Function is_valid_bedrock_model_id

crates/openshell-router/src/backend.rs:926–943

Defense-in-depth predicate matching the server-side `validate_aws_bedrock_model_id` contract — see that function for the authoritative reasoning. Returns `true` when `value` is safe to interpolate into a Bedrock URL path segment. The router uses this before constructing an upstream path so a stale or out-of-band route store cannot bypass the resolver's validation.

(value: &str)

/// before constructing an upstream path so a stale or out-of-band route
/// store cannot bypass the resolver's validation.
fn is_valid_bedrock_model_id(value: &str) -> bool {
    if value.is_empty() || value != value.trim() {
        return false;
    }
    if value.contains('/') || value.contains('\\') {
        return false;
    }
    if value.chars().any(|c| matches!(c, '?' | '#' | '%')) {
        return false;
    }
    if value.contains("..") {
        return false;
    }
    if value.chars().any(|c| c.is_control() || c.is_whitespace()) {
        return false;
    }
    true
}

/// Check whether a route targets a Vertex AI Anthropic rawPredict endpoint.
///