bt-cli 0.4.21__tar.gz → 0.4.23__tar.gz

bt_cli-0.4.23/.env.bak

@@ -0,0 +1,20 @@
+# Password Safe
+BT_PWS_API_URL=https://semcp.ps-dev.beyondtrustcloud.com/BeyondTrust/api/public/v3
+BT_PWS_CLIENT_ID=d3b50b99-1650-4ddb-b00b-7fc27b963976
+BT_PWS_CLIENT_SECRET=/tUEmXpUrfy4K71Cqx29XemZomNCkWogYvLs5r0w9m8=
+BT_PWS_VERIFY_SSL=true
+BT_PWS_TIMEOUT=30
+
+# Entitle
+BT_ENTITLE_API_KEY=Y2MxOTZkYmUtYTNhMy00OWY2LWFiMjAtYmY4ZmY1NWQ4YzYyOmM2ZWExYzJmNzA3YTUwNTBhNTdiYTcwNzEwN2I3NWExYTUxNGRiMDQ2ODEwZjU0ZjUyNDYzOTk4ODQ2NzI5ZGQ=
+BT_ENTITLE_API_URL=https://api.us.entitle.io
+
+# PRA
+BT_PRA_API_URL=https://pffd51d9.beyondtrustcloud.com
+BT_PRA_CLIENT_ID=2273892cd25ede1a4b3e80a40b39edc04385ddd0
+BT_PRA_CLIENT_SECRET=FVy0tNYZXDbLyQCRPTPSSWkrksWsflVj2wG7aCceirU=
+
+# EPM Windows
+BT_EPM_API_URL=https://pfsedemo-services.epm.bt3ng.com
+BT_EPM_CLIENT_ID=19f4e85faae14c5399479a87d23a258a
+BT_EPM_CLIENT_SECRET=00DndV2PrHllPwQySgRZqyvQY9jbIDLjEuXrG8I0TcA=

{bt_cli-0.4.21 → bt_cli-0.4.23}/CLAUDE.md

@@ -1,6 +1,6 @@
 # BT-CLI
 
-BeyondTrust Platform CLI for Password Safe, Entitle, PRA, and EPM Windows. **Version: 0.4.21**
+BeyondTrust Platform CLI for Password Safe, Entitle, PRA, and EPM Windows. **Version: 0.4.23**
 
 ## Setup
 

{bt_cli-0.4.21 → bt_cli-0.4.23}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bt-cli
-Version: 0.4.21
+Version: 0.4.23
 Summary: BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM
 Author-email: Dave Grendysz <dgrendysz@beyondtrust.com>
 License: MIT

{bt_cli-0.4.21 → bt_cli-0.4.23}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "bt-cli"
-version = "0.4.21"
+version = "0.4.23"
 description = "BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM"
 readme = "README.md"
 requires-python = ">=3.9"

{bt_cli-0.4.21 → bt_cli-0.4.23}/src/bt_cli/__init__.py

@@ -1,3 +1,3 @@
 """BeyondTrust Unified Admin CLI."""
 
-__version__ = "0.4.21"
+__version__ = "0.4.23"

{bt_cli-0.4.21 → bt_cli-0.4.23}/src/bt_cli/epmw/commands/quick.py

@@ -10,6 +10,7 @@ from rich.console import Console
 from rich.table import Table
 
 from ...core.output import print_api_error, print_error, print_warning, print_success
+from ...core.prompts import prompt_from_list
 
 app = typer.Typer(no_args_is_help=True, help="Quick commands - common multi-step operations in one command")
 console = Console()
@@ -346,3 +347,180 @@ def group_status(
     except Exception as e:
         print_api_error(e, "quick status")
         raise typer.Exit(1)
+
+
+@app.command("move-computer")
+def move_computer(
+    computer: Optional[str] = typer.Option(None, "--computer", "-c", help="Computer name or ID (partial match for name)"),
+    group: Optional[str] = typer.Option(None, "--group", "-g", help="Target group name or ID"),
+    force: bool = typer.Option(False, "--force", "-f", help="Skip confirmation"),
+    output: str = typer.Option("table", "--output", "-o", help="Output format: table or json"),
+) -> None:
+    """Move a computer to a different group.
+
+    Interactive workflow to change a computer's group membership.
+    Lists computers (optionally filtered), then lists available groups,
+    and moves the selected computer to the selected group.
+
+    Examples:
+        bt epmw quick move-computer                           # Interactive selection
+        bt epmw quick move-computer -c "CorpWS01"             # Filter by computer name
+        bt epmw quick move-computer -c "CorpWS01" -g "Servers"  # Specify both
+        bt epmw quick move-computer -c "CorpWS01" -g "Servers" -f  # Skip confirmation
+    """
+    from ..client import get_client
+
+    try:
+        client = get_client()
+
+        # Step 1: Get and filter computers
+        console.print("[dim]Fetching computers...[/dim]")
+        computers = client.list_computers()
+
+        if not computers:
+            print_error("No computers found")
+            raise typer.Exit(1)
+
+        # Filter by computer name/ID if provided
+        if computer:
+            computer_lower = computer.lower()
+            filtered = [
+                c for c in computers
+                if computer_lower in (c.get("host") or "").lower()
+                or computer_lower in (c.get("id") or "").lower()
+            ]
+            if not filtered:
+                print_error(f"No computers matching '{computer}'")
+                raise typer.Exit(1)
+            computers = filtered
+
+        # Show computers and select one
+        if len(computers) == 1:
+            selected_computer = computers[0]
+            console.print(f"[dim]Found computer: {selected_computer.get('host')}[/dim]")
+        else:
+            # Show list and prompt for selection
+            table = Table(title="Available Computers")
+            table.add_column("#", style="dim", justify="right")
+            table.add_column("Host", style="cyan")
+            table.add_column("Domain", style="yellow")
+            table.add_column("Current Group", style="green")
+            table.add_column("Status", style="magenta")
+
+            for idx, comp in enumerate(computers, 1):
+                table.add_row(
+                    str(idx),
+                    comp.get("host", ""),
+                    comp.get("domain", "") or "-",
+                    comp.get("groupName", "") or "-",
+                    comp.get("connectionStatus", ""),
+                )
+            console.print(table)
+
+            selection = typer.prompt("Select computer number", type=int)
+            if selection < 1 or selection > len(computers):
+                print_error(f"Invalid selection. Choose 1-{len(computers)}")
+                raise typer.Exit(1)
+            selected_computer = computers[selection - 1]
+
+        computer_id = selected_computer.get("id")
+        computer_host = selected_computer.get("host")
+        current_group = selected_computer.get("groupName") or "(No Group)"
+
+        # Step 2: Get and filter groups
+        console.print("[dim]Fetching groups...[/dim]")
+        groups = client.list_groups()
+
+        if not groups:
+            print_error("No groups found")
+            raise typer.Exit(1)
+
+        # Filter by group name/ID if provided
+        if group:
+            group_lower = group.lower()
+            filtered = [
+                g for g in groups
+                if group_lower in (g.get("name") or "").lower()
+                or group_lower in (g.get("id") or "").lower()
+            ]
+            if not filtered:
+                print_error(f"No groups matching '{group}'")
+                raise typer.Exit(1)
+            groups = filtered
+
+        # Show groups and select one
+        if len(groups) == 1:
+            selected_group = groups[0]
+            console.print(f"[dim]Target group: {selected_group.get('name')}[/dim]")
+        else:
+            # Show list and prompt for selection
+            table = Table(title="Available Groups")
+            table.add_column("#", style="dim", justify="right")
+            table.add_column("Name", style="cyan")
+            table.add_column("Computers", style="green", justify="right")
+            table.add_column("Policy", style="yellow")
+
+            for idx, grp in enumerate(groups, 1):
+                table.add_row(
+                    str(idx),
+                    grp.get("name", ""),
+                    str(grp.get("computerCount", 0)),
+                    grp.get("policyName", "") or "-",
+                )
+            console.print(table)
+
+            selection = typer.prompt("Select target group number", type=int)
+            if selection < 1 or selection > len(groups):
+                print_error(f"Invalid selection. Choose 1-{len(groups)}")
+                raise typer.Exit(1)
+            selected_group = groups[selection - 1]
+
+        group_id = selected_group.get("id")
+        group_name = selected_group.get("name")
+
+        # Check if already in target group
+        if current_group == group_name:
+            console.print(f"[yellow]Computer '{computer_host}' is already in group '{group_name}'[/yellow]")
+            raise typer.Exit(0)
+
+        # Step 3: Confirm and move
+        if not force:
+            console.print()
+            console.print(f"[bold]Move computer:[/bold] {computer_host}")
+            console.print(f"[bold]From group:[/bold] {current_group}")
+            console.print(f"[bold]To group:[/bold] {group_name}")
+            console.print()
+            confirm = typer.confirm("Proceed with move?")
+            if not confirm:
+                console.print("[yellow]Cancelled.[/yellow]")
+                raise typer.Exit(0)
+
+        # Perform the move
+        console.print("[dim]Moving computer to group...[/dim]")
+        client.assign_computers_to_group(group_id, [computer_id])
+
+        if output == "json":
+            result = {
+                "computer": {
+                    "id": computer_id,
+                    "host": computer_host,
+                },
+                "previousGroup": current_group,
+                "newGroup": group_name,
+                "success": True,
+            }
+            console.print_json(json.dumps(result, default=str))
+        else:
+            print_success(f"Moved '{computer_host}' from '{current_group}' to '{group_name}'")
+
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "quick move-computer")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "quick move-computer")
+        raise typer.Exit(1)
+    except typer.Exit:
+        raise
+    except Exception as e:
+        print_api_error(e, "quick move-computer")
+        raise typer.Exit(1)

{bt_cli-0.4.21 → bt_cli-0.4.23}/src/bt_cli/pra/commands/vault.py

@@ -137,13 +137,16 @@ def create_vault_account(
     name: str = typer.Option(..., "--name", "-n", help="Account name"),
     account_type: str = typer.Option(
         ..., "--type", "-t",
-        help="Account type: username_password, ssh, or ssh_ca"
+        help="Account type: username_password, ssh, ssh_ca, or token"
     ),
     username: Optional[str] = typer.Option(None, "--username", "-u", help="Username (for username_password)"),
     password: Optional[str] = typer.Option(None, "--password", "-p", help="Password (for username_password)"),
+    token: Optional[str] = typer.Option(None, "--token", help="Token value (for token type)"),
+    token_file: Optional[str] = typer.Option(None, "--token-file", help="Path to file containing token"),
     private_key: Optional[str] = typer.Option(None, "--private-key", help="SSH private key (for ssh type)"),
     private_key_file: Optional[str] = typer.Option(None, "--private-key-file", help="Path to SSH private key file"),
     description: Optional[str] = typer.Option(None, "--description", "-d", help="Account description"),
+    account_group_id: Optional[int] = typer.Option(None, "--group-id", "-g", help="Vault Account Group ID"),
     personal: bool = typer.Option(False, "--personal", help="Mark as personal account"),
     output: OutputFormat = typer.Option(OutputFormat.JSON, "--output", "-o"),
 ):
@@ -158,20 +161,29 @@ def create_vault_account(
 
         # Create SSH CA account (for certificate-based auth)
         bt pra vault accounts create -n "ssh-ca" -t ssh_ca --private-key-file /path/to/ca_key
+
+        # Create token account (API keys, bearer tokens, etc.)
+        bt pra vault accounts create -n "api-key" -t token --token "sk-abc123..."
+
+        # Create token account from file
+        bt pra vault accounts create -n "service-token" -t token --token-file /path/to/token.txt
     """
     from bt_cli.pra.client import get_client
     from pathlib import Path
 
-    # Validate account type
-    valid_types = ["username_password", "ssh", "ssh_ca"]
+    # Validate account type (token maps to opaque_token in API)
+    valid_types = ["username_password", "ssh", "ssh_ca", "token"]
     if account_type not in valid_types:
         print_error(f"Invalid account type '{account_type}'. Must be one of: {', '.join(valid_types)}")
         raise typer.Exit(1)
 
+    # Map 'token' to API type 'opaque_token'
+    api_type = "opaque_token" if account_type == "token" else account_type
+
     # Build account data
     data = {
         "name": name,
-        "type": account_type,
+        "type": api_type,
     }
 
     if username:
@@ -180,9 +192,21 @@ def create_vault_account(
         data["password"] = password
     if description:
         data["description"] = description
+    if account_group_id:
+        data["account_group_id"] = account_group_id
     if personal:
         data["personal"] = True
 
+    # Handle token (from file or direct)
+    if token_file:
+        token_path = Path(token_file).expanduser()
+        if not token_path.exists():
+            print_error(f"Token file not found: {token_file}")
+            raise typer.Exit(1)
+        data["token"] = token_path.read_text().strip()
+    elif token:
+        data["token"] = token
+
     # Handle private key (from file or direct)
     if private_key_file:
         key_path = Path(private_key_file).expanduser()
@@ -202,6 +226,10 @@ def create_vault_account(
         if not data.get("private_key"):
             print_error(f"Private key is required for {account_type} type (use --private-key or --private-key-file)")
             raise typer.Exit(1)
+    elif account_type == "token":
+        if not data.get("token"):
+            print_error("Token is required for token type (use --token or --token-file)")
+            raise typer.Exit(1)
 
     try:
         client = get_client()