Validate user section (employee information).

Log command errors and return True when execution must stop.

Build the ``docker-compose.yaml`` text for the playground.

Prefer Keeper's API message; drop duplicated client retry log noise.

Walk Nested Share Folder membership tables to collect record UIDs in *folder_uid*. Nested Share Folder does not store ``record_uids`` / ``childre

Create instance of class from rules string rule_string: comma separated integer character counts of [length,] uppercase, lowercase, numbers,

Decrypt AES-256 bytes. Allowed ciphers are: :ecb, :cbc. If for :ecb iv is not used and should be set to "".

Guesses AES cipher (EBC or CBD) from the length of the base64 encoded data.

DPI for Guacamole text-terminal handshake (matches ``screen_info['dpi']`` when mode is unset). Resolved from ``KEEPER_GUAC_PIXEL_MODE`` and :data

Encrypt *plaintext_key* with the recipient's public key.

Configure rotation settings for one or multiple PAM records. The command accepts either ``--record`` or ``--folder`` to target record

Launch the SuperShell TUI - handles login if needed

Fetch single account details including linkedAccounts. LinkedAccounts (logonAccount, reconcileAccount, enableAccount) are only availa

Fetch all CyberArk vault users (excluding component / service accounts). Returns a list of dicts: ``{"id", "username", "email", "type

Fetch the CyberArk Master Policy settings.

Find existing config record by exact title match using vault search.

Convert an ``AccessRoleType`` to a Nested Share Folder display role label. Accepts either the proto enum name (``'SHARED_MANAGER'``) or its integ

Generate authentication options

Get list of available biometric credentials

Get stored credential ID for user from Windows registry

Get the path corresponding to a folder uid.

Resolve gateway UID for a PAM resource record (pamMachine, etc.). Lookup flow: record_uid -> PAM_LINK DAG -> config_uid -> gateway (controller)

Detect Keeper Commander installation method. Returns: str: 'binary' (PyInstaller frozen), 'pip' (installed via pip), or 'source' (de

Get platform handler for current system

Get a map of all the available plugins. This will first get the latest catalog from the GitHub repo. The catalog will contain the plugin

Return the referenced record cache

Generic function to retrieve settings from a DAG DATA edge with the specified path for a resource. The settings are stored as encrypted JSON

Grant a user *or team* access to a Nested Share Folder.

Handle 'no data found' scenarios for different output formats. Args: fmt (str): Output format ('json', 'table', etc.) me

Checks if all attributes (not on skiplist) are None

Check if a CyberArk account is missing required fields for PAM import.

Check if this config uses OAuth authentication.

Terminates a process by PID without using psutil.

Flatten any of the three Master Policy response shapes. - **Self-Hosted ``/Policies/1``** → ``{"DualControl": {"Value": true}}`` be

Trigger a clipboard paste to the remote session.