Struct VectorGuardConfig 

pub struct VectorGuardConfig {
    pub vendor_markers: Vec<String>,
    pub collection_allowlist: Vec<String>,
    pub namespace_allowlist: Option<Vec<String>>,
    pub denied_operations: Vec<String>,
    pub mutating_operations: Vec<String>,
    pub field_paths: VectorFieldPaths,
    pub allow_all: bool,
}

Configuration for VectorDbGuard.

The guard is fail-closed by default: an empty collection_allowlist denies every call unless allow_all is set.

Fields

vendor_markers: Vec<String>

Substrings that mark a database identifier (or tool name) as vector-flavored. Defaults to the four vendors called out in the roadmap plus the generic "vector" sentinel.

collection_allowlist: Vec<String>

Collections the grant may touch. Case-insensitive.

namespace_allowlist: Option<Vec<String>>

Optional namespace allowlist. None disables namespace enforcement; Some(empty) denies every namespaced request.

denied_operations: Vec<String>

Operation verbs that are always denied regardless of the active operation class (for example: "drop_index"). Case-insensitive.

mutating_operations: Vec<String>

Operation verbs considered “mutating” for the purposes of SqlOperationClass::ReadOnly enforcement. Case-insensitive.

field_paths: VectorFieldPaths

JSON field path overrides.

allow_all: bool

Allow every request that passes field-path parsing, ignoring the allowlists. Parse errors still deny.

Implementations

impl VectorGuardConfig

pub fn is_empty(&self) -> bool

Returns true when the operator has not configured any allowlist.

pub fn collection_allowed(&self, name: &str) -> bool

Case-insensitive collection match.

pub fn namespace_allowed(&self, name: &str) -> bool

Case-insensitive namespace match. Returns true when namespace enforcement is disabled.

pub fn looks_like_vector(&self, database: &str, tool: &str) -> bool

Returns true when the tool name or database identifier matches any configured vendor substring (case-insensitive).

Trait Implementations

impl Clone for VectorGuardConfig

fn clone(&self) -> VectorGuardConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VectorGuardConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VectorGuardConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for VectorGuardConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for VectorGuardConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.