Record a completed batch and adapt parameters if needed. Throttle detection is purely timing-based: if the batch took more than THROT

Remove any dynamically mounted clickable field widgets

Helper to encode YAML string to base64.

Build a DAG with a mocked connection so we can assert sync wiring. Skips real load — caller invokes _sync_legacy / _sync_per_graph directly.

Connect to the Guacamole server. Args: data: Arbitrary connection data to send during handshake. Raises:

Create default configuration structure.

Log storage operation errors consistently

Raise ``CommandError`` if *folder_uid* is not a Nested Share Folder.

Get the user ACL from the record linking graph.

Create a real RestApiContext with QRC disabled to simplify mocking.

Create a minimal ApiRequestPayload for execute_rest.

Remove ANSI color codes from text

Sync full or partial data down to the client

Validate port number

Construct a TunnelDAG without going through __init__ (which needs network setup).

Clean KCM autofill-configuration JSON for Keeper RBI. Keeper RBI uses the same JSON array format as KCM/Guacamole: [{"page": "*.exa

Generate dry-run report showing what would be created. PII (names, emails) are partially masked for security. The value of a

Generate secure random password using Commander's built-in generator. This is a critical security feature. Commander generates passw

Instantiate `cls`, force the lazy `dag` property, return the kwargs passed to the patched `DAG(...)` constructor.

Build a serialized GraphSyncMultiResult. per_stream: list of (stream_id bytes, sync_point int, has_more bool, data_items

Capture stdout from a JSON-mode dry-run; return parsed JSON.

Resolve a resource record's PAM Config UID via KRouter's PAM_LINK graph. Returns the config_uid that owns the resource. Used as a fallback when

Get the record UID from the vertex

Load configuration from file.

Build a fake HTTP 403 throttle response.

Parse ``--expire-at`` / ``--expire-in`` into a millisecond timestamp. Returns *None* if neither argument is provided, or ``-1`` for ``'never'``.

Resolve rotation schedule for pam rotation edit (Web Vault use-default-schedule parity).

Send email via configured provider. Args: to: Recipient email address subject: Email subject bod

Validate IP address list

Check if an integer is currently in the free pool. Args: integer: The integer to check. Returns: Tr

Build a structured import report for console and vault storage.

Display record details in the right panel using Commander's get command

Read a float env var; return ``default`` when unset, empty, or unparseable.

Filter resources and users by connection group name patterns. Patterns are comma-separated, support fnmatch wildcards (* and ?). Retu

Parse 'Key1=Val1,Key2=Val2' into [(Key1, Val1), (Key2, Val2)].

Multi-stream read against the per-graph endpoints. The graph's data lives in a single stream keyed by the graph's origin (e.g. the PA

Update the search display and results with blinking cursor. Args: perform_search: If True, perform search when text changes. Set

Update the shortcuts bar at bottom of detail panel

Pre-import validation. Returns list of warning strings.

Add post-rotation script(s) to a rotation record

Raise ``CommandError`` when *result['success']* is falsy. Standardises the ``if not result['success']: raise ...`` pattern that appears in al

Warn if the SP doesn't appear as Cloud SSO in cached enterprise data.

Populate context using the configuration UID. From the configuration record, get the gateway from the settings.