[maxlastglance]

The Python client still calls removed catalog and CSV analysis APIs, expects the old statistics response, and has no working route for current-user access lookup.

Four separate commits address the live findings:

• Python catalog methods call endpoints that return HTTP 404 #175: retired registry calls raise an actionable error without HTTP requests. The README explains column URI metadata and the absence of a replacement ontology registry. This follows the maintainer's decision to retire the removed APIs.
• Python datatype and key analysis methods use unavailable API paths #176: add engine-specific analyse_schema and adapt datatype/key helpers to it. Reject unsupported enum overrides explicitly. Route image schema analysis to Data-Service before generic image metadata routing in Compose and Helm (The gateway sends image schema analysis requests to the Metadata Service #147).
• Python database access-list method calls an unavailable endpoint #177: add authenticated current-user access lookup. Owners receive write_all; members receive their own grant; anonymous callers and missing grants are rejected. No caller-supplied username selects another identity.
• Python table statistics method uses an unavailable analysis route #178: use GET /database/{id}/table/{id}/statistic with HTTP 200. Convert the server's column list to the documented SDK mapping and preserve authorization errors.

Closes #175. Closes #176. Closes #177. Closes #178. Closes #147.

Validation: 341 SDK unit tests passed locally. Four standalone Metadata endpoint tests passed for owner/member/missing-grant/anonymous cases. Schema tests cover upload and authenticated analysis, explicit/default/sole-image selection, candidate scores, rejected unsupported switches and routing precedence in both gateway configurations. The live user profile against a separate candidate Metadata instance and internal gateway on s93 reports 104 passed/11 failed, versus 100/15 before this batch. All four newly supported cases pass and no previously passing case fails. Three remaining raw failures are the explicitly retired catalog calls; eight belong to other open findings. Candidate containers and their temporary credentials were removed afterward. All PR checks now pass on the final review head; image publishing is intentionally skipped for pull requests. The earlier missing OpenAPI 403/404 declarations were corrected within the isolated #177 commit, and the complete suite passed on rerun.

The live check used a candidate JAR on the existing runtime image and a candidate gateway config; all 577 bundled core classes match a build from the candidate source. The persistent s93 deployment remains on its existing version. Removed catalog functions must be reported as unsupported, never counted as successful catalog reads. Hold merge until the maintainer has reviewed the four commits.

[maxlastglance]

The Metadata suite exposed missing 403/404 OpenAPI response declarations on the new current-access endpoint (1074 tests, one assertion failure). The declarations are now included in the isolated #177 commit. The existing response-contract check and the four access tests pass locally after the correction; CI is running again.

The PR still contains four commits. The live-tested Python code and endpoint business logic are unchanged. The current review head is 6edd6f42dc5e7fb152d8eccf5458f858fa9f31db. Merge remains on hold for maintainer approval.