@celonis/content-cli 1.9.1 → 1.10.0

package/commands/action-flows/action-flow/action-flow.service.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "uuid", "adm-zip", "form-data", "fs", "./action-flow-api", "../../../core/utils/file-service", "../../../core/utils/logger"], factory);
+        define(["require", "exports", "uuid", "adm-zip", "form-data", "fs", "./action-flow-api", "../../../core/utils/file-service", "../../../core/utils/logger", "../../../core/utils/file.constants"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -26,6 +26,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const action_flow_api_1 = require("./action-flow-api");
     const file_service_1 = require("../../../core/utils/file-service");
     const logger_1 = require("../../../core/utils/logger");
+    const file_constants_1 = require("../../../core/utils/file.constants");
     class ActionFlowService {
         constructor(context) {
             this.actionFlowApi = new action_flow_api_1.ActionFlowApi(context);
@@ -36,13 +37,13 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 const tmpZip = new AdmZip(exportedActionFlowsData);
                 const zip = new AdmZip();
                 tmpZip.getEntries().forEach(entry => {
-                    zip.addFile(entry.entryName, entry.getData());
+                    zip.addFile(entry.entryName, entry.getData(), "", file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS);
                 });
                 if (metadataFilePath) {
                     this.attachMetadataFile(metadataFilePath, zip);
                 }
                 const fileName = "action-flows_export_" + (0, uuid_1.v4)() + ".zip";
-                zip.writeZip(fileName);
+                zip.writeZip(fileName, () => fs.chmodSync(fileName, file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS));
                 logger_1.logger.info(file_service_1.FileService.fileDownloadedMessage + fileName);
             });
         }
@@ -84,7 +85,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         attachMetadataFile(fileName, zip) {
             fileName = fileName + (fileName.endsWith(".json") ? "" : ".json");
             const metadata = file_service_1.fileService.readFile(fileName);
-            zip.addFile(ActionFlowService.METADATA_FILE_NAME, Buffer.from(metadata));
+            zip.addFile(ActionFlowService.METADATA_FILE_NAME, Buffer.from(metadata), "", file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS);
         }
     }
     exports.ActionFlowService = ActionFlowService;

package/commands/asset-registry/asset-registry-api.js

@@ -69,6 +69,15 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 });
             });
         }
+        validate(assetType, body) {
+            return __awaiter(this, void 0, void 0, function* () {
+                return this.httpClient()
+                    .post(`/pacman/api/core/asset-registry/validate/${encodeURIComponent(assetType)}`, body)
+                    .catch((e) => {
+                    throw new logger_1.FatalError(`Problem validating asset type '${assetType}': ${e}`);
+                });
+            });
+        }
     }
     exports.AssetRegistryApi = AssetRegistryApi;
 });

package/commands/asset-registry/asset-registry.service.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "./asset-registry-api", "../../core/utils/file-service", "../../core/utils/logger", "uuid"], factory);
+        define(["require", "exports", "./asset-registry-api", "../../core/utils/file-service", "../../core/utils/logger", "uuid", "fs"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -23,6 +23,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const file_service_1 = require("../../core/utils/file-service");
     const logger_1 = require("../../core/utils/logger");
     const uuid_1 = require("uuid");
+    const fs = require("fs");
     class AssetRegistryService {
         constructor(context) {
             this.api = new asset_registry_api_1.AssetRegistryApi(context);
@@ -78,6 +79,54 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 this.outputResponse(data, jsonResponse);
             });
         }
+        validate(opts) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const payload = this.buildValidatePayload(opts);
+                const data = yield this.api.validate(opts.assetType, payload);
+                this.outputResponse(data, opts.json);
+            });
+        }
+        buildValidatePayload(opts) {
+            const hasNodeKey = !!opts.nodeKey;
+            const hasConfig = !!opts.configuration;
+            const hasFile = !!opts.file;
+            if (hasFile && (hasNodeKey || hasConfig || !!opts.packageKey)) {
+                throw new logger_1.FatalError("Option -f is mutually exclusive with --packageKey, --nodeKey and --configuration.");
+            }
+            if (hasFile) {
+                return this.parseJson(fs.readFileSync(opts.file, "utf-8"), `-f ${opts.file}`);
+            }
+            if (hasNodeKey && hasConfig) {
+                throw new logger_1.FatalError("Options --nodeKey and --configuration are mutually exclusive. Use --nodeKey to validate a stored node, or --configuration to validate a configuration. For full control, use -f.");
+            }
+            if (!hasNodeKey && !hasConfig) {
+                throw new logger_1.FatalError("Provide --packageKey with one of --nodeKey (validate a stored node) or --configuration (validate a configuration), or use -f for a full request file.");
+            }
+            if (!opts.packageKey) {
+                throw new logger_1.FatalError("--packageKey is required when using --nodeKey or --configuration.");
+            }
+            if (hasNodeKey) {
+                return {
+                    assetType: opts.assetType,
+                    packageKey: opts.packageKey,
+                    nodeKeys: [opts.nodeKey],
+                };
+            }
+            const configJson = this.parseJson(opts.configuration, "--configuration");
+            return {
+                assetType: opts.assetType,
+                packageKey: opts.packageKey,
+                nodes: [{ key: AssetRegistryService.INLINE_VALIDATION_NODE_KEY, configuration: configJson }],
+            };
+        }
+        parseJson(raw, source) {
+            try {
+                return JSON.parse(raw);
+            }
+            catch (_a) {
+                throw new logger_1.FatalError(`Invalid JSON in ${source}.`);
+            }
+        }
         outputResponse(data, jsonResponse) {
             if (jsonResponse) {
                 const filename = (0, uuid_1.v4)() + ".json";
@@ -89,7 +138,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
             }
         }
         logDescriptorSummary(descriptor) {
-            logger_1.logger.info(`${descriptor.assetType} - ${descriptor.displayName} [${descriptor.group}] (basePath: ${descriptor.service.basePath})`);
+            logger_1.logger.info(`${descriptor.assetType} - ${descriptor.displayName} [${descriptor.group}]`);
         }
         logDescriptorDetail(descriptor) {
             logger_1.logger.info(`Asset Type:   ${descriptor.assetType}`);
@@ -112,4 +161,5 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         }
     }
     exports.AssetRegistryService = AssetRegistryService;
+    AssetRegistryService.INLINE_VALIDATION_NODE_KEY = "validation-node";
 });

package/commands/asset-registry/module.js

@@ -42,6 +42,15 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 .requiredOption("--assetType <assetType>", "The asset type identifier (e.g., BOARD_V2)")
                 .option("--json", "Return the response as a JSON file")
                 .action(this.getExamples);
+            assetRegistryCommand.command("validate")
+                .description("Validate asset configuration against the asset service's validate endpoint.")
+                .requiredOption("--assetType <assetType>", "The asset type identifier (e.g., BOARD_V2)")
+                .option("--packageKey <packageKey>", "Package key. Required when validating with --nodeKey or --configuration.")
+                .option("--nodeKey <nodeKey>", "Key of an already-stored node to validate (use with --packageKey).")
+                .option("--configuration <configuration>", "Inline JSON of a configuration to validate (use with --packageKey).")
+                .option("-f, --file <file>", "Path to a JSON file containing a full ValidateRequest body. Mutually exclusive with the build-from-options flags.")
+                .option("--json", "Return the response as a JSON file")
+                .action(this.validate);
             assetRegistryCommand.command("methodology")
                 .description("Get the methodology / best-practices guide for an asset type")
                 .requiredOption("--assetType <assetType>", "The asset type identifier (e.g., BOARD_V2)")
@@ -63,6 +72,18 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 yield new asset_registry_service_1.AssetRegistryService(context).getSchema(options.assetType, !!options.json);
             });
         }
+        validate(context, command, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                yield new asset_registry_service_1.AssetRegistryService(context).validate({
+                    assetType: options.assetType,
+                    packageKey: options.packageKey,
+                    nodeKey: options.nodeKey,
+                    configuration: options.configuration,
+                    file: options.file,
+                    json: !!options.json,
+                });
+            });
+        }
         getExamples(context, command, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 yield new asset_registry_service_1.AssetRegistryService(context).getExamples(options.assetType, !!options.json);

package/commands/configuration-management/api/node-api.js

@@ -47,6 +47,37 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 });
             });
         }
+        createStagingNode(packageKey, transport, validateOnly) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const suffix = validateOnly ? "?validate=true" : "";
+                return this.httpClient()
+                    .post(`/pacman/api/core/staging/packages/${packageKey}/nodes${suffix}`, transport)
+                    .catch((e) => {
+                    throw new logger_1.FatalError(`Problem creating node in package ${packageKey}: ${e}`);
+                });
+            });
+        }
+        updateStagingNode(packageKey, nodeKey, transport, validateOnly) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const suffix = validateOnly ? "?validate=true" : "";
+                return this.httpClient()
+                    .put(`/pacman/api/core/staging/packages/${packageKey}/nodes/${nodeKey}${suffix}`, transport)
+                    .catch((e) => {
+                    throw new logger_1.FatalError(`Problem updating node ${nodeKey} in package ${packageKey}: ${e}`);
+                });
+            });
+        }
+        archiveStagingNode(packageKey, nodeKey, force) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const queryParams = new URLSearchParams();
+                queryParams.set("force", force.toString());
+                return this.httpClient()
+                    .delete(`/pacman/api/core/staging/packages/${packageKey}/nodes/${nodeKey}/archive?${queryParams.toString()}`)
+                    .catch((e) => {
+                    throw new logger_1.FatalError(`Problem archiving node ${nodeKey} in package ${packageKey}: ${e}`);
+                });
+            });
+        }
         findVersionedNodesByPackage(packageKey, version, withConfiguration, limit, offset) {
             return __awaiter(this, void 0, void 0, function* () {
                 const queryParams = new URLSearchParams();

package/commands/configuration-management/batch-import-export.service.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "uuid", "form-data", "stream", "adm-zip", "./interfaces/batch-export-import.constants", "../../core/utils/file-service", "../../core/utils/logger", "../../core/utils/json", "../studio/api/package-api", "./api/batch-import-export-api", "./studio.service", "../../core/git-profile/git/git.service", "fs"], factory);
+        define(["require", "exports", "uuid", "form-data", "stream", "adm-zip", "./interfaces/batch-export-import.constants", "../../core/utils/file-service", "../../core/utils/logger", "../../core/utils/json", "../studio/api/package-api", "./api/batch-import-export-api", "./studio.service", "../../core/git-profile/git/git.service", "fs", "../../core/utils/file.constants"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -32,6 +32,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const studio_service_1 = require("./studio.service");
     const git_service_1 = require("../../core/git-profile/git/git.service");
     const fs = require("fs");
+    const file_constants_1 = require("../../core/utils/file.constants");
     class BatchImportExportService {
         constructor(context) {
             this.batchImportExportApi = new batch_import_export_api_1.BatchImportExportApi(context);
@@ -85,11 +86,11 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 const versionsByPackageKey = this.getVersionsByPackageKey(manifest);
                 let exportedVariables = yield this.getVersionedVariablesForPackagesWithKeys(versionsByPackageKey);
                 exportedVariables = this.studioService.fixConnectionVariables(exportedVariables);
-                exportedPackagesZip.addFile(batch_export_import_constants_1.BatchExportImportConstants.VARIABLES_FILE_NAME, Buffer.from((0, json_1.stringify)(exportedVariables), "utf8"));
+                exportedPackagesZip.addFile(batch_export_import_constants_1.BatchExportImportConstants.VARIABLES_FILE_NAME, Buffer.from((0, json_1.stringify)(exportedVariables), "utf8"), "", file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS);
                 const studioPackageKeys = manifest.filter(packageManifest => packageManifest.flavor === batch_export_import_constants_1.BatchExportImportConstants.STUDIO)
                     .map(packageManifest => packageManifest.packageKey);
                 const studioData = yield this.studioService.getStudioPackageManifests(studioPackageKeys);
-                exportedPackagesZip.addFile(batch_export_import_constants_1.BatchExportImportConstants.STUDIO_FILE_NAME, Buffer.from((0, json_1.stringify)(studioData), "utf8"));
+                exportedPackagesZip.addFile(batch_export_import_constants_1.BatchExportImportConstants.STUDIO_FILE_NAME, Buffer.from((0, json_1.stringify)(studioData), "utf8"), "", file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS);
                 exportedPackagesZip.getEntries().forEach(entry => {
                     if (entry.name.endsWith(batch_export_import_constants_1.BatchExportImportConstants.ZIP_EXTENSION)) {
                         const lastUnderscoreIndex = entry.name.lastIndexOf("_");
@@ -127,8 +128,10 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         batchImportPackages(sourcePath, overwrite, gitBranch, performValidation = false) {
             return __awaiter(this, void 0, void 0, function* () {
                 let sourceToBeImported;
+                let temporaryGitFolder;
                 if (gitBranch) {
                     sourceToBeImported = yield this.gitService.pullFromBranch(gitBranch);
+                    temporaryGitFolder = sourceToBeImported;
                 }
                 else {
                     sourceToBeImported = sourcePath;
@@ -145,8 +148,9 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 const postPackageImportData = yield this.batchImportExportApi.importPackages(formData, overwrite, performValidation);
                 yield this.studioService.processImportedPackages(configs, existingStudioPackages, studioManifests);
                 if (gitBranch) {
-                    fs.rmSync(sourceToBeImported);
+                    fs.rmSync(temporaryGitFolder, { recursive: true });
                 }
+                fs.rmSync(sourceToBeImported);
                 const reportFileName = "config_import_report_" + (0, uuid_1.v4)() + ".json";
                 file_service_1.fileService.writeToFileWithGivenName(JSON.stringify(postPackageImportData), reportFileName);
                 logger_1.logger.info("Config import report file: " + reportFileName);
@@ -240,7 +244,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
             else {
                 const fileDownloadedMessage = "File downloaded successfully. New filename: ";
                 const filename = `export_${(0, uuid_1.v4)()}.zip`;
-                exportedZip.writeZip(filename);
+                exportedZip.writeZip(filename, () => fs.chmodSync(filename, file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS));
                 logger_1.logger.info(fileDownloadedMessage + filename);
             }
         }

package/commands/configuration-management/module.js

@@ -116,6 +116,29 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 .option("--withConfiguration", "Include node configuration in the response", false)
                 .option("--json", "Return the response as a JSON file")
                 .action(this.findNode);
+            nodesCommand.command("create")
+                .description("Create a new staging node in a package")
+                .requiredOption("--packageKey <packageKey>", "Identifier of the package")
+                .option("--body <body>", "Node payload as JSON string")
+                .option("-f, --file <file>", "Path to a JSON file containing the node payload")
+                .option("--validate", "Only validate the payload without persisting. Returns success if valid.", false)
+                .option("--json", "Return the response as a JSON file")
+                .action(this.createNode);
+            nodesCommand.command("update")
+                .description("Update a staging node in a package")
+                .requiredOption("--packageKey <packageKey>", "Identifier of the package")
+                .requiredOption("--nodeKey <nodeKey>", "Identifier of the node")
+                .option("--body <body>", "Node payload as JSON string")
+                .option("-f, --file <file>", "Path to a JSON file containing the node payload")
+                .option("--validate", "Only validate the payload without persisting. Returns success if valid.", false)
+                .option("--json", "Return the response as a JSON file")
+                .action(this.updateNode);
+            nodesCommand.command("archive")
+                .description("Archive a staging node in a package")
+                .requiredOption("--packageKey <packageKey>", "Identifier of the package")
+                .requiredOption("--nodeKey <nodeKey>", "Identifier of the node")
+                .option("--force", "Force archive even if the node has dependants", false)
+                .action(this.archiveNode);
             nodesCommand.command("list")
                 .description("List nodes in a specific package version")
                 .requiredOption("--packageKey <packageKey>", "Identifier of the package")
@@ -236,6 +259,21 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 yield new node_service_1.NodeService(context).findNode(options.packageKey, options.nodeKey, options.withConfiguration, (_a = options.packageVersion) !== null && _a !== void 0 ? _a : null, options.json);
             });
         }
+        createNode(context, command, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                yield new node_service_1.NodeService(context).createNode(options.packageKey, options.body, options.file, options.validate, options.json);
+            });
+        }
+        updateNode(context, command, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                yield new node_service_1.NodeService(context).updateNode(options.packageKey, options.nodeKey, options.body, options.file, options.validate, options.json);
+            });
+        }
+        archiveNode(context, command, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                yield new node_service_1.NodeService(context).archiveNode(options.packageKey, options.nodeKey, options.force);
+            });
+        }
         listNodes(context, command, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 yield new node_service_1.NodeService(context).listNodes(options.packageKey, options.packageVersion, options.limit, options.offset, options.withConfiguration, options.json);

package/commands/configuration-management/node.service.js

@@ -57,6 +57,60 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 }
             });
         }
+        createNode(packageKey, body, file, validateOnly, jsonResponse) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const transport = JSON.parse(NodeService.resolveBody(body, file));
+                const node = yield this.nodeApi.createStagingNode(packageKey, transport, validateOnly);
+                if (validateOnly) {
+                    logger_1.logger.info(`Validation successful for node ${transport.key} in package ${packageKey}.`);
+                    return;
+                }
+                if (jsonResponse) {
+                    const filename = (0, uuid_1.v4)() + ".json";
+                    file_service_1.fileService.writeToFileWithGivenName(JSON.stringify(node, null, 2), filename);
+                    logger_1.logger.info(file_service_1.FileService.fileDownloadedMessage + filename);
+                }
+                else {
+                    this.printNode(node);
+                }
+            });
+        }
+        updateNode(packageKey, nodeKey, body, file, validateOnly, jsonResponse) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const transport = JSON.parse(NodeService.resolveBody(body, file));
+                const node = yield this.nodeApi.updateStagingNode(packageKey, nodeKey, transport, validateOnly);
+                if (validateOnly) {
+                    logger_1.logger.info(`Validation successful for node ${nodeKey} in package ${packageKey}.`);
+                    return;
+                }
+                if (jsonResponse) {
+                    const filename = (0, uuid_1.v4)() + ".json";
+                    file_service_1.fileService.writeToFileWithGivenName(JSON.stringify(node, null, 2), filename);
+                    logger_1.logger.info(file_service_1.FileService.fileDownloadedMessage + filename);
+                }
+                else {
+                    this.printNode(node);
+                }
+            });
+        }
+        archiveNode(packageKey, nodeKey, force) {
+            return __awaiter(this, void 0, void 0, function* () {
+                yield this.nodeApi.archiveStagingNode(packageKey, nodeKey, force);
+                logger_1.logger.info(`Node ${nodeKey} in package ${packageKey} archived successfully.`);
+            });
+        }
+        static resolveBody(body, file) {
+            if (body && file) {
+                throw new Error("Please provide either --body or --file, but not both.");
+            }
+            if (!body && !file) {
+                throw new Error("Please provide either --body or --file.");
+            }
+            if (file) {
+                return file_service_1.fileService.readFile(file);
+            }
+            return body;
+        }
         printNode(node) {
             logger_1.logger.info(`ID: ${node.id}`);
             logger_1.logger.info(`Key: ${node.key}`);

package/commands/studio/manager/widget.manager-factory.js

@@ -4,7 +4,7 @@
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "fs", "path", "./widget.manager", "../../../core/utils/logger", "adm-zip", "../../../core/utils/yaml"], factory);
+        define(["require", "exports", "fs", "path", "./widget.manager", "../../../core/utils/logger", "adm-zip", "../../../core/utils/yaml", "../../../core/utils/file.constants"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -16,6 +16,7 @@
     const logger_1 = require("../../../core/utils/logger");
     const AdmZip = require("adm-zip");
     const yaml_1 = require("../../../core/utils/yaml");
+    const file_constants_1 = require("../../../core/utils/file.constants");
     class WidgetManagerFactory {
         constructor(context) {
             this.context = context;
@@ -36,7 +37,7 @@
             const zip = new AdmZip();
             const zipFileName = path.resolve(process.cwd(), "output.zip");
             zip.addLocalFolder(path.resolve(process.cwd()));
-            zip.writeZip(zipFileName);
+            zip.writeZip(zipFileName, () => fs.chmodSync(zipFileName, file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS));
             return fs.createReadStream(path.resolve(process.cwd(), "output.zip"));
         }
         fetchManifest() {

package/core/git-profile/git/git.service.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "simple-git", "fs", "path", "node:os", "uuid"], factory);
+        define(["require", "exports", "simple-git", "fs", "path", "node:os", "uuid", "../../utils/file.constants"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -24,6 +24,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const path = require("path");
     const os = require("node:os");
     const uuid_1 = require("uuid");
+    const file_constants_1 = require("../../utils/file.constants");
     class GitService {
         constructor(context) {
             this.gitProfile = context.gitProfile;
@@ -33,7 +34,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 this.validateGitProfileExistence();
                 const repoUrl = this.getRepoUrl();
                 const targetDir = path.join(os.tmpdir(), `content-cli-${(0, uuid_1.v4)()}`);
-                fs.mkdirSync(targetDir, { recursive: true });
+                fs.mkdirSync(targetDir, { recursive: true, mode: file_constants_1.FileConstants.DEFAULT_FOLDER_PERMISSIONS });
                 const git = (0, simple_git_1.default)();
                 try {
                     yield git.clone(repoUrl, targetDir, ["--branch", branch, "--single-branch"]);
@@ -50,7 +51,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
             return __awaiter(this, void 0, void 0, function* () {
                 this.validateGitProfileExistence();
                 const workingDir = path.join(os.tmpdir(), `content-cli-${(0, uuid_1.v4)()}`);
-                fs.mkdirSync(workingDir, { recursive: true });
+                fs.mkdirSync(workingDir, { recursive: true, mode: file_constants_1.FileConstants.DEFAULT_FOLDER_PERMISSIONS });
                 const repoUrl = this.getRepoUrl();
                 const git = (0, simple_git_1.default)();
                 try {

package/core/git-profile/git-profile.service.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "path", "fs", "../utils/logger", "os", "./git-profile.interface", "./git-profile.validator"], factory);
+        define(["require", "exports", "path", "fs", "../utils/logger", "os", "./git-profile.interface", "./git-profile.validator", "../utils/file.constants"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -25,6 +25,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const os = require("os");
     const git_profile_interface_1 = require("./git-profile.interface");
     const git_profile_validator_1 = require("./git-profile.validator");
+    const file_constants_1 = require("../utils/file.constants");
     class GitProfileService {
         constructor() {
             this.homedir = os.homedir();
@@ -79,6 +80,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
             const newProfileFileName = this.constructProfileFileName(profile.name);
             fs.writeFileSync(path.resolve(this.gitProfileContainerPath, newProfileFileName), JSON.stringify(profile), {
                 encoding: "utf-8",
+                mode: file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS,
             });
         }
         validateProfileName(name) {
@@ -101,11 +103,11 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
             });
         }
         storeConfig(config) {
-            fs.writeFileSync(this.configContainer, JSON.stringify(config), { encoding: "utf-8" });
+            fs.writeFileSync(this.configContainer, JSON.stringify(config), { encoding: "utf-8", mode: file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS });
         }
         createProfileContainerIfNotExists() {
             if (!fs.existsSync(this.gitProfileContainerPath)) {
-                fs.mkdirSync(this.gitProfileContainerPath);
+                fs.mkdirSync(this.gitProfileContainerPath, file_constants_1.FileConstants.DEFAULT_FOLDER_PERMISSIONS);
             }
         }
         constructProfileFileName(profileName) {

package/core/http/http-shared/base.manager.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "fs", "path", "../../utils/logger"], factory);
+        define(["require", "exports", "fs", "path", "../../utils/logger", "../../utils/file.constants"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -22,6 +22,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const fs = require("fs");
     const path = require("path");
     const logger_1 = require("../../utils/logger");
+    const file_constants_1 = require("../../utils/file.constants");
     class BaseManager {
         constructor(context) {
             this.fileDownloadedMessage = "File downloaded successfully. New filename: ";
@@ -122,12 +123,13 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         }
         writeStreamToFile(data) {
             const filename = this.getConfig().exportFileName;
-            fs.writeFileSync(filename, data);
+            fs.writeFileSync(filename, data, { mode: file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS });
             return filename;
         }
         writeToFileWithGivenName(data, filename) {
             fs.writeFileSync(path.resolve(process.cwd(), filename), this.getSerializedFileContent(data), {
                 encoding: "utf-8",
+                mode: file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS,
             });
         }
     }

package/core/profile/profile.service.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "./profile.interface", "./profile.validator", "path", "fs", "../utils/logger", "openid-client", "axios", "os", "./secret-storage.service"], factory);
+        define(["require", "exports", "./profile.interface", "./profile.validator", "path", "fs", "../utils/logger", "openid-client", "axios", "os", "./secret-storage.service", "../utils/file.constants"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -28,6 +28,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const axios_1 = require("axios");
     const os = require("os");
     const secret_storage_service_1 = require("./secret-storage.service");
+    const file_constants_1 = require("../utils/file.constants");
     const homedir = os.homedir();
     // use 5 seconds buffer to avoid rare cases when accessToken is just about to expire before the command is sent
     const expiryBuffer = 5000;
@@ -131,6 +132,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                 }
                 fs.writeFileSync(path.resolve(this.profileContainerPath, newProfileFileName), JSON.stringify(profileToStore), {
                     encoding: "utf-8",
+                    mode: file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS,
                 });
             });
         }
@@ -149,11 +151,11 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
             });
         }
         storeConfig(config) {
-            fs.writeFileSync(this.configContainer, JSON.stringify(config), { encoding: "utf-8" });
+            fs.writeFileSync(this.configContainer, JSON.stringify(config), { encoding: "utf-8", mode: file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS });
         }
         createProfileContainerIfNotExists() {
             if (!fs.existsSync(this.profileContainerPath)) {
-                fs.mkdirSync(this.profileContainerPath);
+                fs.mkdirSync(this.profileContainerPath, file_constants_1.FileConstants.DEFAULT_FOLDER_PERMISSIONS);
             }
         }
         constructProfileFileName(profileName) {

package/core/utils/file-service.js

@@ -13,7 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "fs", "path", "./logger", "adm-zip", "uuid", "node:os"], factory);
+        define(["require", "exports", "fs", "path", "./logger", "adm-zip", "uuid", "node:os", "./file.constants"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -25,10 +25,12 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     const AdmZip = require("adm-zip");
     const uuid_1 = require("uuid");
     const os = require("node:os");
+    const file_constants_1 = require("./file.constants");
     class FileService {
         writeToFileWithGivenName(data, filename) {
             fs.writeFileSync(path.resolve(process.cwd(), filename), this.getSerializedFileContent(data), {
                 encoding: "utf-8",
+                mode: file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS,
             });
         }
         readFileToJson(fileName) {
@@ -45,22 +47,23 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         }
         extractExportedZipWithNestedZips(zipFile) {
             const tempDir = path.join(os.tmpdir(), `${(0, uuid_1.v4)()}`);
-            fs.mkdirSync(tempDir, { recursive: true });
             return this.extractExportedZipWithNestedZipsToDir(zipFile, tempDir);
         }
         extractExportedZipWithNestedZipsToDir(zipFile, targetDir) {
-            zipFile.extractAllTo(targetDir, true);
+            fs.mkdirSync(targetDir, { recursive: true, mode: file_constants_1.FileConstants.DEFAULT_FOLDER_PERMISSIONS });
+            zipFile.extractAllTo(targetDir, true, true);
             const files = fs.readdirSync(targetDir);
             for (const file of files) {
                 const innerZipPath = path.join(targetDir, file);
                 if (file.endsWith(".zip")) {
                     const nestedZip = new AdmZip(innerZipPath);
                     const nestedDir = innerZipPath.replace(/\.zip$/, "");
-                    fs.mkdirSync(nestedDir, { recursive: true });
-                    nestedZip.extractAllTo(nestedDir, true);
+                    fs.mkdirSync(nestedDir, { recursive: true, mode: file_constants_1.FileConstants.DEFAULT_FOLDER_PERMISSIONS });
+                    nestedZip.extractAllTo(nestedDir, true, true);
                     fs.rmSync(innerZipPath); // Optionally remove the inner zip
                 }
             }
+            this.restrictFilePermissions(targetDir);
             return targetDir;
         }
         isDirectory(sourcePath) {
@@ -80,21 +83,35 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
                     const zip = new AdmZip();
                     zip.addLocalFolder(fullPath);
                     const zippedBuffer = zip.toBuffer();
-                    finalZip.addFile(`${file}.zip`, zippedBuffer);
+                    finalZip.addFile(`${file}.zip`, zippedBuffer, "", file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS);
                 }
                 else if (stat.isFile()) {
                     finalZip.addLocalFile(fullPath);
                 }
             });
             const tempDir = path.join(os.tmpdir(), "content-cli-exports");
-            fs.mkdirSync(tempDir, { recursive: true });
+            fs.mkdirSync(tempDir, { recursive: true, mode: file_constants_1.FileConstants.DEFAULT_FOLDER_PERMISSIONS });
             const zipFilePath = path.join(tempDir, `export_${(0, uuid_1.v4)()}.zip`);
-            finalZip.writeZip(zipFilePath);
+            finalZip.writeZip(zipFilePath, () => fs.chmodSync(zipFilePath, file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS));
             return zipFilePath;
         }
         getSerializedFileContent(data) {
             return data;
         }
+        restrictFilePermissions(targetDir) {
+            var _a;
+            const files = fs.readdirSync(targetDir);
+            for (const file of files) {
+                const filePath = path.join(targetDir, file);
+                if ((_a = fs.statSync(filePath)) === null || _a === void 0 ? void 0 : _a.isDirectory()) {
+                    fs.chmodSync(filePath, file_constants_1.FileConstants.DEFAULT_FOLDER_PERMISSIONS);
+                    this.restrictFilePermissions(filePath);
+                }
+                else {
+                    fs.chmodSync(filePath, file_constants_1.FileConstants.DEFAULT_FILE_PERMISSIONS);
+                }
+            }
+        }
     }
     exports.FileService = FileService;
     FileService.fileDownloadedMessage = "File downloaded successfully. New filename: ";

package/core/utils/file.constants.js

@@ -0,0 +1,18 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.FileConstants = void 0;
+    var FileConstants;
+    (function (FileConstants) {
+        FileConstants[FileConstants["DEFAULT_FILE_PERMISSIONS"] = 384] = "DEFAULT_FILE_PERMISSIONS";
+        FileConstants[FileConstants["DEFAULT_FOLDER_PERMISSIONS"] = 448] = "DEFAULT_FOLDER_PERMISSIONS";
+    })(FileConstants || (exports.FileConstants = FileConstants = {}));
+});

package/core/utils/logger.js

@@ -4,7 +4,7 @@
         if (v !== undefined) module.exports = v;
     }
     else if (typeof define === "function" && define.amd) {
-        define(["require", "exports", "winston", "winston-transport", "os", "path", "fs"], factory);
+        define(["require", "exports", "winston", "winston-transport", "os", "path", "fs", "./file.constants"], factory);
     }
 })(function (require, exports) {
     "use strict";
@@ -15,6 +15,7 @@
     const os = require("os");
     const path = require("path");
     const fs = require("fs");
+    const file_constants_1 = require("./file.constants");
     class CustomTransport extends Transport {
         constructor(opts) {
             super(opts);
@@ -43,7 +44,7 @@
     // --- Ensure log directory exists ---
     try {
         if (!fs.existsSync(logDir)) {
-            fs.mkdirSync(logDir, { recursive: true });
+            fs.mkdirSync(logDir, { recursive: true, mode: file_constants_1.FileConstants.DEFAULT_FOLDER_PERMISSIONS });
         }
     }
     catch (error) {

package/lib/commands/asset-registry/asset-registry-api.d.ts

@@ -8,4 +8,5 @@ export declare class AssetRegistryApi {
     getSchema(assetType: string): Promise<any>;
     getExamples(assetType: string): Promise<any>;
     getMethodology(assetType: string): Promise<any>;
+    validate(assetType: string, body: any): Promise<any>;
 }

package/lib/commands/asset-registry/asset-registry.interfaces.d.ts

@@ -28,3 +28,11 @@ export interface AssetContributions {
     dataPipelineEntityTypes: string[];
     actionTypes: string[];
 }
+export interface ValidateOptions {
+    assetType: string;
+    packageKey?: string;
+    nodeKey?: string;
+    configuration?: string;
+    file?: string;
+    json: boolean;
+}

package/lib/commands/asset-registry/asset-registry.service.d.ts

@@ -1,3 +1,4 @@
+import { ValidateOptions } from "./asset-registry.interfaces";
 import { Context } from "../../core/command/cli-context";
 export declare class AssetRegistryService {
     private api;
@@ -7,6 +8,10 @@ export declare class AssetRegistryService {
     getSchema(assetType: string, jsonResponse: boolean): Promise<void>;
     getExamples(assetType: string, jsonResponse: boolean): Promise<void>;
     getMethodology(assetType: string, jsonResponse: boolean): Promise<void>;
+    validate(opts: ValidateOptions): Promise<void>;
+    private static readonly INLINE_VALIDATION_NODE_KEY;
+    private buildValidatePayload;
+    private parseJson;
     private outputResponse;
     private logDescriptorSummary;
     private logDescriptorDetail;

package/lib/commands/asset-registry/module.d.ts

@@ -5,6 +5,7 @@ declare class Module extends IModule {
     private listTypes;
     private getType;
     private getSchema;
+    private validate;
     private getExamples;
     private getMethodology;
 }

package/lib/commands/configuration-management/api/node-api.d.ts

@@ -1,9 +1,12 @@
 import { Context } from "../../../core/command/cli-context";
-import { NodeTransport } from "../interfaces/node.interfaces";
+import { NodeTransport, SaveNodeTransport, UpdateNodeTransport } from "../interfaces/node.interfaces";
 export declare class NodeApi {
     private httpClient;
     constructor(context: Context);
     findStagingNodeByKey(packageKey: string, nodeKey: string, withConfiguration: boolean): Promise<NodeTransport>;
     findVersionedNodeByKey(packageKey: string, nodeKey: string, version: string, withConfiguration: boolean): Promise<NodeTransport>;
+    createStagingNode(packageKey: string, transport: SaveNodeTransport, validateOnly: boolean): Promise<NodeTransport | void>;
+    updateStagingNode(packageKey: string, nodeKey: string, transport: UpdateNodeTransport, validateOnly: boolean): Promise<NodeTransport | void>;
+    archiveStagingNode(packageKey: string, nodeKey: string, force: boolean): Promise<void>;
     findVersionedNodesByPackage(packageKey: string, version: string, withConfiguration: boolean, limit: number, offset: number): Promise<NodeTransport[]>;
 }

package/lib/commands/configuration-management/interfaces/node.interfaces.d.ts

@@ -19,3 +19,23 @@ export interface NodeTransport {
     schemaVersion: number;
     flavor?: string;
 }
+export interface SaveNodeTransport {
+    key: string;
+    name: string;
+    parentNodeKey: string;
+    type: string;
+    configuration?: NodeConfiguration;
+    invalidConfiguration?: string;
+    invalidContent?: boolean;
+    schemaVersion?: number;
+    [key: string]: any;
+}
+export interface UpdateNodeTransport {
+    name: string;
+    parentNodeKey: string;
+    configuration?: NodeConfiguration;
+    invalidConfiguration?: string;
+    invalidContent?: boolean;
+    schemaVersion?: number;
+    [key: string]: any;
+}

package/lib/commands/configuration-management/module.d.ts

@@ -16,6 +16,9 @@ declare class Module extends IModule {
     private listVariables;
     private listAssignments;
     private findNode;
+    private createNode;
+    private updateNode;
+    private archiveNode;
     private listNodes;
     private diffNode;
     private listNodeDependencies;

package/lib/commands/configuration-management/node.service.d.ts

@@ -4,5 +4,9 @@ export declare class NodeService {
     constructor(context: Context);
     findNode(packageKey: string, nodeKey: string, withConfiguration: boolean, packageVersion: string | null, jsonResponse: boolean): Promise<void>;
     listNodes(packageKey: string, packageVersion: string, limit: number, offset: number, withConfiguration: boolean, jsonResponse: boolean): Promise<void>;
+    createNode(packageKey: string, body: string | undefined, file: string | undefined, validateOnly: boolean, jsonResponse: boolean): Promise<void>;
+    updateNode(packageKey: string, nodeKey: string, body: string | undefined, file: string | undefined, validateOnly: boolean, jsonResponse: boolean): Promise<void>;
+    archiveNode(packageKey: string, nodeKey: string, force: boolean): Promise<void>;
+    private static resolveBody;
     private printNode;
 }

package/lib/core/utils/file-service.d.ts

@@ -9,5 +9,6 @@ export declare class FileService {
     isDirectory(sourcePath: string): boolean;
     zipDirectoryInBatchExportFormat(sourceDir: string): string;
     private getSerializedFileContent;
+    private restrictFilePermissions;
 }
 export declare const fileService: FileService;

package/lib/core/utils/file.constants.d.ts

@@ -0,0 +1,4 @@
+export declare enum FileConstants {
+    DEFAULT_FILE_PERMISSIONS = 384,
+    DEFAULT_FOLDER_PERMISSIONS = 448
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celonis/content-cli",
-  "version": "1.9.1",
+  "version": "1.10.0",
   "description": "CLI Tool to help manage content in Celonis Platform",
   "main": "content-cli.js",
   "bin": {