datasecops-cli 0.5.3__tar.gz → 0.5.5__tar.gz

{datasecops_cli-0.5.3 → datasecops_cli-0.5.5}/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 All notable changes to the DataSecOps CLI are documented in this file.
 
+## [0.5.5] - 2026-06-19
+
+### Fixed
+
+- **AzureDevOps pipelines download to correct folder** — `download_pipelines` now writes AzureDevOps pipeline files to `.azuredevops/workflows/` instead of the project root, matching the platform convention (similar to how GitHub pipelines are written to `.github/workflows/`).
+- **MCP server setup recognises all AzureDevOps platform variants** — the initial setup flow in `main.py` now uses case-insensitive matching for the platform name (`"AzureDevOps"` and `"Azure DevOps"` both work), consistent with the menu paths.
+- **Cortex Code MCP server uses absolute venv path** — the `datasecops-framework` MCP server entry in `.snowflake/cortex/mcp.json` now uses the absolute path to the project's `.venv/Scripts/datasecops-mcp` (Windows) or `.venv/bin/datasecops-mcp` (Unix) instead of the bare `datasecops-mcp` command, fixing "Process exited with code 1" errors in Cortex Code Desktop when the venv isn't on the system PATH.
+
+## [0.5.4] - 2026-06-05
+
+### Changed
+
+- **`get_linting_rules` returns `.sqlfluff` INI format** — the MCP tool now returns the rendered `.sqlfluff` config file content (INI format) instead of raw JSON, matching what `get_sqlfluff_config` returns and what SQLFluff actually consumes. Returns an empty string (not a prose message) when no config is found, so callers can reliably detect the empty case.
+- **MCP server uses project `.venv`** — `mcp-servers.json` now points `command` to `${PROJECT_DIR}/.venv/${VENV_BIN:-bin}/datasecops-mcp`, defaulting to `bin` (Unix) with `VENV_BIN=Scripts` for Windows, making the config cross-platform.
+
 ## [0.5.3] - 2026-06-05
 
 ### Changed

{datasecops_cli-0.5.3 → datasecops_cli-0.5.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: datasecops-cli
-Version: 0.5.3
+Version: 0.5.5
 Summary: DataSecOps Framework CLI for Snowflake Native App
 License-Expression: MIT
 License-File: LICENSE

{datasecops_cli-0.5.3 → datasecops_cli-0.5.5}/mcp-servers.json

@@ -2,9 +2,9 @@
   "mcpServers": {
     "datasecops-framework": {
       "type": "stdio",
-      "command": "datasecops-mcp",
+      "command": "${PROJECT_DIR}/.venv/${VENV_BIN:-bin}/datasecops-mcp",
       "args": ["--connection-name", "<CONNECTION>", "--app-database", "<APP_DB>"],
-      "description": "DataSecOps Framework governance rules, branching conventions, linting config, and project profiles from your Snowflake Native App"
+      "description": "DataSecOps Framework governance rules, branching conventions, linting config, and project profiles from your Snowflake Native App. Set VENV_BIN=Scripts on Windows."
     },
     "github": {
       "type": "stdio",

{datasecops_cli-0.5.3 → datasecops_cli-0.5.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "datasecops-cli"
-version = "0.5.3"
+version = "0.5.5"
 description = "DataSecOps Framework CLI for Snowflake Native App"
 readme = "README.md"
 requires-python = ">=3.10"

{datasecops_cli-0.5.3 → datasecops_cli-0.5.5}/src/datasecops_cli/main.py

@@ -316,9 +316,12 @@ def _run_setup(project_dir: Path):
             info_line("Adding MCP servers to Cortex Code...")
             mcp_path = project_dir / ".snowflake" / "cortex" / "mcp.json"
 
+            from datasecops_cli.utilities.mcp import _resolve_mcp_command
+            mcp_command = _resolve_mcp_command()
+
             servers = {"datasecops-framework": {
                 "type": "stdio",
-                "command": "datasecops-mcp",
+                "command": mcp_command,
                 "args": ["--connection-name", connection_name, "--app-database", app_database],
             }}
 
@@ -336,7 +339,7 @@ def _run_setup(project_dir: Path):
                     server_entry["headers"] = {"Authorization": f"Bearer {snowflake_pat}"}
                 servers["datasecops-docs"] = server_entry
 
-            if platform_choice == "GitHub":
+            if platform_choice.lower() == "github":
                 github_token = get_input_string("Enter your GitHub PAT (or press Enter to skip): ", allow_empty=True)
                 if github_token:
                     servers["github"] = {
@@ -345,7 +348,7 @@ def _run_setup(project_dir: Path):
                         "args": ["-y", "@modelcontextprotocol/server-github"],
                         "env": {"GITHUB_PERSONAL_ACCESS_TOKEN": github_token},
                     }
-            elif platform_choice == "Azure DevOps":
+            elif platform_choice.lower() in ("azuredevops", "azure devops"):
                 azure_org = get_input_string("Enter your Azure DevOps org URL (e.g. https://dev.azure.com/myorg): ")
                 azure_pat = get_input_string("Enter your Azure DevOps PAT (or press Enter to skip): ", allow_empty=True)
                 if azure_pat:
@@ -387,13 +390,13 @@ def _run_setup(project_dir: Path):
                 }
                 info_line("Note: Replace <YOUR_PAT> in datasecops-docs headers with your Snowflake PAT")
 
-            if platform_choice == "GitHub":
+            if platform_choice.lower() == "github":
                 servers["github"] = {
                     "command": "npx",
                     "args": ["-y", "@modelcontextprotocol/server-github"],
                     "env": {"GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_TOKEN}"},
                 }
-            elif platform_choice == "Azure DevOps":
+            elif platform_choice.lower() in ("azuredevops", "azure devops"):
                 servers["azure-devops"] = {
                     "command": "npx",
                     "args": ["-y", "@tiberriver256/mcp-server-azure-devops"],

{datasecops_cli-0.5.3 → datasecops_cli-0.5.5}/src/datasecops_cli/services/download_service.py

@@ -139,6 +139,8 @@ class DownloadService:
             if filename and yaml_content:
                 if platform.lower() == "github":
                     dest = self.project_dir / ".github" / "workflows" / filename
+                elif platform.lower() in ("azuredevops", "azure devops"):
+                    dest = self.project_dir / ".azuredevops" / "workflows" / filename
                 else:
                     dest = self.project_dir / filename
                 write_file(dest, yaml_content)

{datasecops_cli-0.5.3 → datasecops_cli-0.5.5}/src/datasecops_cli/utilities/mcp.py

@@ -1,12 +1,19 @@
 """MCP server configuration utilities."""
 
 import json
+import sys
 from pathlib import Path
 
 from datasecops_cli.utilities.display import get_input_string, success_line
 from datasecops_cli.utilities.file_utils import ensure_dir, write_file
 
 
+def _resolve_mcp_command() -> str:
+    """Resolve the relative path to the datasecops-mcp executable in the project venv."""
+    venv_bin = "Scripts" if sys.platform == "win32" else "bin"
+    return f".venv/{venv_bin}/datasecops-mcp"
+
+
 def build_cortex_mcp_servers(
     servers: list[str],
     connection_name: str,
@@ -16,13 +23,14 @@ def build_cortex_mcp_servers(
 
     Returns a dict suitable for {"mcpServers": ...} JSON output.
     """
+    mcp_command = _resolve_mcp_command()
     server_config = {}
 
     for server in servers:
         if server == "datasecops-framework":
             server_config["datasecops-framework"] = {
                 "type": "stdio",
-                "command": "datasecops-mcp",
+                "command": mcp_command,
                 "args": ["--connection-name", connection_name, "--app-database", app_database],
             }
 

{datasecops_cli-0.5.3 → datasecops_cli-0.5.5}/src/datasecops_mcp/server.py

@@ -64,16 +64,18 @@ def get_work_items_config() -> str:
 def get_linting_rules() -> str:
     """Get the SQLFluff linting rules configured for this project.
 
-    Returns the active SQL linting rules including dialect, indentation settings,
-    and enabled rule codes. Use this when writing or reviewing SQL to ensure
+    Returns the .sqlfluff INI config file content (dialect, indentation settings,
+    and enabled rule codes). Use this when writing or reviewing SQL to ensure
     compliance with the team's standards.
+
+    Returns an empty string if no configuration is found in the native app.
     """
     sf = get_snowflake_service()
-    raw = sf.get_framework_config("SQLFLUFF_RULES")
+    raw = sf.get_sqlfluff_config_file()
     if not raw:
-        return "No SQLFluff rules found in native app"
+        return ""
 
-    return json.dumps(raw, indent=2)
+    return raw
 
 
 @mcp.tool()