runline 0.33.0 → 0.35.0

package/dist/plugins/medium/src/index.js

@@ -1,24 +1,20 @@
-const BASE_URL = "https://api.medium.com/v1";
-async function apiRequest(token, method, endpoint, body) {
-    const opts = {
+import { credentialJson, pathSegment } from "../../_shared/credentials.js";
+import { mediumCredential } from "./credentials.js";
+function apiRequest(ctx, method, endpoint, body) {
+    return credentialJson(ctx, mediumCredential, "medium", {
+        target: "api",
+        path: endpoint,
         method,
-        headers: {
-            Authorization: `Bearer ${token}`,
-            "Content-Type": "application/json",
-            Accept: "application/json",
-            "Accept-Charset": "utf-8",
-        },
-    };
-    if (body && Object.keys(body).length > 0 && method !== "GET")
-        opts.body = JSON.stringify(body);
-    const res = await fetch(`${BASE_URL}${endpoint}`, opts);
-    if (!res.ok)
-        throw new Error(`Medium API error ${res.status}: ${await res.text()}`);
-    return res.json();
+        headers: { "Accept-Charset": "utf-8" },
+        ...(body && Object.keys(body).length > 0 && method !== "GET"
+            ? { json: body }
+            : {}),
+    });
 }
 export default function medium(rl) {
     rl.setName("medium");
     rl.setVersion("0.1.0");
+    rl.setCredential(mediumCredential);
     rl.setConnectionSchema({
         accessToken: {
             type: "string",
@@ -27,7 +23,6 @@ export default function medium(rl) {
             env: "MEDIUM_ACCESS_TOKEN",
         },
     });
-    const tok = (ctx) => ctx.connection.config.accessToken;
     rl.registerAction("post.create", {
         access: "write",
         description: "Create a post on Medium. Posts under the authenticated user by default, or under a publication if publicationId is provided.",
@@ -95,13 +90,13 @@ export default function medium(rl) {
             if (notifyFollowers !== undefined)
                 body.notifyFollowers = notifyFollowers;
             if (publicationId) {
-                const resp = (await apiRequest(tok(ctx), "POST", `/publications/${publicationId}/posts`, body));
+                const resp = (await apiRequest(ctx, "POST", `publications/${pathSegment(publicationId)}/posts`, body));
                 return resp.data;
             }
             // Get authenticated user ID first
-            const me = (await apiRequest(tok(ctx), "GET", "/me"));
+            const me = (await apiRequest(ctx, "GET", "me"));
             const authorId = me.data.id;
-            const resp = (await apiRequest(tok(ctx), "POST", `/users/${authorId}/posts`, body));
+            const resp = (await apiRequest(ctx, "POST", `users/${pathSegment(authorId)}/posts`, body));
             return resp.data;
         },
     });
@@ -111,9 +106,9 @@ export default function medium(rl) {
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
             const { limit } = (input ?? {});
-            const me = (await apiRequest(tok(ctx), "GET", "/me"));
+            const me = (await apiRequest(ctx, "GET", "me"));
             const userId = me.data.id;
-            const resp = (await apiRequest(tok(ctx), "GET", `/users/${userId}/publications`));
+            const resp = (await apiRequest(ctx, "GET", `users/${pathSegment(userId)}/publications`));
             let data = resp.data;
             if (limit)
                 data = data.slice(0, limit);
@@ -124,7 +119,7 @@ export default function medium(rl) {
         access: "read",
         description: "Get the authenticated user's profile",
         async execute(_input, ctx) {
-            const resp = (await apiRequest(tok(ctx), "GET", "/me"));
+            const resp = (await apiRequest(ctx, "GET", "me"));
             return resp.data;
         },
     });

package/dist/plugins/messagebird/src/credentials.js

@@ -0,0 +1,22 @@
+import { staticCredential } from "../../_shared/credentials.js";
+/**
+ * An access key, sent as `Authorization: AccessKey {key}` to
+ * MessageBird's REST origin.
+ */
+export const messagebirdCredential = staticCredential({
+    id: "messagebird",
+    auth: { kind: "apiKey", header: "Authorization", prefix: "AccessKey " },
+    local: { secret: "accessKey" },
+    targets: {
+        api: {
+            baseUrl: "https://rest.messagebird.com/",
+            methods: ["GET", "POST"],
+        },
+    },
+    probe: {
+        target: "api",
+        path: "balance",
+        method: "GET",
+        acceptedStatuses: [200],
+    },
+});

package/dist/plugins/messagebird/src/index.js

@@ -1,23 +1,19 @@
-const BASE_URL = "https://rest.messagebird.com";
-async function apiRequest(accessKey, method, endpoint, body) {
-    const opts = {
+import { credentialJson } from "../../_shared/credentials.js";
+import { messagebirdCredential } from "./credentials.js";
+function apiRequest(ctx, method, path, body) {
+    return credentialJson(ctx, messagebirdCredential, "messagebird", {
+        target: "api",
+        path,
         method,
-        headers: {
-            Authorization: `AccessKey ${accessKey}`,
-            Accept: "application/json",
-            "Content-Type": "application/json",
-        },
-    };
-    if (body && Object.keys(body).length > 0 && method !== "GET")
-        opts.body = JSON.stringify(body);
-    const res = await fetch(`${BASE_URL}${endpoint}`, opts);
-    if (!res.ok)
-        throw new Error(`MessageBird API error ${res.status}: ${await res.text()}`);
-    return res.json();
+        ...(body && Object.keys(body).length > 0 && method !== "GET"
+            ? { json: body }
+            : {}),
+    });
 }
 export default function messagebird(rl) {
     rl.setName("messagebird");
     rl.setVersion("0.1.0");
+    rl.setCredential(messagebirdCredential);
     rl.setConnectionSchema({
         accessKey: {
             type: "string",
@@ -26,7 +22,6 @@ export default function messagebird(rl) {
             env: "MESSAGEBIRD_ACCESS_KEY",
         },
     });
-    const key = (ctx) => ctx.connection.config.accessKey;
     rl.registerAction("sms.send", {
         access: "write",
         description: "Send an SMS message",
@@ -111,14 +106,14 @@ export default function messagebird(rl) {
                 if (p[k] !== undefined && p[k] !== null)
                     body[k] = p[k];
             }
-            return apiRequest(key(ctx), "POST", "/messages", body);
+            return apiRequest(ctx, "POST", "messages", body);
         },
     });
     rl.registerAction("balance.get", {
         access: "read",
         description: "Get current account balance",
         async execute(_input, ctx) {
-            return apiRequest(key(ctx), "GET", "/balance");
+            return apiRequest(ctx, "GET", "balance");
         },
     });
 }

package/dist/plugins/metabase/src/credentials.js

@@ -0,0 +1,19 @@
+import { httpsBase, staticCredential } from "../../_shared/credentials.js";
+/** A session token, sent as X-Metabase-Session, to the instance's own /api/. */
+export const metabaseCredential = staticCredential({
+    id: "metabase",
+    auth: { kind: "apiKey", header: "X-Metabase-Session" },
+    local: { secret: "sessionToken" },
+    targets: (config) => ({
+        api: {
+            baseUrl: httpsBase(config.url, "api/"),
+            methods: ["GET", "POST"],
+        },
+    }),
+    probe: {
+        target: "api",
+        path: "user/current",
+        method: "GET",
+        acceptedStatuses: [200],
+    },
+});

package/dist/plugins/metabase/src/index.js

@@ -1,24 +1,22 @@
-async function apiRequest(baseUrl, sessionToken, method, endpoint, body) {
-    const opts = {
+import { credentialJson, pathSegment } from "../../_shared/credentials.js";
+import { metabaseCredential } from "./credentials.js";
+function apiRequest(ctx, method, endpoint, body) {
+    return credentialJson(ctx, metabaseCredential, "metabase", {
+        target: "api",
+        path: endpoint,
         method,
-        headers: {
-            "X-Metabase-Session": sessionToken,
-            "Content-Type": "application/json",
-        },
-    };
-    if (body &&
-        Object.keys(body).length > 0 &&
-        method !== "GET" &&
-        method !== "DELETE")
-        opts.body = JSON.stringify(body);
-    const res = await fetch(`${baseUrl}${endpoint}`, opts);
-    if (!res.ok)
-        throw new Error(`Metabase API error ${res.status}: ${await res.text()}`);
-    return res.json();
+        ...(body &&
+            Object.keys(body).length > 0 &&
+            method !== "GET" &&
+            method !== "DELETE"
+            ? { json: body }
+            : {}),
+    });
 }
 export default function metabase(rl) {
     rl.setName("metabase");
     rl.setVersion("0.1.0");
+    rl.setCredential(metabaseCredential);
     rl.setConnectionSchema({
         url: {
             type: "string",
@@ -33,26 +31,20 @@ export default function metabase(rl) {
             env: "METABASE_SESSION_TOKEN",
         },
     });
-    const conn = (ctx) => ({
-        baseUrl: ctx.connection.config.url.replace(/\/$/, ""),
-        token: ctx.connection.config.sessionToken,
-    });
     // ── Question (Card) ─────────────────────────────────
     rl.registerAction("question.get", {
         access: "read",
         description: "Get a specific question/card",
         inputSchema: { questionId: { type: "number", required: true } },
         async execute(input, ctx) {
-            const { baseUrl, token } = conn(ctx);
-            return apiRequest(baseUrl, token, "GET", `/api/card/${input.questionId}`);
+            return apiRequest(ctx, "GET", `card/${pathSegment(input.questionId)}`);
         },
     });
     rl.registerAction("question.list", {
         access: "read",
         description: "List all questions/cards",
         async execute(_input, ctx) {
-            const { baseUrl, token } = conn(ctx);
-            return apiRequest(baseUrl, token, "GET", "/api/card/");
+            return apiRequest(ctx, "GET", "card/");
         },
     });
     rl.registerAction("question.getResults", {
@@ -68,8 +60,7 @@ export default function metabase(rl) {
         },
         async execute(input, ctx) {
             const { questionId, format = "json" } = input;
-            const { baseUrl, token } = conn(ctx);
-            return apiRequest(baseUrl, token, "POST", `/api/card/${questionId}/query/${format}`);
+            return apiRequest(ctx, "POST", `card/${pathSegment(questionId)}/query/${pathSegment(format)}`);
         },
     });
     // ── Alert ───────────────────────────────────────────
@@ -78,16 +69,14 @@ export default function metabase(rl) {
         description: "Get a specific alert",
         inputSchema: { alertId: { type: "number", required: true } },
         async execute(input, ctx) {
-            const { baseUrl, token } = conn(ctx);
-            return apiRequest(baseUrl, token, "GET", `/api/alert/${input.alertId}`);
+            return apiRequest(ctx, "GET", `alert/${pathSegment(input.alertId)}`);
         },
     });
     rl.registerAction("alert.list", {
         access: "read",
         description: "List all alerts",
         async execute(_input, ctx) {
-            const { baseUrl, token } = conn(ctx);
-            return apiRequest(baseUrl, token, "GET", "/api/alert/");
+            return apiRequest(ctx, "GET", "alert/");
         },
     });
     // ── Database ────────────────────────────────────────
@@ -95,8 +84,7 @@ export default function metabase(rl) {
         access: "read",
         description: "List all databases",
         async execute(_input, ctx) {
-            const { baseUrl, token } = conn(ctx);
-            const data = (await apiRequest(baseUrl, token, "GET", "/api/database/"));
+            const data = (await apiRequest(ctx, "GET", "database/"));
             return data.data;
         },
     });
@@ -105,8 +93,7 @@ export default function metabase(rl) {
         description: "Get fields from a database",
         inputSchema: { databaseId: { type: "number", required: true } },
         async execute(input, ctx) {
-            const { baseUrl, token } = conn(ctx);
-            return apiRequest(baseUrl, token, "GET", `/api/database/${input.databaseId}/fields`);
+            return apiRequest(ctx, "GET", `database/${pathSegment(input.databaseId)}/fields`);
         },
     });
     rl.registerAction("database.add", {
@@ -144,7 +131,6 @@ export default function metabase(rl) {
         },
         async execute(input, ctx) {
             const { name, engine, host, port, user, password, dbName, isFullSync = true, } = input;
-            const { baseUrl, token } = conn(ctx);
             const details = {};
             if (host)
                 details.host = host;
@@ -156,7 +142,7 @@ export default function metabase(rl) {
                 details.password = password;
             if (dbName)
                 details.db = dbName;
-            return apiRequest(baseUrl, token, "POST", "/api/database", {
+            return apiRequest(ctx, "POST", "database", {
                 name,
                 engine,
                 details,
@@ -170,16 +156,14 @@ export default function metabase(rl) {
         description: "Get a specific metric",
         inputSchema: { metricId: { type: "number", required: true } },
         async execute(input, ctx) {
-            const { baseUrl, token } = conn(ctx);
-            return apiRequest(baseUrl, token, "GET", `/api/metric/${input.metricId}`);
+            return apiRequest(ctx, "GET", `metric/${pathSegment(input.metricId)}`);
         },
     });
     rl.registerAction("metric.list", {
         access: "read",
         description: "List all metrics",
         async execute(_input, ctx) {
-            const { baseUrl, token } = conn(ctx);
-            return apiRequest(baseUrl, token, "GET", "/api/metric/");
+            return apiRequest(ctx, "GET", "metric/");
         },
     });
 }

package/dist/plugins/microsoftCalendar/src/index.js

@@ -1,36 +1,66 @@
-import { graphRequest, microsoftSetupHelp, userBase } from "../../_shared/microsoftAuth.js";
+import { graphRequest, microsoftCredential, microsoftOAuth, userBase, } from "../../_shared/microsoftAuth.js";
 const NAME = "microsoftCalendar";
 const SCOPES = ["https://graph.microsoft.com/Calendars.Read"];
 export default function microsoftCalendar(rl) {
     rl.setName(NAME);
     rl.setVersion("1.0.0");
+    rl.setCredential(microsoftCredential(NAME, SCOPES));
     rl.setConnectionSchema({
-        authMethod: { type: "string", required: false, description: "delegated or appOnly; legacy configs infer the method from existing credentials" },
-        tenantId: { type: "string", required: false, env: "MS_GRAPH_TENANT_ID", description: "Entra tenant id (app-only) or omit for OAuth /common" },
-        clientId: { type: "string", required: false, env: "MS_GRAPH_CLIENT_ID", description: "App (client) id" },
-        clientSecret: { type: "string", required: false, env: "MS_GRAPH_CLIENT_SECRET", description: "Client secret VALUE" },
-        refreshToken: { type: "string", required: false, env: "MICROSOFTCALENDAR_REFRESH_TOKEN", description: "OAuth2 refresh token (set by the login flow)" },
-        userUpn: { type: "string", required: false, env: "MS_GRAPH_USER_UPN", description: "App-only only: target user UPN" },
-    });
-    rl.setOAuth({
-        authUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
-        tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
-        scopes: [...SCOPES, "offline_access"],
-        setupHelp: microsoftSetupHelp("Calendars.Read"),
+        authMethod: {
+            type: "string",
+            required: false,
+            description: "delegated or appOnly; legacy configs infer the method from existing credentials",
+        },
+        tenantId: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_TENANT_ID",
+            description: "Entra tenant id (app-only) or omit for OAuth /common",
+        },
+        clientId: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_CLIENT_ID",
+            description: "App (client) id",
+        },
+        clientSecret: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_CLIENT_SECRET",
+            description: "Client secret VALUE",
+        },
+        refreshToken: {
+            type: "string",
+            required: false,
+            env: "MICROSOFTCALENDAR_REFRESH_TOKEN",
+            description: "OAuth2 refresh token (set by the login flow)",
+        },
+        userUpn: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_USER_UPN",
+            description: "App-only only: target user UPN",
+        },
     });
+    rl.setOAuth(microsoftOAuth(SCOPES, "Calendars.Read"));
     rl.registerAction("calendar.list", {
         access: "read",
         description: "List calendar events in a date range. Returns [{id,subject,start,end,location,organizer,attendees}].",
         inputSchema: {
-            start: { type: "string", required: true, description: "ISO start datetime, e.g. 2026-05-01T00:00:00Z" },
+            start: {
+                type: "string",
+                required: true,
+                description: "ISO start datetime, e.g. 2026-05-01T00:00:00Z",
+            },
             end: { type: "string", required: true, description: "ISO end datetime" },
             top: { type: "number", required: false, default: 50 },
         },
         async execute(input, ctx) {
+            const p = input;
             const qs = new URLSearchParams({
-                startDateTime: input.start,
-                endDateTime: input.end,
-                $top: String(input.top ?? 50),
+                startDateTime: p.start,
+                endDateTime: p.end,
+                $top: String(p.top ?? 50),
                 $select: "id,subject,start,end,location,organizer,attendees,isAllDay,webLink",
                 $orderby: "start/dateTime",
             });
@@ -43,7 +73,8 @@ export default function microsoftCalendar(rl) {
         description: "Get one calendar event by id (full details incl. body).",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
-            return graphRequest(ctx, NAME, SCOPES, "GET", `${userBase(ctx)}/events/${encodeURIComponent(input.id)}`);
+            const p = input;
+            return graphRequest(ctx, NAME, SCOPES, "GET", `${userBase(ctx)}/events/${encodeURIComponent(p.id)}`);
         },
     });
 }

package/dist/plugins/microsoftFiles/src/index.js

@@ -1,4 +1,6 @@
-import { graphRequest, graphResponse, microsoftDownload, microsoftDriveBase, microsoftSetupHelp, } from "../../_shared/microsoftAuth.js";
+import { standardBase64 } from "../../_shared/base64.js";
+import { jsonAnswer, pathSegment, pathSegments, requestFailed, } from "../../_shared/credentials.js";
+import { graphRequest, graphResponse, microsoftCredential, microsoftDownload, microsoftDriveBase, microsoftOAuth, } from "../../_shared/microsoftAuth.js";
 const NAME = "microsoftFiles";
 const SCOPES = [
     "https://graph.microsoft.com/Files.ReadWrite.All",
@@ -14,22 +16,57 @@ async function binaryFetch(ctx, method, path, body) {
 export default function microsoftFiles(rl) {
     rl.setName(NAME);
     rl.setVersion("1.0.0");
+    rl.setCredential(microsoftCredential(NAME, SCOPES));
     rl.setConnectionSchema({
-        authMethod: { type: "string", required: false, description: "delegated or appOnly; legacy configs infer the method from existing credentials" },
-        tenantId: { type: "string", required: false, env: "MS_GRAPH_TENANT_ID", description: "Entra tenant id (app-only) or omit for OAuth /common" },
-        clientId: { type: "string", required: false, env: "MS_GRAPH_CLIENT_ID", description: "App (client) id" },
-        clientSecret: { type: "string", required: false, env: "MS_GRAPH_CLIENT_SECRET", description: "Client secret VALUE" },
-        refreshToken: { type: "string", required: false, env: "MICROSOFTFILES_REFRESH_TOKEN", description: "OAuth2 refresh token (set by the login flow)" },
-        userUpn: { type: "string", required: false, env: "MS_GRAPH_USER_UPN", description: "App-only only: target user UPN (their OneDrive)" },
-        siteId: { type: "string", required: false, env: "MS_SHAREPOINT_SITE_ID", description: "Optional SharePoint site id (use its default drive)" },
-        driveId: { type: "string", required: false, env: "MS_GRAPH_DRIVE_ID", description: "Optional explicit drive id (overrides site/user)" },
-    });
-    rl.setOAuth({
-        authUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
-        tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
-        scopes: [...SCOPES, "offline_access"],
-        setupHelp: microsoftSetupHelp("Files.ReadWrite.All, Sites.ReadWrite.All"),
+        authMethod: {
+            type: "string",
+            required: false,
+            description: "delegated or appOnly; legacy configs infer the method from existing credentials",
+        },
+        tenantId: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_TENANT_ID",
+            description: "Entra tenant id (app-only) or omit for OAuth /common",
+        },
+        clientId: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_CLIENT_ID",
+            description: "App (client) id",
+        },
+        clientSecret: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_CLIENT_SECRET",
+            description: "Client secret VALUE",
+        },
+        refreshToken: {
+            type: "string",
+            required: false,
+            env: "MICROSOFTFILES_REFRESH_TOKEN",
+            description: "OAuth2 refresh token (set by the login flow)",
+        },
+        userUpn: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_USER_UPN",
+            description: "App-only only: target user UPN (their OneDrive)",
+        },
+        siteId: {
+            type: "string",
+            required: false,
+            env: "MS_SHAREPOINT_SITE_ID",
+            description: "Optional SharePoint site id (use its default drive)",
+        },
+        driveId: {
+            type: "string",
+            required: false,
+            env: "MS_GRAPH_DRIVE_ID",
+            description: "Optional explicit drive id (overrides site/user)",
+        },
     });
+    rl.setOAuth(microsoftOAuth(SCOPES, "Files.ReadWrite.All, Sites.ReadWrite.All"));
     rl.registerAction("files.search", {
         access: "read",
         description: "Search the drive for files/folders by text. Returns [{id,name,size,lastModifiedDateTime,webUrl,folder?}].",
@@ -38,9 +75,10 @@ export default function microsoftFiles(rl) {
             top: { type: "number", required: false, default: 25 },
         },
         async execute(input, ctx) {
-            const q = encodeURIComponent(String(input.query).replace(/'/g, "''"));
+            const p = input;
+            const q = encodeURIComponent(String(p.query).replace(/'/g, "''"));
             const qs = new URLSearchParams({
-                $top: String(input.top ?? 25),
+                $top: String(p.top ?? 25),
                 $select: "id,name,size,lastModifiedDateTime,webUrl,folder,file",
             });
             const r = await graphRequest(ctx, NAME, SCOPES, "GET", `${driveBase(ctx)}/root/search(q='${q}')?${qs}`);
@@ -51,13 +89,20 @@ export default function microsoftFiles(rl) {
         access: "read",
         description: "List children of a folder (default the drive root, or pass folderId).",
         inputSchema: {
-            folderId: { type: "string", required: false, description: "Folder item id; omit for root" },
+            folderId: {
+                type: "string",
+                required: false,
+                description: "Folder item id; omit for root",
+            },
             top: { type: "number", required: false, default: 100 },
         },
         async execute(input, ctx) {
-            const where = input.folderId ? `/items/${encodeURIComponent(input.folderId)}/children` : "/root/children";
+            const p = input;
+            const where = p.folderId
+                ? `/items/${pathSegment(p.folderId)}/children`
+                : "/root/children";
             const qs = new URLSearchParams({
-                $top: String(input.top ?? 100),
+                $top: String(p.top ?? 100),
                 $select: "id,name,size,lastModifiedDateTime,webUrl,folder,file",
             });
             const r = await graphRequest(ctx, NAME, SCOPES, "GET", `${driveBase(ctx)}${where}?${qs}`);
@@ -69,7 +114,8 @@ export default function microsoftFiles(rl) {
         description: "Download a file by id. Returns {id,name,size,contentType,base64}. base64 is the file bytes.",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
-            const meta = await graphRequest(ctx, NAME, SCOPES, "GET", `${driveBase(ctx)}/items/${encodeURIComponent(input.id)}`);
+            const p = input;
+            const meta = await graphRequest(ctx, NAME, SCOPES, "GET", `${driveBase(ctx)}/items/${pathSegment(p.id)}`);
             const res = await microsoftDownload(meta["@microsoft.graph.downloadUrl"]);
             if (!res.ok)
                 throw new Error(`${NAME}: download failed (HTTP ${res.status})`);
@@ -87,16 +133,27 @@ export default function microsoftFiles(rl) {
         access: "write",
         description: "Upload a file (base64) to a path in the drive, e.g. a dedicated output folder. Returns the created item. For files up to ~4MB.",
         inputSchema: {
-            path: { type: "string", required: true, description: "Drive-relative path incl. filename, e.g. 'Agent Output/report.docx'" },
-            base64: { type: "string", required: true, description: "File content, base64-encoded" },
+            path: {
+                type: "string",
+                required: true,
+                description: "Drive-relative path incl. filename, e.g. 'Agent Output/report.docx'",
+            },
+            base64: {
+                type: "string",
+                required: true,
+                description: "File content, base64-encoded",
+            },
         },
         async execute(input, ctx) {
-            const bytes = Buffer.from(input.base64, "base64");
-            const p = input.path.split("/").map(encodeURIComponent).join("/");
-            const res = await binaryFetch(ctx, "PUT", `${driveBase(ctx)}/root:/${p}:/content`, bytes);
+            const { path, base64 } = input;
+            const content = standardBase64(base64);
+            if (content === undefined)
+                throw new Error(`${NAME}: base64 is not valid base64`);
+            const bytes = Buffer.from(content, "base64");
+            const res = await binaryFetch(ctx, "PUT", `${driveBase(ctx)}/root:/${pathSegments(path)}:/content`, bytes);
             if (!res.ok)
-                throw new Error(`${NAME}: upload failed (HTTP ${res.status})`);
-            return JSON.parse(await res.text());
+                throw requestFailed(NAME, res.status);
+            return jsonAnswer(res);
         },
     });
     rl.registerAction("folder.create", {
@@ -104,12 +161,19 @@ export default function microsoftFiles(rl) {
         description: "Create a folder (e.g. a dedicated agent output folder) under the drive root or a parent.",
         inputSchema: {
             name: { type: "string", required: true },
-            parentId: { type: "string", required: false, description: "Parent folder id; omit for root" },
+            parentId: {
+                type: "string",
+                required: false,
+                description: "Parent folder id; omit for root",
+            },
         },
         async execute(input, ctx) {
-            const where = input.parentId ? `/items/${encodeURIComponent(input.parentId)}/children` : "/root/children";
+            const p = input;
+            const where = p.parentId
+                ? `/items/${pathSegment(p.parentId)}/children`
+                : "/root/children";
             return graphRequest(ctx, NAME, SCOPES, "POST", `${driveBase(ctx)}${where}`, {
-                name: input.name,
+                name: p.name,
                 folder: {},
                 "@microsoft.graph.conflictBehavior": "rename",
             });