@capraconsulting/cals-cli 2.25.21 → 2.25.23

package/lib/index.js

@@ -44,148 +44,148 @@ var keytar__default = /*#__PURE__*/_interopDefaultLegacy(keytar);
 var read__default = /*#__PURE__*/_interopDefaultLegacy(read);
 var execa__default = /*#__PURE__*/_interopDefaultLegacy(execa);
 
-var version = "2.25.21";
+var version = "2.25.23";
 
-class CacheProvider {
-    constructor(config) {
-        this.mustValidate = false;
-        this.defaultCacheTime = 1800;
-        this.config = config;
-    }
-    /**
-     * Retrieve cache if existent, ignoring the time.
-     *
-     * The caller is responsible for handling proper validation,
-     */
-    retrieveJson(cachekey) {
-        const cachefile = path__default["default"].join(this.config.cacheDir, `${cachekey}.json`);
-        if (!fs__default["default"].existsSync(cachefile)) {
-            return undefined;
-        }
-        const data = fs__default["default"].readFileSync(cachefile, "utf-8");
-        return {
-            cacheTime: fs__default["default"].statSync(cachefile).mtime.getTime(),
-            data: (data === "undefined" ? undefined : JSON.parse(data)),
-        };
-    }
-    /**
-     * Save data to cache.
-     */
-    storeJson(cachekey, data) {
-        const cachefile = path__default["default"].join(this.config.cacheDir, `${cachekey}.json`);
-        if (!fs__default["default"].existsSync(this.config.cacheDir)) {
-            fs__default["default"].mkdirSync(this.config.cacheDir, { recursive: true });
-        }
-        fs__default["default"].writeFileSync(cachefile, data === undefined ? "undefined" : JSON.stringify(data));
-    }
-    async json(cachekey, block, cachetime = this.defaultCacheTime) {
-        const cacheItem = this.mustValidate
-            ? undefined
-            : this.retrieveJson(cachekey);
-        const expire = new Date(new Date().getTime() - cachetime * 1000).getTime();
-        if (cacheItem !== undefined && cacheItem.cacheTime > expire) {
-            return cacheItem.data;
-        }
-        const result = await block();
-        this.storeJson(cachekey, result);
-        return result;
-    }
-    /**
-     * Delete all cached data.
-     */
-    cleanup() {
-        rimraf__default["default"].sync(this.config.cacheDir);
-    }
+class CacheProvider {
+    constructor(config) {
+        this.mustValidate = false;
+        this.defaultCacheTime = 1800;
+        this.config = config;
+    }
+    /**
+     * Retrieve cache if existent, ignoring the time.
+     *
+     * The caller is responsible for handling proper validation,
+     */
+    retrieveJson(cachekey) {
+        const cachefile = path__default["default"].join(this.config.cacheDir, `${cachekey}.json`);
+        if (!fs__default["default"].existsSync(cachefile)) {
+            return undefined;
+        }
+        const data = fs__default["default"].readFileSync(cachefile, "utf-8");
+        return {
+            cacheTime: fs__default["default"].statSync(cachefile).mtime.getTime(),
+            data: (data === "undefined" ? undefined : JSON.parse(data)),
+        };
+    }
+    /**
+     * Save data to cache.
+     */
+    storeJson(cachekey, data) {
+        const cachefile = path__default["default"].join(this.config.cacheDir, `${cachekey}.json`);
+        if (!fs__default["default"].existsSync(this.config.cacheDir)) {
+            fs__default["default"].mkdirSync(this.config.cacheDir, { recursive: true });
+        }
+        fs__default["default"].writeFileSync(cachefile, data === undefined ? "undefined" : JSON.stringify(data));
+    }
+    async json(cachekey, block, cachetime = this.defaultCacheTime) {
+        const cacheItem = this.mustValidate
+            ? undefined
+            : this.retrieveJson(cachekey);
+        const expire = new Date(new Date().getTime() - cachetime * 1000).getTime();
+        if (cacheItem !== undefined && cacheItem.cacheTime > expire) {
+            return cacheItem.data;
+        }
+        const result = await block();
+        this.storeJson(cachekey, result);
+        return result;
+    }
+    /**
+     * Delete all cached data.
+     */
+    cleanup() {
+        rimraf__default["default"].sync(this.config.cacheDir);
+    }
 }
 
-const CLEAR_WHOLE_LINE = 0;
-function clearLine(stdout) {
-    readline__default["default"].clearLine(stdout, CLEAR_WHOLE_LINE);
-    readline__default["default"].cursorTo(stdout, 0);
-}
-class Reporter {
-    constructor(opts = {}) {
-        this.stdout = process.stdout;
-        this.stderr = process.stderr;
-        this.stdin = process.stdin;
-        this.isTTY = this.stdout.isTTY;
-        this.format = chalk__default["default"];
-        this.startTime = Date.now();
-        this.nonInteractive = !!opts.nonInteractive;
-        this.isVerbose = !!opts.verbose;
-    }
-    error(msg) {
-        clearLine(this.stderr);
-        this.stderr.write(`${this.format.red("error")} ${msg}\n`);
-    }
-    log(msg) {
-        clearLine(this.stdout);
-        this.stdout.write(`${msg}\n`);
-    }
-    warn(msg) {
-        clearLine(this.stderr);
-        this.stderr.write(`${this.format.yellow("warning")} ${msg}\n`);
-    }
-    success(msg) {
-        clearLine(this.stdout);
-        this.stdout.write(`${this.format.green("success")} ${msg}\n`);
-    }
-    info(msg) {
-        clearLine(this.stdout);
-        this.stdout.write(`${this.format.blue("info")} ${msg}\n`);
-    }
+const CLEAR_WHOLE_LINE = 0;
+function clearLine(stdout) {
+    readline__default["default"].clearLine(stdout, CLEAR_WHOLE_LINE);
+    readline__default["default"].cursorTo(stdout, 0);
+}
+class Reporter {
+    constructor(opts = {}) {
+        this.stdout = process.stdout;
+        this.stderr = process.stderr;
+        this.stdin = process.stdin;
+        this.isTTY = this.stdout.isTTY;
+        this.format = chalk__default["default"];
+        this.startTime = Date.now();
+        this.nonInteractive = !!opts.nonInteractive;
+        this.isVerbose = !!opts.verbose;
+    }
+    error(msg) {
+        clearLine(this.stderr);
+        this.stderr.write(`${this.format.red("error")} ${msg}\n`);
+    }
+    log(msg) {
+        clearLine(this.stdout);
+        this.stdout.write(`${msg}\n`);
+    }
+    warn(msg) {
+        clearLine(this.stderr);
+        this.stderr.write(`${this.format.yellow("warning")} ${msg}\n`);
+    }
+    success(msg) {
+        clearLine(this.stdout);
+        this.stdout.write(`${this.format.green("success")} ${msg}\n`);
+    }
+    info(msg) {
+        clearLine(this.stdout);
+        this.stdout.write(`${this.format.blue("info")} ${msg}\n`);
+    }
 }
 
-class Config {
-    constructor() {
-        this.cwd = path__default["default"].resolve(process.cwd());
-        this.configFile = path__default["default"].join(os__default["default"].homedir(), ".cals-config.json");
-        this.cacheDir = cachedir__default["default"]("cals-cli");
-        this.agent = new https__default["default"].Agent({
-            keepAlive: true,
-        });
-        this.configCached = undefined;
-    }
-    get config() {
-        const existingConfig = this.configCached;
-        if (existingConfig !== undefined) {
-            return existingConfig;
-        }
-        const config = this.readConfig();
-        this.configCached = config;
-        return config;
-    }
-    readConfig() {
-        if (!fs__default["default"].existsSync(this.configFile)) {
-            return {};
-        }
-        try {
-            // eslint-disable-next-line @typescript-eslint/no-unsafe-return
-            return JSON.parse(fs__default["default"].readFileSync(this.configFile, "utf-8"));
-        }
-        catch (e) {
-            console.error("Failed", e);
-            throw new Error("Failed to read config");
-        }
-    }
-    getConfig(key) {
-        return this.config[key];
-    }
-    requireConfig(key) {
-        const result = this.config[key];
-        if (result === undefined) {
-            throw Error(`Configuration for ${key} missing. Add manually to ${this.configFile}`);
-        }
-        return result;
-    }
-    updateConfig(key, value) {
-        const updatedConfig = {
-            ...this.readConfig(),
-            [key]: value, // undefined will remove
-        };
-        fs__default["default"].writeFileSync(this.configFile, JSON.stringify(updatedConfig, null, "  "));
-        this.configCached = updatedConfig;
-    }
+class Config {
+    constructor() {
+        this.cwd = path__default["default"].resolve(process.cwd());
+        this.configFile = path__default["default"].join(os__default["default"].homedir(), ".cals-config.json");
+        this.cacheDir = cachedir__default["default"]("cals-cli");
+        this.agent = new https__default["default"].Agent({
+            keepAlive: true,
+        });
+        this.configCached = undefined;
+    }
+    get config() {
+        const existingConfig = this.configCached;
+        if (existingConfig !== undefined) {
+            return existingConfig;
+        }
+        const config = this.readConfig();
+        this.configCached = config;
+        return config;
+    }
+    readConfig() {
+        if (!fs__default["default"].existsSync(this.configFile)) {
+            return {};
+        }
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-return
+            return JSON.parse(fs__default["default"].readFileSync(this.configFile, "utf-8"));
+        }
+        catch (e) {
+            console.error("Failed", e);
+            throw new Error("Failed to read config");
+        }
+    }
+    getConfig(key) {
+        return this.config[key];
+    }
+    requireConfig(key) {
+        const result = this.config[key];
+        if (result === undefined) {
+            throw Error(`Configuration for ${key} missing. Add manually to ${this.configFile}`);
+        }
+        return result;
+    }
+    updateConfig(key, value) {
+        const updatedConfig = {
+            ...this.readConfig(),
+            [key]: value, // undefined will remove
+        };
+        fs__default["default"].writeFileSync(this.configFile, JSON.stringify(updatedConfig, null, "  "));
+        this.configCached = updatedConfig;
+    }
 }
 
 var type = "object";
@@ -488,282 +488,282 @@ var schema = {
 	$schema: $schema
 };
 
-function getTeamId(org, teamName) {
-    return `${org}/${teamName}`;
-}
-function getRepoId(orgName, repoName) {
-    return `${orgName}/${repoName}`;
-}
-function checkAgainstSchema(value) {
-    var _a;
-    const ajv = new AJV__default["default"]({ allErrors: true });
-    const valid = ajv.validate(schema, value);
-    return valid
-        ? { definition: value }
-        : { error: (_a = ajv.errorsText()) !== null && _a !== void 0 ? _a : "Unknown error" };
-}
-function requireValidDefinition(definition) {
-    // Verify no duplicates in users and extract known logins.
-    const loginList = definition.github.users.reduce((acc, user) => {
-        if (acc.includes(user.login)) {
-            throw new Error(`Duplicate login: ${user.login}`);
-        }
-        return [...acc, user.login];
-    }, []);
-    // Verify no duplicates in teams and extract team names.
-    const teamIdList = definition.github.teams.reduce((acc, orgTeams) => {
-        return orgTeams.teams.reduce((acc1, team) => {
-            const id = getTeamId(orgTeams.organization, team.name);
-            if (acc1.includes(id)) {
-                throw new Error(`Duplicate team: ${id}`);
-            }
-            return [...acc1, id];
-        }, acc);
-    }, []);
-    // Verify team members exists as users.
-    definition.github.teams
-        .map((it) => it.teams)
-        .flat()
-        .forEach((team) => {
-        team.members.forEach((login) => {
-            if (!loginList.includes(login)) {
-                throw new Error(`Team member ${login} in team ${team.name} is not registered in user list`);
-            }
-        });
-    });
-    // Verify no duplicates in project names.
-    definition.projects.reduce((acc, project) => {
-        if (acc.includes(project.name)) {
-            throw new Error(`Duplicate project: ${project.name}`);
-        }
-        return [...acc, project.name];
-    }, []);
-    definition.projects.forEach((project) => {
-        project.github.forEach((org) => {
-            (org.teams || []).forEach((team) => {
-                const id = getTeamId(org.organization, team.name);
-                if (!teamIdList.includes(id)) {
-                    throw new Error(`Project team ${id} in project ${project.name} is not registered in team list`);
-                }
-            });
-            (org.repos || []).forEach((repo) => {
-                (repo.teams || []).forEach((team) => {
-                    const id = getTeamId(org.organization, team.name);
-                    if (!teamIdList.includes(id)) {
-                        throw new Error(`Repo team ${id} for repo ${repo.name} in project ${project.name} is not registered in team list`);
-                    }
-                });
-            });
-        });
-    });
-    // Verify no duplicates in repos.
-    definition.projects
-        .flatMap((project) => project.github
-        .map((org) => (org.repos || []).map((repo) => getRepoId(org.organization, repo.name)))
-        .flat())
-        .reduce((acc, repoName) => {
-        if (acc.includes(repoName)) {
-            throw new Error(`Duplicate repo: ${repoName}`);
-        }
-        return [...acc, repoName];
-    }, []);
-}
-class DefinitionFile {
-    constructor(path) {
-        this.path = path;
-    }
-    async getContents() {
-        return new Promise((resolve, reject) => fs__default["default"].readFile(this.path, "utf-8", (err, data) => {
-            if (err)
-                reject(err);
-            else
-                resolve(data);
-        }));
-    }
-    async getDefinition() {
-        return parseDefinition(await this.getContents());
-    }
-}
-function parseDefinition(value) {
-    const result = checkAgainstSchema(yaml__default["default"].load(value));
-    if ("error" in result) {
-        throw new Error("Definition content invalid: " + result.error);
-    }
-    requireValidDefinition(result.definition);
-    return result.definition;
-}
-function getRepos(definition) {
-    return definition.projects.flatMap((project) => project.github
-        .map((org) => (org.repos || []).map((repo) => ({
-        id: getRepoId(org.organization, repo.name),
-        orgName: org.organization,
-        project,
-        repo,
-    })))
-        .flat());
-}
-function getGitHubOrgs(definition) {
-    return lodash.uniq(definition.projects.flatMap((project) => project.github.map((it) => it.organization)));
+function getTeamId(org, teamName) {
+    return `${org}/${teamName}`;
+}
+function getRepoId(orgName, repoName) {
+    return `${orgName}/${repoName}`;
+}
+function checkAgainstSchema(value) {
+    var _a;
+    const ajv = new AJV__default["default"]({ allErrors: true });
+    const valid = ajv.validate(schema, value);
+    return valid
+        ? { definition: value }
+        : { error: (_a = ajv.errorsText()) !== null && _a !== void 0 ? _a : "Unknown error" };
+}
+function requireValidDefinition(definition) {
+    // Verify no duplicates in users and extract known logins.
+    const loginList = definition.github.users.reduce((acc, user) => {
+        if (acc.includes(user.login)) {
+            throw new Error(`Duplicate login: ${user.login}`);
+        }
+        return [...acc, user.login];
+    }, []);
+    // Verify no duplicates in teams and extract team names.
+    const teamIdList = definition.github.teams.reduce((acc, orgTeams) => {
+        return orgTeams.teams.reduce((acc1, team) => {
+            const id = getTeamId(orgTeams.organization, team.name);
+            if (acc1.includes(id)) {
+                throw new Error(`Duplicate team: ${id}`);
+            }
+            return [...acc1, id];
+        }, acc);
+    }, []);
+    // Verify team members exists as users.
+    definition.github.teams
+        .map((it) => it.teams)
+        .flat()
+        .forEach((team) => {
+        team.members.forEach((login) => {
+            if (!loginList.includes(login)) {
+                throw new Error(`Team member ${login} in team ${team.name} is not registered in user list`);
+            }
+        });
+    });
+    // Verify no duplicates in project names.
+    definition.projects.reduce((acc, project) => {
+        if (acc.includes(project.name)) {
+            throw new Error(`Duplicate project: ${project.name}`);
+        }
+        return [...acc, project.name];
+    }, []);
+    definition.projects.forEach((project) => {
+        project.github.forEach((org) => {
+            (org.teams || []).forEach((team) => {
+                const id = getTeamId(org.organization, team.name);
+                if (!teamIdList.includes(id)) {
+                    throw new Error(`Project team ${id} in project ${project.name} is not registered in team list`);
+                }
+            });
+            (org.repos || []).forEach((repo) => {
+                (repo.teams || []).forEach((team) => {
+                    const id = getTeamId(org.organization, team.name);
+                    if (!teamIdList.includes(id)) {
+                        throw new Error(`Repo team ${id} for repo ${repo.name} in project ${project.name} is not registered in team list`);
+                    }
+                });
+            });
+        });
+    });
+    // Verify no duplicates in repos.
+    definition.projects
+        .flatMap((project) => project.github
+        .map((org) => (org.repos || []).map((repo) => getRepoId(org.organization, repo.name)))
+        .flat())
+        .reduce((acc, repoName) => {
+        if (acc.includes(repoName)) {
+            throw new Error(`Duplicate repo: ${repoName}`);
+        }
+        return [...acc, repoName];
+    }, []);
+}
+class DefinitionFile {
+    constructor(path) {
+        this.path = path;
+    }
+    async getContents() {
+        return new Promise((resolve, reject) => fs__default["default"].readFile(this.path, "utf-8", (err, data) => {
+            if (err)
+                reject(err);
+            else
+                resolve(data);
+        }));
+    }
+    async getDefinition() {
+        return parseDefinition(await this.getContents());
+    }
+}
+function parseDefinition(value) {
+    const result = checkAgainstSchema(yaml__default["default"].load(value));
+    if ("error" in result) {
+        throw new Error("Definition content invalid: " + result.error);
+    }
+    requireValidDefinition(result.definition);
+    return result.definition;
+}
+function getRepos(definition) {
+    return definition.projects.flatMap((project) => project.github
+        .map((org) => (org.repos || []).map((repo) => ({
+        id: getRepoId(org.organization, repo.name),
+        orgName: org.organization,
+        project,
+        repo,
+    })))
+        .flat());
+}
+function getGitHubOrgs(definition) {
+    return lodash.uniq(definition.projects.flatMap((project) => project.github.map((it) => it.organization)));
 }
 
-function createReporter(argv) {
-    return new Reporter({
-        verbose: !!argv.verbose,
-        nonInteractive: !!argv.nonInteractive,
-    });
+function createReporter(argv) {
+    return new Reporter({
+        verbose: !!argv.verbose,
+        nonInteractive: !!argv.nonInteractive,
+    });
 }
 
-class GitHubTokenCliProvider {
-    constructor() {
-        this.keyringService = "cals";
-        this.keyringAccount = "github-token";
-    }
-    async getToken() {
-        if (process.env.CALS_GITHUB_TOKEN) {
-            return process.env.CALS_GITHUB_TOKEN;
-        }
-        const result = await keytar__default["default"].getPassword(this.keyringService, this.keyringAccount);
-        if (result == null) {
-            process.stderr.write("No token found. Register using `cals github set-token`\n");
-            return undefined;
-        }
-        return result;
-    }
-    async markInvalid() {
-        await keytar__default["default"].deletePassword(this.keyringService, this.keyringAccount);
-    }
-    async setToken(value) {
-        await keytar__default["default"].setPassword(this.keyringService, this.keyringAccount, value);
-    }
+class GitHubTokenCliProvider {
+    constructor() {
+        this.keyringService = "cals";
+        this.keyringAccount = "github-token";
+    }
+    async getToken() {
+        if (process.env.CALS_GITHUB_TOKEN) {
+            return process.env.CALS_GITHUB_TOKEN;
+        }
+        const result = await keytar__default["default"].getPassword(this.keyringService, this.keyringAccount);
+        if (result == null) {
+            process.stderr.write("No token found. Register using `cals github set-token`\n");
+            return undefined;
+        }
+        return result;
+    }
+    async markInvalid() {
+        await keytar__default["default"].deletePassword(this.keyringService, this.keyringAccount);
+    }
+    async setToken(value) {
+        await keytar__default["default"].setPassword(this.keyringService, this.keyringAccount, value);
+    }
 }
 
-async function undefinedForNotFound(value) {
-    try {
-        return await value;
-    }
-    catch (e) {
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
-        if (e.name === "HttpError" && e.status === 404) {
-            return undefined;
-        }
-        else {
-            throw e;
-        }
-    }
+async function undefinedForNotFound(value) {
+    try {
+        return await value;
+    }
+    catch (e) {
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+        if (e.name === "HttpError" && e.status === 404) {
+            return undefined;
+        }
+        else {
+            throw e;
+        }
+    }
 }
 
-class GitHubService {
-    constructor(props) {
-        this._requestCount = 0;
-        this.config = props.config;
-        this.octokit = props.octokit;
-        this.cache = props.cache;
-        this.tokenProvider = props.tokenProvider;
-        // Control concurrency to GitHub API at service level so we
-        // can maximize concurrency all other places.
-        this.semaphore = pLimit__default["default"](6);
-        this.octokit.hook.wrap("request", async (request, options) => {
-            /* eslint-disable @typescript-eslint/no-unsafe-member-access */
-            this._requestCount++;
-            if (options.method !== "GET") {
-                // eslint-disable-next-line @typescript-eslint/no-unsafe-return
-                return this.semaphore(() => request(options));
-            }
-            // Try to cache ETag for GET requests to save on rate limiting.
-            // Hits on ETag does not count towards rate limiting.
-            // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
-            const rest = {
-                ...options,
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            };
-            delete rest.method;
-            delete rest.baseUrl;
-            delete rest.headers;
-            delete rest.mediaType;
-            delete rest.request;
-            // Build a key that is used to identify this request.
-            const key = Buffer.from(JSON.stringify(rest)).toString("base64");
-            const cacheItem = this.cache.retrieveJson(key);
-            if (cacheItem !== undefined) {
-                // Copying doesn't work, seems we need to mutate this.
-                options.headers["If-None-Match"] = cacheItem.data.etag;
-            }
-            const getResponse = async (allowRetry = true) => {
-                try {
-                    // eslint-disable-next-line @typescript-eslint/no-unsafe-return
-                    return await request(options);
-                }
-                catch (e) {
-                    // Handle no change in ETag.
-                    if (e.status === 304) {
-                        return undefined;
-                    }
-                    // GitHub seems to throw a lot of 502 errors.
-                    // Let's give it a few seconds and retry one time.
-                    if (e.status === 502 && allowRetry) {
-                        await new Promise((resolve) => setTimeout(resolve, 2000));
-                        return await getResponse(false);
-                    }
-                    throw e;
-                }
-            };
-            const response = await this.semaphore(async () => {
-                return getResponse();
-            });
-            if (response === undefined) {
-                // Undefined is returned for cached data.
-                if (cacheItem === undefined) {
-                    throw new Error("Missing expected cache item");
-                }
-                // Use previous value.
-                return cacheItem.data.data;
-            }
-            // New value. Store Etag.
-            if (response.headers.etag) {
-                this.cache.storeJson(key, {
-                    etag: response.headers.etag,
-                    data: response,
-                });
-            }
-            return response;
-            /* eslint-enable @typescript-eslint/no-unsafe-member-access */
-        });
-    }
-    get requestCount() {
-        return this._requestCount;
-    }
-    async runGraphqlQuery(query) {
-        const token = await this.tokenProvider.getToken();
-        if (token === undefined) {
-            throw new Error("Missing token for GitHub");
-        }
-        const url = "https://api.github.com/graphql";
-        const headers = {
-            Authorization: `Bearer ${token}`,
-        };
-        const response = await this.semaphore(() => fetch__default["default"](url, {
-            method: "POST",
-            headers,
-            body: JSON.stringify({ query }),
-            agent: this.config.agent,
-        }));
-        if (response.status === 401) {
-            process.stderr.write("Unauthorized\n");
-            await this.tokenProvider.markInvalid();
-        }
-        if (!response.ok) {
-            throw new Error(`Response from GitHub not OK (${response.status}): ${JSON.stringify(response)}`);
-        }
-        const json = (await response.json());
-        if (!!json.errors) {
-            throw new Error(`Error from GitHub GraphQL API: ${JSON.stringify(json.errors)}`);
-        }
-        if (json.data == null) {
-            throw new Error(`No data received from GitHub GraphQL API (unknown reason)`);
-        }
-        return json.data;
-    }
-    async getOrgRepoList({ org }) {
+class GitHubService {
+    constructor(props) {
+        this._requestCount = 0;
+        this.config = props.config;
+        this.octokit = props.octokit;
+        this.cache = props.cache;
+        this.tokenProvider = props.tokenProvider;
+        // Control concurrency to GitHub API at service level so we
+        // can maximize concurrency all other places.
+        this.semaphore = pLimit__default["default"](6);
+        this.octokit.hook.wrap("request", async (request, options) => {
+            /* eslint-disable @typescript-eslint/no-unsafe-member-access */
+            this._requestCount++;
+            if (options.method !== "GET") {
+                // eslint-disable-next-line @typescript-eslint/no-unsafe-return
+                return this.semaphore(() => request(options));
+            }
+            // Try to cache ETag for GET requests to save on rate limiting.
+            // Hits on ETag does not count towards rate limiting.
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
+            const rest = {
+                ...options,
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            };
+            delete rest.method;
+            delete rest.baseUrl;
+            delete rest.headers;
+            delete rest.mediaType;
+            delete rest.request;
+            // Build a key that is used to identify this request.
+            const key = Buffer.from(JSON.stringify(rest)).toString("base64");
+            const cacheItem = this.cache.retrieveJson(key);
+            if (cacheItem !== undefined) {
+                // Copying doesn't work, seems we need to mutate this.
+                options.headers["If-None-Match"] = cacheItem.data.etag;
+            }
+            const getResponse = async (allowRetry = true) => {
+                try {
+                    // eslint-disable-next-line @typescript-eslint/no-unsafe-return
+                    return await request(options);
+                }
+                catch (e) {
+                    // Handle no change in ETag.
+                    if (e.status === 304) {
+                        return undefined;
+                    }
+                    // GitHub seems to throw a lot of 502 errors.
+                    // Let's give it a few seconds and retry one time.
+                    if (e.status === 502 && allowRetry) {
+                        await new Promise((resolve) => setTimeout(resolve, 2000));
+                        return await getResponse(false);
+                    }
+                    throw e;
+                }
+            };
+            const response = await this.semaphore(async () => {
+                return getResponse();
+            });
+            if (response === undefined) {
+                // Undefined is returned for cached data.
+                if (cacheItem === undefined) {
+                    throw new Error("Missing expected cache item");
+                }
+                // Use previous value.
+                return cacheItem.data.data;
+            }
+            // New value. Store Etag.
+            if (response.headers.etag) {
+                this.cache.storeJson(key, {
+                    etag: response.headers.etag,
+                    data: response,
+                });
+            }
+            return response;
+            /* eslint-enable @typescript-eslint/no-unsafe-member-access */
+        });
+    }
+    get requestCount() {
+        return this._requestCount;
+    }
+    async runGraphqlQuery(query) {
+        const token = await this.tokenProvider.getToken();
+        if (token === undefined) {
+            throw new Error("Missing token for GitHub");
+        }
+        const url = "https://api.github.com/graphql";
+        const headers = {
+            Authorization: `Bearer ${token}`,
+        };
+        const response = await this.semaphore(() => fetch__default["default"](url, {
+            method: "POST",
+            headers,
+            body: JSON.stringify({ query }),
+            agent: this.config.agent,
+        }));
+        if (response.status === 401) {
+            process.stderr.write("Unauthorized\n");
+            await this.tokenProvider.markInvalid();
+        }
+        if (!response.ok) {
+            throw new Error(`Response from GitHub not OK (${response.status}): ${JSON.stringify(response)}`);
+        }
+        const json = (await response.json());
+        if (!!json.errors) {
+            throw new Error(`Error from GitHub GraphQL API: ${JSON.stringify(json.errors)}`);
+        }
+        if (json.data == null) {
+            throw new Error(`No data received from GitHub GraphQL API (unknown reason)`);
+        }
+        return json.data;
+    }
+    async getOrgRepoList({ org }) {
         const getQuery = (after) => `{
   organization(login: "${org}") {
     repositories(first: 100${after === null ? "" : `, after: "${after}"`}) {
@@ -796,144 +796,144 @@ class GitHubService {
       }
     }
   }
-}`;
-        return this.cache.json(`repos-${org}`, async () => {
-            const repos = [];
-            let after = null;
-            while (true) {
-                const query = getQuery(after);
-                const res = await this.runGraphqlQuery(query);
-                if (res.organization == null) {
-                    throw new Error("Missing organization");
-                }
-                if (res.organization.repositories.nodes == null) {
-                    throw new Error("Missing organization nodes");
-                }
-                // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
-                repos.push(...res.organization.repositories.nodes);
-                if (!res.organization.repositories.pageInfo.hasNextPage) {
-                    break;
-                }
-                after = res.organization.repositories.pageInfo.endCursor;
-            }
-            return repos.sort((a, b) => a.name.localeCompare(b.name));
-        });
-    }
-    async getOrgMembersList(org) {
-        const options = this.octokit.orgs.listMembers.endpoint.merge({
-            org,
-        });
-        return ((await undefinedForNotFound(this.octokit.paginate(options))) || []);
-    }
-    async getOrgMembersInvitedList(org) {
-        const options = this.octokit.orgs.listPendingInvitations.endpoint.merge({
-            org,
-        });
-        return ((await undefinedForNotFound(this.octokit.paginate(options))) || []);
-    }
-    async getOrgMembersListIncludingInvited(org) {
-        return [
-            ...(await this.getOrgMembersList(org)).map((it) => ({
-                type: "member",
-                login: it.login,
-                data: it,
-            })),
-            ...(await this.getOrgMembersInvitedList(org)).map((it) => {
-                var _a;
-                return ({
-                    type: "invited",
-                    // TODO: Fix ?? case properly
-                    login: (_a = it.login) !== null && _a !== void 0 ? _a : "invalid",
-                    data: it,
-                });
-            }),
-        ];
-    }
-    async getRepository(owner, repo) {
-        return this.cache.json(`get-repository-${owner}-${repo}`, async () => {
-            const response = await undefinedForNotFound(this.octokit.repos.get({
-                owner,
-                repo,
-            }));
-            return response === undefined ? undefined : response.data;
-        });
-    }
-    async getRepositoryTeamsList(repo) {
-        return this.cache.json(`repository-teams-list-${repo.id}`, async () => {
-            const options = this.octokit.repos.listTeams.endpoint.merge({
-                owner: repo.owner.login,
-                repo: repo.name,
-            });
-            return ((await undefinedForNotFound(this.octokit.paginate(options))) || []);
-        });
-    }
-    async getRepositoryHooks(owner, repo) {
-        return this.cache.json(`repository-hooks-${owner}-${repo}`, async () => {
-            const options = this.octokit.repos.listWebhooks.endpoint.merge({
-                owner,
-                repo,
-            });
-            return ((await undefinedForNotFound(this.octokit.paginate(options))) || []);
-        });
-    }
-    async getOrg(org) {
-        const orgResponse = await this.octokit.orgs.get({
-            org,
-        });
-        return orgResponse.data;
-    }
-    async getTeamList(org) {
-        return this.cache.json(`team-list-${org.login}`, async () => {
-            const options = this.octokit.teams.list.endpoint.merge({
-                org: org.login,
-            });
-            return (await this.octokit.paginate(options));
-        });
-    }
-    async getTeamMemberList(org, team) {
-        return this.cache.json(`team-member-list-${team.id}`, async () => {
-            const options = this.octokit.teams.listMembersInOrg.endpoint.merge({
-                org: org.login,
-                team_slug: team.slug,
-            });
-            return (await this.octokit.paginate(options));
-        });
-    }
-    async getTeamMemberInvitedList(org, team) {
-        return this.cache.json(`team-member-invited-list-${team.id}`, async () => {
-            const options = this.octokit.teams.listPendingInvitationsInOrg.endpoint.merge({
-                org: org.login,
-                team_slug: team.slug,
-            });
-            return (await this.octokit.paginate(options));
-        });
-    }
-    async getTeamMemberListIncludingInvited(org, team) {
-        return [
-            ...(await this.getTeamMemberList(org, team)).map((it) => ({
-                type: "member",
-                login: it.login,
-                data: it,
-            })),
-            ...(await this.getTeamMemberInvitedList(org, team)).map((it) => {
-                var _a;
-                return ({
-                    type: "invited",
-                    // TODO: Fix ?? case properly
-                    login: (_a = it.login) !== null && _a !== void 0 ? _a : "invalid",
-                    data: it,
-                });
-            }),
-        ];
-    }
-    async getSearchedPullRequestList() {
-        // NOTE: Changes to this must by synced with SearchedPullRequestListQueryResult.
+}`;
+        return this.cache.json(`repos-${org}`, async () => {
+            const repos = [];
+            let after = null;
+            while (true) {
+                const query = getQuery(after);
+                const res = await this.runGraphqlQuery(query);
+                if (res.organization == null) {
+                    throw new Error("Missing organization");
+                }
+                if (res.organization.repositories.nodes == null) {
+                    throw new Error("Missing organization nodes");
+                }
+                // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+                repos.push(...res.organization.repositories.nodes);
+                if (!res.organization.repositories.pageInfo.hasNextPage) {
+                    break;
+                }
+                after = res.organization.repositories.pageInfo.endCursor;
+            }
+            return repos.sort((a, b) => a.name.localeCompare(b.name));
+        });
+    }
+    async getOrgMembersList(org) {
+        const options = this.octokit.orgs.listMembers.endpoint.merge({
+            org,
+        });
+        return ((await undefinedForNotFound(this.octokit.paginate(options))) || []);
+    }
+    async getOrgMembersInvitedList(org) {
+        const options = this.octokit.orgs.listPendingInvitations.endpoint.merge({
+            org,
+        });
+        return ((await undefinedForNotFound(this.octokit.paginate(options))) || []);
+    }
+    async getOrgMembersListIncludingInvited(org) {
+        return [
+            ...(await this.getOrgMembersList(org)).map((it) => ({
+                type: "member",
+                login: it.login,
+                data: it,
+            })),
+            ...(await this.getOrgMembersInvitedList(org)).map((it) => {
+                var _a;
+                return ({
+                    type: "invited",
+                    // TODO: Fix ?? case properly
+                    login: (_a = it.login) !== null && _a !== void 0 ? _a : "invalid",
+                    data: it,
+                });
+            }),
+        ];
+    }
+    async getRepository(owner, repo) {
+        return this.cache.json(`get-repository-${owner}-${repo}`, async () => {
+            const response = await undefinedForNotFound(this.octokit.repos.get({
+                owner,
+                repo,
+            }));
+            return response === undefined ? undefined : response.data;
+        });
+    }
+    async getRepositoryTeamsList(repo) {
+        return this.cache.json(`repository-teams-list-${repo.id}`, async () => {
+            const options = this.octokit.repos.listTeams.endpoint.merge({
+                owner: repo.owner.login,
+                repo: repo.name,
+            });
+            return ((await undefinedForNotFound(this.octokit.paginate(options))) || []);
+        });
+    }
+    async getRepositoryHooks(owner, repo) {
+        return this.cache.json(`repository-hooks-${owner}-${repo}`, async () => {
+            const options = this.octokit.repos.listWebhooks.endpoint.merge({
+                owner,
+                repo,
+            });
+            return ((await undefinedForNotFound(this.octokit.paginate(options))) || []);
+        });
+    }
+    async getOrg(org) {
+        const orgResponse = await this.octokit.orgs.get({
+            org,
+        });
+        return orgResponse.data;
+    }
+    async getTeamList(org) {
+        return this.cache.json(`team-list-${org.login}`, async () => {
+            const options = this.octokit.teams.list.endpoint.merge({
+                org: org.login,
+            });
+            return (await this.octokit.paginate(options));
+        });
+    }
+    async getTeamMemberList(org, team) {
+        return this.cache.json(`team-member-list-${team.id}`, async () => {
+            const options = this.octokit.teams.listMembersInOrg.endpoint.merge({
+                org: org.login,
+                team_slug: team.slug,
+            });
+            return (await this.octokit.paginate(options));
+        });
+    }
+    async getTeamMemberInvitedList(org, team) {
+        return this.cache.json(`team-member-invited-list-${team.id}`, async () => {
+            const options = this.octokit.teams.listPendingInvitationsInOrg.endpoint.merge({
+                org: org.login,
+                team_slug: team.slug,
+            });
+            return (await this.octokit.paginate(options));
+        });
+    }
+    async getTeamMemberListIncludingInvited(org, team) {
+        return [
+            ...(await this.getTeamMemberList(org, team)).map((it) => ({
+                type: "member",
+                login: it.login,
+                data: it,
+            })),
+            ...(await this.getTeamMemberInvitedList(org, team)).map((it) => {
+                var _a;
+                return ({
+                    type: "invited",
+                    // TODO: Fix ?? case properly
+                    login: (_a = it.login) !== null && _a !== void 0 ? _a : "invalid",
+                    data: it,
+                });
+            }),
+        ];
+    }
+    async getSearchedPullRequestList() {
+        // NOTE: Changes to this must by synced with SearchedPullRequestListQueryResult.
         const getQuery = (after) => `{
   search(
     query: "is:open is:pr user:capralifecycle user:capraconsulting archived:false",
     type: ISSUE,
-    first: 100${after === null
-            ? ""
+    first: 100${after === null
+            ? ""
             : `,
     after: "${after}"`}
   ) {
@@ -972,51 +972,51 @@ class GitHubService {
       }
     }
   }
-}`;
-        const pulls = [];
-        let after = null;
-        while (true) {
-            const query = getQuery(after);
-            const res = await this.runGraphqlQuery(query);
-            pulls.push(...res.search.edges.map((it) => it.node));
-            if (!res.search.pageInfo.hasNextPage) {
-                break;
-            }
-            after = res.search.pageInfo.endCursor;
-        }
-        return pulls.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
-    }
-    async getHasVulnerabilityAlertsEnabled(owner, repo) {
-        try {
-            const response = await this.octokit.repos.checkVulnerabilityAlerts({
-                owner: owner,
-                repo: repo,
-            });
-            if (response.status !== 204) {
-                console.log(response);
-                throw new Error("Unknown response - see previous log line");
-            }
-            return true;
-        }
-        catch (e) {
-            // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
-            if (e.status === 404) {
-                return false;
-            }
-            throw e;
-        }
-    }
-    async enableVulnerabilityAlerts(owner, repo) {
-        await this.octokit.repos.enableVulnerabilityAlerts({
-            owner: owner,
-            repo: repo,
-        });
-    }
-    /**
-     * Get the vulnerability alerts for a repository.
-     */
-    async getVulnerabilityAlerts(owner, repo) {
-        // NOTE: Changes to this must by synced with VulnerabilityAlertsQueryResult.
+}`;
+        const pulls = [];
+        let after = null;
+        while (true) {
+            const query = getQuery(after);
+            const res = await this.runGraphqlQuery(query);
+            pulls.push(...res.search.edges.map((it) => it.node));
+            if (!res.search.pageInfo.hasNextPage) {
+                break;
+            }
+            after = res.search.pageInfo.endCursor;
+        }
+        return pulls.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+    }
+    async getHasVulnerabilityAlertsEnabled(owner, repo) {
+        try {
+            const response = await this.octokit.repos.checkVulnerabilityAlerts({
+                owner: owner,
+                repo: repo,
+            });
+            if (response.status !== 204) {
+                console.log(response);
+                throw new Error("Unknown response - see previous log line");
+            }
+            return true;
+        }
+        catch (e) {
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+            if (e.status === 404) {
+                return false;
+            }
+            throw e;
+        }
+    }
+    async enableVulnerabilityAlerts(owner, repo) {
+        await this.octokit.repos.enableVulnerabilityAlerts({
+            owner: owner,
+            repo: repo,
+        });
+    }
+    /**
+     * Get the vulnerability alerts for a repository.
+     */
+    async getVulnerabilityAlerts(owner, repo) {
+        // NOTE: Changes to this must by synced with VulnerabilityAlertsQueryResult.
         const getQuery = (after) => `{
   repository(owner: "${owner}", name: "${repo}") {
     vulnerabilityAlerts(first: 100${after === null ? "" : `, after: "${after}"`}) {
@@ -1046,28 +1046,28 @@ class GitHubService {
       }
     }
   }
-}`;
-        return this.cache.json(`vulnerability-alerts-${owner}-${repo}`, async () => {
-            var _a, _b, _c, _d, _e;
-            const result = [];
-            let after = null;
-            while (true) {
-                const query = getQuery(after);
-                const res = await this.runGraphqlQuery(query);
-                result.push(...((_c = (_b = (_a = res.repository) === null || _a === void 0 ? void 0 : _a.vulnerabilityAlerts.edges) === null || _b === void 0 ? void 0 : _b.map((it) => it.node)) !== null && _c !== void 0 ? _c : []));
-                if (!((_d = res.repository) === null || _d === void 0 ? void 0 : _d.vulnerabilityAlerts.pageInfo.hasNextPage)) {
-                    break;
-                }
-                after = (_e = res.repository) === null || _e === void 0 ? void 0 : _e.vulnerabilityAlerts.pageInfo.endCursor;
-            }
-            return result;
-        });
-    }
-    /**
-     * Get the Renovate Dependency Dashboard issue.
-     */
-    async getRenovateDependencyDashboardIssue(owner, repo) {
-        // NOTE: Changes to this must by synced with RenovateDependencyDashboardIssueQueryResult.
+}`;
+        return this.cache.json(`vulnerability-alerts-${owner}-${repo}`, async () => {
+            var _a, _b, _c, _d, _e;
+            const result = [];
+            let after = null;
+            while (true) {
+                const query = getQuery(after);
+                const res = await this.runGraphqlQuery(query);
+                result.push(...((_c = (_b = (_a = res.repository) === null || _a === void 0 ? void 0 : _a.vulnerabilityAlerts.edges) === null || _b === void 0 ? void 0 : _b.map((it) => it.node)) !== null && _c !== void 0 ? _c : []));
+                if (!((_d = res.repository) === null || _d === void 0 ? void 0 : _d.vulnerabilityAlerts.pageInfo.hasNextPage)) {
+                    break;
+                }
+                after = (_e = res.repository) === null || _e === void 0 ? void 0 : _e.vulnerabilityAlerts.pageInfo.endCursor;
+            }
+            return result;
+        });
+    }
+    /**
+     * Get the Renovate Dependency Dashboard issue.
+     */
+    async getRenovateDependencyDashboardIssue(owner, repo) {
+        // NOTE: Changes to this must by synced with RenovateDependencyDashboardIssueQueryResult.
         const getQuery = (after) => `{
   repository(owner: "${owner}", name: "${repo}") {
     issues(
@@ -1098,55 +1098,55 @@ class GitHubService {
       }
     }
   }
-}`;
-        const issues = await this.cache.json(`renovate-bot-issues-${owner}-${repo}`, async () => {
-            var _a, _b, _c, _d, _e;
-            const result = [];
-            let after = null;
-            while (true) {
-                const query = getQuery(after);
-                const res = await this.runGraphqlQuery(query);
-                const nodes = (_c = (_b = (_a = res.repository) === null || _a === void 0 ? void 0 : _a.issues.edges) === null || _b === void 0 ? void 0 : _b.map((it) => it.node)) !== null && _c !== void 0 ? _c : [];
-                result.push(...nodes
-                    .filter((it) => it.title === "Dependency Dashboard")
-                    .map((it) => {
-                    var _a, _b, _c, _d, _e;
-                    return ({
-                        number: it.number,
-                        body: it.body,
-                        lastUpdatedByRenovate: (_e = (_d = (_c = (_b = (_a = it.userContentEdits) === null || _a === void 0 ? void 0 : _a.nodes) === null || _b === void 0 ? void 0 : _b.filter((it) => { var _a; return ((_a = it.editor) === null || _a === void 0 ? void 0 : _a.login) === "renovate"; })) === null || _c === void 0 ? void 0 : _c[0]) === null || _d === void 0 ? void 0 : _d.createdAt) !== null && _e !== void 0 ? _e : null,
-                    });
-                }));
-                if (!((_d = res.repository) === null || _d === void 0 ? void 0 : _d.issues.pageInfo.hasNextPage)) {
-                    break;
-                }
-                after = (_e = res.repository) === null || _e === void 0 ? void 0 : _e.issues.pageInfo.endCursor;
-            }
-            return result;
-        });
-        if (issues.length == 0) {
-            return undefined;
-        }
-        return issues[0];
-    }
-}
-async function createOctokit(config, tokenProvider) {
-    return new rest.Octokit({
-        auth: await tokenProvider.getToken(),
-        request: {
-            agent: config.agent,
-        },
-    });
-}
-async function createGitHubService(props) {
-    var _a;
-    const tokenProvider = (_a = props.tokenProvider) !== null && _a !== void 0 ? _a : new GitHubTokenCliProvider();
-    return new GitHubService({
-        config: props.config,
-        octokit: await createOctokit(props.config, tokenProvider),
-        cache: props.cache,
-        tokenProvider,
-    });
+}`;
+        const issues = await this.cache.json(`renovate-bot-issues-${owner}-${repo}`, async () => {
+            var _a, _b, _c, _d, _e;
+            const result = [];
+            let after = null;
+            while (true) {
+                const query = getQuery(after);
+                const res = await this.runGraphqlQuery(query);
+                const nodes = (_c = (_b = (_a = res.repository) === null || _a === void 0 ? void 0 : _a.issues.edges) === null || _b === void 0 ? void 0 : _b.map((it) => it.node)) !== null && _c !== void 0 ? _c : [];
+                result.push(...nodes
+                    .filter((it) => it.title === "Dependency Dashboard")
+                    .map((it) => {
+                    var _a, _b, _c, _d, _e;
+                    return ({
+                        number: it.number,
+                        body: it.body,
+                        lastUpdatedByRenovate: (_e = (_d = (_c = (_b = (_a = it.userContentEdits) === null || _a === void 0 ? void 0 : _a.nodes) === null || _b === void 0 ? void 0 : _b.filter((it) => { var _a; return ((_a = it.editor) === null || _a === void 0 ? void 0 : _a.login) === "renovate"; })) === null || _c === void 0 ? void 0 : _c[0]) === null || _d === void 0 ? void 0 : _d.createdAt) !== null && _e !== void 0 ? _e : null,
+                    });
+                }));
+                if (!((_d = res.repository) === null || _d === void 0 ? void 0 : _d.issues.pageInfo.hasNextPage)) {
+                    break;
+                }
+                after = (_e = res.repository) === null || _e === void 0 ? void 0 : _e.issues.pageInfo.endCursor;
+            }
+            return result;
+        });
+        if (issues.length == 0) {
+            return undefined;
+        }
+        return issues[0];
+    }
+}
+async function createOctokit(config, tokenProvider) {
+    return new rest.Octokit({
+        auth: await tokenProvider.getToken(),
+        request: {
+            agent: config.agent,
+        },
+    });
+}
+async function createGitHubService(props) {
+    var _a;
+    const tokenProvider = (_a = props.tokenProvider) !== null && _a !== void 0 ? _a : new GitHubTokenCliProvider();
+    return new GitHubService({
+        config: props.config,
+        octokit: await createOctokit(props.config, tokenProvider),
+        cache: props.cache,
+        tokenProvider,
+    });
 }
 
 var index$4 = /*#__PURE__*/Object.freeze({
@@ -1164,275 +1164,275 @@ var index$3 = /*#__PURE__*/Object.freeze({
   GitHubService: GitHubService
 });
 
-/* eslint-disable @typescript-eslint/no-non-null-assertion */
-class LoadSecrets {
-    constructor(props) {
-        this.smClientForRegions = {};
-        this.stsClient = new clientSts.STSClient({
-            region: "eu-west-1",
-        });
-        this.reporter = props.reporter;
-        this.silent = props.silent;
-    }
-    getSmClient(region) {
-        if (!this.smClientForRegions[region]) {
-            this.smClientForRegions[region] = new clientSecretsManager.SecretsManagerClient({
-                region,
-            });
-        }
-        return this.smClientForRegions[region];
-    }
-    async getInput(options) {
-        return new Promise((resolve, reject) => {
-            read__default["default"](options, (err, answer) => {
-                if (err) {
-                    reject(err);
-                }
-                resolve(answer);
-            });
-        });
-    }
-    async getSecretDetails(client, secretId) {
-        try {
-            return await client.send(new clientSecretsManager.DescribeSecretCommand({ SecretId: secretId }));
-        }
-        catch (e) {
-            // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
-            if (e.name && e.name === "ResourceNotFoundException") {
-                return null;
-            }
-            throw e;
-        }
-    }
-    async handleJsonUpdate(secret) {
-        this.reporter.log("The secret is of type JSON with these expected fields:");
-        for (const field of secret.fields) {
-            const key = typeof field === "string" ? field : field.key;
-            const desc = typeof field === "string"
-                ? ""
-                : field.description
-                    ? ` (${field.description})`
-                    : "";
-            this.reporter.log(`  - ${key}${desc}`);
-        }
-        this.reporter.log("");
-        // TODO: Ability to specify full json value as one line.
-        const collectedValues = {};
-        for (const field of secret.fields) {
-            const key = typeof field === "string" ? field : field.key;
-            this.reporter.log(`Field: ${this.reporter.format.greenBright(key)}`);
-            if (typeof field !== "string" && field.example != null) {
-                this.reporter.log(`Example: ${this.reporter.format.magentaBright(field.example)}`);
-            }
-            const value = await this.getInput({
-                prompt: "Enter value (Ctrl+C to abort): ",
-                silent: this.silent,
-            });
-            collectedValues[key] = value;
-            this.reporter.log("");
-        }
-        return JSON.stringify(collectedValues, undefined, "  ");
-    }
-    getFullName(secretGroup, secret) {
-        return `${secretGroup.namePrefix}${secret.name}`;
-    }
-    async syncTags(client, secret, tags) {
-        const keysToRemove = secret
-            .Tags.filter((existingTag) => !tags.some((it) => it.Key === existingTag.Key))
-            .map((it) => it.Key);
-        if (keysToRemove.length > 0) {
-            this.reporter.log(`Removing obsolete tags: ${keysToRemove.join(", ")}`);
-            await client.send(new clientSecretsManager.UntagResourceCommand({
-                SecretId: secret.ARN,
-                TagKeys: keysToRemove,
-            }));
-        }
-        const tagsToUpdate = tags.filter((expectedTag) => {
-            const existing = secret.Tags.find((it) => it.Key === expectedTag.Key);
-            return existing == null || existing.Value != expectedTag.Value;
-        });
-        if (tagsToUpdate.length > 0) {
-            this.reporter.log(`Storing tags: ${tagsToUpdate.map((it) => it.Key).join(", ")}`);
-            await client.send(new clientSecretsManager.TagResourceCommand({
-                SecretId: secret.ARN,
-                Tags: tagsToUpdate,
-            }));
-        }
-    }
-    async getSecretValue(client, secretId) {
-        const result = await client.send(new clientSecretsManager.GetSecretValueCommand({
-            SecretId: secretId,
-        }));
-        if (result.SecretString == null) {
-            throw new Error("Missing SecretString (is it a binary?)");
-        }
-        return result.SecretString;
-    }
-    async handleUpdate(secretGroup, secret) {
-        const client = this.getSmClient(secretGroup.region);
-        const fullName = this.getFullName(secretGroup, secret);
-        const describeSecret = await this.getSecretDetails(client, fullName);
-        this.reporter.log(`Secret: ${this.reporter.format.greenBright(fullName)}`);
-        if (describeSecret == null) {
-            this.reporter.log("The secret does not already exist and will be created");
-        }
-        else {
-            this.reporter.log("Current value:");
-            this.reporter.log(this.reporter.format.yellowBright((await this.getSecretValue(client, fullName)).replace(/^/gm, "  ")));
-        }
-        this.reporter.log("");
-        let secretValue;
-        if (secret.type === "json") {
-            try {
-                secretValue = await this.handleJsonUpdate(secret);
-            }
-            catch (e) {
-                if (e instanceof Error && e.message === "canceled") {
-                    this.reporter.log("Aborted");
-                    return;
-                }
-                throw e;
-            }
-        }
-        else {
-            throw new Error(`Unsupported type`);
-        }
-        this.reporter.log("Storing secret value:");
-        this.reporter.log(this.reporter.format.yellowBright(secretValue.replace(/^/gm, "  ")));
-        const tags = [
-            {
-                Key: "Source",
-                Value: "load-secrets script",
-            },
-        ];
-        let arn;
-        let version;
-        if (describeSecret == null) {
-            const createResult = await client.send(new clientSecretsManager.CreateSecretCommand({
-                Name: fullName,
-                Description: "Created by load-secrets",
-                SecretString: secretValue,
-                Tags: tags,
-            }));
-            if (createResult.VersionId == null) {
-                throw new Error("Expected versionId");
-            }
-            arn = createResult.ARN;
-            version = createResult.VersionId;
-        }
-        else {
-            if (describeSecret.DeletedDate != null) {
-                await client.send(new clientSecretsManager.RestoreSecretCommand({
-                    SecretId: fullName,
-                }));
-            }
-            const updateResult = await client.send(new clientSecretsManager.PutSecretValueCommand({
-                SecretId: fullName,
-                SecretString: secretValue,
-            }));
-            if (updateResult.VersionId == null) {
-                throw new Error("Expected versionId");
-            }
-            await this.syncTags(client, describeSecret, tags);
-            arn = updateResult.ARN;
-            version = updateResult.VersionId;
-        }
-        this.reporter.log("");
-        this.reporter.log("Secret stored:");
-        this.reporter.log(`ARN: ${this.reporter.format.greenBright(arn)}`);
-        this.reporter.log(`Version: ${this.reporter.format.greenBright(version)}`);
-    }
-    checkSecretGroup(secretGroup) {
-        if (!secretGroup.namePrefix.startsWith("/") ||
-            !secretGroup.namePrefix.endsWith("/")) {
-            throw new Error(`namePrefix should start and end with /. Current value: ${secretGroup.namePrefix}`);
-        }
-    }
-    getSecretDescription(details) {
-        var _a, _b;
-        return details == null
-            ? "not yet created"
-            : (details === null || details === void 0 ? void 0 : details.DeletedDate) != null
-                ? `scheduled for deletion ${details.DeletedDate.toISOString()}`
-                : `last changed ${(_b = (_a = details.LastChangedDate) === null || _a === void 0 ? void 0 : _a.toISOString()) !== null && _b !== void 0 ? _b : "unknown"}`;
-    }
-    /**
-     * Returns false if aborted.
-     */
-    async selectAndUpdate(secretGroups) {
-        const secrets = [];
-        this.reporter.log("Select secret to write:");
-        this.reporter.log("");
-        for (const secretGroup of secretGroups) {
-            this.reporter.log(`${secretGroup.description} (prefix: ${secretGroup.namePrefix})`);
-            for (let i = 0; i < secretGroup.secrets.length; i++) {
-                const offset = secrets.length;
-                const secret = secretGroup.secrets[i];
-                secrets.push({
-                    secret: secret,
-                    secretGroup,
-                });
-                const client = this.getSmClient(secretGroup.region);
-                const details = await this.getSecretDetails(client, this.getFullName(secretGroup, secret));
-                const desc = this.getSecretDescription(details);
-                this.reporter.log(`  (${offset}) ${secret.name} (${desc})`);
-            }
-            this.reporter.log("");
-        }
-        let index;
-        try {
-            const answer = await this.getInput({
-                prompt: "Enter index (or enter to quit): ",
-            });
-            if (answer.trim() === "") {
-                return false;
-            }
-            index = parseInt(answer);
-            if (!secrets[index]) {
-                throw new Error();
-            }
-        }
-        catch (e) {
-            this.reporter.warn("Secret not found - aborting");
-            return false;
-        }
-        this.reporter.log("");
-        await this.handleUpdate(secrets[index].secretGroup, secrets[index].secret);
-        this.reporter.log("");
-        return true;
-    }
-    async process(secretGroups) {
-        this.reporter.info("Checking account for current credentials");
-        this.reporter.info("If any error is given, make sure you have valid credentials active");
-        const currentAccount = await this.stsClient.send(new clientSts.GetCallerIdentityCommand({}));
-        this.reporter.info(`Running for account ${currentAccount.Account}`);
-        this.reporter.log("");
-        const matchedSecretGroups = secretGroups.filter((it) => it.accountId === currentAccount.Account);
-        if (matchedSecretGroups.length === 0) {
-            this.reporter.error(`No secrets specified for this account - aborting`);
-            return;
-        }
-        for (const secretGroup of matchedSecretGroups) {
-            this.checkSecretGroup(secretGroup);
-        }
-        while (await this.selectAndUpdate(matchedSecretGroups)) { }
-    }
-}
-/**
- * Load secrets interactively into Secrets Manager.
- */
-function loadSecretsCli(props) {
-    const loadSecrets = new LoadSecrets({
-        reporter: createReporter({}),
-        // For now we show the secrets, so that we get positive feedback that the value
-        // is correctly entered.
-        silent: false,
-    });
-    loadSecrets.process(props.secretGroups).catch((error) => {
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
-        console.error(error.stack || error.message || error);
-        process.exitCode = 1;
-    });
+/* eslint-disable @typescript-eslint/no-non-null-assertion */
+class LoadSecrets {
+    constructor(props) {
+        this.smClientForRegions = {};
+        this.stsClient = new clientSts.STSClient({
+            region: "eu-west-1",
+        });
+        this.reporter = props.reporter;
+        this.silent = props.silent;
+    }
+    getSmClient(region) {
+        if (!this.smClientForRegions[region]) {
+            this.smClientForRegions[region] = new clientSecretsManager.SecretsManagerClient({
+                region,
+            });
+        }
+        return this.smClientForRegions[region];
+    }
+    async getInput(options) {
+        return new Promise((resolve, reject) => {
+            read__default["default"](options, (err, answer) => {
+                if (err) {
+                    reject(err);
+                }
+                resolve(answer);
+            });
+        });
+    }
+    async getSecretDetails(client, secretId) {
+        try {
+            return await client.send(new clientSecretsManager.DescribeSecretCommand({ SecretId: secretId }));
+        }
+        catch (e) {
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+            if (e.name && e.name === "ResourceNotFoundException") {
+                return null;
+            }
+            throw e;
+        }
+    }
+    async handleJsonUpdate(secret) {
+        this.reporter.log("The secret is of type JSON with these expected fields:");
+        for (const field of secret.fields) {
+            const key = typeof field === "string" ? field : field.key;
+            const desc = typeof field === "string"
+                ? ""
+                : field.description
+                    ? ` (${field.description})`
+                    : "";
+            this.reporter.log(`  - ${key}${desc}`);
+        }
+        this.reporter.log("");
+        // TODO: Ability to specify full json value as one line.
+        const collectedValues = {};
+        for (const field of secret.fields) {
+            const key = typeof field === "string" ? field : field.key;
+            this.reporter.log(`Field: ${this.reporter.format.greenBright(key)}`);
+            if (typeof field !== "string" && field.example != null) {
+                this.reporter.log(`Example: ${this.reporter.format.magentaBright(field.example)}`);
+            }
+            const value = await this.getInput({
+                prompt: "Enter value (Ctrl+C to abort): ",
+                silent: this.silent,
+            });
+            collectedValues[key] = value;
+            this.reporter.log("");
+        }
+        return JSON.stringify(collectedValues, undefined, "  ");
+    }
+    getFullName(secretGroup, secret) {
+        return `${secretGroup.namePrefix}${secret.name}`;
+    }
+    async syncTags(client, secret, tags) {
+        const keysToRemove = secret
+            .Tags.filter((existingTag) => !tags.some((it) => it.Key === existingTag.Key))
+            .map((it) => it.Key);
+        if (keysToRemove.length > 0) {
+            this.reporter.log(`Removing obsolete tags: ${keysToRemove.join(", ")}`);
+            await client.send(new clientSecretsManager.UntagResourceCommand({
+                SecretId: secret.ARN,
+                TagKeys: keysToRemove,
+            }));
+        }
+        const tagsToUpdate = tags.filter((expectedTag) => {
+            const existing = secret.Tags.find((it) => it.Key === expectedTag.Key);
+            return existing == null || existing.Value != expectedTag.Value;
+        });
+        if (tagsToUpdate.length > 0) {
+            this.reporter.log(`Storing tags: ${tagsToUpdate.map((it) => it.Key).join(", ")}`);
+            await client.send(new clientSecretsManager.TagResourceCommand({
+                SecretId: secret.ARN,
+                Tags: tagsToUpdate,
+            }));
+        }
+    }
+    async getSecretValue(client, secretId) {
+        const result = await client.send(new clientSecretsManager.GetSecretValueCommand({
+            SecretId: secretId,
+        }));
+        if (result.SecretString == null) {
+            throw new Error("Missing SecretString (is it a binary?)");
+        }
+        return result.SecretString;
+    }
+    async handleUpdate(secretGroup, secret) {
+        const client = this.getSmClient(secretGroup.region);
+        const fullName = this.getFullName(secretGroup, secret);
+        const describeSecret = await this.getSecretDetails(client, fullName);
+        this.reporter.log(`Secret: ${this.reporter.format.greenBright(fullName)}`);
+        if (describeSecret == null) {
+            this.reporter.log("The secret does not already exist and will be created");
+        }
+        else {
+            this.reporter.log("Current value:");
+            this.reporter.log(this.reporter.format.yellowBright((await this.getSecretValue(client, fullName)).replace(/^/gm, "  ")));
+        }
+        this.reporter.log("");
+        let secretValue;
+        if (secret.type === "json") {
+            try {
+                secretValue = await this.handleJsonUpdate(secret);
+            }
+            catch (e) {
+                if (e instanceof Error && e.message === "canceled") {
+                    this.reporter.log("Aborted");
+                    return;
+                }
+                throw e;
+            }
+        }
+        else {
+            throw new Error(`Unsupported type`);
+        }
+        this.reporter.log("Storing secret value:");
+        this.reporter.log(this.reporter.format.yellowBright(secretValue.replace(/^/gm, "  ")));
+        const tags = [
+            {
+                Key: "Source",
+                Value: "load-secrets script",
+            },
+        ];
+        let arn;
+        let version;
+        if (describeSecret == null) {
+            const createResult = await client.send(new clientSecretsManager.CreateSecretCommand({
+                Name: fullName,
+                Description: "Created by load-secrets",
+                SecretString: secretValue,
+                Tags: tags,
+            }));
+            if (createResult.VersionId == null) {
+                throw new Error("Expected versionId");
+            }
+            arn = createResult.ARN;
+            version = createResult.VersionId;
+        }
+        else {
+            if (describeSecret.DeletedDate != null) {
+                await client.send(new clientSecretsManager.RestoreSecretCommand({
+                    SecretId: fullName,
+                }));
+            }
+            const updateResult = await client.send(new clientSecretsManager.PutSecretValueCommand({
+                SecretId: fullName,
+                SecretString: secretValue,
+            }));
+            if (updateResult.VersionId == null) {
+                throw new Error("Expected versionId");
+            }
+            await this.syncTags(client, describeSecret, tags);
+            arn = updateResult.ARN;
+            version = updateResult.VersionId;
+        }
+        this.reporter.log("");
+        this.reporter.log("Secret stored:");
+        this.reporter.log(`ARN: ${this.reporter.format.greenBright(arn)}`);
+        this.reporter.log(`Version: ${this.reporter.format.greenBright(version)}`);
+    }
+    checkSecretGroup(secretGroup) {
+        if (!secretGroup.namePrefix.startsWith("/") ||
+            !secretGroup.namePrefix.endsWith("/")) {
+            throw new Error(`namePrefix should start and end with /. Current value: ${secretGroup.namePrefix}`);
+        }
+    }
+    getSecretDescription(details) {
+        var _a, _b;
+        return details == null
+            ? "not yet created"
+            : (details === null || details === void 0 ? void 0 : details.DeletedDate) != null
+                ? `scheduled for deletion ${details.DeletedDate.toISOString()}`
+                : `last changed ${(_b = (_a = details.LastChangedDate) === null || _a === void 0 ? void 0 : _a.toISOString()) !== null && _b !== void 0 ? _b : "unknown"}`;
+    }
+    /**
+     * Returns false if aborted.
+     */
+    async selectAndUpdate(secretGroups) {
+        const secrets = [];
+        this.reporter.log("Select secret to write:");
+        this.reporter.log("");
+        for (const secretGroup of secretGroups) {
+            this.reporter.log(`${secretGroup.description} (prefix: ${secretGroup.namePrefix})`);
+            for (let i = 0; i < secretGroup.secrets.length; i++) {
+                const offset = secrets.length;
+                const secret = secretGroup.secrets[i];
+                secrets.push({
+                    secret: secret,
+                    secretGroup,
+                });
+                const client = this.getSmClient(secretGroup.region);
+                const details = await this.getSecretDetails(client, this.getFullName(secretGroup, secret));
+                const desc = this.getSecretDescription(details);
+                this.reporter.log(`  (${offset}) ${secret.name} (${desc})`);
+            }
+            this.reporter.log("");
+        }
+        let index;
+        try {
+            const answer = await this.getInput({
+                prompt: "Enter index (or enter to quit): ",
+            });
+            if (answer.trim() === "") {
+                return false;
+            }
+            index = parseInt(answer);
+            if (!secrets[index]) {
+                throw new Error();
+            }
+        }
+        catch (e) {
+            this.reporter.warn("Secret not found - aborting");
+            return false;
+        }
+        this.reporter.log("");
+        await this.handleUpdate(secrets[index].secretGroup, secrets[index].secret);
+        this.reporter.log("");
+        return true;
+    }
+    async process(secretGroups) {
+        this.reporter.info("Checking account for current credentials");
+        this.reporter.info("If any error is given, make sure you have valid credentials active");
+        const currentAccount = await this.stsClient.send(new clientSts.GetCallerIdentityCommand({}));
+        this.reporter.info(`Running for account ${currentAccount.Account}`);
+        this.reporter.log("");
+        const matchedSecretGroups = secretGroups.filter((it) => it.accountId === currentAccount.Account);
+        if (matchedSecretGroups.length === 0) {
+            this.reporter.error(`No secrets specified for this account - aborting`);
+            return;
+        }
+        for (const secretGroup of matchedSecretGroups) {
+            this.checkSecretGroup(secretGroup);
+        }
+        while (await this.selectAndUpdate(matchedSecretGroups)) { }
+    }
+}
+/**
+ * Load secrets interactively into Secrets Manager.
+ */
+function loadSecretsCli(props) {
+    const loadSecrets = new LoadSecrets({
+        reporter: createReporter({}),
+        // For now we show the secrets, so that we get positive feedback that the value
+        // is correctly entered.
+        silent: false,
+    });
+    loadSecrets.process(props.secretGroups).catch((error) => {
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+        console.error(error.stack || error.message || error);
+        process.exitCode = 1;
+    });
 }
 
 var index$2 = /*#__PURE__*/Object.freeze({
@@ -1440,105 +1440,105 @@ var index$2 = /*#__PURE__*/Object.freeze({
   loadSecretsCli: loadSecretsCli
 });
 
-class SnykTokenCliProvider {
-    constructor() {
-        this.keyringService = "cals";
-        this.keyringAccount = "snyk-token";
-    }
-    async getToken() {
-        if (process.env.CALS_SNYK_TOKEN) {
-            return process.env.CALS_SNYK_TOKEN;
-        }
-        const result = await keytar__default["default"].getPassword(this.keyringService, this.keyringAccount);
-        if (result == null) {
-            process.stderr.write("No token found. Register using `cals snyk set-token`\n");
-            return undefined;
-        }
-        return result;
-    }
-    async markInvalid() {
-        await keytar__default["default"].deletePassword(this.keyringService, this.keyringAccount);
-    }
-    async setToken(value) {
-        await keytar__default["default"].setPassword(this.keyringService, this.keyringAccount, value);
-    }
+class SnykTokenCliProvider {
+    constructor() {
+        this.keyringService = "cals";
+        this.keyringAccount = "snyk-token";
+    }
+    async getToken() {
+        if (process.env.CALS_SNYK_TOKEN) {
+            return process.env.CALS_SNYK_TOKEN;
+        }
+        const result = await keytar__default["default"].getPassword(this.keyringService, this.keyringAccount);
+        if (result == null) {
+            process.stderr.write("No token found. Register using `cals snyk set-token`\n");
+            return undefined;
+        }
+        return result;
+    }
+    async markInvalid() {
+        await keytar__default["default"].deletePassword(this.keyringService, this.keyringAccount);
+    }
+    async setToken(value) {
+        await keytar__default["default"].setPassword(this.keyringService, this.keyringAccount, value);
+    }
 }
 
-class SnykService {
-    constructor(props) {
-        this.config = props.config;
-        this.tokenProvider = props.tokenProvider;
-    }
-    async getProjects(definition) {
-        var _a;
-        const snykAccountId = (_a = definition.snyk) === null || _a === void 0 ? void 0 : _a.accountId;
-        if (snykAccountId === undefined) {
-            return [];
-        }
-        return this.getProjectsByAccountId(snykAccountId);
-    }
-    async getProjectsByAccountId(snykAccountId) {
-        const token = await this.tokenProvider.getToken();
-        if (token === undefined) {
-            throw new Error("Missing token for Snyk");
-        }
-        const response = await fetch__default["default"](`https://snyk.io/api/v1/org/${encodeURIComponent(snykAccountId)}/projects`, {
-            method: "GET",
-            headers: {
-                Accept: "application/json",
-                Authorization: `token ${token}`,
-            },
-            agent: this.config.agent,
-        });
-        if (response.status === 401) {
-            process.stderr.write("Unauthorized - removing token\n");
-            await this.tokenProvider.markInvalid();
-        }
-        if (!response.ok) {
-            throw new Error(`Response from Snyk not OK (${response.status}): ${JSON.stringify(response)}`);
-        }
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
-        return (await response.json()).projects;
-    }
-}
-function createSnykService(props) {
-    var _a;
-    return new SnykService({
-        config: props.config,
-        tokenProvider: (_a = props.tokenProvider) !== null && _a !== void 0 ? _a : new SnykTokenCliProvider(),
-    });
+class SnykService {
+    constructor(props) {
+        this.config = props.config;
+        this.tokenProvider = props.tokenProvider;
+    }
+    async getProjects(definition) {
+        var _a;
+        const snykAccountId = (_a = definition.snyk) === null || _a === void 0 ? void 0 : _a.accountId;
+        if (snykAccountId === undefined) {
+            return [];
+        }
+        return this.getProjectsByAccountId(snykAccountId);
+    }
+    async getProjectsByAccountId(snykAccountId) {
+        const token = await this.tokenProvider.getToken();
+        if (token === undefined) {
+            throw new Error("Missing token for Snyk");
+        }
+        const response = await fetch__default["default"](`https://snyk.io/api/v1/org/${encodeURIComponent(snykAccountId)}/projects`, {
+            method: "GET",
+            headers: {
+                Accept: "application/json",
+                Authorization: `token ${token}`,
+            },
+            agent: this.config.agent,
+        });
+        if (response.status === 401) {
+            process.stderr.write("Unauthorized - removing token\n");
+            await this.tokenProvider.markInvalid();
+        }
+        if (!response.ok) {
+            throw new Error(`Response from Snyk not OK (${response.status}): ${JSON.stringify(response)}`);
+        }
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+        return (await response.json()).projects;
+    }
+}
+function createSnykService(props) {
+    var _a;
+    return new SnykService({
+        config: props.config,
+        tokenProvider: (_a = props.tokenProvider) !== null && _a !== void 0 ? _a : new SnykTokenCliProvider(),
+    });
 }
 
-function getGitHubRepo(snykProject) {
-    if (snykProject.origin === "github") {
-        const match = /^([^/]+)\/([^:]+)(:(.+))?$/.exec(snykProject.name);
-        if (match === null) {
-            throw Error(`Could not extract components from Snyk project name: ${snykProject.name} (id: ${snykProject.id})`);
-        }
-        return {
-            owner: match[1],
-            name: match[2],
-        };
-    }
-    else if (snykProject.origin === "cli" &&
-        snykProject.remoteRepoUrl != null) {
-        // The remoteRepoUrl can be overriden when using the CLI, so don't
-        // fail if we cannot extract the value.
-        const match = /github.com\/([^/]+)\/(.+)\.git$/.exec(snykProject.remoteRepoUrl);
-        if (match === null) {
-            return undefined;
-        }
-        return {
-            owner: match[1],
-            name: match[2],
-        };
-    }
-    else {
-        return undefined;
-    }
-}
-function getGitHubRepoId(repo) {
-    return repo ? `${repo.owner}/${repo.name}` : undefined;
+function getGitHubRepo(snykProject) {
+    if (snykProject.origin === "github") {
+        const match = /^([^/]+)\/([^:]+)(:(.+))?$/.exec(snykProject.name);
+        if (match === null) {
+            throw Error(`Could not extract components from Snyk project name: ${snykProject.name} (id: ${snykProject.id})`);
+        }
+        return {
+            owner: match[1],
+            name: match[2],
+        };
+    }
+    else if (snykProject.origin === "cli" &&
+        snykProject.remoteRepoUrl != null) {
+        // The remoteRepoUrl can be overriden when using the CLI, so don't
+        // fail if we cannot extract the value.
+        const match = /github.com\/([^/]+)\/(.+)\.git$/.exec(snykProject.remoteRepoUrl);
+        if (match === null) {
+            return undefined;
+        }
+        return {
+            owner: match[1],
+            name: match[2],
+        };
+    }
+    else {
+        return undefined;
+    }
+}
+function getGitHubRepoId(repo) {
+    return repo ? `${repo.owner}/${repo.name}` : undefined;
 }
 
 var index$1 = /*#__PURE__*/Object.freeze({
@@ -1549,61 +1549,61 @@ var index$1 = /*#__PURE__*/Object.freeze({
   getGitHubRepoId: getGitHubRepoId
 });
 
-class SonarCloudTokenCliProvider {
-    async getToken() {
-        if (process.env.CALS_SONARCLOUD_TOKEN) {
-            return Promise.resolve(process.env.CALS_SONARCLOUD_TOKEN);
-        }
-        process.stderr.write("No environmental variable found. Set variable `CALS_SONARCLOUD_TOKEN` to token value\n");
-        return undefined;
-    }
-    async markInvalid() {
-        await Promise.resolve();
-    }
+class SonarCloudTokenCliProvider {
+    async getToken() {
+        if (process.env.CALS_SONARCLOUD_TOKEN) {
+            return Promise.resolve(process.env.CALS_SONARCLOUD_TOKEN);
+        }
+        process.stderr.write("No environmental variable found. Set variable `CALS_SONARCLOUD_TOKEN` to token value\n");
+        return undefined;
+    }
+    async markInvalid() {
+        await Promise.resolve();
+    }
 }
 
-class SonarCloudService {
-    constructor(props) {
-        this.config = props.config;
-        this.tokenProvider = props.tokenProvider;
-    }
-    /**
-     * Returns metrics for project with given key.
-     * ONLY test coverage metrics are returned as of now
-     */
-    async getMetricsByProjectKey(sonarCloudProjectKey) {
-        const token = await this.tokenProvider.getToken();
-        if (token === undefined) {
-            throw new Error("Missing token for SonarCloud");
-        }
-        const response = await fetch__default["default"](`https://sonarcloud.io/api/measures/component?component=${encodeURIComponent(sonarCloudProjectKey)}&metricKeys=coverage`, {
-            method: "GET",
-            headers: {
-                Accept: "application/json",
-                Authorization: `Basic ${Buffer.from(token.concat(":"), "utf8").toString("base64")}`,
-            },
-            agent: this.config.agent,
-        });
-        if (response.status === 401) {
-            process.stderr.write("Unauthorized - removing token\n");
-            await this.tokenProvider.markInvalid();
-        }
-        if (response.status === 404) {
-            process.stderr.write("Project does not exist in SonarCloud\n");
-            return undefined;
-        }
-        if (!response.ok) {
-            throw new Error(`Response from SonarCloud not OK (${response.status}): ${JSON.stringify(response)}`);
-        }
-        return (await response.json());
-    }
-}
-function createSonarCloudService(props) {
-    var _a;
-    return new SonarCloudService({
-        config: props.config,
-        tokenProvider: (_a = props.tokenProvider) !== null && _a !== void 0 ? _a : new SonarCloudTokenCliProvider(),
-    });
+class SonarCloudService {
+    constructor(props) {
+        this.config = props.config;
+        this.tokenProvider = props.tokenProvider;
+    }
+    /**
+     * Returns metrics for project with given key.
+     * ONLY test coverage metrics are returned as of now
+     */
+    async getMetricsByProjectKey(sonarCloudProjectKey) {
+        const token = await this.tokenProvider.getToken();
+        if (token === undefined) {
+            throw new Error("Missing token for SonarCloud");
+        }
+        const response = await fetch__default["default"](`https://sonarcloud.io/api/measures/component?component=${encodeURIComponent(sonarCloudProjectKey)}&metricKeys=coverage`, {
+            method: "GET",
+            headers: {
+                Accept: "application/json",
+                Authorization: `Basic ${Buffer.from(token.concat(":"), "utf8").toString("base64")}`,
+            },
+            agent: this.config.agent,
+        });
+        if (response.status === 401) {
+            process.stderr.write("Unauthorized - removing token\n");
+            await this.tokenProvider.markInvalid();
+        }
+        if (response.status === 404) {
+            process.stderr.write("Project does not exist in SonarCloud\n");
+            return undefined;
+        }
+        if (!response.ok) {
+            throw new Error(`Response from SonarCloud not OK (${response.status}): ${JSON.stringify(response)}`);
+        }
+        return (await response.json());
+    }
+}
+function createSonarCloudService(props) {
+    var _a;
+    return new SonarCloudService({
+        config: props.config,
+        tokenProvider: (_a = props.tokenProvider) !== null && _a !== void 0 ? _a : new SonarCloudTokenCliProvider(),
+    });
 }
 
 var index = /*#__PURE__*/Object.freeze({
@@ -1613,455 +1613,455 @@ var index = /*#__PURE__*/Object.freeze({
   SonarCloudTokenCliProvider: SonarCloudTokenCliProvider
 });
 
-class TestExecutor {
-    constructor() {
-        this.shutdown = false;
-        this.cleanupTask = null;
-        this.usingWithCleanupTasks = false;
-        this.tasks = [];
-    }
-    /**
-     * Check if we are currently in shutdown state due to user
-     * asking to abort (Ctrl+C).
-     */
-    checkCanContinue() {
-        if (this.shutdown) {
-            throw new Error("In shutdown mode - aborting");
-        }
-    }
-    async runTasks() {
-        console.warn("Running cleanup tasks");
-        while (true) {
-            // We must run tasks in reverse order due to dependencies.
-            // E.g. we cannot delete a Docker network before deleting
-            // the container using it.
-            const task = this.tasks.pop();
-            if (task === undefined) {
-                return;
-            }
-            try {
-                await task();
-            }
-            catch (error) {
-                console.error(error);
-            }
-        }
-    }
-    /**
-     * Register a task that will be run during cleanup phase.
-     */
-    registerCleanupTask(task) {
-        if (!this.usingWithCleanupTasks) {
-            throw new Error("registerCleanupTask run outside runWithCleanupTasks");
-        }
-        this.tasks.push(task);
-        this.checkCanContinue();
-    }
-    /**
-     * Run the code block while ensuring we can run cleanup tasks
-     * after the execution or if the process is interrupted.
-     *
-     * The main method of the program should be executed by using
-     * this method.
-     */
-    async runWithCleanupTasks(body) {
-        try {
-            assert.strict.strictEqual(this.usingWithCleanupTasks, false);
-            this.usingWithCleanupTasks = true;
-            // We capture Ctrl+C so that we can perform cleanup task,
-            // since the cleanup tasks involve async code which is not
-            // supported during NodeJS normal exit handling.
-            //
-            // This will not abort the running tasks until after
-            // we have completed the cleanup tasks. The running tasks
-            // can stop earlier by calling checkCanContinue.
-            process.on("SIGINT", () => {
-                console.warn("Caught interrupt signal - forcing termination");
-                if (this.cleanupTask != null) {
-                    return;
-                }
-                this.shutdown = true;
-                this.cleanupTask = this.runTasks().then(() => {
-                    process.exit(1);
-                });
-            });
-            await body(this);
-        }
-        catch (error) {
-            // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
-            console.error(error.stack || error.message || error);
-            process.exitCode = 1;
-        }
-        finally {
-            console.log(`Reached finally block`);
-            this.usingWithCleanupTasks = false;
-            if (this.cleanupTask == null) {
-                this.cleanupTask = this.runTasks();
-            }
-            await this.cleanupTask;
-        }
-    }
-}
-function createTestExecutor() {
-    return new TestExecutor();
+class TestExecutor {
+    constructor() {
+        this.shutdown = false;
+        this.cleanupTask = null;
+        this.usingWithCleanupTasks = false;
+        this.tasks = [];
+    }
+    /**
+     * Check if we are currently in shutdown state due to user
+     * asking to abort (Ctrl+C).
+     */
+    checkCanContinue() {
+        if (this.shutdown) {
+            throw new Error("In shutdown mode - aborting");
+        }
+    }
+    async runTasks() {
+        console.warn("Running cleanup tasks");
+        while (true) {
+            // We must run tasks in reverse order due to dependencies.
+            // E.g. we cannot delete a Docker network before deleting
+            // the container using it.
+            const task = this.tasks.pop();
+            if (task === undefined) {
+                return;
+            }
+            try {
+                await task();
+            }
+            catch (error) {
+                console.error(error);
+            }
+        }
+    }
+    /**
+     * Register a task that will be run during cleanup phase.
+     */
+    registerCleanupTask(task) {
+        if (!this.usingWithCleanupTasks) {
+            throw new Error("registerCleanupTask run outside runWithCleanupTasks");
+        }
+        this.tasks.push(task);
+        this.checkCanContinue();
+    }
+    /**
+     * Run the code block while ensuring we can run cleanup tasks
+     * after the execution or if the process is interrupted.
+     *
+     * The main method of the program should be executed by using
+     * this method.
+     */
+    async runWithCleanupTasks(body) {
+        try {
+            assert.strict.strictEqual(this.usingWithCleanupTasks, false);
+            this.usingWithCleanupTasks = true;
+            // We capture Ctrl+C so that we can perform cleanup task,
+            // since the cleanup tasks involve async code which is not
+            // supported during NodeJS normal exit handling.
+            //
+            // This will not abort the running tasks until after
+            // we have completed the cleanup tasks. The running tasks
+            // can stop earlier by calling checkCanContinue.
+            process.on("SIGINT", () => {
+                console.warn("Caught interrupt signal - forcing termination");
+                if (this.cleanupTask != null) {
+                    return;
+                }
+                this.shutdown = true;
+                this.cleanupTask = this.runTasks().then(() => {
+                    process.exit(1);
+                });
+            });
+            await body(this);
+        }
+        catch (error) {
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+            console.error(error.stack || error.message || error);
+            process.exitCode = 1;
+        }
+        finally {
+            console.log(`Reached finally block`);
+            this.usingWithCleanupTasks = false;
+            if (this.cleanupTask == null) {
+                this.cleanupTask = this.runTasks();
+            }
+            await this.cleanupTask;
+        }
+    }
+}
+function createTestExecutor() {
+    return new TestExecutor();
 }
 
-/**
- * Generate a value that can be used as part of resource names.
- *
- * Gives a value formatted as "yyyymmdd-xxxxxx", e.g. "20200523-3f2c87".
- */
-function generateRunId() {
-    const low = parseInt("100000", 16);
-    const high = parseInt("ffffff", 16);
-    const range = high - low + 1;
-    const now = new Date();
-    return [
-        now.getUTCFullYear(),
-        (now.getUTCMonth() + 1).toString().padStart(2, "0"),
-        now.getUTCDate().toString().padStart(2, "0"),
-        "-",
-        (Math.floor(Math.random() * range) + low).toString(16),
-    ].join("");
-}
-/**
- * Generate a name that can be used for a resource.
- */
-function generateName(extra) {
-    const s = extra === undefined ? "" : `-${extra}`;
-    return `autotest-${generateRunId()}${s}`;
-}
-/**
- * Create a new Docker network.
- */
-async function createNetwork(executor) {
-    executor.checkCanContinue();
-    const networkName = generateName();
-    await execa__default["default"]("docker", ["network", "create", networkName]);
-    const lsRes = await execa__default["default"]("docker", [
-        "network",
-        "ls",
-        "-q",
-        "-f",
-        `name=${networkName}`,
-    ]);
-    const networkId = lsRes.stdout.trim();
-    console.log(`Network ${networkName} (${networkId}) created`);
-    executor.registerCleanupTask(async () => {
-        await execa__default["default"]("docker", ["network", "rm", networkId]);
-        console.log(`Network ${networkName} (${networkId}) deleted`);
-    });
-    return {
-        id: networkId,
-    };
-}
-/**
- * Execute curl within the Docker network.
- */
-async function curl(executor, network, ...args) {
-    executor.checkCanContinue();
-    const result = await execa__default["default"]("docker", [
-        "run",
-        "-i",
-        "--rm",
-        "--network",
-        network.id,
-        "byrnedo/alpine-curl",
-        ...args,
-    ]);
-    return result.stdout;
-}
-/**
- * Repeatedly check for a condition until timeout.
- *
- * The condition can throw an error without aborting the loop.
- * To abort the condition must return false.
- */
-async function pollForCondition({ container, attempts, waitIntervalSec, condition, }) {
-    function log(value) {
-        console.log(`${container.name} (poll): ${value}`);
-    }
-    container.executor.checkCanContinue();
-    log(`Waiting for condition.. Checking ${attempts} times by ${waitIntervalSec} sec`);
-    const start = perf_hooks.performance.now();
-    const duration = () => {
-        const end = perf_hooks.performance.now();
-        return Math.round((end - start) / 1000);
-    };
-    for (let i = 0; i < attempts; i++) {
-        container.executor.checkCanContinue();
-        if (!(await isRunning(container.executor, container))) {
-            throw new Error(`Container ${container.name} not running as expected`);
-        }
-        try {
-            const result = await condition();
-            if (!result) {
-                break;
-            }
-            log(`Took ${duration()} seconds for condition`);
-            return;
-        }
-        catch (e) {
-            log("Still waiting...");
-            await new Promise((resolve) => setTimeout(resolve, waitIntervalSec * 1000));
-        }
-    }
-    throw new Error(`Failed to wait for container ${container.name}`);
-}
-async function waitForHttpOk({ container, url, attempts = 30, waitIntervalSec = 1, }) {
-    await pollForCondition({
-        container,
-        attempts,
-        waitIntervalSec,
-        condition: async () => {
-            await curl(container.executor, container.network, "-fsS", url);
-            return true;
-        },
-    });
-}
-async function waitForPostgresAvailable({ container, attempts = 30, waitIntervalSec = 1, username = "user", password = "password", dbname, }) {
-    await pollForCondition({
-        container,
-        attempts,
-        waitIntervalSec,
-        condition: async () => {
-            await execa__default["default"]("docker", [
-                "exec",
-                "-e",
-                `PGPASSWORD=${password}`,
-                container.name,
-                "psql",
-                "-h",
-                "localhost",
-                "-U",
-                username,
-                "-c",
-                "select 1",
-                dbname,
-            ]);
-            return true;
-        },
-    });
-}
-async function isRunning(executor, container) {
-    executor.checkCanContinue();
-    try {
-        await execa__default["default"]("docker", ["inspect", container.name]);
-        return true;
-    }
-    catch (e) {
-        return false;
-    }
-}
-/**
- * A stream transform that injects a prefix into every line
- * and also forces every chunk to end with a newline so that
- * it can be interleaved with other output.
- */
-class OutputPrefixTransform extends stream.Transform {
-    constructor(prefix) {
-        super({
-            objectMode: true,
-            transform: (chunk, encoding, callback) => {
-                let result = chunk.toString(encoding);
-                if (result.endsWith("\n")) {
-                    result = result.slice(0, -1);
-                }
-                // Some loggers emit newline then ANSI reset code causing
-                // blank lines if we do not remove the newline.
-                // TODO: Consider removing all ANSI escape codes as it causes
-                //  some confusing output when interleaved.
-                if (result.endsWith("\n\u001B[0m")) {
-                    result = result.slice(0, -5) + result.slice(-4);
-                }
-                result = prefix + result.replace(/\n/g, `\n${prefix}`) + "\n";
-                callback(null, result);
-            },
-        });
-    }
-}
-function pipeToConsole(result, name) {
-    var _a, _b;
-    (_a = result.stdout) === null || _a === void 0 ? void 0 : _a.pipe(new OutputPrefixTransform(`${name}: `)).pipe(process.stdout);
-    (_b = result.stderr) === null || _b === void 0 ? void 0 : _b.pipe(new OutputPrefixTransform(`${name} (stderr): `)).pipe(process.stderr);
-}
-function checkPidRunning(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (e) {
-        return false;
-    }
-}
-async function getContainerId({ executor, name, hasFailed, pid, }) {
-    function log(value) {
-        console.log(`${name} (get-container-id): ${value}`);
-    }
-    async function check() {
-        let result;
-        try {
-            result = (await execa__default["default"]("docker", ["inspect", name, "-f", "{{.Id}}"]))
-                .stdout;
-        }
-        catch (e) {
-            result = null;
-        }
-        // Debugging to help us solve CALS-366.
-        const ps = execa__default["default"]("docker", ["ps"]);
-        pipeToConsole(ps, `${name} (ps)`);
-        await ps;
-        // Debugging to help us solve CALS-366.
-        if (!checkPidRunning(pid)) {
-            log("Process not running");
-        }
-        return result;
-    }
-    // If the container is not running, retry a few times to cover
-    // the initial starting where we might check before the container
-    // is running.
-    // Increased from 25 to 100 to see if it helps for solving CALS-366.
-    for (let i = 0; i < 100; i++) {
-        if (i > 0) {
-            // Delay a bit before checking again.
-            log("Retrying in a bit...");
-            await new Promise((resolve) => setTimeout(resolve, 200));
-        }
-        executor.checkCanContinue();
-        if (hasFailed()) {
-            break;
-        }
-        const id = await check();
-        if (id !== null) {
-            log(`Resolved to ${id}`);
-            return id;
-        }
-    }
-    throw new Error(`Could not find ID for container with name ${name}`);
-}
-async function pullImage({ imageId }) {
-    console.log(`Pulling ${imageId}`);
-    const process = execa__default["default"]("docker", ["pull", imageId]);
-    pipeToConsole(process, `pull-image (${imageId})`);
-    await process;
-}
-async function checkImageExistsLocally({ imageId, }) {
-    const result = await execa__default["default"]("docker", ["images", "-q", imageId]);
-    const found = result.stdout != "";
-    console.log(`image ${imageId} ${found ? "was present locally" : "was not found locally"}`);
-    return found;
-}
-async function startContainer({ executor, network, imageId, alias, env, dockerArgs = [], pull = false, }) {
-    executor.checkCanContinue();
-    const containerName = generateName(alias);
-    // Prefer pulling image here so that the call on getContainerId
-    // will not time out due to pulling the image.
-    // If pull is false, we will still fallback to pulling if we cannot
-    // find the image locally.
-    if (pull || !(await checkImageExistsLocally({ imageId }))) {
-        await pullImage({
-            imageId,
-        });
-    }
-    const args = [
-        "run",
-        "--rm",
-        "--network",
-        network.id,
-        "--name",
-        containerName,
-        ...dockerArgs,
-    ];
-    if (alias != null) {
-        args.push(`--network-alias=${alias}`);
-    }
-    if (env != null) {
-        for (const [key, value] of Object.entries(env)) {
-            args.push("-e", `${key}=${value}`);
-        }
-    }
-    args.push(imageId);
-    console.log(`Starting ${imageId}`);
-    const process = execa__default["default"]("docker", args);
-    pipeToConsole(process, alias !== null && alias !== void 0 ? alias : containerName);
-    let failed = false;
-    process.catch(() => {
-        failed = true;
-    });
-    if (!process.pid) {
-        throw new Error("No process identifier (PID) was returned for the process that was started when running trying to run Docker container");
-    }
-    const id = await getContainerId({
-        executor,
-        name: containerName,
-        hasFailed: () => failed,
-        pid: process.pid,
-    });
-    executor.registerCleanupTask(async () => {
-        console.log(`Stopping container ${containerName}`);
-        const r = execa__default["default"]("docker", ["stop", containerName]);
-        pipeToConsole(r, (alias !== null && alias !== void 0 ? alias : containerName) + " (stop)");
-        try {
-            await r;
-        }
-        catch (e) {
-            // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access, @typescript-eslint/no-unsafe-call
-            if (!(e.stderr || "").includes("No such container")) {
-                throw e;
-            }
-        }
-    });
-    return {
-        id,
-        name: containerName,
-        network,
-        process,
-        executor,
-    };
-}
-async function runNpmRunScript(name, options) {
-    const result = execa__default["default"]("npm", ["run", name], {
-        env: options === null || options === void 0 ? void 0 : options.env,
-    });
-    pipeToConsole(result, `npm run ${name}`);
-    await result;
-}
-/**
- * This likely does not cover all situations.
- */
-async function getDockerHostAddress() {
-    if (process.platform === "darwin" || process.platform === "win32") {
-        return "host.docker.internal";
-    }
-    if (fs__default["default"].existsSync("/.dockerenv")) {
-        const process = execa__default["default"]("ip", ["route"]);
-        pipeToConsole(process, "ip route");
-        const res = await process;
-        try {
-            return (res.stdout
-                .split("\n")
-                .filter((it) => it.includes("default via"))
-                // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
-                .map((it) => /default via ([\d\.]+) /.exec(it)[1])[0]);
-        }
-        catch (e) {
-            throw new Error("Failed to extract docker host address");
-        }
-    }
-    return "localhost";
-}
-async function waitForEnterToContinue(prompt = "Press enter to continue") {
-    return new Promise((resolve, reject) => {
-        read__default["default"]({
-            prompt,
-            silent: true,
-        }, (err) => {
-            if (err) {
-                reject(err);
-            }
-            resolve();
-        });
-    });
+/**
+ * Generate a value that can be used as part of resource names.
+ *
+ * Gives a value formatted as "yyyymmdd-xxxxxx", e.g. "20200523-3f2c87".
+ */
+function generateRunId() {
+    const low = parseInt("100000", 16);
+    const high = parseInt("ffffff", 16);
+    const range = high - low + 1;
+    const now = new Date();
+    return [
+        now.getUTCFullYear(),
+        (now.getUTCMonth() + 1).toString().padStart(2, "0"),
+        now.getUTCDate().toString().padStart(2, "0"),
+        "-",
+        (Math.floor(Math.random() * range) + low).toString(16),
+    ].join("");
+}
+/**
+ * Generate a name that can be used for a resource.
+ */
+function generateName(extra) {
+    const s = extra === undefined ? "" : `-${extra}`;
+    return `autotest-${generateRunId()}${s}`;
+}
+/**
+ * Create a new Docker network.
+ */
+async function createNetwork(executor) {
+    executor.checkCanContinue();
+    const networkName = generateName();
+    await execa__default["default"]("docker", ["network", "create", networkName]);
+    const lsRes = await execa__default["default"]("docker", [
+        "network",
+        "ls",
+        "-q",
+        "-f",
+        `name=${networkName}`,
+    ]);
+    const networkId = lsRes.stdout.trim();
+    console.log(`Network ${networkName} (${networkId}) created`);
+    executor.registerCleanupTask(async () => {
+        await execa__default["default"]("docker", ["network", "rm", networkId]);
+        console.log(`Network ${networkName} (${networkId}) deleted`);
+    });
+    return {
+        id: networkId,
+    };
+}
+/**
+ * Execute curl within the Docker network.
+ */
+async function curl(executor, network, ...args) {
+    executor.checkCanContinue();
+    const result = await execa__default["default"]("docker", [
+        "run",
+        "-i",
+        "--rm",
+        "--network",
+        network.id,
+        "byrnedo/alpine-curl",
+        ...args,
+    ]);
+    return result.stdout;
+}
+/**
+ * Repeatedly check for a condition until timeout.
+ *
+ * The condition can throw an error without aborting the loop.
+ * To abort the condition must return false.
+ */
+async function pollForCondition({ container, attempts, waitIntervalSec, condition, }) {
+    function log(value) {
+        console.log(`${container.name} (poll): ${value}`);
+    }
+    container.executor.checkCanContinue();
+    log(`Waiting for condition.. Checking ${attempts} times by ${waitIntervalSec} sec`);
+    const start = perf_hooks.performance.now();
+    const duration = () => {
+        const end = perf_hooks.performance.now();
+        return Math.round((end - start) / 1000);
+    };
+    for (let i = 0; i < attempts; i++) {
+        container.executor.checkCanContinue();
+        if (!(await isRunning(container.executor, container))) {
+            throw new Error(`Container ${container.name} not running as expected`);
+        }
+        try {
+            const result = await condition();
+            if (!result) {
+                break;
+            }
+            log(`Took ${duration()} seconds for condition`);
+            return;
+        }
+        catch (e) {
+            log("Still waiting...");
+            await new Promise((resolve) => setTimeout(resolve, waitIntervalSec * 1000));
+        }
+    }
+    throw new Error(`Failed to wait for container ${container.name}`);
+}
+async function waitForHttpOk({ container, url, attempts = 30, waitIntervalSec = 1, }) {
+    await pollForCondition({
+        container,
+        attempts,
+        waitIntervalSec,
+        condition: async () => {
+            await curl(container.executor, container.network, "-fsS", url);
+            return true;
+        },
+    });
+}
+async function waitForPostgresAvailable({ container, attempts = 30, waitIntervalSec = 1, username = "user", password = "password", dbname, }) {
+    await pollForCondition({
+        container,
+        attempts,
+        waitIntervalSec,
+        condition: async () => {
+            await execa__default["default"]("docker", [
+                "exec",
+                "-e",
+                `PGPASSWORD=${password}`,
+                container.name,
+                "psql",
+                "-h",
+                "localhost",
+                "-U",
+                username,
+                "-c",
+                "select 1",
+                dbname,
+            ]);
+            return true;
+        },
+    });
+}
+async function isRunning(executor, container) {
+    executor.checkCanContinue();
+    try {
+        await execa__default["default"]("docker", ["inspect", container.name]);
+        return true;
+    }
+    catch (e) {
+        return false;
+    }
+}
+/**
+ * A stream transform that injects a prefix into every line
+ * and also forces every chunk to end with a newline so that
+ * it can be interleaved with other output.
+ */
+class OutputPrefixTransform extends stream.Transform {
+    constructor(prefix) {
+        super({
+            objectMode: true,
+            transform: (chunk, encoding, callback) => {
+                let result = chunk.toString(encoding);
+                if (result.endsWith("\n")) {
+                    result = result.slice(0, -1);
+                }
+                // Some loggers emit newline then ANSI reset code causing
+                // blank lines if we do not remove the newline.
+                // TODO: Consider removing all ANSI escape codes as it causes
+                //  some confusing output when interleaved.
+                if (result.endsWith("\n\u001B[0m")) {
+                    result = result.slice(0, -5) + result.slice(-4);
+                }
+                result = prefix + result.replace(/\n/g, `\n${prefix}`) + "\n";
+                callback(null, result);
+            },
+        });
+    }
+}
+function pipeToConsole(result, name) {
+    var _a, _b;
+    (_a = result.stdout) === null || _a === void 0 ? void 0 : _a.pipe(new OutputPrefixTransform(`${name}: `)).pipe(process.stdout);
+    (_b = result.stderr) === null || _b === void 0 ? void 0 : _b.pipe(new OutputPrefixTransform(`${name} (stderr): `)).pipe(process.stderr);
+}
+function checkPidRunning(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (e) {
+        return false;
+    }
+}
+async function getContainerId({ executor, name, hasFailed, pid, }) {
+    function log(value) {
+        console.log(`${name} (get-container-id): ${value}`);
+    }
+    async function check() {
+        let result;
+        try {
+            result = (await execa__default["default"]("docker", ["inspect", name, "-f", "{{.Id}}"]))
+                .stdout;
+        }
+        catch (e) {
+            result = null;
+        }
+        // Debugging to help us solve CALS-366.
+        const ps = execa__default["default"]("docker", ["ps"]);
+        pipeToConsole(ps, `${name} (ps)`);
+        await ps;
+        // Debugging to help us solve CALS-366.
+        if (!checkPidRunning(pid)) {
+            log("Process not running");
+        }
+        return result;
+    }
+    // If the container is not running, retry a few times to cover
+    // the initial starting where we might check before the container
+    // is running.
+    // Increased from 25 to 100 to see if it helps for solving CALS-366.
+    for (let i = 0; i < 100; i++) {
+        if (i > 0) {
+            // Delay a bit before checking again.
+            log("Retrying in a bit...");
+            await new Promise((resolve) => setTimeout(resolve, 200));
+        }
+        executor.checkCanContinue();
+        if (hasFailed()) {
+            break;
+        }
+        const id = await check();
+        if (id !== null) {
+            log(`Resolved to ${id}`);
+            return id;
+        }
+    }
+    throw new Error(`Could not find ID for container with name ${name}`);
+}
+async function pullImage({ imageId }) {
+    console.log(`Pulling ${imageId}`);
+    const process = execa__default["default"]("docker", ["pull", imageId]);
+    pipeToConsole(process, `pull-image (${imageId})`);
+    await process;
+}
+async function checkImageExistsLocally({ imageId, }) {
+    const result = await execa__default["default"]("docker", ["images", "-q", imageId]);
+    const found = result.stdout != "";
+    console.log(`image ${imageId} ${found ? "was present locally" : "was not found locally"}`);
+    return found;
+}
+async function startContainer({ executor, network, imageId, alias, env, dockerArgs = [], pull = false, }) {
+    executor.checkCanContinue();
+    const containerName = generateName(alias);
+    // Prefer pulling image here so that the call on getContainerId
+    // will not time out due to pulling the image.
+    // If pull is false, we will still fallback to pulling if we cannot
+    // find the image locally.
+    if (pull || !(await checkImageExistsLocally({ imageId }))) {
+        await pullImage({
+            imageId,
+        });
+    }
+    const args = [
+        "run",
+        "--rm",
+        "--network",
+        network.id,
+        "--name",
+        containerName,
+        ...dockerArgs,
+    ];
+    if (alias != null) {
+        args.push(`--network-alias=${alias}`);
+    }
+    if (env != null) {
+        for (const [key, value] of Object.entries(env)) {
+            args.push("-e", `${key}=${value}`);
+        }
+    }
+    args.push(imageId);
+    console.log(`Starting ${imageId}`);
+    const process = execa__default["default"]("docker", args);
+    pipeToConsole(process, alias !== null && alias !== void 0 ? alias : containerName);
+    let failed = false;
+    process.catch(() => {
+        failed = true;
+    });
+    if (!process.pid) {
+        throw new Error("No process identifier (PID) was returned for the process that was started when running trying to run Docker container");
+    }
+    const id = await getContainerId({
+        executor,
+        name: containerName,
+        hasFailed: () => failed,
+        pid: process.pid,
+    });
+    executor.registerCleanupTask(async () => {
+        console.log(`Stopping container ${containerName}`);
+        const r = execa__default["default"]("docker", ["stop", containerName]);
+        pipeToConsole(r, (alias !== null && alias !== void 0 ? alias : containerName) + " (stop)");
+        try {
+            await r;
+        }
+        catch (e) {
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access, @typescript-eslint/no-unsafe-call
+            if (!(e.stderr || "").includes("No such container")) {
+                throw e;
+            }
+        }
+    });
+    return {
+        id,
+        name: containerName,
+        network,
+        process,
+        executor,
+    };
+}
+async function runNpmRunScript(name, options) {
+    const result = execa__default["default"]("npm", ["run", name], {
+        env: options === null || options === void 0 ? void 0 : options.env,
+    });
+    pipeToConsole(result, `npm run ${name}`);
+    await result;
+}
+/**
+ * This likely does not cover all situations.
+ */
+async function getDockerHostAddress() {
+    if (process.platform === "darwin" || process.platform === "win32") {
+        return "host.docker.internal";
+    }
+    if (fs__default["default"].existsSync("/.dockerenv")) {
+        const process = execa__default["default"]("ip", ["route"]);
+        pipeToConsole(process, "ip route");
+        const res = await process;
+        try {
+            return (res.stdout
+                .split("\n")
+                .filter((it) => it.includes("default via"))
+                // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+                .map((it) => /default via ([\d\.]+) /.exec(it)[1])[0]);
+        }
+        catch (e) {
+            throw new Error("Failed to extract docker host address");
+        }
+    }
+    return "localhost";
+}
+async function waitForEnterToContinue(prompt = "Press enter to continue") {
+    return new Promise((resolve, reject) => {
+        read__default["default"]({
+            prompt,
+            silent: true,
+        }, (err) => {
+            if (err) {
+                reject(err);
+            }
+            resolve();
+        });
+    });
 }
 
 const VERSION = version;