@celonis/content-cli 1.13.1 → 1.14.1

package/commands/t2tc/diff.service.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "adm-zip", "stream", "form-data", "uuid", "../../core/utils/logger", "../../core/utils/file-service", "./api/diff-api"], factory);
+        define(["require", "exports", "adm-zip", "stream", "form-data", "uuid", "../../core/utils/logger", "../../core/utils/file-service", "../../core/utils/cui-file-service", "./api/diff-api"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -25,10 +25,12 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const uuid_1 = require("uuid");
     const logger_1 = require("../../core/utils/logger");
     const file_service_1 = require("../../core/utils/file-service");
+    const cui_file_service_1 = require("../../core/utils/cui-file-service");
     const diff_api_1 = require("./api/diff-api");
     class DiffService {
         constructor(context) {
             this.diffApi = new diff_api_1.DiffApi(context);
+            this.cuiFileService = new cui_file_service_1.CuiFileService(context);
         }
         diffPackages(file, hasChanges, baseVersion, jsonResponse) {
             return __awaiter(this, void 0, void 0, function* () {
@@ -46,7 +48,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 const formData = this.buildBodyForDiff(packages);
                 const returnedHasChangesData = yield this.diffApi.hasChanges(baseVersion, formData);
                 if (jsonResponse) {
-                    this.exportListOfPackageDiffMetadata(returnedHasChangesData);
+                    yield this.exportListOfPackageDiffMetadata(returnedHasChangesData);
                 }
                 else {
                     logger_1.logger.info(this.buildStringResponseForPackageDiffMetadataList(returnedHasChangesData));
@@ -59,7 +61,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 const formData = this.buildBodyForDiff(packages);
                 const returnedHasChangesData = yield this.diffApi.diffPackages(baseVersion, formData);
                 if (jsonResponse) {
-                    this.exportListOfPackageDiffs(returnedHasChangesData);
+                    yield this.exportListOfPackageDiffs(returnedHasChangesData);
                 }
                 else {
                     logger_1.logger.info(this.buildStringResponseForPackageDiffs(returnedHasChangesData));
@@ -81,14 +83,18 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
             });
         }
         exportListOfPackageDiffs(packageDiffs) {
-            const filename = (0, uuid_1.v4)() + ".json";
-            file_service_1.fileService.writeToFileWithGivenName(JSON.stringify(packageDiffs), filename);
-            logger_1.logger.info(file_service_1.FileService.fileDownloadedMessage + filename);
+            return __awaiter(this, void 0, void 0, function* () {
+                const filename = (0, uuid_1.v4)() + ".json";
+                const writtenFilename = yield this.cuiFileService.writeToFileWithGivenName(JSON.stringify(packageDiffs), filename);
+                logger_1.logger.info(file_service_1.FileService.fileDownloadedMessage + writtenFilename);
+            });
         }
         exportListOfPackageDiffMetadata(packageDiffMetadata) {
-            const filename = (0, uuid_1.v4)() + ".json";
-            file_service_1.fileService.writeToFileWithGivenName(JSON.stringify(packageDiffMetadata), filename);
-            logger_1.logger.info(file_service_1.FileService.fileDownloadedMessage + filename);
+            return __awaiter(this, void 0, void 0, function* () {
+                const filename = (0, uuid_1.v4)() + ".json";
+                const writtenFilename = yield this.cuiFileService.writeToFileWithGivenName(JSON.stringify(packageDiffMetadata), filename);
+                logger_1.logger.info(file_service_1.FileService.fileDownloadedMessage + writtenFilename);
+            });
         }
         buildStringResponseForPackageDiffs(packageDiffs) {
             return "\n" + JSON.stringify(packageDiffs, null, 2);

package/commands/t2tc/t2tc-package.service.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "uuid", "form-data", "stream", "adm-zip", "./batch-export-import.constants", "../../core/utils/file-service", "../../core/utils/logger", "../../core/utils/json", "../studio/api/package-api", "./api/t2tc-package-api", "../configuration-management/api/variable-api", "../configuration-management/connection-variable.helper", "./studio.service", "../../core/git-profile/git/git.service", "fs", "../../core/utils/file.constants", "node:path"], factory);
+        define(["require", "exports", "uuid", "form-data", "stream", "adm-zip", "./batch-export-import.constants", "../../core/utils/file-service", "../../core/utils/cui-file-service", "../../core/utils/logger", "../../core/utils/json", "../studio/api/package-api", "./api/t2tc-package-api", "../configuration-management/api/variable-api", "../configuration-management/connection-variable.helper", "./studio.service", "../../core/git-profile/git/git.service", "fs", "../../core/utils/file.constants"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -25,6 +25,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const AdmZip = require("adm-zip");
     const batch_export_import_constants_1 = require("./batch-export-import.constants");
     const file_service_1 = require("../../core/utils/file-service");
+    const cui_file_service_1 = require("../../core/utils/cui-file-service");
     const logger_1 = require("../../core/utils/logger");
     const json_1 = require("../../core/utils/json");
     const package_api_1 = require("../studio/api/package-api");
@@ -35,7 +36,6 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const git_service_1 = require("../../core/git-profile/git/git.service");
     const fs = require("fs");
     const file_constants_1 = require("../../core/utils/file.constants");
-    const node_path_1 = require("node:path");
     class T2tcPackageService {
         constructor(context) {
             this.t2tcPackageApi = new t2tc_package_api_1.T2tcPackageApi(context);
@@ -43,6 +43,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
             this.studioPackageApi = new package_api_1.PackageApi(context);
             this.studioService = new studio_service_1.StudioService(context);
             this.gitService = new git_service_1.GitService(context);
+            this.cuiFileService = new cui_file_service_1.CuiFileService(context);
         }
         listActivePackages(flavors, includeBranches) {
             return __awaiter(this, void 0, void 0, function* () {
@@ -65,7 +66,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                     packagesToExport = yield this.t2tcPackageApi.findAllActivePackages(flavors, withDependencies, includeBranches);
                 }
                 packagesToExport = yield this.studioService.getExportPackagesWithStudioData(packagesToExport, withDependencies);
-                this.exportListOfPackages(packagesToExport);
+                yield this.exportListOfPackages(packagesToExport);
             });
         }
         listPackagesByKeysWithVersion(keysByVersion, withDependencies) {
@@ -112,7 +113,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                     fs.rmSync(extractedDirectory, { recursive: true });
                 }
                 else {
-                    this.downloadZip(exportedPackagesZip, unzip);
+                    yield this.downloadZip(exportedPackagesZip, unzip);
                 }
             });
         }
@@ -143,15 +144,15 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 }
                 fs.rmSync(sourceToBeImported);
                 const reportFileName = "config_import_report_" + (0, uuid_1.v4)() + ".json";
-                file_service_1.fileService.writeToFileWithGivenName(JSON.stringify(postPackageImportData), reportFileName);
-                logger_1.logger.info("Config import report file: " + reportFileName);
+                const writtenFilename = yield this.cuiFileService.writeToFileWithGivenName(JSON.stringify(postPackageImportData), reportFileName);
+                logger_1.logger.info("Config import report file: " + writtenFilename);
             });
         }
         findAndExportListOfActivePackagesByVariableValue(flavors, variableValue, variableType, includeBranches) {
             return __awaiter(this, void 0, void 0, function* () {
                 let packagesToExport = yield this.t2tcPackageApi.findActivePackagesByVariableValue(flavors, variableValue, variableType, includeBranches);
                 packagesToExport = yield this.studioService.getExportPackagesWithStudioData(packagesToExport, false);
-                this.exportListOfPackages(packagesToExport);
+                yield this.exportListOfPackages(packagesToExport);
             });
         }
         listActivePackagesByVariableValue(flavors, variableValue, variableType, includeBranches) {
@@ -163,9 +164,11 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
             });
         }
         exportListOfPackages(packages) {
-            const filename = (0, uuid_1.v4)() + ".json";
-            file_service_1.fileService.writeToFileWithGivenName(JSON.stringify(packages), filename);
-            logger_1.logger.info(file_service_1.FileService.fileDownloadedMessage + filename);
+            return __awaiter(this, void 0, void 0, function* () {
+                const filename = (0, uuid_1.v4)() + ".json";
+                const writtenFilename = yield this.cuiFileService.writeToFileWithGivenName(JSON.stringify(packages), filename);
+                logger_1.logger.info(file_service_1.FileService.fileDownloadedMessage + writtenFilename);
+            });
         }
         getVersionsByPackageKey(manifests) {
             const versionsByPackageKey = new Map();
@@ -221,19 +224,18 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
             return null;
         }
         downloadZip(exportedZip, unzip) {
-            if (unzip) {
-                const fileDownloadedMessage = "Successful download. Downloaded directory: ";
-                const targetDirectoryName = `export_${(0, uuid_1.v4)()}`;
-                file_service_1.fileService.extractExportedZipWithNestedZipsToDir(exportedZip, targetDirectoryName);
-                logger_1.logger.info(fileDownloadedMessage + targetDirectoryName);
-            }
-            else {
-                const fileDownloadedMessage = "File downloaded successfully. New filename: ";
-                const filename = `export_${(0, uuid_1.v4)()}.zip`;
-                const fullFilePath = (0, node_path_1.resolve)(process.cwd(), filename);
-                exportedZip.writeZip(fullFilePath, () => fs.chmodSync(fullFilePath, file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS));
-                logger_1.logger.info(fileDownloadedMessage + filename);
-            }
+            return __awaiter(this, void 0, void 0, function* () {
+                if (unzip) {
+                    const fileDownloadedMessage = "Successful download. Downloaded directory: ";
+                    const directoryName = yield this.cuiFileService.writeDirectoryWithGivenName(targetDir => file_service_1.fileService.extractExportedZipWithNestedZipsToDir(exportedZip, targetDir), `export_${(0, uuid_1.v4)()}`);
+                    logger_1.logger.info(fileDownloadedMessage + directoryName);
+                }
+                else {
+                    const fileDownloadedMessage = "File downloaded successfully. New filename: ";
+                    const filename = yield this.cuiFileService.writeZipToFileWithGivenName(exportedZip.toBuffer(), `export_${(0, uuid_1.v4)()}.zip`);
+                    logger_1.logger.info(fileDownloadedMessage + filename);
+                }
+            });
         }
     }
     exports.T2tcPackageService = T2tcPackageService;

package/content-cli.js

@@ -75,6 +75,10 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
      */
     function configureRootCommands(configurator) {
         configurator.command("list").description("Commands to list content.").alias("ls");
+        configurator.command("export").description("Export resource: action flow or data pool");
+        configurator.command("import").description("Import resource: action flow or data pool");
+        configurator.command("pull").description("Pull resource: skill, bookmark, view bookmark, data pool or asset");
+        configurator.command("push").description("Push resource: asset, skill, bookmark, view bookmark, CTP or data pool");
     }
     function run() {
         return __awaiter(this, void 0, void 0, function* () {

package/core/command/module-handler.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "path", "fs", "commander", "../utils/logger", "chalk"], factory);
+        define(["require", "exports", "path", "fs", "commander", "../utils/logger", "../feature-flag/feature-disabled-error", "chalk"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -23,6 +23,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const fs = require("fs");
     const commander_1 = require("commander");
     const logger_1 = require("../utils/logger");
+    const feature_disabled_error_1 = require("../feature-flag/feature-disabled-error");
     const chalk = require("chalk");
     class IModule {
     }
@@ -204,6 +205,12 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                         logger_1.logger.error(error.message);
                         return;
                     }
+                    // Backend gates early-access features; translate its "feature disabled"
+                    // rejection into a clear message instead of a raw error.
+                    if ((0, feature_disabled_error_1.isFeatureDisabledError)(error)) {
+                        logger_1.logger.error(`'${this.cmd.name()}' is not enabled for your team. Contact support to request access.`);
+                        return;
+                    }
                     logger_1.logger.error(`An unexpected error occured executing a command: ${error}`);
                     process.exitCode = 1;
                 }

package/core/feature-flag/feature-disabled-error.js

@@ -0,0 +1,52 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.isFeatureDisabledError = exports.FEATURE_DISABLED_CODE = void 0;
+    /**
+     * Recognizes the backend's "feature not enabled" response so the CLI can surface a
+     * clear message instead of a raw error. Enforcement stays entirely in the backend
+     * (pacman); the CLI only translates the response — it never decides entitlement.
+     *
+     * The backend rejects a flag-gated request with 403 and a machine-readable body:
+     * {"errorCode":"feature-disabled", ...} (pacman's standard ErrorTransport). Keying
+     * off the stable code (rather than a free-text message) keeps this robust.
+     */
+    exports.FEATURE_DISABLED_CODE = "feature-disabled";
+    /**
+     * True when the given error represents a backend "feature disabled" rejection.
+     * HttpClient rejects with the stringified response body (often wrapped as
+     * "FatalError: {json}"), so we extract and parse the embedded JSON payload.
+     */
+    function isFeatureDisabledError(error) {
+        return extractErrorCode(error) === exports.FEATURE_DISABLED_CODE;
+    }
+    exports.isFeatureDisabledError = isFeatureDisabledError;
+    function extractErrorCode(error) {
+        let text = "";
+        if (error instanceof Error) {
+            text = error.message;
+        }
+        else if (typeof error === "string") {
+            text = error;
+        }
+        const jsonStart = text.indexOf("{");
+        if (jsonStart === -1) {
+            return undefined;
+        }
+        try {
+            const payload = JSON.parse(text.slice(jsonStart));
+            return typeof payload.errorCode === "string" ? payload.errorCode : undefined;
+        }
+        catch (_a) {
+            return undefined;
+        }
+    }
+});

package/core/http/http-client.js

@@ -53,6 +53,24 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 });
             });
         }
+        getStatusAndData(url) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const fullUrl = this.resolveUrl(url);
+                logger_1.logger.debug(`HttpClient - GET ${fullUrl}`);
+                return this.axios.get(fullUrl, {
+                    headers: this.buildHeaders(),
+                    validateStatus: () => true,
+                }).then(response => {
+                    logger_1.logger.debug(`Response ${response.status}`);
+                    return { status: response.status, data: response.data };
+                }).catch(err => {
+                    if (err.response) {
+                        return { status: err.response.status, data: err.response.data };
+                    }
+                    throw new logger_1.FatalError(err);
+                });
+            });
+        }
         getFile(url) {
             return __awaiter(this, void 0, void 0, function* () {
                 return new Promise((resolve, reject) => {

package/core/http/http-shared/base.manager.js

@@ -13,59 +13,44 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "fs", "path", "../../utils/logger", "../../utils/file.constants"], factory);
+        define(["require", "exports", "../../utils/logger", "../../utils/cui-file-service"], factory);
     }
 })(function (require, exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.BaseManager = void 0;
-    const fs = require("fs");
-    const path = require("path");
     const logger_1 = require("../../utils/logger");
-    const file_constants_1 = require("../../utils/file.constants");
+    const cui_file_service_1 = require("../../utils/cui-file-service");
     class BaseManager {
         constructor(context) {
             this.fileDownloadedMessage = "File downloaded successfully. New filename: ";
             this.httpClient = () => context.httpClient;
+            this.cuiFileService = new cui_file_service_1.CuiFileService(context);
         }
         pull() {
             return __awaiter(this, void 0, void 0, function* () {
-                return new Promise((resolve, reject) => {
-                    this.httpClient()
-                        .get(this.getConfig().pullUrl)
-                        .then(data => {
-                        try {
-                            const filename = this.writeToFile(data);
-                            logger_1.logger.info(this.fileDownloadedMessage + filename);
-                            resolve();
-                        }
-                        catch (e) {
-                            logger_1.logger.error(new logger_1.FatalError(e));
-                            reject();
-                        }
-                    })
-                        .catch(err => {
-                        logger_1.logger.error(new logger_1.FatalError(err));
-                        reject();
-                    });
-                });
+                try {
+                    const data = yield this.httpClient().get(this.getConfig().pullUrl);
+                    const filename = yield this.writeToFile(data);
+                    logger_1.logger.info(this.fileDownloadedMessage + filename);
+                }
+                catch (err) {
+                    logger_1.logger.error(new logger_1.FatalError(err));
+                    throw err;
+                }
             });
         }
         pullFile() {
             return __awaiter(this, void 0, void 0, function* () {
-                return new Promise((resolve, reject) => {
-                    this.httpClient()
-                        .downloadFile(this.getConfig().pullUrl)
-                        .then(data => {
-                        const filename = this.writeStreamToFile(data);
-                        logger_1.logger.info(this.fileDownloadedMessage + filename);
-                        resolve();
-                    })
-                        .catch(err => {
-                        logger_1.logger.error(new logger_1.FatalError(err));
-                        reject();
-                    });
-                });
+                try {
+                    const data = yield this.httpClient().downloadFile(this.getConfig().pullUrl);
+                    const filename = yield this.writeStreamToFile(data);
+                    logger_1.logger.info(this.fileDownloadedMessage + filename);
+                }
+                catch (err) {
+                    logger_1.logger.error(new logger_1.FatalError(err));
+                    throw err;
+                }
             });
         }
         push() {
@@ -102,34 +87,25 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         }
         findAll() {
             return __awaiter(this, void 0, void 0, function* () {
-                return new Promise((resolve, reject) => {
-                    this.httpClient()
-                        .get(this.getConfig().findAllUrl)
-                        .then(data => {
-                        this.getConfig().onFindAll(data);
-                        resolve(data);
-                    })
-                        .catch(err => {
-                        logger_1.logger.error(new logger_1.FatalError(err));
-                        reject();
-                    });
-                });
+                try {
+                    const data = yield this.httpClient().get(this.getConfig().findAllUrl);
+                    yield this.getConfig().onFindAll(data);
+                    return data;
+                }
+                catch (err) {
+                    logger_1.logger.error(new logger_1.FatalError(err));
+                    throw err;
+                }
             });
         }
         writeToFile(data) {
-            const filename = this.getConfig().exportFileName;
-            this.writeToFileWithGivenName(data, filename);
-            return filename;
+            return __awaiter(this, void 0, void 0, function* () {
+                return this.cuiFileService.writeToFileWithGivenName(this.getSerializedFileContent(data), this.getConfig().exportFileName);
+            });
         }
         writeStreamToFile(data) {
-            const filename = this.getConfig().exportFileName;
-            fs.writeFileSync(filename, data, { mode: file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS });
-            return filename;
-        }
-        writeToFileWithGivenName(data, filename) {
-            fs.writeFileSync(path.resolve(process.cwd(), filename), this.getSerializedFileContent(data), {
-                encoding: "utf-8",
-                mode: file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS,
+            return __awaiter(this, void 0, void 0, function* () {
+                return this.cuiFileService.writeZipToFileWithGivenName(data, this.getConfig().exportFileName);
             });
         }
     }

package/core/utils/branches.js

@@ -17,7 +17,17 @@
             }
             return packageKey.includes(BranchUtils.BRANCH_SEPARATOR);
         }
+        static constructBranchKey(projectKey, branchKey) {
+            return `${projectKey}${BranchUtils.BRANCH_SEPARATOR}${branchKey}`;
+        }
+        static extractProjectKey(packageKey) {
+            if (!BranchUtils.isBranchPackageKey(packageKey)) {
+                return packageKey;
+            }
+            return packageKey.substring(0, packageKey.indexOf(BranchUtils.BRANCH_SEPARATOR));
+        }
     }
     exports.BranchUtils = BranchUtils;
+    BranchUtils.MAIN_BRANCH_KEY = "main";
     BranchUtils.BRANCH_SEPARATOR = "@";
 });

package/core/utils/cui-api.js

@@ -0,0 +1,52 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports", "./logger"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.CuiApi = exports.CuiMarking = exports.CUI_MARKING_FAILED_MESSAGE = void 0;
+    const logger_1 = require("./logger");
+    exports.CUI_MARKING_FAILED_MESSAGE = "Could not resolve CUI marking. No file was written";
+    var CuiMarking;
+    (function (CuiMarking) {
+        CuiMarking["DISABLED"] = "DISABLED";
+        CuiMarking["CLASSIFIED"] = "CLASSIFIED";
+    })(CuiMarking || (exports.CuiMarking = CuiMarking = {}));
+    class CuiApi {
+        constructor(context) {
+            this.httpClient = () => context.httpClient;
+        }
+        getCuiMarking() {
+            return __awaiter(this, void 0, void 0, function* () {
+                const { status, data } = yield this.httpClient().getStatusAndData(CuiApi.CUI_PDF_COVER_SHEET_URL);
+                if (status === CuiApi.STATUS_FORBIDDEN) {
+                    logger_1.logger.debug("CUI marking does not apply, the feature flag is disabled");
+                    return { marking: CuiMarking.DISABLED };
+                }
+                if (status === CuiApi.STATUS_OK && data) {
+                    return { marking: CuiMarking.CLASSIFIED, cover: data };
+                }
+                logger_1.logger.debug(`The CUI cover call answered with status ${status}`);
+                throw new logger_1.FatalError(exports.CUI_MARKING_FAILED_MESSAGE);
+            });
+        }
+    }
+    exports.CuiApi = CuiApi;
+    CuiApi.CUI_PDF_COVER_SHEET_URL = "/api/team/cui-settings/cui-pdf-cover";
+    CuiApi.STATUS_OK = 200;
+    CuiApi.STATUS_FORBIDDEN = 403;
+});

package/core/utils/cui-file-service.js

@@ -0,0 +1,106 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports", "node:path", "adm-zip", "./cui-api", "./file-service", "./file.constants", "./logger"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.CuiFileService = void 0;
+    const path = require("node:path");
+    const AdmZip = require("adm-zip");
+    const cui_api_1 = require("./cui-api");
+    const file_service_1 = require("./file-service");
+    const file_constants_1 = require("./file.constants");
+    const logger_1 = require("./logger");
+    class CuiFileService {
+        constructor(context) {
+            this.cuiApi = new cui_api_1.CuiApi(context);
+        }
+        writeToFileWithGivenName(data, filename) {
+            return __awaiter(this, void 0, void 0, function* () {
+                return this.writeWithCoverHandling(name => file_service_1.fileService.writeToFileWithGivenName(data, name), filename, cover => this.writeClassifiedArchive(filename, data, cover));
+            });
+        }
+        writeZipToFileWithGivenName(zipData, filename) {
+            return __awaiter(this, void 0, void 0, function* () {
+                return this.writeWithCoverHandling(name => file_service_1.fileService.writeBufferToFileWithGivenName(zipData, name), filename, cover => {
+                    const zip = new AdmZip(zipData);
+                    this.addCoverPage(zip, cover);
+                    return this.writeArchive(zip, filename);
+                });
+            });
+        }
+        writeDirectoryWithGivenName(write, directoryName) {
+            return __awaiter(this, void 0, void 0, function* () {
+                return this.writeWithCoverHandling(write, directoryName, cover => {
+                    const coverSheet = this.decodeCoverPage(cover);
+                    const classifiedName = this.prefixFileName(directoryName, CuiFileService.CLASSIFIED_PREFIX);
+                    write(classifiedName);
+                    file_service_1.fileService.writeBufferToFileWithGivenName(coverSheet, path.join(classifiedName, CuiFileService.COVER_SHEET_FILE_NAME));
+                    return classifiedName;
+                });
+            });
+        }
+        writeWithCoverHandling(write, filename, onClassified) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const decision = yield this.cuiApi.getCuiMarking();
+                if (decision.marking === cui_api_1.CuiMarking.DISABLED) {
+                    write(filename);
+                    return filename;
+                }
+                return onClassified(decision.cover);
+            });
+        }
+        writeClassifiedArchive(filename, data, cover) {
+            const zip = new AdmZip();
+            zip.addFile(path.basename(filename), Buffer.from(data, "utf-8"), "", file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS);
+            this.addCoverPage(zip, cover);
+            return this.writeArchive(zip, filename);
+        }
+        addCoverPage(zip, cover) {
+            zip.addFile(CuiFileService.COVER_SHEET_FILE_NAME, this.decodeCoverPage(cover), "", file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS);
+        }
+        writeArchive(zip, filename) {
+            const archiveName = this.buildClassifiedArchiveName(filename);
+            file_service_1.fileService.writeBufferToFileWithGivenName(zip.toBuffer(), archiveName);
+            return archiveName;
+        }
+        decodeCoverPage(cover) {
+            const coverPage = cover.coverPage;
+            if (!(coverPage === null || coverPage === void 0 ? void 0 : coverPage.pdfContent)) {
+                logger_1.logger.debug("CUI marking applies but the response contained no cover page");
+                throw new logger_1.FatalError(cui_api_1.CUI_MARKING_FAILED_MESSAGE);
+            }
+            if (coverPage.encoding !== CuiFileService.BASE64_ENCODING) {
+                logger_1.logger.debug(`Unsupported CUI cover page encoding: ${coverPage.encoding}`);
+                throw new logger_1.FatalError(cui_api_1.CUI_MARKING_FAILED_MESSAGE);
+            }
+            return Buffer.from(coverPage.pdfContent, CuiFileService.BASE64_ENCODING);
+        }
+        buildClassifiedArchiveName(filename) {
+            const baseName = path.basename(filename);
+            const nameWithoutExtension = baseName.slice(0, baseName.length - path.extname(baseName).length);
+            return path.join(path.dirname(filename), `${CuiFileService.CLASSIFIED_PREFIX}${nameWithoutExtension}.zip`);
+        }
+        prefixFileName(filename, prefix) {
+            return path.join(path.dirname(filename), `${prefix}${path.basename(filename)}`);
+        }
+    }
+    exports.CuiFileService = CuiFileService;
+    CuiFileService.COVER_SHEET_FILE_NAME = "CUI_Cover_Sheet.pdf";
+    CuiFileService.CLASSIFIED_PREFIX = "CUI - ";
+    CuiFileService.BASE64_ENCODING = "base64";
+});