Function assertValidWorkflowRunId

src/node/services/workflows/WorkflowRunStore.ts:1074–1079

(runId: string)

// API callers provide run IDs when reading/resuming; validate before path joins so a malformed
// ID cannot escape the workspace-scoped workflows directory.
function assertValidWorkflowRunId(runId: string): void {
  assert(
    WorkflowRunIdSchema.safeParse(runId).success,
    "WorkflowRunStore: runId must match wfr_[A-Za-z0-9_-]+"
  );
}

function assertSameWorkflowRunIdentity(
  run: WorkflowRunRecord,