datex-studio-cli 0.4.23__tar.gz → 0.4.25__tar.gz

datex_studio_cli-0.4.25/.dockerignore

@@ -0,0 +1,25 @@
+# Context for quartermaster/Dockerfile (built from the repo root).
+.git
+.venv
+**/__pycache__
+.pytest_cache
+.mypy_cache
+.ruff_cache
+.claude
+.serena
+node_modules
+**/node_modules
+src/dxs/web/frontend
+tests
+quartermaster/tests
+quartermaster/.env
+docs
+documentation
+exploration
+examples
+example-reports
+exclude
+skills
+otel
+dist
+*.analysis.md

datex_studio_cli-0.4.25/.github/actionlint.yaml

@@ -0,0 +1,4 @@
+self-hosted-runner:
+  # Repo-scoped ARC scale set on datex-apps-eus (spec §5; CI-only, no cluster access).
+  labels:
+    - arc-dxs

datex_studio_cli-0.4.25/.github/workflows/build-image.yml

@@ -0,0 +1,71 @@
+# Image build + staging digest bump (spec §5, §6). CI runs in-workflow: red
+# tests produce no image. The final step commits the pushed digest to
+# quartermaster/deploy/staging/values.yaml with GITHUB_TOKEN — which natively
+# triggers no further workflow runs, so the rebuild loop is impossible.
+name: Build image
+
+on:
+  push:
+    branches: [main]
+    paths-ignore:
+      - "docs/**"
+      - "**.md"
+  workflow_dispatch:
+
+concurrency:
+  group: build-image-main
+  cancel-in-progress: false
+
+permissions:
+  contents: write
+  packages: write
+
+jobs:
+  ci:
+    uses: ./.github/workflows/ci.yml
+
+  build:
+    needs: ci
+    runs-on: arc-dxs
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v4
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - id: meta
+        run: echo "datetag=$(date -u +%Y%m%d).${{ github.run_number }}" >> "$GITHUB_OUTPUT"
+      - id: build
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: quartermaster/Dockerfile
+          platforms: linux/amd64
+          push: true
+          tags: |
+            ghcr.io/datex/quartermaster:${{ github.sha }}
+            ghcr.io/datex/quartermaster:latest
+            ghcr.io/datex/quartermaster:${{ steps.meta.outputs.datetag }}
+      - name: Commit the staging digest bump
+        run: |
+          digest='${{ steps.build.outputs.digest }}'
+          sed -i -E "s|^  digest:.*|  digest: \"${digest}\"|" quartermaster/deploy/staging/values.yaml
+          if git diff --quiet; then
+            echo "staging already runs ${digest}; nothing to commit"
+            exit 0
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add quartermaster/deploy/staging/values.yaml
+          git commit -m "chore(deploy): staging → ${digest}"
+          for attempt in 1 2 3; do
+            if git push origin HEAD:main; then
+              exit 0
+            fi
+            git pull --rebase origin main
+          done
+          echo "digest bump push failed after 3 attempts" >&2
+          exit 1

datex_studio_cli-0.4.25/.github/workflows/ci.yml

@@ -0,0 +1,55 @@
+# CI (spec §5): two jobs, both always run — the uv workspace couples the CLI
+# and the service. Callable from build-image.yml and release.yml so a red
+# suite produces no image and no release (the pipeline is the gate, not the
+# merge — GitHub Free has no required checks).
+name: CI
+
+on:
+  pull_request:
+    paths-ignore:
+      - "docs/**"
+      - "**.md"
+  workflow_call:
+
+concurrency:
+  group: ci-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  cli:
+    runs-on: arc-dxs
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+      - run: uv python install 3.13
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - name: Build the report renderer bundle (snapshot tests shell out to it)
+        working-directory: src/dxs/web/frontend
+        run: |
+          npm ci
+          npm run build:render-cli
+      - run: uv sync --all-packages --extra dev
+      - run: uv run ruff check .
+      - name: mypy (non-blocking — 21 pre-existing errors, see #171)
+        run: uv run mypy src/dxs
+        continue-on-error: true
+      - run: uv run pytest -q
+
+  service:
+    runs-on: arc-dxs
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+      - run: uv python install 3.13
+      - run: uv sync --all-packages --extra dev
+      - run: uv run ruff check quartermaster
+      - run: uv run --package quartermaster mypy quartermaster/src/quartermaster
+      - run: uv run --package quartermaster pytest quartermaster/tests -q

datex_studio_cli-0.4.25/.github/workflows/promote-prod.yml

@@ -0,0 +1,104 @@
+# Prod promotion by git commit (spec §6): dispatch-only, typed confirmation,
+# moving-ref rejection, GHCR existence preflight, staging-parity assert
+# (promote-what-you-tested). Rollback = re-dispatch the previous digest with
+# the parity override. Actor and inputs are recorded in the run and commit.
+# NOTE: no `environment:` on jobs — the pre-existing `production` environment
+# carries a protected_branches policy no branch can satisfy on this plan.
+name: Promote prod
+
+on:
+  workflow_dispatch:
+    inputs:
+      ref:
+        description: "Immutable image digest (sha256:…) or the git SHA of a staging bump commit"
+        required: true
+      confirm:
+        description: 'Type "promote-to-prod" to confirm'
+        required: true
+      override_parity:
+        description: "Promote even though staging is not currently running this digest (rollbacks)"
+        type: boolean
+        default: false
+
+concurrency:
+  group: promote-prod
+  cancel-in-progress: false
+
+permissions:
+  contents: write
+  packages: read
+
+jobs:
+  promote:
+    runs-on: arc-dxs
+    timeout-minutes: 15
+    steps:
+      - name: Typed confirmation
+        run: |
+          if [ "${{ inputs.confirm }}" != "promote-to-prod" ]; then
+            echo "confirmation mismatch: expected the literal string promote-to-prod" >&2
+            exit 1
+          fi
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - id: resolve
+        name: Resolve digest (moving refs rejected)
+        run: |
+          ref='${{ inputs.ref }}'
+          if echo "$ref" | grep -qE '^sha256:[0-9a-f]{64}$'; then
+            digest="$ref"
+          elif echo "$ref" | grep -qE '^[0-9a-f]{7,40}$'; then
+            digest=$(git show "${ref}:quartermaster/deploy/staging/values.yaml" | awk -F'"' '/^  digest:/ {print $2}')
+            if ! echo "$digest" | grep -qE '^sha256:[0-9a-f]{64}$'; then
+              echo "commit ${ref} carries no staging digest" >&2
+              exit 1
+            fi
+          else
+            echo "ref must be an immutable digest or a git SHA — tags like 'latest' are rejected" >&2
+            exit 1
+          fi
+          echo "digest=${digest}" >> "$GITHUB_OUTPUT"
+      - name: GHCR existence preflight
+        run: |
+          token=$(curl -sf -u "x:${{ secrets.GITHUB_TOKEN }}" \
+            "https://ghcr.io/token?scope=repository:datex/quartermaster:pull" | \
+            sed -E 's/.*"token":"([^"]+)".*/\1/')
+          curl -sf -o /dev/null \
+            -H "Authorization: Bearer ${token}" \
+            -H "Accept: application/vnd.oci.image.index.v1+json, application/vnd.docker.distribution.manifest.v2+json, application/vnd.oci.image.manifest.v1+json" \
+            "https://ghcr.io/v2/datex/quartermaster/manifests/${{ steps.resolve.outputs.digest }}" \
+            || { echo "digest not found in GHCR — nothing to promote" >&2; exit 1; }
+      - name: Staging-parity assert (promote-what-you-tested)
+        run: |
+          staging=$(awk -F'"' '/^  digest:/ {print $2}' quartermaster/deploy/staging/values.yaml)
+          if [ "$staging" != "${{ steps.resolve.outputs.digest }}" ]; then
+            if [ "${{ inputs.override_parity }}" = "true" ]; then
+              echo "parity override: staging runs ${staging}, promoting ${{ steps.resolve.outputs.digest }} anyway"
+            else
+              echo "staging currently runs ${staging}, not the requested digest — pass override_parity for rollbacks" >&2
+              exit 1
+            fi
+          fi
+      - name: Commit the prod digest bump
+        run: |
+          digest='${{ steps.resolve.outputs.digest }}'
+          sed -i -E "s|^  digest:.*|  digest: \"${digest}\"|" quartermaster/deploy/prod/values.yaml
+          if git diff --quiet; then
+            echo "prod already runs ${digest}; nothing to commit"
+            exit 0
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add quartermaster/deploy/prod/values.yaml
+          git commit \
+            -m "chore(deploy): prod → ${digest}" \
+            -m "Promoted by @${{ github.actor }} via promote-prod (ref input: ${{ inputs.ref }})"
+          for attempt in 1 2 3; do
+            if git push origin HEAD:main; then
+              exit 0
+            fi
+            git pull --rebase origin main
+          done
+          echo "prod bump push failed after 3 attempts" >&2
+          exit 1

datex_studio_cli-0.4.25/.github/workflows/release.yml

@@ -0,0 +1,106 @@
+# The CLI's PyPI release lane (spec §5), retiring publish.sh and ~/.pypirc.
+# Two ways in, one publish path:
+#   - tag push vX.Y.Z — versions must already be aligned across pyproject,
+#     __init__, and uv.lock (the uv.lock entry is the one nothing else updates)
+#   - manual dispatch with an optional `version` input — the workflow bumps
+#     pyproject/__init__/uv.lock, commits to main, tags vX.Y.Z, then publishes.
+#     A blank input publishes the version already in the files (the retry lane
+#     for a release that failed after its bump commit landed).
+# Both lanes: full CI → version-agreement assert → frontend build with a hard
+# existence check (the gitignored web/static/ ships via hatch `artifacts`,
+# which silently includes nothing when absent) → uv build + publish via PyPI
+# trusted publishing.
+# Prerequisite: a trusted publisher for this repo/workflow configured on PyPI.
+name: Release to PyPI
+
+on:
+  push:
+    tags: ["v*"]
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "New version (X.Y.Z) — bumps files, commits to main, tags, publishes. Blank — publish the version already in the files."
+        required: false
+        type: string
+
+permissions:
+  contents: read
+
+concurrency:
+  group: release-pypi
+
+jobs:
+  ci:
+    uses: ./.github/workflows/ci.yml
+
+  publish:
+    needs: ci
+    runs-on: arc-dxs
+    timeout-minutes: 30
+    permissions:
+      contents: write # the dispatch lane pushes the bump commit + tag
+      id-token: write # PyPI trusted publishing
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+      - run: uv python install 3.13
+      - name: Bump version, commit, and tag (dispatch with a version input)
+        if: github.event_name == 'workflow_dispatch' && inputs.version != ''
+        env:
+          VERSION: ${{ inputs.version }}
+        run: |
+          set -euo pipefail
+          if [ "${GITHUB_REF}" != "refs/heads/main" ]; then
+            echo "version bumps may only be dispatched from main (got ${GITHUB_REF})" >&2
+            exit 1
+          fi
+          if ! echo "$VERSION" | grep -Eq '^[0-9]+\.[0-9]+\.[0-9]+$'; then
+            echo "version must be X.Y.Z (got '$VERSION')" >&2
+            exit 1
+          fi
+          current=$(grep -m1 '^version = ' pyproject.toml | cut -d'"' -f2)
+          if [ "$VERSION" != "$current" ]; then
+            sed -i "s/^version = \".*\"/version = \"$VERSION\"/" pyproject.toml
+            sed -i "s/^__version__ = \".*\"/__version__ = \"$VERSION\"/" src/dxs/__init__.py
+            uv lock
+            git config user.name "github-actions[bot]"
+            git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+            git add pyproject.toml src/dxs/__init__.py uv.lock
+            git commit -m "Bump version to $VERSION"
+            git push origin HEAD:main
+          fi
+          # The tag push is the reuse guard: it fails if v$VERSION already exists.
+          git tag "v$VERSION"
+          git push origin "v$VERSION"
+      - name: Assert expected version == pyproject == __init__ == uv.lock
+        env:
+          VERSION: ${{ inputs.version }}
+        run: |
+          pyproject=$(grep -m1 '^version = ' pyproject.toml | cut -d'"' -f2)
+          init=$(grep -m1 '__version__' src/dxs/__init__.py | cut -d'"' -f2)
+          lock=$(awk '/^name = "datex-studio-cli"$/ {found=1} found && /^version = / {print; exit}' uv.lock | cut -d'"' -f2)
+          if [ "${GITHUB_EVENT_NAME}" = "push" ]; then
+            expected="${GITHUB_REF#refs/tags/v}"
+          else
+            expected="${VERSION:-$pyproject}"
+          fi
+          echo "expected=${expected} pyproject=${pyproject} __init__=${init} uv.lock=${lock}"
+          if [ "$expected" != "$pyproject" ] || [ "$pyproject" != "$init" ] || [ "$pyproject" != "$lock" ]; then
+            echo "version sources disagree — run 'uv lock' and align all three before releasing" >&2
+            exit 1
+          fi
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - name: Build the web UI (shipped via hatch artifacts)
+        working-directory: src/dxs/web/frontend
+        run: |
+          npm ci
+          npm run build
+      - name: Assert the frontend build actually produced the static export
+        run: test -f src/dxs/web/static/index.html
+      - run: uv build
+      - name: Publish via trusted publishing
+        run: uv publish

{datex_studio_cli-0.4.23 → datex_studio_cli-0.4.25}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: datex-studio-cli
-Version: 0.4.23
+Version: 0.4.25
 Summary: CLI for Datex Studio low-code platform, designed for LLM-based AI agents
 Project-URL: Homepage, https://github.com/datex/datex-studio-cli
 Project-URL: Documentation, https://github.com/datex/datex-studio-cli
@@ -179,13 +179,13 @@ Configuration values are resolved in order:
 
 ```bash
 # View current configuration
-dxs config list
+dxs settings list
 
 # Set a default
-dxs config set default_repo 10
+dxs settings set default_repo 10
 
 # Get a specific value
-dxs config get default_repo
+dxs settings get default_repo
 ```
 
 Configuration stored in `~/.datex/config.yaml`. Credentials stored separately in `~/.datex/credentials.yaml`.
@@ -225,7 +225,7 @@ dxs auth list
 dxs auth switch other-org
 ```
 
-### Configuration (`dxs config`)
+### CLI Settings (`dxs settings`)
 
 | Command | Description |
 |---------|-------------|

{datex_studio_cli-0.4.23 → datex_studio_cli-0.4.25}/README.md

@@ -126,13 +126,13 @@ Configuration values are resolved in order:
 
 ```bash
 # View current configuration
-dxs config list
+dxs settings list
 
 # Set a default
-dxs config set default_repo 10
+dxs settings set default_repo 10
 
 # Get a specific value
-dxs config get default_repo
+dxs settings get default_repo
 ```
 
 Configuration stored in `~/.datex/config.yaml`. Credentials stored separately in `~/.datex/credentials.yaml`.
@@ -172,7 +172,7 @@ dxs auth list
 dxs auth switch other-org
 ```
 
-### Configuration (`dxs config`)
+### CLI Settings (`dxs settings`)
 
 | Command | Description |
 |---------|-------------|

{datex_studio_cli-0.4.23 → datex_studio_cli-0.4.25}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "datex-studio-cli"
-version = "0.4.23"
+version = "0.4.25"
 description = "CLI for Datex Studio low-code platform, designed for LLM-based AI agents"
 readme = "README.md"
 license = "MIT"
@@ -102,8 +102,12 @@ exclude = [
     "uv.lock",
     "src/dxs/web/frontend/",
     "example-reports/",
+    "quartermaster/",
 ]
 
+[tool.uv.workspace]
+members = ["quartermaster"]
+
 [tool.ruff]
 target-version = "py310"
 line-length = 100
@@ -153,6 +157,8 @@ addopts = "-v --tb=short"
 markers = [
     "fidelity: cross-engine SSIM fidelity tests (require agent-browser + ARJS)",
     "internal_commands_gated: exercise the devops/crm visibility gate (no DXS_INTERNAL_COMMANDS override)",
+    "real_auth_state: exercise real auth state (no injected DXS_ACCESS_TOKEN; the variable is scrubbed)",
+    "telemetry_live: run without the suite-wide DXS_TELEMETRY=0 kill-switch",
 ]
 
 [tool.coverage.run]

{datex_studio_cli-0.4.23 → datex_studio_cli-0.4.25}/src/dxs/__init__.py

@@ -1,4 +1,4 @@
 """Datex Studio CLI - Command-line interface for Datex Studio platform."""
 
-__version__ = "0.4.23"
+__version__ = "0.4.25"
 __app_name__ = "dxs"

{datex_studio_cli-0.4.23 → datex_studio_cli-0.4.25}/src/dxs/cli.py

@@ -111,6 +111,13 @@ CONTEXT_SETTINGS = {
 }
 
 
+# Alias names that resolve but stay out of --help. A command registered under two
+# names shares one Command object, so per-name ``hidden`` is impossible — the
+# listing filter in DxsGroup is what hides the alias. Currently: ``config`` is a
+# compatibility alias for ``settings`` (canonical since the rename).
+HIDDEN_COMMAND_ALIASES = frozenset({"config"})
+
+
 class DxsGroup(click.Group):
     """Custom Group that shows global options in subcommand help.
 
@@ -124,8 +131,12 @@ class DxsGroup(click.Group):
         return cmd_name in DATEX_INTERNAL_COMMANDS and not internal_commands_available()
 
     def list_commands(self, ctx: click.Context) -> list[str]:
-        """List visible subcommands, omitting unavailable Datex-internal groups."""
-        return [name for name in super().list_commands(ctx) if not self._is_gated(name)]
+        """List visible subcommands, omitting hidden aliases and gated groups."""
+        return [
+            name
+            for name in super().list_commands(ctx)
+            if name not in HIDDEN_COMMAND_ALIASES and not self._is_gated(name)
+        ]
 
     def get_command(self, ctx: click.Context, cmd_name: str) -> click.Command | None:
         """Resolve a subcommand, refusing unavailable Datex-internal groups."""
@@ -329,7 +340,7 @@ def cli(
         dxs auth login
         dxs source log --repo 10
         dxs source history userGrid --branch 100
-        dxs config list
+        dxs settings list
         dxs --tenant MGD schema entities        # run one command as another identity
 
     \b
@@ -489,7 +500,7 @@ def handle_errors(f: F) -> F:
         try:
             return ctx.invoke(f, *args, **kwargs)
         except DxsError as e:
-            _record_error_silently(e)
+            _record_error_silently(e, dxs_ctx)
             dxs_ctx.output_error(e)
             sys.exit(1)
         except (click.ClickException, click.Abort, click.exceptions.Exit):
@@ -498,19 +509,24 @@ def handle_errors(f: F) -> F:
             # not errors and must not be rendered as error envelopes.
             raise
         except Exception as e:
-            _record_error_silently(e)
+            _record_error_silently(e, dxs_ctx)
             dxs_ctx.output_error(e)
             sys.exit(1)
 
     return cast(F, wrapper)
 
 
-def _record_error_silently(exc: BaseException) -> None:
-    """Emit a telemetry error event; never raises."""
+def _record_error_silently(exc: BaseException, dxs_ctx: "DxsContext | None" = None) -> None:
+    """Emit a telemetry error event; never raises.
+
+    ``dxs_ctx`` is available on the handle_errors path and supplies the same
+    ``ctx_*`` slices success events carry; errors escaping to main() arrive
+    after Click tears the context down and go out without them.
+    """
     try:
         from dxs.core.telemetry import record_error
 
-        record_error(exc)
+        record_error(exc, ctx_extras=_ctx_extras(dxs_ctx))
     except Exception:  # noqa: BLE001
         pass
 
@@ -546,8 +562,10 @@ def register_commands() -> None:
     cli.add_command(api.api)
     cli.add_command(auth.auth)
     cli.add_command(init.init)
-    cli.add_command(config.config)
     cli.add_command(config.config, name="settings")
+    # Compatibility alias — resolves but is hidden from --help via
+    # HIDDEN_COMMAND_ALIASES, since both names share one Command object.
+    cli.add_command(config.config)
     cli.add_command(configuration.configuration)
     cli.add_command(crm.crm)
     cli.add_command(datasource.datasource)
@@ -743,7 +761,8 @@ def update_cmd(yes: bool, check_only: bool) -> None:
     try:
         from dxs.core.telemetry import record_end
 
-        record_end(exit_code=0, ctx_extras={})
+        dxs_ctx = click.get_current_context().find_object(DxsContext)
+        record_end(exit_code=0, ctx_extras=_ctx_extras(dxs_ctx))
     except Exception:  # noqa: BLE001
         pass
     try:

{datex_studio_cli-0.4.23 → datex_studio_cli-0.4.25}/src/dxs/commands/auth.py

@@ -105,7 +105,7 @@ def _run_targeted_consent(ctx: DxsContext, resource_key: str) -> None:
                     ),
                     code="DXS-DYNAMICS-CONFIG-001",
                     suggestions=[
-                        "Run: dxs config set dynamics_crm_url https://yourorg.crm.dynamics.com",
+                        "Run: dxs settings set dynamics_crm_url https://yourorg.crm.dynamics.com",
                         "Then re-run: dxs auth login --consent crm",
                     ],
                 )

{datex_studio_cli-0.4.23 → datex_studio_cli-0.4.25}/src/dxs/commands/branch.py

@@ -22,6 +22,7 @@ from dxs.core.api import (
     BranchEndpoints,
     RepoEndpoints,
     SourceControlEndpoints,
+    fetch_replacements,
     fetch_settings,
 )
 from dxs.core.api.models import (
@@ -1047,7 +1048,7 @@ def search(ctx: DxsContext, query: str, repo: int | None) -> None:
             suggestions=[
                 "Use --repo flag: dxs branch search 'query' --repo 10",
                 "Set environment variable: export DXS_REPO=10",
-                "Set config default: dxs config set default_repo 10",
+                "Set config default: dxs settings set default_repo 10",
             ],
         )
 
@@ -1137,7 +1138,9 @@ def replacements(ctx: DxsContext, branch_id: int) -> None:
     """Show configuration replacements.
 
     Lists all configuration replacements (customizations from component modules)
-    for a branch.
+    for a branch. Each entry names the replaced config
+    (``referenceName`` + ``applicationReferenceName``) and the config replacing
+    it (``replacementReferenceName`` + ``replacementApplicationReferenceName``).
 
     \b
     Arguments:
@@ -1150,11 +1153,7 @@ def replacements(ctx: DxsContext, branch_id: int) -> None:
     client = ApiClient()
     ctx.log(f"Fetching replacements for branch {branch_id}...")
 
-    replacements_data = client.get(BranchEndpoints.replacements(branch_id))
-
-    # Normalize to list if not already
-    if not isinstance(replacements_data, list):
-        replacements_data = [replacements_data] if replacements_data else []
+    replacements_data = fetch_replacements(client, branch_id)
 
     ctx.output(
         list_response(items=replacements_data, semantic_key="replacements", branch_id=branch_id)

{datex_studio_cli-0.4.23 → datex_studio_cli-0.4.25}/src/dxs/commands/cascade.py

@@ -482,7 +482,7 @@ def execute_cascade_plan(
                             "Check the package's published versions, then resume the remaining "
                             "nodes with 'cascade run --select'.",
                             "If local builds are slow, raise the publish timeout: "
-                            "dxs config set publish_timeout <seconds>.",
+                            "dxs settings set publish_timeout <seconds>.",
                         ],
                     ) from e
                 new_version: str | None = requested_version