@axinom/mosaic-cli 0.56.0 → 0.57.0-rc.3

package/dist/esm/commands/service/purge-permissions/purge-permissions.js

@@ -0,0 +1,49 @@
+import { getServiceAccountToken, purgePermissions as purgePermissionsBe, } from '@axinom/mosaic-id-link-be';
+import { ensureError, isNullOrWhitespace } from '@axinom/mosaic-service-common';
+import chalk from 'chalk';
+const { green, red } = chalk;
+export const validateArgs = (args) => {
+    const errorMessages = [];
+    const serviceId = args.serviceId ?? process.env.SERVICE_ID ?? '';
+    const idServiceAuthBaseURL = args.idServiceAuthBaseURL ?? process.env.ID_SERVICE_AUTH_BASE_URL ?? '';
+    const clientId = args.clientId ?? process.env.SERVICE_ACCOUNT_CLIENT_ID ?? '';
+    const clientSecret = args.clientSecret ?? process.env.SERVICE_ACCOUNT_CLIENT_SECRET ?? '';
+    if (isNullOrWhitespace(serviceId)) {
+        errorMessages.push('[serviceId] is required.');
+    }
+    else if (serviceId.startsWith('ax-')) {
+        errorMessages.push(`[serviceId] cannot start with ax-`);
+    }
+    if (isNullOrWhitespace(idServiceAuthBaseURL)) {
+        errorMessages.push('[idServiceBaseURL] is required.');
+    }
+    if (isNullOrWhitespace(clientId)) {
+        errorMessages.push('[clientId] is required.');
+    }
+    if (isNullOrWhitespace(clientSecret)) {
+        errorMessages.push('[clientSecret] is required.');
+    }
+    return [
+        {
+            serviceId,
+            idServiceAuthBaseURL,
+            clientId,
+            clientSecret,
+        },
+        errorMessages,
+    ];
+};
+export const purgePermissions = async (args) => {
+    try {
+        const serviceAccountToken = await getServiceAccountToken(args.idServiceAuthBaseURL, args.clientId, args.clientSecret);
+        const purgePermissionResults = await purgePermissionsBe(args.idServiceAuthBaseURL, serviceAccountToken.accessToken, args.serviceId);
+        console.log(green(`Permissions purged successfully for Service [${args.serviceId}].`));
+        console.log(green(JSON.stringify(purgePermissionResults, null, 2)));
+    }
+    catch (e) {
+        const error = ensureError(e);
+        console.log(red(`Error while purging permission for Service ID [${args.serviceId}].`));
+        console.log(red(JSON.stringify(error.message)));
+    }
+};
+//# sourceMappingURL=purge-permissions.js.map

package/dist/esm/commands/service/purge-permissions/purge-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge-permissions.js","sourceRoot":"","sources":["../../../../../src/commands/service/purge-permissions/purge-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,gBAAgB,IAAI,kBAAkB,GACvC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAE7B,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,IAAgC,EACkB,EAAE;IACpD,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IAEjE,MAAM,oBAAoB,GACxB,IAAI,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC;IAC9E,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAAC;IAEvE,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,aAAa,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,kBAAkB,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC7C,aAAa,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;QACrC,aAAa,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,OAAO;QACL;YACE,SAAS;YACT,oBAAoB;YACpB,QAAQ;YACR,YAAY;SACb;QACD,aAAa;KACd,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,IAA0C,EAC3B,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,MAAM,sBAAsB,CACtD,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,YAAY,CAClB,CAAC;QAEF,MAAM,sBAAsB,GAAG,MAAM,kBAAkB,CACrD,IAAI,CAAC,oBAAoB,EACzB,mBAAmB,CAAC,WAAW,EAC/B,IAAI,CAAC,SAAS,CACf,CAAC;QAEF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,gDAAgD,IAAI,CAAC,SAAS,IAAI,CAAC,CAC1E,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,kDAAkD,IAAI,CAAC,SAAS,IAAI,CAAC,CAC1E,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC"}

package/dist/esm/commands/service/sync-permissions/sync-permission-command.d.ts

@@ -0,0 +1,3 @@
+import type { CommandModule } from 'yargs';
+import type { GetSyncPermissionsOptions } from './sync-permissions-options.js';
+export declare const syncPermissionsCommand: CommandModule<unknown, GetSyncPermissionsOptions>;

package/dist/{commands → esm/commands}/service/sync-permissions/sync-permission-command.js

@@ -1,9 +1,7 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.syncPermissionsCommand = void 0;
-const chalk_1 = require("chalk");
-const sync_permissions_1 = require("./sync-permissions");
-exports.syncPermissionsCommand = {
+import chalk from 'chalk';
+import { synchronizePermissions, validateArgs } from './sync-permissions.js';
+const { red, yellow } = chalk;
+export const syncPermissionsCommand = {
     builder: (yargs) => {
         return yargs
             .option('serviceId', {
@@ -33,16 +31,16 @@ exports.syncPermissionsCommand = {
         });
     },
     handler: async (args) => {
-        const [validatedArgs, errorMessages] = (0, sync_permissions_1.validateArgs)(args);
+        const [validatedArgs, errorMessages] = validateArgs(args);
         if (errorMessages.length > 0) {
-            console.log((0, chalk_1.red)('Some required arguments are missing and/or are erroneous.'));
+            console.log(red('Some required arguments are missing and/or are erroneous.'));
             errorMessages.map((message) => {
-                console.log((0, chalk_1.yellow)(`${message}`));
+                console.log(yellow(`${message}`));
             });
             console.log();
         }
         else {
-            await (0, sync_permissions_1.synchronizePermissions)(validatedArgs);
+            await synchronizePermissions(validatedArgs);
         }
     },
 };

package/dist/esm/commands/service/sync-permissions/sync-permission-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-permission-command.js","sourceRoot":"","sources":["../../../../../src/commands/service/sync-permissions/sync-permission-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC7E,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;AAE9B,MAAM,CAAC,MAAM,sBAAsB,GAG/B;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACjB,OAAO,KAAK;aACT,MAAM,CAAC,WAAW,EAAE;YACnB,QAAQ,EACN,qIAAqI;YACvI,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,sBAAsB,EAAE;YAC9B,QAAQ,EACN,0IAA0I;YAC5I,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,8BAA8B,EAAE;YACtC,QAAQ,EACN,oHAAoH;YACtH,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,UAAU,EAAE;YAClB,QAAQ,EACN,mLAAmL;YACrL,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC;aACD,MAAM,CAAC,cAAc,EAAE;YACtB,QAAQ,EACN,yIAAyI;YAC3I,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,2DAA2D,CAAC,CACjE,CAAC;YACF,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,MAAM,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/esm/commands/service/sync-permissions/sync-permissions-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sync-permissions-options.js.map

package/dist/esm/commands/service/sync-permissions/sync-permissions-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-permissions-options.js","sourceRoot":"","sources":["../../../../../src/commands/service/sync-permissions/sync-permissions-options.ts"],"names":[],"mappings":""}

package/dist/{commands → esm/commands}/service/sync-permissions/sync-permissions.d.ts

@@ -1,3 +1,3 @@
-import { GetSyncPermissionsOptions } from './sync-permissions-options';
+import type { GetSyncPermissionsOptions } from './sync-permissions-options.js';
 export declare const validateArgs: (args: GetSyncPermissionsOptions) => [Required<GetSyncPermissionsOptions>, string[]];
 export declare const synchronizePermissions: (args: Required<GetSyncPermissionsOptions>) => Promise<void>;

package/dist/esm/commands/service/sync-permissions/sync-permissions.js

@@ -0,0 +1,62 @@
+import { getServiceAccountToken, synchronizePermissions as synchronizePermissionsBe, } from '@axinom/mosaic-id-link-be';
+import { ensureError, isNullOrWhitespace } from '@axinom/mosaic-service-common';
+import chalk from 'chalk';
+import * as fs from 'fs';
+import { exitCode } from '../../../common/index.js';
+const { green, red, yellow } = chalk;
+export const validateArgs = (args) => {
+    const errorMessages = [];
+    const serviceId = args.serviceId ?? process.env.SERVICE_ID ?? '';
+    const idServiceAuthBaseURL = args.idServiceAuthBaseURL ?? process.env.ID_SERVICE_AUTH_BASE_URL ?? '';
+    const permissionDefinitionJsonPath = args.permissionDefinitionJsonPath ??
+        `./src/generated/security/permission-definition.json`;
+    const clientId = args.clientId ?? process.env.SERVICE_ACCOUNT_CLIENT_ID ?? '';
+    const clientSecret = args.clientSecret ?? process.env.SERVICE_ACCOUNT_CLIENT_SECRET ?? '';
+    if (isNullOrWhitespace(serviceId)) {
+        errorMessages.push('[serviceId] is required.');
+    }
+    else if (serviceId.startsWith('ax-')) {
+        errorMessages.push(`[serviceId] cannot start with ax-`);
+    }
+    if (isNullOrWhitespace(idServiceAuthBaseURL)) {
+        errorMessages.push('[idServiceBaseURL] is required.');
+    }
+    if (isNullOrWhitespace(clientId)) {
+        errorMessages.push('[clientId] is required.');
+    }
+    if (isNullOrWhitespace(clientSecret)) {
+        errorMessages.push('[clientSecret] is required.');
+    }
+    return [
+        {
+            serviceId,
+            idServiceAuthBaseURL,
+            permissionDefinitionJsonPath,
+            clientId,
+            clientSecret,
+        },
+        errorMessages,
+    ];
+};
+export const synchronizePermissions = async (args) => {
+    try {
+        const serviceAccountToken = await getServiceAccountToken(args.idServiceAuthBaseURL, args.clientId, args.clientSecret);
+        console.log(yellow(`Reading permissions from ${args.permissionDefinitionJsonPath}`));
+        const permissionDefinition = JSON.parse(fs.readFileSync(args.permissionDefinitionJsonPath, 'utf-8'));
+        if (permissionDefinition === undefined ||
+            permissionDefinition.permissions.length === 0) {
+            console.log(yellow(`No Permission Definition found in ${args.permissionDefinitionJsonPath}. Cannot proceed with permission synchronization.`));
+            return;
+        }
+        const permissionSyncResults = await synchronizePermissionsBe(args.idServiceAuthBaseURL, serviceAccountToken.accessToken, args.serviceId, permissionDefinition);
+        console.log(green(`Permissions synchronized successfully for Service [${args.serviceId}].`));
+        console.log(green(JSON.stringify(permissionSyncResults, null, 2)));
+    }
+    catch (e) {
+        const error = ensureError(e);
+        console.log(red(`Error while performing permission synchronization for Service ID [${args.serviceId}].`));
+        console.log(red(JSON.stringify(error.message)));
+        process.exit(exitCode);
+    }
+};
+//# sourceMappingURL=sync-permissions.js.map

package/dist/esm/commands/service/sync-permissions/sync-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-permissions.js","sourceRoot":"","sources":["../../../../../src/commands/service/sync-permissions/sync-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,IAAI,wBAAwB,GACnD,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEpD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;AAErC,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,IAA+B,EACkB,EAAE;IACnD,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IAEjE,MAAM,oBAAoB,GACxB,IAAI,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IAC1E,MAAM,4BAA4B,GAChC,IAAI,CAAC,4BAA4B;QACjC,qDAAqD,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC;IAC9E,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAAC;IAEvE,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,aAAa,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,kBAAkB,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC7C,aAAa,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;QACrC,aAAa,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACpD,CAAC;IAED,OAAO;QACL;YACE,SAAS;YACT,oBAAoB;YACpB,4BAA4B;YAC5B,QAAQ;YACR,YAAY;SACb;QACD,aAAa;KACd,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EACzC,IAAyC,EAC1B,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,MAAM,sBAAsB,CACtD,IAAI,CAAC,oBAAoB,EACzB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,YAAY,CAClB,CAAC;QAEF,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,4BAA4B,IAAI,CAAC,4BAA4B,EAAE,CAAC,CACxE,CAAC;QAEF,MAAM,oBAAoB,GAAyB,IAAI,CAAC,KAAK,CAC3D,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAC5D,CAAC;QAEF,IACE,oBAAoB,KAAK,SAAS;YAClC,oBAAoB,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAC7C,CAAC;YACD,OAAO,CAAC,GAAG,CACT,MAAM,CACJ,qCAAqC,IAAI,CAAC,4BAA4B,mDAAmD,CAC1H,CACF,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,qBAAqB,GAAG,MAAM,wBAAwB,CAC1D,IAAI,CAAC,oBAAoB,EACzB,mBAAmB,CAAC,WAAW,EAC/B,IAAI,CAAC,SAAS,EACd,oBAAoB,CACrB,CAAC;QAEF,OAAO,CAAC,GAAG,CACT,KAAK,CACH,sDAAsD,IAAI,CAAC,SAAS,IAAI,CACzE,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CACT,GAAG,CACD,qEAAqE,IAAI,CAAC,SAAS,IAAI,CACxF,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;AACH,CAAC,CAAC"}

package/dist/esm/commands/unpublish-pilet/index.d.ts

@@ -0,0 +1,3 @@
+import type { CommandModule } from 'yargs';
+import type { UnpublishPiletOptions } from './unpublish-pilet-options.js';
+export declare const unpublishPilet: CommandModule<unknown, UnpublishPiletOptions>;

package/dist/{commands → esm/commands}/unpublish-pilet/index.js

@@ -1,12 +1,8 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.unpublishPilet = void 0;
-const tslib_1 = require("tslib");
-const mosaic_service_common_1 = require("@axinom/mosaic-service-common");
-const chalk_1 = tslib_1.__importDefault(require("chalk"));
-const common_1 = require("../../common");
-const unpublish_pilet_1 = require("./unpublish-pilet");
-exports.unpublishPilet = {
+import { ensureError } from '@axinom/mosaic-service-common';
+import chalk from 'chalk';
+import { exitCode } from '../../common/index.js';
+import { callUnpublishPilet } from './unpublish-pilet.js';
+export const unpublishPilet = {
     command: 'unpublish-pilet',
     describe: 'Unpublishes a pilet from Mosaic Micro Frontend Service',
     builder: (yargs) => yargs
@@ -42,10 +38,10 @@ exports.unpublishPilet = {
     }),
     handler: async (options) => {
         try {
-            const result = await (0, unpublish_pilet_1.callUnpublishPilet)(options);
+            const result = await callUnpublishPilet(options);
             if (result) {
-                console.log(chalk_1.default.green('Pilet successfully unpublished.'));
-                console.log(chalk_1.default.green(JSON.stringify({
+                console.log(chalk.green('Pilet successfully unpublished.'));
+                console.log(chalk.green(JSON.stringify({
                     tenantId: options.tenantId,
                     environmentId: options.environmentId,
                     piletName: options.name,
@@ -53,11 +49,11 @@ exports.unpublishPilet = {
             }
         }
         catch (e) {
-            const error = (0, mosaic_service_common_1.ensureError)(e);
-            console.log(chalk_1.default.red('Command failed:'), error.message, 
+            const error = ensureError(e);
+            console.log(chalk.red('Command failed:'), error.message, 
             // eslint-disable-next-line @typescript-eslint/no-explicit-any
             error.response.data.message);
-            process.exit(common_1.exitCode);
+            process.exit(exitCode);
         }
     },
 };

package/dist/esm/commands/unpublish-pilet/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/unpublish-pilet/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,CAAC,MAAM,cAAc,GAAkD;IAC3E,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,wDAAwD;IAClE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,UAAU,EAAE;QAClB,KAAK,EAAE,CAAC,GAAG,CAAC;QACZ,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC;SACD,MAAM,CAAC,eAAe,EAAE;QACvB,KAAK,EAAE,CAAC,GAAG,CAAC;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC;SACD,MAAM,CAAC,QAAQ,EAAE;QAChB,KAAK,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC;QACtB,QAAQ,EACN,iFAAiF;QACnF,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC;SACD,MAAM,CAAC,6BAA6B,EAAE;QACrC,KAAK,EAAE,CAAC,GAAG,EAAE,6BAA6B,CAAC;QAC3C,QAAQ,EAAE,4CAA4C;QACtD,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,CAAC,GAAG,CAAC;QACZ,QAAQ,EAAE,iCAAiC;QAC3C,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,OAA8B,EAAiB,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBAC5D,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,SAAS,EAAE,OAAO,CAAC,IAAI;iBACxB,CAAC,CACH,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAC5B,KAAK,CAAC,OAAO;YACb,8DAA8D;YAC7D,KAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CACrC,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/esm/commands/unpublish-pilet/unpublish-pilet-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=unpublish-pilet-options.js.map

package/dist/esm/commands/unpublish-pilet/unpublish-pilet-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unpublish-pilet-options.js","sourceRoot":"","sources":["../../../../src/commands/unpublish-pilet/unpublish-pilet-options.ts"],"names":[],"mappings":""}

package/dist/{commands → esm/commands}/unpublish-pilet/unpublish-pilet.d.ts

@@ -1,2 +1,2 @@
-import { UnpublishPiletOptions } from './unpublish-pilet-options';
+import type { UnpublishPiletOptions } from './unpublish-pilet-options.js';
 export declare const callUnpublishPilet: (options: UnpublishPiletOptions) => Promise<boolean>;

package/dist/esm/commands/unpublish-pilet/unpublish-pilet.js

@@ -0,0 +1,14 @@
+import Axios from 'axios';
+export const callUnpublishPilet = async (options) => {
+    const apiKeyCredentials = Buffer.from(options.apiKey, 'base64')
+        .toString()
+        .split(':');
+    const response = await Axios.delete(new URL(`v1/pilets/${options.tenantId}/${options.environmentId}/${options.name}`, options.microFrontendServiceBaseUrl).toString(), {
+        auth: {
+            username: apiKeyCredentials[0],
+            password: apiKeyCredentials[1],
+        },
+    });
+    return response.data.success;
+};
+//# sourceMappingURL=unpublish-pilet.js.map

package/dist/esm/commands/unpublish-pilet/unpublish-pilet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unpublish-pilet.js","sourceRoot":"","sources":["../../../../src/commands/unpublish-pilet/unpublish-pilet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,OAA8B,EACZ,EAAE;IACpB,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;SAC5D,QAAQ,EAAE;SACV,KAAK,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CACjC,IAAI,GAAG,CACL,aAAa,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,IAAI,EAAE,EACxE,OAAO,CAAC,2BAA2B,CACpC,CAAC,QAAQ,EAAE,EACZ;QACE,IAAI,EAAE;YACJ,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC9B,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;SAC/B;KACF,CACF,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;AAC/B,CAAC,CAAC"}

package/dist/esm/common/cli-extension.d.ts

@@ -0,0 +1,10 @@
+import type { CommandModule } from 'yargs';
+export type CliExtensionFactory = () => CommandModule<any, any>[];
+interface CliExtensionModule {
+    cliExtension?: unknown;
+    default?: {
+        cliExtension?: unknown;
+    };
+}
+export declare const getCliExtensionFactory: (cliExtensionModule: CliExtensionModule) => CliExtensionFactory | undefined;
+export {};

package/dist/esm/common/cli-extension.js

@@ -0,0 +1,7 @@
+export const getCliExtensionFactory = (cliExtensionModule) => {
+    const cliExtension = cliExtensionModule.cliExtension ?? cliExtensionModule.default?.cliExtension;
+    return typeof cliExtension === 'function'
+        ? cliExtension
+        : undefined;
+};
+//# sourceMappingURL=cli-extension.js.map

package/dist/esm/common/cli-extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-extension.js","sourceRoot":"","sources":["../../../src/common/cli-extension.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,kBAAsC,EACL,EAAE;IACnC,MAAM,YAAY,GAChB,kBAAkB,CAAC,YAAY,IAAI,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC;IAE9E,OAAO,OAAO,YAAY,KAAK,UAAU;QACvC,CAAC,CAAE,YAAoC;QACvC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC"}

package/dist/esm/common/index.d.ts

@@ -0,0 +1,2 @@
+export * from './cli-extension.js';
+export * from './utils.js';

package/dist/esm/common/index.js

@@ -0,0 +1,3 @@
+export * from './cli-extension.js';
+export * from './utils.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC"}

package/dist/{common → esm/common}/utils.js

@@ -1,10 +1,7 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.exitCode = exports.getTimestamp = void 0;
 /**
  * Returns a readable timestamp in current locale time, e.g. `[2021-05-13 13:02:12.685]`
  */
-const getTimestamp = () => {
+export const getTimestamp = () => {
     const offset = new Date().getTimezoneOffset() * 60000; //offset in milliseconds
     const localISOTime = new Date(Date.now() - offset)
         .toISOString()
@@ -12,6 +9,5 @@ const getTimestamp = () => {
         .replace('T', ' ');
     return `[${localISOTime}]`;
 };
-exports.getTimestamp = getTimestamp;
-exports.exitCode = 1;
+export const exitCode = 1;
 //# sourceMappingURL=utils.js.map

package/dist/esm/common/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/common/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAW,EAAE;IACvC,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,iBAAiB,EAAE,GAAG,KAAK,CAAC,CAAC,wBAAwB;IAC/E,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SAC/C,WAAW,EAAE;SACb,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SACZ,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrB,OAAO,IAAI,YAAY,GAAG,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC"}

package/dist/esm/exports.d.ts

@@ -0,0 +1,2 @@
+export * from './lib/get-access-token-options.js';
+export * from './lib/get-dev-access-token.js';

package/dist/esm/exports.js

@@ -0,0 +1,3 @@
+export * from './lib/get-access-token-options.js';
+export * from './lib/get-dev-access-token.js';
+//# sourceMappingURL=exports.js.map

package/dist/esm/exports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/exports.ts"],"names":[],"mappings":"AAAA,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC"}

package/dist/esm/lib/get-access-token-options.d.ts

@@ -0,0 +1,9 @@
+export interface GetAccessTokenOptions {
+    authEndpoint: string;
+    clientId: string;
+    clientSecret: string;
+    permissionsFile: string;
+    userEmail?: string;
+    expiration?: number;
+    failOnUnknownPermission?: boolean;
+}

package/dist/esm/lib/get-access-token-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=get-access-token-options.js.map

package/dist/esm/lib/get-access-token-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-access-token-options.js","sourceRoot":"","sources":["../../../src/lib/get-access-token-options.ts"],"names":[],"mappings":""}

package/dist/esm/lib/get-dev-access-token.d.ts

@@ -0,0 +1,6 @@
+import { type TokenResult } from '@axinom/mosaic-id-link-be';
+import type { GetAccessTokenOptions } from './get-access-token-options.js';
+/**
+ * Returns a development ID JWT token based on passed options.
+ */
+export declare const getDevAccessToken: (options: GetAccessTokenOptions) => Promise<TokenResult>;

package/dist/esm/lib/get-dev-access-token.js

@@ -0,0 +1,11 @@
+import { devGenerateUserAccessTokenWithPermissions, getServiceAccountToken, } from '@axinom/mosaic-id-link-be';
+import { readFileSync } from 'fs';
+/**
+ * Returns a development ID JWT token based on passed options.
+ */
+export const getDevAccessToken = async (options) => {
+    const permissions = JSON.parse(readFileSync(options.permissionsFile, 'utf-8'));
+    const serviceAccountToken = await getServiceAccountToken(options.authEndpoint, options.clientId, options.clientSecret);
+    return devGenerateUserAccessTokenWithPermissions(options.authEndpoint, serviceAccountToken.accessToken, permissions, options.userEmail, options.expiration, options.failOnUnknownPermission);
+};
+//# sourceMappingURL=get-dev-access-token.js.map

package/dist/esm/lib/get-dev-access-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-dev-access-token.js","sourceRoot":"","sources":["../../../src/lib/get-dev-access-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yCAAyC,EACzC,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAGlC;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,OAA8B,EACR,EAAE;IACxB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAC5B,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAC/C,CAAC;IAEF,MAAM,mBAAmB,GAAG,MAAM,sBAAsB,CACtD,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,YAAY,CACrB,CAAC;IACF,OAAO,yCAAyC,CAC9C,OAAO,CAAC,YAAY,EACpB,mBAAmB,CAAC,WAAW,EAC/B,WAAW,EACX,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,uBAAuB,CAChC,CAAC;AACJ,CAAC,CAAC"}

package/dist/esm/package.json

@@ -0,0 +1 @@
+{"type":"module"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axinom/mosaic-cli",
-  "version": "0.56.0",
+  "version": "0.57.0-rc.3",
   "description": "The Axinom Mosaic CLI",
   "author": "Axinom",
   "license": "PROPRIETARY",
@@ -10,35 +10,45 @@
     "axinom mosaic"
   ],
   "bin": {
-    "mosaic": "./bin/mosaic.js"
+    "mosaic": "./bin/mosaic.mjs"
   },
   "files": [
     "dist",
     "src"
   ],
-  "main": "dist/exports.js",
-  "types": "dist/exports.d.ts",
+  "main": "dist/cjs/exports.js",
+  "module": "dist/esm/exports.js",
+  "types": "dist/cjs/exports.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/cjs/exports.d.ts",
+      "import": "./dist/esm/exports.js",
+      "require": "./dist/cjs/exports.js"
+    }
+  },
   "scripts": {
     "clean": "rimraf dist",
-    "build": "yarn clean && tsc --project tsconfig.build.json",
-    "ts:validate": "tsc",
+    "build": "yarn clean && tsc --project tsconfig.build.json && tsc --project tsconfig.build.esm.json && node ../../scripts/write-esm-markers.js && node ./check-build-output.mjs",
+    "ts:validate": "tsc && node ./check-esm-interop.mjs",
+    "check:esm-interop": "node ./check-esm-interop.mjs",
     "build:ci": "yarn workspaces focus && yarn build",
-    "dev": "tsc --watch",
+    "dev": "tsc -w --project tsconfig.build.json",
     "test": "vitest run --silent",
     "test:watch": "vitest watch",
     "test:cov": "vitest run --coverage --silent && yarn posttest:cov",
     "test:debug": "vitest run --inspect-brk --no-file-parallelism",
     "test:ci": "vitest run --reporter=default --reporter=junit --coverage --coverage.reporter=cobertura --coverage.reporter=html",
     "test:ui": "vitest --ui",
-    "posttest:cov": "ts-node ../../scripts/open-test-coverage.ts -- libs/cli",
-    "lint": "eslint . --ext .ts,.tsx,.js --color --cache"
+    "posttest:cov": "tsx ../../scripts/open-test-coverage.ts -- libs/cli",
+    "lint": "eslint . --ext .ts,.tsx,.js --color --cache",
+    "check:build-output": "node ./check-build-output.mjs"
   },
   "dependencies": {
     "@asyncapi/diff": "^0.5.0",
     "@asyncapi/modelina": "^5.10.1",
     "@asyncapi/parser": "^3.6.0",
-    "@axinom/mosaic-id-link-be": "^0.39.0",
-    "@axinom/mosaic-service-common": "^0.69.0",
+    "@axinom/mosaic-id-link-be": "^0.40.0-rc.3",
+    "@axinom/mosaic-service-common": "^0.70.0-rc.3",
     "@graphql-inspector/core": "^3.1.2",
     "@inquirer/confirm": "^3.1.0",
     "@inquirer/core": "^9.1.0",
@@ -77,7 +87,6 @@
     "@vitest/ui": "^4.0.18",
     "jest-extended": "^7.0.0",
     "rimraf": "^3.0.2",
-    "ts-node": "^10.9.1",
     "typescript": "^5.9.3",
     "vitest": "^4.0.18",
     "yargs": "^16.2.0"
@@ -85,5 +94,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "75dcfd9bf92de1ef72a28f073e43a7dfaa7b430b"
+  "gitHead": "9c7831acd6fcced9a09f97ffd4c9d67ee1b3b640"
 }

package/src/cli/index.ts

@@ -1,22 +1,25 @@
-import * as yargs from 'yargs';
-import { applyTemplates } from '../commands/apply-templates';
+import yargs from 'yargs';
+import { applyTemplates } from '../commands/apply-templates/index.js';
 import {
   createExtensionConfigCommand,
   getExtensions,
-} from '../commands/create-extension-config';
-import { createSolutionCommand } from '../commands/create/command';
-import { getAccessToken } from '../commands/get-access-token';
-import { graphqlDiff } from '../commands/graphql-diff';
-import { hosting } from '../commands/hosting';
-import { msgCodegen } from '../commands/msg-codegen';
-import { msgDiff } from '../commands/msg-diff';
-import { pgDump } from '../commands/pg-dump';
-import { publishSchemaToDb } from '../commands/publish-schema-to-db';
-import { service } from '../commands/service';
-import { unpublishPilet } from '../commands/unpublish-pilet';
+} from '../commands/create-extension-config/index.js';
+import { createSolutionCommand } from '../commands/create/command.js';
+import { getAccessToken } from '../commands/get-access-token/index.js';
+import { graphqlDiff } from '../commands/graphql-diff.js';
+import { hosting } from '../commands/hosting/index.js';
+import { msgCodegen } from '../commands/msg-codegen/index.js';
+import { msgDiff } from '../commands/msg-diff/index.js';
+import { pgDump } from '../commands/pg-dump/index.js';
+import { publishSchemaToDb } from '../commands/publish-schema-to-db/index.js';
+import { service } from '../commands/service/index.js';
+import { unpublishPilet } from '../commands/unpublish-pilet/index.js';
+import { getCliExtensionFactory } from '../common/index.js';
 
 export const run = async (): Promise<void> => {
-  yargs
+  const cli = yargs(process.argv.slice(2));
+
+  cli
     .scriptName('mosaic')
     .env()
     .command(applyTemplates)
@@ -36,10 +39,10 @@ export const run = async (): Promise<void> => {
   await Promise.all(
     getExtensions().map(async (library) => {
       try {
-        const { cliExtension } = await import(library);
+        const cliExtension = getCliExtensionFactory(await import(library));
         if (cliExtension) {
-          cliExtension().map((cmd) => {
-            yargs.command(cmd);
+          cliExtension().forEach((cmd) => {
+            cli.command(cmd);
           });
         }
       } catch (error) {
@@ -48,7 +51,7 @@ export const run = async (): Promise<void> => {
     }),
   );
 
-  yargs
+  cli
     .demandCommand()
     .help()
     .epilog(`For more information, visit https://portal.axinom.com.`).argv;

package/src/commands/apply-templates/apply-templates.spec.ts

@@ -6,8 +6,8 @@ import {
   EnvConfigTransform,
   getEnvConfigTransforms,
   transformComparison,
-} from './apply-templates';
-import { Vault } from './bitwarden-vault';
+} from './apply-templates.js';
+import type { Vault } from './bitwarden-vault.js';
 
 // mock file system functions
 const mockState = vi.hoisted(() => ({

package/src/commands/apply-templates/apply-templates.ts

@@ -1,5 +1,5 @@
 /* eslint-disable no-console */
-import { Chalk, cyanBright, gray, green, red, white, yellow } from 'chalk';
+import chalk, { type Chalk } from 'chalk';
 import * as Diff from 'diff';
 import * as envfile from 'envfile';
 import * as fs from 'fs';
@@ -7,10 +7,12 @@ import { copyFileSync, existsSync, readFileSync, writeFileSync } from 'fs';
 import glob from 'glob';
 import * as path from 'path';
 import * as readline from 'readline';
-import * as yargs from 'yargs';
-import { CommandModule } from 'yargs';
-import { exitCode, getTimestamp } from '../../common';
-import { BitwardenVault, Vault } from './bitwarden-vault';
+import { pathToFileURL } from 'url';
+import type { CommandModule } from 'yargs';
+import yargs from 'yargs';
+import { exitCode, getTimestamp } from '../../common/index.js';
+import { BitwardenVault, type Vault } from './bitwarden-vault.js';
+const { cyanBright, gray, green, red, white, yellow } = chalk;
 
 export interface ApplyTemplatesOptions {
   only: string;
@@ -529,7 +531,10 @@ function orderByKey<T>(unordered: Record<string, T>): Record<string, T> {
 }
 
 // Dev helper. Script can be run directly with command (without building the lib):
-//  yarn ts-node libs/cli/src/commands/apply-templates/apply-templates.ts apply-templates
-if (require.main === module) {
-  yargs.command(applyTemplates).demandCommand().argv;
+//  yarn tsx libs/cli/src/commands/apply-templates/apply-templates.ts apply-templates
+const isDirectRun =
+  process.argv[1] !== undefined &&
+  import.meta.url === pathToFileURL(process.argv[1]).href;
+if (isDirectRun) {
+  yargs(process.argv.slice(2)).command(applyTemplates).demandCommand().argv;
 }

package/src/commands/apply-templates/bitwarden-vault.ts

@@ -1,6 +1,7 @@
 /* eslint-disable no-console */
-import { cyanBright, red } from 'chalk';
+import chalk from 'chalk';
 import { execSync } from 'child_process';
+const { cyanBright, red } = chalk;
 
 /** A single item as returned by `bw list items`. */
 interface BitwardenItem {

package/src/commands/apply-templates/index.ts

@@ -1 +1 @@
-export * from './apply-templates';
+export * from './apply-templates.js';