Add NL-query backend (W2): local translator + safe named-query runner

Read-only "ask the database in plain English" backend. Translation runs on
the local Qwen via Spark Control (question -> {intent, slots}); nothing leaves
the box, no Claude and no redaction boundary (the simplification chosen after
pressure-testing). The safe surface is a curated catalog of ~12 hand-written
parameterized queries; a slot validator is the trust boundary (no generic SQL,
no dynamic identifiers). POST /api/query/nl + GET /api/query/catalog, gated
require_bot_or_admin, read-only, audited. Soft-delete-correct per table.
Local Qwen translated 12/12 real example questions correctly against the live
Spark. Web "Ask" box and Matrix bot still to come (steps 4-5).

This commit is contained in:

Keysat

2026-06-18 18:35:41 -05:00

parent a166b49397

commit 6c29c22601

13 changed files with 1348 additions and 13 deletions

.claude/rules/nl-query.md

Symlink

View File

				`@@ -0,0 +1 @@`
				`../../docs/guides/nl-query.md`