Function validate_aws_bedrock_model_id

crates/openshell-server/src/inference.rs:386–417

Reject Bedrock model ids that would produce ambiguous or malformed upstream URL paths. AWS Bedrock encodes the model in `/model/ /invoke`, so the value is interpolated directly into a URL path segment. Without validation, a value containing `/`, `\`, percent escapes, query or fragment delimiters, traversal segments, whitespace, or control characters could break out of the path segment, smuggle

(value: &str)

/// for the same reason, and the contract is enforced again at the
/// router layer (`is_valid_bedrock_model_id`) as defense-in-depth.
fn validate_aws_bedrock_model_id(value: &str) -> Result<(), Status> {
    let trimmed = value.trim();
    if trimmed.is_empty() {
        return Err(Status::invalid_argument("model_id is required"));
    }
    if value != trimmed {
        return Err(Status::invalid_argument(format!(
            "AWS Bedrock model_id must not include leading or trailing whitespace: {value:?}"
        )));
    }
    if value.contains('/') || value.contains('\\') {
        return Err(Status::invalid_argument(format!(
            "AWS Bedrock model_id must not contain path separators: {value:?}"
        )));
    }
    if value.chars().any(|c| matches!(c, '?' | '#' | '%')) {
        return Err(Status::invalid_argument(format!(
            "AWS Bedrock model_id must not contain URL delimiters or percent escapes: {value:?}"
        )));
    }
    if value.contains("..") {
        return Err(Status::invalid_argument(format!(
            "AWS Bedrock model_id must not contain traversal segments: {value:?}"
        )));
    }
    if value.chars().any(|c| c.is_control() || c.is_whitespace()) {
        return Err(Status::invalid_argument(format!(
            "AWS Bedrock model_id must not contain whitespace or control characters: {value:?}"
        )));
    }
    Ok(())
}

fn validate_vertex_model_id(value: &str) -> Result<(), Status> {
    let trimmed = value.trim();