fix: use RFC 3986 percent-encoding to avoid invalidating signed URLs

urlencode defaults to quote_plus which encodes spaces as `+` instead
of `%20`. This can break signed URL signatures when the server
validates against the original encoding.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: kraenhansen

src/elevenlabs/conversational_ai/conversation.py

@@ -442,7 +442,7 @@ def _get_signed_url(self):
         parsed = urllib.parse.urlparse(signed_url)
         existing_params = urllib.parse.parse_qsl(parsed.query, keep_blank_values=True)
         existing_params.extend([("source", "python_sdk"), ("version", __version__)])
-        return urllib.parse.urlunparse(parsed._replace(query=urllib.parse.urlencode(existing_params)))
+        return urllib.parse.urlunparse(parsed._replace(query=urllib.parse.urlencode(existing_params, quote_via=urllib.parse.quote)))
 
     def _create_on_prem_initiation_message(self):
         return json.dumps(

src/elevenlabs/url_utils.py

@@ -23,6 +23,6 @@ def build_ws_url(
         parsed.netloc,
         parsed.path.rstrip("/") + "/" + path,
         "",
-        urllib.parse.urlencode(params),
+        urllib.parse.urlencode(params, quote_via=urllib.parse.quote),
         "",
     ))

tests/test_url_utils.py

@@ -62,7 +62,7 @@ def test_tuple_params(self):
 
     def test_params_percent_encoded(self):
         url = build_ws_url("wss://api.example.com", ["v1"], {"term": "hello world"})
-        assert "term=hello+world" in url
+        assert "term=hello%20world" in url
 
     def test_repeated_keys(self):
         url = build_ws_url("wss://api.example.com", ["v1"], [("k", "a"), ("k", "b")])