@calimero-network/mero-js 25.0.4 → 25.0.5

package/dist/admin-api/admin-client.js

@@ -1,4 +1,5 @@
 import { HTTPError, withRetry } from '../http-client/index.js';
+import { pathSegment } from '../http-client/path-segment.js';
 import { CAPABILITIES, hasCap, withCap } from '../capabilities.js';
 import { redeemInvitation } from './redeem-invitation.js';
 /**
@@ -234,13 +235,13 @@ export class AdminApiClient {
         return unwrap(await this.httpClient.post('/admin-api/install-dev-application', request));
     }
     async uninstallApplication(appId) {
-        return unwrap(await this.httpClient.delete(`/admin-api/applications/${appId}`));
+        return unwrap(await this.httpClient.delete(`/admin-api/applications/${pathSegment(appId)}`));
     }
     async listApplications() {
         return unwrap(await this.httpClient.get('/admin-api/applications'));
     }
     async getApplication(appId) {
-        return unwrap(await this.httpClient.get(`/admin-api/applications/${appId}`));
+        return unwrap(await this.httpClient.get(`/admin-api/applications/${pathSegment(appId)}`));
     }
     /**
      * Installed-blob inventory for an application — one entry per locally installed
@@ -248,7 +249,7 @@ export class AdminApiClient {
      * pin" UI); the registry equivalent is `listPackageVersions`.
      */
     async listApplicationVersions(applicationId) {
-        return unwrap(await this.httpClient.get(`/admin-api/applications/${applicationId}/versions`));
+        return unwrap(await this.httpClient.get(`/admin-api/applications/${pathSegment(applicationId)}/versions`));
     }
     /**
      * The application's embedded `wasm-abi/1` manifest. Omit `serviceName` for
@@ -256,7 +257,7 @@ export class AdminApiClient {
      */
     async getApplicationAbi(applicationId, serviceName) {
         const query = serviceName ? `?service_name=${encodeURIComponent(serviceName)}` : '';
-        return unwrap(await this.httpClient.get(`/admin-api/applications/${applicationId}/abi${query}`));
+        return unwrap(await this.httpClient.get(`/admin-api/applications/${pathSegment(applicationId)}/abi${query}`));
     }
     // ---- Package Management ----
     async listPackages() {
@@ -266,11 +267,11 @@ export class AdminApiClient {
     }
     async listPackageVersions(packageName) {
         // Core returns this flat ({ versions: [...] }), not under `data`; tolerate both.
-        const r = await this.httpClient.get(`/admin-api/packages/${encodeURIComponent(packageName)}/versions`);
+        const r = await this.httpClient.get(`/admin-api/packages/${pathSegment(packageName)}/versions`);
         return (r?.data ?? r);
     }
     async getLatestPackageVersion(packageName) {
-        return this.httpClient.get(`/admin-api/packages/${encodeURIComponent(packageName)}/latest`);
+        return this.httpClient.get(`/admin-api/packages/${pathSegment(packageName)}/latest`);
     }
     // ---- Context Management ----
     async createContext(request) {
@@ -280,43 +281,43 @@ export class AdminApiClient {
         return unwrap(await this.httpClient.post('/admin-api/contexts', body));
     }
     async deleteContext(contextId) {
-        return unwrap(await this.httpClient.delete(`/admin-api/contexts/${contextId}`));
+        return unwrap(await this.httpClient.delete(`/admin-api/contexts/${pathSegment(contextId)}`));
     }
     async getContexts() {
         return unwrap(await this.httpClient.get('/admin-api/contexts'));
     }
     async getContext(contextId) {
-        return unwrap(await this.httpClient.get(`/admin-api/contexts/${contextId}`));
+        return unwrap(await this.httpClient.get(`/admin-api/contexts/${pathSegment(contextId)}`));
     }
     async getContextsForApplication(applicationId) {
-        return unwrap(await this.httpClient.get(`/admin-api/contexts/for-application/${applicationId}`));
+        return unwrap(await this.httpClient.get(`/admin-api/contexts/for-application/${pathSegment(applicationId)}`));
     }
     // ---- Context Identity ----
     async generateContextIdentity() {
         return unwrap(await this.httpClient.post('/admin-api/identity/context', {}));
     }
     async getContextIdentities(contextId) {
-        return unwrap(await this.httpClient.get(`/admin-api/contexts/${contextId}/identities`));
+        return unwrap(await this.httpClient.get(`/admin-api/contexts/${pathSegment(contextId)}/identities`));
     }
     async getContextIdentitiesOwned(contextId) {
-        return unwrap(await this.httpClient.get(`/admin-api/contexts/${contextId}/identities-owned`));
+        return unwrap(await this.httpClient.get(`/admin-api/contexts/${pathSegment(contextId)}/identities-owned`));
     }
     // ---- Context join (group membership) ----
     async joinContext(contextId) {
-        return unwrap(await this.httpClient.post(`/admin-api/contexts/${contextId}/join`, {}));
+        return unwrap(await this.httpClient.post(`/admin-api/contexts/${pathSegment(contextId)}/join`, {}));
     }
     // ---- Context group / storage / sync ----
     async getContextGroup(contextId) {
-        return unwrap(await this.httpClient.get(`/admin-api/contexts/${contextId}/group`));
+        return unwrap(await this.httpClient.get(`/admin-api/contexts/${pathSegment(contextId)}/group`));
     }
     async getContextStorage(contextId) {
-        return unwrap(await this.httpClient.get(`/admin-api/contexts/${contextId}/storage`));
+        return unwrap(await this.httpClient.get(`/admin-api/contexts/${pathSegment(contextId)}/storage`));
     }
     /** Sync one context, or every context when `contextId` is omitted. */
     async syncContext(contextId) {
         // Sync-all is `/contexts/sync` with no trailing slash - core routes the two
         // spellings separately and 404s the trailing one.
-        const path = contextId ? `/admin-api/contexts/sync/${contextId}` : '/admin-api/contexts/sync';
+        const path = contextId ? `/admin-api/contexts/sync/${pathSegment(contextId)}` : '/admin-api/contexts/sync';
         await this.httpClient.post(path, {});
     }
     /**
@@ -328,7 +329,7 @@ export class AdminApiClient {
         // Core's `ResyncContextApiResponse` is a flat payload (no inner `data`
         // field), so parse the body directly — do NOT `unwrap`, or `resyncStarted`
         // reads as undefined and the resync silently appears to never start.
-        const r = await this.httpClient.post(`/admin-api/contexts/${contextId}/resync`, request);
+        const r = await this.httpClient.post(`/admin-api/contexts/${pathSegment(contextId)}/resync`, request);
         // An empty 2xx body means the resync was accepted; synthesize the result so
         // callers always get a typed value instead of null.
         return r ?? { contextId, resyncStarted: true };
@@ -337,11 +338,11 @@ export class AdminApiClient {
         return unwrap(await this.httpClient.post('/admin-api/contexts/invite-specialized-node', request));
     }
     async updateContextApplication(contextId, request) {
-        await this.httpClient.post(`/admin-api/contexts/${contextId}/application`, request);
+        await this.httpClient.post(`/admin-api/contexts/${pathSegment(contextId)}/application`, request);
     }
     async getContextsWithExecutorsForApplication(applicationId) {
         // Core returns this flat as { contexts: [...] } (not a bare array under `data`).
-        const r = await this.httpClient.get(`/admin-api/contexts/with-executors/for-application/${applicationId}`);
+        const r = await this.httpClient.get(`/admin-api/contexts/with-executors/for-application/${pathSegment(applicationId)}`);
         if (Array.isArray(r))
             return r;
         return (r?.contexts ??
@@ -374,7 +375,7 @@ export class AdminApiClient {
         // Core's `BlobDeleteResponse` is a flat, snake_case payload (`{ blob_id,
         // deleted }`) — the lone admin DTO without a camelCase rename and without an
         // inner `data` field. Parse directly (no `unwrap`) and map to camelCase.
-        const body = await this.httpClient.delete(`/admin-api/blobs/${blobId}`);
+        const body = await this.httpClient.delete(`/admin-api/blobs/${pathSegment(blobId)}`);
         return { blobId: body.blob_id, deleted: body.deleted };
     }
     async listBlobs() {
@@ -389,9 +390,9 @@ export class AdminApiClient {
      */
     blobPath(blobId, options) {
         if (!options?.contextId)
-            return `/admin-api/blobs/${blobId}`;
+            return `/admin-api/blobs/${pathSegment(blobId)}`;
         const params = new URLSearchParams({ context_id: options.contextId });
-        return `/admin-api/blobs/${blobId}?${params.toString()}`;
+        return `/admin-api/blobs/${pathSegment(blobId)}?${params.toString()}`;
     }
     /**
      * Download a blob's raw bytes. `GET /admin-api/blobs/:id` streams the blob
@@ -447,16 +448,16 @@ export class AdminApiClient {
         return unwrap(await this.httpClient.post('/admin-api/alias/create/application', { alias: request.alias, applicationId: request.applicationId }));
     }
     async lookupContextAlias(name) {
-        return unwrap(await this.httpClient.post(`/admin-api/alias/lookup/context/${encodeURIComponent(name)}`, {}));
+        return unwrap(await this.httpClient.post(`/admin-api/alias/lookup/context/${pathSegment(name)}`, {}));
     }
     async lookupApplicationAlias(name) {
-        return unwrap(await this.httpClient.post(`/admin-api/alias/lookup/application/${encodeURIComponent(name)}`, {}));
+        return unwrap(await this.httpClient.post(`/admin-api/alias/lookup/application/${pathSegment(name)}`, {}));
     }
     async deleteContextAlias(name) {
-        return unwrap(await this.httpClient.post(`/admin-api/alias/delete/context/${encodeURIComponent(name)}`, {}));
+        return unwrap(await this.httpClient.post(`/admin-api/alias/delete/context/${pathSegment(name)}`, {}));
     }
     async deleteApplicationAlias(name) {
-        return unwrap(await this.httpClient.post(`/admin-api/alias/delete/application/${encodeURIComponent(name)}`, {}));
+        return unwrap(await this.httpClient.post(`/admin-api/alias/delete/application/${pathSegment(name)}`, {}));
     }
     async listContextAliases() {
         return unwrap(await this.httpClient.get('/admin-api/alias/list/context'));
@@ -468,10 +469,10 @@ export class AdminApiClient {
         return unwrap(await this.httpClient.post('/admin-api/alias/create/device', { alias: request.alias, deviceId: request.deviceId }));
     }
     async lookupDeviceAlias(name) {
-        return unwrap(await this.httpClient.post(`/admin-api/alias/lookup/device/${encodeURIComponent(name)}`, {}));
+        return unwrap(await this.httpClient.post(`/admin-api/alias/lookup/device/${pathSegment(name)}`, {}));
     }
     async deleteDeviceAlias(name) {
-        return unwrap(await this.httpClient.post(`/admin-api/alias/delete/device/${encodeURIComponent(name)}`, {}));
+        return unwrap(await this.httpClient.post(`/admin-api/alias/delete/device/${pathSegment(name)}`, {}));
     }
     async listDeviceAliases() {
         return unwrap(await this.httpClient.get('/admin-api/alias/list/device'));
@@ -481,7 +482,7 @@ export class AdminApiClient {
         return unwrap(await this.httpClient.get('/admin-api/namespaces'));
     }
     async getNamespace(namespaceId) {
-        return unwrap(await this.httpClient.get(`/admin-api/namespaces/${namespaceId}`));
+        return unwrap(await this.httpClient.get(`/admin-api/namespaces/${pathSegment(namespaceId)}`));
     }
     /**
      * Who this node is — the account it writes as, the device it is, the key it
@@ -544,7 +545,7 @@ export class AdminApiClient {
      * {@link PerformIntentRequest.warrant}.
      */
     async performIntent(contextId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/contexts/${contextId}/intents`, request));
+        return unwrap(await this.httpClient.post(`/admin-api/contexts/${pathSegment(contextId)}/intents`, request));
     }
     /**
      * Read a context as the session's ACCOUNT, without minting a warrant.
@@ -556,7 +557,7 @@ export class AdminApiClient {
      * {@link performIntent}).
      */
     async queryContext(contextId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/contexts/${contextId}/query`, request));
+        return unwrap(await this.httpClient.post(`/admin-api/contexts/${pathSegment(contextId)}/query`, request));
     }
     /**
      * Ask what this node can do for a member in `contextId`, before they sign
@@ -580,10 +581,10 @@ export class AdminApiClient {
      * run as a relay.
      */
     async getIntentRelay(contextId) {
-        return unwrap(await this.httpClient.get(`/admin-api/contexts/${contextId}/intents`));
+        return unwrap(await this.httpClient.get(`/admin-api/contexts/${pathSegment(contextId)}/intents`));
     }
     async listNamespacesForApplication(applicationId) {
-        return unwrap(await this.httpClient.get(`/admin-api/namespaces/for-application/${applicationId}`));
+        return unwrap(await this.httpClient.get(`/admin-api/namespaces/for-application/${pathSegment(applicationId)}`));
     }
     async createNamespace(request) {
         return unwrap(await this.httpClient.post('/admin-api/namespaces', request));
@@ -591,14 +592,14 @@ export class AdminApiClient {
     async deleteNamespace(namespaceId) {
         // Core requires `Content-Type: application/json` on this DELETE even though
         // the body is always empty, so send the header and an empty JSON object.
-        return unwrap(await this.httpClient.request(`/admin-api/namespaces/${namespaceId}`, {
+        return unwrap(await this.httpClient.request(`/admin-api/namespaces/${pathSegment(namespaceId)}`, {
             method: 'DELETE',
             body: '{}',
             headers: { 'Content-Type': 'application/json' },
         }));
     }
     async createNamespaceInvitation(namespaceId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/invite`, request ?? {}));
+        return unwrap(await this.httpClient.post(`/admin-api/namespaces/${pathSegment(namespaceId)}/invite`, request ?? {}));
     }
     /**
      * Present a join this caller signed to a node the inviter named as an
@@ -618,10 +619,10 @@ export class AdminApiClient {
      * @param request the invitation and the hex-encoded signed op
      */
     async admitJoin(namespaceId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/admit`, request, { timeoutMs: 65000 }));
+        return unwrap(await this.httpClient.post(`/admin-api/namespaces/${pathSegment(namespaceId)}/admit`, request, { timeoutMs: 65000 }));
     }
     async joinNamespace(namespaceId, request) {
-        const data = unwrap(await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/join`, request, { timeoutMs: 65000 }));
+        const data = unwrap(await this.httpClient.post(`/admin-api/namespaces/${pathSegment(namespaceId)}/join`, request, { timeoutMs: 65000 }));
         // core 0.11.0-rc.25 renamed this response's `groupId` to `namespaceId`
         // (core#3598). Bind whichever spelling the node actually sent rather than
         // picking one: the rename lands as `undefined` on the field the client
@@ -662,10 +663,10 @@ export class AdminApiClient {
         });
     }
     async createGroupInNamespace(namespaceId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/groups`, request ?? {}));
+        return unwrap(await this.httpClient.post(`/admin-api/namespaces/${pathSegment(namespaceId)}/groups`, request ?? {}));
     }
     async listNamespaceGroups(namespaceId) {
-        return unwrap(await this.httpClient.get(`/admin-api/namespaces/${namespaceId}/groups`));
+        return unwrap(await this.httpClient.get(`/admin-api/namespaces/${pathSegment(namespaceId)}/groups`));
     }
     // ---- Account Devices & Pairing ----
     /**
@@ -721,7 +722,7 @@ export class AdminApiClient {
      * would make the accidental request the widest one.
      */
     async relinkAccountDevice(deviceId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/account/devices/${deviceId}/relink`, request ?? {}));
+        return unwrap(await this.httpClient.post(`/admin-api/account/devices/${pathSegment(deviceId)}/relink`, request ?? {}));
     }
     /**
      * Replace a device's scope outright, in one root-signed op.
@@ -731,7 +732,7 @@ export class AdminApiClient {
      * device need not be online.
      */
     async rescopeAccountDevice(deviceId, request) {
-        return unwrap(await this.httpClient.put(`/admin-api/account/devices/${encodeURIComponent(deviceId)}/scope`, request));
+        return unwrap(await this.httpClient.put(`/admin-api/account/devices/${pathSegment(deviceId)}/scope`, request));
     }
     /**
      * Sign a payload an outside verifier specified, with this account's root.
@@ -772,7 +773,7 @@ export class AdminApiClient {
      * node is accepted only for that device's own id.
      */
     async labelAccountDevice(deviceId, request) {
-        return unwrap(await this.httpClient.put(`/admin-api/account/devices/${encodeURIComponent(deviceId)}/label`, request));
+        return unwrap(await this.httpClient.put(`/admin-api/account/devices/${pathSegment(deviceId)}/label`, request));
     }
     /**
      * Every device of this account, as this node sees them - its own included.
@@ -829,7 +830,7 @@ export class AdminApiClient {
      * that - "this device can no longer act" is the only claim it supports.
      */
     async revokeAccountDevice(namespaceId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/account/revoke`, request));
+        return unwrap(await this.httpClient.post(`/admin-api/namespaces/${pathSegment(namespaceId)}/account/revoke`, request));
     }
     /**
      * Carry the device link of an account **this node does not hold**, so the
@@ -847,11 +848,11 @@ export class AdminApiClient {
      * account is a member of nothing in the namespace (add it first).
      */
     async linkAccountDevice(namespaceId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/account/link-device`, request));
+        return unwrap(await this.httpClient.post(`/admin-api/namespaces/${pathSegment(namespaceId)}/account/link-device`, request));
     }
     // ---- Group Management ----
     async getGroupInfo(groupId) {
-        return unwrap(await this.httpClient.get(`/admin-api/groups/${groupId}`));
+        return unwrap(await this.httpClient.get(`/admin-api/groups/${pathSegment(groupId)}`));
     }
     /** Thin wrapper over {@link getGroupInfo}: returns the group's `defaultCapabilities` bitmask. */
     async getDefaultCapabilities(groupId) {
@@ -864,14 +865,14 @@ export class AdminApiClient {
     async deleteGroup(groupId) {
         // Core requires `Content-Type: application/json` on this DELETE even though
         // the body is always empty, so send the header and an empty JSON object.
-        return unwrap(await this.httpClient.request(`/admin-api/groups/${groupId}`, {
+        return unwrap(await this.httpClient.request(`/admin-api/groups/${pathSegment(groupId)}`, {
             method: 'DELETE',
             body: '{}',
             headers: { 'Content-Type': 'application/json' },
         }));
     }
     async listGroupMembers(groupId) {
-        const response = await this.httpClient.get(`/admin-api/groups/${groupId}/members`);
+        const response = await this.httpClient.get(`/admin-api/groups/${pathSegment(groupId)}/members`);
         // Validate the field we declare as non-optional in the type so a
         // contract-violating response (proxy error body, future API drift,
         // etc.) surfaces as a clear error rather than silently producing an
@@ -919,7 +920,7 @@ export class AdminApiClient {
         if (options?.limit !== undefined)
             params.set('limit', String(options.limit));
         const query = params.toString();
-        const base = `/admin-api/groups/${encodeURIComponent(groupId)}/member-devices`;
+        const base = `/admin-api/groups/${pathSegment(groupId)}/member-devices`;
         const response = await this.httpClient.get(query ? `${base}?${query}` : base);
         return response.members;
     }
@@ -969,7 +970,7 @@ export class AdminApiClient {
      *        hex (exactly 64). The node accepts either; the two never collide.
      */
     async getWarrantNonce(contextId, authorDeviceKey) {
-        const path = `/admin-api/contexts/${encodeURIComponent(contextId)}/warrant-nonce/${encodeURIComponent(authorDeviceKey)}`;
+        const path = `/admin-api/contexts/${pathSegment(contextId)}/warrant-nonce/${pathSegment(authorDeviceKey)}`;
         // Read as TEXT, not JSON. `JSON.parse` would turn the `u64` nonces into
         // doubles before this code ever sees them, rounding anything past 2^53 into
         // a value that looks ordinary and is refused forever. The digits have to be
@@ -1014,7 +1015,7 @@ export class AdminApiClient {
      *        value passed as `authorProof` to the relay client.
      */
     async getWarrantNonceAsAuthor(contextId, authorProof) {
-        const path = `/admin-api/contexts/${encodeURIComponent(contextId)}/warrant-nonce`;
+        const path = `/admin-api/contexts/${pathSegment(contextId)}/warrant-nonce`;
         // Text, not JSON, for the reason given in `getWarrantNonce`: `JSON.parse`
         // rounds a u64 past 2^53 into a nonce that looks ordinary and is refused
         // for ever.
@@ -1042,7 +1043,7 @@ export class AdminApiClient {
         if (options.limit !== undefined)
             params.set('limit', String(options.limit));
         const query = params.toString();
-        const path = `/admin-api/groups/${groupId}/member-devices${query ? `?${query}` : ''}`;
+        const path = `/admin-api/groups/${pathSegment(groupId)}/member-devices${query ? `?${query}` : ''}`;
         return this.httpClient.get(path);
     }
     /**
@@ -1051,16 +1052,16 @@ export class AdminApiClient {
      * the route reaches no further than the caller already does.
      */
     async sealToAccount(groupId, account, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/accounts/${account}/seal`, request));
+        return unwrap(await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/accounts/${pathSegment(account)}/seal`, request));
     }
     async listGroupContexts(groupId) {
-        return unwrap(await this.httpClient.get(`/admin-api/groups/${groupId}/contexts`));
+        return unwrap(await this.httpClient.get(`/admin-api/groups/${pathSegment(groupId)}/contexts`));
     }
     async addGroupMembers(groupId, request) {
-        await this.httpClient.post(`/admin-api/groups/${groupId}/members`, request);
+        await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/members`, request);
     }
     async removeGroupMembers(groupId, request) {
-        await this.httpClient.post(`/admin-api/groups/${groupId}/members/remove`, request);
+        await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/members/remove`, request);
     }
     /**
      * `identity` is the member's ACCOUNT (64 hex), as returned by
@@ -1068,7 +1069,7 @@ export class AdminApiClient {
      * 64 hex, so nothing but the source tells them apart.
      */
     async updateMemberRole(groupId, identity, request) {
-        await this.httpClient.put(`/admin-api/groups/${groupId}/members/${identity}/role`, request);
+        await this.httpClient.put(`/admin-api/groups/${pathSegment(groupId)}/members/${pathSegment(identity)}/role`, request);
     }
     /**
      * `identity` is the member's ACCOUNT (64 hex), as returned by
@@ -1076,7 +1077,7 @@ export class AdminApiClient {
      * 64 hex, so nothing but the source tells them apart.
      */
     async getMemberCapabilities(groupId, identity) {
-        return unwrap(await this.httpClient.get(`/admin-api/groups/${groupId}/members/${identity}/capabilities`));
+        return unwrap(await this.httpClient.get(`/admin-api/groups/${pathSegment(groupId)}/members/${pathSegment(identity)}/capabilities`));
     }
     /**
      * `identity` is the member's ACCOUNT (64 hex), as returned by
@@ -1084,10 +1085,10 @@ export class AdminApiClient {
      * 64 hex, so nothing but the source tells them apart.
      */
     async setMemberCapabilities(groupId, identity, request) {
-        await this.httpClient.put(`/admin-api/groups/${groupId}/members/${identity}/capabilities`, request);
+        await this.httpClient.put(`/admin-api/groups/${pathSegment(groupId)}/members/${pathSegment(identity)}/capabilities`, request);
     }
     async setDefaultCapabilities(groupId, request) {
-        await this.httpClient.put(`/admin-api/groups/${groupId}/settings/default-capabilities`, request);
+        await this.httpClient.put(`/admin-api/groups/${pathSegment(groupId)}/settings/default-capabilities`, request);
     }
     /**
      * Make every member admitted to `groupId` from now on able to relay a
@@ -1169,15 +1170,15 @@ export class AdminApiClient {
         return { changed: true, capabilities: next };
     }
     async setSubgroupVisibility(groupId, request) {
-        await this.httpClient.put(`/admin-api/groups/${groupId}/settings/subgroup-visibility`, request);
+        await this.httpClient.put(`/admin-api/groups/${pathSegment(groupId)}/settings/subgroup-visibility`, request);
     }
     async setTeeAdmissionPolicy(groupId, request) {
-        await this.httpClient.put(`/admin-api/groups/${groupId}/settings/tee-admission-policy`, request);
+        await this.httpClient.put(`/admin-api/groups/${pathSegment(groupId)}/settings/tee-admission-policy`, request);
     }
     async getTeeAdmissionPolicy(groupId) {
         // Intersection (not union) so the type is unambiguous: `data` is optional, so
         // `?? response` cleanly falls back to a flat (un-enveloped) response.
-        const response = await this.httpClient.get(`/admin-api/groups/${groupId}/settings/tee-admission-policy`);
+        const response = await this.httpClient.get(`/admin-api/groups/${pathSegment(groupId)}/settings/tee-admission-policy`);
         return response.data ?? response;
     }
     /**
@@ -1187,7 +1188,7 @@ export class AdminApiClient {
      * route for this policy.
      */
     async setTeeAuthoringPolicy(groupId, request) {
-        await this.httpClient.put(`/admin-api/groups/${groupId}/settings/tee-authoring-policy`, request);
+        await this.httpClient.put(`/admin-api/groups/${pathSegment(groupId)}/settings/tee-authoring-policy`, request);
     }
     /**
      * Turns TEE authorship off in the namespace: every TEE loses its authority,
@@ -1199,7 +1200,7 @@ export class AdminApiClient {
      * (`teeAuthoringPolicyOp([])`); omit it on a node that holds that root.
      */
     async disableTeeAuthoringPolicy(groupId, options = {}) {
-        const path = `/admin-api/groups/${groupId}/settings/tee-authoring-policy`;
+        const path = `/admin-api/groups/${pathSegment(groupId)}/settings/tee-authoring-policy`;
         if (options.rootProof === undefined) {
             await this.httpClient.delete(path);
             return;
@@ -1217,14 +1218,14 @@ export class AdminApiClient {
      * {@link RootGuardedOpRequest}.
      */
     async transferOwnership(groupId, request) {
-        await this.httpClient.post(`/admin-api/groups/${groupId}/transfer-ownership`, request);
+        await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/transfer-ownership`, request);
     }
     /**
      * Repoint the namespace's admin pin at `newAdmin`, a member of its root.
      * Owner-only, with the owner account's root proof; see {@link RootGuardedOpRequest}.
      */
     async changeNamespaceAdmin(namespaceId, request) {
-        await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/admin`, request);
+        await this.httpClient.post(`/admin-api/namespaces/${pathSegment(namespaceId)}/admin`, request);
     }
     /**
      * Delete a group through the owner-only path: it must hold no contexts, and
@@ -1232,22 +1233,22 @@ export class AdminApiClient {
      * admin-level cascading delete.
      */
     async ownerDeleteGroup(groupId, request = {}) {
-        await this.httpClient.post(`/admin-api/groups/${groupId}/owner-delete`, request);
+        await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/owner-delete`, request);
     }
     // ---- Group / member / context metadata ----
     async setGroupMetadata(groupId, request) {
-        await this.httpClient.put(`/admin-api/groups/${groupId}/metadata`, request);
+        await this.httpClient.put(`/admin-api/groups/${pathSegment(groupId)}/metadata`, request);
     }
     async getGroupMetadata(groupId) {
         // Core single-envelopes the record: `{ data: MetadataRecord | null }`.
         // "No record yet" is `{ data: null }` (or a bare null body on older nodes),
         // so optional-chain to a clean null. Returns the full record (name + data +
         // updatedAt/updatedBy), not just the data map.
-        const response = await this.httpClient.get(`/admin-api/groups/${groupId}/metadata`);
+        const response = await this.httpClient.get(`/admin-api/groups/${pathSegment(groupId)}/metadata`);
         return response?.data ?? null;
     }
     async setMemberMetadata(groupId, identity, request) {
-        await this.httpClient.put(`/admin-api/groups/${groupId}/members/${identity}/metadata`, request);
+        await this.httpClient.put(`/admin-api/groups/${pathSegment(groupId)}/members/${pathSegment(identity)}/metadata`, request);
     }
     /**
      * `identity` is the member's ACCOUNT (64 hex), as returned by
@@ -1256,25 +1257,25 @@ export class AdminApiClient {
      */
     async getMemberMetadata(groupId, identity) {
         // Single-enveloped record; see getGroupMetadata.
-        const response = await this.httpClient.get(`/admin-api/groups/${groupId}/members/${identity}/metadata`);
+        const response = await this.httpClient.get(`/admin-api/groups/${pathSegment(groupId)}/members/${pathSegment(identity)}/metadata`);
         return response?.data ?? null;
     }
     async setContextMetadata(groupId, contextId, request) {
-        await this.httpClient.put(`/admin-api/groups/${groupId}/contexts/${contextId}/metadata`, request);
+        await this.httpClient.put(`/admin-api/groups/${pathSegment(groupId)}/contexts/${pathSegment(contextId)}/metadata`, request);
     }
     async getContextMetadata(groupId, contextId) {
         // Single-enveloped record; see getGroupMetadata.
-        const response = await this.httpClient.get(`/admin-api/groups/${groupId}/contexts/${contextId}/metadata`);
+        const response = await this.httpClient.get(`/admin-api/groups/${pathSegment(groupId)}/contexts/${pathSegment(contextId)}/metadata`);
         return response?.data ?? null;
     }
     async syncGroup(groupId) {
-        return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/sync`, {}));
+        return unwrap(await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/sync`, {}));
     }
     async upgradeGroup(groupId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/upgrade`, request));
+        return unwrap(await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/upgrade`, request));
     }
     async getGroupUpgradeStatus(groupId) {
-        return unwrap(await this.httpClient.get(`/admin-api/groups/${groupId}/upgrade/status`));
+        return unwrap(await this.httpClient.get(`/admin-api/groups/${pathSegment(groupId)}/upgrade/status`));
     }
     /**
      * The operator-facing "have all peers migrated?" rollup for a namespace.
@@ -1282,39 +1283,37 @@ export class AdminApiClient {
      * envelope to unwrap here (unlike most admin reads).
      */
     async getMigrationStatus(namespaceId) {
-        const id = encodeURIComponent(namespaceId);
-        return this.httpClient.get(`/admin-api/groups/${id}/migration-status`);
+        return this.httpClient.get(`/admin-api/groups/${pathSegment(namespaceId)}/migration-status`);
     }
     /** Per-group cascade-migration snapshots for a namespace. */
     async getCascadeStatus(namespaceId) {
-        const id = encodeURIComponent(namespaceId);
-        return unwrap(await this.httpClient.get(`/admin-api/groups/${id}/cascade-status`));
+        return unwrap(await this.httpClient.get(`/admin-api/groups/${pathSegment(namespaceId)}/cascade-status`));
     }
     async retryGroupUpgrade(groupId) {
-        return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/upgrade/retry`, {}));
+        return unwrap(await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/upgrade/retry`, {}));
     }
     /** Move `childGroupId` under `request.newParentId`. */
     async reparentGroup(childGroupId, request) {
         // Core returns this flat ({ reparented }); tolerate the { data } envelope too.
-        const r = await this.httpClient.post(`/admin-api/groups/${childGroupId}/reparent`, request);
+        const r = await this.httpClient.post(`/admin-api/groups/${pathSegment(childGroupId)}/reparent`, request);
         return (r?.data ?? r);
     }
     async listSubgroups(groupId) {
-        const response = await this.httpClient.get(`/admin-api/groups/${groupId}/subgroups`);
+        const response = await this.httpClient.get(`/admin-api/groups/${pathSegment(groupId)}/subgroups`);
         return response.subgroups ?? response.data ?? [];
     }
     async detachContextFromGroup(groupId, contextId) {
-        await this.httpClient.post(`/admin-api/groups/${groupId}/contexts/${contextId}/remove`, {});
+        await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/contexts/${pathSegment(contextId)}/remove`, {});
     }
     // ---- Group Invitation & Join ----
     async createGroupInvitation(groupId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/invite`, request ?? {}));
+        return unwrap(await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/invite`, request ?? {}));
     }
     async joinGroup(request) {
         return unwrap(await this.httpClient.post('/admin-api/groups/join', request));
     }
     async joinSubgroupInheritance(groupId) {
-        return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/join-via-inheritance`, {}));
+        return unwrap(await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/join-via-inheritance`, {}));
     }
     // ---- TEE ----
     async getTeeInfo() {
@@ -1349,23 +1348,23 @@ export class AdminApiClient {
     }
     /** Leave a group (POST /admin-api/groups/:group_id/leave). */
     async leaveGroup(groupId) {
-        await this.httpClient.post(`/admin-api/groups/${groupId}/leave`, {});
+        await this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/leave`, {});
     }
     /** Leave a context (POST /admin-api/contexts/:context_id/leave). */
     async leaveContext(contextId) {
-        await this.httpClient.post(`/admin-api/contexts/${contextId}/leave`, {});
+        await this.httpClient.post(`/admin-api/contexts/${pathSegment(contextId)}/leave`, {});
     }
     /** Leave a namespace (POST /admin-api/namespaces/:namespace_id/leave). */
     async leaveNamespace(namespaceId) {
-        await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/leave`, {});
+        await this.httpClient.post(`/admin-api/namespaces/${pathSegment(namespaceId)}/leave`, {});
     }
     /** Issue a group ownership proof (POST /admin-api/groups/:group_id/issue-ownership-proof). */
     async issueOwnershipProof(groupId, request) {
-        return this.httpClient.post(`/admin-api/groups/${groupId}/issue-ownership-proof`, request);
+        return this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/issue-ownership-proof`, request);
     }
     /** Issue a namespace ownership proof (POST /admin-api/groups/:group_id/issue-namespace-ownership-proof). */
     async issueNamespaceOwnershipProof(groupId, request) {
-        return this.httpClient.post(`/admin-api/groups/${groupId}/issue-namespace-ownership-proof`, request);
+        return this.httpClient.post(`/admin-api/groups/${pathSegment(groupId)}/issue-namespace-ownership-proof`, request);
     }
     /**
      * Set a member's auto-follow flag (PUT
@@ -1376,10 +1375,10 @@ export class AdminApiClient {
      * 64 hex, so nothing but the source tells them apart.
      */
     async setMemberAutoFollow(groupId, identity, request) {
-        await this.httpClient.put(`/admin-api/groups/${groupId}/members/${identity}/auto-follow`, request);
+        await this.httpClient.put(`/admin-api/groups/${pathSegment(groupId)}/members/${pathSegment(identity)}/auto-follow`, request);
     }
     /** Abort a namespace migration (POST /admin-api/groups/:namespace_id/migration/abort). */
     async abortMigration(namespaceId) {
-        return this.httpClient.post(`/admin-api/groups/${namespaceId}/migration/abort`, {});
+        return this.httpClient.post(`/admin-api/groups/${pathSegment(namespaceId)}/migration/abort`, {});
     }
 }