Remove ANSI color codes from text

Update a PAM record via NSF v3 API or classic record_management.

Update an NSF/classic-cached record via vault/records/v3/update. On ``RS_OUT_OF_SYNC`` with no explicit *revision*, syncs once. When the upda

Validate port number

Construct a TunnelDAG without going through __init__ (which needs network setup).

Clean KCM autofill-configuration JSON for Keeper RBI. Keeper RBI uses the same JSON array format as KCM/Guacamole: [{"page": "*.exa

Generate dry-run report showing what would be created. PII (names, emails) are partially masked for security. The value of a

Instantiate `cls`, force the lazy `dag` property, return the kwargs passed to the patched `DAG(...)` constructor.

Build a serialized GraphSyncMultiResult. per_stream: list of (stream_id bytes, sync_point int, has_more bool, data_items

Capture stdout from a JSON-mode dry-run; return parsed JSON.

Raise ``CommandError`` when *result['success']* is falsy. Standardises the ``if not result['success']: raise ...`` pattern that appears in al

Detect if an account is part of a dual-account/rotational group. CyberArk dual accounts have VirtualUserName and/or GroupPlatformID in their

Populate context using the configuration UID. From the configuration record, get the gateway from the settings.

Resolve a resource record's PAM Config UID via KRouter's PAM_LINK graph. Returns the config_uid that owns the resource. Used as a fallback when

User-facing product name. Defaults to get_integration_name().

Get the record UID from the vertex

Load configuration from file.

Build a fake HTTP 403 throttle response.

Resolve a record by UID, folder path, or title including Nested Share Records. *rec_type* may be a single record type string or a collection of a

Resolve rotation schedule for pam rotation edit (Web Vault use-default-schedule parity).

Send email via configured provider. Args: to: Recipient email address subject: Email subject bod

Validate IP address list

Check if an integer is currently in the free pool. Args: integer: The integer to check. Returns: Tr

Build a structured import report for console and vault storage.

Display record details in the right panel using Commander's get command

Read a float env var; return ``default`` when unset, empty, or unparseable.

Filter resources and users by connection group name patterns. Patterns are comma-separated, support fnmatch wildcards (* and ?). Retu

Find PAM configuration UID by project name after initial import. Handles #N suffix deduplication from PAMProjectImportCommand.

Build a minimal valid recording wire format so _decrypt_recording_file succeeds.

Parse 'Key1=Val1,Key2=Val2' into [(Key1, Val1), (Key2, Val2)].

Return Keeper ``schedule`` dict for ``platform_id`` (cached). Calls ``/api/platforms/{platformId}/rotation-policy/`` once per platfor

Strip C0/C1 control characters (incl. ESC) from attacker-supplied text.

Multi-stream read against the per-graph endpoints. The graph's data lives in a single stream keyed by the graph's origin (e.g. the PA

Update the search display and results with blinking cursor. Args: perform_search: If True, perform search when text changes. Set

Update the shortcuts bar at bottom of detail panel

Pre-import validation. Returns list of warning strings.

Add post-rotation script(s) to a rotation record

Raise CommandError unless the user may configure workflow settings.

Warn if the SP doesn't appear as Cloud SSO in cached enterprise data.

Add a record in *folder_uid*, using NSF-native creation when needed.

Find owned config record by exact title match using vault search. Only records owned by the current account are eligible. Shared or n