Classify a single ``-e/--email`` value as a user or a team. Mirrors the legacy ``share-folder`` resolution exactly: 1. If *recipient* match

Cleanup resources

Test helper — wipe the (host, endpoint) cache.

Clean up resources held by this Infrastructure instance. Releases the DAG instance and connection to prevent memory leaks.

Simple confirmation through user input msg(str): Message expecting a yes or no answer Returns True if answer is "yes" and False otherwise.

Create a generator that satisfies the given password complexity enforcement policy.

Create a new output stream. Returns: A new OutputStream with an allocated index.

Create a v6 PAM configuration in *folder_uid* using NSF or classic placement.

Convert CyberArk PasswordChangeDays → Quartz 6-field CRON string. Keeper's rotation engine validates expressions with ``validate_cron

Convert a string, dict, or list of dicts to snake case. :param str_or_iter: A string or iterable. :type str_or_iter: Union[list, dict,

Guesses AES cipher (EBC or CBD) from the length of the plain data.

Decodes a hex encoded string into raw bytes.

Return unique specs in first-seen order and warnings for duplicate CLI options. ``option_label`` is shown in warnings (e.g. ``--set/-s``).

Build a mapping of safeUrlId → sanitized folder name, deduplicating collisions. Returns dict: { safeUrlId: "FolderName" }

Detect the connection protocol from a PAM record. All machine types (pamMachine, pamDirectory, pamDatabase) allow any connection type (s

Encrypt *plaintext_key* using the best available team key. Mirrors legacy ``share-folder``: prefer the team AES key when *prefer_aes* is set,

Encrypt record_key with encryption_key; returns (ciphertext, key_type).

Execute a CLI command and capture output.

``GET /api/platforms/master-rotation-policy/exceptions/``.

Fetch the full platform definition (ConnectionComponents, Properties).

Fetch members of a safe. Returns list of member dicts. Excludes predefined system members. Safe names with spaces, unicode, or pre-en

Convert collected TOTP parts into otpauth:// URLs.

Return a {uid, path} dict for the first NSF folder containing *record_uid*.

Find all top Shared Folders that will contain this record. Record can be in more than two folders by having a "link" which will present a

Convert an ``AccessRoleType`` to a Nested Share Folder display role label. Accepts either the proto enum name (``'SHARED_MANAGER'``) or its integ

Get action-specific parser for detailed help.

Return approvals profile when this integration supports multi-channel approvers.

Get WebAuthn assertion using Touch ID

Get biometric flag for user

POST a stringified JSON object to /api/dag/get_leafs on the KRouter The object is: { vertex: string, graphId: number }

Get device info as a dictionary (for programmatic use)

Return record UIDs directly associated with a folder.

Get launch credential: resolved UID if uid=True, else string reference (title/login).

Return the list of user UIDs currently flagged is_launch_credential on the resource.

Get the parent record uid. Check the ACL edges for the one where belongs_to is True If there is a LINK edge that leads to th