nexql-policy

Access modes, SQL AST validation, schema filtering, PII column protection, and audit safety for nexql-mcp.

Features

• Access Modes: read (default), write, and admin modes.
• pg_query AST Validator: Full Postgres AST validation enforcing single-statement safety and mode boundaries without fragile string-prefix checks.
• Policy Filters: Schema allow/deny lists, table deny globs, and automatic PII column masking.