bt-cli 0.4.50__tar.gz → 0.4.52__tar.gz

{bt_cli-0.4.50 → bt_cli-0.4.52}/CLAUDE.md

@@ -1,6 +1,6 @@
 # BT-CLI
 
-BeyondTrust Platform CLI for Password Safe, Entitle, PRA, EPM Windows, EPM Linux, and the BeyondTrust Secrets API. **Version: 0.4.50**
+BeyondTrust Platform CLI for Password Safe, Entitle, PRA, EPM Windows, EPM Linux, and the BeyondTrust Secrets API. **Version: 0.4.52**
 
 ## Setup
 

{bt_cli-0.4.50 → bt_cli-0.4.52}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bt-cli
-Version: 0.4.50
+Version: 0.4.52
 Summary: BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM
 Author-email: Dave Grendysz <dgrendysz@beyondtrust.com>
 License: MIT

{bt_cli-0.4.50 → bt_cli-0.4.52}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "bt-cli"
-version = "0.4.50"
+version = "0.4.52"
 description = "BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM"
 readme = "README.md"
 requires-python = ">=3.9"

{bt_cli-0.4.50 → bt_cli-0.4.52}/src/bt_cli/__init__.py

@@ -1,3 +1,3 @@
 """BeyondTrust Unified Admin CLI."""
 
-__version__ = "0.4.50"
+__version__ = "0.4.52"

{bt_cli-0.4.50 → bt_cli-0.4.52}/src/bt_cli/core/errors.py

@@ -165,6 +165,19 @@ def get_http_error_message(error: httpx.HTTPStatusError) -> str:
         # Response may not be JSON
         pass
 
+    # plain-text bodies (e.g. PWS 400 responses that aren't JSON)
+    if not detail:
+        try:
+            raw = error.response.text
+            if raw:
+                orig_len = len(raw)
+                sanitized = sanitize_error_message(raw[:300])
+                if sanitized:
+                    detail = sanitized + ("..." if orig_len > 300 else "")
+                    return f"{base_message}: {detail}"
+        except Exception:
+            pass
+
     if detail:
         # Additional regex sanitization for any patterns in the extracted detail
         detail = sanitize_error_message(str(detail))

{bt_cli-0.4.50 → bt_cli-0.4.52}/src/bt_cli/core/prompts.py

@@ -1,16 +1,24 @@
 """Reusable interactive prompts for CLI commands."""
 
+import re
 from typing import Any, Callable, Optional, TypeVar
 
 import typer
 from rich.console import Console
 
+_ANSI_ESCAPE = re.compile(r"\x1b(?:[@-Z\\-_]|\[[0-?]*[ -/]*[@-~])")
+
 console = Console()
 
 T = TypeVar("T")
 D = TypeVar("D")
 
 
+def _clean_str(raw: Any) -> str:
+    """Strip ANSI escape sequences from a prompted string value."""
+    return _ANSI_ESCAPE.sub("", raw).strip()
+
+
 def prompt_if_missing(
     value: Optional[T],
     prompt_text: str,
@@ -27,7 +35,10 @@ def prompt_if_missing(
         The value (either original or prompted)
     """
     if value is None or value == "":
-        return typer.prompt(prompt_text, type=value_type)
+        raw = typer.prompt(prompt_text, type=value_type)
+        if value_type is str:
+            return _clean_str(raw)  # type: ignore[return-value]
+        return raw
     return value
 
 
@@ -57,7 +68,10 @@ def prompt_from_list(
         item_id = item.get(id_key, "")
         item_name = item.get(name_key, "Unknown")
         console.print(f"  {item_id}: {item_name}")
-    return typer.prompt(prompt_text, type=value_type)
+    raw = typer.prompt(prompt_text, type=value_type)
+    if value_type is str:
+        return _clean_str(raw)  # type: ignore[return-value]
+    return raw
 
 
 def prompt_choice(

{bt_cli-0.4.50 → bt_cli-0.4.52}/src/bt_cli/pws/client/passwordsafe.py

@@ -80,6 +80,35 @@ class PasswordSafeMixin:
         """
         return self.get(f"/ManagedAccounts/{account_id}")
 
+    # =========================================================================
+    # Synced Accounts
+    # =========================================================================
+
+    def list_synced_accounts(
+        self: "PasswordSafeClient", account_id: int
+    ) -> list[dict[str, Any]]:
+        """List accounts synced to a managed account."""
+        result = self.get(f"/ManagedAccounts/{account_id}/SyncedAccounts")
+        return result if isinstance(result, list) else []
+
+    def add_synced_account(
+        self: "PasswordSafeClient", account_id: int, synced_account_id: int
+    ) -> dict[str, Any]:
+        """Add a synced account relationship."""
+        return self.post(f"/ManagedAccounts/{account_id}/SyncedAccounts/{synced_account_id}")
+
+    def remove_synced_account(
+        self: "PasswordSafeClient", account_id: int, synced_account_id: int
+    ) -> None:
+        """Remove a specific synced account."""
+        self.delete(f"/ManagedAccounts/{account_id}/SyncedAccounts/{synced_account_id}")
+
+    def remove_all_synced_accounts(
+        self: "PasswordSafeClient", account_id: int
+    ) -> None:
+        """Remove all synced accounts from a managed account."""
+        self.delete(f"/ManagedAccounts/{account_id}/SyncedAccounts")
+
     def get_managed_account_by_name(
         self: "PasswordSafeClient",
         system_name: str,

{bt_cli-0.4.50 → bt_cli-0.4.52}/src/bt_cli/pws/commands/accounts.py

@@ -8,7 +8,7 @@ import typer
 from rich.console import Console
 from rich.table import Table
 
-from ...core.output import print_api_error
+from ...core.output import print_api_error, print_success
 from ..client.base import get_client
 
 app = typer.Typer(no_args_is_help=True, help="""Manage managed accounts in Password Safe.
@@ -370,3 +370,168 @@ def rotate_password(
     except Exception as e:
         print_api_error(e, "manage accounts")
         raise typer.Exit(1)
+
+
+# =============================================================================
+# Synced Accounts
+# =============================================================================
+
+@app.command("synced-list")
+def synced_list(
+    account_id: int = typer.Argument(..., help="Parent managed account ID"),
+    output: str = typer.Option("table", "--output", "-o", help="Output format: table or json"),
+) -> None:
+    """List accounts synced to a managed account.
+
+    Examples:
+        bt pws accounts synced-list 14
+        bt pws accounts synced-list 14 -o json
+    """
+    try:
+        with get_client() as client:
+            client.authenticate()
+            accounts = client.list_synced_accounts(account_id)
+
+        if output == "json":
+            console.print_json(json.dumps(accounts, default=str))
+        elif accounts:
+            table = Table(title=f"Synced Accounts (parent ID: {account_id})")
+            table.add_column("Acct ID", style="cyan", no_wrap=True)
+            table.add_column("Account Name", style="green")
+            table.add_column("Domain", style="yellow")
+            table.add_column("Sys ID", style="blue", no_wrap=True)
+            table.add_column("Description", style="dim")
+            for a in accounts:
+                table.add_row(
+                    str(a.get("ManagedAccountID", "")),
+                    a.get("AccountName", ""),
+                    a.get("DomainName") or "-",
+                    str(a.get("ManagedSystemID", "")),
+                    (a.get("Description") or "-")[:50],
+                )
+            console.print(table)
+        else:
+            console.print("[yellow]No synced accounts.[/yellow]")
+
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "synced-list")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "synced-list")
+        raise typer.Exit(1)
+    except Exception as e:
+        print_api_error(e, "synced-list")
+        raise typer.Exit(1)
+
+
+@app.command("synced-add")
+def synced_add(
+    account_id: int = typer.Argument(..., help="Parent managed account ID"),
+    synced_account_id: int = typer.Argument(..., help="Account ID to sync"),
+    output: str = typer.Option("table", "--output", "-o", help="Output format: table or json"),
+) -> None:
+    """Add a synced account relationship.
+
+    Synced accounts share password changes with the parent account.
+
+    Examples:
+        bt pws accounts synced-add 14 25
+        bt pws accounts synced-add 14 25 -o json
+    """
+    try:
+        with get_client() as client:
+            client.authenticate()
+            result = client.add_synced_account(account_id, synced_account_id)
+
+        if output == "json":
+            console.print_json(json.dumps(result, default=str))
+        else:
+            name = result.get("AccountName", str(synced_account_id))
+            print_success(f"Synced account '{name}' (ID: {synced_account_id}) added to account ID: {account_id}")
+
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "synced-add")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "synced-add")
+        raise typer.Exit(1)
+    except Exception as e:
+        print_api_error(e, "synced-add")
+        raise typer.Exit(1)
+
+
+@app.command("synced-remove")
+def synced_remove(
+    account_id: int = typer.Argument(..., help="Parent managed account ID"),
+    synced_account_id: int = typer.Argument(..., help="Synced account ID to remove"),
+    force: bool = typer.Option(False, "--force", "-f", help="Skip confirmation"),
+) -> None:
+    """Remove a specific synced account.
+
+    Examples:
+        bt pws accounts synced-remove 14 25
+        bt pws accounts synced-remove 14 25 --force
+    """
+    try:
+        with get_client() as client:
+            client.authenticate()
+
+            if not force:
+                confirm = typer.confirm(f"Remove synced account {synced_account_id} from account {account_id}?")
+                if not confirm:
+                    console.print("[yellow]Cancelled.[/yellow]")
+                    raise typer.Exit(0)
+
+            client.remove_synced_account(account_id, synced_account_id)
+
+        print_success(f"Removed synced account ID: {synced_account_id} from account ID: {account_id}")
+
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "synced-remove")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "synced-remove")
+        raise typer.Exit(1)
+    except typer.Exit:
+        raise
+    except Exception as e:
+        print_api_error(e, "synced-remove")
+        raise typer.Exit(1)
+
+
+@app.command("synced-clear")
+def synced_clear(
+    account_id: int = typer.Argument(..., help="Parent managed account ID"),
+    force: bool = typer.Option(False, "--force", "-f", help="Skip confirmation"),
+) -> None:
+    """Remove all synced accounts from a managed account.
+
+    Examples:
+        bt pws accounts synced-clear 14
+        bt pws accounts synced-clear 14 --force
+    """
+    try:
+        with get_client() as client:
+            client.authenticate()
+
+            if not force:
+                confirm = typer.confirm(f"Remove ALL synced accounts from account {account_id}?")
+                if not confirm:
+                    console.print("[yellow]Cancelled.[/yellow]")
+                    raise typer.Exit(0)
+
+            client.remove_all_synced_accounts(account_id)
+
+        print_success(f"All synced accounts removed from account ID: {account_id}")
+
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "synced-clear")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "synced-clear")
+        raise typer.Exit(1)
+    except typer.Exit:
+        raise
+    except Exception as e:
+        print_api_error(e, "synced-clear")
+        raise typer.Exit(1)