bt-cli 0.4.51__tar.gz → 0.4.52__tar.gz

{bt_cli-0.4.51 → bt_cli-0.4.52}/CLAUDE.md

@@ -1,6 +1,6 @@
 # BT-CLI
 
-BeyondTrust Platform CLI for Password Safe, Entitle, PRA, EPM Windows, EPM Linux, and the BeyondTrust Secrets API. **Version: 0.4.51**
+BeyondTrust Platform CLI for Password Safe, Entitle, PRA, EPM Windows, EPM Linux, and the BeyondTrust Secrets API. **Version: 0.4.52**
 
 ## Setup
 

{bt_cli-0.4.51 → bt_cli-0.4.52}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bt-cli
-Version: 0.4.51
+Version: 0.4.52
 Summary: BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM
 Author-email: Dave Grendysz <dgrendysz@beyondtrust.com>
 License: MIT

{bt_cli-0.4.51 → bt_cli-0.4.52}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "bt-cli"
-version = "0.4.51"
+version = "0.4.52"
 description = "BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM"
 readme = "README.md"
 requires-python = ">=3.9"

{bt_cli-0.4.51 → bt_cli-0.4.52}/src/bt_cli/__init__.py

@@ -1,3 +1,3 @@
 """BeyondTrust Unified Admin CLI."""
 
-__version__ = "0.4.51"
+__version__ = "0.4.52"

{bt_cli-0.4.51 → bt_cli-0.4.52}/src/bt_cli/pws/client/passwordsafe.py

@@ -80,6 +80,35 @@ class PasswordSafeMixin:
         """
         return self.get(f"/ManagedAccounts/{account_id}")
 
+    # =========================================================================
+    # Synced Accounts
+    # =========================================================================
+
+    def list_synced_accounts(
+        self: "PasswordSafeClient", account_id: int
+    ) -> list[dict[str, Any]]:
+        """List accounts synced to a managed account."""
+        result = self.get(f"/ManagedAccounts/{account_id}/SyncedAccounts")
+        return result if isinstance(result, list) else []
+
+    def add_synced_account(
+        self: "PasswordSafeClient", account_id: int, synced_account_id: int
+    ) -> dict[str, Any]:
+        """Add a synced account relationship."""
+        return self.post(f"/ManagedAccounts/{account_id}/SyncedAccounts/{synced_account_id}")
+
+    def remove_synced_account(
+        self: "PasswordSafeClient", account_id: int, synced_account_id: int
+    ) -> None:
+        """Remove a specific synced account."""
+        self.delete(f"/ManagedAccounts/{account_id}/SyncedAccounts/{synced_account_id}")
+
+    def remove_all_synced_accounts(
+        self: "PasswordSafeClient", account_id: int
+    ) -> None:
+        """Remove all synced accounts from a managed account."""
+        self.delete(f"/ManagedAccounts/{account_id}/SyncedAccounts")
+
     def get_managed_account_by_name(
         self: "PasswordSafeClient",
         system_name: str,

{bt_cli-0.4.51 → bt_cli-0.4.52}/src/bt_cli/pws/commands/accounts.py

@@ -8,7 +8,7 @@ import typer
 from rich.console import Console
 from rich.table import Table
 
-from ...core.output import print_api_error
+from ...core.output import print_api_error, print_success
 from ..client.base import get_client
 
 app = typer.Typer(no_args_is_help=True, help="""Manage managed accounts in Password Safe.
@@ -370,3 +370,168 @@ def rotate_password(
     except Exception as e:
         print_api_error(e, "manage accounts")
         raise typer.Exit(1)
+
+
+# =============================================================================
+# Synced Accounts
+# =============================================================================
+
+@app.command("synced-list")
+def synced_list(
+    account_id: int = typer.Argument(..., help="Parent managed account ID"),
+    output: str = typer.Option("table", "--output", "-o", help="Output format: table or json"),
+) -> None:
+    """List accounts synced to a managed account.
+
+    Examples:
+        bt pws accounts synced-list 14
+        bt pws accounts synced-list 14 -o json
+    """
+    try:
+        with get_client() as client:
+            client.authenticate()
+            accounts = client.list_synced_accounts(account_id)
+
+        if output == "json":
+            console.print_json(json.dumps(accounts, default=str))
+        elif accounts:
+            table = Table(title=f"Synced Accounts (parent ID: {account_id})")
+            table.add_column("Acct ID", style="cyan", no_wrap=True)
+            table.add_column("Account Name", style="green")
+            table.add_column("Domain", style="yellow")
+            table.add_column("Sys ID", style="blue", no_wrap=True)
+            table.add_column("Description", style="dim")
+            for a in accounts:
+                table.add_row(
+                    str(a.get("ManagedAccountID", "")),
+                    a.get("AccountName", ""),
+                    a.get("DomainName") or "-",
+                    str(a.get("ManagedSystemID", "")),
+                    (a.get("Description") or "-")[:50],
+                )
+            console.print(table)
+        else:
+            console.print("[yellow]No synced accounts.[/yellow]")
+
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "synced-list")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "synced-list")
+        raise typer.Exit(1)
+    except Exception as e:
+        print_api_error(e, "synced-list")
+        raise typer.Exit(1)
+
+
+@app.command("synced-add")
+def synced_add(
+    account_id: int = typer.Argument(..., help="Parent managed account ID"),
+    synced_account_id: int = typer.Argument(..., help="Account ID to sync"),
+    output: str = typer.Option("table", "--output", "-o", help="Output format: table or json"),
+) -> None:
+    """Add a synced account relationship.
+
+    Synced accounts share password changes with the parent account.
+
+    Examples:
+        bt pws accounts synced-add 14 25
+        bt pws accounts synced-add 14 25 -o json
+    """
+    try:
+        with get_client() as client:
+            client.authenticate()
+            result = client.add_synced_account(account_id, synced_account_id)
+
+        if output == "json":
+            console.print_json(json.dumps(result, default=str))
+        else:
+            name = result.get("AccountName", str(synced_account_id))
+            print_success(f"Synced account '{name}' (ID: {synced_account_id}) added to account ID: {account_id}")
+
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "synced-add")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "synced-add")
+        raise typer.Exit(1)
+    except Exception as e:
+        print_api_error(e, "synced-add")
+        raise typer.Exit(1)
+
+
+@app.command("synced-remove")
+def synced_remove(
+    account_id: int = typer.Argument(..., help="Parent managed account ID"),
+    synced_account_id: int = typer.Argument(..., help="Synced account ID to remove"),
+    force: bool = typer.Option(False, "--force", "-f", help="Skip confirmation"),
+) -> None:
+    """Remove a specific synced account.
+
+    Examples:
+        bt pws accounts synced-remove 14 25
+        bt pws accounts synced-remove 14 25 --force
+    """
+    try:
+        with get_client() as client:
+            client.authenticate()
+
+            if not force:
+                confirm = typer.confirm(f"Remove synced account {synced_account_id} from account {account_id}?")
+                if not confirm:
+                    console.print("[yellow]Cancelled.[/yellow]")
+                    raise typer.Exit(0)
+
+            client.remove_synced_account(account_id, synced_account_id)
+
+        print_success(f"Removed synced account ID: {synced_account_id} from account ID: {account_id}")
+
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "synced-remove")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "synced-remove")
+        raise typer.Exit(1)
+    except typer.Exit:
+        raise
+    except Exception as e:
+        print_api_error(e, "synced-remove")
+        raise typer.Exit(1)
+
+
+@app.command("synced-clear")
+def synced_clear(
+    account_id: int = typer.Argument(..., help="Parent managed account ID"),
+    force: bool = typer.Option(False, "--force", "-f", help="Skip confirmation"),
+) -> None:
+    """Remove all synced accounts from a managed account.
+
+    Examples:
+        bt pws accounts synced-clear 14
+        bt pws accounts synced-clear 14 --force
+    """
+    try:
+        with get_client() as client:
+            client.authenticate()
+
+            if not force:
+                confirm = typer.confirm(f"Remove ALL synced accounts from account {account_id}?")
+                if not confirm:
+                    console.print("[yellow]Cancelled.[/yellow]")
+                    raise typer.Exit(0)
+
+            client.remove_all_synced_accounts(account_id)
+
+        print_success(f"All synced accounts removed from account ID: {account_id}")
+
+    except httpx.HTTPStatusError as e:
+        print_api_error(e, "synced-clear")
+        raise typer.Exit(1)
+    except httpx.RequestError as e:
+        print_api_error(e, "synced-clear")
+        raise typer.Exit(1)
+    except typer.Exit:
+        raise
+    except Exception as e:
+        print_api_error(e, "synced-clear")
+        raise typer.Exit(1)