db-agent-kit 0.2.0__tar.gz

db_agent_kit-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,25 @@
+name: ci
+# Public repo, untrusted PRs: pull_request only (never pull_request_target), no secrets, no databases, hosted runners only.
+on:
+  pull_request:
+  push:
+    branches: [main]
+permissions:
+  contents: read
+jobs:
+  test:
+    runs-on: ubuntu-24.04
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - run: pip install -e ".[dev]"
+      - run: pytest -q --ignore=tests/integration
+      - run: db-agent engines

db_agent_kit-0.2.0/.github/workflows/release.yml

@@ -0,0 +1,87 @@
+name: release
+# Publishes to PyPI with Trusted Publishing (OIDC): no API token is stored anywhere.
+# One-time setup on pypi.org: Your projects > Publishing > add a (pending) publisher with project name db-agent-kit,
+#   owner/repo = db-agent/db-agent-kit, workflow = release.yml, environment = pypi
+# For the TestPyPI dry run, do the same on test.pypi.org with environment = testpypi.
+on:
+  push:
+    tags: ["v*"]
+  workflow_dispatch:
+    inputs:
+      target:
+        description: "Where to publish"
+        type: choice
+        options: [testpypi, pypi]
+        default: testpypi
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: pip install build twine
+      - name: Tag must match the package version
+        if: startsWith(github.ref, 'refs/tags/v')
+        run: |
+          INIT=$(python -c "import re,pathlib;print(re.search(r'__version__ = \"(.+?)\"', pathlib.Path('src/db_agent/__init__.py').read_text()).group(1))")
+          TOML=$(python -c "import tomllib;print(tomllib.load(open('pyproject.toml','rb'))['project']['version'])")
+          [ "$INIT" = "$TOML" ] || { echo "__init__ $INIT != pyproject $TOML"; exit 1; }
+          [ "v$TOML" = "${GITHUB_REF_NAME}" ] || { echo "tag ${GITHUB_REF_NAME} != version v$TOML"; exit 1; }
+      - run: python -m build
+      - run: twine check --strict dist/*
+      - name: Only db_agent is installed, and no keys or output files are shipped
+        run: |
+          unzip -l dist/*.whl | awk '{print $4}' | grep -E '^[a-z_]+/' | cut -d/ -f1 | sort -u | grep -vE '^(db_agent|db_agent_kit-.*\.dist-info)$' && { echo "unexpected top-level in wheel"; exit 1; } || true
+          ! (unzip -l dist/*.whl; tar tzf dist/*.tar.gz) | grep -E '\.(pem|env|xlsx)$|(^|/)\.env|-output/'
+      - name: Install the wheel in a clean venv and run it
+        run: |
+          python -m venv /tmp/smoke && /tmp/smoke/bin/pip install dist/*.whl
+          /tmp/smoke/bin/db-agent engines
+          /tmp/smoke/bin/db-agent sqlserver --help
+          /tmp/smoke/bin/db-agent databricks --help
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish-testpypi:
+    if: github.event_name == 'workflow_dispatch' && inputs.target == 'testpypi'
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: testpypi
+      url: https://test.pypi.org/p/db-agent-kit
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
+
+  publish-pypi:
+    if: startsWith(github.ref, 'refs/tags/v') || (github.event_name == 'workflow_dispatch' && inputs.target == 'pypi')
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/db-agent-kit
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1

db_agent_kit-0.2.0/.gitignore

@@ -0,0 +1,10 @@
+.venv/
+__pycache__/
+*.pyc
+db-agent-sqlserver-output/
+private_out/
+.pytest_cache/
+dist/
+build/
+*.egg-info/
+/data/

db_agent_kit-0.2.0/CHANGELOG.md

@@ -0,0 +1,30 @@
+# Changelog
+
+## 0.2.0 (2026-11-07)
+
+First release.
+
+### Added
+
+- One `db-agent` command with a command group per engine: `db-agent <engine> <verb>`. `db-agent engines` lists the engines and `db-agent version` prints the version.
+- `sqlserver` engine, for SQL Server 2016/2017 upgrades and SSRS to Power BI moves:
+  - `inventory`: version, edition, databases, tables, row counts from metadata, views, procedures, linked servers and Agent jobs, with upgrade risks and a link to the Microsoft page for each.
+  - `ssrs`: every report with its data sources, datasets, parameters, subreports, subscriptions and usage. Each report is classified as move, review or retire, with the reason. It reads the ReportServer database or a folder of `.rdl` files.
+  - `validate`: runs each "move" report's queries on the old and new server and compares row counts and totals.
+  - `report`: combines the outputs into `summary.html` and an Excel workbook. Output formats are md, json, xlsx and html.
+  - Windows authentication through ODBC (`--driver odbc`, optional `odbc` extra).
+- `databricks` engine, `health` command: runtimes past or near end of support, legacy dependencies (Hive metastore tables, DBFS mount events, init scripts on DBFS, clusters without a Unity Catalog access mode), DBU spend by month at list price, and spend waste (scheduled jobs on all-purpose clusters, clusters without auto-termination, idle SQL warehouses, untagged spend).
+- Read-only guards:
+  - SQL Server: one statement only, a `SELECT` or `WITH ... SELECT`, or a stored procedure you name with `--allow-exec`. Anything else is refused, including `SELECT INTO`, `OPENROWSET` and linked-server names. A test checks that no module except `db.py` touches a driver.
+  - Databricks: REST list and get calls only. SQL is limited to `SELECT`/`WITH` and `SHOW ... IN hive_metastore`. A test checks that only `client.py` imports the SDK.
+  - Permissions for a least-privilege SQL Server login are in `docs/permissions.md`.
+- Sample data in `examples/`: 12 sample reports and a synthetic usage log, for a demo that needs no database (`make demo-files`).
+
+### Changed
+
+- The project started as the single-engine `db-agent-sqlserver` package. It is now the `db_agent` package with engines under `db_agent.engines`.
+- The repository is named `db-agent-kit`.
+
+### Testing
+
+What was tested, and what was not, is in `docs/testing.md` and `docs/databricks-health.md`. The Databricks engine was live-tested on one small AWS workspace only.

db_agent_kit-0.2.0/CONTRIBUTING.md

@@ -0,0 +1,17 @@
+# Contributing
+
+```bash
+python3 -m venv .venv && .venv/bin/pip install -e ".[dev]"
+make test          # no database needed
+```
+
+## Release
+
+1. Bump the version in **both** `pyproject.toml` and `src/db_agent/__init__.py`, and date the entry in `CHANGELOG.md`.
+2. Merge to `main`, then tag `vX.Y.Z` on `main`. The `release` workflow builds, runs `twine check --strict`, checks the tag
+   equals both version strings, installs the wheel in a clean venv, and publishes to PyPI with Trusted Publishing (no tokens).
+   Use the manual `testpypi` run first for a dry run.
+3. One time: on pypi.org add a (pending) publisher for project `db-agent-kit`, repo `db-agent/db-agent-kit`, workflow `release.yml`, environment `pypi`
+   (and the same on test.pypi.org with environment `testpypi`). Create the matching environments in the GitHub repo settings.
+
+Never publish by hand.

db_agent_kit-0.2.0/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

db_agent_kit-0.2.0/Makefile

@@ -0,0 +1,31 @@
+# make demo-files   no database needed: reads the sample reports and the synthetic usage log
+# make demo         full demo: needs the containers (see README), runs all four commands
+PY ?= .venv/bin/python
+CLI = $(PY) -m db_agent.cli sqlserver
+OUT ?= db-agent-sqlserver-output
+export DBAGENT_SQL_PASSWORD ?= DbAgent_Demo_2017!
+export DBAGENT_SOURCE_PASSWORD ?= DbAgent_Demo_2017!
+export DBAGENT_TARGET_PASSWORD ?= DbAgent_Demo_2017!
+DB = AdventureWorks2017
+
+test:
+	$(PY) -m pytest -q --ignore=tests/integration
+
+test-live:
+	DBAGENT_TEST_SERVER=localhost $(PY) -m pytest -q
+
+examples:
+	$(PY) examples/generate_examples.py
+
+demo-files: examples
+	$(CLI) ssrs --rdl-folder examples/rdl --usage-csv examples/usage.csv --out $(OUT)
+	open $(OUT)/summary.html
+
+demo: examples
+	$(CLI) inventory --server localhost --port 14331 --user sa --no-encrypt --databases $(DB) --out $(OUT)
+	$(CLI) ssrs --rdl-folder examples/rdl --usage-csv examples/usage.csv --data-database $(DB) --server localhost --port 14331 --user sa --no-encrypt --out $(OUT)
+	$(CLI) validate --source "server=localhost,port=14331,database=$(DB),user=sa,encrypt=no" --target "server=localhost,port=14332,database=$(DB),user=sa,encrypt=no" --reports $(OUT)/reports.csv --allow-exec --out $(OUT)
+	$(CLI) report --out $(OUT)
+	open $(OUT)/summary.html
+
+.PHONY: test test-live examples demo-files demo

db_agent_kit-0.2.0/PKG-INFO

@@ -0,0 +1,192 @@
+Metadata-Version: 2.5
+Name: db-agent-kit
+Version: 0.2.0
+Summary: Read-only DBA toolkit CLI: SQL Server 2016/2017 upgrade and SSRS to Power BI inventory, Databricks workspace health and DBU cost checks.
+Project-URL: Homepage, https://github.com/db-agent/db-agent-kit
+Project-URL: Documentation, https://github.com/db-agent/db-agent-kit/tree/main/docs
+Project-URL: Issues, https://github.com/db-agent/db-agent-kit/issues
+Project-URL: Text-to-SQL agent, https://github.com/db-agent/db-agent
+Project-URL: Fixed-price help, https://becloudready.com/sql-server
+License-Expression: Apache-2.0
+License-File: LICENSE
+Keywords: azure-sql,cli,database-inventory,database-migration,databricks,dba,dbu-cost,end-of-life,migration-assessment,power-bi,sql-server,sql-server-upgrade,ssrs,unity-catalog
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Information Technology
+Classifier: Intended Audience :: System Administrators
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Database
+Classifier: Topic :: System :: Systems Administration
+Classifier: Topic :: Utilities
+Requires-Python: >=3.11
+Requires-Dist: databricks-sdk>=0.40
+Requires-Dist: jinja2>=3.1
+Requires-Dist: lxml>=5
+Requires-Dist: openpyxl>=3.1
+Requires-Dist: pandas>=2.2
+Requires-Dist: pymssql>=2.3
+Requires-Dist: pyyaml>=6
+Requires-Dist: sqlglot>=25
+Requires-Dist: typer>=0.12
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == 'dev'
+Provides-Extra: odbc
+Requires-Dist: pyodbc>=5; extra == 'odbc'
+Description-Content-Type: text/markdown
+
+# db-agent CLI: read-only DBA toolkit for SQL Server, SSRS and Databricks
+
+Check a database before you upgrade, migrate or pay for another year of it. db-agent only reads, and writes a report you can hand to a manager: SQL Server 2016/2017 upgrade risks, an SSRS to Power BI report inventory, and Databricks workspace health with DBU spend. One command per engine. Nothing is changed on any server.
+
+Looking for the text-to-SQL agent? See [db-agent/db-agent](https://github.com/db-agent/db-agent).
+
+```
+db-agent <engine> <verb>
+db-agent engines          # what is implemented and what is planned
+```
+
+| Engine | Status | Verbs |
+|---|---|---|
+| `sqlserver` | available | `inventory`, `ssrs`, `validate`, `report` |
+| `databricks` | available; live-tested on one small AWS workspace only, see the docs | `health` ([docs](https://github.com/db-agent/db-agent-kit/blob/main/docs/databricks-health.md)) |
+
+Each engine is described below. To add one, see [docs/adding-an-engine.md](https://github.com/db-agent/db-agent-kit/blob/main/docs/adding-an-engine.md).
+
+## db-agent sqlserver: inventory SQL Server and SSRS reports before you upgrade or move to Power BI
+
+SQL Server 2016 reached end of support on July 14, 2026. SQL Server 2017 follows on October 12, 2027.
+If you run SSRS (SQL Server Reporting Services) on either, you have two jobs: upgrade the database
+server, and decide what happens to every report. This command line tool does the **SSRS migration
+inventory** and the upgrade check, **read-only**. It lists your databases and reports, flags what will
+break, sorts each report into **move**, **review** or **retire**, checks results after a move, and writes
+a report you can hand to a manager or a client. It is the first step of an **SSRS to Power BI** move.
+
+*Part of the [db-agent](https://github.com/db-agent) project.* Apache-2.0.
+
+![Sample summary report](https://raw.githubusercontent.com/db-agent/db-agent-kit/main/docs/images/summary.png)
+
+## What it does
+
+| Command | What you get |
+|---|---|
+| `sqlserver inventory` | Version, edition, databases, tables, row counts (from metadata), views, procedures with code, linked servers, Agent jobs. **Upgrade risks**, each with a link to the Microsoft page it comes from. |
+| `sqlserver ssrs` | Every report: data sources, datasets, tables and procedures used, parameters, subreports, custom code, subscriptions, usage. Each report is **move**, **review** or **retire** with the reason. |
+| `sqlserver validate` | Runs each "move" report's queries on the old and new server and compares row counts and totals. |
+| `sqlserver report` | One printable `summary.html` and one Excel workbook with all of it. |
+
+## Install
+
+```bash
+pip install db-agent-kit      # after the first PyPI release
+```
+
+From source (Python 3.11 or newer):
+
+```bash
+git clone https://github.com/db-agent/db-agent-kit && cd db-agent-kit
+python3 -m venv .venv && .venv/bin/pip install -e .
+```
+
+A Docker image and a Windows single-file `.exe` do not exist yet.
+
+## 5-minute demo (no database needed)
+
+Run this from the source checkout (see Install):
+
+```bash
+make demo-files
+```
+
+This reads 12 sample reports and a synthetic usage log (`examples/`, clearly labelled sample data) and
+opens `summary.html`. You will see 5 move, 5 review and 2 retire, each with a reason.
+
+To also see `inventory` and `validate`, start two SQL Server containers, restore the AdventureWorks
+sample database and run `make demo`. See [docs/demo.md](https://github.com/db-agent/db-agent-kit/blob/main/docs/demo.md).
+
+## Use it
+
+Run it as `db-agent sqlserver <command>`.
+
+```bash
+db-agent sqlserver inventory --server sql01 --user dbagent_reader          # password: env DBAGENT_SQL_PASSWORD or a prompt
+db-agent sqlserver ssrs --reportserver-db ReportServer --server sql01 --user dbagent_reader
+db-agent sqlserver ssrs --rdl-folder ./reports --usage-csv executionlog.csv       # no server access needed
+db-agent sqlserver validate --source "server=old,database=Sales,user=u" --target "server=new,database=Sales,user=u" --reports db-agent-sqlserver-output/reports.csv
+db-agent sqlserver report
+```
+
+Output goes to `./db-agent-sqlserver-output` (change with `--out`). Windows authentication needs `--driver odbc`,
+`pip install ".[odbc]"` and a Microsoft ODBC driver for SQL Server. The tool finds driver 18, 17 or 13 on its own; set
+`DBAGENT_ODBC_DRIVER` to force one. It was tested with driver 17 and a local Windows account (NTLM). Domain (Kerberos)
+logins and Microsoft Entra ID were not tested.
+
+## What your DBA needs to grant
+
+A dedicated login with read access to metadata and the ReportServer catalog. Nothing that can write.
+The exact T-SQL script is in [docs/permissions.md](https://github.com/db-agent/db-agent-kit/blob/main/docs/permissions.md).
+
+## Sample output
+
+`reports.csv`, one row per report (a few of the columns; run counts move with the date you run it):
+
+| path | classification | runs_365 | last_run | reasons |
+|---|---|---|---|---|
+| /Inventory/BillOfMaterials | move | 41 | 2026-11-03 | Plain report, no hard-to-move features |
+| /HR/EmployeeDirectory | review | 12 | 2026-11-02 | Custom code block (3 lines) |
+| /Purchasing/VendorSpend | review | 50 | 2026-11-04 | Dataset SQL could not be fully parsed (Spend); table list is a guess |
+| /Inventory/LegacyInventory | retire | 0 | | No runs in the last 365 days (log covers 522 days) |
+
+## What it does not do
+
+- It does **not convert reports.** It tells you what to move and what is hard. A layout hint says which reports look like Power BI paginated reports and which look like an interactive rebuild. It is a hint only.
+- It does **not read business data** during `inventory` or `ssrs`. Row counts come from system views.
+- `validate` is the one command that runs report queries. It keeps **only row counts and numeric totals**, never row values, and only on a login you choose to give read access to.
+- It does **not change anything** on any server, and sends nothing over the network except to the SQL Servers you name.
+
+## FAQ
+
+**Is it safe?** Every statement goes through one guard that allows a single `SELECT` (or, with `--allow-exec`, a stored procedure you named). `SELECT ... INTO`, `OPENROWSET`, linked servers and anything it cannot parse are refused. Tests check that no command can bypass it. The login's permissions are the real boundary: give it only what [docs/permissions.md](https://github.com/db-agent/db-agent-kit/blob/main/docs/permissions.md) lists.
+
+**What access does it need?** See above. For `ssrs` without database access, export the `.rdl` files and the execution log and run it on a laptop.
+
+**Does it work with Azure SQL?** It reads Azure SQL Database and Managed Instance for `inventory` and flags what would not work there. Tested against one Azure SQL Database (AdventureWorksLT); Managed Instance is not tested.
+
+**What about Power BI paginated reports?** Reports are classified by what is hard to move, not converted. The hint column says which look paginated. Check Microsoft's current paginated report limits for your reports.
+
+**Why are no reports marked retire?** SSRS keeps its usage log for 60 days by default. A report that runs once a year looks unused in a 60-day log. The kit only calls a report retire when the log covers 365 days, and says so. See [docs/ssrs-inventory.md](https://github.com/db-agent/db-agent-kit/blob/main/docs/ssrs-inventory.md).
+
+**Where does my data go?** Nowhere. Everything is written to a local folder. Object code (`modules.json`) can contain secrets: skip it with `--no-code`.
+
+## db-agent databricks: workspace health and DBU spend
+
+```bash
+databricks auth login --host https://<workspace>.cloud.databricks.com
+db-agent databricks health                       # uses a SQL warehouse that is already running
+db-agent databricks health --profile <name> --warehouse-id <id> --out ./out
+db-agent databricks health --no-sql              # REST API checks only, no warehouse needed
+```
+
+It reads the REST API and system tables and changes nothing. It checks:
+
+- Clusters and job clusters on runtimes past end of support, or within 180 days of it (`--eos-warning-days`). In the built-in table, 13.3 LTS ended on 2026-08-22 and 14.3 LTS ends on 2027-02-01.
+- Legacy dependencies: Hive metastore tables, DBFS mount events, init scripts stored on DBFS, and clusters without a Unity Catalog access mode.
+- DBU spend by month at list price, split into usage and price change, with a note when the SKU tier changes.
+- Spend waste: scheduled jobs on all-purpose clusters, clusters with auto-termination off, SQL warehouses billed with no queries or with auto-stop off, and spend with no tags.
+
+Live-tested on one small AWS workspace only. See [docs/databricks-health.md](https://github.com/db-agent/db-agent-kit/blob/main/docs/databricks-health.md) for options, access needed and limits.
+
+## Status
+
+Version 0.2.0. What was tested is listed in [docs/testing.md](https://github.com/db-agent/db-agent-kit/blob/main/docs/testing.md):
+
+- `sqlserver`: real SQL Server 2017 and 2022 (Linux, Docker), real SQL Server 2016 SP3 with a real SSRS 2016 server (Windows VM), and `inventory` on one Azure SQL Database (AdventureWorksLT). ODBC with Windows authentication was tested with a local account.
+- `databricks`: one small AWS workspace. See [docs/databricks-health.md](https://github.com/db-agent/db-agent-kit/blob/main/docs/databricks-health.md).
+- Not tested: SSRS 2017 and later, Power BI Report Server, domain (Kerberos) authentication, Entra ID, Azure SQL Managed Instance.
+
+[Upgrade risk rules](https://github.com/db-agent/db-agent-kit/blob/main/docs/risk-rules.md) · [SSRS inventory](https://github.com/db-agent/db-agent-kit/blob/main/docs/ssrs-inventory.md) · [Permissions](https://github.com/db-agent/db-agent-kit/blob/main/docs/permissions.md) · [Examples](https://github.com/db-agent/db-agent-kit/blob/main/examples/README.md)
+
+Need the upgrade and report move done for you at a fixed price? [becloudready.com/sql-server](https://becloudready.com/sql-server)