@catladder/cli 0.0.0-refactor-gcloud-auth-no-file-7a9a76ea → 0.0.0-refactore-catenv-command-validates-argument-78d05852

package/dist/bundles/cli/index.js

@@ -1,6 +1,305 @@
 /******/ (() => { // webpackBootstrap
 /******/ 	var __webpack_modules__ = ({
 
+/***/ 5756:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+exports.__esModule = true;
+exports.evaluateDocument = exports.makeTemplate = void 0;
+var topics_json_1 = __importDefault(__nccwpck_require__(80478));
+var allTopics = topics_json_1["default"];
+var checkYes = "✅";
+var checkNo = "❌";
+var checkPlaceholder = "".concat(checkYes, "/").concat(checkNo);
+var responsiblePlaceholder = "@...";
+var rows = [
+    ["Responsible", checkPlaceholder, "Description", "Note", "More Information"],
+].concat(allTopics.map(function (t) { return [
+    Array(t.responsibles).fill(responsiblePlaceholder).join(", "),
+    checkPlaceholder,
+    t.description,
+    "",
+    t.more,
+]; }));
+function makeTable(rows) {
+    var colWidths = calculateColumnWidths(rows);
+    return "\n".concat(makeRow(rows[0], colWidths, " "), "\n").concat(makeRow(rows[0].map(function () { return ""; }), colWidths, "-"), "\n").concat(rows
+        .slice(1)
+        .map(function (row) { return makeRow(row, colWidths, " "); })
+        .join("\n"), "\n");
+}
+function calculateColumnWidths(rows) {
+    var columnCount = rows[0].length;
+    return Array.from({ length: columnCount }, function (_, i) { return i; }).map(function (columnIndex) {
+        return Math.max.apply(Math, rows.map(function (row) { return row[columnIndex].length; }));
+    });
+}
+function makeRow(row, colWidths, fillString) {
+    return "| ".concat(row
+        .map(function (cell, i) { return cell.padEnd(colWidths[i], fillString); })
+        .join(" | "), " |");
+}
+function makeTemplate() {
+    return "\n# Security Audit Report\n\nA security audit report document is a comprehensive assessment of an application's security posture, containing security topics that auditors can mark to indicate the state of various security aspects.\n\nIt serves as a structured guide for security team to evaluate different security factors such as authentication, authorization, data encryption, input validation, and more.\n\n## General Information\n\n- Project Owner is @...\n- Dev team:\n  - @...\n  - @...\n  - @...\n\n## Project Security\n\n".concat(makeTable(rows), "\n\n");
+}
+exports.makeTemplate = makeTemplate;
+function evaluateDocument(document) {
+    var _a, _b;
+    var rawRows = (_b = (_a = document.match(/^\s*\|.*?\|\s*$/gm)) === null || _a === void 0 ? void 0 : _a.map(function (row) { return row.trim(); })) !== null && _b !== void 0 ? _b : [];
+    var matchedRows = rawRows
+        .map(function (row) { return row.split("|").map(function (col) { return col.trim(); }); })
+        .slice(2);
+    var knownTopics = new Set(allTopics.map(function (t) { return t.description; }));
+    var topics = matchedRows.map(function (col) {
+        var responsibles = col[1].split(", ");
+        var answer = col[2];
+        var description = col[3];
+        var note = col[4];
+        var isUnknown = !knownTopics.has(description);
+        var isAnswered = !isUnknown &&
+            !answer.includes(checkPlaceholder) &&
+            !responsibles.some(function (responsible) {
+                return responsible.includes(responsiblePlaceholder);
+            });
+        var isSecured = !isUnknown && isAnswered && answer.includes(checkYes);
+        return {
+            responsibles: responsibles,
+            answer: answer,
+            description: description,
+            note: note,
+            isUnknown: isUnknown,
+            isAnswered: isAnswered,
+            isSecured: isSecured
+        };
+    });
+    var totalTopics = allTopics.length;
+    var answeredTopics = topics.filter(function (t) { return t.isAnswered; }).length;
+    var securedTopics = topics.filter(function (t) { return t.isSecured; }).length;
+    var unknownTopics = topics.filter(function (t) { return t.isUnknown; }).length;
+    var rating = Math.round((securedTopics / totalTopics) * 100);
+    return {
+        topics: topics,
+        score: {
+            rating: rating,
+            totalTopics: totalTopics,
+            answeredTopics: answeredTopics,
+            securedTopics: securedTopics,
+            unknownTopics: unknownTopics
+        }
+    };
+}
+exports.evaluateDocument = evaluateDocument;
+//# sourceMappingURL=auditDocument.js.map
+
+/***/ }),
+
+/***/ 16828:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.createSecurityAuditMergeRequest = exports.SECURITY_AUDIT_FILE_NAME = void 0;
+var ts_results_es_1 = __nccwpck_require__(72807);
+var auditDocument_1 = __nccwpck_require__(5756);
+function makeDatedBranchName(branchName) {
+    var date = new Date().toISOString().slice(0, -5).replaceAll(/[:.T]/g, "-");
+    return "".concat(branchName, "-").concat(date);
+}
+var MR_TITLE = "Draft: chore(security): add security audit document";
+exports.SECURITY_AUDIT_FILE_NAME = "SECURITY.md";
+function createSecurityAuditMergeRequest(_a) {
+    var projectId = _a.projectId, mainBranch = _a.mainBranch, userId = _a.userId, api = _a.api;
+    return __awaiter(this, void 0, void 0, function () {
+        var mrs, existingMr, auditTemplate, branch, commit, mr;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () {
+                        return api.MergeRequests.all({
+                            state: "opened",
+                            wip: "yes",
+                            labels: "security-audit"
+                        });
+                    })];
+                case 1:
+                    mrs = (_b.sent()).mapErr(function () { return "could not search for existing merge requests"; });
+                    if (mrs.isErr())
+                        return [2 /*return*/, mrs];
+                    existingMr = mrs.value[0];
+                    if (existingMr)
+                        return [2 /*return*/, (0, ts_results_es_1.Err)("open merge request with security audit already exists: ".concat(existingMr.web_url))];
+                    auditTemplate = ts_results_es_1.Result.wrap(function () { return (0, auditDocument_1.makeTemplate)(); }).mapErr(function () { return "could not make security audit template document"; });
+                    if (auditTemplate.isErr())
+                        return [2 /*return*/, auditTemplate];
+                    return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () {
+                            return api.Branches.create(projectId, makeDatedBranchName("chore/security-audit"), mainBranch);
+                        })];
+                case 2:
+                    branch = (_b.sent()).mapErr(function (e) {
+                        console.log(e);
+                        return "could not create branch";
+                    });
+                    if (branch.isErr())
+                        return [2 /*return*/, branch];
+                    return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () {
+                            return api.Commits.create(projectId, branch.value.name, "chore(security): add empty security audit document template", [
+                                {
+                                    action: "create",
+                                    filePath: exports.SECURITY_AUDIT_FILE_NAME,
+                                    content: auditTemplate.value,
+                                    encoding: "text"
+                                },
+                            ]);
+                        })];
+                case 3:
+                    commit = (_b.sent()).mapErr(function () { return "could not create commit"; });
+                    if (commit.isErr())
+                        return [2 /*return*/, commit];
+                    return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () {
+                            return api.MergeRequests.create(projectId, branch.value.name, mainBranch, MR_TITLE, {
+                                description: "Please follow and update security audit document in `".concat(exports.SECURITY_AUDIT_FILE_NAME, "`."),
+                                assigneeId: userId,
+                                squash: true,
+                                labels: "security-audit",
+                                removeSourceBranch: true
+                            });
+                        })];
+                case 4:
+                    mr = (_b.sent()).mapErr(function () { return "could not create merge request"; });
+                    return [2 /*return*/, mr];
+            }
+        });
+    });
+}
+exports.createSecurityAuditMergeRequest = createSecurityAuditMergeRequest;
+//# sourceMappingURL=createSecurityAuditMergeRequest.js.map
+
+/***/ }),
+
+/***/ 35849:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
+exports.makeSecurityAuditOverview = exports.evaluateSecurityAudit = void 0;
+var ts_results_es_1 = __nccwpck_require__(72807);
+var path_1 = __nccwpck_require__(71017);
+var promises_1 = __nccwpck_require__(73292);
+var createSecurityAuditMergeRequest_1 = __nccwpck_require__(16828);
+var auditDocument_1 = __nccwpck_require__(5756);
+function evaluateSecurityAudit(_a) {
+    var path = _a.path;
+    return __awaiter(this, void 0, void 0, function () {
+        var _this = this;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () { return __awaiter(_this, void 0, void 0, function () {
+                        var filePath, docData, doc;
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    filePath = (0, path_1.join)(path, createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME);
+                                    return [4 /*yield*/, (0, promises_1.readFile)(filePath)];
+                                case 1:
+                                    docData = _a.sent();
+                                    doc = docData.toString("utf-8");
+                                    return [2 /*return*/, (0, auditDocument_1.evaluateDocument)(doc)];
+                            }
+                        });
+                    }); })];
+                case 1: return [2 /*return*/, (_b.sent()).mapErr(function (e) { return "could not evaluate ".concat(createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME, ": ").concat(e); })];
+            }
+        });
+    });
+}
+exports.evaluateSecurityAudit = evaluateSecurityAudit;
+function makeSecurityAuditOverview(evaluation) {
+    var ratingToEmo = function (r) { return (r < 33 ? "🟥" : r < 66 ? "🟨" : "🟩"); };
+    return "Project security posture overview:\n \uD83E\uDDD0 Total topics: ".concat(evaluation.score.totalTopics, "\n \uD83D\uDD12 Secured topics: ").concat(evaluation.score.securedTopics, "\n \uD83D\uDCE2 Answered topics: ").concat(evaluation.score.answeredTopics, "\n \u2754 Unknown topics: ").concat(evaluation.score.unknownTopics, "\n \uD83D\uDCCA Rating: ").concat(ratingToEmo(evaluation.score.rating), " ").concat(evaluation.score.rating, "/100");
+}
+exports.makeSecurityAuditOverview = makeSecurityAuditOverview;
+//# sourceMappingURL=evaluateSecurityAudit.js.map
+
+/***/ }),
+
 /***/ 93340:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -4055,7 +4354,7 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
 
 /***/ }),
 
-/***/ 54108:
+/***/ 19041:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
@@ -4097,30 +4396,42 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 exports.__esModule = true;
-var setup_1 = __nccwpck_require__(20767);
+var evaluateSecurityAudit_1 = __nccwpck_require__(35849);
+var projects_1 = __nccwpck_require__(41619);
 exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
     return __generator(this, function (_a) {
-        return [2 /*return*/, vorpal
-                .command("project-setup", "Initializes all environments and creates requires resources, service accounts, etc.")
-                .action(function () {
-                return __awaiter(this, void 0, void 0, function () {
-                    return __generator(this, function (_a) {
-                        switch (_a.label) {
-                            case 0: return [4 /*yield*/, (0, setup_1.setupProject)(this)];
-                            case 1:
-                                _a.sent();
-                                return [2 /*return*/];
-                        }
-                    });
+        vorpal
+            .command("project-security-evaluate", "evaluate project's security audit document")
+            .action(function () {
+            return __awaiter(this, void 0, void 0, function () {
+                var gitRoot, result;
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, (0, projects_1.getGitRoot)()];
+                        case 1:
+                            gitRoot = _a.sent();
+                            return [4 /*yield*/, (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path: gitRoot })];
+                        case 2:
+                            result = _a.sent();
+                            if (result.isErr()) {
+                                console.error("Could not evaluate security audit document:", result.error);
+                            }
+                            else {
+                                console.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(result.value));
+                            }
+                            return [2 /*return*/];
+                    }
                 });
-            })];
+            });
+        });
+        return [2 /*return*/];
     });
 }); });
-//# sourceMappingURL=commandSetup.js.map
+//# sourceMappingURL=commandSecurityEvaluate.js.map
 
 /***/ }),
 
-/***/ 51827:
+/***/ 54108:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
@@ -4161,117 +4472,182 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 exports.__esModule = true;
-var client_node_1 = __nccwpck_require__(15124);
-var k8sApi_1 = __nccwpck_require__(54756);
-var log_1 = __nccwpck_require__(37851);
-var namespaceAutoCompletion_1 = __nccwpck_require__(79176);
-var projects_1 = __nccwpck_require__(41619);
-var autocompletions_1 = __nccwpck_require__(41373);
-var ensureCluster_1 = __importDefault(__nccwpck_require__(8722));
-function triggerCronjob(namespace) {
-    return __awaiter(this, void 0, void 0, function () {
-        var jobs, jobNames, jobName, cronjob, jobSpec, job, metadata, result, e_1;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, (0, k8sApi_1.getk8sApiBatchBeta)().listNamespacedCronJob(namespace)];
-                case 1:
-                    jobs = (_a.sent()).body.items;
-                    jobNames = jobs.map(function (j) { return j.metadata.name; });
-                    return [4 /*yield*/, this.prompt({
-                            type: "list",
-                            name: "jobName",
-                            choices: jobNames,
-                            message: "Which cronjob? 🤔"
-                        })];
-                case 2:
-                    jobName = (_a.sent()).jobName;
-                    cronjob = jobs.find(function (j) { return j.metadata.name === jobName; });
-                    jobSpec = cronjob.spec.jobTemplate.spec;
-                    job = new client_node_1.V1Job();
-                    metadata = {
-                        name: "manual-".concat(Math.round(Date.now() / 1000), "-").concat(cronjob.metadata.name)
-                    };
-                    job.metadata = metadata;
-                    job.spec = jobSpec;
-                    _a.label = 3;
-                case 3:
-                    _a.trys.push([3, 5, , 6]);
-                    return [4 /*yield*/, (0, k8sApi_1.getk8sApiBatch)().createNamespacedJob(namespace, job)];
-                case 4:
-                    result = _a.sent();
-                    this.log("");
-                    this.log("yeah, you got a job, man. \uD83D\uDE3A ".concat(result.body.metadata.name));
-                    this.log("");
-                    return [3 /*break*/, 6];
-                case 5:
-                    e_1 = _a.sent();
-                    (0, log_1.logError)(this, "command failed", e_1.body);
-                    return [3 /*break*/, 6];
-                case 6: return [2 /*return*/];
-            }
-        });
-    });
-}
+var setup_1 = __nccwpck_require__(20767);
 exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
-    var _a, _b;
-    return __generator(this, function (_c) {
-        switch (_c.label) {
-            case 0:
-                vorpal
-                    .command("trigger-cronjob <namespace>", "trigger cronjob")
-                    .autocomplete(namespaceAutoCompletion_1.namespaceAutoCompletion)
-                    .action(function (_a) {
-                    var namespace = _a.namespace;
-                    return __awaiter(this, void 0, void 0, function () {
-                        return __generator(this, function (_b) {
-                            switch (_b.label) {
-                                case 0: return [4 /*yield*/, triggerCronjob.call(this, namespace)];
-                                case 1:
-                                    _b.sent();
-                                    return [2 /*return*/];
-                            }
-                        });
-                    });
-                });
-                _b = (_a = vorpal
-                    .command("project-trigger-cronjob <envComponent>", "trigger cronjob"))
-                    .autocomplete;
-                return [4 /*yield*/, (0, autocompletions_1.envAndComponents)()];
-            case 1:
-                _b.apply(_a, [_c.sent()])
-                    .action(function (_a) {
-                    var envComponent = _a.envComponent;
-                    return __awaiter(this, void 0, void 0, function () {
-                        var namespace;
-                        return __generator(this, function (_b) {
-                            switch (_b.label) {
-                                case 0: return [4 /*yield*/, ensureCluster_1["default"].call(this, envComponent)];
-                                case 1:
-                                    _b.sent();
-                                    return [4 /*yield*/, (0, projects_1.getProjectNamespace)(envComponent)];
-                                case 2:
-                                    namespace = _b.sent();
-                                    return [4 /*yield*/, triggerCronjob.call(this, namespace)];
-                                case 3:
-                                    _b.sent();
-                                    return [2 /*return*/];
-                            }
-                        });
+    return __generator(this, function (_a) {
+        return [2 /*return*/, vorpal
+                .command("project-setup", "Initializes all environments and creates requires resources, service accounts, etc.")
+                .action(function () {
+                return __awaiter(this, void 0, void 0, function () {
+                    return __generator(this, function (_a) {
+                        switch (_a.label) {
+                            case 0: return [4 /*yield*/, (0, setup_1.setupProject)(this)];
+                            case 1:
+                                _a.sent();
+                                return [2 /*return*/];
+                        }
                     });
                 });
-                return [2 /*return*/];
-        }
+            })];
     });
 }); });
-//# sourceMappingURL=commandTriggerCronjob.js.map
+//# sourceMappingURL=commandSetup.js.map
 
 /***/ }),
 
-/***/ 44143:
+/***/ 51827:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+exports.__esModule = true;
+var client_node_1 = __nccwpck_require__(15124);
+var k8sApi_1 = __nccwpck_require__(54756);
+var log_1 = __nccwpck_require__(37851);
+var namespaceAutoCompletion_1 = __nccwpck_require__(79176);
+var projects_1 = __nccwpck_require__(41619);
+var autocompletions_1 = __nccwpck_require__(41373);
+var ensureCluster_1 = __importDefault(__nccwpck_require__(8722));
+function triggerCronjob(namespace) {
+    return __awaiter(this, void 0, void 0, function () {
+        var jobs, jobNames, jobName, cronjob, jobSpec, job, metadata, result, e_1;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, k8sApi_1.getk8sApiBatchBeta)().listNamespacedCronJob(namespace)];
+                case 1:
+                    jobs = (_a.sent()).body.items;
+                    jobNames = jobs.map(function (j) { return j.metadata.name; });
+                    return [4 /*yield*/, this.prompt({
+                            type: "list",
+                            name: "jobName",
+                            choices: jobNames,
+                            message: "Which cronjob? 🤔"
+                        })];
+                case 2:
+                    jobName = (_a.sent()).jobName;
+                    cronjob = jobs.find(function (j) { return j.metadata.name === jobName; });
+                    jobSpec = cronjob.spec.jobTemplate.spec;
+                    job = new client_node_1.V1Job();
+                    metadata = {
+                        name: "manual-".concat(Math.round(Date.now() / 1000), "-").concat(cronjob.metadata.name)
+                    };
+                    job.metadata = metadata;
+                    job.spec = jobSpec;
+                    _a.label = 3;
+                case 3:
+                    _a.trys.push([3, 5, , 6]);
+                    return [4 /*yield*/, (0, k8sApi_1.getk8sApiBatch)().createNamespacedJob(namespace, job)];
+                case 4:
+                    result = _a.sent();
+                    this.log("");
+                    this.log("yeah, you got a job, man. \uD83D\uDE3A ".concat(result.body.metadata.name));
+                    this.log("");
+                    return [3 /*break*/, 6];
+                case 5:
+                    e_1 = _a.sent();
+                    (0, log_1.logError)(this, "command failed", e_1.body);
+                    return [3 /*break*/, 6];
+                case 6: return [2 /*return*/];
+            }
+        });
+    });
+}
+exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                vorpal
+                    .command("trigger-cronjob <namespace>", "trigger cronjob")
+                    .autocomplete(namespaceAutoCompletion_1.namespaceAutoCompletion)
+                    .action(function (_a) {
+                    var namespace = _a.namespace;
+                    return __awaiter(this, void 0, void 0, function () {
+                        return __generator(this, function (_b) {
+                            switch (_b.label) {
+                                case 0: return [4 /*yield*/, triggerCronjob.call(this, namespace)];
+                                case 1:
+                                    _b.sent();
+                                    return [2 /*return*/];
+                            }
+                        });
+                    });
+                });
+                _b = (_a = vorpal
+                    .command("project-trigger-cronjob <envComponent>", "trigger cronjob"))
+                    .autocomplete;
+                return [4 /*yield*/, (0, autocompletions_1.envAndComponents)()];
+            case 1:
+                _b.apply(_a, [_c.sent()])
+                    .action(function (_a) {
+                    var envComponent = _a.envComponent;
+                    return __awaiter(this, void 0, void 0, function () {
+                        var namespace;
+                        return __generator(this, function (_b) {
+                            switch (_b.label) {
+                                case 0: return [4 /*yield*/, ensureCluster_1["default"].call(this, envComponent)];
+                                case 1:
+                                    _b.sent();
+                                    return [4 /*yield*/, (0, projects_1.getProjectNamespace)(envComponent)];
+                                case 2:
+                                    namespace = _b.sent();
+                                    return [4 /*yield*/, triggerCronjob.call(this, namespace)];
+                                case 3:
+                                    _b.sent();
+                                    return [2 /*return*/];
+                            }
+                        });
+                    });
+                });
+                return [2 /*return*/];
+        }
+    });
+}); });
+//# sourceMappingURL=commandTriggerCronjob.js.map
+
+/***/ }),
+
+/***/ 44143:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
 "use strict";
@@ -4341,6 +4717,7 @@ var commandTriggerCronjob_1 = __importDefault(__nccwpck_require__(51827));
 var commandOpenGrafanaPod_1 = __importDefault(__nccwpck_require__(55848));
 var commandSecretsClearBackups_1 = __importDefault(__nccwpck_require__(41863));
 var commandProjectRestoreDb_1 = __importDefault(__nccwpck_require__(38831));
+var commandSecurityEvaluate_1 = __importDefault(__nccwpck_require__(19041));
 exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void 0, function () {
     return __generator(this, function (_a) {
         (0, commandSetup_1["default"])(vorpal);
@@ -4367,6 +4744,7 @@ exports["default"] = (function (vorpal) { return __awaiter(void 0, void 0, void
         (0, commandGitlabCi_1["default"])(vorpal);
         (0, commandGetMyTotalWorktime_1["default"])(vorpal);
         (0, commandMigrateHelm3_1["default"])(vorpal);
+        (0, commandSecurityEvaluate_1["default"])(vorpal);
         return [2 /*return*/];
     });
 }); });
@@ -6575,15 +6953,12 @@ var resolveSecrets = function (vorpal, varSets) { return __awaiter(void 0, void
                             .map(function (_a) {
                             var key = _a[0], value = _a[1];
                             var secretKey = set.secretEnvVarKeys.find(function (k) { return k.key === key; });
-                            if (secretKey) {
-                                if (secretKey.hidden) {
-                                    return null;
-                                }
-                                for (var _i = 0, allVariablesInGitlab_1 = allVariablesInGitlab; _i < allVariablesInGitlab_1.length; _i++) {
-                                    var variable = allVariablesInGitlab_1[_i];
-                                    value = value.replace(new RegExp("\\$" + variable.key, "g"), variable.value);
-                                }
-                                return [key, value];
+                            if ((secretKey === null || secretKey === void 0 ? void 0 : secretKey.hidden) || value === undefined) {
+                                return null;
+                            }
+                            for (var _i = 0, allVariablesInGitlab_1 = allVariablesInGitlab; _i < allVariablesInGitlab_1.length; _i++) {
+                                var variable = allVariablesInGitlab_1[_i];
+                                value = value.replace(new RegExp("\\$" + variable.key, "g"), variable.value);
                             }
                             return [key, value];
                         })
@@ -7335,7 +7710,9 @@ var upsertGcloudServiceAccount = function (context, account) { return __awaiter(
             case 11:
                 _a++;
                 return [3 /*break*/, 9];
-            case 12: return [4 /*yield*/, (0, child_process_promise_1.exec)("gcloud iam service-accounts keys create /dev/stdout --iam-account=".concat(fullIdentifier)).then(function (o) { return o.stdout; })];
+            case 12: return [4 /*yield*/, (0, child_process_promise_1.exec)(
+                // on some platforms /dev/stdout is not available without the pipe
+                "gcloud iam service-accounts keys create /dev/stdout --iam-account=".concat(fullIdentifier, " | cat")).then(function (o) { return o.stdout; })];
             case 13: return [2 /*return*/, _b.sent()];
         }
     });
@@ -7985,15 +8362,23 @@ var child_process_promise_1 = __nccwpck_require__(75763);
 var command_exists_promise_1 = __importDefault(__nccwpck_require__(80133));
 var cmd;
 exports["default"] = (function () { return __awaiter(void 0, void 0, void 0, function () {
-    return __generator(this, function (_a) {
-        switch (_a.label) {
+    var _a;
+    var _b, _c;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
             case 0:
-                if (!!cmd) return [3 /*break*/, 2];
-                return [4 /*yield*/, (0, command_exists_promise_1["default"])("code")];
-            case 1:
-                cmd = (_a.sent()) ? "code --wait" : "vim";
-                _a.label = 2;
-            case 2: return [2 /*return*/, {
+                if (!!cmd) return [3 /*break*/, 4];
+                if (!((_c = (_b = process.env.VISUAL) !== null && _b !== void 0 ? _b : process.env.EDITOR) !== null && _c !== void 0)) return [3 /*break*/, 1];
+                _a = _c;
+                return [3 /*break*/, 3];
+            case 1: return [4 /*yield*/, (0, command_exists_promise_1["default"])("code")];
+            case 2:
+                _a = ((_d.sent()) ? "code --wait" : "vim");
+                _d.label = 3;
+            case 3:
+                cmd = _a;
+                _d.label = 4;
+            case 4: return [2 /*return*/, {
                     open: function (path) { return __awaiter(void 0, void 0, void 0, function () {
                         return __generator(this, function (_a) {
                             switch (_a.label) {
@@ -301982,672 +302367,6 @@ var pump = function () {
 module.exports = pump
 
 
-/***/ }),
-
-/***/ 68815:
-/***/ ((module) => {
-
-"use strict";
-
-
-var replace = String.prototype.replace;
-var percentTwenties = /%20/g;
-
-module.exports = {
-    'default': 'RFC3986',
-    formatters: {
-        RFC1738: function (value) {
-            return replace.call(value, percentTwenties, '+');
-        },
-        RFC3986: function (value) {
-            return value;
-        }
-    },
-    RFC1738: 'RFC1738',
-    RFC3986: 'RFC3986'
-};
-
-
-/***/ }),
-
-/***/ 69241:
-/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
-
-"use strict";
-
-
-var stringify = __nccwpck_require__(51883);
-var parse = __nccwpck_require__(87513);
-var formats = __nccwpck_require__(68815);
-
-module.exports = {
-    formats: formats,
-    parse: parse,
-    stringify: stringify
-};
-
-
-/***/ }),
-
-/***/ 87513:
-/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
-
-"use strict";
-
-
-var utils = __nccwpck_require__(99240);
-
-var has = Object.prototype.hasOwnProperty;
-
-var defaults = {
-    allowDots: false,
-    allowPrototypes: false,
-    arrayLimit: 20,
-    decoder: utils.decode,
-    delimiter: '&',
-    depth: 5,
-    parameterLimit: 1000,
-    plainObjects: false,
-    strictNullHandling: false
-};
-
-var parseValues = function parseQueryStringValues(str, options) {
-    var obj = {};
-    var cleanStr = options.ignoreQueryPrefix ? str.replace(/^\?/, '') : str;
-    var limit = options.parameterLimit === Infinity ? undefined : options.parameterLimit;
-    var parts = cleanStr.split(options.delimiter, limit);
-
-    for (var i = 0; i < parts.length; ++i) {
-        var part = parts[i];
-
-        var bracketEqualsPos = part.indexOf(']=');
-        var pos = bracketEqualsPos === -1 ? part.indexOf('=') : bracketEqualsPos + 1;
-
-        var key, val;
-        if (pos === -1) {
-            key = options.decoder(part, defaults.decoder);
-            val = options.strictNullHandling ? null : '';
-        } else {
-            key = options.decoder(part.slice(0, pos), defaults.decoder);
-            val = options.decoder(part.slice(pos + 1), defaults.decoder);
-        }
-        if (has.call(obj, key)) {
-            obj[key] = [].concat(obj[key]).concat(val);
-        } else {
-            obj[key] = val;
-        }
-    }
-
-    return obj;
-};
-
-var parseObject = function (chain, val, options) {
-    var leaf = val;
-
-    for (var i = chain.length - 1; i >= 0; --i) {
-        var obj;
-        var root = chain[i];
-
-        if (root === '[]') {
-            obj = [];
-            obj = obj.concat(leaf);
-        } else {
-            obj = options.plainObjects ? Object.create(null) : {};
-            var cleanRoot = root.charAt(0) === '[' && root.charAt(root.length - 1) === ']' ? root.slice(1, -1) : root;
-            var index = parseInt(cleanRoot, 10);
-            if (
-                !isNaN(index)
-                && root !== cleanRoot
-                && String(index) === cleanRoot
-                && index >= 0
-                && (options.parseArrays && index <= options.arrayLimit)
-            ) {
-                obj = [];
-                obj[index] = leaf;
-            } else {
-                obj[cleanRoot] = leaf;
-            }
-        }
-
-        leaf = obj;
-    }
-
-    return leaf;
-};
-
-var parseKeys = function parseQueryStringKeys(givenKey, val, options) {
-    if (!givenKey) {
-        return;
-    }
-
-    // Transform dot notation to bracket notation
-    var key = options.allowDots ? givenKey.replace(/\.([^.[]+)/g, '[$1]') : givenKey;
-
-    // The regex chunks
-
-    var brackets = /(\[[^[\]]*])/;
-    var child = /(\[[^[\]]*])/g;
-
-    // Get the parent
-
-    var segment = brackets.exec(key);
-    var parent = segment ? key.slice(0, segment.index) : key;
-
-    // Stash the parent if it exists
-
-    var keys = [];
-    if (parent) {
-        // If we aren't using plain objects, optionally prefix keys
-        // that would overwrite object prototype properties
-        if (!options.plainObjects && has.call(Object.prototype, parent)) {
-            if (!options.allowPrototypes) {
-                return;
-            }
-        }
-
-        keys.push(parent);
-    }
-
-    // Loop through children appending to the array until we hit depth
-
-    var i = 0;
-    while ((segment = child.exec(key)) !== null && i < options.depth) {
-        i += 1;
-        if (!options.plainObjects && has.call(Object.prototype, segment[1].slice(1, -1))) {
-            if (!options.allowPrototypes) {
-                return;
-            }
-        }
-        keys.push(segment[1]);
-    }
-
-    // If there's a remainder, just add whatever is left
-
-    if (segment) {
-        keys.push('[' + key.slice(segment.index) + ']');
-    }
-
-    return parseObject(keys, val, options);
-};
-
-module.exports = function (str, opts) {
-    var options = opts ? utils.assign({}, opts) : {};
-
-    if (options.decoder !== null && options.decoder !== undefined && typeof options.decoder !== 'function') {
-        throw new TypeError('Decoder has to be a function.');
-    }
-
-    options.ignoreQueryPrefix = options.ignoreQueryPrefix === true;
-    options.delimiter = typeof options.delimiter === 'string' || utils.isRegExp(options.delimiter) ? options.delimiter : defaults.delimiter;
-    options.depth = typeof options.depth === 'number' ? options.depth : defaults.depth;
-    options.arrayLimit = typeof options.arrayLimit === 'number' ? options.arrayLimit : defaults.arrayLimit;
-    options.parseArrays = options.parseArrays !== false;
-    options.decoder = typeof options.decoder === 'function' ? options.decoder : defaults.decoder;
-    options.allowDots = typeof options.allowDots === 'boolean' ? options.allowDots : defaults.allowDots;
-    options.plainObjects = typeof options.plainObjects === 'boolean' ? options.plainObjects : defaults.plainObjects;
-    options.allowPrototypes = typeof options.allowPrototypes === 'boolean' ? options.allowPrototypes : defaults.allowPrototypes;
-    options.parameterLimit = typeof options.parameterLimit === 'number' ? options.parameterLimit : defaults.parameterLimit;
-    options.strictNullHandling = typeof options.strictNullHandling === 'boolean' ? options.strictNullHandling : defaults.strictNullHandling;
-
-    if (str === '' || str === null || typeof str === 'undefined') {
-        return options.plainObjects ? Object.create(null) : {};
-    }
-
-    var tempObj = typeof str === 'string' ? parseValues(str, options) : str;
-    var obj = options.plainObjects ? Object.create(null) : {};
-
-    // Iterate over the keys and setup the new object
-
-    var keys = Object.keys(tempObj);
-    for (var i = 0; i < keys.length; ++i) {
-        var key = keys[i];
-        var newObj = parseKeys(key, tempObj[key], options);
-        obj = utils.merge(obj, newObj, options);
-    }
-
-    return utils.compact(obj);
-};
-
-
-/***/ }),
-
-/***/ 51883:
-/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
-
-"use strict";
-
-
-var utils = __nccwpck_require__(99240);
-var formats = __nccwpck_require__(68815);
-
-var arrayPrefixGenerators = {
-    brackets: function brackets(prefix) { // eslint-disable-line func-name-matching
-        return prefix + '[]';
-    },
-    indices: function indices(prefix, key) { // eslint-disable-line func-name-matching
-        return prefix + '[' + key + ']';
-    },
-    repeat: function repeat(prefix) { // eslint-disable-line func-name-matching
-        return prefix;
-    }
-};
-
-var toISO = Date.prototype.toISOString;
-
-var defaults = {
-    delimiter: '&',
-    encode: true,
-    encoder: utils.encode,
-    encodeValuesOnly: false,
-    serializeDate: function serializeDate(date) { // eslint-disable-line func-name-matching
-        return toISO.call(date);
-    },
-    skipNulls: false,
-    strictNullHandling: false
-};
-
-var stringify = function stringify( // eslint-disable-line func-name-matching
-    object,
-    prefix,
-    generateArrayPrefix,
-    strictNullHandling,
-    skipNulls,
-    encoder,
-    filter,
-    sort,
-    allowDots,
-    serializeDate,
-    formatter,
-    encodeValuesOnly
-) {
-    var obj = object;
-    if (typeof filter === 'function') {
-        obj = filter(prefix, obj);
-    } else if (obj instanceof Date) {
-        obj = serializeDate(obj);
-    } else if (obj === null) {
-        if (strictNullHandling) {
-            return encoder && !encodeValuesOnly ? encoder(prefix, defaults.encoder) : prefix;
-        }
-
-        obj = '';
-    }
-
-    if (typeof obj === 'string' || typeof obj === 'number' || typeof obj === 'boolean' || utils.isBuffer(obj)) {
-        if (encoder) {
-            var keyValue = encodeValuesOnly ? prefix : encoder(prefix, defaults.encoder);
-            return [formatter(keyValue) + '=' + formatter(encoder(obj, defaults.encoder))];
-        }
-        return [formatter(prefix) + '=' + formatter(String(obj))];
-    }
-
-    var values = [];
-
-    if (typeof obj === 'undefined') {
-        return values;
-    }
-
-    var objKeys;
-    if (Array.isArray(filter)) {
-        objKeys = filter;
-    } else {
-        var keys = Object.keys(obj);
-        objKeys = sort ? keys.sort(sort) : keys;
-    }
-
-    for (var i = 0; i < objKeys.length; ++i) {
-        var key = objKeys[i];
-
-        if (skipNulls && obj[key] === null) {
-            continue;
-        }
-
-        if (Array.isArray(obj)) {
-            values = values.concat(stringify(
-                obj[key],
-                generateArrayPrefix(prefix, key),
-                generateArrayPrefix,
-                strictNullHandling,
-                skipNulls,
-                encoder,
-                filter,
-                sort,
-                allowDots,
-                serializeDate,
-                formatter,
-                encodeValuesOnly
-            ));
-        } else {
-            values = values.concat(stringify(
-                obj[key],
-                prefix + (allowDots ? '.' + key : '[' + key + ']'),
-                generateArrayPrefix,
-                strictNullHandling,
-                skipNulls,
-                encoder,
-                filter,
-                sort,
-                allowDots,
-                serializeDate,
-                formatter,
-                encodeValuesOnly
-            ));
-        }
-    }
-
-    return values;
-};
-
-module.exports = function (object, opts) {
-    var obj = object;
-    var options = opts ? utils.assign({}, opts) : {};
-
-    if (options.encoder !== null && options.encoder !== undefined && typeof options.encoder !== 'function') {
-        throw new TypeError('Encoder has to be a function.');
-    }
-
-    var delimiter = typeof options.delimiter === 'undefined' ? defaults.delimiter : options.delimiter;
-    var strictNullHandling = typeof options.strictNullHandling === 'boolean' ? options.strictNullHandling : defaults.strictNullHandling;
-    var skipNulls = typeof options.skipNulls === 'boolean' ? options.skipNulls : defaults.skipNulls;
-    var encode = typeof options.encode === 'boolean' ? options.encode : defaults.encode;
-    var encoder = typeof options.encoder === 'function' ? options.encoder : defaults.encoder;
-    var sort = typeof options.sort === 'function' ? options.sort : null;
-    var allowDots = typeof options.allowDots === 'undefined' ? false : options.allowDots;
-    var serializeDate = typeof options.serializeDate === 'function' ? options.serializeDate : defaults.serializeDate;
-    var encodeValuesOnly = typeof options.encodeValuesOnly === 'boolean' ? options.encodeValuesOnly : defaults.encodeValuesOnly;
-    if (typeof options.format === 'undefined') {
-        options.format = formats['default'];
-    } else if (!Object.prototype.hasOwnProperty.call(formats.formatters, options.format)) {
-        throw new TypeError('Unknown format option provided.');
-    }
-    var formatter = formats.formatters[options.format];
-    var objKeys;
-    var filter;
-
-    if (typeof options.filter === 'function') {
-        filter = options.filter;
-        obj = filter('', obj);
-    } else if (Array.isArray(options.filter)) {
-        filter = options.filter;
-        objKeys = filter;
-    }
-
-    var keys = [];
-
-    if (typeof obj !== 'object' || obj === null) {
-        return '';
-    }
-
-    var arrayFormat;
-    if (options.arrayFormat in arrayPrefixGenerators) {
-        arrayFormat = options.arrayFormat;
-    } else if ('indices' in options) {
-        arrayFormat = options.indices ? 'indices' : 'repeat';
-    } else {
-        arrayFormat = 'indices';
-    }
-
-    var generateArrayPrefix = arrayPrefixGenerators[arrayFormat];
-
-    if (!objKeys) {
-        objKeys = Object.keys(obj);
-    }
-
-    if (sort) {
-        objKeys.sort(sort);
-    }
-
-    for (var i = 0; i < objKeys.length; ++i) {
-        var key = objKeys[i];
-
-        if (skipNulls && obj[key] === null) {
-            continue;
-        }
-
-        keys = keys.concat(stringify(
-            obj[key],
-            key,
-            generateArrayPrefix,
-            strictNullHandling,
-            skipNulls,
-            encode ? encoder : null,
-            filter,
-            sort,
-            allowDots,
-            serializeDate,
-            formatter,
-            encodeValuesOnly
-        ));
-    }
-
-    var joined = keys.join(delimiter);
-    var prefix = options.addQueryPrefix === true ? '?' : '';
-
-    return joined.length > 0 ? prefix + joined : '';
-};
-
-
-/***/ }),
-
-/***/ 99240:
-/***/ ((module) => {
-
-"use strict";
-
-
-var has = Object.prototype.hasOwnProperty;
-
-var hexTable = (function () {
-    var array = [];
-    for (var i = 0; i < 256; ++i) {
-        array.push('%' + ((i < 16 ? '0' : '') + i.toString(16)).toUpperCase());
-    }
-
-    return array;
-}());
-
-var compactQueue = function compactQueue(queue) {
-    var obj;
-
-    while (queue.length) {
-        var item = queue.pop();
-        obj = item.obj[item.prop];
-
-        if (Array.isArray(obj)) {
-            var compacted = [];
-
-            for (var j = 0; j < obj.length; ++j) {
-                if (typeof obj[j] !== 'undefined') {
-                    compacted.push(obj[j]);
-                }
-            }
-
-            item.obj[item.prop] = compacted;
-        }
-    }
-
-    return obj;
-};
-
-var arrayToObject = function arrayToObject(source, options) {
-    var obj = options && options.plainObjects ? Object.create(null) : {};
-    for (var i = 0; i < source.length; ++i) {
-        if (typeof source[i] !== 'undefined') {
-            obj[i] = source[i];
-        }
-    }
-
-    return obj;
-};
-
-var merge = function merge(target, source, options) {
-    if (!source) {
-        return target;
-    }
-
-    if (typeof source !== 'object') {
-        if (Array.isArray(target)) {
-            target.push(source);
-        } else if (typeof target === 'object') {
-            if (options.plainObjects || options.allowPrototypes || !has.call(Object.prototype, source)) {
-                target[source] = true;
-            }
-        } else {
-            return [target, source];
-        }
-
-        return target;
-    }
-
-    if (typeof target !== 'object') {
-        return [target].concat(source);
-    }
-
-    var mergeTarget = target;
-    if (Array.isArray(target) && !Array.isArray(source)) {
-        mergeTarget = arrayToObject(target, options);
-    }
-
-    if (Array.isArray(target) && Array.isArray(source)) {
-        source.forEach(function (item, i) {
-            if (has.call(target, i)) {
-                if (target[i] && typeof target[i] === 'object') {
-                    target[i] = merge(target[i], item, options);
-                } else {
-                    target.push(item);
-                }
-            } else {
-                target[i] = item;
-            }
-        });
-        return target;
-    }
-
-    return Object.keys(source).reduce(function (acc, key) {
-        var value = source[key];
-
-        if (has.call(acc, key)) {
-            acc[key] = merge(acc[key], value, options);
-        } else {
-            acc[key] = value;
-        }
-        return acc;
-    }, mergeTarget);
-};
-
-var assign = function assignSingleSource(target, source) {
-    return Object.keys(source).reduce(function (acc, key) {
-        acc[key] = source[key];
-        return acc;
-    }, target);
-};
-
-var decode = function (str) {
-    try {
-        return decodeURIComponent(str.replace(/\+/g, ' '));
-    } catch (e) {
-        return str;
-    }
-};
-
-var encode = function encode(str) {
-    // This code was originally written by Brian White (mscdex) for the io.js core querystring library.
-    // It has been adapted here for stricter adherence to RFC 3986
-    if (str.length === 0) {
-        return str;
-    }
-
-    var string = typeof str === 'string' ? str : String(str);
-
-    var out = '';
-    for (var i = 0; i < string.length; ++i) {
-        var c = string.charCodeAt(i);
-
-        if (
-            c === 0x2D // -
-            || c === 0x2E // .
-            || c === 0x5F // _
-            || c === 0x7E // ~
-            || (c >= 0x30 && c <= 0x39) // 0-9
-            || (c >= 0x41 && c <= 0x5A) // a-z
-            || (c >= 0x61 && c <= 0x7A) // A-Z
-        ) {
-            out += string.charAt(i);
-            continue;
-        }
-
-        if (c < 0x80) {
-            out = out + hexTable[c];
-            continue;
-        }
-
-        if (c < 0x800) {
-            out = out + (hexTable[0xC0 | (c >> 6)] + hexTable[0x80 | (c & 0x3F)]);
-            continue;
-        }
-
-        if (c < 0xD800 || c >= 0xE000) {
-            out = out + (hexTable[0xE0 | (c >> 12)] + hexTable[0x80 | ((c >> 6) & 0x3F)] + hexTable[0x80 | (c & 0x3F)]);
-            continue;
-        }
-
-        i += 1;
-        c = 0x10000 + (((c & 0x3FF) << 10) | (string.charCodeAt(i) & 0x3FF));
-        out += hexTable[0xF0 | (c >> 18)]
-            + hexTable[0x80 | ((c >> 12) & 0x3F)]
-            + hexTable[0x80 | ((c >> 6) & 0x3F)]
-            + hexTable[0x80 | (c & 0x3F)];
-    }
-
-    return out;
-};
-
-var compact = function compact(value) {
-    var queue = [{ obj: { o: value }, prop: 'o' }];
-    var refs = [];
-
-    for (var i = 0; i < queue.length; ++i) {
-        var item = queue[i];
-        var obj = item.obj[item.prop];
-
-        var keys = Object.keys(obj);
-        for (var j = 0; j < keys.length; ++j) {
-            var key = keys[j];
-            var val = obj[key];
-            if (typeof val === 'object' && val !== null && refs.indexOf(val) === -1) {
-                queue.push({ obj: obj, prop: key });
-                refs.push(val);
-            }
-        }
-    }
-
-    return compactQueue(queue);
-};
-
-var isRegExp = function isRegExp(obj) {
-    return Object.prototype.toString.call(obj) === '[object RegExp]';
-};
-
-var isBuffer = function isBuffer(obj) {
-    if (obj === null || typeof obj === 'undefined') {
-        return false;
-    }
-
-    return !!(obj.constructor && obj.constructor.isBuffer && obj.constructor.isBuffer(obj));
-};
-
-module.exports = {
-    arrayToObject: arrayToObject,
-    assign: assign,
-    compact: compact,
-    decode: decode,
-    encode: encode,
-    isBuffer: isBuffer,
-    isRegExp: isRegExp,
-    merge: merge
-};
-
-
 /***/ }),
 
 /***/ 5074:
@@ -303951,7 +303670,7 @@ exports.$ = Multipart
 
 
 var url = __nccwpck_require__(57310)
-var qs = __nccwpck_require__(69241)
+var qs = __nccwpck_require__(41746)
 var caseless = __nccwpck_require__(30071)
 var uuid = __nccwpck_require__(79180)
 var oauth = __nccwpck_require__(91579)
@@ -304106,7 +303825,7 @@ exports.f = OAuth
 "use strict";
 
 
-var qs = __nccwpck_require__(69241)
+var qs = __nccwpck_require__(41746)
 var querystring = __nccwpck_require__(63477)
 
 function Querystring (request) {
@@ -304982,6 +304701,672 @@ module.exports = function(dst, src) {
 };
 
 
+/***/ }),
+
+/***/ 98876:
+/***/ ((module) => {
+
+"use strict";
+
+
+var replace = String.prototype.replace;
+var percentTwenties = /%20/g;
+
+module.exports = {
+    'default': 'RFC3986',
+    formatters: {
+        RFC1738: function (value) {
+            return replace.call(value, percentTwenties, '+');
+        },
+        RFC3986: function (value) {
+            return value;
+        }
+    },
+    RFC1738: 'RFC1738',
+    RFC3986: 'RFC3986'
+};
+
+
+/***/ }),
+
+/***/ 41746:
+/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+var stringify = __nccwpck_require__(44901);
+var parse = __nccwpck_require__(78832);
+var formats = __nccwpck_require__(98876);
+
+module.exports = {
+    formats: formats,
+    parse: parse,
+    stringify: stringify
+};
+
+
+/***/ }),
+
+/***/ 78832:
+/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+var utils = __nccwpck_require__(8980);
+
+var has = Object.prototype.hasOwnProperty;
+
+var defaults = {
+    allowDots: false,
+    allowPrototypes: false,
+    arrayLimit: 20,
+    decoder: utils.decode,
+    delimiter: '&',
+    depth: 5,
+    parameterLimit: 1000,
+    plainObjects: false,
+    strictNullHandling: false
+};
+
+var parseValues = function parseQueryStringValues(str, options) {
+    var obj = {};
+    var cleanStr = options.ignoreQueryPrefix ? str.replace(/^\?/, '') : str;
+    var limit = options.parameterLimit === Infinity ? undefined : options.parameterLimit;
+    var parts = cleanStr.split(options.delimiter, limit);
+
+    for (var i = 0; i < parts.length; ++i) {
+        var part = parts[i];
+
+        var bracketEqualsPos = part.indexOf(']=');
+        var pos = bracketEqualsPos === -1 ? part.indexOf('=') : bracketEqualsPos + 1;
+
+        var key, val;
+        if (pos === -1) {
+            key = options.decoder(part, defaults.decoder);
+            val = options.strictNullHandling ? null : '';
+        } else {
+            key = options.decoder(part.slice(0, pos), defaults.decoder);
+            val = options.decoder(part.slice(pos + 1), defaults.decoder);
+        }
+        if (has.call(obj, key)) {
+            obj[key] = [].concat(obj[key]).concat(val);
+        } else {
+            obj[key] = val;
+        }
+    }
+
+    return obj;
+};
+
+var parseObject = function (chain, val, options) {
+    var leaf = val;
+
+    for (var i = chain.length - 1; i >= 0; --i) {
+        var obj;
+        var root = chain[i];
+
+        if (root === '[]') {
+            obj = [];
+            obj = obj.concat(leaf);
+        } else {
+            obj = options.plainObjects ? Object.create(null) : {};
+            var cleanRoot = root.charAt(0) === '[' && root.charAt(root.length - 1) === ']' ? root.slice(1, -1) : root;
+            var index = parseInt(cleanRoot, 10);
+            if (
+                !isNaN(index)
+                && root !== cleanRoot
+                && String(index) === cleanRoot
+                && index >= 0
+                && (options.parseArrays && index <= options.arrayLimit)
+            ) {
+                obj = [];
+                obj[index] = leaf;
+            } else {
+                obj[cleanRoot] = leaf;
+            }
+        }
+
+        leaf = obj;
+    }
+
+    return leaf;
+};
+
+var parseKeys = function parseQueryStringKeys(givenKey, val, options) {
+    if (!givenKey) {
+        return;
+    }
+
+    // Transform dot notation to bracket notation
+    var key = options.allowDots ? givenKey.replace(/\.([^.[]+)/g, '[$1]') : givenKey;
+
+    // The regex chunks
+
+    var brackets = /(\[[^[\]]*])/;
+    var child = /(\[[^[\]]*])/g;
+
+    // Get the parent
+
+    var segment = brackets.exec(key);
+    var parent = segment ? key.slice(0, segment.index) : key;
+
+    // Stash the parent if it exists
+
+    var keys = [];
+    if (parent) {
+        // If we aren't using plain objects, optionally prefix keys
+        // that would overwrite object prototype properties
+        if (!options.plainObjects && has.call(Object.prototype, parent)) {
+            if (!options.allowPrototypes) {
+                return;
+            }
+        }
+
+        keys.push(parent);
+    }
+
+    // Loop through children appending to the array until we hit depth
+
+    var i = 0;
+    while ((segment = child.exec(key)) !== null && i < options.depth) {
+        i += 1;
+        if (!options.plainObjects && has.call(Object.prototype, segment[1].slice(1, -1))) {
+            if (!options.allowPrototypes) {
+                return;
+            }
+        }
+        keys.push(segment[1]);
+    }
+
+    // If there's a remainder, just add whatever is left
+
+    if (segment) {
+        keys.push('[' + key.slice(segment.index) + ']');
+    }
+
+    return parseObject(keys, val, options);
+};
+
+module.exports = function (str, opts) {
+    var options = opts ? utils.assign({}, opts) : {};
+
+    if (options.decoder !== null && options.decoder !== undefined && typeof options.decoder !== 'function') {
+        throw new TypeError('Decoder has to be a function.');
+    }
+
+    options.ignoreQueryPrefix = options.ignoreQueryPrefix === true;
+    options.delimiter = typeof options.delimiter === 'string' || utils.isRegExp(options.delimiter) ? options.delimiter : defaults.delimiter;
+    options.depth = typeof options.depth === 'number' ? options.depth : defaults.depth;
+    options.arrayLimit = typeof options.arrayLimit === 'number' ? options.arrayLimit : defaults.arrayLimit;
+    options.parseArrays = options.parseArrays !== false;
+    options.decoder = typeof options.decoder === 'function' ? options.decoder : defaults.decoder;
+    options.allowDots = typeof options.allowDots === 'boolean' ? options.allowDots : defaults.allowDots;
+    options.plainObjects = typeof options.plainObjects === 'boolean' ? options.plainObjects : defaults.plainObjects;
+    options.allowPrototypes = typeof options.allowPrototypes === 'boolean' ? options.allowPrototypes : defaults.allowPrototypes;
+    options.parameterLimit = typeof options.parameterLimit === 'number' ? options.parameterLimit : defaults.parameterLimit;
+    options.strictNullHandling = typeof options.strictNullHandling === 'boolean' ? options.strictNullHandling : defaults.strictNullHandling;
+
+    if (str === '' || str === null || typeof str === 'undefined') {
+        return options.plainObjects ? Object.create(null) : {};
+    }
+
+    var tempObj = typeof str === 'string' ? parseValues(str, options) : str;
+    var obj = options.plainObjects ? Object.create(null) : {};
+
+    // Iterate over the keys and setup the new object
+
+    var keys = Object.keys(tempObj);
+    for (var i = 0; i < keys.length; ++i) {
+        var key = keys[i];
+        var newObj = parseKeys(key, tempObj[key], options);
+        obj = utils.merge(obj, newObj, options);
+    }
+
+    return utils.compact(obj);
+};
+
+
+/***/ }),
+
+/***/ 44901:
+/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+var utils = __nccwpck_require__(8980);
+var formats = __nccwpck_require__(98876);
+
+var arrayPrefixGenerators = {
+    brackets: function brackets(prefix) { // eslint-disable-line func-name-matching
+        return prefix + '[]';
+    },
+    indices: function indices(prefix, key) { // eslint-disable-line func-name-matching
+        return prefix + '[' + key + ']';
+    },
+    repeat: function repeat(prefix) { // eslint-disable-line func-name-matching
+        return prefix;
+    }
+};
+
+var toISO = Date.prototype.toISOString;
+
+var defaults = {
+    delimiter: '&',
+    encode: true,
+    encoder: utils.encode,
+    encodeValuesOnly: false,
+    serializeDate: function serializeDate(date) { // eslint-disable-line func-name-matching
+        return toISO.call(date);
+    },
+    skipNulls: false,
+    strictNullHandling: false
+};
+
+var stringify = function stringify( // eslint-disable-line func-name-matching
+    object,
+    prefix,
+    generateArrayPrefix,
+    strictNullHandling,
+    skipNulls,
+    encoder,
+    filter,
+    sort,
+    allowDots,
+    serializeDate,
+    formatter,
+    encodeValuesOnly
+) {
+    var obj = object;
+    if (typeof filter === 'function') {
+        obj = filter(prefix, obj);
+    } else if (obj instanceof Date) {
+        obj = serializeDate(obj);
+    } else if (obj === null) {
+        if (strictNullHandling) {
+            return encoder && !encodeValuesOnly ? encoder(prefix, defaults.encoder) : prefix;
+        }
+
+        obj = '';
+    }
+
+    if (typeof obj === 'string' || typeof obj === 'number' || typeof obj === 'boolean' || utils.isBuffer(obj)) {
+        if (encoder) {
+            var keyValue = encodeValuesOnly ? prefix : encoder(prefix, defaults.encoder);
+            return [formatter(keyValue) + '=' + formatter(encoder(obj, defaults.encoder))];
+        }
+        return [formatter(prefix) + '=' + formatter(String(obj))];
+    }
+
+    var values = [];
+
+    if (typeof obj === 'undefined') {
+        return values;
+    }
+
+    var objKeys;
+    if (Array.isArray(filter)) {
+        objKeys = filter;
+    } else {
+        var keys = Object.keys(obj);
+        objKeys = sort ? keys.sort(sort) : keys;
+    }
+
+    for (var i = 0; i < objKeys.length; ++i) {
+        var key = objKeys[i];
+
+        if (skipNulls && obj[key] === null) {
+            continue;
+        }
+
+        if (Array.isArray(obj)) {
+            values = values.concat(stringify(
+                obj[key],
+                generateArrayPrefix(prefix, key),
+                generateArrayPrefix,
+                strictNullHandling,
+                skipNulls,
+                encoder,
+                filter,
+                sort,
+                allowDots,
+                serializeDate,
+                formatter,
+                encodeValuesOnly
+            ));
+        } else {
+            values = values.concat(stringify(
+                obj[key],
+                prefix + (allowDots ? '.' + key : '[' + key + ']'),
+                generateArrayPrefix,
+                strictNullHandling,
+                skipNulls,
+                encoder,
+                filter,
+                sort,
+                allowDots,
+                serializeDate,
+                formatter,
+                encodeValuesOnly
+            ));
+        }
+    }
+
+    return values;
+};
+
+module.exports = function (object, opts) {
+    var obj = object;
+    var options = opts ? utils.assign({}, opts) : {};
+
+    if (options.encoder !== null && options.encoder !== undefined && typeof options.encoder !== 'function') {
+        throw new TypeError('Encoder has to be a function.');
+    }
+
+    var delimiter = typeof options.delimiter === 'undefined' ? defaults.delimiter : options.delimiter;
+    var strictNullHandling = typeof options.strictNullHandling === 'boolean' ? options.strictNullHandling : defaults.strictNullHandling;
+    var skipNulls = typeof options.skipNulls === 'boolean' ? options.skipNulls : defaults.skipNulls;
+    var encode = typeof options.encode === 'boolean' ? options.encode : defaults.encode;
+    var encoder = typeof options.encoder === 'function' ? options.encoder : defaults.encoder;
+    var sort = typeof options.sort === 'function' ? options.sort : null;
+    var allowDots = typeof options.allowDots === 'undefined' ? false : options.allowDots;
+    var serializeDate = typeof options.serializeDate === 'function' ? options.serializeDate : defaults.serializeDate;
+    var encodeValuesOnly = typeof options.encodeValuesOnly === 'boolean' ? options.encodeValuesOnly : defaults.encodeValuesOnly;
+    if (typeof options.format === 'undefined') {
+        options.format = formats['default'];
+    } else if (!Object.prototype.hasOwnProperty.call(formats.formatters, options.format)) {
+        throw new TypeError('Unknown format option provided.');
+    }
+    var formatter = formats.formatters[options.format];
+    var objKeys;
+    var filter;
+
+    if (typeof options.filter === 'function') {
+        filter = options.filter;
+        obj = filter('', obj);
+    } else if (Array.isArray(options.filter)) {
+        filter = options.filter;
+        objKeys = filter;
+    }
+
+    var keys = [];
+
+    if (typeof obj !== 'object' || obj === null) {
+        return '';
+    }
+
+    var arrayFormat;
+    if (options.arrayFormat in arrayPrefixGenerators) {
+        arrayFormat = options.arrayFormat;
+    } else if ('indices' in options) {
+        arrayFormat = options.indices ? 'indices' : 'repeat';
+    } else {
+        arrayFormat = 'indices';
+    }
+
+    var generateArrayPrefix = arrayPrefixGenerators[arrayFormat];
+
+    if (!objKeys) {
+        objKeys = Object.keys(obj);
+    }
+
+    if (sort) {
+        objKeys.sort(sort);
+    }
+
+    for (var i = 0; i < objKeys.length; ++i) {
+        var key = objKeys[i];
+
+        if (skipNulls && obj[key] === null) {
+            continue;
+        }
+
+        keys = keys.concat(stringify(
+            obj[key],
+            key,
+            generateArrayPrefix,
+            strictNullHandling,
+            skipNulls,
+            encode ? encoder : null,
+            filter,
+            sort,
+            allowDots,
+            serializeDate,
+            formatter,
+            encodeValuesOnly
+        ));
+    }
+
+    var joined = keys.join(delimiter);
+    var prefix = options.addQueryPrefix === true ? '?' : '';
+
+    return joined.length > 0 ? prefix + joined : '';
+};
+
+
+/***/ }),
+
+/***/ 8980:
+/***/ ((module) => {
+
+"use strict";
+
+
+var has = Object.prototype.hasOwnProperty;
+
+var hexTable = (function () {
+    var array = [];
+    for (var i = 0; i < 256; ++i) {
+        array.push('%' + ((i < 16 ? '0' : '') + i.toString(16)).toUpperCase());
+    }
+
+    return array;
+}());
+
+var compactQueue = function compactQueue(queue) {
+    var obj;
+
+    while (queue.length) {
+        var item = queue.pop();
+        obj = item.obj[item.prop];
+
+        if (Array.isArray(obj)) {
+            var compacted = [];
+
+            for (var j = 0; j < obj.length; ++j) {
+                if (typeof obj[j] !== 'undefined') {
+                    compacted.push(obj[j]);
+                }
+            }
+
+            item.obj[item.prop] = compacted;
+        }
+    }
+
+    return obj;
+};
+
+var arrayToObject = function arrayToObject(source, options) {
+    var obj = options && options.plainObjects ? Object.create(null) : {};
+    for (var i = 0; i < source.length; ++i) {
+        if (typeof source[i] !== 'undefined') {
+            obj[i] = source[i];
+        }
+    }
+
+    return obj;
+};
+
+var merge = function merge(target, source, options) {
+    if (!source) {
+        return target;
+    }
+
+    if (typeof source !== 'object') {
+        if (Array.isArray(target)) {
+            target.push(source);
+        } else if (typeof target === 'object') {
+            if (options.plainObjects || options.allowPrototypes || !has.call(Object.prototype, source)) {
+                target[source] = true;
+            }
+        } else {
+            return [target, source];
+        }
+
+        return target;
+    }
+
+    if (typeof target !== 'object') {
+        return [target].concat(source);
+    }
+
+    var mergeTarget = target;
+    if (Array.isArray(target) && !Array.isArray(source)) {
+        mergeTarget = arrayToObject(target, options);
+    }
+
+    if (Array.isArray(target) && Array.isArray(source)) {
+        source.forEach(function (item, i) {
+            if (has.call(target, i)) {
+                if (target[i] && typeof target[i] === 'object') {
+                    target[i] = merge(target[i], item, options);
+                } else {
+                    target.push(item);
+                }
+            } else {
+                target[i] = item;
+            }
+        });
+        return target;
+    }
+
+    return Object.keys(source).reduce(function (acc, key) {
+        var value = source[key];
+
+        if (has.call(acc, key)) {
+            acc[key] = merge(acc[key], value, options);
+        } else {
+            acc[key] = value;
+        }
+        return acc;
+    }, mergeTarget);
+};
+
+var assign = function assignSingleSource(target, source) {
+    return Object.keys(source).reduce(function (acc, key) {
+        acc[key] = source[key];
+        return acc;
+    }, target);
+};
+
+var decode = function (str) {
+    try {
+        return decodeURIComponent(str.replace(/\+/g, ' '));
+    } catch (e) {
+        return str;
+    }
+};
+
+var encode = function encode(str) {
+    // This code was originally written by Brian White (mscdex) for the io.js core querystring library.
+    // It has been adapted here for stricter adherence to RFC 3986
+    if (str.length === 0) {
+        return str;
+    }
+
+    var string = typeof str === 'string' ? str : String(str);
+
+    var out = '';
+    for (var i = 0; i < string.length; ++i) {
+        var c = string.charCodeAt(i);
+
+        if (
+            c === 0x2D // -
+            || c === 0x2E // .
+            || c === 0x5F // _
+            || c === 0x7E // ~
+            || (c >= 0x30 && c <= 0x39) // 0-9
+            || (c >= 0x41 && c <= 0x5A) // a-z
+            || (c >= 0x61 && c <= 0x7A) // A-Z
+        ) {
+            out += string.charAt(i);
+            continue;
+        }
+
+        if (c < 0x80) {
+            out = out + hexTable[c];
+            continue;
+        }
+
+        if (c < 0x800) {
+            out = out + (hexTable[0xC0 | (c >> 6)] + hexTable[0x80 | (c & 0x3F)]);
+            continue;
+        }
+
+        if (c < 0xD800 || c >= 0xE000) {
+            out = out + (hexTable[0xE0 | (c >> 12)] + hexTable[0x80 | ((c >> 6) & 0x3F)] + hexTable[0x80 | (c & 0x3F)]);
+            continue;
+        }
+
+        i += 1;
+        c = 0x10000 + (((c & 0x3FF) << 10) | (string.charCodeAt(i) & 0x3FF));
+        out += hexTable[0xF0 | (c >> 18)]
+            + hexTable[0x80 | ((c >> 12) & 0x3F)]
+            + hexTable[0x80 | ((c >> 6) & 0x3F)]
+            + hexTable[0x80 | (c & 0x3F)];
+    }
+
+    return out;
+};
+
+var compact = function compact(value) {
+    var queue = [{ obj: { o: value }, prop: 'o' }];
+    var refs = [];
+
+    for (var i = 0; i < queue.length; ++i) {
+        var item = queue[i];
+        var obj = item.obj[item.prop];
+
+        var keys = Object.keys(obj);
+        for (var j = 0; j < keys.length; ++j) {
+            var key = keys[j];
+            var val = obj[key];
+            if (typeof val === 'object' && val !== null && refs.indexOf(val) === -1) {
+                queue.push({ obj: obj, prop: key });
+                refs.push(val);
+            }
+        }
+    }
+
+    return compactQueue(queue);
+};
+
+var isRegExp = function isRegExp(obj) {
+    return Object.prototype.toString.call(obj) === '[object RegExp]';
+};
+
+var isBuffer = function isBuffer(obj) {
+    if (obj === null || typeof obj === 'undefined') {
+        return false;
+    }
+
+    return !!(obj.constructor && obj.constructor.isBuffer && obj.constructor.isBuffer(obj));
+};
+
+module.exports = {
+    arrayToObject: arrayToObject,
+    assign: assign,
+    compact: compact,
+    decode: decode,
+    encode: encode,
+    isBuffer: isBuffer,
+    isRegExp: isRegExp,
+    merge: merge
+};
+
+
 /***/ }),
 
 /***/ 97336:
@@ -355077,7 +355462,7 @@ var createRailsBuildJobs = function (context) {
     dockerBuild: {
       variables: __assign(__assign({}, context.environment.jobOnlyVars.build.envVars), context.componentConfig.build.extraVars),
       // custom script
-      script: __spreadArray(__spreadArray([], __read((0, docker_1.gitlabDockerLogin)(context)), false), ["docker pull $DOCKER_CACHE_IMAGE || true", "wget --output-document=- https://github.com/buildpacks/pack/releases/download/v".concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packVersion, "/pack-v").concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packVersion, "-linux.tgz | tar -zx --directory /usr/local/bin pack"), "chmod +x /usr/local/bin/pack",
+      script: __spreadArray(__spreadArray([], __read((0, docker_1.gitlabDockerLogin)(context)), false), ["cd ".concat(context.componentConfig.dir), "docker pull $DOCKER_CACHE_IMAGE || true", "wget --output-document=- https://github.com/buildpacks/pack/releases/download/v".concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packVersion, "/pack-v").concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packVersion, "-linux.tgz | tar -zx --directory /usr/local/bin pack"), "chmod +x /usr/local/bin/pack",
       //  replace private git ssh gem sources with https to make bundler with credentials via env var work
       "sed --in-place 's|git@\\([^:]*\\):|https://\\1/|g' Gemfile Gemfile.lock", "pack build \"$DOCKER_IMAGE:$DOCKER_IMAGE_TAG\" --builder '".concat(cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.image, "' --publish --cache-image \"$DOCKER_CACHE_IMAGE\" ").concat(packEnvArgs, " ").concat((_c = (_b = cnbConf === null || cnbConf === void 0 ? void 0 : cnbConf.packExtraArgs) === null || _b === void 0 ? void 0 : _b.join(" ")) !== null && _c !== void 0 ? _c : "")], false)
     }
@@ -355462,7 +355847,7 @@ exports.readConfigSync = readConfigSync;
 
 exports.__esModule = true;
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "refactor-gcloud-auth-no-file-7a9a76ea" || 0;
+exports.PIPELINE_IMAGE_TAG = "refactore-catenv-command-validates-argument-78d05852" || 0;
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
 
 /***/ }),
@@ -356372,7 +356757,7 @@ exports.__esModule = true;
 exports.translateLegacyFromComponents = exports.resolveReferences = void 0;
 var lodash_1 = __nccwpck_require__(23255);
 var string_replace_async_1 = __importDefault(__nccwpck_require__(44439));
-var REGEX = /\$\{(([^:]+):)?([^}]+)}/gm;
+var REGEX = /\$\{(([^:}]+):)?([^}]+)}/gm;
 var resolveReferences = function (vars, getOtherVariables, alreadyVisitedBase) {
   if (alreadyVisitedBase === void 0) {
     alreadyVisitedBase = {};
@@ -357161,173 +357546,578 @@ var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
   return to.concat(ar || Array.prototype.slice.call(from));
 };
 exports.__esModule = true;
-exports.getRemoveOldRevisionsAndImagesCommand = void 0;
-var artifactsRegistry_1 = __nccwpck_require__(28159);
-var cloudRunRevisions_1 = __nccwpck_require__(31101);
-var getRemoveOldRevisionsAndImagesCommand = function (context, when) {
-  if (when === "onStop") {
-    // service is already deleted, so we don't need to delete old revisions, just delete all images
-    return (0, artifactsRegistry_1.getDeleteUnusedImagesCommands)(context);
-  }
-  // this number only targets inactive revisions
-  var revisionsToKeep = context.environment.envType === "prod" ? 5 : 0;
-  // this number needs to be higher than inactive after deploy, so we add one
-  var imagesToKeep = revisionsToKeep + 1;
-  var deleteOldRevisionsCommands = (0, cloudRunRevisions_1.getDeleteUnusedRevisionsCommands)(context, revisionsToKeep);
-  var deleteOldImagesCommands = (0, artifactsRegistry_1.getDeleteUnusedImagesCommands)(context, imagesToKeep);
-  return __spreadArray(__spreadArray([], __read(deleteOldRevisionsCommands), false), __read(deleteOldImagesCommands), false);
-};
-exports.getRemoveOldRevisionsAndImagesCommand = getRemoveOldRevisionsAndImagesCommand;
+exports.getRemoveOldRevisionsAndImagesCommand = void 0;
+var artifactsRegistry_1 = __nccwpck_require__(28159);
+var cloudRunRevisions_1 = __nccwpck_require__(31101);
+var getRemoveOldRevisionsAndImagesCommand = function (context, when) {
+  if (when === "onStop") {
+    // service is already deleted, so we don't need to delete old revisions, just delete all images
+    return (0, artifactsRegistry_1.getDeleteUnusedImagesCommands)(context);
+  }
+  // this number only targets inactive revisions
+  var revisionsToKeep = context.environment.envType === "prod" ? 5 : 0;
+  // this number needs to be higher than inactive after deploy, so we add one
+  var imagesToKeep = revisionsToKeep + 1;
+  var deleteOldRevisionsCommands = (0, cloudRunRevisions_1.getDeleteUnusedRevisionsCommands)(context, revisionsToKeep);
+  var deleteOldImagesCommands = (0, artifactsRegistry_1.getDeleteUnusedImagesCommands)(context, imagesToKeep);
+  return __spreadArray(__spreadArray([], __read(deleteOldRevisionsCommands), false), __read(deleteOldImagesCommands), false);
+};
+exports.getRemoveOldRevisionsAndImagesCommand = getRemoveOldRevisionsAndImagesCommand;
+
+/***/ }),
+
+/***/ 31101:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+    return t;
+  };
+  return __assign.apply(this, arguments);
+};
+exports.__esModule = true;
+exports.getDeleteUnusedRevisionsCommands = void 0;
+var types_1 = __nccwpck_require__(63109);
+var createArgsString_1 = __nccwpck_require__(8686);
+var getServiceName_1 = __nccwpck_require__(89391);
+var removeFirstLinesFromCommandOutput_1 = __nccwpck_require__(77547);
+var getListRevisionsCommand = function (context, args) {
+  var serviceName = (0, getServiceName_1.getServiceName)(context);
+  var deployConfig = context.componentConfig.deploy;
+  if (!deployConfig || !(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+  var filterRevisionArgs = __assign({
+    project: deployConfig.projectId,
+    region: deployConfig.region,
+    // only show inactive revisions
+    service: serviceName,
+    limit: "unlimited",
+    "sort-by": "metadata.creationTimestamp"
+  }, args);
+  // this prints out all inactive images of the given app
+  return "gcloud run revisions list ".concat((0, createArgsString_1.createArgsString)(filterRevisionArgs));
+};
+var getDeleteUnusedRevisionsCommands = function (context, keep) {
+  var deployConfig = context.componentConfig.deploy;
+  if (deployConfig === false) {
+    return [];
+  }
+  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+  // this prints out all inactive images of the given app
+  var listAllInactiveRevisionsCmd = getListRevisionsCommand(context, {
+    format: "\"value(name)\"",
+    filter: "'(status.conditions.status=False OR status.conditions.status=Unknown)'"
+  });
+  // this removes the newest `revisionsToKeep` images
+  var listRevisionsToDeleteCmd = (0, removeFirstLinesFromCommandOutput_1.removeFirstLinesFromCommandOutput)(listAllInactiveRevisionsCmd, keep);
+  var deleteRevisionCmd = "gcloud run revisions delete ".concat((0, createArgsString_1.createArgsString)({
+    project: deployConfig.projectId,
+    region: deployConfig.region,
+    quiet: true
+  }), " $revisionname ");
+  var deleteRevisionsCmd = "".concat(listRevisionsToDeleteCmd, " | while read -r revisionname; do ").concat(deleteRevisionCmd, "; done");
+  return [deleteRevisionsCmd];
+};
+exports.getDeleteUnusedRevisionsCommands = getDeleteUnusedRevisionsCommands;
+
+/***/ }),
+
+/***/ 66321:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+    return t;
+  };
+  return __assign.apply(this, arguments);
+};
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+exports.__esModule = true;
+exports.getCreateScheduleScripts = exports.getJobCreateScripts = exports.getJobRunScripts = exports.getDeleteJobsScripts = exports.getDeleteSchedulesScripts = void 0;
+var gitlab_1 = __nccwpck_require__(84997);
+var createArgsString_1 = __nccwpck_require__(8686);
+var jobName_1 = __nccwpck_require__(77311);
+var common_1 = __nccwpck_require__(75655);
+var getLabels_1 = __nccwpck_require__(30486);
+var getJobRunScriptForJob = function (context, jobName, wait) {
+  var commonArgs = (0, common_1.getCommonCloudRunArgs)(context);
+  var commonArgsString = (0, createArgsString_1.createArgsString)(commonArgs);
+  return "".concat((0, common_1.gcloudRunCmd)(), " jobs execute ").concat(jobName, " ").concat(commonArgsString).concat(wait ? " --wait" : "");
+};
+var getDeleteSchedulesScripts = function (context) {
+  var deployConfig = (0, common_1.getCloudRunDeployConfig)(context);
+  var jobsWithSchedule = getCloudRunJobsWithSchedule(context);
+  var argsString = (0, createArgsString_1.createArgsString)({
+    project: deployConfig.projectId,
+    location: deployConfig.region
+  });
+  return jobsWithSchedule.map(function (_a) {
+    var schedulerName = _a.schedulerName;
+    return ["".concat((0, common_1.gcloudSchedulerCmd)(), " jobs delete ").concat(schedulerName, " ").concat(argsString)];
+  }).flat();
+};
+exports.getDeleteSchedulesScripts = getDeleteSchedulesScripts;
+var getDeleteJobsScripts = function (context) {
+  var commonArgs = (0, common_1.getCommonCloudRunArgs)(context);
+  var commonArgsString = (0, createArgsString_1.createArgsString)(commonArgs);
+  var jobsWithNames = getCloudRunJobsWithNames(context);
+  return jobsWithNames.flatMap(function (_a) {
+    var jobName = _a.jobName;
+    return [
+    // first delete all job executions. Otherwise delete might fail if one of those is still running
+    "".concat((0, common_1.gcloudRunCmd)(), " jobs executions list ").concat(commonArgsString, " --job ").concat(jobName, " --format=\"value(name)\" | xargs -I {} ").concat((0, common_1.gcloudRunCmd)(), " jobs executions delete {}  --quiet ").concat(commonArgsString), "".concat((0, common_1.gcloudRunCmd)(), " jobs delete ").concat(jobName, " ").concat(commonArgsString)];
+  });
+};
+exports.getDeleteJobsScripts = getDeleteJobsScripts;
+var getJobRunScripts = function (context, when) {
+  var jobsWithNames = getCloudRunJobsWithNames(context);
+  return jobsWithNames.filter(function (_a) {
+    var job = _a.job;
+    return job.when === when;
+  }).map(function (_a) {
+    var jobName = _a.jobName;
+    return getJobRunScriptForJob(context, jobName,
+    // wait for completin on stop jobs, since stop will delete the jobs afterwards, so they will fail
+    ["preStop", "postStop"].includes(when));
+  });
+};
+exports.getJobRunScripts = getJobRunScripts;
+var getJobCreateScripts = function (context) {
+  var jobsWithNames = getCloudRunJobsWithNames(context);
+  return jobsWithNames.map(function (_a) {
+    var job = _a.job,
+      jobName = _a.jobName;
+    return getJobCreateScriptsForJob(context, jobName, job);
+  }).flat();
+};
+exports.getJobCreateScripts = getJobCreateScripts;
+var getJobCreateScriptsForJob = function (context, jobName, job) {
+  var commonDeployArgs = (0, common_1.getCommonDeployArgs)(context);
+  // we cannot upsert a job, so we have to create it and catch the error and then update
+  var commandArray = Array.isArray(job.command) ? job.command : job.command.split(" ");
+  var commonDeployArgsString = (0, createArgsString_1.createArgsString)(__assign(__assign({
+    command: '"' + commandArray.join(",") + '"'
+  }, commonDeployArgs), {
+    labels: (0, common_1.makeLabelString)(__assign(__assign({}, (0, getLabels_1.getLabels)(context)), {
+      "cloud-run-job-name": jobName
+    })),
+    image: job.image || commonDeployArgs.image,
+    memory: job.memory || "512Mi",
+    "task-timeout": job.timeout || "10m",
+    parallelism: job.parallelism || 1,
+    "env-vars-file": "____envvars.yaml",
+    "max-retries": 0
+  }));
+  var argsString = "".concat(jobName, " ").concat(commonDeployArgsString);
+  return __spreadArray(__spreadArray([], __read((0, gitlab_1.allowFailureInScripts)(["".concat((0, common_1.gcloudRunCmd)(), " jobs create ").concat(argsString)])), false), ["".concat((0, common_1.gcloudRunCmd)(), " jobs update ").concat(argsString)], false);
+};
+var getCreateScheduleScripts = function (context) {
+  var jobsWithSchedule = getCloudRunJobsWithSchedule(context);
+  var deployConfig = (0, common_1.getCloudRunDeployConfig)(context);
+  return jobsWithSchedule.map(function (_a) {
+    var _b;
+    var job = _a.job,
+      jobName = _a.jobName,
+      schedulerName = _a.schedulerName;
+    var argsString = (0, createArgsString_1.createArgsString)({
+      project: deployConfig.projectId,
+      location: deployConfig.region,
+      schedule: "\"".concat(job.schedule, "\""),
+      "max-retry-attempts": (_b = job.maxRetryAttempts) !== null && _b !== void 0 ? _b : 0,
+      uri: "\"https://".concat(deployConfig.region, "-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/").concat(deployConfig.projectId, "/jobs/").concat(jobName, ":run\""),
+      "http-method": "POST",
+      "oauth-service-account-email": "$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com"
+    });
+    var commonArgs = "http ".concat(schedulerName, " ").concat(argsString);
+    return __spreadArray(__spreadArray([], __read((0, gitlab_1.allowFailureInScripts)(["".concat((0, common_1.gcloudSchedulerCmd)(), " jobs create ").concat(commonArgs)])), false), ["".concat((0, common_1.gcloudSchedulerCmd)(), " jobs update ").concat(commonArgs)], false);
+  }).flat();
+};
+exports.getCreateScheduleScripts = getCreateScheduleScripts;
+var getCloudRunJobsWithSchedule = function (context) {
+  var jobsWithNames = getCloudRunJobsWithNames(context);
+  return jobsWithNames.filter(function (entry) {
+    return entry.job.when === "schedule";
+  }).map(function (_a) {
+    var job = _a.job,
+      jobName = _a.jobName;
+    return {
+      job: job,
+      jobName: jobName,
+      schedulerName: jobName + "-scheduler"
+    };
+  });
+};
+var getCloudRunJobsWithNames = function (context) {
+  var _a;
+  var deployConfig = (0, common_1.getCloudRunDeployConfig)(context);
+  var getFullJobName = function (name) {
+    return (0, jobName_1.getCloudRunJobName)(context.environment.fullName, name);
+  };
+  var jobsWithNames = Object.entries((_a = deployConfig.jobs) !== null && _a !== void 0 ? _a : {})
+  // filter out disabled jobs
+  .filter(function (entry) {
+    return Boolean(entry[1]);
+  }).map(function (_a) {
+    var _b = __read(_a, 2),
+      name = _b[0],
+      job = _b[1];
+    return {
+      jobName: getFullJobName(name),
+      job: job
+    };
+  });
+  return jobsWithNames;
+};
+
+/***/ }),
+
+/***/ 77210:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+    return t;
+  };
+  return __assign.apply(this, arguments);
+};
+exports.__esModule = true;
+exports.getServiceDeleteScript = exports.getServiceDeployScript = void 0;
+var getLabels_1 = __nccwpck_require__(30486);
+var createArgsString_1 = __nccwpck_require__(8686);
+var getServiceName_1 = __nccwpck_require__(89391);
+var common_1 = __nccwpck_require__(75655);
+var getServiceDeployScript = function (context, service, nameSuffix) {
+  var _a, _b, _c, _d, _e;
+  var commonDeployArgs = (0, common_1.getCommonDeployArgs)(context);
+  var serviceName = (0, getServiceName_1.getServiceName)(context);
+  var customConfig = service !== true ? service : undefined;
+  var command = service !== true ? (_a = service === null || service === void 0 ? void 0 : service.command) !== null && _a !== void 0 ? _a : context.componentConfig.build.startCommand : undefined;
+  var commandArray = command ? Array.isArray(command) ? command : command.split(" ") : undefined;
+  var fullServiceName = "".concat(serviceName).concat(nameSuffix !== null && nameSuffix !== void 0 ? nameSuffix : "");
+  var argsString = (0, createArgsString_1.createArgsString)(__assign(__assign({
+    // command as empty string resets it to default (uses the image's entrypoint)
+    command: commandArray ? '"' + commandArray.join(",") + '"' : '""'
+  }, commonDeployArgs), {
+    labels: (0, common_1.makeLabelString)(__assign(__assign({}, (0, getLabels_1.getLabels)(context)), {
+      "cloud-run-service-name": fullServiceName
+    })),
+    "env-vars-file": "____envvars.yaml",
+    "min-instances": (_b = customConfig === null || customConfig === void 0 ? void 0 : customConfig.minInstances) !== null && _b !== void 0 ? _b : 0,
+    "max-instances": (_c = customConfig === null || customConfig === void 0 ? void 0 : customConfig.maxInstances) !== null && _c !== void 0 ? _c : 100,
+    "cpu-throttling": (customConfig === null || customConfig === void 0 ? void 0 : customConfig.noCpuThrottling) !== true,
+    memory: customConfig === null || customConfig === void 0 ? void 0 : customConfig.memory,
+    "allow-unauthenticated": (_d = customConfig === null || customConfig === void 0 ? void 0 : customConfig.allowUnauthenticated) !== null && _d !== void 0 ? _d : true,
+    ingress: (_e = customConfig === null || customConfig === void 0 ? void 0 : customConfig.ingress) !== null && _e !== void 0 ? _e : "all",
+    "cpu-boost": true,
+    "execution-environment": customConfig === null || customConfig === void 0 ? void 0 : customConfig.executionEnvironment
+  }));
+  return "".concat((0, common_1.gcloudRunCmd)(), " deploy ").concat(fullServiceName, " ").concat(argsString);
+};
+exports.getServiceDeployScript = getServiceDeployScript;
+var getServiceDeleteScript = function (context, serviceSuffix) {
+  var commonArgs = (0, common_1.getCommonCloudRunArgs)(context);
+  var commonArgsString = (0, createArgsString_1.createArgsString)(commonArgs);
+  var serviceName = (0, getServiceName_1.getServiceName)(context);
+  var fullServiceName = serviceSuffix ? "".concat(serviceName, "-").concat(serviceSuffix) : serviceName;
+  return ["".concat((0, common_1.gcloudRunCmd)(), " services delete ").concat(fullServiceName, " ").concat(commonArgsString)];
+};
+exports.getServiceDeleteScript = getServiceDeleteScript;
+
+/***/ }),
+
+/***/ 75655:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+    return t;
+  };
+  return __assign.apply(this, arguments);
+};
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+exports.__esModule = true;
+exports.getCommonDeployArgs = exports.getCommonCloudRunArgs = exports.getCloudRunDeployConfig = exports.makeLabelString = exports.setGoogleProjectNumberScript = exports.gcloudSchedulerCmd = exports.gcloudRunCmd = exports.gcloudCmd = void 0;
+var types_1 = __nccwpck_require__(63109);
+var artifactsRegistry_1 = __nccwpck_require__(28159);
+var gcloudCmd = function (version) {
+  return version ? "gcloud ".concat(version) : "gcloud";
+};
+exports.gcloudCmd = gcloudCmd;
+var gcloudRunCmd = function (version) {
+  return "".concat((0, exports.gcloudCmd)(version), " run");
+};
+exports.gcloudRunCmd = gcloudRunCmd;
+var gcloudSchedulerCmd = function (version) {
+  return "".concat((0, exports.gcloudCmd)(version), " scheduler");
+};
+exports.gcloudSchedulerCmd = gcloudSchedulerCmd;
+var setGoogleProjectNumberScript = function (deployConfig) {
+  return ["export GCLOUD_PROJECT_NUMBER=$(".concat((0, exports.gcloudCmd)(), " projects describe ").concat(deployConfig.projectId, " --format=\"value(projectNumber)\")"), "echo \"GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER\""];
+};
+exports.setGoogleProjectNumberScript = setGoogleProjectNumberScript;
+var makeLabelString = function (obj) {
+  return Object.entries(obj).map(function (_a) {
+    var _b = __read(_a, 2),
+      key = _b[0],
+      value = _b[1];
+    return "".concat(key, "=").concat(value);
+  }).join(",");
+};
+exports.makeLabelString = makeLabelString;
+var getCloudRunDeployConfig = function (context) {
+  var deployConfig = context.componentConfig.deploy;
+  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+    // should not happen
+    throw new Error("deploy config is wrong");
+  }
+  return deployConfig;
+};
+exports.getCloudRunDeployConfig = getCloudRunDeployConfig;
+function getCommonCloudRunArgs(context) {
+  var deployConfig = (0, exports.getCloudRunDeployConfig)(context);
+  return {
+    project: deployConfig.projectId,
+    region: deployConfig.region
+  };
+}
+exports.getCommonCloudRunArgs = getCommonCloudRunArgs;
+function getCommonDeployArgs(context) {
+  var commonArgs = getCommonCloudRunArgs(context);
+  var deployConfig = (0, exports.getCloudRunDeployConfig)(context);
+  return __assign(__assign({
+    image: (0, artifactsRegistry_1.getArtifactsRegistryImage)(context)
+  }, commonArgs), {
+    "set-cloudsql-instances": deployConfig.cloudSql ? deployConfig.cloudSql.instanceConnectionName : undefined
+  });
+}
+exports.getCommonDeployArgs = getCommonDeployArgs;
+
+/***/ }),
+
+/***/ 21944:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+exports.__esModule = true;
+exports.getCloudRunDeployScripts = void 0;
+var gitlab_1 = __nccwpck_require__(84997);
+var sbom_1 = __nccwpck_require__(65928);
+var cleanup_1 = __nccwpck_require__(10964);
+var database_1 = __nccwpck_require__(41384);
+var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(22607);
+var cloudRunJobs_1 = __nccwpck_require__(66321);
+var cloudRunServices_1 = __nccwpck_require__(77210);
+var common_1 = __nccwpck_require__(75655);
+function getCloudRunDeployScripts(context) {
+  var _a;
+  var deployConfig = (0, common_1.getCloudRunDeployConfig)(context);
+  return __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, gitlab_1.collapseableSection)("prepare", "Prepare...")(__spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read((0, common_1.setGoogleProjectNumberScript)(deployConfig)), false))), false), __read((0, gitlab_1.collapseableSection)("deploy", "Deploy to cloud run")(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(["echo \"$ENV_VARS\" > ____envvars.yaml"], __read(deployConfig.cloudSql ? (0, database_1.getDatabaseCreateScript)(context, deployConfig) // we create the db, so that we can also delete it afterwards
+  : []), false), __read((0, cloudRunJobs_1.getCreateScheduleScripts)(context)), false), __read((0, cloudRunJobs_1.getJobCreateScripts)(context)), false), __read((0, cloudRunJobs_1.getJobRunScripts)(context, "preDeploy")), false), __read(deployConfig.service !== false ? [(0, cloudRunServices_1.getServiceDeployScript)(context, deployConfig.service)] : []), false), __read(Object.entries((_a = deployConfig.additionalServices) !== null && _a !== void 0 ? _a : {}).map(function (_a) {
+    var _b = __read(_a, 2),
+      name = _b[0],
+      service = _b[1];
+    return (0, cloudRunServices_1.getServiceDeployScript)(context, service, "-" + name);
+  })), false), __read((0, cloudRunJobs_1.getJobRunScripts)(context, "postDeploy")), false))), false), __read((0, gitlab_1.collapseableSection)("cleanup", "Cleanup")((0, cleanup_1.getRemoveOldRevisionsAndImagesCommand)(context, "postDeploy") // we cleanup inactive images both on deploy and stop
+  )), false), __read((0, sbom_1.getDependencyTrackUploadScript)(context)), false);
+}
+exports.getCloudRunDeployScripts = getCloudRunDeployScripts;
+
+/***/ }),
+
+/***/ 40910:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+exports.__esModule = true;
+exports.getCloudRunStopScripts = void 0;
+var sbom_1 = __nccwpck_require__(65928);
+var cleanup_1 = __nccwpck_require__(10964);
+var database_1 = __nccwpck_require__(41384);
+var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(22607);
+var cloudRunJobs_1 = __nccwpck_require__(66321);
+var cloudRunServices_1 = __nccwpck_require__(77210);
+var common_1 = __nccwpck_require__(75655);
+function getCloudRunStopScripts(context) {
+  var _a;
+  var deployConfig = (0, common_1.getCloudRunDeployConfig)(context);
+  return __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read((0, cloudRunJobs_1.getJobRunScripts)(context, "preStop")), false), __read(deployConfig.service !== false ? (0, cloudRunServices_1.getServiceDeleteScript)(context) : []), false), __read(Object.entries((_a = deployConfig.additionalServices) !== null && _a !== void 0 ? _a : {}).flatMap(function (_a) {
+    var _b = __read(_a, 1),
+      name = _b[0];
+    return (0, cloudRunServices_1.getServiceDeleteScript)(context, name);
+  })), false), __read((0, cloudRunJobs_1.getJobRunScripts)(context, "postStop")), false), __read((0, cloudRunJobs_1.getDeleteSchedulesScripts)(context)), false), __read((0, cloudRunJobs_1.getDeleteJobsScripts)(context)), false), __read(deployConfig.cloudSql && deployConfig.cloudSql.deleteDatabaseOnStop ? (0, database_1.getDatabaseDeleteScript)(context, deployConfig) : []), false), __read((0, cleanup_1.getRemoveOldRevisionsAndImagesCommand)(context, "onStop")), false), __read((0, sbom_1.getDependencyTrackDeleteScript)(context)), false);
+}
+exports.getCloudRunStopScripts = getCloudRunStopScripts;
 
 /***/ }),
 
-/***/ 31101:
-/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+/***/ 26474:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
 "use strict";
 
 
-var __assign = this && this.__assign || function () {
-  __assign = Object.assign || function (t) {
-    for (var s, i = 1, n = arguments.length; i < n; i++) {
-      s = arguments[i];
-      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
-    }
-    return t;
-  };
-  return __assign.apply(this, arguments);
-};
-exports.__esModule = true;
-exports.getDeleteUnusedRevisionsCommands = void 0;
-var types_1 = __nccwpck_require__(63109);
-var createArgsString_1 = __nccwpck_require__(8686);
-var getServiceName_1 = __nccwpck_require__(89391);
-var removeFirstLinesFromCommandOutput_1 = __nccwpck_require__(77547);
-var getListRevisionsCommand = function (context, args) {
-  var serviceName = (0, getServiceName_1.getServiceName)(context);
-  var deployConfig = context.componentConfig.deploy;
-  if (!deployConfig || !(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
-    // should not happen
-    throw new Error("deploy config is wrong");
-  }
-  var filterRevisionArgs = __assign({
-    project: deployConfig.projectId,
-    region: deployConfig.region,
-    // only show inactive revisions
-    service: serviceName,
-    limit: "unlimited",
-    "sort-by": "metadata.creationTimestamp"
-  }, args);
-  // this prints out all inactive images of the given app
-  return "gcloud run revisions list ".concat((0, createArgsString_1.createArgsString)(filterRevisionArgs));
-};
-var getDeleteUnusedRevisionsCommands = function (context, keep) {
-  var deployConfig = context.componentConfig.deploy;
-  if (deployConfig === false) {
-    return [];
-  }
-  if (!(0, types_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
-    // should not happen
-    throw new Error("deploy config is wrong");
-  }
-  // this prints out all inactive images of the given app
-  var listAllInactiveRevisionsCmd = getListRevisionsCommand(context, {
-    format: "\"value(name)\"",
-    filter: "'(status.conditions.status=False OR status.conditions.status=Unknown)'"
-  });
-  // this removes the newest `revisionsToKeep` images
-  var listRevisionsToDeleteCmd = (0, removeFirstLinesFromCommandOutput_1.removeFirstLinesFromCommandOutput)(listAllInactiveRevisionsCmd, keep);
-  var deleteRevisionCmd = "gcloud run revisions delete ".concat((0, createArgsString_1.createArgsString)({
-    project: deployConfig.projectId,
-    region: deployConfig.region,
-    quiet: true
-  }), " $revisionname ");
-  var deleteRevisionsCmd = "".concat(listRevisionsToDeleteCmd, " | while read -r revisionname; do ").concat(deleteRevisionCmd, "; done");
-  return [deleteRevisionsCmd];
-};
-exports.getDeleteUnusedRevisionsCommands = getDeleteUnusedRevisionsCommands;
-
-/***/ }),
-
-/***/ 82256:
-/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
-
-"use strict";
-
-
-var __assign = this && this.__assign || function () {
-  __assign = Object.assign || function (t) {
-    for (var s, i = 1, n = arguments.length; i < n; i++) {
-      s = arguments[i];
-      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
-    }
-    return t;
-  };
-  return __assign.apply(this, arguments);
-};
-var __read = this && this.__read || function (o, n) {
-  var m = typeof Symbol === "function" && o[Symbol.iterator];
-  if (!m) return o;
-  var i = m.call(o),
-    r,
-    ar = [],
-    e;
-  try {
-    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
-  } catch (error) {
-    e = {
-      error: error
-    };
-  } finally {
-    try {
-      if (r && !r.done && (m = i["return"])) m.call(i);
-    } finally {
-      if (e) throw e.error;
-    }
-  }
-  return ar;
-};
-var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
-  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
-    if (ar || !(i in from)) {
-      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
-      ar[i] = from[i];
-    }
-  }
-  return to.concat(ar || Array.prototype.slice.call(from));
-};
 exports.__esModule = true;
 exports.createGoogleCloudRunDeployJobs = void 0;
-var js_yaml_1 = __nccwpck_require__(3618);
 var lodash_1 = __nccwpck_require__(23255);
-var _1 = __nccwpck_require__(81344);
 var docker_1 = __nccwpck_require__(33219);
-var getLabels_1 = __nccwpck_require__(30486);
 var runner_1 = __nccwpck_require__(55071);
 var gitlab_1 = __nccwpck_require__(84997);
 var base_1 = __nccwpck_require__(82866);
-var sbom_1 = __nccwpck_require__(65928);
 var types_1 = __nccwpck_require__(63109);
-var createArgsString_1 = __nccwpck_require__(8686);
-var database_1 = __nccwpck_require__(41384);
-var gcloudServiceAccountLoginCommands_1 = __nccwpck_require__(22607);
-var jobName_1 = __nccwpck_require__(77311);
-var artifactsRegistry_1 = __nccwpck_require__(28159);
-var getServiceName_1 = __nccwpck_require__(89391);
-var cleanup_1 = __nccwpck_require__(10964);
-var setGoogleProjectNumberScript = function (deployConfig) {
-  return ["export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe ".concat(deployConfig.projectId, " --format=\"value(projectNumber)\")"), "echo \"GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER\""];
-};
-var makeLabelString = function (obj) {
-  return Object.entries(obj).map(function (_a) {
-    var _b = __read(_a, 2),
-      key = _b[0],
-      value = _b[1];
-    return "".concat(key, "=").concat(value);
-  }).join(",");
-};
+var variables_1 = __nccwpck_require__(20408);
+var getCloudRunDeployScripts_1 = __nccwpck_require__(21944);
+var getCloudRunStopScripts_1 = __nccwpck_require__(40910);
 var createGoogleCloudRunDeployJobs = function (context) {
-  var _a, _b, _c;
   var deployConfig = context.componentConfig.deploy;
   if (deployConfig === false) {
     return [];
@@ -357336,171 +358126,14 @@ var createGoogleCloudRunDeployJobs = function (context) {
     // should not happen
     throw new Error("deploy config is wrong");
   }
-  var allEnvVars = (0, lodash_1.omit)(context.environment.envVars, _1.GCLOUD_DEPLOY_CREDENTIALS_KEY);
-  var commonArgs = {
-    project: deployConfig.projectId,
-    region: deployConfig.region
-  };
-  var commonDeployArgs = __assign(__assign({
-    image: (0, artifactsRegistry_1.getArtifactsRegistryImage)(context)
-  }, commonArgs), {
-    "set-cloudsql-instances": deployConfig.cloudSql ? deployConfig.cloudSql.instanceConnectionName : undefined
-  });
-  var serviceName = (0, getServiceName_1.getServiceName)(context);
-  var getFullJobName = function (name) {
-    return (0, jobName_1.getCloudRunJobName)(context.environment.fullName, name);
-  };
-  var jobsWithNames = Object.entries((_a = deployConfig.jobs) !== null && _a !== void 0 ? _a : {})
-  // filter out disabled jobs
-  .filter(function (entry) {
-    return Boolean(entry[1]);
-  }).map(function (_a) {
-    var _b = __read(_a, 2),
-      name = _b[0],
-      job = _b[1];
-    return {
-      jobName: getFullJobName(name),
-      job: job
-    };
-  });
-  var jobsWithSchedule = jobsWithNames.filter(function (entry) {
-    return entry.job.when === "schedule";
-  }).map(function (_a) {
-    var job = _a.job,
-      jobName = _a.jobName;
-    return {
-      job: job,
-      jobName: jobName,
-      schedulerName: jobName + "-scheduler"
-    };
-  });
-  var getServiceDeployScript = function (service, nameSuffix) {
-    var _a, _b, _c, _d, _e;
-    var customConfig = service !== true ? service : undefined;
-    var command = service !== true ? (_a = service === null || service === void 0 ? void 0 : service.command) !== null && _a !== void 0 ? _a : context.componentConfig.build.startCommand : undefined;
-    var commandArray = command ? Array.isArray(command) ? command : command.split(" ") : undefined;
-    var fullServiceName = "".concat(serviceName).concat(nameSuffix !== null && nameSuffix !== void 0 ? nameSuffix : "");
-    var argsString = (0, createArgsString_1.createArgsString)(__assign(__assign({
-      // command as empty string resets it to default (uses the image's entrypoint)
-      command: commandArray ? '"' + commandArray.join(",") + '"' : '""'
-    }, commonDeployArgs), {
-      labels: makeLabelString(__assign(__assign({}, (0, getLabels_1.getLabels)(context)), {
-        "cloud-run-service-name": fullServiceName
-      })),
-      "env-vars-file": "____envvars.yaml",
-      "min-instances": (_b = customConfig === null || customConfig === void 0 ? void 0 : customConfig.minInstances) !== null && _b !== void 0 ? _b : 0,
-      "max-instances": (_c = customConfig === null || customConfig === void 0 ? void 0 : customConfig.maxInstances) !== null && _c !== void 0 ? _c : 100,
-      "cpu-throttling": (customConfig === null || customConfig === void 0 ? void 0 : customConfig.noCpuThrottling) !== true,
-      memory: customConfig === null || customConfig === void 0 ? void 0 : customConfig.memory,
-      "allow-unauthenticated": (_d = customConfig === null || customConfig === void 0 ? void 0 : customConfig.allowUnauthenticated) !== null && _d !== void 0 ? _d : true,
-      ingress: (_e = customConfig === null || customConfig === void 0 ? void 0 : customConfig.ingress) !== null && _e !== void 0 ? _e : "all",
-      "cpu-boost": true
-    }));
-    return "gcloud run deploy ".concat(fullServiceName, " ").concat(argsString);
-  };
-  var getJobCreateScriptsForJob = function (jobName, job) {
-    // due to some oversight from google, jobs create does not accept `--env-vars-file` 🤦
-    // lucky, update on the other hand accepts it... so let's just imediatly update it
-    // also we cannot upsert a job, so we have to create it and catch the error and then update
-    var commandArray = Array.isArray(job.command) ? job.command : job.command.split(" ");
-    var commonDeployArgsString = (0, createArgsString_1.createArgsString)(__assign(__assign({
-      command: '"' + commandArray.join(",") + '"'
-    }, commonDeployArgs), {
-      labels: makeLabelString(__assign(__assign({}, (0, getLabels_1.getLabels)(context)), {
-        "cloud-run-job-name": jobName
-      })),
-      image: job.image || commonDeployArgs.image,
-      memory: job.memory || "512Mi",
-      "task-timeout": job.timeout || "10m"
-    }));
-    var argsString = "".concat(jobName, " ").concat(commonDeployArgsString);
-    return __spreadArray(__spreadArray([], __read((0, gitlab_1.allowFailureInScripts)(["gcloud beta run jobs create ".concat(argsString)])), false), ["gcloud beta run jobs update ".concat(argsString, " --env-vars-file=____envvars.yaml")], false);
-  };
-  var commonArgsString = (0, createArgsString_1.createArgsString)(commonArgs);
-  var getJobCreateScripts = function () {
-    return jobsWithNames.map(function (_a) {
-      var job = _a.job,
-        jobName = _a.jobName;
-      return getJobCreateScriptsForJob(jobName, job);
-    }).flat();
-  };
-  var getJobRunScriptForJob = function (jobName, wait) {
-    return "gcloud beta run jobs execute ".concat(jobName, " ").concat(commonArgsString).concat(wait ? " --wait" : "");
-  };
-  var getJobRunScripts = function (when) {
-    return jobsWithNames.filter(function (_a) {
-      var job = _a.job;
-      return job.when === when;
-    }).map(function (_a) {
-      var jobName = _a.jobName;
-      return getJobRunScriptForJob(jobName,
-      // wait for completin on stop jobs, since stop will delete the jobs afterwards, so they will fail
-      ["preStop", "postStop"].includes(when));
-    });
-  };
-  var getCreateScheduleScripts = function () {
-    return jobsWithSchedule.map(function (_a) {
-      var _b;
-      var job = _a.job,
-        jobName = _a.jobName,
-        schedulerName = _a.schedulerName;
-      var argsString = (0, createArgsString_1.createArgsString)({
-        project: deployConfig.projectId,
-        location: deployConfig.region,
-        schedule: "\"".concat(job.schedule, "\""),
-        "max-retry-attempts": (_b = job.maxRetryAttempts) !== null && _b !== void 0 ? _b : 0,
-        uri: "\"https://".concat(deployConfig.region, "-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/").concat(deployConfig.projectId, "/jobs/").concat(jobName, ":run\""),
-        "http-method": "POST",
-        "oauth-service-account-email": "$GCLOUD_PROJECT_NUMBER-compute@developer.gserviceaccount.com"
-      });
-      var commonArgs = "http ".concat(schedulerName, " ").concat(argsString);
-      return __spreadArray(__spreadArray([], __read((0, gitlab_1.allowFailureInScripts)(["gcloud scheduler jobs create ".concat(commonArgs)])), false), ["gcloud scheduler jobs update ".concat(commonArgs)], false);
-    }).flat();
-  };
-  var getDeleteSchedulesScripts = function () {
-    var argsString = (0, createArgsString_1.createArgsString)({
-      project: deployConfig.projectId,
-      location: deployConfig.region
-    });
-    return jobsWithSchedule.map(function (_a) {
-      var schedulerName = _a.schedulerName;
-      return ["gcloud scheduler jobs delete ".concat(schedulerName, " ").concat(argsString)];
-    }).flat();
-  };
-  var getDeleteJobsScripts = function () {
-    return jobsWithNames.flatMap(function (_a) {
-      var jobName = _a.jobName;
-      return [
-      // first delete all job executions. Otherwise delete might fail if one of those is still running
-      "gcloud beta run jobs executions list ".concat(commonArgsString, " --job ").concat(jobName, " --format=\"value(name)\" | xargs -I {} gcloud beta run jobs executions delete {}  --quiet ").concat(commonArgsString), "gcloud beta run jobs delete ".concat(jobName, " ").concat(commonArgsString)];
-    });
-  };
-  var deployScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, gitlab_1.collapseableSection)("prepare", "Prepare...")(__spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read(setGoogleProjectNumberScript(deployConfig)), false))), false), __read((0, gitlab_1.collapseableSection)("deploy", "Deploy to cloud run")(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(["echo \"$ENV_VARS\" > ____envvars.yaml"], __read(deployConfig.cloudSql ? (0, database_1.getDatabaseCreateScript)(context, deployConfig) // we create the db, so that we can also delete it afterwards
-  : []), false), __read(getCreateScheduleScripts()), false), __read(getJobCreateScripts()), false), __read(getJobRunScripts("preDeploy")), false), __read(deployConfig.service !== false ? [getServiceDeployScript(deployConfig.service)] : []), false), __read(Object.entries((_b = deployConfig.additionalServices) !== null && _b !== void 0 ? _b : {}).map(function (_a) {
-    var _b = __read(_a, 2),
-      name = _b[0],
-      service = _b[1];
-    return getServiceDeployScript(service, "-" + name);
-  })), false), __read(getJobRunScripts("postDeploy")), false))), false), __read((0, gitlab_1.collapseableSection)("cleanup", "Cleanup")((0, cleanup_1.getRemoveOldRevisionsAndImagesCommand)(context, "postDeploy") // we cleanup inactive images both on deploy and stop
-  )), false), __read((0, sbom_1.getDependencyTrackUploadScript)(context)), false);
-  var stopScripts = __spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray(__spreadArray([], __read((0, gcloudServiceAccountLoginCommands_1.gcloudServiceAccountLoginCommands)(context)), false), __read(getJobRunScripts("preStop")), false), __read(deployConfig.service !== false ? ["gcloud run services delete ".concat(serviceName, " ").concat(commonArgsString)] : []), false), __read(Object.entries((_c = deployConfig.additionalServices) !== null && _c !== void 0 ? _c : {}).map(function (_a) {
-    var _b = __read(_a, 1),
-      name = _b[0];
-    return "gcloud run services delete ".concat(serviceName, "-").concat(name, " ").concat(commonArgsString);
-  })), false), __read(getJobRunScripts("postStop")), false), __read(getDeleteSchedulesScripts()), false), __read(getDeleteJobsScripts()), false), __read(deployConfig.cloudSql && deployConfig.cloudSql.deleteDatabaseOnStop ? (0, database_1.getDatabaseDeleteScript)(context, deployConfig) : []), false), __read((0, cleanup_1.getRemoveOldRevisionsAndImagesCommand)(context, "onStop")), false), __read((0, sbom_1.getDependencyTrackDeleteScript)(context)), false);
+  var deployScripts = (0, getCloudRunDeployScripts_1.getCloudRunDeployScripts)(context);
+  var stopScripts = (0, getCloudRunStopScripts_1.getCloudRunStopScripts)(context);
   return (0, base_1.createDeployementJobs)(context, {
     deploy: (0, lodash_1.merge)((0, docker_1.getDockerJobBaseProps)(context), {
       artifacts: {
         paths: ["____envvars.yaml"]
       },
-      variables: {
-        CLOUDSDK_CORE_DISABLE_PROMPTS: "1",
-        ENV_VARS: (0, js_yaml_1.dump)(allEnvVars, {
-          lineWidth: -1,
-          quotingType: "'",
-          forceQuotes: true
-        })
-      },
+      variables: (0, variables_1.getDeployJobVariables)(context),
       image: (0, runner_1.getRunnerImage)("gcloud"),
       script: deployScripts
     }),
@@ -357517,6 +358150,32 @@ exports.createGoogleCloudRunDeployJobs = createGoogleCloudRunDeployJobs;
 
 /***/ }),
 
+/***/ 20408:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+exports.__esModule = true;
+exports.getDeployJobVariables = void 0;
+var js_yaml_1 = __nccwpck_require__(3618);
+var lodash_1 = __nccwpck_require__(23255);
+var __1 = __nccwpck_require__(25355);
+function getDeployJobVariables(context) {
+  var allEnvVars = (0, lodash_1.omit)(context.environment.envVars, __1.GCLOUD_DEPLOY_CREDENTIALS_KEY);
+  return {
+    CLOUDSDK_CORE_DISABLE_PROMPTS: "1",
+    ENV_VARS: (0, js_yaml_1.dump)(allEnvVars, {
+      lineWidth: -1,
+      quotingType: "'",
+      forceQuotes: true
+    })
+  };
+}
+exports.getDeployJobVariables = getDeployJobVariables;
+
+/***/ }),
+
 /***/ 81344:
 /***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
 
@@ -357569,7 +358228,7 @@ exports.GCLOUD_RUN_DEPLOY_TYPE = exports.GCLOUD_RUN_CANONICAL_HOST_SUFFIX = expo
 var context_1 = __nccwpck_require__(22041);
 var gitlab_1 = __nccwpck_require__(84997);
 var utils_1 = __nccwpck_require__(70463);
-var deployJob_1 = __nccwpck_require__(82256);
+var createJobs_1 = __nccwpck_require__(26474);
 var jobName_1 = __nccwpck_require__(77311);
 exports.GCLOUD_DEPLOY_CREDENTIALS_KEY = "GCLOUD_DEPLOY_credentialsKey";
 // FIXME: rename to internalHostSuffix, but this means that project-setup needs to be rerun, so its kindof a breaking change
@@ -357601,7 +358260,7 @@ var getCloudSqlVariables = function (_a) {
   return {};
 };
 exports.GCLOUD_RUN_DEPLOY_TYPE = {
-  jobs: deployJob_1.createGoogleCloudRunDeployJobs,
+  jobs: createJobs_1.createGoogleCloudRunDeployJobs,
   defaults: function (_a) {
     var deployConfigRaw = _a.deployConfigRaw,
       envType = _a.envType;
@@ -357687,22 +358346,28 @@ var lodash_1 = __nccwpck_require__(23255);
  * @param args args record
  * @returns
  */
-var createArgsString = function (args) {
-  return Object.entries(args).filter(function (_a) {
-    var _b = __read(_a, 2),
-      value = _b[1];
-    return !(0, lodash_1.isNil)(value);
-  }).map(function (_a) {
-    var _b = __read(_a, 2),
-      key = _b[0],
-      value = _b[1];
-    if (value === true) {
-      return "--".concat(key);
-    } else if (value === false) {
-      return "--no-".concat(key);
-    }
-    return "--".concat(key, "=").concat(value);
-  }).join(" ");
+var createArgsString = function () {
+  var args = [];
+  for (var _i = 0; _i < arguments.length; _i++) {
+    args[_i] = arguments[_i];
+  }
+  return args.map(function (argObj) {
+    return Object.entries(argObj).filter(function (_a) {
+      var _b = __read(_a, 2),
+        value = _b[1];
+      return !(0, lodash_1.isNil)(value);
+    }).map(function (_a) {
+      var _b = __read(_a, 2),
+        key = _b[0],
+        value = _b[1];
+      if (value === true) {
+        return "--".concat(key);
+      } else if (value === false) {
+        return "--no-".concat(key);
+      }
+      return "--".concat(key, "=").concat(value);
+    });
+  }).flat().join(" ");
 };
 exports.createArgsString = createArgsString;
 
@@ -360980,6 +361645,14 @@ module.exports = require("fs");
 
 /***/ }),
 
+/***/ 73292:
+/***/ ((module) => {
+
+"use strict";
+module.exports = require("fs/promises");
+
+/***/ }),
+
 /***/ 13685:
 /***/ ((module) => {
 
@@ -361140,6 +361813,725 @@ module.exports = require("zlib");
 
 /***/ }),
 
+/***/ 6861:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.AsyncResult = void 0;
+var result_js_1 = __nccwpck_require__(39293);
+/**
+ * An async-aware `Result` counterpart.
+ *
+ * Can be combined with asynchronous code without having to ``await`` anything right until
+ * the moment when you're ready to extract the final ``Result`` out of it.
+ *
+ * Can also be combined with synchronous code for convenience.
+ */
+var AsyncResult = /** @class */ (function () {
+    /**
+     * Constructs an `AsyncResult` from a `Result` or a `Promise` of a `Result`.
+     *
+     * @example
+     * ```typescript
+     * const ar = new AsyncResult(Promise.resolve('value'))
+     * ```
+     */
+    function AsyncResult(start) {
+        this.promise = Promise.resolve(start);
+    }
+    /**
+     * Calls `mapper` if the result is `Ok`, otherwise keeps the `Err` value intact.
+     * This function can be used for control flow based on `Result` values.
+     *
+     * @example
+     * ```typescript
+     * let goodResult = Ok(1).toAsyncResult()
+     * let badResult = Err('boo').toAsyncResult()
+     *
+     * await goodResult.andThen(async (value) => Ok(value * 2)).promise // Ok(2)
+     * await goodResult.andThen(async (value) => Err(`${value} is bad`)).promise // Err('1 is bad')
+     * await badResult.andThen(async (value) => Ok(value * 2)).promise // Err('boo')
+     * ```
+     */
+    AsyncResult.prototype.andThen = function (mapper) {
+        var _this = this;
+        return this.thenInternal(function (result) { return __awaiter(_this, void 0, void 0, function () {
+            var mapped;
+            return __generator(this, function (_a) {
+                if (result.isErr()) {
+                    // SAFETY: What we're returning here is Err<E>. That doesn't sit well with
+                    // TypeScript for some reason, let's explicitly expand the type to what this
+                    // function is supposed to return.
+                    return [2 /*return*/, result];
+                }
+                mapped = mapper(result.value);
+                return [2 /*return*/, mapped instanceof AsyncResult ? mapped.promise : mapped];
+            });
+        }); });
+    };
+    /**
+     * Maps an `AsyncResult<T, E>` to `AsyncResult<U, E>` by applying a function to a contained
+     * `Ok` value, leaving an `Err` value untouched.
+     *
+     * This function can be used to compose the results of two functions.
+     *
+     * @example
+     * ```typescript
+     * let goodResult = Ok(1).toAsyncResult()
+     * let badResult = Err('boo').toAsyncResult()
+     *
+     * await goodResult.map(async (value) => value * 2).promise // Ok(2)
+     * await badResult.andThen(async (value) => value * 2).promise // Err('boo')
+     * ```
+     */
+    AsyncResult.prototype.map = function (mapper) {
+        var _this = this;
+        return this.thenInternal(function (result) { return __awaiter(_this, void 0, void 0, function () {
+            var _a;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        if (result.isErr()) {
+                            return [2 /*return*/, result];
+                        }
+                        _a = result_js_1.Ok;
+                        return [4 /*yield*/, mapper(result.value)];
+                    case 1: return [2 /*return*/, _a.apply(void 0, [_b.sent()])];
+                }
+            });
+        }); });
+    };
+    // TODO:
+    // mapErr()
+    // mapOr()
+    // mapOrElse()
+    // or()
+    // orElse()
+    // mapErr<F>(mapper: (val: E) => F | Promise<F>): AsyncResult<T, F> {
+    //     return this.thenInternal(async (result) => {
+    //         if (result.isOk()) {
+    //             return result
+    //         }
+    //         return Err(await mapper(result.error))
+    //     })
+    // }
+    // async mapOr<U>(default_: U, mapper: (val: T) => U | Promise<U>): Promise<U> {
+    //     return this.mapOrElse(() => default_, mapper)
+    // }
+    // async mapOrElse<U>(default_: (error: E) => U | Promise<U>, mapper: (val: T) => U | Promise<U>): Promise<U> {
+    //     const result = await this.promise
+    //     if (result.isErr()) {
+    //         return default_(result.error)
+    //     }
+    //     return mapper(result.value)
+    // }
+    // or<E2>(other: Result<T, E2> | AsyncResult<T, E2> | Promise<Result<T, E2>>): AsyncResult<T, E2> {
+    //     return this.orElse(() => other)
+    // }
+    // orElse<E2>(other: (error: E) => Result<T, E2> | AsyncResult<T, E2> | Promise<Result<T, E2>>): AsyncResult<T, E2> {
+    //     return this.thenInternal(async (result) => {
+    //         if (result.isOk()) {
+    //             return result
+    //         }
+    //         const otherValue = other(result.error)
+    //         return otherValue instanceof AsyncResult ? otherValue.promise : otherValue
+    //     })
+    // }
+    AsyncResult.prototype.thenInternal = function (mapper) {
+        return new AsyncResult(this.promise.then(mapper));
+    };
+    return AsyncResult;
+}());
+exports.AsyncResult = AsyncResult;
+//# sourceMappingURL=asyncresult.js.map
+
+/***/ }),
+
+/***/ 72807:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+__exportStar(__nccwpck_require__(6861), exports);
+__exportStar(__nccwpck_require__(39293), exports);
+__exportStar(__nccwpck_require__(56456), exports);
+//# sourceMappingURL=index.js.map
+
+/***/ }),
+
+/***/ 56456:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.Option = exports.Some = exports.None = void 0;
+var utils_js_1 = __nccwpck_require__(91414);
+var result_js_1 = __nccwpck_require__(39293);
+/**
+ * Contains the None value
+ */
+var NoneImpl = /** @class */ (function () {
+    function NoneImpl() {
+    }
+    NoneImpl.prototype.isSome = function () {
+        return false;
+    };
+    NoneImpl.prototype.isNone = function () {
+        return true;
+    };
+    NoneImpl.prototype[Symbol.iterator] = function () {
+        return {
+            next: function () {
+                return { done: true, value: undefined };
+            },
+        };
+    };
+    NoneImpl.prototype.unwrapOr = function (val) {
+        return val;
+    };
+    NoneImpl.prototype.expect = function (msg) {
+        throw new Error("".concat(msg));
+    };
+    NoneImpl.prototype.unwrap = function () {
+        throw new Error("Tried to unwrap None");
+    };
+    NoneImpl.prototype.map = function (_mapper) {
+        return this;
+    };
+    NoneImpl.prototype.mapOr = function (default_, _mapper) {
+        return default_;
+    };
+    NoneImpl.prototype.mapOrElse = function (default_, _mapper) {
+        return default_();
+    };
+    NoneImpl.prototype.or = function (other) {
+        return other;
+    };
+    NoneImpl.prototype.orElse = function (other) {
+        return other();
+    };
+    NoneImpl.prototype.andThen = function (op) {
+        return this;
+    };
+    NoneImpl.prototype.toResult = function (error) {
+        return (0, result_js_1.Err)(error);
+    };
+    NoneImpl.prototype.toString = function () {
+        return 'None';
+    };
+    return NoneImpl;
+}());
+// Export None as a singleton, then freeze it so it can't be modified
+exports.None = new NoneImpl();
+Object.freeze(exports.None);
+/**
+ * Contains the success value
+ */
+var SomeImpl = /** @class */ (function () {
+    function SomeImpl(val) {
+        if (!(this instanceof SomeImpl)) {
+            return new SomeImpl(val);
+        }
+        this.value = val;
+    }
+    SomeImpl.prototype.isSome = function () {
+        return true;
+    };
+    SomeImpl.prototype.isNone = function () {
+        return false;
+    };
+    /**
+     * Helper function if you know you have an Some<T> and T is iterable
+     */
+    SomeImpl.prototype[Symbol.iterator] = function () {
+        var obj = Object(this.value);
+        return Symbol.iterator in obj
+            ? obj[Symbol.iterator]()
+            : {
+                next: function () {
+                    return { done: true, value: undefined };
+                },
+            };
+    };
+    SomeImpl.prototype.unwrapOr = function (_val) {
+        return this.value;
+    };
+    SomeImpl.prototype.expect = function (_msg) {
+        return this.value;
+    };
+    SomeImpl.prototype.unwrap = function () {
+        return this.value;
+    };
+    SomeImpl.prototype.map = function (mapper) {
+        return (0, exports.Some)(mapper(this.value));
+    };
+    SomeImpl.prototype.mapOr = function (_default_, mapper) {
+        return mapper(this.value);
+    };
+    SomeImpl.prototype.mapOrElse = function (_default_, mapper) {
+        return mapper(this.value);
+    };
+    SomeImpl.prototype.or = function (_other) {
+        return this;
+    };
+    SomeImpl.prototype.orElse = function (_other) {
+        return this;
+    };
+    SomeImpl.prototype.andThen = function (mapper) {
+        return mapper(this.value);
+    };
+    SomeImpl.prototype.toResult = function (error) {
+        return (0, result_js_1.Ok)(this.value);
+    };
+    /**
+     * Returns the contained `Some` value, but never throws.
+     * Unlike `unwrap()`, this method doesn't throw and is only callable on an Some<T>
+     *
+     * Therefore, it can be used instead of `unwrap()` as a maintainability safeguard
+     * that will fail to compile if the type of the Option is later changed to a None that can actually occur.
+     *
+     * (this is the `into_Some()` in rust)
+     */
+    SomeImpl.prototype.safeUnwrap = function () {
+        return this.value;
+    };
+    SomeImpl.prototype.toString = function () {
+        return "Some(".concat((0, utils_js_1.toString)(this.value), ")");
+    };
+    SomeImpl.EMPTY = new SomeImpl(undefined);
+    return SomeImpl;
+}());
+// This allows Some to be callable - possible because of the es5 compilation target
+exports.Some = SomeImpl;
+var Option;
+(function (Option) {
+    /**
+     * Parse a set of `Option`s, returning an array of all `Some` values.
+     * Short circuits with the first `None` found, if any
+     */
+    function all() {
+        var options = [];
+        for (var _i = 0; _i < arguments.length; _i++) {
+            options[_i] = arguments[_i];
+        }
+        var someOption = [];
+        for (var _a = 0, options_1 = options; _a < options_1.length; _a++) {
+            var option = options_1[_a];
+            if (option.isSome()) {
+                someOption.push(option.value);
+            }
+            else {
+                return option;
+            }
+        }
+        return (0, exports.Some)(someOption);
+    }
+    Option.all = all;
+    /**
+     * Parse a set of `Option`s, short-circuits when an input value is `Some`.
+     * If no `Some` is found, returns `None`.
+     */
+    function any() {
+        var options = [];
+        for (var _i = 0; _i < arguments.length; _i++) {
+            options[_i] = arguments[_i];
+        }
+        // short-circuits
+        for (var _a = 0, options_2 = options; _a < options_2.length; _a++) {
+            var option = options_2[_a];
+            if (option.isSome()) {
+                return option;
+            }
+            else {
+                return option;
+            }
+        }
+        // it must be None
+        return exports.None;
+    }
+    Option.any = any;
+    function isOption(value) {
+        return value instanceof exports.Some || value === exports.None;
+    }
+    Option.isOption = isOption;
+})(Option || (exports.Option = Option = {}));
+//# sourceMappingURL=option.js.map
+
+/***/ }),
+
+/***/ 39293:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.Result = exports.Ok = exports.OkImpl = exports.Err = exports.ErrImpl = void 0;
+var utils_js_1 = __nccwpck_require__(91414);
+var option_js_1 = __nccwpck_require__(56456);
+var asyncresult_js_1 = __nccwpck_require__(6861);
+/**
+ * Contains the error value
+ */
+var ErrImpl = /** @class */ (function () {
+    function ErrImpl(val) {
+        if (!(this instanceof ErrImpl)) {
+            return new ErrImpl(val);
+        }
+        this.error = val;
+        var stackLines = new Error().stack.split('\n').slice(2);
+        if (stackLines && stackLines.length > 0 && stackLines[0].includes('ErrImpl')) {
+            stackLines.shift();
+        }
+        this._stack = stackLines.join('\n');
+    }
+    ErrImpl.prototype.isOk = function () {
+        return false;
+    };
+    ErrImpl.prototype.isErr = function () {
+        return true;
+    };
+    ErrImpl.prototype[Symbol.iterator] = function () {
+        return {
+            next: function () {
+                return { done: true, value: undefined };
+            },
+        };
+    };
+    /**
+     * @deprecated in favor of unwrapOr
+     * @see unwrapOr
+     */
+    ErrImpl.prototype.else = function (val) {
+        return val;
+    };
+    ErrImpl.prototype.unwrapOr = function (val) {
+        return val;
+    };
+    ErrImpl.prototype.expect = function (msg) {
+        // The cause casting required because of the current TS definition being overly restrictive
+        // (the definition says it has to be an Error while it can be anything).
+        // See https://github.com/microsoft/TypeScript/issues/45167
+        throw new Error("".concat(msg, " - Error: ").concat((0, utils_js_1.toString)(this.error), "\n").concat(this._stack), { cause: this.error });
+    };
+    ErrImpl.prototype.expectErr = function (_msg) {
+        return this.error;
+    };
+    ErrImpl.prototype.unwrap = function () {
+        // The cause casting required because of the current TS definition being overly restrictive
+        // (the definition says it has to be an Error while it can be anything).
+        // See https://github.com/microsoft/TypeScript/issues/45167
+        throw new Error("Tried to unwrap Error: ".concat((0, utils_js_1.toString)(this.error), "\n").concat(this._stack), { cause: this.error });
+    };
+    ErrImpl.prototype.unwrapErr = function () {
+        return this.error;
+    };
+    ErrImpl.prototype.map = function (_mapper) {
+        return this;
+    };
+    ErrImpl.prototype.andThen = function (op) {
+        return this;
+    };
+    ErrImpl.prototype.mapErr = function (mapper) {
+        return new exports.Err(mapper(this.error));
+    };
+    ErrImpl.prototype.mapOr = function (default_, _mapper) {
+        return default_;
+    };
+    ErrImpl.prototype.mapOrElse = function (default_, _mapper) {
+        return default_(this.error);
+    };
+    ErrImpl.prototype.or = function (other) {
+        return other;
+    };
+    ErrImpl.prototype.orElse = function (other) {
+        return other(this.error);
+    };
+    ErrImpl.prototype.toOption = function () {
+        return option_js_1.None;
+    };
+    ErrImpl.prototype.toString = function () {
+        return "Err(".concat((0, utils_js_1.toString)(this.error), ")");
+    };
+    Object.defineProperty(ErrImpl.prototype, "stack", {
+        get: function () {
+            return "".concat(this, "\n").concat(this._stack);
+        },
+        enumerable: false,
+        configurable: true
+    });
+    ErrImpl.prototype.toAsyncResult = function () {
+        return new asyncresult_js_1.AsyncResult(this);
+    };
+    /** An empty Err */
+    ErrImpl.EMPTY = new ErrImpl(undefined);
+    return ErrImpl;
+}());
+exports.ErrImpl = ErrImpl;
+// This allows Err to be callable - possible because of the es5 compilation target
+exports.Err = ErrImpl;
+/**
+ * Contains the success value
+ */
+var OkImpl = /** @class */ (function () {
+    function OkImpl(val) {
+        if (!(this instanceof OkImpl)) {
+            return new OkImpl(val);
+        }
+        this.value = val;
+    }
+    OkImpl.prototype.isOk = function () {
+        return true;
+    };
+    OkImpl.prototype.isErr = function () {
+        return false;
+    };
+    /**
+     * Helper function if you know you have an Ok<T> and T is iterable
+     */
+    OkImpl.prototype[Symbol.iterator] = function () {
+        var obj = Object(this.value);
+        return Symbol.iterator in obj
+            ? obj[Symbol.iterator]()
+            : {
+                next: function () {
+                    return { done: true, value: undefined };
+                },
+            };
+    };
+    /**
+     * @see unwrapOr
+     * @deprecated in favor of unwrapOr
+     */
+    OkImpl.prototype.else = function (_val) {
+        return this.value;
+    };
+    OkImpl.prototype.unwrapOr = function (_val) {
+        return this.value;
+    };
+    OkImpl.prototype.expect = function (_msg) {
+        return this.value;
+    };
+    OkImpl.prototype.expectErr = function (msg) {
+        throw new Error(msg);
+    };
+    OkImpl.prototype.unwrap = function () {
+        return this.value;
+    };
+    OkImpl.prototype.unwrapErr = function () {
+        // The cause casting required because of the current TS definition being overly restrictive
+        // (the definition says it has to be an Error while it can be anything).
+        // See https://github.com/microsoft/TypeScript/issues/45167
+        throw new Error("Tried to unwrap Ok: ".concat((0, utils_js_1.toString)(this.value)), { cause: this.value });
+    };
+    OkImpl.prototype.map = function (mapper) {
+        return new exports.Ok(mapper(this.value));
+    };
+    OkImpl.prototype.andThen = function (mapper) {
+        return mapper(this.value);
+    };
+    OkImpl.prototype.mapErr = function (_mapper) {
+        return this;
+    };
+    OkImpl.prototype.mapOr = function (_default_, mapper) {
+        return mapper(this.value);
+    };
+    OkImpl.prototype.mapOrElse = function (_default_, mapper) {
+        return mapper(this.value);
+    };
+    OkImpl.prototype.or = function (_other) {
+        return this;
+    };
+    OkImpl.prototype.orElse = function (_other) {
+        return this;
+    };
+    OkImpl.prototype.toOption = function () {
+        return (0, option_js_1.Some)(this.value);
+    };
+    /**
+     * Returns the contained `Ok` value, but never throws.
+     * Unlike `unwrap()`, this method doesn't throw and is only callable on an Ok<T>
+     *
+     * Therefore, it can be used instead of `unwrap()` as a maintainability safeguard
+     * that will fail to compile if the error type of the Result is later changed to an error that can actually occur.
+     *
+     * (this is the `into_ok()` in rust)
+     */
+    OkImpl.prototype.safeUnwrap = function () {
+        return this.value;
+    };
+    OkImpl.prototype.toString = function () {
+        return "Ok(".concat((0, utils_js_1.toString)(this.value), ")");
+    };
+    OkImpl.prototype.toAsyncResult = function () {
+        return new asyncresult_js_1.AsyncResult(this);
+    };
+    OkImpl.EMPTY = new OkImpl(undefined);
+    return OkImpl;
+}());
+exports.OkImpl = OkImpl;
+// This allows Ok to be callable - possible because of the es5 compilation target
+exports.Ok = OkImpl;
+var Result;
+(function (Result) {
+    /**
+     * Parse a set of `Result`s, returning an array of all `Ok` values.
+     * Short circuits with the first `Err` found, if any
+     */
+    function all() {
+        var results = [];
+        for (var _i = 0; _i < arguments.length; _i++) {
+            results[_i] = arguments[_i];
+        }
+        var okResult = [];
+        for (var _a = 0, results_1 = results; _a < results_1.length; _a++) {
+            var result = results_1[_a];
+            if (result.isOk()) {
+                okResult.push(result.value);
+            }
+            else {
+                return result;
+            }
+        }
+        return new exports.Ok(okResult);
+    }
+    Result.all = all;
+    /**
+     * Parse a set of `Result`s, short-circuits when an input value is `Ok`.
+     * If no `Ok` is found, returns an `Err` containing the collected error values
+     */
+    function any() {
+        var results = [];
+        for (var _i = 0; _i < arguments.length; _i++) {
+            results[_i] = arguments[_i];
+        }
+        var errResult = [];
+        // short-circuits
+        for (var _a = 0, results_2 = results; _a < results_2.length; _a++) {
+            var result = results_2[_a];
+            if (result.isOk()) {
+                return result;
+            }
+            else {
+                errResult.push(result.error);
+            }
+        }
+        // it must be a Err
+        return new exports.Err(errResult);
+    }
+    Result.any = any;
+    /**
+     * Wrap an operation that may throw an Error (`try-catch` style) into checked exception style
+     * @param op The operation function
+     */
+    function wrap(op) {
+        try {
+            return new exports.Ok(op());
+        }
+        catch (e) {
+            return new exports.Err(e);
+        }
+    }
+    Result.wrap = wrap;
+    /**
+     * Wrap an async operation that may throw an Error (`try-catch` style) into checked exception style
+     * @param op The operation function
+     */
+    function wrapAsync(op) {
+        try {
+            return op()
+                .then(function (val) { return new exports.Ok(val); })
+                .catch(function (e) { return new exports.Err(e); });
+        }
+        catch (e) {
+            return Promise.resolve(new exports.Err(e));
+        }
+    }
+    Result.wrapAsync = wrapAsync;
+    function isResult(val) {
+        return val instanceof exports.Err || val instanceof exports.Ok;
+    }
+    Result.isResult = isResult;
+})(Result || (exports.Result = Result = {}));
+//# sourceMappingURL=result.js.map
+
+/***/ }),
+
+/***/ 91414:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.toString = void 0;
+function toString(val) {
+    var value = String(val);
+    if (value === '[object Object]') {
+        try {
+            value = JSON.stringify(val);
+        }
+        catch (_a) { }
+    }
+    return value;
+}
+exports.toString = toString;
+//# sourceMappingURL=utils.js.map
+
+/***/ }),
+
 /***/ 23619:
 /***/ ((__unused_webpack_module, exports) => {
 
@@ -363321,13 +364713,21 @@ module.exports = underscoreNodeF._;
 //# sourceMappingURL=underscore-node.cjs.map
 
 
+/***/ }),
+
+/***/ 80478:
+/***/ ((module) => {
+
+"use strict";
+module.exports = JSON.parse('[{"description":"No API keys or secrets are stored in repository","responsibles":1,"more":""},{"description":"The app does not provide password login","responsibles":1,"more":""},{"description":"Passwords are not stored","responsibles":1,"more":""},{"description":"Passwords are stored hashed with salt and salt is not stored in the repository","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/hash.md)"},{"description":"Input that ends up in DOM is properly sanitized","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/xss.md)"},{"description":"All user inputs have reasonable validations","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/validation.md)"},{"description":"The app is not using cookies","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"},{"description":"The app is using cookies and cookies are properly configured","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"},{"description":"The app uses JWT with a secret and the secret is not stored in the repository","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"},{"description":"Authorization and user roles (RBAC) were reviewed thoroughly","responsibles":2,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/authorization.md)"},{"description":"CORS headers do not use `*`","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cors.md)"},{"description":"CSP headers are properly configured (no `unsafe-inline` or `unsafe-eval`)","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/csp.md)"},{"description":"DoS defense mechanism is implemented","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/dos.md)"},{"description":"YAML/XML parsing is not used or used YAML/XML parsers have disabled DTD","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/dos.md)"},{"description":"The app implements CSRF prevention","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/csrf.md)"},{"description":"The app has a rate limitter","responsibles":1,"more":""},{"description":"The app has disabled GraphQL introspection and schema registry","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/graphql.md)"},{"description":"The app has set GraphQL complexity query limits","responsibles":1,"more":"[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/graphql.md)"},{"description":"`sitemap.xml` does not leak any routes with sensitive data","responsibles":1,"more":""},{"description":"Cloud storage is (private) configured to not leak any sensitive data publicly","responsibles":1,"more":""},{"description":"Security Dashboard checks weekly vulnerable dependencies https://dep.panter.swiss/","responsibles":1,"more":""},{"description":"The app has `.well-known/security.txt` https://securitytxt.org/","responsibles":1,"more":""}]');
+
 /***/ }),
 
 /***/ 4147:
 /***/ ((module) => {
 
 "use strict";
-module.exports = JSON.parse('{"name":"@catladder/cli","description":"Panter cli tool for Kubernetes","author":"Marco Wettstein <maw@panter.ch>","homepage":"https://git.panter.ch/catladder/catladder/#readme","bugs":"https://git.panter.ch/catladder/catladder/issues","repository":{"type":"git","url":"git+https://git.panter.ch/catladder/catladder.git","directory":"cli"},"keywords":["GitLab","cloud","cli","gitlab-ci","ci/cd","pipeline","deployment","devops","automation","typescript"],"contributors":[{"name":"Marco Wettstein","email":"maw@panter.ch"},{"name":"Michael Leu","email":"leu@panter.ch"},{"name":"Luboš Matejčík","email":"lma@panter.ch"},{"name":"Kaspar Vollenweider","email":"vok@panter.ch"},{"name":"Silvan Adrian","email":"sia@panter.ch"},{"name":"Stefan Bakocs","email":"stb@panter.ch"},{"name":"Lukas Brezina","email":"brl@panter.ch"}],"license":"MIT","version":"0.0.0","scripts":{"lint":"eslint \\"src/**/*.ts\\"","lint:fix":"eslint \\"src/**/*.ts\\" --fix","test":"yarn run lint","build":"yarn build:compile && yarn build:bundle","build:bundle":"./scripts/bundle","build:compile":"yarn tsc","build:watch":"yarn tsc -w"},"bin":{"catenv":"./bin/catenv","catladder":"./bin/catladder"},"dependencies":{"ts-node":"^10.9.1"},"engines":{"node":">=12.0.0"},"devDependencies":{"@catladder/pipeline":"0.0.0","@kubernetes/client-node":"^0.16.2","@tsconfig/node14":"^1.0.1","@types/common-tags":"^1.8.0","@types/fs-extra":"^5.0.4","@types/js-yaml":"^4.0.5","@types/lodash":"^4.14.185","@types/memoizee":"^0.4.2","@types/node-fetch":"^2.1.4","@types/request":"^2.48.1","@types/tmp":"^0.2.3","@types/update-notifier":"^2.5.0","@types/vorpal":"^1.12.0","@types/websocket":"^0.0.40","@types/yargs":"^13.0.0","child-process-promise":"^2.2.1","clipboardy":"^2.0.0","command-exists-promise":"^2.0.2","common-tags":"^1.8.0","connection-string-parser":"^1.0.4","dayjs":"^1.10.4","eslint":"^8.7.0","fs-extra":"^7.0.1","gitlab":"^4.4.1","js-yaml":"^4.1.0","lodash":"^4.17.21","memoizee":"^0.4.14","node-fetch":"^2.3.0","open":"^8.4.0","prettier":"^2.5.1","tmp-promise":"^2.0.2","typescript":"^4.5.4","vorpal":"^1.12.0"}}');
+module.exports = JSON.parse('{"name":"@catladder/cli","description":"Panter cli tool for Kubernetes","author":"Marco Wettstein <maw@panter.ch>","homepage":"https://git.panter.ch/catladder/catladder/#readme","bugs":"https://git.panter.ch/catladder/catladder/issues","repository":{"type":"git","url":"git+https://git.panter.ch/catladder/catladder.git","directory":"cli"},"keywords":["GitLab","cloud","cli","gitlab-ci","ci/cd","pipeline","deployment","devops","automation","typescript"],"contributors":[{"name":"Marco Wettstein","email":"maw@panter.ch"},{"name":"Michael Leu","email":"leu@panter.ch"},{"name":"Luboš Matejčík","email":"lma@panter.ch"},{"name":"Kaspar Vollenweider","email":"vok@panter.ch"},{"name":"Silvan Adrian","email":"sia@panter.ch"},{"name":"Stefan Bakocs","email":"stb@panter.ch"},{"name":"Lukas Brezina","email":"brl@panter.ch"}],"license":"MIT","version":"0.0.0","scripts":{"lint":"eslint \\"src/**/*.ts\\"","lint:fix":"eslint \\"src/**/*.ts\\" --fix","test":"yarn run lint","build":"yarn build:compile && yarn build:bundle","build:bundle":"./scripts/bundle","build:compile":"yarn tsc","build:watch":"yarn tsc -w"},"bin":{"catci":"./bin/catci","catenv":"./bin/catenv","catladder":"./bin/catladder"},"engines":{"node":">=12.0.0"},"dependencies":{"ts-node":"^10.9.1"},"devDependencies":{"@catladder/pipeline":"0.0.0","@gitbeaker/rest":"^39.28.0","@kubernetes/client-node":"^0.16.2","@tsconfig/node14":"^1.0.1","@types/common-tags":"^1.8.0","@types/fs-extra":"^5.0.4","@types/js-yaml":"^4.0.5","@types/lodash":"^4.14.185","@types/memoizee":"^0.4.2","@types/node-fetch":"^2.1.4","@types/request":"^2.48.1","@types/tmp":"^0.2.3","@types/update-notifier":"^2.5.0","@types/vorpal":"^1.12.0","@types/websocket":"^0.0.40","@types/yargs":"^13.0.0","child-process-promise":"^2.2.1","clipboardy":"^2.0.0","command-exists-promise":"^2.0.2","common-tags":"^1.8.0","connection-string-parser":"^1.0.4","dayjs":"^1.10.4","eslint":"^8.7.0","fs-extra":"^7.0.1","gitlab":"^4.4.1","js-yaml":"^4.1.0","lodash":"^4.17.21","memoizee":"^0.4.14","node-fetch":"^2.3.0","open":"^8.4.0","prettier":"^2.5.1","prettier-plugin-sh":"^0.14.0","tmp-promise":"^2.0.2","ts-results-es":"^4.1.0-alpha.1","typescript":"^4.5.4","vorpal":"^1.12.0"}}');
 
 /***/ }),