fix(script): preserve unreserved script ID characters

[ZIFeIYUuuuuuu]

Fix Apps Script run URLs by preserving unreserved script ID characters

Problem and reproduction

gws script scripts run builds a path containing {scriptId}. The generic path encoder currently percent-encodes every non-alphanumeric character, including RFC 3986 unreserved characters such as - and _.

With this valid script ID:

1-ukYIb8XjT9KQlsj6_NbryM5UJXBwAMeY5GKtSBA05csXty3iY7DhO-P

the generated URL contains %2D and %5F. Apps Script's :run endpoint rejects that spelling with 404 even though the unencoded ID is valid.

Root cause

render_path_template always called encode_path_segment, whose stricter encoding also escapes unreserved characters. The scriptId path parameter needs RFC 3986 unreserved characters preserved.

Changes

• Add a script ID-specific path encoding helper that retains -, _, ., and ~ while continuing to percent-encode reserved and unsafe characters.
• Use that helper only for scriptId template parameters; all other path parameters retain existing encoding behavior.
• Add a regression test asserting the exact Apps Script v1/scripts/{scriptId}:run URL.
• Add the required patch changeset.

Validation

• cargo test -p google-workspace-cli executor::tests::test_build_url_preserves_unreserved_script_id_characters -- --exact --nocapture: 1 passed.
• cargo test -p google-workspace-cli executor::tests -- --nocapture: 34 passed.
• cargo fmt --all: passed.
• cargo clippy -p google-workspace-cli -- -D warnings -A clippy::collapsible-match: passed; the allow covers an existing unrelated warning in helpers/script.rs.
• git diff --check: passed.

Reserved characters remain escaped and non-scriptId paths are unchanged. Closes #842.

[changeset-bot]

🦋 Changeset detected

Latest commit: f4a5d92

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@googleworkspace/cli	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[googleworkspace-bot]

/gemini review

[github-actions]

This PR has been inactive for 72 hours. Closing to keep the queue clean.

[github-actions]

This PR was closed because it has been stalled for 72 hours. Feel free to magically reopen it if you want to continue working on it!

[ZIFeIYUuuuuuu]

This was auto-closed by the inactivity bot, and the CI runs at that time were all still at action_required rather than having executed. Their job count is 0 and updated_at is just the close timestamp, so the failure conclusions are an artefact of the PR being closed, not real test results.

What actually happened before close:

• cla/google passed ✅
• googleworkspace-bot ran /gemini review on 2026-09-09
• but the PR never got a human look, and CI / Coverage / Release / Policy / Actions Workflow Security Scan never started

The change itself is small (+42/-0, 2 files): preserve RFC 3986 unreserved characters (-, _, ., ~) in Apps Script IDs used in URL paths, since the :run endpoint rejects them percent-encoded. Adds a URL-building test pinning the behaviour.

Happy to keep it current with main while it's open. Could someone approve the workflow runs so CI can actually run?