Method _validate_run_id

src/specify_cli/workflows/engine.py:381–395

Raise ``ValueError`` if ``run_id`` is not a safe path component. This is the single source of truth for what counts as a valid ``run_id``. ``__init__`` calls it to reject malformed IDs at construction time; ``load`` calls it *before* interpolating the ID into a path

(cls, run_id: str)

    @classmethod
    def _validate_run_id(cls, run_id: str) -> None:
        """Raise ``ValueError`` if ``run_id`` is not a safe path component.

        This is the single source of truth for what counts as a valid
        ``run_id``. ``__init__`` calls it to reject malformed IDs at
        construction time; ``load`` calls it *before* interpolating the
        ID into a path so a malicious value cannot probe or read files
        outside ``.specify/workflows/runs/<run_id>/``.
        """
        if not isinstance(run_id, str) or not cls._RUN_ID_PATTERN.match(run_id):
            raise ValueError(
                f"Invalid run_id {run_id!r}: must be alphanumeric with "
                "hyphens/underscores only (and must start with an "
                "alphanumeric character)."
            )

    def __init__(
        self,