of Object.entries(qs)) {
-            if (v !== undefined && v !== null)
-                url.searchParams.set(k, String(v));
-        }
-    }
-    const opts = {
-        method,
-        headers: {
-            Authorization: `Basic ${btoa(`${apiKey}:X`)}`,
-            "Content-Type": "application/json",
-        },
-    };
-    if (body &&
-        Object.keys(body).length > 0 &&
-        method !== "GET" &&
-        method !== "DELETE") {
-        opts.body = JSON.stringify(body);
-    }
-    const res = await fetch(url.toString(), opts);
-    if (!res.ok)
-        throw new Error(`Freshdesk API error ${res.status}: ${await res.text()}`);
-    if (res.status === 204)
-        return { success: true };
-    return res.json();
-}
-function getConn(ctx) {
-    return {
-        domain: ctx.connection.config.domain,
-        apiKey: ctx.connection.config.apiKey,
-    };
-}
 function req(ctx, method, endpoint, body, qs) {
-    const { domain, apiKey } = getConn(ctx);
-    return apiRequest(domain, apiKey, method, endpoint, body, qs);
+    return credentialJson(ctx, freshdeskCredential, "freshdesk", {
+        target: "api",
+        path: endpoint,
+        method,
+        query: qs,
+        ...(body &&
+            Object.keys(body).length > 0 &&
+            method !== "GET" &&
+            method !== "DELETE"
+            ? { json: body }
+            : {}),
+    });
 }
 export default function freshdesk(rl) {
     rl.setName("freshdesk");
     rl.setVersion("0.1.0");
+    rl.setCredential(freshdeskCredential);
     rl.setConnectionSchema({
         domain: {
             type: "string",
@@ -188,7 +167,7 @@ export default function freshdesk(rl) {
                 body.fr_due_by = i.frDueBy;
             if (i.customFields)
                 body.custom_fields = i.customFields;
-            return req(ctx, "POST", "/tickets", body);
+            return req(ctx, "POST", "tickets", body);
         },
     });
     rl.registerAction("ticket.get", {
@@ -198,7 +177,7 @@ export default function freshdesk(rl) {
             ticketId: { type: "string", required: true, description: "Ticket ID" },
         },
         async execute(input, ctx) {
-            return req(ctx, "GET", `/tickets/${input.ticketId}`);
+            return req(ctx, "GET", `tickets/${pathSegment(input.ticketId)}`);
         },
     });
     rl.registerAction("ticket.list", {
@@ -265,7 +244,7 @@ export default function freshdesk(rl) {
                 qs.order_type = orderType;
             if (include)
                 qs.include = include;
-            return req(ctx, "GET", "/tickets", undefined, qs);
+            return req(ctx, "GET", "tickets", undefined, qs);
         },
     });
     rl.registerAction("ticket.update", {
@@ -329,7 +308,7 @@ export default function freshdesk(rl) {
                 body.fr_due_by = frDueBy;
             if (customFields)
                 body.custom_fields = customFields;
-            return req(ctx, "PUT", `/tickets/${ticketId}`, body);
+            return req(ctx, "PUT", `tickets/${pathSegment(ticketId)}`, body);
         },
     });
     rl.registerAction("ticket.delete", {
@@ -339,7 +318,7 @@ export default function freshdesk(rl) {
             ticketId: { type: "string", required: true, description: "Ticket ID" },
         },
         async execute(input, ctx) {
-            await req(ctx, "DELETE", `/tickets/${input.ticketId}`);
+            await req(ctx, "DELETE", `tickets/${pathSegment(input.ticketId)}`);
             return { success: true };
         },
     });
@@ -388,7 +367,7 @@ export default function freshdesk(rl) {
                 body.company_id = companyId;
             if (customFields)
                 body.custom_fields = customFields;
-            return req(ctx, "POST", "/contacts", body);
+            return req(ctx, "POST", "contacts", body);
         },
     });
     rl.registerAction("contact.get", {
@@ -398,7 +377,7 @@ export default function freshdesk(rl) {
             contactId: { type: "string", required: true, description: "Contact ID" },
         },
         async execute(input, ctx) {
-            return req(ctx, "GET", `/contacts/${input.contactId}`);
+            return req(ctx, "GET", `contacts/${pathSegment(input.contactId)}`);
         },
     });
     rl.registerAction("contact.list", {
@@ -445,7 +424,7 @@ export default function freshdesk(rl) {
                 qs.company_id = companyId;
             if (state)
                 qs.state = state;
-            return req(ctx, "GET", "/contacts", undefined, qs);
+            return req(ctx, "GET", "contacts", undefined, qs);
         },
     });
     rl.registerAction("contact.update", {
@@ -485,7 +464,7 @@ export default function freshdesk(rl) {
                 body.tags = tags;
             if (customFields)
                 body.custom_fields = customFields;
-            return req(ctx, "PUT", `/contacts/${contactId}`, body);
+            return req(ctx, "PUT", `contacts/${pathSegment(contactId)}`, body);
         },
     });
     rl.registerAction("contact.delete", {
@@ -495,7 +474,7 @@ export default function freshdesk(rl) {
             contactId: { type: "string", required: true, description: "Contact ID" },
         },
         async execute(input, ctx) {
-            await req(ctx, "DELETE", `/contacts/${input.contactId}`);
+            await req(ctx, "DELETE", `contacts/${pathSegment(input.contactId)}`);
             return { success: true };
         },
     });

package/dist/plugins/freshservice/src/credentials.js

@@ -0,0 +1,16 @@
+import { hostLabel, staticCredential } from "../../_shared/credentials.js";
+/**
+ * An API key as the Basic username with Freshservice's fixed "X" password,
+ * on the connection's own subdomain of freshservice.com.
+ */
+export const freshserviceCredential = staticCredential({
+    id: "freshservice",
+    auth: { kind: "basic" },
+    local: { username: "apiKey", password: { value: "X" } },
+    targets: (config) => ({
+        api: {
+            baseUrl: `https://${hostLabel(config.domain)}.freshservice.com/api/v2/`,
+            methods: ["GET", "POST", "PUT", "DELETE"],
+        },
+    }),
+});