bt-cli 0.4.44__tar.gz → 0.4.45__tar.gz

{bt_cli-0.4.44 → bt_cli-0.4.45}/CLAUDE.md

@@ -1,6 +1,6 @@
 # BT-CLI
 
-BeyondTrust Platform CLI for Password Safe, Entitle, PRA, EPM Windows, and EPM Linux. **Version: 0.4.44**
+BeyondTrust Platform CLI for Password Safe, Entitle, PRA, EPM Windows, and EPM Linux. **Version: 0.4.45**
 
 ## Setup
 

{bt_cli-0.4.44 → bt_cli-0.4.45}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bt-cli
-Version: 0.4.44
+Version: 0.4.45
 Summary: BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM
 Author-email: Dave Grendysz <dgrendysz@beyondtrust.com>
 License: MIT

{bt_cli-0.4.44 → bt_cli-0.4.45}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "bt-cli"
-version = "0.4.44"
+version = "0.4.45"
 description = "BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM"
 readme = "README.md"
 requires-python = ">=3.9"

{bt_cli-0.4.44 → bt_cli-0.4.45}/src/bt_cli/__init__.py

@@ -1,3 +1,3 @@
 """BeyondTrust Unified Admin CLI."""
 
-__version__ = "0.4.44"
+__version__ = "0.4.45"

{bt_cli-0.4.44 → bt_cli-0.4.45}/src/bt_cli/commands/configure.py

@@ -43,6 +43,11 @@ def configure_callback(
     client_id: Optional[str] = typer.Option(None, "--client-id", help="OAuth Client ID"),
     client_secret: Optional[str] = typer.Option(None, "--client-secret", help="OAuth Client Secret"),
     api_key: Optional[str] = typer.Option(None, "--api-key", help="API Key"),
+    user_api_key: Optional[str] = typer.Option(
+        None,
+        "--user-api-key",
+        help="Entitle user-context API key (only required for `bt entitle requests create`)",
+    ),
 ) -> None:
     """Configure bt-cli interactively or via flags.
 
@@ -65,11 +70,13 @@ def configure_callback(
         return
 
     # Check if any non-interactive flags were provided
-    has_flags = any([api_url, client_id, client_secret, api_key])
+    has_flags = any([api_url, client_id, client_secret, api_key, user_api_key])
 
     if has_flags and product:
         # Non-interactive mode with flags
-        _configure_with_flags(product, profile, api_url, client_id, client_secret, api_key)
+        _configure_with_flags(
+            product, profile, api_url, client_id, client_secret, api_key, user_api_key
+        )
     else:
         # Interactive mode
         _configure_interactive(product, profile)
@@ -219,6 +226,7 @@ def _configure_with_flags(
     client_id: Optional[str],
     client_secret: Optional[str],
     api_key: Optional[str],
+    user_api_key: Optional[str] = None,
 ) -> None:
     """Configure using command-line flags (non-interactive)."""
     if product not in PRODUCTS:
@@ -240,6 +248,11 @@ def _configure_with_flags(
         new_config["client_secret"] = client_secret
     if api_key:
         new_config["api_key"] = api_key
+    if user_api_key is not None:
+        if product != "entitle":
+            print_error("--user-api-key is only valid for product=entitle")
+            raise typer.Exit(2)
+        new_config["user_api_key"] = user_api_key
 
     # Infer auth method
     if api_key:
@@ -481,6 +494,7 @@ def import_from_env(
         "entitle": {
             "api_url": "BT_ENTITLE_API_URL",
             "api_key": "BT_ENTITLE_API_KEY",
+            "user_api_key": "BT_ENTITLE_USER_API_KEY",
             "verify_ssl": "BT_ENTITLE_VERIFY_SSL",
             "timeout": "BT_ENTITLE_TIMEOUT",
         },
@@ -582,6 +596,7 @@ def show_effective_config(
         "Entitle": {
             "api_url": "BT_ENTITLE_API_URL",
             "api_key": "BT_ENTITLE_API_KEY",
+            "user_api_key": "BT_ENTITLE_USER_API_KEY",
             "verify_ssl": "BT_ENTITLE_VERIFY_SSL",
             "timeout": "BT_ENTITLE_TIMEOUT",
         },

{bt_cli-0.4.44 → bt_cli-0.4.45}/src/bt_cli/core/config_file.py

@@ -51,7 +51,16 @@ PRODUCTS = {
                 "default": "https://api.us.entitle.io",
                 "example": "https://api.us.entitle.io or https://api.eu.entitle.io",
             },
-            "api_key": {"prompt": "API Key", "required": True, "secret": True},
+            "api_key": {
+                "prompt": "Org/Admin API Key (read + admin writes)",
+                "required": True,
+                "secret": True,
+            },
+            "user_api_key": {
+                "prompt": "User-context API Key (only for `requests create`; leave blank to skip)",
+                "required": False,
+                "secret": True,
+            },
             "verify_ssl": {"prompt": "Verify SSL", "required": False, "secret": False, "default": True},
             "timeout": {"prompt": "Timeout (seconds)", "required": False, "secret": False, "default": 30},
         },
@@ -341,6 +350,8 @@ def _get_env_mappings(product: str) -> dict[str, str]:
     if product == "pws":
         mappings["run_as"] = f"{prefix}_RUN_AS"
         mappings["api_version"] = f"{prefix}_API_VERSION"
+    elif product == "entitle":
+        mappings["user_api_key"] = f"{prefix}_USER_API_KEY"
     elif product == "epml":
         mappings["site_id"] = f"{prefix}_SITE_ID"
         mappings["pat"] = f"{prefix}_PAT"