Address CodeRabbit review feedback for streaming and SQL extraction.

- Anthropic: preserve separators between text blocks in streaming to
  match _parse_response() behavior.
- Docker: validate that the API URL points to a loopback address to
  constrain the request surface.
- Docker/OpenAI: raise LLMClientError on empty streams instead of
  yielding blank LLMResponse objects, matching non-streaming behavior.
- SQL extraction: strip trailing semicolons before joining blocks to
  avoid double semicolons in output.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: dpage

web/pgadmin/llm/providers/anthropic.py

@@ -382,6 +382,7 @@ def _read_anthropic_stream(
         stop_reason_str = None
         model_name = self._model
         usage = Usage()
+        in_text_block = False
 
         while True:
             line_bytes = response.readline()
@@ -427,6 +428,13 @@ def _read_anthropic_stream(
                         'name': block.get('name', '')
                     }
                     tool_input_json = ''
+                elif block.get('type') == 'text':
+                    # Emit a separator between text blocks to
+                    # match _parse_response() which joins with '\n'
+                    if in_text_block:
+                        content_parts.append('\n')
+                        yield '\n'
+                    in_text_block = True
 
             elif event_type == 'content_block_delta':
                 delta = data.get('delta', {})

web/pgadmin/llm/providers/docker.py

@@ -16,6 +16,7 @@
 import json
 import socket
 import ssl
+import urllib.parse
 import urllib.request
 import urllib.error
 from collections.abc import Generator
@@ -43,6 +44,25 @@
 DEFAULT_API_URL = 'http://localhost:12434'
 DEFAULT_MODEL = 'ai/qwen3-coder'
 
+# Allowed loopback hostnames for the Docker endpoint
+_LOOPBACK_HOSTS = {'localhost', '127.0.0.1', '::1', '[::1]'}
+
+
+def _validate_loopback_url(url: str) -> None:
+    """Ensure the URL uses HTTP(S) and points to a loopback address."""
+    parsed = urllib.parse.urlparse(url)
+    if parsed.scheme not in ('http', 'https'):
+        raise ValueError(
+            f"Docker Model Runner URL must use http or https, "
+            f"got: {parsed.scheme}"
+        )
+    hostname = (parsed.hostname or '').lower()
+    if hostname not in _LOOPBACK_HOSTS:
+        raise ValueError(
+            f"Docker Model Runner URL must point to a loopback address "
+            f"(localhost/127.0.0.1/::1), got: {hostname}"
+        )
+
 
 class DockerClient(LLMClient):
     """
@@ -64,6 +84,7 @@ def __init__(
             model: Optional model name. Defaults to ai/qwen3-coder.
         """
         self._api_url = (api_url or DEFAULT_API_URL).rstrip('/')
+        _validate_loopback_url(self._api_url)
         self._model = model or DEFAULT_MODEL
 
     @property
@@ -557,6 +578,13 @@ def _read_openai_stream(
             finish_reason or '', StopReason.UNKNOWN
         )
 
+        if not content and not tool_calls:
+            raise LLMClientError(LLMError(
+                message='No response content returned from API',
+                provider=self.provider_name,
+                retryable=False
+            ))
+
         yield LLMResponse(
             content=content,
             tool_calls=tool_calls,

web/pgadmin/llm/providers/openai.py

@@ -547,6 +547,13 @@ def _read_openai_stream(
             finish_reason or '', StopReason.UNKNOWN
         )
 
+        if not content and not tool_calls:
+            raise LLMClientError(LLMError(
+                message='No response content returned from API',
+                provider=self.provider_name,
+                retryable=False
+            ))
+
         yield LLMResponse(
             content=content,
             tool_calls=tool_calls,

web/pgadmin/tools/sqleditor/__init__.py

@@ -2927,7 +2927,7 @@ def generate():
                 re.DOTALL
             )
             sql = ';\n\n'.join(
-                block.strip() for block in sql_blocks
+                block.strip().rstrip(';') for block in sql_blocks
             ) if sql_blocks else None
 
             # Fallback: try JSON format in case LLM ignored

web/pgadmin/tools/sqleditor/tests/test_nlq_chat.py

@@ -197,7 +197,7 @@ class NLQSqlExtractionTestCase(BaseTestGenerator):
                 'Then get orders:\n\n'
                 '```sql\nSELECT * FROM orders;\n```'
             ),
-            expected_sql='SELECT * FROM users;;\n\nSELECT * FROM orders;'
+            expected_sql='SELECT * FROM users;\n\nSELECT * FROM orders'
         )),
         ('SQL Extraction - pgsql language tag', dict(
             response_text='```pgsql\nSELECT 1;\n```',