cassis-cli 1.5.0__tar.gz → 1.6.0__tar.gz

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/PKG-INFO

@@ -1,11 +1,11 @@
 Metadata-Version: 2.4
 Name: cassis-cli
-Version: 1.5.0
-Summary: Cassis CLI — run Cassis actions (ontology validation, upload and publish) from your CI pipelines
+Version: 1.6.0
+Summary: Validate, test and evaluate your Cassis ontology from your terminal, then publish it
 License: Apache-2.0
 License-File: LICENSE
 License-File: NOTICE
-Keywords: cassis,ontology,ci,text-to-sql
+Keywords: cassis,ontology,cli,ci,text-to-sql
 Author: Cassis
 Author-email: tech.admin@getcassis.com
 Requires-Python: >=3.10,<4.0
@@ -22,23 +22,24 @@ Description-Content-Type: text/markdown
 
 # Cassis CLI
 
-Run Cassis actions from your CI pipelines:
+Validate, test and evaluate your ontology from your terminal, then publish it. The same commands gate your pull requests in CI:
 
 - `cassis ontology check` validates the ontology files in your repository with the exact same checks as the Cassis GitHub PR check (YAML parsing, round-trip, import validation) — so you can gate merges in any CI system, not just GitHub. It then prints advisory **ontology quality warnings** for a tree that parsed — tables not assigned to any domain, joins/metrics pointing at unknown tables or columns, missing table/column descriptions (the same findings `ontology test` reports, without the agent run). In a checkout bound to a project (`project.yml`, `--project`, or `CASSIS_PROJECT_ID`), it also cross-checks the tree against the project's source schema: references to tables or columns the warehouse doesn't have print as **warnings** too — advisory only (the object may simply not be built or synced yet). Warnings never fail the check.
 - `cassis schema pull` downloads the data source's full source schema (as Cassis last introspected it) into `<base-path>/.schema.json` — a **gitignored** local snapshot (the command maintains the ignore entry) with a `pulled_at` stamp. The warehouse stays authoritative; the snapshot is a cache for offline/bulk work — e.g. a coding agent grepping table and column names during a modeling pass instead of paging through the MCP `get_source_schema` tool. Re-run to refresh.
 - `cassis ontology fmt` rewrites the ontology files in canonical form (think `black`/`gofmt` for the ontology), so hand or agent edits pass the round-trip check.
 - `cassis ontology upload` uploads the ontology files to a Cassis project (full replace) and, by default, publishes them immediately as a new version — so a merge to your main branch can go live in one CI step.
-- `cassis ontology pull` downloads the project's unpublished ontology into your repository checkout (full sync — stale local ontology files are pruned), so you can start editing from the current state, or bootstrap a repo that isn't git-synced (e.g. Bitbucket).
+- `cassis ontology pull` downloads the project's unpublished ontology into your repository checkout (full sync — stale local ontology files are pruned), so you can start editing from the current state, or bootstrap a repo that isn't git-synced (e.g. Bitbucket). Pruning only deletes files that are tracked and unmodified in git (i.e. restorable with `git checkout`); untracked or locally modified files are kept and listed, and every deleted path is printed.
 - `cassis ontology pull` and `cassis ontology fmt` also write `<base-path>/AGENTS.md`, the Cassis ontology modeling guide, into the checkout (default `cassis/AGENTS.md`) — a managed file (generated banner; the CLI overwrites local edits) so a repo-aware coding agent loads current Cassis modeling doctrine by convention. It sits inside the ontology directory but is not part of the ontology tree (which is the YAML files plus the domain Markdown files `domains/**/README.md`), so it is never uploaded, validated, or pruned. Commit it alongside your ontology changes. The guide text ships inside the CLI package, so its version tracks the **installed cassis-cli version** — upgrade the CLI (`pip install -U cassis-cli`) and re-run `fmt` to pick up doctrine updates; an unpinned `pip install cassis-cli` in CI gets them automatically. The banner stamps a doctrine version, and the CLI never *downgrades* the file: if the checkout's `AGENTS.md` was written by a newer doctrine (a newer CLI, or Cassis itself on a publish), `fmt`/`pull` leave it in place, print an upgrade notice, and `fmt --check` still passes.
 - The CLI identifies itself to the API (`User-Agent: cassis-cli/<version>`), and successful API responses advertise the newest published version — when you are behind, commands print a one-line upgrade notice on stderr (purely informational; output and exit codes are unchanged).
 - `cassis eval run` runs the project's eval suite against your local ontology files (scored in-memory — nothing is pushed to Cassis) and prints per-question results, so you can test the changes on your git branch before merging.
 - `cassis ontology test` runs individual questions through the text-to-SQL agent using your local ontology files, so you can check that a change actually works (e.g. a new column gets picked) — where `eval run` only checks for regressions on existing eval cases.
 - `cassis eval add-case` adds a gold question/SQL case to the project's eval suite — after fixing an ontology issue, add the question users were failing on so `eval run` guards it from regressing.
 - `cassis eval list-cases` and `cassis eval delete-case` maintain the suite: list the current cases with their ids, and prune one that is stale or wrong (e.g. its gold SQL encodes a definition the ontology has since changed).
-- `cassis schema push` uploads a DDL file to detect source-schema changes on a DDL-only project (same as the webapp's "Update from DDL" button): Cassis diffs the DDL against the ontology and surfaces added, dropped, and changed objects in Ontology > Review > Data source for approval. Waits for the detection run to finish and exits 0 only when it completed — the schema is stored and applied atomically with run completion, so exit 0 means the DDL parsed and the project now uses it.
+- `cassis schema push` uploads a DDL file to detect source-schema changes on a DDL-only project (same as the webapp's "Update from DDL" button): Cassis diffs the DDL against the ontology and surfaces added, dropped, and changed objects in Ontology > Review > Data source for approval. The file speaks only for the schemas it contains — a partial export (one schema of many) never removes the others; pass `--complete` when it is the project's complete source schema so schemas absent from it are treated as dropped. Waits for the detection run to finish and exits 0 only when it completed — the schema is stored and applied atomically with run completion, so exit 0 means the DDL parsed and the project now uses it.
 - `cassis projects list` lists the projects your API key can reach — id (what `--project` and `CASSIS_PROJECT_ID` take), name, published ontology version, and data-source dialect — so a pipeline or agent can discover the project id from the terminal instead of fishing it out of a webapp URL.
-- `cassis status` shows the project's published version (number, label, git commit), whether unpublished changes await publication, the git-sync binding, and how your local git HEAD relates to the published commit (in sync / N commits ahead / diverged). `cassis status --watch` polls until the published commit matches your local HEAD — e.g. right after merging a PR whose CI publishes the ontology — instead of watching the GitHub Actions tab.
+- `cassis status` shows the project's published version (number, label, git commit), whether unpublished changes await publication, the git-sync binding, how many Data source review items are pending (with the breaking count, when there are any), and how your local git HEAD relates to the published commit (in sync / N commits ahead / diverged). `cassis status --watch` polls until the published commit matches your local HEAD — e.g. right after merging a PR whose CI publishes the ontology — instead of watching the GitHub Actions tab.
 - `cassis issues` triages the issues Cassis raised on the project — what it found wrong while answering questions (an ontology gap, missing data) — without leaving the checkout: `issues list` (filterable by status, impact and cause), `issues show <id>` for the diagnosis, suggested action and the occurrences behind it, `issues evidence <id> <occurrence-id>` for what the agent actually saw, and `issues resolve` / `dismiss` / `reopen` once you've acted on it.
+- `cassis source-changes` reads the project's Data source review queue — the schema drift Cassis detected between the source and what the ontology tracks: `source-changes list` (paginated, pending by default, breaking severity flagged) and `source-changes show <id>` for one change's impact references and suggested edit. Read-only: approving or dismissing stays in the webapp; fix headlessly by editing the ontology files and opening a pull request.
 - `cassis verify` runs the full local gate in one verb — `ontology fmt --check`, `ontology check`, `eval run` — stopping at the first failure. One command in a checkout ("is this change safe to merge?"), one job in CI. `--no-eval` skips the eval suite.
 
 ## Install
@@ -73,7 +74,8 @@ cassis ontology check
 cassis ontology check /path/to/checkout
 
 # Download the project's unpublished ontology into the checkout (full sync;
-# review with git diff — pass --no-prune to keep local files it would delete):
+# review with git diff — untracked/modified files are never deleted, and
+# --no-prune keeps even the tracked stale files it would otherwise delete):
 cassis ontology pull --project 019f0000-0000-7000-8000-000000000000
 
 # Upload the ontology to a project and publish it immediately:
@@ -188,14 +190,14 @@ cassis ontology fmt --check
 | Code | Meaning                                                                        |
 | ---- | ------------------------------------------------------------------------------ |
 | 0    | Ontology is valid (check) / pulled (pull) / uploaded (upload) / eval run completed all-passed (eval run) / every probe completed (test — whatever its outcome; probes are informational, don't gate CI on them) |
-| 1    | Validation failed (check: findings printed; upload: nothing imported; eval run: invalid tree, failed cases, or failed/cancelled run; test: invalid tree or a probe failed; add-case: duplicate question or gold SQL that does not run; delete-case: no such case in the project; issues: no such issue or occurrence in the project) |
+| 1    | Validation failed (check: findings printed; upload: nothing imported; eval run: invalid tree, failed cases, or failed/cancelled run; test: invalid tree or a probe failed; add-case: duplicate question or gold SQL that does not run; delete-case: no such case in the project; issues: no such issue or occurrence in the project; schema push: failed or cancelled detection run, or the project won't accept the push (a run is already in flight, or it is warehouse-connected rather than DDL-only); source-changes show: no such change in the project) |
 | 2    | Usage error (missing API key or project, no ontology directory, unreadable file, tree over the size limits) |
-| 3    | Transport/API error (unreachable API, invalid key, inaccessible project, unexpected response), another run already active, out of credits, or `--timeout` reached |
+| 3    | Transport/API error (unreachable API, invalid key, inaccessible project, unexpected response), another eval run already active, out of credits, or `--timeout` reached |
 
 Commands that send the local tree (`check`, `fmt`, `upload`, `eval run`, `test`) accept up to
-2000 ontology files / 5 MB total — far above real ontologies (a few hundred small
-files). Beyond that the CLI fails fast with exit 2 before uploading anything;
-double-check `--base-path` if you hit it.
+20,000 ontology files / 100 MB total (path + content bytes) — sized for ontologies of
+roughly 10,000 modeled tables. Beyond that the CLI fails fast with exit 2 before
+uploading anything; double-check `--base-path` if you hit it.
 
 `upload` replaces the project's entire ontology with the uploaded tree. A
 never-published project always goes live immediately on first upload (even

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/README.md

@@ -1,22 +1,23 @@
 # Cassis CLI
 
-Run Cassis actions from your CI pipelines:
+Validate, test and evaluate your ontology from your terminal, then publish it. The same commands gate your pull requests in CI:
 
 - `cassis ontology check` validates the ontology files in your repository with the exact same checks as the Cassis GitHub PR check (YAML parsing, round-trip, import validation) — so you can gate merges in any CI system, not just GitHub. It then prints advisory **ontology quality warnings** for a tree that parsed — tables not assigned to any domain, joins/metrics pointing at unknown tables or columns, missing table/column descriptions (the same findings `ontology test` reports, without the agent run). In a checkout bound to a project (`project.yml`, `--project`, or `CASSIS_PROJECT_ID`), it also cross-checks the tree against the project's source schema: references to tables or columns the warehouse doesn't have print as **warnings** too — advisory only (the object may simply not be built or synced yet). Warnings never fail the check.
 - `cassis schema pull` downloads the data source's full source schema (as Cassis last introspected it) into `<base-path>/.schema.json` — a **gitignored** local snapshot (the command maintains the ignore entry) with a `pulled_at` stamp. The warehouse stays authoritative; the snapshot is a cache for offline/bulk work — e.g. a coding agent grepping table and column names during a modeling pass instead of paging through the MCP `get_source_schema` tool. Re-run to refresh.
 - `cassis ontology fmt` rewrites the ontology files in canonical form (think `black`/`gofmt` for the ontology), so hand or agent edits pass the round-trip check.
 - `cassis ontology upload` uploads the ontology files to a Cassis project (full replace) and, by default, publishes them immediately as a new version — so a merge to your main branch can go live in one CI step.
-- `cassis ontology pull` downloads the project's unpublished ontology into your repository checkout (full sync — stale local ontology files are pruned), so you can start editing from the current state, or bootstrap a repo that isn't git-synced (e.g. Bitbucket).
+- `cassis ontology pull` downloads the project's unpublished ontology into your repository checkout (full sync — stale local ontology files are pruned), so you can start editing from the current state, or bootstrap a repo that isn't git-synced (e.g. Bitbucket). Pruning only deletes files that are tracked and unmodified in git (i.e. restorable with `git checkout`); untracked or locally modified files are kept and listed, and every deleted path is printed.
 - `cassis ontology pull` and `cassis ontology fmt` also write `<base-path>/AGENTS.md`, the Cassis ontology modeling guide, into the checkout (default `cassis/AGENTS.md`) — a managed file (generated banner; the CLI overwrites local edits) so a repo-aware coding agent loads current Cassis modeling doctrine by convention. It sits inside the ontology directory but is not part of the ontology tree (which is the YAML files plus the domain Markdown files `domains/**/README.md`), so it is never uploaded, validated, or pruned. Commit it alongside your ontology changes. The guide text ships inside the CLI package, so its version tracks the **installed cassis-cli version** — upgrade the CLI (`pip install -U cassis-cli`) and re-run `fmt` to pick up doctrine updates; an unpinned `pip install cassis-cli` in CI gets them automatically. The banner stamps a doctrine version, and the CLI never *downgrades* the file: if the checkout's `AGENTS.md` was written by a newer doctrine (a newer CLI, or Cassis itself on a publish), `fmt`/`pull` leave it in place, print an upgrade notice, and `fmt --check` still passes.
 - The CLI identifies itself to the API (`User-Agent: cassis-cli/<version>`), and successful API responses advertise the newest published version — when you are behind, commands print a one-line upgrade notice on stderr (purely informational; output and exit codes are unchanged).
 - `cassis eval run` runs the project's eval suite against your local ontology files (scored in-memory — nothing is pushed to Cassis) and prints per-question results, so you can test the changes on your git branch before merging.
 - `cassis ontology test` runs individual questions through the text-to-SQL agent using your local ontology files, so you can check that a change actually works (e.g. a new column gets picked) — where `eval run` only checks for regressions on existing eval cases.
 - `cassis eval add-case` adds a gold question/SQL case to the project's eval suite — after fixing an ontology issue, add the question users were failing on so `eval run` guards it from regressing.
 - `cassis eval list-cases` and `cassis eval delete-case` maintain the suite: list the current cases with their ids, and prune one that is stale or wrong (e.g. its gold SQL encodes a definition the ontology has since changed).
-- `cassis schema push` uploads a DDL file to detect source-schema changes on a DDL-only project (same as the webapp's "Update from DDL" button): Cassis diffs the DDL against the ontology and surfaces added, dropped, and changed objects in Ontology > Review > Data source for approval. Waits for the detection run to finish and exits 0 only when it completed — the schema is stored and applied atomically with run completion, so exit 0 means the DDL parsed and the project now uses it.
+- `cassis schema push` uploads a DDL file to detect source-schema changes on a DDL-only project (same as the webapp's "Update from DDL" button): Cassis diffs the DDL against the ontology and surfaces added, dropped, and changed objects in Ontology > Review > Data source for approval. The file speaks only for the schemas it contains — a partial export (one schema of many) never removes the others; pass `--complete` when it is the project's complete source schema so schemas absent from it are treated as dropped. Waits for the detection run to finish and exits 0 only when it completed — the schema is stored and applied atomically with run completion, so exit 0 means the DDL parsed and the project now uses it.
 - `cassis projects list` lists the projects your API key can reach — id (what `--project` and `CASSIS_PROJECT_ID` take), name, published ontology version, and data-source dialect — so a pipeline or agent can discover the project id from the terminal instead of fishing it out of a webapp URL.
-- `cassis status` shows the project's published version (number, label, git commit), whether unpublished changes await publication, the git-sync binding, and how your local git HEAD relates to the published commit (in sync / N commits ahead / diverged). `cassis status --watch` polls until the published commit matches your local HEAD — e.g. right after merging a PR whose CI publishes the ontology — instead of watching the GitHub Actions tab.
+- `cassis status` shows the project's published version (number, label, git commit), whether unpublished changes await publication, the git-sync binding, how many Data source review items are pending (with the breaking count, when there are any), and how your local git HEAD relates to the published commit (in sync / N commits ahead / diverged). `cassis status --watch` polls until the published commit matches your local HEAD — e.g. right after merging a PR whose CI publishes the ontology — instead of watching the GitHub Actions tab.
 - `cassis issues` triages the issues Cassis raised on the project — what it found wrong while answering questions (an ontology gap, missing data) — without leaving the checkout: `issues list` (filterable by status, impact and cause), `issues show <id>` for the diagnosis, suggested action and the occurrences behind it, `issues evidence <id> <occurrence-id>` for what the agent actually saw, and `issues resolve` / `dismiss` / `reopen` once you've acted on it.
+- `cassis source-changes` reads the project's Data source review queue — the schema drift Cassis detected between the source and what the ontology tracks: `source-changes list` (paginated, pending by default, breaking severity flagged) and `source-changes show <id>` for one change's impact references and suggested edit. Read-only: approving or dismissing stays in the webapp; fix headlessly by editing the ontology files and opening a pull request.
 - `cassis verify` runs the full local gate in one verb — `ontology fmt --check`, `ontology check`, `eval run` — stopping at the first failure. One command in a checkout ("is this change safe to merge?"), one job in CI. `--no-eval` skips the eval suite.
 
 ## Install
@@ -51,7 +52,8 @@ cassis ontology check
 cassis ontology check /path/to/checkout
 
 # Download the project's unpublished ontology into the checkout (full sync;
-# review with git diff — pass --no-prune to keep local files it would delete):
+# review with git diff — untracked/modified files are never deleted, and
+# --no-prune keeps even the tracked stale files it would otherwise delete):
 cassis ontology pull --project 019f0000-0000-7000-8000-000000000000
 
 # Upload the ontology to a project and publish it immediately:
@@ -166,14 +168,14 @@ cassis ontology fmt --check
 | Code | Meaning                                                                        |
 | ---- | ------------------------------------------------------------------------------ |
 | 0    | Ontology is valid (check) / pulled (pull) / uploaded (upload) / eval run completed all-passed (eval run) / every probe completed (test — whatever its outcome; probes are informational, don't gate CI on them) |
-| 1    | Validation failed (check: findings printed; upload: nothing imported; eval run: invalid tree, failed cases, or failed/cancelled run; test: invalid tree or a probe failed; add-case: duplicate question or gold SQL that does not run; delete-case: no such case in the project; issues: no such issue or occurrence in the project) |
+| 1    | Validation failed (check: findings printed; upload: nothing imported; eval run: invalid tree, failed cases, or failed/cancelled run; test: invalid tree or a probe failed; add-case: duplicate question or gold SQL that does not run; delete-case: no such case in the project; issues: no such issue or occurrence in the project; schema push: failed or cancelled detection run, or the project won't accept the push (a run is already in flight, or it is warehouse-connected rather than DDL-only); source-changes show: no such change in the project) |
 | 2    | Usage error (missing API key or project, no ontology directory, unreadable file, tree over the size limits) |
-| 3    | Transport/API error (unreachable API, invalid key, inaccessible project, unexpected response), another run already active, out of credits, or `--timeout` reached |
+| 3    | Transport/API error (unreachable API, invalid key, inaccessible project, unexpected response), another eval run already active, out of credits, or `--timeout` reached |
 
 Commands that send the local tree (`check`, `fmt`, `upload`, `eval run`, `test`) accept up to
-2000 ontology files / 5 MB total — far above real ontologies (a few hundred small
-files). Beyond that the CLI fails fast with exit 2 before uploading anything;
-double-check `--base-path` if you hit it.
+20,000 ontology files / 100 MB total (path + content bytes) — sized for ontologies of
+roughly 10,000 modeled tables. Beyond that the CLI fails fast with exit 2 before
+uploading anything; double-check `--base-path` if you hit it.
 
 `upload` replaces the project's entire ontology with the uploaded tree. A
 never-published project always goes live immediately on first upload (even

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/cassis_cli/__init__.py

@@ -1,4 +1,7 @@
-"""Cassis CLI — run Cassis actions from your CI pipelines."""
+"""Validate, test and evaluate your ontology from your terminal, then publish it.
+
+The same commands gate your pull requests in CI.
+"""
 
 from importlib.metadata import PackageNotFoundError, version
 

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/cassis_cli/api.py

@@ -218,6 +218,12 @@ def post_ontology_import(
     if response.status_code >= 400:
         raise ApiError(f"Cassis API returned HTTP {response.status_code}: {response.text[:500]}")
     result = _parse_json_response(response, url)
+    # The import runs as a background job on the server; once the response
+    # stream has started the status code is fixed at 200, so an in-job failure
+    # arrives as a body carrying only an ``error`` key (deliberately not the
+    # success shape, so older CLIs fail loudly instead of reporting success).
+    if isinstance(result, dict) and "error" in result and "domain_count" not in result:
+        raise UploadValidationError(str(result["error"]))
     if not isinstance(result, dict) or not all(
         key in result for key in ("domain_count", "table_count", "join_count", "metric_count", "published_version")
     ):
@@ -235,7 +241,10 @@ def get_ontology_export(
     """GET /api/ci/projects/{project_id}/ontology/export and return the files tree."""
     url = api_url.rstrip("/") + f"/api/ci/projects/{project_id}/ontology/export"
     try:
-        with _client(transport=transport) as client:
+        # Whole-tree download: serializing thousands of tables takes the
+        # server the better part of a minute, so the default budget is the
+        # thing that breaks first — use the tree ceiling.
+        with _client(timeout=ONTOLOGY_TREE_TIMEOUT_SECONDS, transport=transport) as client:
             response = client.get(url, headers={"Authorization": f"Bearer {api_key}"})
     except httpx.HTTPError as exc:
         raise ApiError(f"Could not reach the Cassis API at {url}: {exc}") from exc
@@ -354,13 +363,18 @@ def post_detect_from_ddl(
     api_key: str,
     project_id: str,
     ddl: str,
+    complete_source: bool = False,
     transport: Optional[httpx.BaseTransport] = None,
 ) -> dict[str, Any]:
     """POST /api/ci/projects/{project_id}/source-changes/detect-from-ddl and return the run record."""
     url = api_url.rstrip("/") + f"/api/ci/projects/{project_id}/source-changes/detect-from-ddl"
     try:
         with _client(transport=transport) as client:
-            response = client.post(url, json={"ddl": ddl}, headers={"Authorization": f"Bearer {api_key}"})
+            response = client.post(
+                url,
+                json={"ddl": ddl, "complete_source": complete_source},
+                headers={"Authorization": f"Bearer {api_key}"},
+            )
     except httpx.HTTPError as exc:
         raise ApiError(f"Could not reach the Cassis API at {url}: {exc}") from exc
 
@@ -429,7 +443,9 @@ def post_eval_run_start(
     if case_ids is not None:
         body["test_case_ids"] = case_ids
     try:
-        with _client(transport=transport) as client:
+        # May carry the whole ontology tree in `files` — same budget as the
+        # other whole-tree endpoints.
+        with _client(timeout=ONTOLOGY_TREE_TIMEOUT_SECONDS, transport=transport) as client:
             response = client.post(url, json=body, headers={"Authorization": f"Bearer {api_key}"})
     except httpx.HTTPError as exc:
         raise ApiError(f"Could not reach the Cassis API at {url}: {exc}") from exc
@@ -745,6 +761,80 @@ def post_issue_status(
     return result
 
 
+class SourceChangeNotFoundError(ApiError):
+    """The project has no source change with this id."""
+
+
+def get_source_changes(
+    *,
+    api_url: str,
+    api_key: str,
+    project_id: str,
+    status: Optional[str] = None,
+    limit: Optional[int] = None,
+    offset: Optional[int] = None,
+    transport: Optional[httpx.BaseTransport] = None,
+) -> dict[str, Any]:
+    """GET /api/ci/projects/{project_id}/source-changes and return the {items, total} page."""
+    url = api_url.rstrip("/") + f"/api/ci/projects/{project_id}/source-changes"
+    params: dict[str, str] = {}
+    if status:
+        params["status"] = status
+    if limit is not None:
+        params["limit"] = str(limit)
+    if offset is not None:
+        params["offset"] = str(offset)
+    try:
+        with _client(transport=transport) as client:
+            response = client.get(url, params=params or None, headers={"Authorization": f"Bearer {api_key}"})
+    except httpx.HTTPError as exc:
+        raise ApiError(f"Could not reach the Cassis API at {url}: {exc}") from exc
+
+    if response.status_code == 401:
+        raise AuthError("The Cassis API rejected the API key (invalid or expired).")
+    if response.status_code in (403, 404):
+        raise _project_scope_error(response)
+    if response.status_code >= 400:
+        raise ApiError(f"Cassis API returned HTTP {response.status_code}: {response.text[:500]}")
+    result = _parse_json_response(response, url)
+    if not isinstance(result, dict) or not isinstance(result.get("items"), list) or "total" not in result:
+        raise ApiError(f"Unexpected response shape from the Cassis API at {url}.")
+    return result
+
+
+def get_source_change(
+    *,
+    api_url: str,
+    api_key: str,
+    project_id: str,
+    change_id: str,
+    transport: Optional[httpx.BaseTransport] = None,
+) -> dict[str, Any]:
+    """GET /api/ci/projects/{project_id}/source-changes/{change_id} and return the full change."""
+    url = api_url.rstrip("/") + f"/api/ci/projects/{project_id}/source-changes/{change_id}"
+    try:
+        with _client(transport=transport) as client:
+            response = client.get(url, headers={"Authorization": f"Bearer {api_key}"})
+    except httpx.HTTPError as exc:
+        raise ApiError(f"Could not reach the Cassis API at {url}: {exc}") from exc
+
+    if response.status_code == 401:
+        raise AuthError("The Cassis API rejected the API key (invalid or expired).")
+    # Exact-match wire contract with the source-change endpoints' 404 detail
+    # (see backend/app/endpoints/ci.py): it distinguishes a missing change
+    # (exit 1) from a project-scope 404 (exit 3).
+    if response.status_code == 404 and _detail_or_text(response) == "Source change not found":
+        raise SourceChangeNotFoundError(f"No source change {change_id} in project {project_id}.")
+    if response.status_code in (403, 404):
+        raise _project_scope_error(response)
+    if response.status_code >= 400:
+        raise ApiError(f"Cassis API returned HTTP {response.status_code}: {response.text[:500]}")
+    result = _parse_json_response(response, url)
+    if not isinstance(result, dict) or "id" not in result:
+        raise ApiError(f"Unexpected response shape from the Cassis API at {url}.")
+    return result
+
+
 def post_ontology_fmt(
     *,
     api_url: str,

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/cassis_cli/common.py

@@ -2,7 +2,9 @@
 
 from __future__ import annotations
 
+import os
 import re
+import subprocess
 from pathlib import Path
 from typing import Optional
 from uuid import UUID
@@ -20,10 +22,23 @@ EXIT_USAGE = 2
 EXIT_TRANSPORT = 3
 
 # Request ceilings of the /api/ci file-tree endpoints, mirrored so oversized
-# trees fail fast with a clear message before any upload. Source of truth:
+# trees fail fast with a clear message before any upload. Sized for ~10,000
+# modeled tables (a 6,000-table tree is ~8,600 files / ~60 MB). Source of
+# truth: backend/app/services/ontology_check.py, enforced by
 # backend/app/schemas/ci.py (the server's 422 remains the backstop).
-MAX_FILES = 2000
-MAX_TOTAL_BYTES = 5 * 1024 * 1024
+MAX_FILES = 20_000
+MAX_TOTAL_BYTES = 100 * 1024 * 1024
+
+
+def api_failure(exc: Exception) -> "typer.Exit":
+    """Print a transport/API error and return the transport exit code."""
+    typer.secho(str(exc), fg=typer.colors.RED, err=True)
+    return typer.Exit(EXIT_TRANSPORT)
+
+
+def one_line(value: object) -> str:
+    """Collapse a possibly-multiline value into one trimmed line for list rows."""
+    return str(value or "").replace("\n", " ").strip()
 
 
 def is_ontology_file(rel_path: str) -> bool:
@@ -41,6 +56,42 @@ def is_ontology_file(rel_path: str) -> bool:
     return rel_path.startswith("domains/") and rel_path.endswith("/README.md")
 
 
+def git_file_states(directory: Path) -> Optional[tuple[set[str], set[str]]]:
+    """(tracked, dirty) path sets for files under ``directory``, relative to it.
+
+    ``tracked`` is every git-tracked file below the directory; ``dirty`` the
+    subset whose working-tree content differs from the index (modified or
+    missing). Returns ``None`` when the directory is not inside a git work tree
+    or git is unavailable — callers must then treat every file as
+    unrecoverable and refuse to delete it.
+    """
+    # GIT_OPTIONAL_LOCKS=0: read-only queries must not take the index lock
+    # (and fail) when another git process is running.
+    env = {**os.environ, "GIT_OPTIONAL_LOCKS": "0"}
+    try:
+        tracked_proc = subprocess.run(
+            ["git", "ls-files", "-z"],
+            cwd=directory,
+            env=env,
+            capture_output=True,
+            check=True,
+            text=True,
+        )
+        dirty_proc = subprocess.run(
+            ["git", "ls-files", "-z", "--modified"],
+            cwd=directory,
+            env=env,
+            capture_output=True,
+            check=True,
+            text=True,
+        )
+    except (OSError, subprocess.CalledProcessError, UnicodeDecodeError):
+        return None
+    tracked = {p for p in tracked_proc.stdout.split("\0") if p}
+    dirty = {p for p in dirty_proc.stdout.split("\0") if p}
+    return tracked, dirty
+
+
 def is_legacy_domain_file(rel_path: str) -> bool:
     """Whether a base-relative path is a legacy (pre-Markdown) domain file.
 
@@ -84,7 +135,7 @@ def read_project_id_from_dir(ontology_dir: Path) -> Optional[str]:
     """Return the ``project_id`` recorded in ``<ontology_dir>/project.yml``, or None."""
     try:
         text = (ontology_dir / "project.yml").read_text(encoding="utf-8")
-    except (OSError, UnicodeDecodeError) as _exc:  # `as` keeps black from stripping the parens (3.14-only syntax)
+    except (OSError, UnicodeDecodeError):
         return None
     for line in text.splitlines():
         match = _PROJECT_ID_LINE.match(line.strip())
@@ -171,7 +222,9 @@ def collect_tree(path: Path, base_path: str) -> "tuple[dict[str, str], str]":
         typer.secho(f"No ontology files found under {ontology_dir}.", fg=typer.colors.RED, err=True)
         raise typer.Exit(EXIT_USAGE)
 
-    total_bytes = sum(len(content.encode()) for content in files.values())
+    # Count path bytes too, exactly like the server's _validate_tree_files —
+    # a tree accepted here must never come back as a server-side 422.
+    total_bytes = sum(len(rel.encode()) + len(content.encode()) for rel, content in files.items())
     if len(files) > MAX_FILES or total_bytes > MAX_TOTAL_BYTES:
         typer.secho(
             f"Ontology tree too large: {len(files)} files / {total_bytes / (1024 * 1024):.1f} MB "

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/cassis_cli/issues.py

@@ -26,9 +26,10 @@ from cassis_cli.api import (
 from cassis_cli.common import (
     DEFAULT_BASE_PATH,
     EXIT_OK,
-    EXIT_TRANSPORT,
     EXIT_USAGE,
     EXIT_VALIDATION_FAILED,
+    api_failure,
+    one_line,
     require_api_key,
     resolve_project_id,
 )
@@ -81,20 +82,11 @@ def _validate_choice(value: Optional[str], allowed: "tuple[str, ...]", flag: str
     raise typer.Exit(EXIT_USAGE)
 
 
-def _api_failure(exc: ApiError) -> "typer.Exit":
-    typer.secho(str(exc), fg=typer.colors.RED, err=True)
-    return typer.Exit(EXIT_TRANSPORT)
-
-
 def _not_found_failure(exc: IssueNotFoundError) -> "typer.Exit":
     typer.secho(str(exc), fg=typer.colors.YELLOW, err=True)
     return typer.Exit(EXIT_VALIDATION_FAILED)
 
 
-def _one_line(value: Any) -> str:
-    return str(value or "").replace("\n", " ").strip()
-
-
 def _field(label: str, value: Any, *, blank_line: bool = False) -> None:
     """Print a labelled block, indenting a multi-line value under its label."""
     if value in (None, "", [], {}):
@@ -145,7 +137,7 @@ def list_issues(
             cause=cause,
         )
     except (AuthError, ApiError) as exc:
-        raise _api_failure(exc) from exc
+        raise api_failure(exc) from exc
 
     if json_output:
         typer.echo(json.dumps(issues, indent=2))
@@ -159,7 +151,7 @@ def list_issues(
         occurrences = issue.get("occurrence_count_cache") or 0
         typer.echo(
             f"{issue.get('id')}  {issue.get('impact')}  x{occurrences}  "
-            f"{issue.get('status')}  {_one_line(issue.get('title'))}"
+            f"{issue.get('status')}  {one_line(issue.get('title'))}"
         )
     raise typer.Exit(EXIT_OK)
 
@@ -188,14 +180,14 @@ def show(
     except IssueNotFoundError as exc:
         raise _not_found_failure(exc) from exc
     except (AuthError, ApiError) as exc:
-        raise _api_failure(exc) from exc
+        raise api_failure(exc) from exc
 
     if json_output:
         typer.echo(json.dumps(issue, indent=2))
         raise typer.Exit(EXIT_OK)
 
     occurrences = issue.get("occurrences") or []
-    typer.echo(f"{issue.get('id')}  {_one_line(issue.get('title'))}")
+    typer.echo(f"{issue.get('id')}  {one_line(issue.get('title'))}")
     typer.echo(
         f"{issue.get('status')}  {issue.get('impact')}  {issue.get('cause')}  "
         f"{issue.get('occurrence_count_cache', len(occurrences))} occurrence(s)"
@@ -208,7 +200,7 @@ def show(
         typer.echo("")
         typer.echo("Occurrences:")
         for occurrence in occurrences:
-            typer.echo(f"  {occurrence.get('id')}  {_one_line(occurrence.get('symptom'))}")
+            typer.echo(f"  {occurrence.get('id')}  {one_line(occurrence.get('symptom'))}")
     raise typer.Exit(EXIT_OK)
 
 
@@ -245,7 +237,7 @@ def evidence(
     except IssueNotFoundError as exc:
         raise _not_found_failure(exc) from exc
     except (AuthError, ApiError) as exc:
-        raise _api_failure(exc) from exc
+        raise api_failure(exc) from exc
 
     if json_output:
         typer.echo(json.dumps(record, indent=2))
@@ -281,7 +273,7 @@ def _set_status(
     except IssueNotFoundError as exc:
         raise _not_found_failure(exc) from exc
     except (AuthError, ApiError) as exc:
-        raise _api_failure(exc) from exc
+        raise api_failure(exc) from exc
 
     typer.secho(f"✓ Issue {issue_id} is now {issue.get('status', status)}.", fg=typer.colors.GREEN)
     raise typer.Exit(EXIT_OK)

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/cassis_cli/main.py

@@ -9,18 +9,23 @@ from cassis_cli.issues import app as issues_app
 from cassis_cli.ontology import app as ontology_app
 from cassis_cli.projects import app as projects_app
 from cassis_cli.schema import app as schema_app
+from cassis_cli.source_changes import app as source_changes_app
 from cassis_cli.status import status
 from cassis_cli.verify import verify
 
 app = typer.Typer(
     no_args_is_help=True,
-    help="Cassis CLI — run Cassis actions from your CI pipelines.",
+    help=(
+        "Cassis CLI: validate, test and evaluate your ontology from your terminal, "
+        "then publish it. The same commands gate your pull requests in CI."
+    ),
 )
 app.add_typer(ontology_app, name="ontology")
 app.add_typer(eval_app, name="eval")
 app.add_typer(schema_app, name="schema")
 app.add_typer(projects_app, name="projects")
 app.add_typer(issues_app, name="issues")
+app.add_typer(source_changes_app, name="source-changes")
 app.command()(status)
 app.command()(verify)
 

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/cassis_cli/ontology.py

@@ -28,6 +28,7 @@ from cassis_cli.common import (
 )
 from cassis_cli.common import collect_files as _collect_files
 from cassis_cli.common import collect_tree as _collect_tree
+from cassis_cli.common import git_file_states as _git_file_states
 from cassis_cli.common import is_legacy_domain_file as _is_legacy_domain_file
 from cassis_cli.common import require_api_key as _require_api_key
 from cassis_cli.common import resolve_project_id as _resolve_project_id
@@ -197,7 +198,11 @@ def pull(
     prune: bool = typer.Option(
         True,
         "--prune/--no-prune",
-        help="Delete local ontology files that no longer exist in the project's ontology (default: prune).",
+        help=(
+            "Delete local ontology files that no longer exist in the project's ontology "
+            "(default: prune). Only files that are tracked and unmodified in git are "
+            "deleted; untracked or locally modified files are always kept and reported."
+        ),
     ),
     json_output: bool = typer.Option(False, "--json", help="Print a JSON summary of written/deleted files."),
 ) -> None:
@@ -205,7 +210,9 @@ def pull(
 
     Writes the ontology tree under the export path (full sync: files are
     overwritten and, unless --no-prune, stale local ontology files are deleted,
-    so the checkout ends up matching the project exactly). Review the changes with
+    so the checkout ends up matching the project exactly). Pruning never touches
+    files git could not restore: untracked or locally modified files are kept
+    and listed, and every deleted path is named. Review the changes with
     git diff before committing. Exits 0 on success, 2 on usage errors, 3 on
     transport/API errors.
     """
@@ -243,15 +250,38 @@ def pull(
         written.append(rel)
 
     deleted: list[str] = []
+    kept: list[dict[str, str]] = []
     if prune and ontology_dir.is_dir():
         local = _collect_files(ontology_dir)
-        for rel in sorted(set(local) - set(files)):
-            try:
-                (ontology_dir / rel).unlink()
-            except OSError as exc:
-                typer.secho(f"Cannot delete {ontology_dir / rel}: {exc}", fg=typer.colors.RED, err=True)
-                raise typer.Exit(EXIT_USAGE) from exc
-            deleted.append(rel)
+        stale = sorted(set(local) - set(files))
+        if stale:
+            # Only delete what git can restore. An untracked or locally
+            # modified file is user work Cassis has never seen — pruning it
+            # would be unrecoverable data loss (#27).
+            states = _git_file_states(ontology_dir)
+            to_delete: list[str] = []
+            if states is None:
+                kept = [{"path": rel, "reason": "not in a git repository"} for rel in stale]
+            else:
+                tracked, dirty = states
+                for rel in stale:
+                    if rel not in tracked:
+                        kept.append({"path": rel, "reason": "untracked in git"})
+                    elif rel in dirty:
+                        kept.append({"path": rel, "reason": "locally modified"})
+                    else:
+                        to_delete.append(rel)
+            if to_delete and not json_output:
+                typer.echo(f"Deleting {len(to_delete)} stale ontology file(s):")
+                for rel in to_delete:
+                    typer.echo(f"  {base_path}/{rel}")
+            for rel in to_delete:
+                try:
+                    (ontology_dir / rel).unlink()
+                except OSError as exc:
+                    typer.secho(f"Cannot delete {ontology_dir / rel}: {exc}", fg=typer.colors.RED, err=True)
+                    raise typer.Exit(EXIT_USAGE) from exc
+                deleted.append(rel)
 
     # Managed modeling guide: refresh AGENTS.md so a repo-aware agent loads
     # current Cassis doctrine. Not part of the ontology tree (YAML-only), so it
@@ -266,14 +296,31 @@ def pull(
         _warn_newer_guide(base_path)
 
     if json_output:
-        typer.echo(json.dumps({"written": written, "deleted": deleted, "guide_written": guide_written}, indent=2))
+        typer.echo(
+            json.dumps(
+                {"written": written, "deleted": deleted, "kept": kept, "guide_written": guide_written},
+                indent=2,
+            )
+        )
     else:
         summary = f"✓ Pulled {len(written)} files into {ontology_dir}"
         if deleted:
-            summary += f" ({len(deleted)} stale files deleted)"
+            summary += f" ({len(deleted)} stale files deleted, listed above)"
         if guide_written:
             summary += f"; wrote {base_path}/{GUIDE_FILENAME}"
         typer.secho(f"{summary}.", fg=typer.colors.GREEN)
+        if kept:
+            typer.secho(
+                f"Kept {len(kept)} local file(s) not in the project ontology "
+                "(only files tracked and unmodified in git are pruned):",
+                fg=typer.colors.YELLOW,
+            )
+            for entry in kept:
+                typer.secho(f"  {base_path}/{entry['path']} ({entry['reason']})", fg=typer.colors.YELLOW)
+            typer.secho(
+                "  Commit them if they are intentional, or delete them manually.",
+                fg=typer.colors.YELLOW,
+            )
         migrated = sum(1 for rel in deleted if _is_legacy_domain_file(rel))
         if migrated:
             typer.secho(

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/cassis_cli/schema.py

@@ -134,7 +134,7 @@ def ensure_gitignored(ontology_dir: Path) -> None:
     gitignore = ontology_dir / ".gitignore"
     try:
         existing = gitignore.read_text(encoding="utf-8")
-    except (OSError, UnicodeDecodeError) as _exc:  # `as` keeps black from stripping the parens (3.14-only syntax)
+    except (OSError, UnicodeDecodeError):
         existing = ""
     if SNAPSHOT_FILENAME in existing.splitlines():
         return
@@ -175,17 +175,26 @@ def push(
         envvar="CASSIS_BASE_PATH",
         help="Repository directory the ontology is exported under (the project's git-sync Path setting).",
     ),
+    complete_source: bool = typer.Option(
+        False,
+        "--complete",
+        help="The file is the project's complete source schema: schemas absent from it are treated as dropped. "
+        "Without it, the upload only speaks for the schemas it contains.",
+    ),
     poll_interval: float = typer.Option(5.0, "--poll-interval", help="Seconds between polls."),
     timeout: float = typer.Option(600.0, "--timeout", help="Give up waiting after this many seconds."),
     json_output: bool = typer.Option(False, "--json", help="Print the run record as raw JSON."),
 ) -> None:
     """Upload a DDL file to detect source-schema changes (same as the webapp's "Update from DDL").
 
-    The DDL must contain at least one CREATE TABLE statement and represents the
-    project's complete source schema. Cassis diffs it against the ontology:
-    added, dropped, and changed objects appear in Ontology > Review > Data
-    source for approval. Re-uploading a corrected DDL supersedes the previous
-    one. Only works on DDL-only projects (no warehouse connection).
+    The DDL must contain at least one CREATE TABLE statement. Cassis diffs it
+    against the ontology: added, dropped, and changed objects appear in
+    Ontology > Review > Data source for approval. The file speaks only for the
+    schemas it contains — a partial export (one schema of many) never removes
+    the others; pass --complete when the file is the project's complete source
+    schema so schemas absent from it are treated as dropped. Re-uploading a
+    corrected DDL supersedes the previous one. Only works on DDL-only projects
+    (no warehouse connection).
 
     Always waits for the detection run to finish: the server parses the DDL
     inside the run (a large file takes a while, and an unparseable one fails
@@ -211,7 +220,9 @@ def push(
         raise typer.Exit(EXIT_USAGE)
 
     try:
-        run = post_detect_from_ddl(api_url=api_url, api_key=api_key, project_id=project_id, ddl=ddl_text)
+        run = post_detect_from_ddl(
+            api_url=api_url, api_key=api_key, project_id=project_id, ddl=ddl_text, complete_source=complete_source
+        )
     except SourceChangeConflictError as exc:
         typer.secho(str(exc), fg=typer.colors.RED, err=True)
         raise typer.Exit(EXIT_VALIDATION_FAILED) from exc
@@ -237,9 +248,19 @@ def push(
     run_status = run.get("status")
     if run_status == "completed":
         summary = run.get("summary") or {}
-        total = summary.get("total_changes", 0)
+        total = summary.get("reviewable_total")
+        if total is None:
+            total = sum(summary.get(key, 0) for key in ("changes_created", "changes_updated", "changes_reopened"))
+        if summary.get("partial_upload_suspected"):
+            typer.secho(
+                "Note: the file drops most of the tracked tables in the schemas it covers, which"
+                " often means a partial export. Removals of modeled tables wait for review;"
+                " re-push a complete export to undo unintended drops.",
+                fg=typer.colors.YELLOW,
+                err=True,
+            )
         typer.secho(
-            f"✓ Detection completed: {total} change(s) detected." if total else "✓ Detection completed: no changes.",
+            f"✓ Detection completed: {total} change(s) to review." if total else "✓ Detection completed: no changes.",
             fg=typer.colors.GREEN,
         )
         raise typer.Exit(EXIT_OK)

cassis_cli-1.6.0/cassis_cli/source_changes.py

@@ -0,0 +1,191 @@
+"""`cassis source-changes` — read the Data source review queue from the terminal.
+
+Source changes are the schema drift Cassis detected between the data source
+and what the ontology tracks (tables/columns added, removed, renamed,
+retyped). Reading them from a checkout lets an agent see that a breaking
+`column_removed` card is pending against a table it is editing — the fix then
+happens in the ontology files via a pull request. Read-only by design:
+reviewing (approve applies ontology edits, dismiss mutes the table) stays in
+the webapp.
+"""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+from typing import Any, Optional
+
+import typer
+from cassis_cli.api import (
+    DEFAULT_API_URL,
+    ApiError,
+    AuthError,
+    SourceChangeNotFoundError,
+    get_source_change,
+    get_source_changes,
+)
+from cassis_cli.common import (
+    DEFAULT_BASE_PATH,
+    EXIT_OK,
+    EXIT_USAGE,
+    EXIT_VALIDATION_FAILED,
+    api_failure,
+    one_line,
+    require_api_key,
+    resolve_project_id,
+)
+
+app = typer.Typer(no_args_is_help=True, help="Read the project's Data source review queue.")
+
+STATUSES = ("pending", "approved", "rejected", "superseded")
+
+_PATH_OPTION = typer.Option(
+    Path("."),
+    "--path",
+    help="Repository checkout root (holds <base-path>/project.yml for the --project default).",
+)
+_PROJECT_OPTION = typer.Option(
+    None,
+    "--project",
+    envvar="CASSIS_PROJECT_ID",
+    help="Target Cassis project ID (UUID). Defaults to the id in <base-path>/project.yml.",
+)
+_API_KEY_OPTION = typer.Option(
+    None,
+    "--api-key",
+    envvar="CASSIS_API_KEY",
+    help="Cassis API key (sk-k6-...). Create one in Organization settings -> API keys.",
+)
+_API_URL_OPTION = typer.Option(
+    DEFAULT_API_URL,
+    "--api-url",
+    envvar="CASSIS_API_URL",
+    help="Cassis API base URL.",
+)
+_BASE_PATH_OPTION = typer.Option(
+    DEFAULT_BASE_PATH,
+    "--base-path",
+    envvar="CASSIS_BASE_PATH",
+    help="Repository directory the ontology is exported under (holds project.yml for the --project default).",
+)
+
+
+def _target(change: dict[str, Any]) -> str:
+    parts = [change.get("target_schema"), change.get("target_table"), change.get("target_column")]
+    return ".".join(str(p) for p in parts if p)
+
+
+@app.command(name="list")
+def list_source_changes(
+    status: Optional[str] = typer.Option(
+        None, "--status", help=f"Filter by status ({', '.join(STATUSES)}). Defaults to pending."
+    ),
+    limit: int = typer.Option(100, "--limit", min=1, max=500, help="Page size."),
+    offset: int = typer.Option(0, "--offset", min=0, help="Page start, newest first."),
+    path: Path = _PATH_OPTION,
+    project_id: Optional[str] = _PROJECT_OPTION,
+    api_key: Optional[str] = _API_KEY_OPTION,
+    api_url: str = _API_URL_OPTION,
+    base_path: str = _BASE_PATH_OPTION,
+    json_output: bool = typer.Option(False, "--json", help="Print the page as raw JSON ({items, total})."),
+) -> None:
+    """List the pending Data source review items, newest first.
+
+    Prints each change's id, type, severity, status and target; the id is what
+    `cassis source-changes show` takes. A `breaking` severity means a curated
+    ontology object references the changed source object. Exits 0 on success,
+    2 on usage errors, 3 on transport/API errors.
+    """
+    if status is not None and status not in STATUSES:
+        typer.secho(f"--status must be one of {', '.join(STATUSES)}, got {status!r}.", fg=typer.colors.RED, err=True)
+        raise typer.Exit(EXIT_USAGE)
+    api_key = require_api_key(api_key)
+    project_id = resolve_project_id(project_id, path / Path(base_path), quiet=json_output)
+
+    try:
+        page = get_source_changes(
+            api_url=api_url,
+            api_key=api_key,
+            project_id=project_id,
+            status=status,
+            limit=limit,
+            offset=offset,
+        )
+    except (AuthError, ApiError) as exc:
+        raise api_failure(exc) from exc
+
+    if json_output:
+        typer.echo(json.dumps(page, indent=2))
+        raise typer.Exit(EXIT_OK)
+
+    items = page.get("items") or []
+    total = page.get("total", len(items))
+    if not items:
+        typer.echo("No source changes match." if status else "No pending source changes.")
+        raise typer.Exit(EXIT_OK)
+
+    for change in items:
+        typer.echo(
+            f"{change.get('id')}  {change.get('change_type')}  {change.get('severity')}  "
+            f"{change.get('status')}  {_target(change)}"
+        )
+    shown = len(items)
+    if offset + shown < total:
+        typer.echo(f"Showing {shown} of {total} (use --offset {offset + shown} for the next page).")
+    raise typer.Exit(EXIT_OK)
+
+
+@app.command()
+def show(
+    change_id: str = typer.Argument(..., help="Id of the change to show (from `cassis source-changes list`)."),
+    path: Path = _PATH_OPTION,
+    project_id: Optional[str] = _PROJECT_OPTION,
+    api_key: Optional[str] = _API_KEY_OPTION,
+    api_url: str = _API_URL_OPTION,
+    base_path: str = _BASE_PATH_OPTION,
+    json_output: bool = typer.Option(False, "--json", help="Print the change as raw JSON."),
+) -> None:
+    """Show one Data source review item: its impact and the suggested edit.
+
+    `impact` lists the curated ontology objects referencing the changed source
+    object; the suggested edit describes what approving in the webapp would do
+    — make the equivalent edit in the ontology files to fix headlessly. Exits
+    0 on success, 1 when the change does not exist in the project, 2 on usage
+    errors, 3 on transport/API errors.
+    """
+    api_key = require_api_key(api_key)
+    project_id = resolve_project_id(project_id, path / Path(base_path), quiet=json_output)
+
+    try:
+        change = get_source_change(api_url=api_url, api_key=api_key, project_id=project_id, change_id=change_id)
+    except SourceChangeNotFoundError as exc:
+        typer.secho(str(exc), fg=typer.colors.YELLOW, err=True)
+        raise typer.Exit(EXIT_VALIDATION_FAILED) from exc
+    except (AuthError, ApiError) as exc:
+        raise api_failure(exc) from exc
+
+    if json_output:
+        typer.echo(json.dumps(change, indent=2))
+        raise typer.Exit(EXIT_OK)
+
+    typer.echo(f"{change.get('id')}  {change.get('change_type')}  {change.get('severity')}  {change.get('status')}")
+    typer.echo(f"Target: {_target(change)}")
+    typer.echo(f"Raised {change.get('times_raised', 1)}x, last {change.get('last_detected_at')}")
+    impact = change.get("impact") or []
+    if impact:
+        typer.echo("")
+        typer.echo("Impact:")
+        for ref in impact:
+            line = f"  {ref.get('kind')}  {ref.get('confidence')}  {one_line(ref.get('object_label'))}"
+            detail = ref.get("detail")
+            if detail:
+                line += f"  — {one_line(detail)}"
+            typer.echo(line)
+    edit = change.get("suggested_edit") or {}
+    summary = edit.get("human_summary") if isinstance(edit, dict) else None
+    if summary:
+        typer.echo("")
+        typer.echo(f"Suggested edit: {one_line(summary)}")
+        for note in edit.get("manual_review") or []:
+            typer.echo(f"  Manual review: {one_line(note)}")
+    raise typer.Exit(EXIT_OK)

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/cassis_cli/status.py

@@ -87,6 +87,11 @@ def _render(status_record: "dict[str, Any]", comparison_text: str) -> None:
         typer.echo(f"Git sync: {git_sync['provider']} {git_sync['repo']} (path {git_sync['base_path']})")
     else:
         typer.echo("Git sync: not configured")
+    pending = status_record.get("pending_source_changes")
+    if pending and pending.get("total"):
+        breaking = pending.get("breaking") or 0
+        breaking_text = f", {breaking} breaking" if breaking else ""
+        typer.echo(f"Source changes pending review: {pending['total']}{breaking_text} (cassis source-changes list)")
     typer.echo(f"Local checkout: {comparison_text}")
 
 

{cassis_cli-1.5.0 → cassis_cli-1.6.0}/pyproject.toml

@@ -1,11 +1,11 @@
 [project]
 name = "cassis-cli"
-version = "1.5.0"
-description = "Cassis CLI — run Cassis actions (ontology validation, upload and publish) from your CI pipelines"
+version = "1.6.0"
+description = "Validate, test and evaluate your Cassis ontology from your terminal, then publish it"
 readme = "README.md"
 license = { text = "Apache-2.0" }
 authors = [{ name = "Cassis", email = "tech.admin@getcassis.com" }]
-keywords = ["cassis", "ontology", "ci", "text-to-sql"]
+keywords = ["cassis", "ontology", "cli", "ci", "text-to-sql"]
 classifiers = [
     "License :: OSI Approved :: Apache Software License",
     "Environment :: Console",
@@ -43,3 +43,10 @@ build-backend = "poetry.core.masonry.api"
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]
+
+[tool.black]
+# The package ships for Python >=3.10 (see requires-python above): formatting
+# must target the floor, or black under the monorepo's 3.14 rewrites syntax
+# into 3.14-only forms (e.g. stripping parens from multi-exception `except`).
+line-length = 120
+target-version = ["py310"]