sql-chatbot-agent 1.0.0 → 1.1.0

package/README.md

@@ -0,0 +1,368 @@
+# sql-chatbot-agent
+
+AI-powered database chatbot that runs as a **standalone CLI** or **Express middleware**. Point it at any PostgreSQL database and get an AI assistant that can query your data, explain your code, and help users navigate your app.
+
+**Zero configuration required** -- it auto-discovers your database schema, indexes your codebase, and serves a chat widget.
+
+## Quick Start (CLI)
+
+The fastest way to get started is the standalone CLI. No existing Express app needed.
+
+### Install globally
+
+```bash
+npm install -g sql-chatbot-agent
+```
+
+### Initialize a config file
+
+```bash
+sql-chatbot-agent init
+```
+
+This creates a `chatbot.config.json` in the current directory and adds it to `.gitignore`.
+
+Edit the file with your database URL, then start the chatbot:
+
+```bash
+sql-chatbot-agent
+```
+
+The chatbot will be running at `http://localhost:3456` with a chat widget ready to use.
+
+By default, it uses **OpenRouter** (free models, requires a free API key from [openrouter.ai/keys](https://openrouter.ai/keys)). See [Providers](#providers) for other options.
+
+### One-liner with npx
+
+```bash
+# OpenRouter (free models -- get key at https://openrouter.ai/keys)
+npx sql-chatbot-agent --db postgresql://localhost/mydb --key sk-or-v1-xxx --code ./app
+
+# With Groq (cloud, faster)
+npx sql-chatbot-agent --db postgresql://localhost/mydb --provider groq --key gsk_xxx --code ./app
+
+# Or use environment variables
+export OPENROUTER_API_KEY=sk-or-v1-xxx
+npx sql-chatbot-agent --db postgresql://localhost/mydb --code ./app
+```
+
+## Configuration
+
+### chatbot.config.json
+
+Created by `sql-chatbot-agent init`:
+
+```json
+{
+  "databaseUrl": "postgresql://user:password@localhost:5432/your_database",
+  "provider": "openrouter",
+  "llmApiKey": "",
+  "codePaths": ["./src"],
+  "port": 3456,
+  "secret": ""
+}
+```
+
+| Field | Type | Description |
+|-------|------|-------------|
+| `databaseUrl` | string | PostgreSQL connection URL (required) |
+| `provider` | string | LLM provider: `openrouter`, `groq`, `ollama`, or `openai` (default: auto-detect) |
+| `llmApiKey` | string | API key for the LLM provider (not needed for OpenRouter or Ollama) |
+| `llmModel` | string | Model name override (default: provider-specific) |
+| `llmBaseUrl` | string | API base URL override (default: provider-specific) |
+| `codePaths` | string[] | Directories to index for code questions (default: `["./src"]`) |
+| `port` | number | Port for the standalone server (default: `3456`) |
+| `secret` | string | Secret token for authentication (optional, recommended for production) |
+
+> **Backward compat:** `groqApiKey` is still accepted and mapped to `llmApiKey` automatically.
+
+### CLI Flags
+
+| Flag | Short | Description |
+|------|-------|-------------|
+| `--db` | | PostgreSQL connection URL |
+| `--provider` | | LLM provider: `ollama`, `groq`, or `openai` |
+| `--key` | | API key for the LLM provider |
+| `--model` | | Model name override |
+| `--base-url` | | API base URL override |
+| `--code` | | Directory to index (single path) |
+| `--port` | `-p` | Port for the standalone server |
+| `--secret` | | Secret token for authentication |
+
+### Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `DATABASE_URL` | PostgreSQL connection URL |
+| `LLM_PROVIDER` | LLM provider: `ollama`, `groq`, or `openai` |
+| `LLM_API_KEY` | API key for the LLM provider |
+| `OPENROUTER_API_KEY` | OpenRouter API key (auto-detects provider) |
+| `LLM_MODEL` | Model name override |
+| `LLM_BASE_URL` | API base URL override |
+| `GROQ_API_KEY` | Groq API key (backward compat, same as `LLM_API_KEY`) |
+| `CHATBOT_SECRET` | Secret token for authentication |
+| `PORT` | Port for the standalone server |
+
+### Priority Order
+
+Configuration is resolved in this order (highest priority first):
+
+1. **CLI flags** (`--db`, `--key`, etc.)
+2. **Environment variables** (`DATABASE_URL`, `GROQ_API_KEY`, etc.)
+3. **Config file** (`chatbot.config.json`)
+
+## Providers
+
+sql-chatbot-agent works with any OpenAI-compatible LLM API. Four providers are preconfigured:
+
+| Provider | Type | API Key | Default Model | Rate Limits |
+|----------|------|---------|---------------|-------------|
+| **OpenRouter** | Cloud | Required ([openrouter.ai/keys](https://openrouter.ai/keys)) | `openrouter/free` | 50 req/day free, 1000/day with $10 credit |
+| **Groq** | Cloud | Required ([console.groq.com](https://console.groq.com)) | `llama-3.3-70b-versatile` | Free tier: 100K tokens/day |
+| **Ollama** | Local | Not needed | `llama3.1:8b` | None (runs on your machine) |
+| **OpenAI** | Cloud | Required ([platform.openai.com](https://platform.openai.com)) | `gpt-4o-mini` | Pay-per-use |
+
+### Auto-detection
+
+If you don't specify `--provider`, the chatbot auto-detects:
+- **`OPENROUTER_API_KEY` set** → uses `openrouter`
+- **Other API key provided** → uses `groq`
+
+### OpenRouter (Default)
+
+OpenRouter provides free access to 29+ models. Get a free API key at [openrouter.ai/keys](https://openrouter.ai/keys).
+
+```bash
+# Set your key via env var or --key flag
+export OPENROUTER_API_KEY=sk-or-v1-xxx
+npx sql-chatbot-agent --db postgresql://localhost/mydb --code ./src
+```
+
+**Rate limits:** 50 free model requests/day without credits. Add $10 credit (not consumed by free models) to unlock 1000/day. Resets daily at midnight UTC.
+
+To use a specific free model from [OpenRouter's free collection](https://openrouter.ai/collections/free-models):
+
+```bash
+npx sql-chatbot-agent --db postgresql://localhost/mydb --key sk-or-v1-xxx --model google/gemma-3-1b-it:free
+```
+
+### Groq (Cloud, Free Tier)
+
+Faster than OpenRouter but requires a free API key.
+
+```bash
+npx sql-chatbot-agent --db postgresql://localhost/mydb --provider groq --key gsk_xxx
+```
+
+### Ollama (Local, Offline)
+
+For fully offline use. Requires [installing Ollama](https://ollama.com) and pulling a model.
+
+```bash
+ollama pull llama3.1:8b && ollama serve
+npx sql-chatbot-agent --db postgresql://localhost/mydb --provider ollama
+```
+
+### OpenAI
+
+```bash
+npx sql-chatbot-agent --db postgresql://localhost/mydb --provider openai --key sk-xxx
+```
+
+### Any OpenAI-Compatible API
+
+Use `--base-url` and `--model` to connect to any OpenAI-compatible API:
+
+```bash
+npx sql-chatbot-agent --db postgresql://localhost/mydb \
+  --base-url http://my-llm-server:8080/v1 \
+  --key my-api-key \
+  --model my-model-name
+```
+
+## Authentication
+
+For production use, set a secret token to protect the chatbot API.
+
+### Setup
+
+Provide a secret via any configuration method:
+
+```bash
+# CLI flag
+sql-chatbot-agent --secret my-secret-token
+
+# Environment variable
+CHATBOT_SECRET=my-secret-token sql-chatbot-agent
+
+# Or in chatbot.config.json
+# { "secret": "my-secret-token" }
+```
+
+### How It Works
+
+When a secret is configured:
+
+1. **Widget script** (`/chatbot/widget.js`) -- sets a `chatbot_token` cookie on load
+2. **API endpoints** (`/chatbot/api/ask`, `/chatbot/api/refresh`) -- validate the cookie or a `Bearer` token in the `Authorization` header
+3. **Health endpoint** (`/chatbot/api/health`) -- remains open (no sensitive data)
+
+Requests without a valid token receive a `401 Unauthorized` response.
+
+### Without a Secret
+
+If no secret is configured, the chatbot API is open to anyone. The CLI prints a warning on startup:
+
+```
+Warning: No secret configured. The chatbot API is open to anyone.
+```
+
+This is fine for local development but should not be used in production.
+
+### .gitignore
+
+Add `chatbot.config.json` to your `.gitignore` to avoid committing secrets. The `init` command does this automatically.
+
+## Express Middleware (Advanced)
+
+If you already have an Express app and want to embed the chatbot into it, use the middleware directly:
+
+### 1. Install
+
+```bash
+npm install sql-chatbot-agent
+```
+
+### 2. Add to your Express app
+
+```js
+const express = require('express');
+const { sqlChatbot } = require('sql-chatbot-agent');
+
+const app = express();
+
+app.use('/chatbot', sqlChatbot({
+  databaseUrl: process.env.DATABASE_URL,
+  provider: 'openrouter',        // or 'groq', 'ollama', 'openai'
+  llmApiKey: process.env.LLM_API_KEY,  // not needed for openrouter/ollama
+  codePaths: ['./src'],
+  secret: process.env.CHATBOT_SECRET,
+}));
+
+app.listen(3000);
+```
+
+### 3. Add the widget to your HTML
+
+```html
+<script src="/chatbot/widget.js"></script>
+```
+
+A chat bubble appears in the bottom-right corner of your page.
+
+## How It Works
+
+When a user asks a question, the chatbot:
+
+1. **Classifies** the question (data query, code question, navigation, etc.)
+2. **Routes** to the right handler:
+   - **Data questions** -- generates SQL, executes it read-only, explains the results
+   - **Code questions** -- searches your indexed codebase, explains the relevant code
+   - **Navigation** -- uses detected routes and page context to guide the user
+3. **Streams** the answer back via Server-Sent Events (SSE)
+
+```
+User: "How many active users signed up this month?"
+  -> Classifies as "data" question
+  -> Generates: SELECT COUNT(*) FROM users WHERE active = true AND created_at >= '2026-02-01'
+  -> Executes read-only
+  -> Streams: "There are 142 active users who signed up this month."
+```
+
+## API Endpoints
+
+When mounted at `/chatbot` (or running standalone), the following endpoints are available:
+
+| Endpoint | Method | Description |
+|----------|--------|-------------|
+| `/chatbot/widget.js` | GET | Serves the chat widget bundle |
+| `/chatbot/api/ask` | POST | Main chat endpoint (SSE streaming) |
+| `/chatbot/api/health` | GET | Health check with table/file counts |
+| `/chatbot/api/refresh` | POST | Re-discover schema and re-index code |
+
+### POST /api/ask
+
+Request body:
+```json
+{
+  "question": "How many users are there?",
+  "pageContext": "{\"url\": \"...\", \"title\": \"...\"}",
+  "history": [
+    { "role": "user", "content": "previous question" },
+    { "role": "assistant", "content": "previous answer" }
+  ]
+}
+```
+
+Response: SSE stream with events:
+```
+data: {"type":"classifying"}
+data: {"type":"classified","questionType":"data","confidence":0.9}
+data: {"type":"sql","sql":"SELECT COUNT(*) FROM users"}
+data: {"type":"executing"}
+data: {"type":"token","content":"There"}
+data: {"type":"token","content":" are"}
+data: {"type":"token","content":" 1,234"}
+data: {"type":"token","content":" users."}
+data: {"type":"done"}
+```
+
+### GET /api/health
+
+```json
+{
+  "status": "ok",
+  "tables": 25,
+  "codeFiles": 150
+}
+```
+
+## Features
+
+- **CLI standalone mode** -- run as a standalone server with zero boilerplate
+- **Built-in authentication** -- secret token authentication with cookie and Bearer token support
+- **Auto-discovers your database schema** -- tables, columns, types, foreign keys, indexes
+- **Indexes your codebase** -- scans JS/TS/Ruby/Python files, detects Express/React/Next.js/Rails routes
+- **SQL safety** -- validates queries against blocklists, executes in READ ONLY transactions, blocks destructive operations
+- **Sensitive data filtering** -- automatically hides columns matching patterns like `password`, `secret`, `api_key`, `ssn`
+- **Chat widget with Shadow DOM** -- no CSS conflicts with your app
+- **Conversation history** -- the widget sends message history for contextual follow-ups
+- **Multi-provider** -- Ollama (local, free), Groq (cloud, free tier), OpenAI, or any OpenAI-compatible API
+- **Lazy initialization** -- schema discovery and code indexing happen on first request, not at startup
+
+## Supported Frameworks
+
+The code indexer detects routes from:
+- Express.js (`app.get`, `router.post`, etc.)
+- React Router (`<Route path="...">`)
+- Next.js (pages/ and app/ directory conventions)
+- Rails (`resources`, `get`, `post` in routes.rb)
+
+## Security
+
+- All SQL queries run inside `SET TRANSACTION READ ONLY` -- no writes possible
+- Dangerous SQL keywords (`DROP`, `DELETE`, `TRUNCATE`, `ALTER`, etc.) are blocked before execution
+- System catalogs (`pg_catalog`, `information_schema`) are blocked from queries
+- Sensitive columns are automatically filtered from the schema summary sent to the LLM
+- Built-in secret token authentication for production deployments
+- `chatbot.config.json` is automatically added to `.gitignore` by the `init` command
+
+## Requirements
+
+- Node.js >= 18
+- PostgreSQL database
+- An LLM provider: [OpenRouter](https://openrouter.ai/keys) (free key), [Groq](https://console.groq.com) (cloud, free tier), [Ollama](https://ollama.com) (local, free), [OpenAI](https://platform.openai.com), or any OpenAI-compatible API
+
+## License
+
+MIT

package/dist/cli.d.ts

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+import type { LLMProvider } from './config.js';
+export interface CliFlags {
+    db?: string;
+    key?: string;
+    code?: string;
+    port?: string;
+    secret?: string;
+    provider?: string;
+    model?: string;
+    'base-url'?: string;
+    subcommand?: string;
+}
+export interface FileConfig {
+    databaseUrl?: string;
+    groqApiKey?: string;
+    llmApiKey?: string;
+    provider?: LLMProvider;
+    llmModel?: string;
+    llmBaseUrl?: string;
+    codePaths?: string[];
+    port?: number;
+    secret?: string;
+}
+export interface MergedConfig {
+    databaseUrl?: string;
+    llmApiKey?: string;
+    provider?: LLMProvider;
+    llmModel?: string;
+    llmBaseUrl?: string;
+    codePaths: string[];
+    port: number;
+    secret?: string;
+}
+export declare function parseCliArgs(argv: string[]): CliFlags;
+export declare function loadConfigFile(dir: string): FileConfig;
+export declare function mergeConfig(file: FileConfig, env: Record<string, string | undefined>, flags: CliFlags): MergedConfig;
+export declare function runInit(dir: string): void;
+export declare function checkOllamaConnection(baseUrl: string): Promise<boolean>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C,MAAM,WAAW,QAAQ;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAqBrD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAKtD;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,KAAK,EAAE,QAAQ,GACd,YAAY,CAiBd;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CA+BzC;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO7E"}

package/dist/cli.js

@@ -0,0 +1,184 @@
+#!/usr/bin/env node
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseCliArgs = parseCliArgs;
+exports.loadConfigFile = loadConfigFile;
+exports.mergeConfig = mergeConfig;
+exports.runInit = runInit;
+exports.checkOllamaConnection = checkOllamaConnection;
+const node_util_1 = require("node:util");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const config_js_1 = require("./config.js");
+function parseCliArgs(argv) {
+    if (argv[0] && !argv[0].startsWith('-')) {
+        return { subcommand: argv[0] };
+    }
+    const { values } = (0, node_util_1.parseArgs)({
+        args: argv,
+        options: {
+            db: { type: 'string' },
+            key: { type: 'string' },
+            code: { type: 'string' },
+            port: { type: 'string', short: 'p' },
+            secret: { type: 'string' },
+            provider: { type: 'string' },
+            model: { type: 'string' },
+            'base-url': { type: 'string' },
+        },
+        strict: false,
+    });
+    return values;
+}
+function loadConfigFile(dir) {
+    const configPath = node_path_1.default.join(dir, 'chatbot.config.json');
+    if (!node_fs_1.default.existsSync(configPath))
+        return {};
+    const raw = node_fs_1.default.readFileSync(configPath, 'utf-8');
+    return JSON.parse(raw);
+}
+function mergeConfig(file, env, flags) {
+    // Resolve API key: flags --key > env > file (llmApiKey or groqApiKey for backward compat)
+    const llmApiKey = flags.key || env.LLM_API_KEY || env.GROQ_API_KEY || env.OPENROUTER_API_KEY || file.llmApiKey || file.groqApiKey;
+    // Resolve provider: flags > env > file > auto-detect (has key → groq, no key → ollama)
+    const provider = (flags.provider || env.LLM_PROVIDER || file.provider || undefined);
+    return {
+        databaseUrl: flags.db || env.DATABASE_URL || file.databaseUrl,
+        llmApiKey,
+        provider,
+        llmModel: flags.model || env.LLM_MODEL || file.llmModel,
+        llmBaseUrl: flags['base-url'] || env.LLM_BASE_URL || file.llmBaseUrl,
+        codePaths: flags.code ? [flags.code] : file.codePaths || ['./src'],
+        port: flags.port ? parseInt(flags.port, 10) : env.PORT ? parseInt(env.PORT, 10) : file.port || 3456,
+        secret: flags.secret || env.CHATBOT_SECRET || file.secret,
+    };
+}
+function runInit(dir) {
+    const configPath = node_path_1.default.join(dir, 'chatbot.config.json');
+    if (node_fs_1.default.existsSync(configPath)) {
+        console.log('chatbot.config.json already exists, skipping.');
+    }
+    else {
+        const template = {
+            databaseUrl: 'postgresql://user:password@localhost:5432/your_database',
+            provider: 'openrouter',
+            llmApiKey: '',
+            codePaths: ['./src'],
+            port: 3456,
+            secret: '',
+        };
+        node_fs_1.default.writeFileSync(configPath, JSON.stringify(template, null, 2) + '\n');
+        console.log('Created chatbot.config.json');
+    }
+    const gitignorePath = node_path_1.default.join(dir, '.gitignore');
+    const entry = 'chatbot.config.json';
+    if (node_fs_1.default.existsSync(gitignorePath)) {
+        const content = node_fs_1.default.readFileSync(gitignorePath, 'utf-8');
+        if (!content.includes(entry)) {
+            node_fs_1.default.appendFileSync(gitignorePath, '\n' + entry + '\n');
+            console.log('Added chatbot.config.json to .gitignore');
+        }
+        else {
+            console.log('chatbot.config.json already in .gitignore');
+        }
+    }
+    else {
+        node_fs_1.default.writeFileSync(gitignorePath, entry + '\n');
+        console.log('Created .gitignore with chatbot.config.json');
+    }
+}
+async function checkOllamaConnection(baseUrl) {
+    try {
+        const response = await fetch(baseUrl.replace(/\/v1$/, '/api/tags'), { signal: AbortSignal.timeout(3000) });
+        return response.ok;
+    }
+    catch {
+        return false;
+    }
+}
+function main() {
+    // Dynamic imports to avoid loading express/cors at test time
+    const flags = parseCliArgs(process.argv.slice(2));
+    if (flags.subcommand === 'init') {
+        runInit(process.cwd());
+        return;
+    }
+    const fileConfig = loadConfigFile(process.cwd());
+    const config = mergeConfig(fileConfig, process.env, flags);
+    if (!config.databaseUrl) {
+        console.error('Error: Database URL is required.');
+        console.error('Provide --db flag, set DATABASE_URL env var, or add databaseUrl to chatbot.config.json');
+        process.exit(1);
+    }
+    // API key is required for all providers except ollama
+    if (!config.llmApiKey && config.provider !== 'ollama') {
+        console.error('Error: API key is required.');
+        console.error('Provide --key flag, set LLM_API_KEY or OPENROUTER_API_KEY env var.');
+        console.error('Get a free OpenRouter key at: https://openrouter.ai/keys');
+        process.exit(1);
+    }
+    if (!config.secret) {
+        console.warn('Warning: No secret configured. The chatbot API is open to anyone.');
+        console.warn('Set --secret flag, CHATBOT_SECRET env var, or add secret to chatbot.config.json');
+    }
+    // Detect effective provider for connectivity check
+    const effectiveProvider = config.provider || (config.llmApiKey ? 'groq' : 'openrouter');
+    const ollamaBaseUrl = config.llmBaseUrl || config_js_1.PROVIDER_PRESETS.ollama.baseUrl;
+    // Import express and cors dynamically to keep test imports clean
+    (async () => {
+        // Check Ollama connectivity before starting server
+        if (effectiveProvider === 'ollama') {
+            const ok = await checkOllamaConnection(ollamaBaseUrl);
+            if (!ok) {
+                console.error('\nError: Ollama is not running at ' + ollamaBaseUrl);
+                console.error('Start it with: ollama serve');
+                console.error('Then pull a model: ollama pull llama3.1:8b\n');
+                process.exit(1);
+            }
+        }
+        const expressModule = await import('express');
+        const express = expressModule.default;
+        const corsModule = await import('cors');
+        const cors = corsModule.default;
+        const { sqlChatbot } = await import('./middleware.js');
+        const app = express();
+        app.use(cors());
+        app.use('/chatbot', sqlChatbot({
+            databaseUrl: config.databaseUrl,
+            llmApiKey: config.llmApiKey,
+            llmBaseUrl: config.llmBaseUrl,
+            llmModel: config.llmModel,
+            provider: config.provider,
+            codePaths: config.codePaths,
+            secret: config.secret,
+        }));
+        app.get('/', (_req, res) => {
+            res.send(`<!DOCTYPE html>
+<html>
+<head><title>SQL Chatbot</title></head>
+<body>
+  <h1>SQL Chatbot</h1>
+  <p>The chat widget should appear in the bottom-right corner.</p>
+  <script src="/chatbot/widget.js"></script>
+</body>
+</html>`);
+        });
+        const providerLabel = config.provider || (config.llmApiKey ? 'groq' : 'openrouter');
+        app.listen(config.port, () => {
+            console.log(`\nSQL Chatbot Agent running at http://localhost:${config.port}`);
+            console.log(`  Provider:     ${providerLabel}`);
+            console.log(`  Chat widget:  http://localhost:${config.port}`);
+            console.log(`  Health check: http://localhost:${config.port}/chatbot/api/health`);
+            console.log(`  Auth: ${config.secret ? 'enabled' : 'DISABLED (no secret)'}\n`);
+        });
+    })();
+}
+// Only run main when executed directly (not when imported for testing)
+const isDirectRun = process.argv[1]?.endsWith('cli.js') || process.argv[1]?.endsWith('cli.ts');
+if (isDirectRun) {
+    main();
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;;;;;AA2CA,oCAqBC;AAED,wCAKC;AAED,kCAqBC;AAED,0BA+BC;AAED,sDAOC;AAtID,yCAAsC;AACtC,sDAAyB;AACzB,0DAA6B;AAE7B,2CAA+C;AAqC/C,SAAgB,YAAY,CAAC,IAAc;IACzC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,qBAAS,EAAC;QAC3B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACtB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YACpC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC/B;QACD,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,OAAO,MAAkB,CAAC;AAC5B,CAAC;AAED,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACzD,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,iBAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;AACvC,CAAC;AAED,SAAgB,WAAW,CACzB,IAAgB,EAChB,GAAuC,EACvC,KAAe;IAEf,0FAA0F;IAC1F,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC;IAElI,uFAAuF;IACvF,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,IAAI,SAAS,CAA4B,CAAC;IAE/G,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,WAAW;QAC7D,SAAS;QACT,QAAQ;QACR,QAAQ,EAAE,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ;QACvD,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,UAAU;QACpE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC;QAClE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;QACnG,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM;KAC1D,CAAC;AACJ,CAAC;AAED,SAAgB,OAAO,CAAC,GAAW;IACjC,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACzD,IAAI,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG;YACf,WAAW,EAAE,yDAAyD;YACtE,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,OAAO,CAAC;YACpB,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,EAAE;SACX,CAAC;QACF,iBAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,aAAa,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,qBAAqB,CAAC;IACpC,IAAI,iBAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,iBAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,iBAAE,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iBAAE,CAAC,aAAa,CAAC,aAAa,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,qBAAqB,CAAC,OAAe;IACzD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3G,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,IAAI;IACX,6DAA6D;IAC7D,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAElD,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACvB,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAE3D,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClD,OAAO,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;QACxG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACpF,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAClG,CAAC;IAED,mDAAmD;IACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACxF,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,IAAI,4BAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;IAE3E,iEAAiE;IACjE,CAAC,KAAK,IAAI,EAAE;QACV,mDAAmD;QACnD,IAAI,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,aAAa,CAAC,CAAC;YACtD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,CAAC,KAAK,CAAC,oCAAoC,GAAG,aAAa,CAAC,CAAC;gBACpE,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC7C,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;QAChC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAEhB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAY;YAChC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC,CAAC;QAEJ,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC;;;;;;;;QAQP,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACpF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YAC3B,OAAO,CAAC,GAAG,CAAC,mDAAmD,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,IAAI,qBAAqB,CAAC,CAAC;YAClF,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,IAAI,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,uEAAuE;AACvE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/F,IAAI,WAAW,EAAE,CAAC;IAChB,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/config.d.ts

@@ -1,9 +1,16 @@
+export type LLMProvider = 'groq' | 'ollama' | 'openai' | 'openrouter';
+export declare const PROVIDER_PRESETS: Record<LLMProvider, {
+    baseUrl: string;
+    model: string;
+}>;
 export interface AgentConfig {
     databaseUrl: string;
     codePaths: string[];
     llmBaseUrl: string;
     llmApiKey: string;
     llmModel: string;
+    provider?: LLMProvider;
+    secret?: string;
 }
 export declare function resolveConfig(userConfig: Partial<AgentConfig> & {
     databaseUrl: string;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,aAAa,CAC3B,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9E,WAAW,CAwBb"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;AAEtE,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAKpF,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,aAAa,CAC3B,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9E,WAAW,CAwCb"}