Struct QueryGuard 

pub struct QueryGuard { /* private fields */ }

Query execution guard with timeout, memory, and resource limits

MEMORY ENFORCEMENT (per Codex review): Uses a tracked allocation approach where memory usage is estimated based on result sizes and checked at regular intervals.

Example

use sqry_core::query::security::{QuerySecurityConfig, QueryGuard};

let config = QuerySecurityConfig::default();
let guard = QueryGuard::new(config);

// During query execution:
guard.should_continue().expect("should not fail initially");
guard.record_result(128); // Record a result with estimated size

Implementations

impl QueryGuard

pub fn new(config: QuerySecurityConfig) -> Self

Create a new query guard

pub fn with_check_interval(config: QuerySecurityConfig, interval: usize) -> Self

Create a new query guard with custom check interval

The check interval controls how often memory limits are checked. Lower values mean more frequent checks but higher overhead.

pub fn should_continue(&self) -> Result<(), QuerySecurityError>

Check if query should continue

Errors

Returns QuerySecurityError if any limit is exceeded:

• Timeout: Query has run longer than the configured timeout
• ResultCapExceeded: More results collected than the result cap
• MemoryLimitExceeded: Estimated memory usage exceeds limit

NOTE (per Codex iter6): Uses getter methods since fields are private.

pub fn record_result(&self, estimated_size: usize)

Record a result and its estimated memory footprint

This should be called for each result added to the result set. The estimated size should include:

• The Node/TraitImpl struct size
• String allocations for names, paths, etc.
• Any metadata stored with the result

pub fn elapsed(&self) -> Duration

Get elapsed time since query started

pub fn result_count(&self) -> usize

Get current result count

pub fn memory_usage(&self) -> usize

Get current memory usage estimate

pub fn config(&self) -> &QuerySecurityConfig

Get the security configuration