fix: robust error handling and api key flow

Author: ridash2005

api/routes/query.py

@@ -45,8 +45,15 @@ async def query_endpoint(
     Write operations require explicit approval via /api/approve.
     """
     try:
+        import os
+        if not x_openai_key and not os.getenv("OPENAI_API_KEY"):
+            raise ValueError("OpenAI API Key is missing. Please add it in the Settings panel.")
+            
         result = await run_query(request.question, api_key=x_openai_key)
         return QueryResponse(**result)
+    except ValueError as ve:
+        logger.warning("Validation error: %s", ve)
+        raise HTTPException(status_code=400, detail=str(ve))
     except Exception as exc:
         logger.error("Query endpoint error: %s", exc, exc_info=True)
         raise HTTPException(status_code=500, detail=str(exc))

api/routes/upload.py

@@ -32,7 +32,7 @@ async def upload_database(
             shutil.copyfileobj(file.file, buffer)
 
         # Update database engine
-        set_engine_url(f"sqlite:///{file_path}")
+        set_engine_url("sqlite:///./data/uploaded.db")
 
         # Connect and extract tables
         conn = sqlite3.connect(file_path)

frontend/src/components/ChatWindow.tsx

@@ -48,6 +48,12 @@ export default function ChatWindow({ messages, setMessages, onAnswer, injectedQu
       onAnswer(response)
     } catch (err: any) {
       let errMsg = err instanceof Error ? err.message : String(err)
+      
+      // Extract backend detail if available
+      if (err.response?.data?.detail) {
+        errMsg = err.response.data.detail
+      }
+
       if (errMsg.includes('405') || errMsg.includes('404') || errMsg.includes('Network Error')) {
         errMsg = "Failed to connect to the backend. If you are on GitHub Pages, click the ⚙️ Settings icon in the top right to configure your local Backend API URL (e.g., http://localhost:8000)."
       }

frontend/src/components/Navbar.tsx

@@ -45,8 +45,10 @@ export default function Navbar() {
     setUploadProgress(0)
 
     try {
-      // Need to set API URL first if they changed it, so upload goes to the right place
+      // Need to save settings first so the interceptor picks up the latest API key and URL
       setApiUrl(apiUrlInput)
+      setApiKey(apiKeyInput)
+      
       const res = await uploadDatabase(file, (pct) => setUploadProgress(pct))
       if (res.success) {
         setUploadSuccess(res.message || 'Database uploaded and indexed successfully!')