Download the PHP package dbmind/laravel-sql without Composer

Ask your database questions in plain language — it answers with one guarded, read-only SELECT.
The SQL-only edition: no Qdrant, no embeddings, no indexing. The AI writes the query, SqlGuard vets it, and the answer is grounded in your real rows.

Quickstart · How it works · Cloud vs local · Commands · Usage · Security · Architecture

Why the SQL-only edition?

Install the package, paste an API key, and ask your database questions in plain language. For every question an AI model writes a single read-only SELECT (it may JOIN your approved tables), the query is validated by SqlGuard, run on a read-only connection with a statement timeout, and the real result rows are handed back to the model to phrase a grounded answer.

There is no Qdrant, no embeddings, no vector retrieval — and no per-table configuration: during install you only choose which tables the AI must NOT answer from. Everything else is approved and auto-configured from the schema (column types, foreign keys, indexes).

It also adds a clarifying-question loop: when a question is genuinely ambiguous the model asks short questions, the CLI collects the answers, and it re-asks with them in context.

⚡ Quickstart

Cloud mode needs nothing but an API key from your DBMind dashboard. Local mode needs Ollama with a SQL-capable chat model:

Then run the wizard:

[!NOTE] The install wizard asks "Which tables should the AI NOT answer from?" — framework tables (migrations, jobs, sessions, …) are pre-selected. Every other table is approved and auto-configured: primary key, readable/filterable/numeric columns, foreign-key join paths and indexed columns are inferred from the schema. Fine-tune by editing storage/app/dbmind1/catalog.json anytime.

🧭 How it works

1. Write the SQL — the model sees a sanitised schema (approved tables, real foreign keys, indexed columns) and writes exactly one SELECT, JOINing along the foreign keys it was given.
2. Guard & execute — SqlGuard rejects anything that isn't a single read-only SELECT on approved tables with no denied columns and an enforced LIMIT. The query runs on a read-only connection under a database-side statement timeout; failures feed a bounded repair loop.
3. Answer from real rows — the result rows (capped and sanitised) go back to the model, which phrases a grounded answer. --show-sql prints the exact query so every answer is auditable.

Two ways to run it

In both modes every generated query passes the local SqlGuard and runs on your local read-only connection. The cloud never connects to your database.

In cloud mode, value encryption is on by default: names, emails, phone numbers and other text values are sealed into opaque [[DBM1:…]] tokens before the rows leave your server. The model copies the tokens verbatim into its answer and the package decrypts them locally — the key never leaves your server. Numbers stay readable so rankings and totals work. Full walkthrough: docs/cloud-request-simulation.md.

On top of that, dbmind1:install lets you mark whole tables or single columns as always-encrypted — for data that is too sensitive even for the default rules (salaries, ledgers, medical records). Values from those selections are sent as tokens numbers and dates included. The choice is stored per source in the catalog (encrypt_all / encrypt) and is hand-editable anytime.

How it differs from dbmind/laravel

Both packages use different namespaces, config keys, and command prefixes, so they can be installed side by side.

🛠 Commands

dbmind1:test flags

• --show-sql — print the SQL that was executed
• --think — prefix an Approach: line stating the metric/assumptions
• --no-clarify — never pause for clarification; answer with best assumptions
• --rounds=N — max clarifying rounds (default 3)

💻 Programmatic use

🛡 Security

• Read-only. SqlGuard allows exactly one SELECT — no DML/DDL, no stacked statements, no comments — and always enforces a LIMIT. It runs through the connection's read PDO; for defence in depth point DBMIND1_SQL_CONNECTION at a user with only SELECT grants.
• Approved tables only. Every FROM/JOIN target must be an approved source.
• Denied columns blocked, three ways. password, token, secret, api_key, … are stripped from the schema the model sees, rejected by SqlGuard if they appear in a query, and stripped from result rows before they reach the model. SELECT * is rejected outright so unlisted columns can never leak through a star-select.
• Statement timeout. Every generated query runs under a database-side timeout (DBMIND1_SQL_TIMEOUT_MS, default 5 s) — a heavy query is killed by the server and the error feeds the model's repair loop.
• Fast by construction. The model is given the real foreign keys and indexed columns and instructed to join/filter along them only.

[!IMPORTANT] This edition is not tenant-scoped (raw SQL can't be safely tenant-filtered). For multi-tenant isolation use the full dbmind/laravel plan engine.

⚙️ Configuration

Publish with php artisan vendor:publish --tag=dbmind1-config. Key env vars:

🏛 Architecture

Application depends only on Domain contracts; Infrastructure implements those contracts; Laravel/DBMind1ServiceProvider is the composition root that wires them together. Data crosses boundaries as final readonly DTOs — never arrays or Eloquent models.

🧪 Testing

📄 License

MIT — see LICENSE.