@telorun/kernel 0.39.0 → 0.40.0

package/dist/schema-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema-validator.js","sourceRoot":"","sources":["../src/schema-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAiB,eAAe,EAAE,YAAY,EAAY,MAAM,cAAc,CAAC;AACtF,OAAO,SAAoC,MAAM,KAAK,CAAC;AACvD,OAAO,iBAAiB,MAAM,8BAA8B,CAAC;AAC7D,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE9F,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC;AAC3C,0EAA0E;AAC1E,wEAAwE;AACxE,+BAA+B;AAC/B,MAAM,cAAc,GACjB,iBAAyB,CAAC,OAAO,IAAK,iBAAyB,CAAC;AAEnE;;;;qBAIqB;AACrB,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErD;;;;;;;6DAO6D;AAC7D,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;QAClD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtF,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9D,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBACnE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;YACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;AAC1C,MAAM,mBAAmB,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;AAC1D,MAAM,qBAAqB,GAAG,OAAO,WAAW,gBAAgB,mBAAmB,EAAE,CAAC;AAEtF,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAE9D;;;wCAGwC;AACxC,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;4DAiB4D;AAC5D,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACtE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,eAAe;IAiB1B;QAfQ,cAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC1C,eAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QACvC,uBAAkB,GAAG,IAAI,OAAO,EAAyB,CAAC;QAElE;;;sEAG8D;QACtD,kBAAa,GAAG,IAAI,CAAC;QAC7B;;;gCAGwB;QAChB,cAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;QAGnD,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC;YACjB,MAAM,EAAE,KAAK;YACb,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,IAAI;YACjB,mEAAmE;YACnE,iEAAiE;YACjE,kEAAkE;YAClE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACvB,CAAC,CAAC;QACH,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,KAAK,MAAM,EAAE,IAAI;YACf,YAAY;YACZ,aAAa;YACb,cAAc;YACd,gBAAgB;YAChB,qBAAqB;YACrB,yBAAyB;YACzB,oBAAoB;YACpB,sBAAsB;YACtB,qBAAqB;YACrB,eAAe;YACf,aAAa;SACd,EAAE,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,0DAA0D;QAC1D,qEAAqE;QACrE,6DAA6D;QAC7D,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACzC,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,MAAc;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,KAAiB;QAC1C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;;;uDAQmD;IACnD,WAAW,CAAC,GAAuB,EAAE,IAA0B;QAC7D,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,IAAI,CAAC,aAAa,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC;IAC3C,CAAC;IAED,OAAO,CAAC,MAAW;QACjB,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAgB,CAAC,CAAC;YAC7D,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;QAED,MAAM,YAAY,GAChB,CAAC,MAAM,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;YACrD,OAAO,IAAI,MAAM;YACjB,OAAO,IAAI,MAAM;YACjB,OAAO,IAAI,MAAM;YACjB,MAAM,IAAI,MAAM,CAAC;QACnB,MAAM,UAAU,GAAG,YAAY;YAC7B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7B,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACN,MAAM,YAAY,GAChB,UAAU,CAAC,oBAAoB,KAAK,KAAK;YACvC,CAAC,CAAC;gBACE,GAAG,UAAU;gBACb,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC5B,GAAG,UAAU,CAAC,UAAU;iBACzB;aACF;YACH,CAAC,CAAC,UAAU,CAAC;QAEjB,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,wEAAwE;QACxE,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,CAAwB,CAAC;QAExE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC9B,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC;SAC5C,CAAC,CACH;aACA,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAgB,EAAE,YAAY,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE7D,MAAM,SAAS,GAAG;YAChB,QAAQ,EAAE,CAAC,IAAS,EAAE,EAAE;gBACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,YAAY,CACpB,uCAAuC,EACvC,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAC5F,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC,IAAS,EAAE,EAAE;gBACrB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACpC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAgB,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;yDAUqD;IAC7C,sBAAsB,CAC5B,MAAW,EACX,IAAY;QAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAClB,MAAM,OAAO,GAAG,IAAI,QAAQ,CAC1B,SAAS,EACT,QAAQ,EACR,SAAS,EACT,GAAG,IAAI,0BAA0B,CAClC,CAAC;oBACF,MAAM,GAAG,GAAqB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;oBAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;oBACxD,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;wBACjC,OAAO,MAA0B,CAAC;oBACpC,CAAC;gBACH,CAAC;gBACD,2DAA2D;gBAC3D,6DAA6D;gBAC7D,uCAAuC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC7G,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAqB,CAAC;QAC9D,IAAI,QAAQ,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAClE,MAAM,OAAO,GAAG,aAAa,SAAS,KAAK,IAAI,EAAE,CAAC;gBAClD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+CAA+C,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC9G,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,gBAAgB,CAAC,IAAmB,EAAE,QAAgB,EAAE,KAAiB;QACvE,OAAO;YACL,QAAQ,EAAE,CAAC,IAAS,EAAE,EAAE;gBACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,MAAe,CAAC;oBACpB,IAAI,CAAC;wBACH,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpD,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,IAAI,YAAY,CACpB,4BAA4B,EAC5B,SAAS,QAAQ,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACjG,CAAC;oBACJ,CAAC;oBACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;wBACpB,MAAM,IAAI,YAAY,CACpB,IAAI,CAAC,IAAI,IAAI,4BAA4B,EACzC,IAAI,CAAC,OAAO,IAAI,SAAS,QAAQ,8BAA8B,IAAI,CAAC,IAAI,iBAAiB,CAC1F,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC,IAAS,EAAE,EAAE;gBACrB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACH,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI;4BAAE,OAAO,KAAK,CAAC;oBACtE,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,KAAK,CAAC;oBACf,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"schema-validator.js","sourceRoot":"","sources":["../src/schema-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAiB,eAAe,EAAE,YAAY,EAAY,MAAM,cAAc,CAAC;AACtF,OAAO,SAAoC,MAAM,KAAK,CAAC;AACvD,OAAO,iBAAiB,MAAM,8BAA8B,CAAC;AAC7D,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC;AAC3C,0EAA0E;AAC1E,wEAAwE;AACxE,+BAA+B;AAC/B,MAAM,cAAc,GACjB,iBAAyB,CAAC,OAAO,IAAK,iBAAyB,CAAC;AAEnE;;;;qBAIqB;AACrB,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErD;;;;;;;6DAO6D;AAC7D,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;QAClD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtF,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9D,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBACnE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;YACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;AAC1C,MAAM,mBAAmB,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;AAC1D,MAAM,qBAAqB,GAAG,OAAO,WAAW,gBAAgB,mBAAmB,EAAE,CAAC;AAEtF,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAE9D;;;wCAGwC;AACxC,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6EA6B6E;AAC7E,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACtE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,eAAe;IAiB1B;QAfQ,cAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC1C,eAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QACvC,uBAAkB,GAAG,IAAI,OAAO,EAAyB,CAAC;QAElE;;;sEAG8D;QACtD,kBAAa,GAAG,IAAI,CAAC;QAC7B;;;gCAGwB;QAChB,cAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;QAGnD,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC;YACjB,MAAM,EAAE,KAAK;YACb,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,IAAI;YACjB,mEAAmE;YACnE,iEAAiE;YACjE,kEAAkE;YAClE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACvB,CAAC,CAAC;QACH,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,KAAK,MAAM,EAAE,IAAI;YACf,YAAY;YACZ,aAAa;YACb,cAAc;YACd,gBAAgB;YAChB,qBAAqB;YACrB,yBAAyB;YACzB,oBAAoB;YACpB,sBAAsB;YACtB,qBAAqB;YACrB,eAAe;YACf,aAAa;SACd,EAAE,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,0DAA0D;QAC1D,qEAAqE;QACrE,6DAA6D;QAC7D,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACzC,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,MAAc;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,KAAiB;QAC1C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;;;uDAQmD;IACnD,WAAW,CAAC,GAAuB,EAAE,IAA0B;QAC7D,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,IAAI,CAAC,aAAa,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC;IAC3C,CAAC;IAED,OAAO,CAAC,MAAW;QACjB,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAgB,CAAC,CAAC;YAC7D,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;QAED,MAAM,YAAY,GAChB,CAAC,MAAM,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;YACrD,OAAO,IAAI,MAAM;YACjB,OAAO,IAAI,MAAM;YACjB,OAAO,IAAI,MAAM;YACjB,MAAM,IAAI,MAAM,CAAC;QACnB,MAAM,UAAU,GAAG,YAAY;YAC7B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7B,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACN,MAAM,YAAY,GAChB,UAAU,CAAC,oBAAoB,KAAK,KAAK;YACvC,CAAC,CAAC;gBACE,GAAG,UAAU;gBACb,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC5B,GAAG,UAAU,CAAC,UAAU;iBACzB;aACF;YACH,CAAC,CAAC,UAAU,CAAC;QAEjB,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,wEAAwE;QACxE,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,CAAwB,CAAC;QAExE,mEAAmE;QACnE,uEAAuE;QACvE,uEAAuE;QACvE,4EAA4E;QAC5E,mEAAmE;QACnE,+BAA+B;QAC/B,MAAM,SAAS,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAEtD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC9B,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,SAAS;SAClB,CAAC,CACH;aACA,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAgB,EAAE,YAAY,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAG;YAChB,QAAQ,EAAE,CAAC,IAAS,EAAE,EAAE;gBACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,YAAY,CACpB,uCAAuC,EACvC,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAC5F,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC,IAAS,EAAE,EAAE;gBACrB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;SACF,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACpC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAgB,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;yDAUqD;IAC7C,sBAAsB,CAC5B,MAAW,EACX,IAAY;QAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAClB,MAAM,OAAO,GAAG,IAAI,QAAQ,CAC1B,SAAS,EACT,QAAQ,EACR,SAAS,EACT,GAAG,IAAI,0BAA0B,CAClC,CAAC;oBACF,MAAM,GAAG,GAAqB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;oBAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;oBACxD,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;wBACjC,OAAO,MAA0B,CAAC;oBACpC,CAAC;gBACH,CAAC;gBACD,2DAA2D;gBAC3D,6DAA6D;gBAC7D,uCAAuC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC7G,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAqB,CAAC;QAC9D,IAAI,QAAQ,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAClE,MAAM,OAAO,GAAG,aAAa,SAAS,KAAK,IAAI,EAAE,CAAC;gBAClD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+CAA+C,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC9G,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,gBAAgB,CAAC,IAAmB,EAAE,QAAgB,EAAE,KAAiB;QACvE,OAAO;YACL,QAAQ,EAAE,CAAC,IAAS,EAAE,EAAE;gBACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,MAAe,CAAC;oBACpB,IAAI,CAAC;wBACH,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpD,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,IAAI,YAAY,CACpB,4BAA4B,EAC5B,SAAS,QAAQ,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACjG,CAAC;oBACJ,CAAC;oBACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;wBACpB,MAAM,IAAI,YAAY,CACpB,IAAI,CAAC,IAAI,IAAI,4BAA4B,EACzC,IAAI,CAAC,OAAO,IAAI,SAAS,QAAQ,8BAA8B,IAAI,CAAC,IAAI,iBAAiB,CAC1F,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC,IAAS,EAAE,EAAE;gBACrB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACH,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI;4BAAE,OAAO,KAAK,CAAC;oBACtE,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,KAAK,CAAC;oBACf,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telorun/kernel",
-  "version": "0.39.0",
+  "version": "0.40.0",
   "description": "Telo Runtime - A lightweight, polyglot execution host.",
   "keywords": [
     "telo",
@@ -47,7 +47,7 @@
   "dependencies": {
     "@marcbachmann/cel-js": "^7.6.1",
     "@sinclair/typebox": "^0.34.48",
-    "@telorun/analyzer": "0.29.0",
+    "@telorun/analyzer": "0.30.0",
     "@telorun/glob": "0.2.0",
     "@telorun/templating": "0.10.0",
     "ajv": "^8.17.1",

package/src/application-env.ts

@@ -80,6 +80,25 @@ export function resolveApplicationEnv(
   return { variables, secrets, ports };
 }
 
+/**
+ * Collect the host env-var *names* the root Application binds — the `env:` key
+ * of every `variables` / `secrets` / `ports` entry. This is the denied set for
+ * the controller `process.env` guardrail (see `host-env.ts`): a controller must
+ * read these through `ctx.env` / the declared binding, never the raw env var.
+ */
+export function collectDeclaredEnvKeys(manifest: Record<string, any>): string[] {
+  const keys: string[] = [];
+  for (const block of [manifest.variables, manifest.secrets, manifest.ports]) {
+    if (!block || typeof block !== "object" || Array.isArray(block)) continue;
+    for (const entry of Object.values(block as Record<string, { env?: unknown }>)) {
+      if (entry && typeof entry === "object" && typeof entry.env === "string") {
+        keys.push(entry.env);
+      }
+    }
+  }
+  return keys;
+}
+
 /**
  * Build-time cache warm: compile — but do NOT validate — the residual schema
  * for every `variables` / `secrets` / `ports` entry the runtime

package/src/controller-loaders/bundle-builder.ts

@@ -2,6 +2,7 @@ import { existsSync } from "node:fs";
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
 
+import { hostEnv } from "../host-env.js";
 import { REALM_COLLAPSE_NAMES } from "./realm.js";
 
 /**
@@ -27,7 +28,7 @@ import { REALM_COLLAPSE_NAMES } from "./realm.js";
 const BUNDLE_PREFIX = ".telobundle.";
 
 function bundlingEnabled(): boolean {
-  const v = process.env.TELO_CONTROLLER_BUNDLE?.trim().toLowerCase();
+  const v = hostEnv().TELO_CONTROLLER_BUNDLE?.trim().toLowerCase();
   return !(v === "0" || v === "false" || v === "no" || v === "off");
 }
 
@@ -224,7 +225,7 @@ async function buildBundle(bundleFile: string, entryFile: string): Promise<strin
     // location. esbuild rewrites `__dirname`/`__filename` to `import.meta.url`,
     // so its presence flags this — fall back to the loose import for those.
     if (DIR_RELATIVE.test(out.text)) {
-      if (process.env.TELO_BUNDLE_DEBUG) {
+      if (hostEnv().TELO_BUNDLE_DEBUG) {
         process.stderr.write(`[bundle] skipped ${entryFile}: directory-relative asset resolution\n`);
       }
       return null;
@@ -236,7 +237,7 @@ async function buildBundle(bundleFile: string, entryFile: string): Promise<strin
     await fs.writeFile(okMarker(bundleFile), "").catch(() => {});
     return bundleFile;
   } catch (err) {
-    if (process.env.TELO_BUNDLE_DEBUG) {
+    if (hostEnv().TELO_BUNDLE_DEBUG) {
       process.stderr.write(
         `[bundle] skipped ${entryFile}: ${err instanceof Error ? err.message.split("\n")[0] : String(err)}\n`,
       );

package/src/controller-loaders/napi-loader.ts

@@ -6,6 +6,8 @@ import { PackageURL } from "packageurl-js";
 import * as path from "path";
 import { promisify } from "util";
 
+import { hostEnv } from "../host-env.js";
+
 const execFileAsync = promisify(execFile);
 const requireFromHere = createRequire(import.meta.url);
 
@@ -211,7 +213,7 @@ export class NapiControllerLoader {
   ): Promise<BuildAndLoadResult> {
     _napiBuildAttempts++;
     try {
-      await execFileAsync("rustc", ["--version"]);
+      await execFileAsync("rustc", ["--version"], { env: hostEnv() });
     } catch {
       throw new ControllerEnvMissingError("rustc not found on PATH");
     }
@@ -225,6 +227,7 @@ export class NapiControllerLoader {
       await execFileAsync("cargo", ["build", "--release"], {
         cwd: cratePath,
         maxBuffer: 32 * 1024 * 1024,
+        env: hostEnv(),
       });
     } catch (err: any) {
       const stderr = err?.stderr ? `\n${err.stderr}` : "";
@@ -308,7 +311,7 @@ async function resolveCrateMetadata(
     "--manifest-path",
     path.join(cratePath, "Cargo.toml"),
     "--no-deps",
-  ], { maxBuffer: 32 * 1024 * 1024 });
+  ], { maxBuffer: 32 * 1024 * 1024, env: hostEnv() });
   const metadata = JSON.parse(result.stdout);
   const cratePackage = metadata.packages?.find(
     (p: any) => p.manifest_path === path.join(cratePath, "Cargo.toml"),

package/src/controller-loaders/npm-loader.ts

@@ -8,6 +8,7 @@ import { PackageURL } from "packageurl-js";
 import * as path from "path";
 import { fileURLToPath, pathToFileURL } from "url";
 import { promisify } from "util";
+import { hostEnv } from "../host-env.js";
 import { tryBuildControllerBundle } from "./bundle-builder.js";
 import { ControllerEnvMissingError } from "./napi-loader.js";
 import { REALM_COLLAPSE_NAMES } from "./realm.js";
@@ -22,7 +23,7 @@ const requireFromHere = createRequire(import.meta.url);
  * sequenced, but predictability beats late-binding here. Override via
  * `TELO_PKG_MANAGER` (e.g. `pnpm`, `bun`).
  */
-const PACKAGE_MANAGER = process.env.TELO_PKG_MANAGER ?? "npm";
+const PACKAGE_MANAGER = hostEnv().TELO_PKG_MANAGER ?? "npm";
 
 /**
  * Make the installer ignore controllers' declared `peerDependencies` ranges.
@@ -637,7 +638,7 @@ async function isLockStale(lockPath: string): Promise<boolean> {
 
 async function runPackageManager(cwd: string, args: string[]): Promise<void> {
   try {
-    await execFileAsync(PACKAGE_MANAGER, args, { cwd, maxBuffer: 32 * 1024 * 1024 });
+    await execFileAsync(PACKAGE_MANAGER, args, { cwd, maxBuffer: 32 * 1024 * 1024, env: hostEnv() });
   } catch (err: any) {
     const isMissing =
       err?.code === "ENOENT" ||
@@ -736,10 +737,11 @@ function computeInstallRoot(entryUrl: string): string {
   }
   const scheme = schemeMatch[1].toLowerCase();
   if (scheme === "http" || scheme === "https") {
+    const env = hostEnv();
     const cacheBase =
-      process.env.TELO_NPM_CACHE_DIR ||
-      (process.env.XDG_CACHE_HOME
-        ? path.join(process.env.XDG_CACHE_HOME, "telo", "remote")
+      env.TELO_NPM_CACHE_DIR ||
+      (env.XDG_CACHE_HOME
+        ? path.join(env.XDG_CACHE_HOME, "telo", "remote")
         : path.join(os.homedir(), ".cache", "telo", "remote"));
     return path.join(cacheBase, sha256(entryUrl), "npm");
   }

package/src/evaluation-context.ts

@@ -794,8 +794,7 @@ export class EvaluationContext implements IEvaluationContext {
    * trace — `variables`, masked `secrets`, resource `snapshots`, `ports`. Attached
    * to a trace's *root* span so the consumer can inspect what data the execution
    * could reference (beyond its own inputs/outputs). Only a `ModuleContext` owns a
-   * root scope; child scopes return undefined. Host `env` is deliberately omitted
-   * (it is the raw process environment — too broad/sensitive to dump).
+   * root scope; child scopes return undefined.
    */
   protected traceRootScope(): Record<string, unknown> | undefined {
     return undefined;

package/src/host-env.ts

@@ -0,0 +1,142 @@
+/**
+ * Host-environment access for the kernel, and the controller `process.env`
+ * guardrail.
+ *
+ * Controllers (and their dependencies) should not bypass a declared binding by
+ * reading its raw host env var: host configuration reaches a controller only
+ * through `ctx.env` (the snapshot the kernel threads in) or its declared
+ * `variables` / `secrets` / `ports`. To enforce that, {@link lockControllerEnv}
+ * replaces the global `process.env` with a Proxy that denies reads of exactly
+ * the env-var names the manifest binds — every other key (`NODE_ENV`, an SDK's
+ * own `AWS_*` / `SMITHY_*` config, `~/.aws` path lookups, …) passes through
+ * untouched. The kernel carries no allowlist of vendor env conventions; the
+ * denied set is derived from the manifest.
+ *
+ * This is a **guardrail, not an isolation boundary**: controllers run in the
+ * same process, so a determined one can still reach the OS environment by other
+ * means (a child process, `/proc/self/environ`, re-`defineProperty`). The Proxy
+ * stops casual / accidental bypass of a declared binding and makes it visible.
+ *
+ * The kernel itself still needs a handful of `TELO_*` / cache env vars. Those
+ * reads go through {@link hostEnv}, which returns a reference captured at module
+ * import — before any lock — so they keep working once the Proxy is installed.
+ */
+
+// The real environment, captured before any lock — and stored on `globalThis`
+// under a process-global symbol so it is shared across *every* `@telorun/kernel`
+// module instance in the process. This matters because a controller can load a
+// second copy of the kernel: the `@telorun/test` suite runner imports `Kernel`
+// to spawn child kernels in-process. That second copy's module body runs *after*
+// the main kernel already locked `process.env`, so a plain `process.env` capture
+// there would grab the (proxied) env. Reading the shared snapshot instead keeps
+// every instance's `hostEnv()` — and the subprocess env it feeds — real.
+//
+// `lockControllerEnv` only rebinds the `process.env` *property*; it never mutates
+// the original object, so this reference keeps yielding real values after a lock.
+const REAL_ENV_KEY = Symbol.for("@telorun/kernel:host-env:real-env");
+const LOCKED_KEY = Symbol.for("@telorun/kernel:host-env:locked");
+const DENIED_KEYS_KEY = Symbol.for("@telorun/kernel:host-env:denied-keys");
+const globals = globalThis as Record<symbol, unknown>;
+const REAL_ENV: NodeJS.ProcessEnv = (globals[REAL_ENV_KEY] ??=
+  process.env) as NodeJS.ProcessEnv;
+
+// Process-global set of denied env-var names — the union of every booted
+// kernel's declared `variables` / `secrets` / `ports` env keys. Shared on
+// `globalThis` so a second in-process `@telorun/kernel` copy (the test suite
+// runner spawns child kernels) and the already-installed Proxy read the same
+// live set: a kernel that boots *after* the Proxy is installed still contributes
+// its declared keys (see {@link lockControllerEnv}).
+const DENIED_KEYS: Set<string> = (globals[DENIED_KEYS_KEY] ??= new Set<string>()) as Set<string>;
+
+/** The real host environment. Kernel-internal use only — never handed to
+ *  controllers (they get the sanctioned `ctx.env` snapshot instead). */
+export function hostEnv(): NodeJS.ProcessEnv {
+  return REAL_ENV;
+}
+
+/**
+ * Build the guardrail Proxy over `backing`. A key in `deniedKeys` reads back
+ * `undefined` — even when set — and is hidden from `in` / enumeration, with the
+ * first read of each such key reported via `warn`. Every other key passes
+ * through transparently (real value, no warning, visible to `in` /
+ * enumeration). Writes pass through to `backing`.
+ *
+ * `deniedKeys` is consulted live on every trap, so keys added after the Proxy
+ * is installed take effect immediately (a later kernel's bindings).
+ *
+ * Exported for testing; production installs it via {@link lockControllerEnv}.
+ */
+export function createLockedEnv(
+  backing: NodeJS.ProcessEnv,
+  deniedKeys: ReadonlySet<string>,
+  warn: (key: string) => void,
+): NodeJS.ProcessEnv {
+  const warned = new Set<string>();
+  const denied = (key: string | symbol): boolean =>
+    typeof key === "string" && deniedKeys.has(key);
+
+  return new Proxy(backing, {
+    get(target, key) {
+      if (!denied(key)) return Reflect.get(target, key);
+      const name = key as string;
+      if (!warned.has(name)) {
+        warned.add(name);
+        warn(name);
+      }
+      return undefined;
+    },
+    has(target, key) {
+      return !denied(key) && Reflect.has(target, key);
+    },
+    ownKeys(target) {
+      return Reflect.ownKeys(target).filter((key) => !denied(key));
+    },
+    getOwnPropertyDescriptor(target, key) {
+      return denied(key) ? undefined : Reflect.getOwnPropertyDescriptor(target, key);
+    },
+    set(target, key, value) {
+      return Reflect.set(target, key, value);
+    },
+  });
+}
+
+/**
+ * Install the {@link createLockedEnv} guardrail over the global `process.env`,
+ * denying reads of `deniedKeys` — the booting kernel's declared `variables` /
+ * `secrets` / `ports` env-var names.
+ *
+ * The denied set is process-global and additive: every call unions its keys
+ * into the shared {@link DENIED_KEYS} set, even after the Proxy is installed, so
+ * each kernel that boots in the process contributes its bindings. Several
+ * `Kernel` instances can boot in one process (the test suite runs child kernels
+ * in-process), each with its own manifest; the union denies any key declared by
+ * any of them — strictly safe, since a controller has no reason to read a
+ * sibling app's declared key from the raw env.
+ *
+ * The Proxy install itself is idempotent — the flag lives on `globalThis`, so a
+ * second `@telorun/kernel` instance sees the first instance's lock and does not
+ * re-wrap. The property is left non-writable so a casual `process.env = {…}`
+ * cannot drop the guardrail (`configurable` stays true so tooling can still
+ * manage it).
+ *
+ * `warn` binds to the first kernel that boots in the process. In the common
+ * one-kernel-per-process case that is the right sink; with in-process child
+ * kernels a stray read warns to the first kernel's stderr (and dedup is
+ * process-global). Acceptable — child kernels receive an explicit env and have
+ * no reason to read a declared key from `process.env`.
+ */
+export function lockControllerEnv(
+  deniedKeys: Iterable<string>,
+  warn: (key: string) => void,
+): void {
+  for (const key of deniedKeys) DENIED_KEYS.add(key);
+  if (globals[LOCKED_KEY]) return;
+  globals[LOCKED_KEY] = true;
+
+  Object.defineProperty(process, "env", {
+    value: createLockedEnv(REAL_ENV, DENIED_KEYS, warn),
+    writable: false,
+    enumerable: true,
+    configurable: true,
+  });
+}

package/src/kernel.ts

@@ -32,6 +32,7 @@ import {
 import { parseArgs } from "util";
 import { ControllerRegistry } from "./controller-registry.js";
 import { EventBus } from "./events.js";
+import { hostEnv, lockControllerEnv } from "./host-env.js";
 import { KernelTracer } from "./tracing.js";
 import { ModuleContext } from "./module-context.js";
 import { ResourceContextImpl } from "./resource-context.js";
@@ -48,6 +49,7 @@ import {
   resolveCacheRoot,
 } from "./manifest-sources/local-manifest-cache-source.js";
 import {
+  collectDeclaredEnvKeys,
   precompileApplicationEnvSchemas,
   precompileDefinitionSchemas,
   resolveApplicationEnv,
@@ -119,6 +121,9 @@ export class Kernel implements IKernel {
    *  per name. Surfaced via {@link getResolvedPorts} so a host can advertise where
    *  the running app is reachable. */
   private _resolvedPorts: Array<{ name: string; port: number; protocol: "tcp" | "udp" }> = [];
+  // Host env-var names the root Application binds via `variables`/`secrets`/
+  // `ports`; the denied set for the `process.env` guardrail installed at boot.
+  private _declaredEnvKeys: string[] = [];
   /** The `.telo` cache root for this load, resolved once in `load()` and
    *  threaded to the validator, analysis stamp, and npm install root. */
   private _cacheRoot?: string | null;
@@ -148,7 +153,7 @@ export class Kernel implements IKernel {
     this.stdin = options.stdin ?? process.stdin;
     this.stdout = options.stdout ?? process.stdout;
     this.stderr = options.stderr ?? process.stderr;
-    this.env = options.env ?? process.env;
+    this.env = options.env ?? hostEnv();
     this.argv = options.argv ?? [];
     this.registryUrl = options.registryUrl;
     this.loader = new Loader(defaultSources(this.registryUrl), { celHandlers: nodeCelHandlers });
@@ -338,7 +343,6 @@ export class Kernel implements IKernel {
       [],
       this._createInstance.bind(this),
       (event, payload, metadata) => this.eventBus.emit(event, payload, metadata),
-      this.env,
     );
     this.rootContext.tracer = this.tracer;
     // Initialize built-in Runtime definitions first
@@ -551,6 +555,9 @@ export class Kernel implements IKernel {
     }
 
     if (rootApplicationManifest) {
+      this._declaredEnvKeys = collectDeclaredEnvKeys(
+        rootApplicationManifest as Record<string, any>,
+      );
       const { variables, secrets, ports } = resolveApplicationEnv(
         rootApplicationManifest as Record<string, any>,
         this.env,
@@ -606,6 +613,19 @@ export class Kernel implements IKernel {
     }
     this._bootCalled = true;
 
+    // Lock the ambient host environment before any controller runs: a key the
+    // manifest binds via `variables`/`secrets`/`ports` must be read through
+    // `ctx.env` or the declared binding, never the raw `process.env` var. Every
+    // other key passes through. Only real runs reach boot() — analyzeOnly loads
+    // return earlier — so analysis/editor are unaffected. The denied set is
+    // process-global and additive across in-process kernels.
+    lockControllerEnv(this._declaredEnvKeys, (key) => {
+      this.stderr.write(
+        `[telo] controller read process.env.${key} directly — ${key} is a declared ` +
+          `binding; read it through ctx.env or its variable/secret, not raw process.env.\n`,
+      );
+    });
+
     // Call register hooks for controllers actually loaded at this point (built-ins).
     // User-module kinds load their controllers during Phase 3 (Telo.Definition.init),
     // and registerController() fires their register hook there.

package/src/manifest-sources/local-manifest-cache-source.ts

@@ -5,6 +5,8 @@ import * as fs from "fs/promises";
 import * as path from "path";
 import { fileURLToPath, pathToFileURL } from "url";
 
+import { hostEnv } from "../host-env.js";
+
 const CACHE_SUBDIR = ".telo/manifests";
 const HTTP_NAMESPACE = "__http";
 const DEFAULT_MANIFEST_FILENAME = "telo.yaml";
@@ -274,7 +276,7 @@ export function resolveEntryDir(entryPath: string): string | null {
  *  Consumers append the conventional subdirs: `manifests/`, `manifests/__validators/`,
  *  `npm/`. */
 export function resolveCacheRoot(entryPath: string): string | null {
-  const override = process.env.TELO_CACHE_DIR;
+  const override = hostEnv().TELO_CACHE_DIR;
   if (override && override.trim()) return path.resolve(override.trim());
   const entryDir = resolveEntryDir(entryPath);
   return entryDir ? path.join(entryDir, ".telo") : null;

package/src/module-context.ts

@@ -12,31 +12,6 @@ import type {
 import type { EmitEvent, InstanceFactory } from "@telorun/sdk";
 import { EvaluationContext } from "./evaluation-context.js";
 
-/** Wraps process.env so that missing keys return null instead of throwing in CEL.
- * cel-js uses Object.hasOwn(obj, key) before accessing obj[key], so we must
- * intercept getOwnPropertyDescriptor to report every string key as "own".
- * The `constructor` key is special-cased to return `Object` so cel-js's dyn
- * value-type matcher recognises the proxy as a plain map; Node's process.env
- * has an anonymous-function constructor that cel-js otherwise rejects with
- * "Unsupported type: object". */
-function lenientEnv(env: Record<string, string | undefined>): Record<string, string | null> {
-  return new Proxy(env as Record<string, string | null>, {
-    get(target, key) {
-      if (typeof key !== "string") return (target as any)[key];
-      if (key === "constructor") return Object as unknown as string;
-      return key in target ? (target[key] ?? null) : null;
-    },
-    has() {
-      return true;
-    },
-    getOwnPropertyDescriptor(target, key) {
-      if (typeof key !== "string") return Object.getOwnPropertyDescriptor(target, key);
-      const value = key in target ? (target[key] ?? null) : null;
-      return { configurable: true, enumerable: true, writable: true, value };
-    },
-  });
-}
-
 function collectSecretValues(secrets: Record<string, unknown>): Set<string> {
   const values = new Set<string>();
   for (const value of Object.values(secrets)) {
@@ -155,7 +130,6 @@ export class ModuleContext extends EvaluationContext implements IModuleContext {
     private targets: BootTarget[] = [],
     createInstance: InstanceFactory = async () => null,
     emit: EmitEvent,
-    private readonly _hostEnv?: Record<string, string | undefined>,
   ) {
     super(source, {}, createInstance, new Set(), emit);
     this._variables = variables;
@@ -461,7 +435,6 @@ export class ModuleContext extends EvaluationContext implements IModuleContext {
       secrets: this._secrets,
       resources: this._resources,
       ports: this._ports,
-      ...(this._hostEnv ? { env: lenientEnv(this._hostEnv) } : {}),
     };
     this._secretValues = collectSecretValues(this._secrets);
   }

package/src/resource-context.ts

@@ -18,6 +18,7 @@ import {
   type TypeRule,
 } from "@telorun/sdk";
 import { isRefSentinel } from "@telorun/templating";
+import { hostEnv } from "./host-env.js";
 import { stripCompiledValues } from "./schema-compiled-values.js";
 import AjvModule from "ajv";
 import addFormats from "ajv-formats";
@@ -55,7 +56,9 @@ export class ResourceContextImpl implements ResourceContext {
     args?: ParsedArgs,
     ownerPrefix = "",
   ) {
-    this.env = env ?? process.env;
+    // `ctx.env` is the sanctioned host-env channel for controllers — always the
+    // real environment (kernel passes its snapshot), never the locked Proxy.
+    this.env = env ?? hostEnv();
     this.stdin = stdin ?? process.stdin;
     this.stdout = stdout ?? process.stdout;
     this.stderr = stderr ?? process.stderr;

package/src/schema-validator.ts

@@ -8,7 +8,12 @@ import * as fs from "node:fs";
 import { createRequire } from "node:module";
 import * as path from "node:path";
 import { formatAjvErrors } from "./manifest-schemas.js";
-import { isTaggedSentinel, ManifestRootSchema, normalizeRefSlots } from "@telorun/templating";
+import {
+  EXACT_TEMPLATE_REGEX,
+  isTaggedSentinel,
+  ManifestRootSchema,
+  normalizeRefSlots,
+} from "@telorun/templating";
 
 const Ajv = AjvModule.default ?? AjvModule;
 // AJV's standalone subpath is CJS — the default export shows up as either
@@ -78,33 +83,49 @@ function verifyAndExtractBody(text: string): string | null {
   return actual === match[1] ? body : null;
 }
 
-/** Deep-clone `value` collapsing every CEL/template sentinel to its original
- *  `source` string, for use as the validator cache *key* only.
+/** Deep-clone `value`, canonicalizing every CEL/template carrier to the bare
+ *  source text `compileString` records — applied to the schema *before* both
+ *  AJV compilation and cache hashing.
  *
- *  The same `Telo.Definition` schema reaches `compile()` in two forms: the
- *  build-time validator warm feeds the raw analysis graph (parse-time
- *  `{__tagged, engine, source}` sentinels, or plain `${{ }}` strings for inline
- *  templates), while the runtime feeds the compile-loader output (`{__compiled,
- *  source, parts}`). A `!cel` / `!sql` tag embedded anywhere in a schema — most
- *  commonly inside `examples` / `description`, but the loader rewrites them at
- *  any position — therefore serialises differently between the two, so without
- *  normalisation the same kind hashes differently and the runtime misses the
- *  warmed cache (and fails to persist it read-only). Both sentinel shapes carry
- *  the same original `source`, so collapsing each to that string converges them.
+ *  A `Telo.Definition` schema carries inline `${{ }}` templates and `!cel` /
+ *  `!sql` tags (most commonly inside `description` / `examples`, but the loader
+ *  rewrites them at any position), and reaches `compile()` in two forms:
+ *  - the runtime feeds the precompiled tree, where each carrier is a sentinel
+ *    object (`{__compiled, source, parts}` / `{__tagged, engine, source}`);
+ *  - the build-time validator warm (`precompileDefinitionSchemas`) feeds the
+ *    raw analysis graph, where an inline `${{ }}` is still a plain string and a
+ *    `!cel` tag is a `{__tagged}` sentinel.
  *
- *  This rewrites only the hash key — AJV still compiles the full `injected`
- *  schema. Unlike dropping keys by name, it never removes a structural node, so
- *  a property literally named `description` / `examples` keeps its schema in the
- *  key and two genuinely different shapes never collide. */
-function normalizeSentinelsForHash(value: unknown): unknown {
+ *  AJV meta-validates the schema it compiles and rejects a sentinel object
+ *  where a keyword (`description`, …) expects a scalar, so the precompiled tree
+ *  throws "schema is invalid: …/description must be string" on a cache miss.
+ *  Canonicalizing fixes that *and* converges the two forms onto one cache key,
+ *  so the runtime hits the warmed `__validators` entry instead of recompiling
+ *  (and, on a read-only image, failing to persist) every boot:
+ *  - a sentinel collapses to its `source` (interpolated → full string, exact
+ *    `${{ expr }}` → bare `expr`, matching `compileString`);
+ *  - a raw exact-form `"${{ expr }}"` string is reduced to the same bare `expr`,
+ *    so the warm path's plain string lands on the sentinel's stripped source.
+ *    Interpolated raw strings already equal the sentinel's full-string source,
+ *    so they pass through untouched.
+ *
+ *  Canonicalizing never removes a structural node — a property literally named
+ *  `description` / `examples` keeps its schema — so two genuinely different
+ *  shapes never collide and the produced validator accepts the same data. A
+ *  sentinel with no captured `source` collapses to `""` (a valid scalar). */
+function collapseSentinelsToSource(value: unknown): unknown {
   if (isCompiledValue(value) || isTaggedSentinel(value)) {
-    return typeof value.source === "string" ? value.source : { __teloSentinel: true };
+    return typeof value.source === "string" ? value.source : "";
+  }
+  if (typeof value === "string") {
+    const exact = value.match(EXACT_TEMPLATE_REGEX);
+    return exact ? exact[1].trim() : value;
   }
-  if (Array.isArray(value)) return value.map(normalizeSentinelsForHash);
+  if (Array.isArray(value)) return value.map(collapseSentinelsToSource);
   if (value && typeof value === "object") {
     const out: Record<string, unknown> = {};
     for (const [k, v] of Object.entries(value as Record<string, unknown>)) {
-      out[k] = normalizeSentinelsForHash(v);
+      out[k] = collapseSentinelsToSource(v);
     }
     return out;
   }
@@ -232,11 +253,19 @@ export class SchemaValidator {
     // would otherwise reject.
     const injected = normalizeRefSlots(withImplicit) as typeof withImplicit;
 
+    // Canonicalize CEL/template carriers (an inline `${{ }}` left in a
+    // `description`, a `!cel` tag, …) to their bare source text so AJV can
+    // meta-validate the schema it compiles, and so the raw (warm-pass) and
+    // precompiled (runtime) views of one schema land on the same cache key. The
+    // hashed and the compiled schema are this same canonical form. See
+    // `collapseSentinelsToSource`.
+    const sanitized = collapseSentinelsToSource(injected);
+
     const hash = createHash("sha256")
       .update(
         JSON.stringify({
           runtime: VALIDATOR_RUNTIME_TAG,
-          schema: normalizeSentinelsForHash(injected),
+          schema: sanitized,
         }),
       )
       .digest("hex")
@@ -249,7 +278,7 @@ export class SchemaValidator {
       return cachedByHash;
     }
 
-    const validate = this.compileAjvOrLoadCached(injected, hash);
+    const validate = this.compileAjvOrLoadCached(sanitized, hash);
 
     const validator = {
       validate: (data: any) => {