runline 0.32.0 → 0.34.0

package/dist/plugins/github/src/index.js

@@ -1,50 +1,25 @@
-async function apiRequest(token, baseUrl, method, endpoint, body, qs) {
-    const url = new URL(`${baseUrl}${endpoint}`);
-    if (qs) {
-        for (const [k, v] of Object.entries(qs)) {
-            if (v !== undefined && v !== null)
-                url.searchParams.set(k, String(v));
-        }
-    }
-    const opts = {
+import { credentialJson, pathSegment, pathSegments, } from "../../_shared/credentials.js";
+import { GITHUB_API_VERSION, githubCredential } from "./credentials.js";
+function gh(ctx, method, path, body, query) {
+    return credentialJson(ctx, githubCredential, "github", {
+        target: "api",
+        path,
         method,
+        query,
         headers: {
-            Authorization: `Bearer ${token}`,
             Accept: "application/vnd.github+json",
-            "Content-Type": "application/json",
-            "X-GitHub-Api-Version": "2022-11-28",
-        },
-    };
-    if (body &&
-        Object.keys(body).length > 0 &&
-        method !== "GET" &&
-        method !== "DELETE") {
-        opts.body = JSON.stringify(body);
-    }
-    const res = await fetch(url.toString(), opts);
-    if (!res.ok)
-        throw new Error(`GitHub API error ${res.status}: ${await res.text()}`);
-    if (res.status === 204)
-        return { success: true };
-    const ct = res.headers.get("content-type") ?? "";
-    if (ct.includes("application/json"))
-        return res.json();
-    return { success: true };
-}
-function getConn(ctx) {
-    const cfg = ctx.connection.config;
-    return {
-        token: cfg.token,
-        baseUrl: (cfg.baseUrl ?? "https://api.github.com").replace(/\/$/, ""),
-    };
-}
-function gh(ctx, method, endpoint, body, qs) {
-    const { token, baseUrl } = getConn(ctx);
-    return apiRequest(token, baseUrl, method, endpoint, body, qs);
+            "X-GitHub-Api-Version": GITHUB_API_VERSION,
+        },
+        // DELETE carries a body where GitHub needs one (a file's sha and message).
+        ...(body && Object.keys(body).length > 0 && method !== "GET"
+            ? { json: body }
+            : {}),
+    });
 }
 export default function github(rl) {
     rl.setName("github");
     rl.setVersion("0.1.0");
+    rl.setCredential(githubCredential);
     rl.setConnectionSchema({
         token: {
             type: "string",
@@ -83,7 +58,7 @@ export default function github(rl) {
             const qs = {};
             if (ref)
                 qs.ref = ref;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/contents/${path}`, undefined, qs);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/contents/${pathSegments(path)}`, undefined, qs);
         },
     });
     rl.registerAction("file.createOrUpdate", {
@@ -124,7 +99,7 @@ export default function github(rl) {
                 body.sha = sha;
             if (branch)
                 body.branch = branch;
-            return gh(ctx, "PUT", `/repos/${owner}/${repo}/contents/${path}`, body);
+            return gh(ctx, "PUT", `repos/${pathSegment(owner)}/${pathSegment(repo)}/contents/${pathSegments(path)}`, body);
         },
     });
     rl.registerAction("file.delete", {
@@ -155,7 +130,7 @@ export default function github(rl) {
             const body = { sha, message };
             if (branch)
                 body.branch = branch;
-            return gh(ctx, "DELETE", `/repos/${owner}/${repo}/contents/${path}`, body);
+            return gh(ctx, "DELETE", `repos/${pathSegment(owner)}/${pathSegment(repo)}/contents/${pathSegments(path)}`, body);
         },
     });
     rl.registerAction("file.list", {
@@ -180,11 +155,11 @@ export default function github(rl) {
             },
         },
         async execute(input, ctx) {
-            const { owner, repo, path = "", ref, } = (input ?? {});
+            const { owner, repo, path, ref } = (input ?? {});
             const qs = {};
             if (ref)
                 qs.ref = ref;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/contents/${path}`, undefined, qs);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/contents/${path ? pathSegments(path) : ""}`, undefined, qs);
         },
     });
     // ── Issue ───────────────────────────────────────────
@@ -227,7 +202,7 @@ export default function github(rl) {
                 b.assignees = assignees;
             if (milestone)
                 b.milestone = milestone;
-            return gh(ctx, "POST", `/repos/${owner}/${repo}/issues`, b);
+            return gh(ctx, "POST", `repos/${pathSegment(owner)}/${pathSegment(repo)}/issues`, b);
         },
     });
     rl.registerAction("issue.get", {
@@ -248,7 +223,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, issueNumber } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/issues/${issueNumber}`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/issues/${pathSegment(issueNumber)}`);
         },
     });
     rl.registerAction("issue.update", {
@@ -274,7 +249,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, issueNumber, ...fields } = input;
-            return gh(ctx, "PATCH", `/repos/${owner}/${repo}/issues/${issueNumber}`, fields);
+            return gh(ctx, "PATCH", `repos/${pathSegment(owner)}/${pathSegment(repo)}/issues/${pathSegment(issueNumber)}`, fields);
         },
     });
     rl.registerAction("issue.createComment", {
@@ -300,7 +275,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, issueNumber, body: commentBody, } = input;
-            return gh(ctx, "POST", `/repos/${owner}/${repo}/issues/${issueNumber}/comments`, { body: commentBody });
+            return gh(ctx, "POST", `repos/${pathSegment(owner)}/${pathSegment(repo)}/issues/${pathSegment(issueNumber)}/comments`, { body: commentBody });
         },
     });
     rl.registerAction("issue.lock", {
@@ -329,7 +304,7 @@ export default function github(rl) {
             const body = {};
             if (lockReason)
                 body.lock_reason = lockReason;
-            await gh(ctx, "PUT", `/repos/${owner}/${repo}/issues/${issueNumber}/lock`, body);
+            await gh(ctx, "PUT", `repos/${pathSegment(owner)}/${pathSegment(repo)}/issues/${pathSegment(issueNumber)}/lock`, body);
             return { success: true };
         },
     });
@@ -380,7 +355,7 @@ export default function github(rl) {
                 b.prerelease = prerelease;
             if (targetCommitish)
                 b.target_commitish = targetCommitish;
-            return gh(ctx, "POST", `/repos/${owner}/${repo}/releases`, b);
+            return gh(ctx, "POST", `repos/${pathSegment(owner)}/${pathSegment(repo)}/releases`, b);
         },
     });
     rl.registerAction("release.get", {
@@ -397,7 +372,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, releaseId } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/releases/${releaseId}`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/releases/${pathSegment(releaseId)}`);
         },
     });
     rl.registerAction("release.list", {
@@ -424,7 +399,7 @@ export default function github(rl) {
                 qs.per_page = perPage;
             if (page)
                 qs.page = page;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/releases`, undefined, qs);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/releases`, undefined, qs);
         },
     });
     rl.registerAction("release.update", {
@@ -465,7 +440,7 @@ export default function github(rl) {
                 b.draft = draft;
             if (prerelease !== undefined)
                 b.prerelease = prerelease;
-            return gh(ctx, "PATCH", `/repos/${owner}/${repo}/releases/${releaseId}`, b);
+            return gh(ctx, "PATCH", `repos/${pathSegment(owner)}/${pathSegment(repo)}/releases/${pathSegment(releaseId)}`, b);
         },
     });
     rl.registerAction("release.delete", {
@@ -482,7 +457,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, releaseId } = input;
-            await gh(ctx, "DELETE", `/repos/${owner}/${repo}/releases/${releaseId}`);
+            await gh(ctx, "DELETE", `repos/${pathSegment(owner)}/${pathSegment(repo)}/releases/${pathSegment(releaseId)}`);
             return { success: true };
         },
     });
@@ -546,7 +521,7 @@ export default function github(rl) {
                 qs.per_page = perPage;
             if (page)
                 qs.page = page;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/commits`, undefined, qs);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/commits`, undefined, qs);
         },
     });
     rl.registerAction("commit.get", {
@@ -567,7 +542,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, ref } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/commits/${encodeURIComponent(String(ref))}`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/commits/${pathSegments(ref)}`);
         },
     });
     rl.registerAction("branch.get", {
@@ -584,7 +559,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, branch } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/branches/${encodeURIComponent(String(branch))}`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/branches/${pathSegments(branch)}`);
         },
     });
     rl.registerAction("repository.get", {
@@ -600,7 +575,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}`);
         },
     });
     rl.registerAction("repository.getLicense", {
@@ -616,7 +591,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/license`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/license`);
         },
     });
     rl.registerAction("repository.listIssues", {
@@ -671,7 +646,7 @@ export default function github(rl) {
                 qs.per_page = perPage;
             if (page)
                 qs.page = page;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/issues`, undefined, qs);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/issues`, undefined, qs);
         },
     });
     rl.registerAction("repository.listPullRequests", {
@@ -720,7 +695,7 @@ export default function github(rl) {
                 qs.per_page = perPage;
             if (page)
                 qs.page = page;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/pulls`, undefined, qs);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/pulls`, undefined, qs);
         },
     });
     rl.registerAction("repository.listPopularPaths", {
@@ -736,7 +711,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/traffic/popular/paths`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/traffic/popular/paths`);
         },
     });
     rl.registerAction("repository.listReferrers", {
@@ -752,7 +727,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/traffic/popular/referrers`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/traffic/popular/referrers`);
         },
     });
     // ── Review ──────────────────────────────────────────
@@ -775,7 +750,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, pullNumber, reviewId } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/pulls/${pullNumber}/reviews/${reviewId}`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/pulls/${pathSegment(pullNumber)}/reviews/${pathSegment(reviewId)}`);
         },
     });
     rl.registerAction("review.list", {
@@ -796,7 +771,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, pullNumber } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/pulls/${pullNumber}/reviews`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/pulls/${pathSegment(pullNumber)}/reviews`);
         },
     });
     rl.registerAction("review.create", {
@@ -826,7 +801,7 @@ export default function github(rl) {
             const b = { event };
             if (reviewBody)
                 b.body = reviewBody;
-            return gh(ctx, "POST", `/repos/${owner}/${repo}/pulls/${pullNumber}/reviews`, b);
+            return gh(ctx, "POST", `repos/${pathSegment(owner)}/${pathSegment(repo)}/pulls/${pathSegment(pullNumber)}/reviews`, b);
         },
     });
     rl.registerAction("review.update", {
@@ -853,7 +828,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, pullNumber, reviewId, body: reviewBody, } = input;
-            return gh(ctx, "PUT", `/repos/${owner}/${repo}/pulls/${pullNumber}/reviews/${reviewId}`, { body: reviewBody });
+            return gh(ctx, "PUT", `repos/${pathSegment(owner)}/${pathSegment(repo)}/pulls/${pathSegment(pullNumber)}/reviews/${pathSegment(reviewId)}`, { body: reviewBody });
         },
     });
     // ── User ────────────────────────────────────────────
@@ -894,7 +869,9 @@ export default function github(rl) {
                 qs.per_page = perPage;
             if (page)
                 qs.page = page;
-            const endpoint = username ? `/users/${username}/repos` : "/user/repos";
+            const endpoint = username
+                ? `users/${pathSegment(username)}/repos`
+                : "user/repos";
             return gh(ctx, "GET", endpoint, undefined, qs);
         },
     });
@@ -927,7 +904,7 @@ export default function github(rl) {
                 qs.sort = sort;
             if (perPage)
                 qs.per_page = perPage;
-            return gh(ctx, "GET", "/user/issues", undefined, qs);
+            return gh(ctx, "GET", "user/issues", undefined, qs);
         },
     });
     rl.registerAction("user.invite", {
@@ -956,7 +933,7 @@ export default function github(rl) {
             const body = {};
             if (permission)
                 body.permission = permission;
-            return gh(ctx, "PUT", `/repos/${owner}/${repo}/collaborators/${username}`, body);
+            return gh(ctx, "PUT", `repos/${pathSegment(owner)}/${pathSegment(repo)}/collaborators/${pathSegment(username)}`, body);
         },
     });
     // ── Organization ────────────────────────────────────
@@ -993,7 +970,7 @@ export default function github(rl) {
                 qs.per_page = perPage;
             if (page)
                 qs.page = page;
-            return gh(ctx, "GET", `/orgs/${org}/repos`, undefined, qs);
+            return gh(ctx, "GET", `orgs/${pathSegment(org)}/repos`, undefined, qs);
         },
     });
     // ── Workflow ────────────────────────────────────────
@@ -1010,7 +987,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo } = input;
-            const data = (await gh(ctx, "GET", `/repos/${owner}/${repo}/actions/workflows`));
+            const data = (await gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/actions/workflows`));
             return data.workflows;
         },
     });
@@ -1032,7 +1009,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, workflowId } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/actions/workflows/${workflowId}`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/actions/workflows/${pathSegment(workflowId)}`);
         },
     });
     rl.registerAction("workflow.dispatch", {
@@ -1066,7 +1043,7 @@ export default function github(rl) {
             const body = { ref };
             if (inputs)
                 body.inputs = inputs;
-            await gh(ctx, "POST", `/repos/${owner}/${repo}/actions/workflows/${workflowId}/dispatches`, body);
+            await gh(ctx, "POST", `repos/${pathSegment(owner)}/${pathSegment(repo)}/actions/workflows/${pathSegment(workflowId)}/dispatches`, body);
             return { success: true };
         },
     });
@@ -1088,7 +1065,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, workflowId } = input;
-            await gh(ctx, "PUT", `/repos/${owner}/${repo}/actions/workflows/${workflowId}/enable`);
+            await gh(ctx, "PUT", `repos/${pathSegment(owner)}/${pathSegment(repo)}/actions/workflows/${pathSegment(workflowId)}/enable`);
             return { success: true };
         },
     });
@@ -1110,7 +1087,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, workflowId } = input;
-            await gh(ctx, "PUT", `/repos/${owner}/${repo}/actions/workflows/${workflowId}/disable`);
+            await gh(ctx, "PUT", `repos/${pathSegment(owner)}/${pathSegment(repo)}/actions/workflows/${pathSegment(workflowId)}/disable`);
             return { success: true };
         },
     });
@@ -1132,7 +1109,7 @@ export default function github(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, workflowId } = input;
-            return gh(ctx, "GET", `/repos/${owner}/${repo}/actions/workflows/${workflowId}/timing`);
+            return gh(ctx, "GET", `repos/${pathSegment(owner)}/${pathSegment(repo)}/actions/workflows/${pathSegment(workflowId)}/timing`);
         },
     });
 }

package/dist/plugins/gitlab/src/credentials.js

@@ -0,0 +1,24 @@
+import { httpsBase, staticCredential } from "../../_shared/credentials.js";
+/**
+ * A personal access token, sent as the PRIVATE-TOKEN header to the
+ * server's /api/v4/ base: gitlab.com, or the connection's own HTTPS
+ * server. Project, file and tag paths travel as one encoded segment.
+ */
+export const gitlabCredential = staticCredential({
+    id: "gitlab",
+    auth: { kind: "apiKey", header: "PRIVATE-TOKEN" },
+    local: { secret: "token" },
+    targets: (config) => ({
+        api: {
+            baseUrl: httpsBase(config.server ?? "https://gitlab.com", "api/v4/"),
+            methods: ["GET", "POST", "PUT", "DELETE"],
+            encodedSlashes: true,
+        },
+    }),
+    probe: {
+        target: "api",
+        path: "user",
+        method: "GET",
+        acceptedStatuses: [200],
+    },
+});

package/dist/plugins/gitlab/src/index.js

@@ -1,44 +1,25 @@
-async function apiRequest(server, token, method, endpoint, body, qs) {
-    const url = new URL(`${server}/api/v4${endpoint}`);
-    if (qs) {
-        for (const [k, v] of Object.entries(qs)) {
-            if (v !== undefined && v !== null)
-                url.searchParams.set(k, String(v));
-        }
-    }
-    const opts = {
+import { credentialJson, pathSegment, slashEncodedSegment, } from "../../_shared/credentials.js";
+import { gitlabCredential } from "./credentials.js";
+/** A GitLab API call; a DELETE carries a body where GitLab needs one (file deletes). */
+function gl(ctx, method, path, body, query) {
+    return credentialJson(ctx, gitlabCredential, "gitlab", {
+        target: "api",
+        path,
         method,
-        headers: { "PRIVATE-TOKEN": token, "Content-Type": "application/json" },
-    };
-    if (body &&
-        Object.keys(body).length > 0 &&
-        method !== "GET" &&
-        method !== "DELETE") {
-        opts.body = JSON.stringify(body);
-    }
-    const res = await fetch(url.toString(), opts);
-    if (!res.ok)
-        throw new Error(`GitLab API error ${res.status}: ${await res.text()}`);
-    if (res.status === 204)
-        return { success: true };
-    return res.json();
-}
-function getConn(ctx) {
-    return {
-        server: (ctx.connection.config.server ?? "https://gitlab.com").replace(/\/$/, ""),
-        token: ctx.connection.config.token,
-    };
-}
-function gl(ctx, method, endpoint, body, qs) {
-    const { server, token } = getConn(ctx);
-    return apiRequest(server, token, method, endpoint, body, qs);
+        query,
+        ...(body && Object.keys(body).length > 0 && method !== "GET"
+            ? { json: body }
+            : {}),
+    });
 }
+/** A project by its namespace and name, as one encoded segment. */
 function projectPath(owner, repo) {
-    return `/projects/${encodeURIComponent(`${owner}/${repo}`)}`;
+    return `projects/${slashEncodedSegment(`${owner}/${repo}`)}`;
 }
 export default function gitlab(rl) {
     rl.setName("gitlab");
     rl.setVersion("0.1.0");
+    rl.setCredential(gitlabCredential);
     rl.setConnectionSchema({
         server: {
             type: "string",
@@ -111,7 +92,7 @@ export default function gitlab(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, issueIid } = input;
-            return gl(ctx, "GET", `${projectPath(owner, repo)}/issues/${issueIid}`);
+            return gl(ctx, "GET", `${projectPath(owner, repo)}/issues/${pathSegment(issueIid)}`);
         },
     });
     rl.registerAction("issue.update", {
@@ -159,7 +140,7 @@ export default function gitlab(rl) {
                 body.state_event = stateEvent;
             if (dueDate)
                 body.due_date = dueDate;
-            return gl(ctx, "PUT", `${projectPath(owner, repo)}/issues/${issueIid}`, body);
+            return gl(ctx, "PUT", `${projectPath(owner, repo)}/issues/${pathSegment(issueIid)}`, body);
         },
     });
     rl.registerAction("issue.createNote", {
@@ -177,7 +158,7 @@ export default function gitlab(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, issueIid, body: noteBody, } = input;
-            return gl(ctx, "POST", `${projectPath(owner, repo)}/issues/${issueIid}/notes`, { body: noteBody });
+            return gl(ctx, "POST", `${projectPath(owner, repo)}/issues/${pathSegment(issueIid)}/notes`, { body: noteBody });
         },
     });
     rl.registerAction("issue.lock", {
@@ -190,7 +171,7 @@ export default function gitlab(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, issueIid } = input;
-            return gl(ctx, "PUT", `${projectPath(owner, repo)}/issues/${issueIid}`, { discussion_locked: true });
+            return gl(ctx, "PUT", `${projectPath(owner, repo)}/issues/${pathSegment(issueIid)}`, { discussion_locked: true });
         },
     });
     // ── Release ─────────────────────────────────────────
@@ -232,7 +213,7 @@ export default function gitlab(rl) {
                 body.ref = ref;
             if (milestones)
                 body.milestones = milestones;
-            return gl(ctx, "POST", `/projects/${encodeURIComponent(projectId)}/releases`, body);
+            return gl(ctx, "POST", `projects/${slashEncodedSegment(projectId)}/releases`, body);
         },
     });
     rl.registerAction("release.get", {
@@ -248,7 +229,7 @@ export default function gitlab(rl) {
         },
         async execute(input, ctx) {
             const { projectId, tagName } = input;
-            return gl(ctx, "GET", `/projects/${encodeURIComponent(projectId)}/releases/${encodeURIComponent(tagName)}`);
+            return gl(ctx, "GET", `projects/${slashEncodedSegment(projectId)}/releases/${slashEncodedSegment(tagName)}`);
         },
     });
     rl.registerAction("release.list", {
@@ -277,7 +258,7 @@ export default function gitlab(rl) {
                 qs.order_by = orderBy;
             if (sort)
                 qs.sort = sort;
-            return gl(ctx, "GET", `/projects/${encodeURIComponent(projectId)}/releases`, undefined, qs);
+            return gl(ctx, "GET", `projects/${slashEncodedSegment(projectId)}/releases`, undefined, qs);
         },
     });
     rl.registerAction("release.update", {
@@ -311,7 +292,7 @@ export default function gitlab(rl) {
                 body.description = desc;
             if (milestones)
                 body.milestones = milestones;
-            return gl(ctx, "PUT", `/projects/${encodeURIComponent(projectId)}/releases/${encodeURIComponent(tagName)}`, body);
+            return gl(ctx, "PUT", `projects/${slashEncodedSegment(projectId)}/releases/${slashEncodedSegment(tagName)}`, body);
         },
     });
     rl.registerAction("release.delete", {
@@ -327,7 +308,7 @@ export default function gitlab(rl) {
         },
         async execute(input, ctx) {
             const { projectId, tagName } = input;
-            await gl(ctx, "DELETE", `/projects/${encodeURIComponent(projectId)}/releases/${encodeURIComponent(tagName)}`);
+            await gl(ctx, "DELETE", `projects/${slashEncodedSegment(projectId)}/releases/${slashEncodedSegment(tagName)}`);
             return { success: true };
         },
     });
@@ -387,7 +368,7 @@ export default function gitlab(rl) {
             const qs = {};
             if (limit)
                 qs.per_page = limit;
-            return gl(ctx, "GET", `/users/${username}/projects`, undefined, qs);
+            return gl(ctx, "GET", `users/${pathSegment(username)}/projects`, undefined, qs);
         },
     });
     // ── File ────────────────────────────────────────────
@@ -401,12 +382,12 @@ export default function gitlab(rl) {
             ref: {
                 type: "string",
                 required: false,
-                description: "Branch/tag/SHA (default: default branch)",
+                description: "Branch/tag/SHA (default: main)",
             },
         },
         async execute(input, ctx) {
             const { owner, repo, filePath, ref = "main", } = input;
-            return gl(ctx, "GET", `${projectPath(owner, repo)}/repository/files/${encodeURIComponent(filePath)}`, undefined, { ref });
+            return gl(ctx, "GET", `${projectPath(owner, repo)}/repository/files/${slashEncodedSegment(filePath)}`, undefined, { ref });
         },
     });
     rl.registerAction("file.createOrUpdate", {
@@ -465,7 +446,7 @@ export default function gitlab(rl) {
             if (authorEmail)
                 body.author_email = authorEmail;
             const method = isUpdate ? "PUT" : "POST";
-            return gl(ctx, method, `${projectPath(owner, repo)}/repository/files/${encodeURIComponent(filePath)}`, body);
+            return gl(ctx, method, `${projectPath(owner, repo)}/repository/files/${slashEncodedSegment(filePath)}`, body);
         },
     });
     rl.registerAction("file.delete", {
@@ -484,7 +465,7 @@ export default function gitlab(rl) {
         },
         async execute(input, ctx) {
             const { owner, repo, filePath, branch, commitMessage } = input;
-            return gl(ctx, "DELETE", `${projectPath(owner, repo)}/repository/files/${encodeURIComponent(filePath)}`, {
+            return gl(ctx, "DELETE", `${projectPath(owner, repo)}/repository/files/${slashEncodedSegment(filePath)}`, {
                 branch,
                 commit_message: commitMessage,
             });