Resolve a resource record's PAM Config UID via KRouter's PAM_LINK graph. Returns the config_uid that owns the resource. Used as a fallback when

Get a record dict from nested_share_records or record_cache.

Get the record UID from the vertex

Load configuration from file.

Build a fake HTTP 403 throttle response.

Resolve rotation schedule for pam rotation edit (Web Vault use-default-schedule parity).

Send email via configured provider. Args: to: Recipient email address subject: Email subject bod

Validate IP address list

Check if an integer is currently in the free pool. Args: integer: The integer to check. Returns: Tr

Build a structured import report for console and vault storage.

Display record details in the right panel using Commander's get command

Read a float env var; return ``default`` when unset, empty, or unparseable.

Filter resources and users by connection group name patterns. Patterns are comma-separated, support fnmatch wildcards (* and ?). Retu

Find PAM configuration UID by project name after initial import. Handles #N suffix deduplication from PAMProjectImportCommand.

Parse 'Key1=Val1,Key2=Val2' into [(Key1, Val1), (Key2, Val2)].

Return Keeper ``schedule`` dict for ``platform_id`` (cached). Calls ``/api/platforms/{platformId}/rotation-policy/`` once per platfor

Multi-stream read against the per-graph endpoints. The graph's data lives in a single stream keyed by the graph's origin (e.g. the PA

Update the search display and results with blinking cursor. Args: perform_search: If True, perform search when text changes. Set

Update the shortcuts bar at bottom of detail panel

Pre-import validation. Returns list of warning strings.

Add post-rotation script(s) to a rotation record

Warn if the SP doesn't appear as Cloud SSO in cached enterprise data.

Add a record in *folder_uid*, using NSF-native creation when needed.

Get or create the tube registry instance, storing it on params for reuse

Fetch the active or specified configuration for a service provider.

Get a tunnel session by tube_id (thread-safe)

Read registry files. Optionally remove dead or corrupt entries. Returns a list of dicts for tunnels whose owning process is still alive.

Try to match a CyberArk group to a Keeper team. Returns the matched Keeper team name or None if not found.

Parse CLI spec ``LEVEL``, ``LEVEL.SETTING``, or ``LEVEL.SETTING=VALUE``. Returns (level, setting_or_none, value_or_none). ``value_or_none``

Parse a FolderAccessResponse into a standard result dict.

Resolve a record by UID, folder path, or title including Nested Share Records. *rec_type* may be a single record type string or a collection of a

Safely copy text to clipboard, handling missing clipboard on remote/headless systems. Returns: (True, "") on success (False, erro

Pre-import validation. Returns list of warning strings.

Walk the vertices using the path and return the vertex starting at root vertex. :param path: An array of path string, or string wher

Build a Connection where header construction runs but no real crypto is needed. Uses the deprecated `encrypted_transmission_key`/`encrypted_sessi

Compute batch sizes and delay to avoid API throttling. API call costs per record (measured via instrumentation): External user: ~

Detect database type from Docker container environment variables. Returns 'mysql' or 'postgresql'.

Show safes and let user select which to import. Returns comma-separated safe names for apply_safe_filter, or None to import all.

Return whether the client is connected or waiting.

Make API call with consistent error handling.

Build a stand-in for a PAM Configuration TypedRecord whose `pamResources` typed field carries the given resourceRef list.

Minimal KeeperParams stand-in — the helpers only use it to drive the router_helper transport, which is mocked here, so a MagicMock is enough.