Create or update workflow config via Krouter. Raises CommandError on failure.

Return (pixel_width, pixel_height) for the given pixel mode. Parameters ---------- pixel_mode: ``'kcm'`` — kcm-cli/tty.js formu

Build a DomainAliasRequest protobuf from a validated domain and alias list.

Meta payload that bumps a resource's meta to v1 WITHOUT re-asserting any allowedSettings flags. Used by the launch-credential / version-upgra

Convert bytes to a URL-safe base64 encoded string. Args: b (bytes): The bytes to be encoded. Returns: str: The URL-safe

Convert a string, dict, or list of dicts to camel case. :param str_or_iter: A string or iterable. :type str_or_iter: Union[list, dict,

Capture both stdout/stderr and logging output from command execution.

Check if biometric authentication was previously used for this user

Check if keeper_secrets_manager_core is installed. Returns: bool: True if installed, False otherwise

Clamp passphrase word count to the Vault range (5-9 words).

Clean up resources held by this RecordLink instance. Releases the DAG instance and connection to prevent memory leaks.

Clean up resources held by this UserService instance. Releases the DAG instance and connection to prevent memory leaks.

Clean up resources held by this Rules instance. Releases the DAG instance and connection to prevent memory leaks.

Clean up all resources held by Verify instance. Pattern matches keeper-dag's DAG.cleanup() defensive approach.

Clean up resources held by this Jobs instance. Releases the DAG instance and connection to prevent memory leaks.

Clean up resources held by this Process instance. Releases all DAG instances and connections to prevent memory leaks.

Return the number of Unicode codepoints in the given string or substring. In Python, strings are stored as proper Unicode (UTF-32 internally

Prompt before running a subprocess. Default-deny.

Prompt before loading a private key into the local ssh-agent. Default-deny.

True when PAM_CONNECT_TIMING=1 or the module logger is at DEBUG.

Create and configure the Keeper Commander Service.

Create Blue Print for Keeper Commander Service.

Create a Keeper record to store email configuration. Uses login record type with custom fields to store provider configuration. Args:

Create platform-specific WebAuthn client

Check if credential exists in macOS keychain

Decrypts AES-256 ECB bytes.

Decodes a base64 encoded string into raw bytes.

Decrypt the content of the configuration file and return it as a string.

Delete the entire graph. This will delete all the vertex, which will delete all the edges. This will not automatically save.

Delete biometric flag for user

Detect biometric capabilities for current platform

Disable QRC and fall back to EC-only encryption

Disconnect from the Guacamole server.

Disconnect this vertex from another vertex. This will add a DELETION edge between two vertices. If the vertex no longer belo

Link vault record using the vertices from discovery. If a link already exists, no additional link will be created.

Display configuration details.

Encrypt the content of the configuration file and save it back.

Encrypt *plaintext_key* using the best available team key.

Enforce the range of allowed timeout values based on constants TIMEOUT_MIN Warnings are raised if the timeout is outside of the range. timeou

Load params from config if not already loaded.

Ensure existing meta content has version 1 and rotateOnTermination (for re-writes). Returns a copy with version=<int> and rotateOnTermination