Commander 17.2.8

Released on Feb 19, 2026

New Features

• Added --aging flag to compliance report with record aging data (created, last_modified, last_rotation, last_pw_change)

• Added --username and --team filters to all compliance subcommands

• Added --resolve-teams flag to sfr and team-report for expanding team filter to individual team members

• Added pam project extend command

• Added --keeper-db-proxy (-kdbp) flag to pam tunnel edit for pamDatabase records

• Added --launch-user (-lu) flag to pam connection edit for setting launch credentials

• Updated SaaS commands to use new saasConfiguration record type

• Added Enforcement and Managed Node Details to enterprise-info Roles output

Improvements

• Incremental compliance data sync with per-user staleness tracking to avoid full re-fetches on warm cache

• Per-user cache invalidation for filtered compliance reports — only stale users are fetched from the API

• Dynamic chunking with probe timeouts for preliminary compliance data fetching

• Client-side request timeouts to prevent indefinite hangs during compliance sync

• Enterprise and MSP command improvements

Bug Fixes

• Fixed trickle ICE handling for pam launch command

• Fixed lsf returning "No shared folders found" when no search string was provided

• Fixed cc and ls commands to restore regex search behavior

• Fixed invalid base64 handling

• Fixed ACL lookup skipping for configuration records (which have no parent)

• Prevented PAM records from being used in One-Time Shares

• Filtered false-positive record_password_change events in compliance report (first-set events discarded)

Full Changelog: v17.2.7...v17.2.8