@catladder/cli 0.0.0-next-e9e5af68 → 0.0.0-next-1c65899f

package/dist/cli/src/apps/cli/commands/project/commandConfigSecrets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"commandConfigSecrets.js","sourceRoot":"","sources":["../../../../../../../src/apps/cli/commands/project/commandConfigSecrets.ts"],"names":[],"mappings":";;;AAAA,kDAI6B;AAE7B,6CAA2C;AAC3C,yCAAuC;AAEvC,0EAQ6C;AAC7C,oGAI+D;AAC/D,6DAA0D;AAC1D,qDAA6D;AAC7D,qDAA8D;AAC9D,uDAAkD;AAOlD,+FAA+F;AAC/F,MAAM,WAAW,GAAG,CAAC,CAAO,EAAE,EAAE,CAC9B,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE;IAC9C,OAAO;QACL,aAAa;QACb,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;YAC3C,GAAG;YACH,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC3C,IAAI,CAAC;oBACH,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC,CAAC,CACH;SACF,CAAC,CACH;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,8BAA8B,GAAG,KAAK,EAC1C,GAAW,EACX,aAAqB,EACrB,EAAE;IACF,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,iCAAc,EAC5D,GAAG,EACH,aAAa,CACd,CAAC;IACF,OAAO;QACL,GAAG,WAAW,CAAC,KAAK,CAAC,gBAAgB;QACrC,GAAG,WAAW,CAAC,MAAM,CAAC,gBAAgB;QACtC,GAAG,gBAAgB;KACpB;SACE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC;AACF,MAAM,gBAAgB,GAAG,KAAK,EAC5B,QAAY,EACZ,GAAW,EACX,aAAqB,EACrB,EAAE;IACF,MAAM,gBAAgB,GAAG,MAAM,8BAA8B,CAC3D,GAAG,EACH,aAAa,CACd,CAAC;IAEF,MAAM,aAAa,GAAG,MAAM,IAAA,qCAAkB,EAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,MAAM,IAAA,4CAAyB,EACpD,QAAQ,EACR,GAAG,EACH,aAAa,CACd,CAAC;IACF,MAAM,UAAU,GAAG;QACjB,GAAG,aAAa;QAChB,GAAG,cAAc;KAClB,CAAC;IACF,OAAO,MAAM,CAAC,WAAW,CACvB,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,oHAAoH;QACpH,MAAM,gBAAgB,GACpB,KAAK,KAAK,GAAG,GAAG,IAAA,2BAAgB,EAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AACF,MAAM,OAAO,GAAG,KAAK,EACnB,QAAY,EACZ,gBAEC,EACD,EAAE;IACF,IAAI,YAAY,GAAS,MAAM,CAAC,WAAW,CACzC,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACpE,aAAa;QACb,MAAM,CAAC,WAAW,CAChB,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;YACtB,GAAG;YACH,MAAM,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC;SACrD,CAAC,CACH,CACF;KACF,CAAC,CACH,CACF,CAAC;IACF,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,OAAO,SAAS,EAAE,CAAC;QACjB,YAAY,GAAG,MAAM,IAAA,uBAAU,EAC7B,WAAW,CAAC,YAAY,CAAC,EACzB,IAAA,0BAAY,EAAA;;;UAGR,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;aAC/B,GAAG,CACF,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,aAAa,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpE;aACA,IAAI,CAAC,IAAI,CAAC;;SAEZ,CACJ,CAAC;QACF,mBAAmB;QACnB,SAAS,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC;oBAC/C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC;oBAC/C,CAAC,CAAC,EAAE,CAAC;gBACP,wDAAwD;gBACxD,MAAM,gBAAgB,GAAG,MAAM,8BAA8B,CAC3D,GAAG,EACH,aAAa,CACd,CAAC;gBAEF,MAAM,SAAS,GAAG,IAAA,sBAAU,EAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,IAAA,sBAAU,EAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;gBAEvD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACjB,QAAQ,CAAC,GAAG,CACV,4CAA4C,aAAa,GAAG,CAC7D,CAAC;oBACF,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACjB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACzB,QAAQ,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;wBAC7D,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;wBAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACnB,CAAC;oBACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvB,QAAQ,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;wBACtD,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;wBAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACnB,CAAC;oBAED,MAAM,IAAA,eAAK,EAAC,IAAI,CAAC,CAAC;oBAClB,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;oBAE/D,IAAI,CAAC,cAAc,EAAE,CAAC;wBACpB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC3B,CAAC;oBACD,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAgB,GAAE,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,GAAG,GAAG,GAAG,aAAa,GAAG,OAAO,CAAC,CAAC;YAC/D,MAAM,CACJ,MAAM,QAAQ,CAAC,eAAe,EAAE,CACjC,CAAC,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjB,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,aAAa,CAAC,CAAC;YAC/C,QAAQ,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,MAAM,yBAAyB,CAC7B,QAAQ,EACR,MAAM,EACN,gBAAgB,EAChB,YAAY,CACb,CAAC;IAEF,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACnB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,KAAK,EACrC,QAAY,EACZ,MAAc,EACd,gBAAuD,EACvD,YAAkB,EAClB,EAAE;IACF,MAAM,OAAO,GAAG,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAC;IAEhD,+DAA+D;IAC/D,mBAAmB;IACnB,IAAI,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAA,2BAAkB,EACtB,QAAQ,EACR,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,EAChC,GAAG,EACH,aAAa,CACd,CAAC;YACJ,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiC,CAAC;IACvD,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,iCAAc,EAC5D,GAAG,EACH,aAAa,CACd,CAAC;YACF;gBACE,GAAG,gBAAgB;gBACnB,GAAG,WAAW,CAAC,KAAK,CAAC,gBAAgB;gBACrC,GAAG,WAAW,CAAC,MAAM,CAAC,gBAAgB;aACvC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAC1B,KAAK,CAAC,GAAG,CAAC,IAAA,2BAAgB,EAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,QAAQ,CAAC,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CACtD,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CACxB,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;;QACnB,OAAA,MAAM,CAAC,OAAO,CAAC,MAAA,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,mCAAI,EAAE,CAAC,CAAC,GAAG,CACxD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;;YACf,MAAM,IAAI,GAAG,IAAA,2BAAgB,EAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;YACvD,OAAO;gBACL,IAAI;gBACJ,KAAK,EACH,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE,CAAC;gBACjE,IAAI,EAAE,MAAA,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAK,QAAkB;aAC7C,CAAC;QACJ,CAAC,CACF,CAAA;KAAA,CACF,CACJ,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAA,0BAAiB,GAAE,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,GAAG,CACV,6IAA6I,CAC9I,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAA,kDAAuB,GAAE,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,QAAQ,CAAC,GAAG,CACV,mIAAmI,CACpI,CAAC;QACF,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,MAAM,wBAAwB,IAAI,OAAO,CAAC,CAAC;IAC7E,MAAM,IAAA,8CAAmB,EACvB,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,MAAM,IAAA,+CAAoB,EAAC,MAAM,CAAC,CACnC,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,oBAAoB,GAAG,KAAK,EAAE,EAAM,EAAE,YAAqB,EAAE,EAAE;IAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,mBAAmB,GAAG,MAAM,IAAA,0DAAuC,GAAE,CAAC;QAC5E,MAAM,OAAO,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,IAAA,8BAAW,EAAC,YAAY,CAAC,CAAC;QAEzD,wEAAwE;QACxE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,MAAM,IAAA,uCAAoB,GAAE,CAAC;YAChD,MAAM,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,OAAO,CAAC,EAAE,EAAE;gBAChB,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAlBW,QAAA,oBAAoB,wBAkB/B"}

package/dist/pipeline/src/constants.d.ts

@@ -1,2 +0,0 @@
-export declare const PIPELINE_IMAGE_TAG: string;
-export declare const DOCKER_REGISTRY: string;

package/dist/pipeline/src/constants.js

@@ -1,8 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "next-e9e5af68" || "latest";
-exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || "git.panter.ch:5001/catladder/catladder";

package/dist/pipeline/src/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../pipeline/src/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,kBAAkB,GAC7B,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,QAAQ,CAAC;AACvC,QAAA,eAAe,GAC1B,OAAO,CAAC,GAAG,CAAC,sBAAsB;IAClC,wCAAwC,CAAC"}

package/dist/runner-images/semantic-release-central.Dockerfile

@@ -1,36 +0,0 @@
-# LEGACY-COMPAT build of the semantic-release image for the CENTRAL
-# registry only (build context: repo root, see .gitlab-ci-yaml-custom.yaml).
-#
-# The shipped definition (semantic-release/Dockerfile) is self-contained:
-# repos generated by current catladder run the security audit via the
-# materialized `.catladder-generated/catci/` bundle. But the central
-# `:latest` tag is shared with repos on OLD catladder versions whose
-# generated pipelines expect `catladder` on the PATH — so the central
-# build additionally bakes the cli in, exactly as before.
-#
-# Delete together with the central registry / central mode.
-FROM node:lts-alpine
-
-RUN apk add --no-cache bash git git-lfs
-
-RUN mkdir /packages
-COPY ./cli /packages/cli
-
-# add semantic release (pinned exactly — keep in sync with
-# semantic-release/Dockerfile; @semantic-release/changelog@7 is ESM-only
-# and incompatible with the CJS semantic-release@19)
-RUN yarn global add \
-    semantic-release@19.0.5 \
-    @semantic-release/commit-analyzer@13.0.1 \
-    @semantic-release/release-notes-generator@14.1.1 \
-    https://github.com/panter/git.git#b4037626cc583d3e9f7995ea0604b23730d0a22e \
-    @semantic-release/changelog@6.0.3 \
-    @semantic-release/gitlab@9.5.1 \
-    @semantic-release/exec@6.0.3 \
-    /packages/cli
-
-RUN mkdir -p /scripts
-COPY ./runner-images/semantic-release/scripts/* /scripts/
-RUN chmod +x /scripts/*
-
-ENV PATH="/scripts:${PATH}"

package/src/apps/cli/commands/project/commandConfigSecrets.ts

@@ -1,322 +0,0 @@
-import {
-  getEnabledPipelineTypes,
-  getSecretVarName,
-  getVaultConfig,
-} from "@catladder/pipeline";
-import type { Config } from "@catladder/pipeline";
-import { stripIndents } from "common-tags";
-import { difference } from "lodash-es";
-import type { IO } from "../../../../core/types";
-import {
-  getAllComponentsWithAllEnvsHierarchical,
-  getEnvironment,
-  getEnvVarsResolved,
-  getJobOnlyEnvVarsResolved,
-  getProjectComponents,
-  getProjectConfig,
-  parseChoice,
-} from "../../../../config/getProjectConfig";
-import {
-  collectSecretTargets,
-  getConfiguredGithubRepo,
-  pushSecretsToGithub,
-} from "../../../../commands/project/commandSecretsSyncGithub";
-import { editAsFile } from "../../../../utils/editAsFile";
-import { isGhAuthenticated } from "../../../../utils/github";
-import { upsertAllVariables } from "../../../../utils/gitlab";
-import { delay } from "../../../../utils/promise";
-
-type Vars = {
-  [env: string]: {
-    [componentName: string]: Record<string, string>;
-  };
-};
-/* for convenience, parse json objects. that makes it easier to edit secrets that are object */
-const resolveJson = (v: Vars) =>
-  Object.fromEntries(
-    Object.entries(v).map(([componentName, envs]) => {
-      return [
-        componentName,
-        Object.fromEntries(
-          Object.entries(envs).map(([env, secrets]) => [
-            env,
-            Object.fromEntries(
-              Object.entries(secrets).map(([key, value]) => {
-                try {
-                  return [key, JSON.parse(value)];
-                } catch (e) {
-                  return [key, value];
-                }
-              }),
-            ),
-          ]),
-        ),
-      ];
-    }),
-  );
-
-const getSecretEnvVarKeysToConfigure = async (
-  env: string,
-  componentName: string,
-) => {
-  const { secretEnvVarKeys, jobOnlyVars } = await getEnvironment(
-    env,
-    componentName,
-  );
-  return [
-    ...jobOnlyVars.build.secretEnvVarKeys,
-    ...jobOnlyVars.deploy.secretEnvVarKeys,
-    ...secretEnvVarKeys,
-  ]
-    .filter((k) => !k.hidden)
-    .map((k) => k.key);
-};
-const getEnvVarsToEdit = async (
-  instance: IO,
-  env: string,
-  componentName: string,
-) => {
-  const secretEnvVarKeys = await getSecretEnvVarKeysToConfigure(
-    env,
-    componentName,
-  );
-
-  const normalEnvVars = await getEnvVarsResolved(instance, env, componentName);
-  const jobOnlyEnvVars = await getJobOnlyEnvVarsResolved(
-    instance,
-    env,
-    componentName,
-  );
-  const allEnvVars = {
-    ...normalEnvVars,
-    ...jobOnlyEnvVars,
-  };
-  return Object.fromEntries(
-    secretEnvVarKeys.map((key) => {
-      const value = allEnvVars[key];
-      // due to some quirky way to resolve these variables, unset variables have the $CL_ prefix, so we remove thouse here
-      const variableIsNotSet =
-        value === "$" + getSecretVarName(env, componentName, key);
-      return [key, variableIsNotSet ? "🚨 FILL ME" : value];
-    }),
-  );
-};
-const doItFor = async (
-  instance: IO,
-  envAndComponents: {
-    [componentName: string]: string[];
-  },
-) => {
-  let valuesToEdit: Vars = Object.fromEntries(
-    await Promise.all(
-      Object.entries(envAndComponents).map(async ([componentName, envs]) => [
-        componentName,
-        Object.fromEntries(
-          await Promise.all(
-            envs.map(async (env) => [
-              env,
-              await getEnvVarsToEdit(instance, env, componentName),
-            ]),
-          ),
-        ),
-      ]),
-    ),
-  );
-  let hasErrors = true;
-  while (hasErrors) {
-    valuesToEdit = await editAsFile(
-      resolveJson(valuesToEdit),
-      stripIndents`
-        Please fill in all secrets for: 
-
-        ${Object.entries(envAndComponents)
-          .map(
-            ([componentName, envs]) => `- ${componentName}: ${envs.join(", ")}`,
-          )
-          .join("\n")}
-
-        `,
-    );
-    // check for errors
-    hasErrors = false;
-    for (const [componentName, envs] of Object.entries(envAndComponents)) {
-      for (const env of envs) {
-        const usedKeys = valuesToEdit[componentName][env]
-          ? Object.keys(valuesToEdit[componentName][env])
-          : [];
-        // check whether newValues have the exact number of keys
-        const secretEnvVarKeys = await getSecretEnvVarKeysToConfigure(
-          env,
-          componentName,
-        );
-
-        const extranous = difference(usedKeys, secretEnvVarKeys);
-        const missing = difference(secretEnvVarKeys, usedKeys);
-
-        if (extranous.length > 0 || missing.length > 0) {
-          instance.log("");
-          instance.log(
-            `😿 Oh no! There is something wrong with "${componentName}"`,
-          );
-          instance.log("");
-          if (extranous.length > 0) {
-            instance.log("these secrets are not declared in the config");
-            extranous.forEach((key) => instance.log(key));
-            instance.log("");
-          }
-          if (missing.length > 0) {
-            instance.log("these secrets have not been provided:");
-            missing.forEach((key) => instance.log(key));
-            instance.log("");
-          }
-
-          await delay(1000);
-          const shouldContinue = await instance.confirm("Try again? 🤔");
-
-          if (!shouldContinue) {
-            throw new Error("abort");
-          }
-          hasErrors = true;
-        }
-      }
-    }
-  }
-  const config = await getProjectConfig();
-  if (!config) {
-    throw new Error("no catladder config found");
-  }
-
-  instance.log("");
-  instance.log("writing all secrets to the vault, please wait...");
-  instance.log("");
-  for (const [componentName, envs] of Object.entries(envAndComponents)) {
-    for (const env of envs) {
-      instance.log("writing " + env + ":" + componentName + "...\n");
-      await (
-        await instance.getVaultManager()
-      ).writeSecrets(env, componentName, valuesToEdit[componentName][env]);
-      instance.log("");
-      instance.log("✅ " + env + ":" + componentName);
-      instance.log("--------------------------------\n");
-    }
-  }
-
-  await mirrorSecretsToCiBackends(
-    instance,
-    config,
-    envAndComponents,
-    valuesToEdit,
-  );
-
-  instance.log("done! 😻");
-  instance.log("");
-};
-
-/**
- * the vault is the source of truth; every enabled CI backend receives
- * a mirrored copy of the edited secrets (gitlab variables, github
- * secrets), so all CI systems stay in sync
- */
-const mirrorSecretsToCiBackends = async (
-  instance: IO,
-  config: Config,
-  envAndComponents: { [componentName: string]: string[] },
-  valuesToEdit: Vars,
-) => {
-  const enabled = getEnabledPipelineTypes(config);
-
-  // gitlab mirror (unless gitlab is the vault itself, then it is
-  // already written)
-  if (getVaultConfig(config).type !== "gitlab" && enabled.includes("gitlab")) {
-    for (const [componentName, envs] of Object.entries(envAndComponents)) {
-      for (const env of envs) {
-        await upsertAllVariables(
-          instance,
-          valuesToEdit[componentName][env],
-          env,
-          componentName,
-        );
-      }
-    }
-    instance.log("✅ mirrored to gitlab");
-  }
-
-  if (!enabled.includes("github")) {
-    return;
-  }
-  const kinds = new Map<string, "secret" | "variable">();
-  for (const [componentName, envs] of Object.entries(envAndComponents)) {
-    for (const env of envs) {
-      const { secretEnvVarKeys, jobOnlyVars } = await getEnvironment(
-        env,
-        componentName,
-      );
-      [
-        ...secretEnvVarKeys,
-        ...jobOnlyVars.build.secretEnvVarKeys,
-        ...jobOnlyVars.deploy.secretEnvVarKeys,
-      ].forEach(({ key, kind }) =>
-        kinds.set(getSecretVarName(env, componentName, key), kind ?? "secret"),
-      );
-    }
-  }
-  const secrets = Object.entries(envAndComponents).flatMap(
-    ([componentName, envs]) =>
-      envs.flatMap((env) =>
-        Object.entries(valuesToEdit[componentName][env] ?? {}).map(
-          ([key, value]) => {
-            const name = getSecretVarName(env, componentName, key);
-            return {
-              name,
-              value:
-                typeof value === "string" ? value : JSON.stringify(value ?? ""),
-              kind: kinds.get(name) ?? ("secret" as const),
-            };
-          },
-        ),
-      ),
-  );
-  if (secrets.length === 0) {
-    return;
-  }
-  if (!(await isGhAuthenticated())) {
-    instance.log(
-      "⚠️ github pipeline is enabled, but the github cli (gh) is not authenticated — run `project secrets-sync-github` later to mirror the secrets",
-    );
-    return;
-  }
-  const repo = await getConfiguredGithubRepo();
-  if (!repo) {
-    instance.log(
-      "⚠️ github pipeline is enabled, but no github repository was found — run `project secrets-sync-github` later to mirror the secrets",
-    );
-    return;
-  }
-  instance.log(`mirroring ${secrets.length} secrets to github ('${repo}')...`);
-  await pushSecretsToGithub(
-    instance,
-    repo,
-    secrets,
-    await collectSecretTargets(config),
-  );
-};
-
-export const projectConfigSecrets = async (io: IO, envComponent?: string) => {
-  if (!envComponent) {
-    const allEnvAndcomponents = await getAllComponentsWithAllEnvsHierarchical();
-    await doItFor(io, allEnvAndcomponents);
-  } else {
-    const { env, componentName } = parseChoice(envComponent);
-
-    // componentName can be null. in this case, iterate over all  components
-    if (!componentName) {
-      const components = await getProjectComponents();
-      await doItFor(io, Object.fromEntries(components.map((c) => [c, [env]])));
-    }
-    if (componentName) {
-      await doItFor(io, {
-        [componentName]: [env],
-      });
-    }
-  }
-};