Capture stdout from a JSON-mode dry-run; return parsed JSON.

Raise ``CommandError`` when *result['success']* is falsy. Standardises the ``if not result['success']: raise ...`` pattern that appears in al

Detect if an account is part of a dual-account/rotational group. CyberArk dual accounts have VirtualUserName and/or GroupPlatformID in their

Populate context using the configuration UID. From the configuration record, get the gateway from the settings.

Resolve a resource record's PAM Config UID via KRouter's PAM_LINK graph. Returns the config_uid that owns the resource. Used as a fallback when

Get the record UID from the vertex

Load configuration from file.

Build a fake HTTP 403 throttle response.

Resolve a record by UID, folder path, or title including Nested Share Records. *rec_type* may be a single record type string or a collection of a

Resolve rotation schedule for pam rotation edit (Web Vault use-default-schedule parity).

Send email via configured provider. Args: to: Recipient email address subject: Email subject bod

Validate IP address list

Check if an integer is currently in the free pool. Args: integer: The integer to check. Returns: Tr

Build a structured import report for console and vault storage.

Display record details in the right panel using Commander's get command

Read a float env var; return ``default`` when unset, empty, or unparseable.

Filter resources and users by connection group name patterns. Patterns are comma-separated, support fnmatch wildcards (* and ?). Retu

Find PAM configuration UID by project name after initial import. Handles #N suffix deduplication from PAMProjectImportCommand.

Build a minimal valid recording wire format so _decrypt_recording_file succeeds.

Parse 'Key1=Val1,Key2=Val2' into [(Key1, Val1), (Key2, Val2)].

Return Keeper ``schedule`` dict for ``platform_id`` (cached). Calls ``/api/platforms/{platformId}/rotation-policy/`` once per platfor

Multi-stream read against the per-graph endpoints. The graph's data lives in a single stream keyed by the graph's origin (e.g. the PA

Update the search display and results with blinking cursor. Args: perform_search: If True, perform search when text changes. Set

Update the shortcuts bar at bottom of detail panel

Pre-import validation. Returns list of warning strings.

Add post-rotation script(s) to a rotation record

Warn if the SP doesn't appear as Cloud SSO in cached enterprise data.

Add a record in *folder_uid*, using NSF-native creation when needed.

Get the Nested Share Folder role label for an access entry. Prefers the stored ``access_role_type`` (proto enum int) when available; otherwis

Get or create the tube registry instance, storing it on params for reuse

Fetch the active or specified configuration for a service provider.

Get a tunnel session by tube_id (thread-safe)

Read registry files. Optionally remove dead or corrupt entries. Returns a list of dicts for tunnels whose owning process is still alive.

Try to match a CyberArk group to a Keeper team. Returns the matched Keeper team name or None if not found.

Parse CLI spec ``LEVEL``, ``LEVEL.SETTING``, or ``LEVEL.SETTING=VALUE``. Returns (level, setting_or_none, value_or_none). ``value_or_none``

Parse a FolderAccessResponse into a standard result dict.

Print a formatted header

Safely copy text to clipboard, handling missing clipboard on remote/headless systems. Returns: (True, "") on success (False, erro

Pre-import validation. Returns list of warning strings.

Walk the vertices using the path and return the vertex starting at root vertex. :param path: An array of path string, or string wher

Build a Connection where header construction runs but no real crypto is needed. Uses the deprecated `encrypted_transmission_key`/`encrypted_sessi

Compute batch sizes and delay to avoid API throttling. API call costs per record (measured via instrumentation): External user: ~