datasecops-cli 0.2.9__tar.gz → 0.3.0__tar.gz

{datasecops_cli-0.2.9 → datasecops_cli-0.3.0}/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 All notable changes to the DataSecOps CLI are documented in this file.
 
+## [0.3.0] - 2026-05-14
+
+### Added
+
+- **`datasecops setup` subcommand** — pure-Python replacement for `setup.ps1` / `setup.sh`. Discovers Snowflake connections from `~/.snowflake/connections.toml`, prompts for connection and app database, and writes `.datasecops.yml`. No platform-specific scripts needed.
+- **Interactive profile selection** — when `profile_name` is not set (no `dbt_project.yml` and no profile in `.datasecops.yml`), the CLI prompts the user to choose from available profiles in the native app instead of silently picking the first one
+- **Auto-setup on first run** — running `datasecops` without a `.datasecops.yml` now offers to run setup interactively instead of just exiting with an error
+- **dbt project directory resolution from framework** — `dbt_project_dir` is now re-resolved using the framework's `project_dir` setting after native app config is loaded
+
 ## [0.2.9] - 2026-05-14
 
 ### Added

{datasecops_cli-0.2.9 → datasecops_cli-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: datasecops-cli
-Version: 0.2.9
+Version: 0.3.0
 Summary: DataSecOps Framework CLI for Snowflake Native App
 License-Expression: MIT
 License-File: LICENSE
@@ -61,30 +61,19 @@ Optional:
 
 ## Quick Start
 
-### 1. Run the setup script
-
-The setup script creates a virtual environment, installs the CLI, and writes your local configuration.
-
-**Linux / macOS:**
+### 1. Configure your project
 
 ```bash
-chmod +x setup.sh && ./setup.sh
+datasecops setup
 ```
 
-**Windows (PowerShell):**
+This prompts for your Snowflake connection name and native app database, then writes `.datasecops.yml`.
 
-```powershell
-.\setup.ps1
-```
+If you skip this step, running `datasecops` will offer to run setup automatically.
 
-You'll be prompted for your Snowflake connection name and the native app database name.
-
-### 2. Activate the virtual environment and run
+### 2. Run the CLI
 
 ```bash
-source .venv/bin/activate   # Linux/macOS
-.\.venv\Scripts\Activate.ps1  # Windows
-
 datasecops
 ```
 

{datasecops_cli-0.2.9 → datasecops_cli-0.3.0}/README.md

@@ -41,30 +41,19 @@ Optional:
 
 ## Quick Start
 
-### 1. Run the setup script
-
-The setup script creates a virtual environment, installs the CLI, and writes your local configuration.
-
-**Linux / macOS:**
+### 1. Configure your project
 
 ```bash
-chmod +x setup.sh && ./setup.sh
+datasecops setup
 ```
 
-**Windows (PowerShell):**
+This prompts for your Snowflake connection name and native app database, then writes `.datasecops.yml`.
 
-```powershell
-.\setup.ps1
-```
+If you skip this step, running `datasecops` will offer to run setup automatically.
 
-You'll be prompted for your Snowflake connection name and the native app database name.
-
-### 2. Activate the virtual environment and run
+### 2. Run the CLI
 
 ```bash
-source .venv/bin/activate   # Linux/macOS
-.\.venv\Scripts\Activate.ps1  # Windows
-
 datasecops
 ```
 

{datasecops_cli-0.2.9 → datasecops_cli-0.3.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "datasecops-cli"
-version = "0.2.9"
+version = "0.3.0"
 description = "DataSecOps Framework CLI for Snowflake Native App"
 readme = "README.md"
 requires-python = ">=3.10"

{datasecops_cli-0.2.9 → datasecops_cli-0.3.0}/src/datasecops_cli/main.py

@@ -1,5 +1,7 @@
 import argparse
+import os
 import shutil
+import subprocess
 import sys
 from pathlib import Path
 
@@ -18,6 +20,7 @@ from datasecops_cli.utilities.display import (
     clear, section_header, menu_option, get_input_number,
     info_line, error_line, success_line
 )
+from datasecops_cli.utilities.yaml_utils import write_datasecops_config
 
 
 DOWNLOAD_ITEMS = [
@@ -33,6 +36,7 @@ def _build_parser() -> argparse.ArgumentParser:
     )
     sub = parser.add_subparsers(dest="command")
 
+    sub.add_parser("setup", help="Configure .datasecops.yml for this project")
     sub.add_parser("bootstrap", help="Set up a new dbt project with all framework config")
 
     dl = sub.add_parser("download", help="Download framework config non-interactively (for CI/CD)")
@@ -53,7 +57,9 @@ def main():
 
     config = Config()
 
-    if args.command == "bootstrap":
+    if args.command == "setup":
+        _run_setup(config.project_dir)
+    elif args.command == "bootstrap":
         _run_bootstrap(config)
     elif args.command == "download":
         _run_download(config, args.items)
@@ -61,16 +67,82 @@ def main():
         _run_interactive(config)
 
 
+def _run_setup(project_dir: Path):
+    """Interactive setup: create .datasecops.yml by prompting for connection and app database."""
+    from datasecops_cli.utilities.display import (
+        get_input_string, select_from_list
+    )
+
+    section_header("DataSecOps Setup")
+
+    # --- Discover Snowflake connections ---
+    connections_file = Path.home() / ".snowflake" / "connections.toml"
+    connection_names = []
+    if connections_file.exists():
+        import re
+        for line in connections_file.read_text(encoding="utf-8").splitlines():
+            m = re.match(r"^\[([^\]]+)\]", line)
+            if m:
+                connection_names.append(m.group(1))
+
+    if connection_names:
+        connection_name = select_from_list(connection_names, "Snowflake connection", add_back=False)
+    else:
+        info_line("No connections found in ~/.snowflake/connections.toml")
+        connection_name = get_input_string("Enter Snowflake connection name: ")
+
+    if not connection_name:
+        error_line("Connection name is required")
+        sys.exit(1)
+
+    # --- App database ---
+    app_database = get_input_string(
+        "Enter native app database name (e.g. DATA_ENGINEERS_DATASECOPS_FRAMEWORK): "
+    )
+    if not app_database:
+        error_line("App database name is required")
+        sys.exit(1)
+
+    # --- Write config ---
+    config_data = {
+        "connection_name": connection_name,
+        "app_database": app_database,
+        "profile_name": "",
+    }
+    write_datasecops_config(project_dir, config_data)
+    success_line(f".datasecops.yml written to {project_dir / '.datasecops.yml'}")
+
+
+def _offer_setup(project_dir: Path):
+    """Offer to run setup when .datasecops.yml is missing."""
+    from datasecops_cli.utilities.display import get_input_true_false
+
+    info_line("No .datasecops.yml found in this project.")
+    if not get_input_true_false("Run setup now?"):
+        sys.exit(1)
+
+    _run_setup(project_dir)
+
+
 def _connect_and_load(config: Config) -> SnowflakeService:
     """Load config, connect to Snowflake, and load native app settings.
     
     Returns the connected SnowflakeService, or calls sys.exit on failure.
+    If .datasecops.yml is missing and a setup script exists, offers to run it.
     """
     if not config.load():
-        sys.exit(1)
+        # Check if the failure is due to missing .datasecops.yml
+        if not (config.project_dir / ".datasecops.yml").exists():
+            _offer_setup(config.project_dir)
+            # Retry after setup
+            if not config.load():
+                sys.exit(1)
+        else:
+            sys.exit(1)
 
     sf_config = config.datasecops
     sf_service = SnowflakeService(sf_config)
+    profile_was_set = bool(config.profile_name)
 
     try:
         info_line(f"Connecting to Snowflake ({sf_config.connection_name})...")
@@ -83,6 +155,24 @@ def _connect_and_load(config: Config) -> SnowflakeService:
     info_line("Loading framework configuration...")
     config.load_from_native_app(sf_service)
 
+    # If profile_name was not explicitly set and there are multiple profiles, ask the user
+    if not profile_was_set and len(config.all_profiles) > 1:
+        from datasecops_cli.utilities.display import select_from_list
+        names = [p.profile_name for p in config.all_profiles]
+        info_line(f"Found {len(names)} project profiles:")
+        selected = select_from_list(names, "profile", add_back=False)
+        config.profile = None
+        for p in config.all_profiles:
+            if p.profile_name == selected:
+                config.profile = p
+                config.profile_name = selected
+                break
+
+    # Re-resolve dbt_project_dir using framework project_dir setting
+    framework_dbt_dir = config.project_dir / config.project_settings.project_dir
+    if (framework_dbt_dir / "dbt_project.yml").exists():
+        config.dbt_project_dir = framework_dbt_dir
+
     if not config.profile:
         error_line(f"Profile '{config.profile_name}' not found in native app")
         sf_service.close()