bt-cli 0.4.22__tar.gz → 0.4.24__tar.gz

{bt_cli-0.4.22 → bt_cli-0.4.24}/CLAUDE.md

@@ -1,6 +1,6 @@
 # BT-CLI
 
-BeyondTrust Platform CLI for Password Safe, Entitle, PRA, and EPM Windows. **Version: 0.4.22**
+BeyondTrust Platform CLI for Password Safe, Entitle, PRA, and EPM Windows. **Version: 0.4.24**
 
 ## Setup
 

{bt_cli-0.4.22 → bt_cli-0.4.24}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bt-cli
-Version: 0.4.22
+Version: 0.4.24
 Summary: BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM
 Author-email: Dave Grendysz <dgrendysz@beyondtrust.com>
 License: MIT

{bt_cli-0.4.22 → bt_cli-0.4.24}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "bt-cli"
-version = "0.4.22"
+version = "0.4.24"
 description = "BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM"
 readme = "README.md"
 requires-python = ">=3.9"

{bt_cli-0.4.22 → bt_cli-0.4.24}/src/bt_cli/__init__.py

@@ -1,3 +1,3 @@
 """BeyondTrust Unified Admin CLI."""
 
-__version__ = "0.4.21"
+__version__ = "0.4.24"

{bt_cli-0.4.22 → bt_cli-0.4.24}/src/bt_cli/pra/client/base.py

@@ -183,6 +183,17 @@ class PRAClient:
         response = self._client.delete(url, headers=self._headers())
         response.raise_for_status()
 
+    def delete_with_body(self, endpoint: str, data: Dict[str, Any]) -> None:
+        """Make DELETE request to API with JSON body.
+
+        Args:
+            endpoint: API endpoint path
+            data: JSON body data
+        """
+        url = f"{self.api_base}{endpoint}"
+        response = self._client.request("DELETE", url, headers=self._headers(), json=data)
+        response.raise_for_status()
+
     def close(self) -> None:
         """Close the HTTP client."""
         self._client.close()
@@ -429,6 +440,14 @@ class PRAClient:
             params["jump_group_id"] = jump_group_id
         return self.get_paginated("/jump-item/web-jump", params)
 
+    def get_web_jump(self, item_id: int) -> Dict[str, Any]:
+        """Get a Web Jump item."""
+        return self.get(f"/jump-item/web-jump/{item_id}")
+
+    def delete_web_jump(self, item_id: int) -> None:
+        """Delete a Web Jump item."""
+        self.delete(f"/jump-item/web-jump/{item_id}")
+
     def list_protocol_tunnels(
         self,
         jump_group_id: Optional[int] = None,
@@ -561,6 +580,58 @@ class PRAClient:
         """Delete a Vault account."""
         self.delete(f"/vault/account/{account_id}")
 
+    def associate_vault_account_jump_item(
+        self,
+        account_id: int,
+        jump_item_id: int,
+        jump_item_type: str = "shell_jump",
+    ) -> Dict[str, Any]:
+        """Associate a Vault account with a Jump Item.
+
+        Args:
+            account_id: Vault Account ID
+            jump_item_id: Jump Item ID to associate
+            jump_item_type: Type of jump item - 'shell_jump', 'remote_rdp', 'remote_vnc', 'web_jump'
+
+        Returns:
+            The created association
+        """
+        data = {
+            "id": jump_item_id,
+            "type": jump_item_type,
+        }
+        return self.post(f"/vault/account/{account_id}/jump-item-association/jump-item", data)
+
+    def disassociate_vault_account_jump_item(
+        self,
+        account_id: int,
+        jump_item_id: int,
+        jump_item_type: str = "shell_jump",
+    ) -> None:
+        """Remove association between a Vault account and a Jump Item.
+
+        Args:
+            account_id: Vault Account ID
+            jump_item_id: Jump Item ID to disassociate
+            jump_item_type: Type of jump item - 'shell_jump', 'remote_rdp', etc.
+        """
+        # API requires body with id and type, not path parameters
+        self.delete_with_body(
+            f"/vault/account/{account_id}/jump-item-association/jump-item",
+            {"id": jump_item_id, "type": jump_item_type}
+        )
+
+    def list_vault_account_jump_items(self, account_id: int) -> Dict[str, Any]:
+        """List Jump Items associated with a Vault account.
+
+        Args:
+            account_id: Vault Account ID
+
+        Returns:
+            Association info with filter criteria and jump_items list
+        """
+        return self.get(f"/vault/account/{account_id}/jump-item-association")
+
     def list_vault_account_groups(self) -> List[Dict[str, Any]]:
         """List Vault account groups."""
         return self.get_paginated("/vault/account-group")

{bt_cli-0.4.22 → bt_cli-0.4.24}/src/bt_cli/pra/commands/jump_items.py

@@ -458,6 +458,70 @@ def list_web_jumps(
         raise typer.Exit(1)
 
 
+@web_app.command("get")
+def get_web_jump(
+    item_id: int = typer.Argument(..., help="Web Jump ID"),
+    output: OutputFormat = typer.Option(OutputFormat.JSON, "--output", "-o"),
+):
+    """Get Web Jump details."""
+    from bt_cli.pra.client import get_client
+
+    try:
+        client = get_client()
+        item = client.get_web_jump(item_id)
+
+        if output == OutputFormat.JSON:
+            print_json(item)
+        else:
+            from rich.console import Console
+            from rich.panel import Panel
+            console = Console()
+            console.print(Panel(
+                f"[bold]{item.get('name', '')}[/bold]\n\n"
+                f"[dim]URL:[/dim] {item.get('url', '')}\n"
+                f"[dim]Username:[/dim] {item.get('username', '') or '-'}\n"
+                f"[dim]Jump Group:[/dim] {item.get('jump_group_id', '')}\n"
+                f"[dim]Jumpoint:[/dim] {item.get('jumpoint_id', '')}",
+                title="Web Jump Details",
+                subtitle=f"ID: {item.get('id', '')}",
+            ))
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "get web jump")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "get web jump")
+        raise typer.Exit(1)
+    except Exception as e:
+        print_api_error(e, "get web jump")
+        raise typer.Exit(1)
+
+
+@web_app.command("delete")
+def delete_web_jump(
+    item_id: int = typer.Argument(..., help="Web Jump ID"),
+    force: bool = typer.Option(False, "--force", "-f", help="Skip confirmation"),
+):
+    """Delete a Web Jump item."""
+    from bt_cli.pra.client import get_client
+
+    if not force:
+        typer.confirm(f"Delete web jump {item_id}?", abort=True)
+
+    try:
+        client = get_client()
+        client.delete_web_jump(item_id)
+        print_success(f"Deleted web jump {item_id}")
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "delete web jump")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "delete web jump")
+        raise typer.Exit(1)
+    except Exception as e:
+        print_api_error(e, "delete web jump")
+        raise typer.Exit(1)
+
+
 # Protocol Tunnel subcommands (TCP, MSSQL, PostgreSQL, MySQL, K8s)
 tunnel_app = typer.Typer(no_args_is_help=True, help="Protocol Tunnel Jump items (TCP, MSSQL, PostgreSQL, MySQL, K8s)")
 app.add_typer(tunnel_app, name="tunnel")

{bt_cli-0.4.22 → bt_cli-0.4.24}/src/bt_cli/pra/commands/vault.py

@@ -517,6 +517,125 @@ def rotate_vault_account(
         raise typer.Exit(1)
 
 
+@accounts_app.command("associate")
+def associate_vault_account_jump_item(
+    account_id: int = typer.Argument(..., help="Vault Account ID"),
+    jump_item_id: int = typer.Option(..., "--jump-item", "-j", help="Jump Item ID to associate"),
+    jump_item_type: str = typer.Option(
+        "shell_jump", "--type", "-t",
+        help="Jump item type: shell_jump, remote_rdp, remote_vnc, web_jump"
+    ),
+    output: OutputFormat = typer.Option(OutputFormat.JSON, "--output", "-o"),
+):
+    """Associate a Vault account with a Jump Item.
+
+    Links a vault account to a jump item so credentials can be injected
+    automatically when accessing that jump item.
+
+    Examples:
+        # Associate vault account 5 with shell jump item 10
+        bt pra vault accounts associate 5 -j 10
+
+        # Associate with RDP jump item
+        bt pra vault accounts associate 5 -j 10 -t remote_rdp
+    """
+    from bt_cli.pra.client import get_client
+
+    try:
+        client = get_client()
+        result = client.associate_vault_account_jump_item(account_id, jump_item_id, jump_item_type)
+        print_success(f"Associated vault account {account_id} with jump item {jump_item_id}")
+
+        if output == OutputFormat.JSON:
+            print_json(result)
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "associate vault account")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "associate vault account")
+        raise typer.Exit(1)
+    except Exception as e:
+        print_api_error(e, "associate vault account")
+        raise typer.Exit(1)
+
+
+@accounts_app.command("disassociate")
+def disassociate_vault_account_jump_item(
+    account_id: int = typer.Argument(..., help="Vault Account ID"),
+    jump_item_id: int = typer.Option(..., "--jump-item", "-j", help="Jump Item ID to disassociate"),
+    jump_item_type: str = typer.Option(
+        "shell_jump", "--type", "-t",
+        help="Jump item type: shell_jump, remote_rdp, remote_vnc, web_jump"
+    ),
+    force: bool = typer.Option(False, "--force", "-f", help="Skip confirmation"),
+):
+    """Remove association between a Vault account and a Jump Item.
+
+    Examples:
+        bt pra vault accounts disassociate 5 -j 10
+        bt pra vault accounts disassociate 5 -j 10 -t remote_rdp
+        bt pra vault accounts disassociate 5 -j 10 -f  # Skip confirmation
+    """
+    from bt_cli.pra.client import get_client
+
+    if not force:
+        typer.confirm(
+            f"Remove association between vault account {account_id} and jump item {jump_item_id}?",
+            abort=True
+        )
+
+    try:
+        client = get_client()
+        client.disassociate_vault_account_jump_item(account_id, jump_item_id, jump_item_type)
+        print_success(f"Removed association between vault account {account_id} and jump item {jump_item_id}")
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "disassociate vault account")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "disassociate vault account")
+        raise typer.Exit(1)
+    except Exception as e:
+        print_api_error(e, "disassociate vault account")
+        raise typer.Exit(1)
+
+
+@accounts_app.command("list-jump-items")
+def list_vault_account_jump_items(
+    account_id: int = typer.Argument(..., help="Vault Account ID"),
+    output: OutputFormat = typer.Option(OutputFormat.TABLE, "--output", "-o"),
+):
+    """List Jump Items associated with a Vault account.
+
+    Examples:
+        bt pra vault accounts list-jump-items 5
+        bt pra vault accounts list-jump-items 5 -o json
+    """
+    from bt_cli.pra.client import get_client
+
+    try:
+        client = get_client()
+        result = client.list_vault_account_jump_items(account_id)
+        items = result.get("jump_items", [])
+
+        if output == OutputFormat.JSON:
+            print_json(result)
+        else:
+            columns = [
+                ("ID", "id"),
+                ("Type", "type"),
+            ]
+            print_table(items, columns, title=f"Jump Items for Vault Account {account_id}")
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "list vault account jump items")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "list vault account jump items")
+        raise typer.Exit(1)
+    except Exception as e:
+        print_api_error(e, "list vault account jump items")
+        raise typer.Exit(1)
+
+
 # Account Groups subcommands
 groups_app = typer.Typer(no_args_is_help=True, help="Vault account groups")
 app.add_typer(groups_app, name="groups")