How keeper-security/commander works
Keeper Commander is a CLI and terminal-UI client for Keeper Password Manager and KeeperPAM, with an optional REST service mode. The principal workflow is a user issuing commands or browsing the vault, with Commander handling session state and encrypted API communication to Keeper; command branches also support administration, imports, PAM sessions and security operations. The graph preserves documented capabilities and major runtime layers. Some paths are represented at their existing directory because their specific implementation was not sampled; links based only on broad README descriptions are documented rather than source-verified.
Main entry points: api.py Keeper API Client · app.py Vault TUI · routes.py API Routes · cli.py Command Interface
Components 22
CLI and Vault
- Command Interface
keepercommander/cli.py - Command Handlers
keepercommander/commands - Vault TUI
keepercommander/commands/supershell/app.py - Vault Records
keepercommander/commands/record.py
Client Core
- Session State
keepercommander/params.py - Encryption
keepercommander/crypto.py - Keeper API Client
keepercommander/api.py - Encrypted Transport
keepercommander/rest_api.py
Administration and PAM
- Enterprise Admin
keepercommander/commands/enterprise.py - PAM Operations
keepercommander/commands/pam - PAM Gateway Routing
keepercommander/commands/pam/router_helper.py - Session Launch
keepercommander/commands/pam_launch/launch.py
Import and Storage
- Import and Export
keepercommander/importer/importer.py - JSON Exchange
keepercommander/importer/json/json.py - Local Storage
keepercommander/storage/sqlite_dao.py
Service Mode
- Service Lifecycle
keepercommander/service/core/service_manager.py - REST Application
keepercommander/service/app.py - API Routes
keepercommander/service/api/routes.py - Service Configuration
keepercommander/service/config/service_config.py - Request Queue
keepercommander/service/core/request_queue.py
Other components
- Commander User
- Keeper Cloud
Connections 22
- Commander User → Command Interface: issues commands
- Commander User → Vault TUI: browses vault
- Command Interface → Command Handlers: dispatches
keepercommander/commands/supershell/app.py - Command Handlers → Keeper API Client: uses client
keepercommander/commands/supershell/app.py - Vault TUI → Vault Records: browses records
keepercommander/commands/supershell/app.py - Vault TUI → Session State: reads state
keepercommander/commands/supershell/app.py - Vault Records → Keeper API Client: uses client
- Keeper API Client → Session State: uses session
keepercommander/api.py - Keeper API Client → Encryption: encrypts data
keepercommander/api.py - Keeper API Client → Encrypted Transport: sends requests
keepercommander/api.py - Encrypted Transport → Keeper Cloud: exchanges API data
keepercommander/rest_api.py - Commander User → Enterprise Admin: manages enterprise
- Commander User → PAM Operations: controls privileged access
- PAM Operations → PAM Gateway Routing: routes gateway work
keepercommander/commands/pam/router_helper.py - Commander User → Session Launch: launches sessions
- Commander User → Import and Export: imports or exports
- Import and Export → JSON Exchange: uses JSON format
keepercommander/importer/json/json.py - Commander User → Service Lifecycle: starts service
- Service Lifecycle → REST Application: creates app
keepercommander/service/core/service_manager.py - REST Application → API Routes: initializes routes
keepercommander/service/app.py - API Routes → Service Configuration: loads configuration
keepercommander/service/api/routes.py - API Routes → Request Queue: starts queue
keepercommander/service/api/routes.py