Get SSL context from configuration data if certificates are available. Returns None if no valid certificates are found.

Get current service status.

Return summary dict for post-import stats.

Return the cached ``PublicKeys`` for a team, loading them if needed.

Get terminal information based on platform.

Get timeout setting in minutes to be used in an API call to the Keeper backend timeout_delta(timedelta): Timeout setting as instance of timedelta

Get the user vertices that control a service or task on this machine.

Return (pixel_width, pixel_height) using guacd's own default metrics. Mirrors guacd's PTY calculation (terminal.c): cols = (width - GUAC_

Call whenever Ctrl+C (byte 0x03) is detected in the input stream.

Send a share invite if *needs_invite* is True; raise ValueError.

Check if file logging is active.

Check whether the current user can upload file attachments.

Include DAG/GraphSync information for the record. Args: params: Command parameters ro: Record output dictionary to be

Derive a display role name from permission flags (most permissive wins). Follows the official permission matrix:: full-manager > content

Check if console debug is enabled.

Returns True if the protocol is one of the database protocols: MYSQL, POSTGRESQL, SQLSERVER, MARIADB, ORACLE, MONGODB, REDIS, ELASTICSEARCH,

Return True when *record_uid* is a Nested Share Folder (v3) record.

Check if current user is on the approver list (by email or team membership).

Return True if a real OS-native keychain is available and usable. Returns False when: - keyring is not installed - the runtime is headl

Per-user enterprise enforcement gate. Mirrors web vault's PAM enforcement selectors. Non-enterprise users and unexpected payload shapes fall back

Best-effort PAM config allowedSettings (DAG) gate. action_key: 'connections' (launch), 'tunneling' (port-forward), 'rotation'. Returns True on

Check if key is a section header (only when value is empty). Args: key: Field name value: Field value Returns: True

Map a Unicode scalar to the X11 keysym value sent on the Guacamole ``key`` instruction. Code points U+0000-U+00FF use the direct key

Kill all cloudflared processes as a fallback method.

Link a pamUser to a PAM configuration for scripts-only (noop) rotation.

Load preferences from file, return defaults if not found

Load a user's public key from key_cache or the server. Returns (public_key_object, use_ecc) or raises ValueError.

Get the logout_timer value. If it doesn't exist yet, use None.

Map CyberArk permission booleans to Keeper shared folder permissions. Returns dict with keys: manage_users, manage_records, can_edit, can_sha

When a pamMachine/pamDatabase/pamDirectory has is_admin_external (admin_credential is AD/pamDirectory user, e.g. dot-separated 'AD1.Admin'), T

Seconds for ``time.monotonic()`` deadlines (internal use).

Main entry point for parsing Keeper Commander responses. Args: command (str): The executed command response (Any): Respo

Perform platform-specific authentication