The current draft defines that POSTing to the path creates a document while POSTing to the objectId updates the folder. That is confusing. Both URLs should be able to do both.

A possible way to distinguish what the client is aiming to achieve is to check for the presents of the property cmis:objectTypeId. It must be set if an object should be created. It must not be set if the folder should be updated.