bt-cli 0.4.71__tar.gz → 0.4.72__tar.gz

{bt_cli-0.4.71 → bt_cli-0.4.72}/CLAUDE.md

@@ -1,6 +1,6 @@
 # BT-CLI
 
-BeyondTrust Platform CLI for Password Safe, Entitle, PRA, EPM Windows, EPM Linux, and the BeyondTrust Secrets API. **Version: 0.4.71**
+BeyondTrust Platform CLI for Password Safe, Entitle, PRA, EPM Windows, EPM Linux, and the BeyondTrust Secrets API. **Version: 0.4.72**
 
 ## Setup
 
@@ -82,7 +82,7 @@ PASSWORD=$(bt pws quick checkout -s server -a admin --raw)
 - PRA K8s tunnels: Require Linux jumpoint
 - PWS assets: Must create via workgroup endpoint
 - ECM integration: PWS system name must match PRA jump item name
-- **PRA `-o json` is pure JSON on stdout** — all human status/error banners go to **stderr** (`core/output.py` `err_console`), so `... -o json | jq` is safe. API 4xx `errors` objects are surfaced field-by-field, not collapsed to "Validation Failed".
+- **`-o json` is pure JSON on stdout — in every product.** All human status/progress banners *and interactive prompts* go to **stderr** (`core/output.py` `err_console`; `typer.confirm`/`typer.prompt` are called with `err=True`), so `... -o json | jq` and `json.load(stdin)` are safe even for `quick` workflow commands that narrate their steps. Enforced by static guards in `tests/core/test_json_stdout_purity.py` — when adding a command, use `print_success`/`print_warning`/`print_info` or `err_console.print` for anything that isn't the command's data. Consequence: piping *table* output to a file drops the narration (it's on stderr) — that's intended. PRA API 4xx `errors` objects are surfaced field-by-field, not collapsed to "Validation Failed".
 - **PRA tunnel create gates fields by `tunnel_type`**: tcp→`--ports`, mssql→`--username`/`--database`, k8s→`--url`/`--ca-cert`. **psql/mysql are created BARE** — the public Config API has no write path for their username/database (POST rejects, PATCH no-ops, PUT 405s) though GET shows them; CLI warns + ignores those flags. Set in `/login` UI.
 - **PRA `export jump-items` defaults to a REAL export** (all types: shell/rdp/vnc/web/tunnel, full type-specific columns) that round-trips through `import jump-items`; `--sample` gives the blank template. `bt pra jump-items web create` exists.
 - **PRA vault `associate -t protocol_tunnel` is MSSQL-only** (live-verified): server rejects psql/mysql/tcp/k8s with "Only SQL Server Tunnels are allowed" — use tag/criteria association for those. **TCP `--ports` needs listen;destination *pairs*** (even count; odd → 400 "number of parameters is invalid"). Jumpoint listing is `bt pra jumpoints list` (plural).

{bt_cli-0.4.71 → bt_cli-0.4.72}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: bt-cli
-Version: 0.4.71
+Version: 0.4.72
 Summary: BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM
 Author-email: Dave Grendysz <dgrendysz@beyondtrust.com>
 License: MIT

{bt_cli-0.4.71 → bt_cli-0.4.72}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "bt-cli"
-version = "0.4.71"
+version = "0.4.72"
 description = "BeyondTrust Platform CLI (unofficial) - Password Safe, Entitle, PRA, EPM"
 readme = "README.md"
 requires-python = ">=3.9"

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/__init__.py

@@ -1,3 +1,3 @@
 """BeyondTrust Unified Admin CLI."""
 
-__version__ = "0.4.71"
+__version__ = "0.4.72"

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/commands/learn.py

@@ -221,7 +221,7 @@ def clear_learnings(
         bt learn clear --force
     """
     if not force:
-        if not typer.confirm("Clear all learnings?"):
+        if not typer.confirm("Clear all learnings?", err=True):
             console.print("[yellow]Cancelled[/yellow]")
             raise typer.Exit(0)
 

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/commands/quick.py

@@ -11,7 +11,7 @@ from rich.console import Console
 from rich.panel import Panel
 from rich.table import Table
 
-from ..core.output import print_api_error, print_error, print_success, print_warning
+from ..core.output import err_console, print_api_error, print_error, print_success, print_warning
 from ..core.prompts import prompt_if_missing, prompt_from_list
 
 
@@ -128,7 +128,7 @@ def pasm_onboard(
         for i, row in enumerate(rows, 1):
             console.print(f"  {i}. {row.get('name', '?')} ({row.get('ip', '?')})")
 
-        if not typer.confirm("\nProceed with bulk onboarding?"):
+        if not typer.confirm("\nProceed with bulk onboarding?", err=True):
             console.print("[yellow]Cancelled.[/yellow]")
             raise typer.Exit(0)
 
@@ -158,19 +158,19 @@ def pasm_onboard(
                 )
                 results.append({"name": row.get('name'), "status": "success"})
             except Exception as e:
-                console.print(f"[red]Failed: {e}[/red]")
+                err_console.print(f"[red]Failed: {e}[/red]")
                 results.append({"name": row.get('name'), "status": "failed", "error": str(e)})
 
         # Summary
         console.print(f"\n[bold]Bulk Onboarding Summary:[/bold]")
         success = sum(1 for r in results if r["status"] == "success")
         failed = sum(1 for r in results if r["status"] == "failed")
-        console.print(f"  [green]Success: {success}[/green]")
+        err_console.print(f"  [green]Success: {success}[/green]")
         if failed:
-            console.print(f"  [red]Failed: {failed}[/red]")
+            err_console.print(f"  [red]Failed: {failed}[/red]")
             for r in results:
                 if r["status"] == "failed":
-                    console.print(f"    - {r['name']}: {r.get('error', 'Unknown error')}")
+                    err_console.print(f"    - {r['name']}: {r.get('error', 'Unknown error')}")
 
         if output == "json":
             console.print_json(json.dumps(results, default=str))
@@ -273,7 +273,7 @@ def _onboard_single_host(
                 pws.authenticate()
 
                 # Create asset
-                console.print(f"[dim]PWS: Creating asset '{name}'...[/dim]")
+                err_console.print(f"[dim]PWS: Creating asset '{name}'...[/dim]")
                 asset = pws.create_asset(
                     workgroup_id=workgroup,
                     ip_address=ip,
@@ -281,10 +281,10 @@ def _onboard_single_host(
                     dns_name=dns,
                 )
                 asset_id = asset.get("AssetID")
-                console.print(f"  [green]Created asset ID: {asset_id}[/green]")
+                err_console.print(f"  [green]Created asset ID: {asset_id}[/green]")
 
                 # Create managed system
-                console.print(f"[dim]PWS: Creating managed system '{name}'...[/dim]")
+                err_console.print(f"[dim]PWS: Creating managed system '{name}'...[/dim]")
                 system = pws.create_managed_system(
                     system_name=name,
                     platform_id=platform,
@@ -295,7 +295,7 @@ def _onboard_single_host(
                     elevation_command=elevation,
                 )
                 system_id = system.get("ManagedSystemID")
-                console.print(f"  [green]Created managed system ID: {system_id}[/green]")
+                err_console.print(f"  [green]Created managed system ID: {system_id}[/green]")
 
                 result["pws"] = {
                     "created": True,
@@ -314,7 +314,7 @@ def _onboard_single_host(
                         account_password = generate_password()
                         generated_password = True
 
-                    console.print(f"[dim]PWS: Creating managed account '{account}'...[/dim]")
+                    err_console.print(f"[dim]PWS: Creating managed account '{account}'...[/dim]")
                     account_obj = pws.create_managed_account(
                         system_id=system_id,
                         account_name=account,
@@ -322,7 +322,7 @@ def _onboard_single_host(
                         auto_management_flag=True if functional_account else False,
                     )
                     account_id = account_obj.get("ManagedAccountID")
-                    console.print(f"  [green]Created managed account ID: {account_id}[/green]")
+                    err_console.print(f"  [green]Created managed account ID: {account_id}[/green]")
 
                     if generated_password:
                         console.print(f"  [yellow]Generated password (save this!):[/yellow] [bold]{account_password}[/bold]")
@@ -339,7 +339,7 @@ def _onboard_single_host(
             pra_user = pra_username or ("ec2-admin" if jump_type == "shell" else None)
 
             if jump_type == "shell":
-                console.print(f"[dim]PRA: Creating shell jump item '{name}'...[/dim]")
+                err_console.print(f"[dim]PRA: Creating shell jump item '{name}'...[/dim]")
                 jump_item = pra.create_shell_jump(
                     name=name,
                     hostname=ip,
@@ -350,9 +350,9 @@ def _onboard_single_host(
                     username=pra_user,
                 )
                 jump_id = jump_item.get("id")
-                console.print(f"  [green]Created shell jump ID: {jump_id}[/green]")
+                err_console.print(f"  [green]Created shell jump ID: {jump_id}[/green]")
             else:
-                console.print(f"[dim]PRA: Creating RDP jump item '{name}'...[/dim]")
+                err_console.print(f"[dim]PRA: Creating RDP jump item '{name}'...[/dim]")
                 jump_item = pra.create_rdp_jump(
                     name=name,
                     hostname=ip,
@@ -361,7 +361,7 @@ def _onboard_single_host(
                     rdp_port=port if port != 22 else 3389,
                 )
                 jump_id = jump_item.get("id")
-                console.print(f"  [green]Created RDP jump ID: {jump_id}[/green]")
+                err_console.print(f"  [green]Created RDP jump ID: {jump_id}[/green]")
 
             result["pra"] = {
                 "created": True,
@@ -489,7 +489,7 @@ def pasm_offboard(
                         else:
                             pws_asset_id = pws_system.get("AssetID")
             except Exception as e:
-                console.print(f"[yellow]PWS search error: {e}[/yellow]")
+                err_console.print(f"[yellow]PWS search error: {e}[/yellow]")
 
         # Search PRA
         if not skip_pra:
@@ -512,7 +512,7 @@ def pasm_offboard(
                             pra_jump_type = "rdp"
                             break
             except Exception as e:
-                console.print(f"[yellow]PRA search error: {e}[/yellow]")
+                err_console.print(f"[yellow]PRA search error: {e}[/yellow]")
 
         # Show what will be deleted
         console.print(f"\n[bold]Will delete '{name}':[/bold]")
@@ -541,7 +541,7 @@ def pasm_offboard(
 
         # Confirm
         if not force:
-            confirm = typer.confirm("\nProceed with deletion?")
+            confirm = typer.confirm("\nProceed with deletion?", err=True)
             if not confirm:
                 console.print("[yellow]Cancelled.[/yellow]")
                 raise typer.Exit(0)
@@ -557,21 +557,21 @@ def pasm_offboard(
                 for acc in pws_accounts:
                     acc_id = acc.get("ManagedAccountID", acc.get("AccountId"))
                     acc_name = acc.get("AccountName")
-                    console.print(f"[dim]PWS: Deleting account {acc_name}...[/dim]")
+                    err_console.print(f"[dim]PWS: Deleting account {acc_name}...[/dim]")
                     pws.delete_managed_account(acc_id)
                     deleted_accounts.append({"id": acc_id, "name": acc_name})
-                    console.print(f"  [green]Deleted account: {acc_name}[/green]")
+                    err_console.print(f"  [green]Deleted account: {acc_name}[/green]")
 
                 # Delete system
-                console.print(f"[dim]PWS: Deleting system {pws_system.get('SystemName')}...[/dim]")
+                err_console.print(f"[dim]PWS: Deleting system {pws_system.get('SystemName')}...[/dim]")
                 pws.delete_managed_system(system_id)
-                console.print(f"  [green]Deleted system: {pws_system.get('SystemName')}[/green]")
+                err_console.print(f"  [green]Deleted system: {pws_system.get('SystemName')}[/green]")
 
                 # Delete asset
                 if pws_asset_id:
-                    console.print(f"[dim]PWS: Deleting asset {pws_asset_id}...[/dim]")
+                    err_console.print(f"[dim]PWS: Deleting asset {pws_asset_id}...[/dim]")
                     pws.delete_asset(pws_asset_id)
-                    console.print(f"  [green]Deleted asset ID: {pws_asset_id}[/green]")
+                    err_console.print(f"  [green]Deleted asset ID: {pws_asset_id}[/green]")
 
                 result["pws"] = {
                     "deleted": True,
@@ -585,12 +585,12 @@ def pasm_offboard(
             pra = get_pra_client()
             jump_id = pra_jump.get("id")
 
-            console.print(f"[dim]PRA: Deleting {pra_jump_type} jump item {pra_jump.get('name')}...[/dim]")
+            err_console.print(f"[dim]PRA: Deleting {pra_jump_type} jump item {pra_jump.get('name')}...[/dim]")
             if pra_jump_type == "shell":
                 pra.delete_shell_jump(jump_id)
             else:
                 pra.delete_rdp_jump(jump_id)
-            console.print(f"  [green]Deleted {pra_jump_type} jump: {pra_jump.get('name')}[/green]")
+            err_console.print(f"  [green]Deleted {pra_jump_type} jump: {pra_jump.get('name')}[/green]")
 
             result["pra"] = {
                 "deleted": True,
@@ -650,7 +650,7 @@ def pasm_search(
         try:
             with get_pws_client() as pws:
                 pws.authenticate()
-                console.print(f"[dim]Searching PWS for '{query}'...[/dim]")
+                err_console.print(f"[dim]Searching PWS for '{query}'...[/dim]")
 
                 systems = pws.list_managed_systems()
                 result["pws"]["systems"] = [
@@ -661,12 +661,12 @@ def pasm_search(
                 accounts = pws.list_managed_accounts(account_name=query)
                 result["pws"]["accounts"] = accounts[:20]
         except Exception as e:
-            console.print(f"[yellow]PWS search error: {e}[/yellow]")
+            err_console.print(f"[yellow]PWS search error: {e}[/yellow]")
 
         # Search PRA
         try:
             pra = get_pra_client()
-            console.print(f"[dim]Searching PRA for '{query}'...[/dim]")
+            err_console.print(f"[dim]Searching PRA for '{query}'...[/dim]")
 
             shell_jumps = pra.list_shell_jumps()
             result["pra"]["shell_jumps"] = [
@@ -682,7 +682,7 @@ def pasm_search(
                 or query_lower in j.get("hostname", "").lower()
             ][:20]
         except Exception as e:
-            console.print(f"[yellow]PRA search error: {e}[/yellow]")
+            err_console.print(f"[yellow]PRA search error: {e}[/yellow]")
 
         if output == "json":
             console.print_json(json.dumps(result, default=str))

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/core/output.py

@@ -195,7 +195,9 @@ def confirm_action(message: str, default: bool = False) -> bool:
         True if confirmed, False otherwise
     """
     suffix = " [Y/n]" if default else " [y/N]"
-    response = console.input(f"{message}{suffix} ").strip().lower()
+    # Prompt on stderr (input is still read from stdin) so a confirmation in a
+    # `-o json` flow doesn't land in the JSON document on stdout.
+    response = err_console.input(f"{message}{suffix} ").strip().lower()
 
     if not response:
         return default

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/core/prompts.py

@@ -35,7 +35,7 @@ def prompt_if_missing(
         The value (either original or prompted)
     """
     if value is None or value == "":
-        raw = typer.prompt(prompt_text, type=value_type)
+        raw = typer.prompt(prompt_text, type=value_type, err=True)
         if value_type is str:
             return _clean_str(raw)  # type: ignore[return-value]
         return raw
@@ -69,7 +69,7 @@ def prompt_from_list(
         item_id = item.get(id_key, "")
         item_name = item.get(name_key, "Unknown")
         console.print(f"  {str(item_id):>{id_width}}: {item_name}")
-    raw = typer.prompt(prompt_text, type=value_type)
+    raw = typer.prompt(prompt_text, type=value_type, err=True)
     if value_type is str:
         return _clean_str(raw)  # type: ignore[return-value]
     return raw
@@ -95,11 +95,11 @@ def prompt_choice(
         marker = " (default)" if value == default else ""
         console.print(f"  {value}: {desc}{marker}")
 
-    result = typer.prompt("Choice", default=default or choices[0][0])
+    result = typer.prompt("Choice", default=default or choices[0][0], err=True)
     valid_values = [v for v, _ in choices]
     while result not in valid_values:
         console.print(f"[red]Invalid choice. Options: {', '.join(valid_values)}[/red]")
-        result = typer.prompt("Choice", default=default or choices[0][0])
+        result = typer.prompt("Choice", default=default or choices[0][0], err=True)
     return result
 
 
@@ -148,7 +148,7 @@ def prompt_filtered_pick(
             "[dim]Type a number to pick, text to filter, n/p for next/prev page, blank to cancel[/dim]"
         )
 
-        ans = typer.prompt(">", default="", show_default=False).strip()
+        ans = typer.prompt(">", default="", show_default=False, err=True).strip()
         if ans == "":
             raise typer.Abort()
         low = ans.lower()

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/entitle/commands/bundles.py

@@ -201,7 +201,7 @@ def delete_bundle(
 ) -> None:
     """Delete a bundle."""
     if not confirm:
-        typer.confirm(f"Are you sure you want to delete bundle {bundle_id}?", abort=True)
+        typer.confirm(f"Are you sure you want to delete bundle {bundle_id}?", abort=True, err=True)
 
     try:
         with get_client() as client:

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/entitle/commands/permissions.py

@@ -53,7 +53,7 @@ def revoke_permission(
 ) -> None:
     """Revoke a permission."""
     if not confirm:
-        typer.confirm(f"Are you sure you want to revoke permission {permission_id}?", abort=True)
+        typer.confirm(f"Are you sure you want to revoke permission {permission_id}?", abort=True, err=True)
 
     try:
         with get_client() as client:

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/entitle/commands/requests.py

@@ -141,7 +141,7 @@ def _pick_duration_interactive(
 
 def _prompt_justification() -> str:
     while True:
-        text = typer.prompt("Justification (business reason)").strip()
+        text = typer.prompt("Justification (business reason)", err=True).strip()
         if 1 <= len(text) <= 2048:
             return text
         console.print("[red]Justification must be 1..2048 characters[/red]")
@@ -252,7 +252,7 @@ def create_access_request(
         )
 
         if not yes:
-            typer.confirm("Submit this request?", default=True, abort=True)
+            typer.confirm("Submit this request?", default=True, abort=True, err=True)
 
         with get_client(user_token=True) as writer:
             result = writer.create_access_request(

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/entitle/commands/resources.py

@@ -6,7 +6,7 @@ import httpx
 import typer
 
 from ..client.base import get_client
-from ...core.output import console, print_table, print_json, print_error, print_api_error
+from ...core.output import err_console, console, print_table, print_json, print_error, print_api_error
 
 app = typer.Typer(no_args_is_help=True, help="Manage resources")
 
@@ -98,7 +98,7 @@ def create_virtual_resource(
                 role_name=role_name,
             )
         resource = result.get("result", result)
-        console.print(f"Created virtual resource: {resource.get('name')} (ID: {resource.get('id')})")
+        err_console.print(f"Created virtual resource: {resource.get('name')} (ID: {resource.get('id')})")
         print_json(result)
     except httpx.HTTPStatusError as e:
         print_api_error(e, "create virtual resource")

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/epml/commands/rbp_cmdgrps.py

@@ -135,7 +135,7 @@ def clear_commands(
     """
     from bt_cli.epml.client import get_client
     if not yes:
-        typer.confirm(f"Clear all commands in cmdgrp {cmdgrp_id}?", abort=True)
+        typer.confirm(f"Clear all commands in cmdgrp {cmdgrp_id}?", abort=True, err=True)
     try:
         with get_client() as c:
             c.clear_cmdgrp_commands(cmdgrp_id, host_id=host)

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/epml/commands/rbp_hostgrps.py

@@ -139,7 +139,7 @@ def clear_hosts(
     """
     from bt_cli.epml.client import get_client
     if not yes:
-        typer.confirm(f"Clear all hosts in hostgrp {hostgrp_id}?", abort=True)
+        typer.confirm(f"Clear all hosts in hostgrp {hostgrp_id}?", abort=True, err=True)
     try:
         with get_client() as c:
             c.clear_hostgrp_hosts(hostgrp_id, host_id=host)

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/epml/commands/rbp_tmdategrps.py

@@ -218,7 +218,7 @@ def clear_tmdates(
     """
     from bt_cli.epml.client import get_client
     if not yes:
-        typer.confirm(f"Clear all tmdates in tmdategrp {tmdategrp_id}?", abort=True)
+        typer.confirm(f"Clear all tmdates in tmdategrp {tmdategrp_id}?", abort=True, err=True)
     try:
         with get_client() as c:
             c.clear_tmdategrp_tmdates(tmdategrp_id, host_id=host)

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/epml/commands/rbp_usergrps.py

@@ -139,7 +139,7 @@ def clear_users(
     """
     from bt_cli.epml.client import get_client
     if not yes:
-        typer.confirm(f"Clear all users in usergrp {usergrp_id}?", abort=True)
+        typer.confirm(f"Clear all users in usergrp {usergrp_id}?", abort=True, err=True)
     try:
         with get_client() as c:
             c.clear_usergrp_users(usergrp_id, host_id=host)

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/epmw/commands/policies.py

@@ -199,7 +199,7 @@ def delete_policy(
         if not force:
             policy = client.get_policy(policy_id)
             policy_name = policy.get("name", policy_id)
-            if not typer.confirm(f"Delete policy '{policy_name}'?"):
+            if not typer.confirm(f"Delete policy '{policy_name}'?", err=True):
                 print_warning("Cancelled.")
                 raise typer.Exit(0)
 
@@ -266,7 +266,7 @@ def revert_policy(
             if not policy.get("hasOpenDraft"):
                 print_warning(f"Policy '{policy_name}' has no draft to revert.")
                 raise typer.Exit(0)
-            if not typer.confirm(f"Revert draft changes for policy '{policy_name}'?"):
+            if not typer.confirm(f"Revert draft changes for policy '{policy_name}'?", err=True):
                 print_warning("Cancelled.")
                 raise typer.Exit(0)
 
@@ -668,7 +668,7 @@ def delete_app_group(
         if not force:
             group = client.get_application_group(policy_id, app_group_id)
             group_name = group.get("name", app_group_id)
-            if not typer.confirm(f"Delete application group '{group_name}'?"):
+            if not typer.confirm(f"Delete application group '{group_name}'?", err=True):
                 print_warning("Cancelled.")
                 raise typer.Exit(0)
 

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/epmw/commands/quick.py

@@ -127,7 +127,7 @@ def stale_computers(
                     console.print()
                     if not force:
                         confirm = typer.confirm(
-                            f"Delete {len(stale_computers)} stale computer(s)?"
+                            f"Delete {len(stale_computers)} stale computer(s)?", err=True
                         )
                         if not confirm:
                             console.print("[yellow]Deletion cancelled.[/yellow]")
@@ -417,7 +417,7 @@ def move_computer(
                 )
             console.print(table)
 
-            selection = typer.prompt("Select computer number", type=int)
+            selection = typer.prompt("Select computer number", type=int, err=True)
             if selection < 1 or selection > len(computers):
                 print_error(f"Invalid selection. Choose 1-{len(computers)}")
                 raise typer.Exit(1)
@@ -469,7 +469,7 @@ def move_computer(
                 )
             console.print(table)
 
-            selection = typer.prompt("Select target group number", type=int)
+            selection = typer.prompt("Select target group number", type=int, err=True)
             if selection < 1 or selection > len(groups):
                 print_error(f"Invalid selection. Choose 1-{len(groups)}")
                 raise typer.Exit(1)
@@ -490,7 +490,7 @@ def move_computer(
             console.print(f"[bold]From group:[/bold] {current_group}")
             console.print(f"[bold]To group:[/bold] {group_name}")
             console.print()
-            confirm = typer.confirm("Proceed with move?")
+            confirm = typer.confirm("Proceed with move?", err=True)
             if not confirm:
                 console.print("[yellow]Cancelled.[/yellow]")
                 raise typer.Exit(0)

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/pra/commands/group_policies.py

@@ -132,7 +132,7 @@ def delete_group_policy(
     from rich.console import Console
 
     if not yes:
-        if not typer.confirm(f"Delete Group Policy {policy_id}?"):
+        if not typer.confirm(f"Delete Group Policy {policy_id}?", err=True):
             raise typer.Exit(0)
     try:
         get_client().delete_group_policy(policy_id)

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/pra/commands/jump_clients.py

@@ -122,7 +122,7 @@ def delete_jump_client(
     from bt_cli.pra.client import get_client
 
     if not force:
-        typer.confirm(f"Delete jump client {client_id}?", abort=True)
+        typer.confirm(f"Delete jump client {client_id}?", abort=True, err=True)
 
     try:
         client = get_client()

{bt_cli-0.4.71 → bt_cli-0.4.72}/src/bt_cli/pra/commands/jump_items.py

@@ -262,7 +262,7 @@ def delete_shell_jump(
             return
 
         if not force:
-            typer.confirm(f"Delete shell jump '{item.get('name')}' (ID: {item_id})?", abort=True)
+            typer.confirm(f"Delete shell jump '{item.get('name')}' (ID: {item_id})?", abort=True, err=True)
 
         client.delete_shell_jump(item_id)
         print_success(f"Deleted shell jump '{item.get('name')}' (ID: {item_id})")
@@ -458,7 +458,7 @@ def delete_rdp_jump(
             return
 
         if not force:
-            typer.confirm(f"Delete RDP jump '{item.get('name')}' (ID: {item_id})?", abort=True)
+            typer.confirm(f"Delete RDP jump '{item.get('name')}' (ID: {item_id})?", abort=True, err=True)
 
         client.delete_rdp_jump(item_id)
         print_success(f"Deleted RDP jump '{item.get('name')}' (ID: {item_id})")
@@ -705,7 +705,7 @@ def delete_web_jump(
             return
 
         if not force:
-            typer.confirm(f"Delete web jump '{item.get('name')}' (ID: {item_id})?", abort=True)
+            typer.confirm(f"Delete web jump '{item.get('name')}' (ID: {item_id})?", abort=True, err=True)
 
         client.delete_web_jump(item_id)
         print_success(f"Deleted web jump '{item.get('name')}' (ID: {item_id})")
@@ -941,7 +941,7 @@ def delete_protocol_tunnel(
             return
 
         if not force:
-            typer.confirm(f"Delete protocol tunnel '{item.get('name')}' (ID: {item_id})?", abort=True)
+            typer.confirm(f"Delete protocol tunnel '{item.get('name')}' (ID: {item_id})?", abort=True, err=True)
 
         client.delete_protocol_tunnel(item_id)
         print_success(f"Deleted protocol tunnel '{item.get('name')}' (ID: {item_id})")