sweden.gov

One front door to the Swedish public sector: a single prompt box. You ask a question; an agent searches and reads official government websites (agencies, the Riksdag, the Government Offices, regions, municipalities) and answers with links back to the sources.

The agency sites stay where they are — this is a layer on top of them.

sweden.gov/
├── api/   Hono on Bun — the agent, its tools, and the /ask event stream
└── web/   Astro — a static page with the prompt box

This is not a workspace: run commands inside api/ or web/.

Quick start

# 1. API
cd api
bun install
cp .env.example .env        # set OPENAI_COMPATIBLE_BASE_URL, OPENAI_COMPATIBLE_API_KEY, OPENAI_COMPATIBLE_MODEL
bun run dev                 # http://localhost:3000

# 2. Website (another terminal)
cd web
bun install
cp .env.example .env        # PUBLIC_API_URL=http://localhost:3000
bun run dev                 # http://localhost:4321

Configuration (api/.env)

Search is a fallback chain: each search tries the providers in order, and one that fails or gets rate-limited sits out a cooldown. SearXNG answering "200, zero results" while its engines are blocked counts as a failure, and the failing engines are logged ([search] searxng engines failing: …). If every provider is down, the agent browses from the agency's start page by following links instead.

How it works

• POST /ask takes the conversation ({ messages: [{ role, content }] }, kept in the browser) and streams Server-Sent Events: search, search-results, read, read-done, text, text-reset, done (with sources), error.
• The agent (api/src/libs/agent/) is one AI SDK streamText loop with two tools:
  • search_government_sites — web search scoped with site: filters to the chosen agencies; anything off the allowlist is dropped.
  • read_government_page — fetches a page on an allowlisted host (SSRF-guarded on every redirect hop), returns readable text plus the page's links so the agent can click through.
• api/src/libs/sites/GovSites.ts is the allowlist and the trust boundary: ~150 agencies, regions and the largest municipalities. Add a domain there to make it searchable and readable.
• GET /sites lists the catalog (shown in the site footer). In dev, /reference has API docs.

Scripts

Deployment

Each app has its own Dockerfile; build them from api/ and web/ respectively.

api — api/Dockerfile

Bun running the TypeScript directly, listening on port 3000 (PORT to change it), with a health check on /ping. All configuration is runtime environment variables:

ENVIRONMENT=production is set in the image (API docs off). The api logs a warning at startup if FRONTEND_URL or TRUST_PROXY looks unset.

web — web/Dockerfile

A static build served by nginx on port 80, with a health check on /.

Hashed assets (/_astro/*) are cached for a year; the page itself is always revalidated, so a new deploy shows up immediately.