Expand description
Local DB explorer family: read-only, bounded queries over data files the workspace already contains (CSV, Parquet, JSON, DuckDB).
db_query runs SELECT-only SQL against a fresh in-memory DuckDB
connection in which the target file is pre-registered as the view
data. The SQL text passes a statement-class allowlist (a single
SELECT/WITH statement) and a blocklist of filesystem- and
environment-reaching functions, so a query can never reach beyond the
validated workspace file. Results carry row and byte caps. The session
store is never a valid target, so DuckDB’s one-live-handle constraint
does not bite.