Struct SqlQueryGuard 

pub struct SqlQueryGuard { /* private fields */ }

Built-in SQL query guard (roadmap phase 7.1).

Implementations

impl SqlQueryGuard

pub fn new(config: SqlGuardConfig) -> Self

Construct a new guard with the given configuration.

Invalid or over-broad denylisted_predicates produce a guard that denies every SQL query. Use Self::try_new when policy loading should reject invalid configurations directly.

pub fn try_new(config: SqlGuardConfig) -> Result<Self, String>

Construct a new guard or reject invalid user-supplied regex patterns.

pub fn config(&self) -> &SqlGuardConfig

Read-only access to the configuration (useful for tests and observability).

pub fn analyze(&self, query: &str) -> Result<SqlAnalysis, SqlGuardDenyReason>

Evaluate a raw SQL query string against the configured policy.

Returns Ok(()) to allow, Err(SqlGuardDenyReason) to deny. This is the primary testing and integration entry point; the chio_kernel::Guard impl is a thin wrapper that maps this result to Verdict.

Trait Implementations

impl Guard for SqlQueryGuard

fn name(&self) -> &str

Human-readable guard name (e.g., “forbidden-path”).

fn evaluate(&self, ctx: &GuardContext<'_>) -> Result<Verdict, KernelError>

Evaluate the guard against a tool call request.