bt-cli 0.4.55__tar.gz → 0.4.56__tar.gz

{bt_cli-0.4.55 → bt_cli-0.4.56}/CLAUDE.md

@@ -1,6 +1,6 @@
 # BT-CLI
 
-BeyondTrust Platform CLI for Password Safe, Entitle, PRA, EPM Windows, EPM Linux, and the BeyondTrust Secrets API. **Version: 0.4.55**
+BeyondTrust Platform CLI for Password Safe, Entitle, PRA, EPM Windows, EPM Linux, and the BeyondTrust Secrets API. **Version: 0.4.56**
 
 ## Setup
 

{bt_cli-0.4.55 → bt_cli-0.4.56}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bt-cli
-Version: 0.4.55
+Version: 0.4.56
 Summary: BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM
 Author-email: Dave Grendysz <dgrendysz@beyondtrust.com>
 License: MIT

{bt_cli-0.4.55 → bt_cli-0.4.56}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "bt-cli"
-version = "0.4.55"
+version = "0.4.56"
 description = "BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM"
 readme = "README.md"
 requires-python = ">=3.9"

{bt_cli-0.4.55 → bt_cli-0.4.56}/src/bt_cli/__init__.py

@@ -1,3 +1,3 @@
 """BeyondTrust Unified Admin CLI."""
 
-__version__ = "0.4.55"
+__version__ = "0.4.56"

{bt_cli-0.4.55 → bt_cli-0.4.56}/src/bt_cli/commands/configure.py

@@ -57,6 +57,15 @@ def configure_callback(
         help="Entitle user-context API key, only required for `bt entitle requests create` "
         "(visible in shell history/process list — prefer interactive `bt configure`)",
     ),
+    site_id: Optional[str] = typer.Option(
+        None, "--site-id", help="Site UUID (pf, secrets, epml)"
+    ),
+    pat: Optional[str] = typer.Option(
+        None,
+        "--pat",
+        help="Personal Access Token (pf, secrets, epml) — visible in shell "
+        "history/process list; prefer interactive `bt configure`",
+    ),
     show_input: bool = typer.Option(
         False,
         "--show-input",
@@ -84,18 +93,25 @@ def configure_callback(
         return
 
     # Check if any non-interactive flags were provided
-    has_flags = any([api_url, client_id, client_secret, api_key, user_api_key])
+    has_flags = any([api_url, client_id, client_secret, api_key, user_api_key, site_id, pat])
 
     if has_flags and product:
         # Non-interactive mode with flags
         _configure_with_flags(
-            product, profile, api_url, client_id, client_secret, api_key, user_api_key
+            product, profile, api_url, client_id, client_secret, api_key, user_api_key,
+            site_id, pat,
         )
     else:
         # Interactive mode
         _configure_interactive(product, profile, show_input=show_input)
 
 
+def _confirm_received(value: str) -> None:
+    """Echo a masked confirmation so the user knows a hidden paste landed."""
+    hint = "****" + value[-4:] if len(value) > 4 else "****"
+    console.print(f"  [dim]Received {len(value)} characters ({hint})[/dim]")
+
+
 def _configure_interactive(
     product: Optional[str] = None,
     profile: Optional[str] = None,
@@ -196,6 +212,8 @@ def _configure_interactive(
                 else:
                     hint = "****" + existing_val[-4:] if len(existing_val) > 4 else "****"
                     console.print(f"  [dim](current: {hint}, press Enter to keep)[/dim]")
+            if not show_input:
+                console.print("  [dim](input hidden — nothing echoes while you type/paste)[/dim]")
             value = Prompt.ask(
                 prompt_text,
                 password=not show_input,
@@ -203,6 +221,19 @@ def _configure_interactive(
             )
             if not value and default:
                 value = default
+            elif value:
+                _confirm_received(value)
+            elif field_info.get("required") and not show_input:
+                # Hidden prompts don't receive pastes on some terminals (notably
+                # Windows consoles) — offer a visible retry instead of failing.
+                if Confirm.ask(
+                    "  Nothing received — paste may not work with hidden input. "
+                    "Retry with input visible?",
+                    default=True,
+                ):
+                    value = Prompt.ask(prompt_text, default="")
+                    if value:
+                        _confirm_received(value)
         # Handle regular fields
         else:
             value = Prompt.ask(
@@ -255,6 +286,8 @@ def _configure_with_flags(
     client_secret: Optional[str],
     api_key: Optional[str],
     user_api_key: Optional[str] = None,
+    site_id: Optional[str] = None,
+    pat: Optional[str] = None,
 ) -> None:
     """Configure using command-line flags (non-interactive)."""
     if product not in PRODUCTS:
@@ -281,6 +314,17 @@ def _configure_with_flags(
             print_error("--user-api-key is only valid for product=entitle")
             raise typer.Exit(2)
         new_config["user_api_key"] = user_api_key
+    pat_products = ("pf", "secrets", "epml")
+    if site_id is not None:
+        if product not in pat_products:
+            print_error(f"--site-id is only valid for product={'|'.join(pat_products)}")
+            raise typer.Exit(2)
+        new_config["site_id"] = site_id
+    if pat is not None:
+        if product not in pat_products:
+            print_error(f"--pat is only valid for product={'|'.join(pat_products)}")
+            raise typer.Exit(2)
+        new_config["pat"] = pat
 
     # Infer auth method
     if api_key:
@@ -330,6 +374,24 @@ def _test_connection(product: str, profile: str) -> None:
                 client.get("/Computers", params={"pageSize": 1})
             print_success("EPM Windows connection successful!")
 
+        elif product == "epml":
+            from ..epml.client import get_client
+            with get_client() as client:
+                client.get_settings()
+            print_success("EPM Linux connection successful!")
+
+        elif product == "secrets":
+            from ..secrets.client import get_client
+            with get_client() as client:
+                client.list_folders()
+            print_success("Secrets API connection successful!")
+
+        elif product == "pf":
+            from ..pf.client import get_client
+            with get_client() as client:
+                info = client.get_user_info() or {}
+            print_success(f"Pathfinder connection successful! ({info.get('email', '?')})")
+
     except Exception as e:
         print_error(f"Connection failed: {e}")
 
@@ -375,7 +437,7 @@ def show_config(
             first = True
             for key, value in settings.items():
                 # Mask secrets
-                if not show_secrets and any(s in key for s in ["secret", "key", "password"]):
+                if not show_secrets and (key == "pat" or any(s in key for s in ["secret", "key", "password"])):
                     if isinstance(value, str) and value.startswith("keyring://"):
                         display_value = "[dim]<stored in keyring>[/dim]"
                     else:
@@ -599,7 +661,7 @@ def show_effective_config(
     def mask_secret(key: str, value: str) -> str:
         if not value:
             return "[dim]not set[/dim]"
-        if not show_secrets and any(s in key.lower() for s in ["secret", "key", "password"]):
+        if not show_secrets and (key.lower() == "pat" or any(s in key.lower() for s in ["secret", "key", "password"])):
             return "****" + value[-4:] if len(value) > 4 else "****"
         return value