Return keyring account key from URL netloc; falls back to 'config' for legacy entries.

Add AD user to groups via Gateway's rm-add-user-to-group action (KC-1035). Args: config: YAML config with account.ad_gro

Send add_workflow_approvers for the given users / teams. Shared by create + add-approver. Caller must de-duplicate. Raises on transport error.

Add a record to the tree. Records with attachments show 📎 indicator.

Convert legacy username-field/password-field to autofill JSON. Old Guacamole used simple CSS selectors (e.g. 'u', 'passwd') as userna

Apply dynamic CSS based on current theme

Authenticate to a CyberArk PVWA and return session details. Returns ``(pvwa_host, authorization_token, query_params)`` on success, or

Perform Touch ID authentication with proper synchronization

Build a mapping of DNS domain names to NetBIOS names. Returns: Dict mapping DNS names (e.g., 'test.local') to NetBIOS names (e.g.

Build RecordMetadata with encrypted record key and optional TLA.

Build a minimal Permissions proto for revokeSharingPermissions.

Convert character columns/rows into pixel measurements for the Gateway. Uses the pixel mode to select the DPI and pixel formula: - ``'kcm'``

Build FolderData for an update, preserving existing name/color.

Return the (url, body_bytes) that requests.request was last called with.

Check if biometric authentication is available

Check if biometric authentication is enabled for user

Check if platform supports biometric authentication

Delete every temporary PEM file written by ``_load_p12_client_cert``.

Coerce enforcement values to int. Server-side enforcement payloads sometimes serialize numeric fields as strings. Returns None if the value c

Return set of all folder UIDs (shared folder roots + all descendants) under KSM app.

Configure automatic password rotation using PAM rotation command. Uses the existing PAMCreateRecordRotationCommand to set up rotatio

Ask the user to confirm before reading/importing CyberArk data into Keeper. Returns ``True`` to proceed, ``False`` to cancel. The prompt can

Create LocalAuthentication context

Create WebAuthn authenticator data

Create WebAuthn client data

Decrypt record-key-encrypted data from gateway response.

Display this-device info in the detail panel

Display record details with clickable fields for copy-on-click

Display data in table format - must be implemented by subclasses.

Display whoami info in the detail panel

Encode current attributes to a single integer

Ensure Nested Share Folder caches exist on params, even for older sessions.

Build a RouterResponse with a non-OK responseCode wire payload.

Execute a command asynchronously with loading indicator.

Expire a queued request so the worker will not execute it later.

Return the best available email for a CyberArk user dict, or empty string.

Extract credentials from a linked pamUser record. This function extracts username, password, private key, and passphrase from a pamUser

Filter out biometric and persistent login messages from response.

Return raw enforcement value for `key` across known layouts, or None.

Return the highest-version edge for a self-loop DATA path (any edge type).

Check if a folder should be displayed. When no search filter is active, all folders are shown (including empty ones). When searching,

Return the Nested Share Folder role label for a folder accessor. Uses the server-supplied ``role`` (an ``AccessRoleType`` enum name) and

Format record details for TUI display using the 'get' command output

Format timestamp for display with friendly date format

Get valid access token, refreshing if necessary. Returns: Valid access token

Return list of (record_uid, title, record_type, login) for every record in any folder under KSM app.

Get available credentials with consistent error handling

Get Cloudflare configuration

Get the number of vertices that have not been converted to record. This will recurse down the graph. To be counted, the curr

Return direct AT_USER share metadata for *email*, or None.

Determine what sections to show based on kwargs.

Return approximate main-display DPI on macOS via CoreGraphics. Uses ``CGDisplayScreenSize`` (physical size in mm) and ``CGDisplayPixelsWide`` /

Convert event IDs to names.

Extract the user collection logic for reuse in all-features report

Get folder UID by path. Args: folder_path: Folder path (e.g., "Shared Folders/PAM/Engineering") params: Keep

Get gateway application folder from PAM Configuration. Uses PamConfigurationRecordFacade to access the folder_uid property t

Find the connected Gateway UID for a PAM Configuration. Looks up the gateway associated with the specific PAM Config, then verifies i

Extract priority from ICE candidate string to determine send order. ICE candidate priority order (highest to lowest): 1. typ

Get ngrok configuration

Fetch and return the raw secret string for *secret_name*.

Get IDs of selected items.

Get the shell prompt based on current folder context

Return the value of the single non-empty typed field matching field_type. Enforces exactly one non-empty field across both record.fields[] a

Convert user IDs to usernames.

Generate the My Vault welcome screen content with current theme colors

Common error handling for authentication failures