Struct QueryResultGuard 

pub struct QueryResultGuard { /* private fields */ }

Post-invocation guard that enforces row and column constraints on query tool responses.

Implementations

impl QueryResultGuard

pub fn new(config: QueryResultGuardConfig) -> Result<Self, String>

Construct a guard with the given configuration.

Invalid or over-broad PII regex patterns reject guard construction so policy loading fails closed instead of silently widening output.

pub fn config(&self) -> &QueryResultGuardConfig

Read-only access to the configuration.

pub fn redact_result(&self, scope: &ChioScope, value: &mut Value)

Redact the response in place.

This is the primary transform entrypoint: kernel integrations and the PostInvocationHook impl both delegate here.

Behaviour:

• If scope has any Constraint::MaxRowsReturned, the rows array is truncated to the minimum of those limits.
• If scope has any Constraint::ColumnDenylist, matching columns (bare name or table.column) are replaced by the redaction marker inside every row.
• If the config has redact_pii_patterns, every matched substring in every string value is replaced.
• Constrained responses that do not expose rows under a recognised shape are redacted fail-closed instead of passing through unchanged.

pub fn redact_result_for_request( &self, scope: &ChioScope, matched_grant_index: Option<usize>, value: &mut Value, )

Redact the response in place using either the matched grant or the full scope when no grant index is available.

impl QueryResultGuard

Non-mutating convenience that bundles the scope.

pub fn as_hook(&self, scope: ChioScope) -> QueryResultHook<'_>

Build a PostInvocationHook adapter bound to an ChioScope.

Callers that already have a concrete scope can still construct a fresh adapter per request. When the kernel provides a scope via PostInvocationContext, the hook prefers that context over the fallback scope stored here.

pub fn into_owned_hook(self, scope: ChioScope) -> OwnedQueryResultHook

Build an owned PostInvocationHook adapter for runtime pipelines that need a 'static hook object.

Trait Implementations

impl Debug for QueryResultGuard

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Guard for QueryResultGuard

fn name(&self) -> &str

Human-readable guard name (e.g., “forbidden-path”).

fn evaluate(&self, _ctx: &GuardContext<'_>) -> Result<Verdict, KernelError>

Evaluate the guard against a tool call request.