pepr 0.36.0 → 0.37.1

package/dist/cli/init/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/init/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAiBlC,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,QA0ExC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/init/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAkBlC,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,QAkFxC"}

package/dist/cli/init/templates.d.ts

@@ -1,4 +1,4 @@
-import { InitOptions } from "./walkthrough";
+import { InitOptions } from "../types";
 export declare const dependencies: {
     "@types/ramda": string;
     express: string;
@@ -19,13 +19,13 @@ export declare const dependencies: {
     "@types/json-pointer": string;
     "@types/node": string;
     "@types/node-forge": string;
-    "@types/prompts": string;
     "@types/uuid": string;
     "fast-check": string;
     jest: string;
     "js-yaml": string;
     nock: string;
     "ts-jest": string;
+    husky: string;
 }, peerDependencies: {
     "@typescript-eslint/eslint-plugin": string;
     "@typescript-eslint/parser": string;
@@ -34,6 +34,7 @@ export declare const dependencies: {
     eslint: string;
     "node-forge": string;
     prettier: string;
+    "@types/prompts": string;
     prompts: string;
     typescript: string;
     uuid: string;
@@ -50,13 +51,13 @@ export declare const dependencies: {
     "test:journey:prep": string;
     "test:journey-wasm": string;
     "test:journey:k3d": string;
-    "test:journey:build": string;
     "test:journey:image": string;
     "test:journey:run": string;
     "test:journey:run-wasm": string;
     "test:journey:upgrade": string;
     "format:check": string;
     "format:fix": string;
+    prepare: string;
 }, version: string;
 export declare function genPkgJSON(opts: InitOptions, pgkVerOverride?: string): {
     data: {

package/dist/cli/init/templates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/cli/init/templates.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,eAAO,MAAQ,YAAY;;;;;;;;;;GAAE,eAAe;;;;;;;;;;;;;;;;;GAAE,gBAAgB;;;;;;;;;;;GAAE,OAAO;;;;;;;;;;;;;;;;;;;;GAAE,OAAO,QAAgB,CAAC;AAEjG,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqDpE;AAED,wBAAgB,SAAS;;;EAKxB;AAED,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,WAAW;;;CAGvB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;CAGnB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;CAGxB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;CAGlB,CAAC"}
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/cli/init/templates.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,eAAO,MAAQ,YAAY;;;;;;;;;;GAAE,eAAe;;;;;;;;;;;;;;;;;GAAE,gBAAgB;;;;;;;;;;;;GAAE,OAAO;;;;;;;;;;;;;;;;;;;;GAAE,OAAO,QAAgB,CAAC;AAEjG,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqDpE;AAED,wBAAgB,SAAS;;;EAKxB;AAED,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,WAAW;;;CAGvB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;CAGnB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;CAGxB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;CAGlB,CAAC"}

package/dist/cli/init/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/cli/init/utils.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,UAWxC;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,iBAW1C;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,iBAMhD"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/cli/init/utils.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,UAgBxC;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,iBAW1C;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,iBAMhD"}

package/dist/cli/init/walkthrough.d.ts

@@ -1,8 +1,15 @@
 import { Answers } from "prompts";
-export type InitOptions = Answers<"name" | "description" | "errorBehavior">;
-export declare function walkthrough(): Promise<InitOptions>;
+export type PromptOptions = {
+    name: string;
+    description: string;
+    errorBehavior: "audit" | "ignore" | "reject";
+};
+export type PartialPromptOptions = Partial<PromptOptions>;
+export declare function walkthrough(opts?: PartialPromptOptions): Promise<PromptOptions>;
+export declare function setName(name?: string): Promise<Answers<string>>;
+export declare function setErrorBehavior(errorBehavior?: "audit" | "ignore" | "reject"): Promise<Answers<string>>;
 export declare function confirm(dirName: string, packageJSON: {
     path: string;
     print: string;
-}, peprTSPath: string): Promise<any>;
+}, peprTSPath: string, skipPrompt?: boolean): Promise<boolean>;
 //# sourceMappingURL=walkthrough.d.ts.map

package/dist/cli/init/walkthrough.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"walkthrough.d.ts","sourceRoot":"","sources":["../../../src/cli/init/walkthrough.ts"],"names":[],"mappings":"AAIA,OAAe,EAAE,OAAO,EAAgB,MAAM,SAAS,CAAC;AAMxD,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,aAAa,GAAG,eAAe,CAAC,CAAC;AAE5E,wBAAgB,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAoDlD;AAED,wBAAsB,OAAO,CAC3B,OAAO,EAAE,MAAM,EACf,WAAW,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAC5C,UAAU,EAAE,MAAM,gBA0BnB"}
+{"version":3,"file":"walkthrough.d.ts","sourceRoot":"","sources":["../../../src/cli/init/walkthrough.ts"],"names":[],"mappings":"AAIA,OAAe,EAAE,OAAO,EAAgB,MAAM,SAAS,CAAC;AAMxD,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAE1D,wBAAsB,WAAW,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAOrF;AAED,wBAAsB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CA6BrE;AAgBD,wBAAsB,gBAAgB,CACpC,aAAa,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAC5C,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAoC1B;AAED,wBAAsB,OAAO,CAC3B,OAAO,EAAE,MAAM,EACf,WAAW,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAC5C,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,OAAO,GACnB,OAAO,CAAC,OAAO,CAAC,CAiClB"}

package/dist/cli/types.d.ts

@@ -0,0 +1,3 @@
+import { Answers } from "prompts";
+export type InitOptions = Answers<"name" | "description" | "errorBehavior">;
+//# sourceMappingURL=types.d.ts.map

package/dist/cli/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,aAAa,GAAG,eAAe,CAAC,CAAC"}

package/dist/cli.js

@@ -287,7 +287,151 @@ function sanitizeResourceName(name2) {
   return name2.toLowerCase().replace(/[^a-z0-9]+/g, "-").slice(0, 250).replace(/^[^a-z]+|[^a-z]+$/g, "");
 }
 
+// src/lib/adjudicators.ts
+var import_ramda = require("ramda");
+var declaredOperation = (0, import_ramda.pipe)((request) => request?.operation, (0, import_ramda.defaultTo)(""));
+var declaredGroup = (0, import_ramda.pipe)((request) => request?.kind?.group, (0, import_ramda.defaultTo)(""));
+var declaredVersion = (0, import_ramda.pipe)((request) => request?.kind?.version, (0, import_ramda.defaultTo)(""));
+var declaredKind = (0, import_ramda.pipe)((request) => request?.kind?.kind, (0, import_ramda.defaultTo)(""));
+var declaredUid = (0, import_ramda.pipe)((request) => request?.uid, (0, import_ramda.defaultTo)(""));
+var carriesDeletionTimestamp = (0, import_ramda.pipe)((obj) => !!obj.metadata?.deletionTimestamp, (0, import_ramda.defaultTo)(false));
+var missingDeletionTimestamp = (0, import_ramda.complement)(carriesDeletionTimestamp);
+var carriedName = (0, import_ramda.pipe)((obj) => obj?.metadata?.name, (0, import_ramda.defaultTo)(""));
+var carriesName = (0, import_ramda.pipe)(carriedName, (0, import_ramda.equals)(""), import_ramda.not);
+var missingName = (0, import_ramda.complement)(carriesName);
+var carriedNamespace = (0, import_ramda.pipe)((obj) => obj?.metadata?.namespace, (0, import_ramda.defaultTo)(""));
+var carriesNamespace = (0, import_ramda.pipe)(carriedNamespace, (0, import_ramda.equals)(""), import_ramda.not);
+var carriedAnnotations = (0, import_ramda.pipe)((obj) => obj?.metadata?.annotations, (0, import_ramda.defaultTo)({}));
+var carriesAnnotations = (0, import_ramda.pipe)(carriedAnnotations, (0, import_ramda.equals)({}), import_ramda.not);
+var carriedLabels = (0, import_ramda.pipe)((obj) => obj?.metadata?.labels, (0, import_ramda.defaultTo)({}));
+var carriesLabels = (0, import_ramda.pipe)(carriedLabels, (0, import_ramda.equals)({}), import_ramda.not);
+var definesDeletionTimestamp = (0, import_ramda.pipe)((binding) => binding?.filters?.deletionTimestamp, (0, import_ramda.defaultTo)(false));
+var ignoresDeletionTimestamp = (0, import_ramda.complement)(definesDeletionTimestamp);
+var definedName = (0, import_ramda.pipe)((binding) => binding?.filters?.name, (0, import_ramda.defaultTo)(""));
+var definesName = (0, import_ramda.pipe)(definedName, (0, import_ramda.equals)(""), import_ramda.not);
+var ignoresName = (0, import_ramda.complement)(definesName);
+var definedNameRegex = (0, import_ramda.pipe)((binding) => binding?.filters?.regexName, (0, import_ramda.defaultTo)(""));
+var definesNameRegex = (0, import_ramda.pipe)(definedNameRegex, (0, import_ramda.equals)(""), import_ramda.not);
+var definedNamespaces = (0, import_ramda.pipe)((binding) => binding?.filters?.namespaces, (0, import_ramda.defaultTo)([]));
+var definesNamespaces = (0, import_ramda.pipe)(definedNamespaces, (0, import_ramda.equals)([]), import_ramda.not);
+var definedNamespaceRegexes = (0, import_ramda.pipe)((binding) => binding?.filters?.regexNamespaces, (0, import_ramda.defaultTo)([]));
+var definesNamespaceRegexes = (0, import_ramda.pipe)(definedNamespaceRegexes, (0, import_ramda.equals)([]), import_ramda.not);
+var definedAnnotations = (0, import_ramda.pipe)((binding) => binding?.filters?.annotations, (0, import_ramda.defaultTo)({}));
+var definesAnnotations = (0, import_ramda.pipe)(definedAnnotations, (0, import_ramda.equals)({}), import_ramda.not);
+var definedLabels = (0, import_ramda.pipe)((binding) => binding?.filters?.labels, (0, import_ramda.defaultTo)({}));
+var definesLabels = (0, import_ramda.pipe)(definedLabels, (0, import_ramda.equals)({}), import_ramda.not);
+var definedEvent = (0, import_ramda.pipe)((binding) => binding?.event, (0, import_ramda.defaultTo)(""));
+var definesDelete = (0, import_ramda.pipe)(definedEvent, (0, import_ramda.equals)("DELETE" /* DELETE */));
+var definedGroup = (0, import_ramda.pipe)((binding) => binding?.kind?.group, (0, import_ramda.defaultTo)(""));
+var definesGroup = (0, import_ramda.pipe)(definedGroup, (0, import_ramda.equals)(""), import_ramda.not);
+var definedVersion = (0, import_ramda.pipe)((binding) => binding?.kind?.version, (0, import_ramda.defaultTo)(""));
+var definesVersion = (0, import_ramda.pipe)(definedVersion, (0, import_ramda.equals)(""), import_ramda.not);
+var definedKind = (0, import_ramda.pipe)((binding) => binding?.kind?.kind, (0, import_ramda.defaultTo)(""));
+var definesKind = (0, import_ramda.pipe)(definedKind, (0, import_ramda.equals)(""), import_ramda.not);
+var definedCategory = (0, import_ramda.pipe)((binding) => {
+  return binding.isFinalize ? "Finalize" : binding.isWatch ? "Watch" : binding.isMutate ? "Mutate" : binding.isValidate ? "Validate" : "";
+});
+var definedCallback = (0, import_ramda.pipe)((binding) => {
+  return binding.isFinalize ? binding.finalizeCallback : binding.isWatch ? binding.watchCallback : binding.isMutate ? binding.mutateCallback : binding.isValidate ? binding.validateCallback : null;
+});
+var definedCallbackName = (0, import_ramda.pipe)(definedCallback, (0, import_ramda.defaultTo)({ name: "" }), (cb) => cb.name);
+var mismatchedDeletionTimestamp = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definesDeletionTimestamp),
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(1), missingDeletionTimestamp)
+]);
+var mismatchedName = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definesName),
+  (0, import_ramda.pipe)((bnd, obj) => definedName(bnd) !== carriedName(obj))
+]);
+var mismatchedNameRegex = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definesNameRegex),
+  (0, import_ramda.pipe)((bnd, obj) => new RegExp(definedNameRegex(bnd)).test(carriedName(obj)), import_ramda.not)
+]);
+var bindsToKind = (0, import_ramda.curry)(
+  (0, import_ramda.allPass)([(0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definedKind, (0, import_ramda.equals)(""), import_ramda.not), (0, import_ramda.pipe)((bnd, knd) => definedKind(bnd) === knd)])
+);
+var bindsToNamespace = (0, import_ramda.curry)((0, import_ramda.pipe)(bindsToKind(import_ramda.__, "Namespace")));
+var misboundNamespace = (0, import_ramda.allPass)([bindsToNamespace, definesNamespaces]);
+var mismatchedNamespace = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definesNamespaces),
+  (0, import_ramda.pipe)((bnd, obj) => definedNamespaces(bnd).includes(carriedNamespace(obj)), import_ramda.not)
+]);
+var mismatchedNamespaceRegex = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definesNamespaceRegexes),
+  (0, import_ramda.pipe)(
+    (bnd, obj) => (0, import_ramda.pipe)(
+      (0, import_ramda.any)((rex) => new RegExp(rex).test(carriedNamespace(obj))),
+      import_ramda.not
+    )(definedNamespaceRegexes(bnd))
+  )
+]);
+var metasMismatch = (0, import_ramda.pipe)(
+  (defined, carried) => {
+    const result = { defined, carried, unalike: {} };
+    result.unalike = Object.entries(result.defined).map(([key, val]) => {
+      const keyMissing = !Object.hasOwn(result.carried, key);
+      const noValue = !val;
+      const valMissing = !result.carried[key];
+      return keyMissing ? { [key]: val } : noValue ? {} : valMissing ? { [key]: val } : {};
+    }).reduce((acc, cur) => ({ ...acc, ...cur }), {});
+    return result.unalike;
+  },
+  (unalike) => Object.keys(unalike).length > 0
+);
+var mismatchedAnnotations = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definesAnnotations),
+  (0, import_ramda.pipe)((bnd, obj) => metasMismatch(definedAnnotations(bnd), carriedAnnotations(obj)))
+]);
+var mismatchedLabels = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definesLabels),
+  (0, import_ramda.pipe)((bnd, obj) => metasMismatch(definedLabels(bnd), carriedLabels(obj)))
+]);
+var uncarryableNamespace = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), import_ramda.length, (0, import_ramda.gt)(import_ramda.__, 0)),
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(1), carriesNamespace),
+  (0, import_ramda.pipe)((nss, obj) => nss.includes(carriedNamespace(obj)), import_ramda.not)
+]);
+var carriesIgnoredNamespace = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), import_ramda.length, (0, import_ramda.gt)(import_ramda.__, 0)),
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(1), carriesNamespace),
+  (0, import_ramda.pipe)((nss, obj) => nss.includes(carriedNamespace(obj)))
+]);
+var unbindableNamespaces = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), import_ramda.length, (0, import_ramda.gt)(import_ramda.__, 0)),
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(1), definesNamespaces),
+  (0, import_ramda.pipe)((nss, bnd) => (0, import_ramda.difference)(definedNamespaces(bnd), nss), import_ramda.length, (0, import_ramda.equals)(0), import_ramda.not)
+]);
+var misboundDeleteWithDeletionTimestamp = (0, import_ramda.allPass)([definesDelete, definesDeletionTimestamp]);
+var operationMatchesEvent = (0, import_ramda.anyPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(1), (0, import_ramda.equals)("*" /* Any */)),
+  (0, import_ramda.pipe)((op, evt) => op === evt),
+  (0, import_ramda.pipe)((op, evt) => op ? evt.includes(op) : false)
+]);
+var mismatchedEvent = (0, import_ramda.pipe)(
+  (binding, request) => operationMatchesEvent(declaredOperation(request), definedEvent(binding)),
+  import_ramda.not
+);
+var mismatchedGroup = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definesGroup),
+  (0, import_ramda.pipe)((binding, request) => definedGroup(binding) !== declaredGroup(request))
+]);
+var mismatchedVersion = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definesVersion),
+  (0, import_ramda.pipe)((binding, request) => definedVersion(binding) !== declaredVersion(request))
+]);
+var mismatchedKind = (0, import_ramda.allPass)([
+  (0, import_ramda.pipe)((0, import_ramda.nthArg)(0), definesKind),
+  (0, import_ramda.pipe)((binding, request) => definedKind(binding) !== declaredKind(request))
+]);
+
 // src/lib/helpers.ts
+function matchesRegex(pattern, testString) {
+  if (!pattern) {
+    return false;
+  }
+  const regex = new RegExp(pattern);
+  return regex.test(testString);
+}
 var ValidationError = class extends Error {
 };
 function validateCapabilityNames(capabilities) {
@@ -370,6 +514,7 @@ function generateWatchNamespaceError(ignoredNamespaces, bindingNamespaces, capab
 function namespaceComplianceValidator(capability, ignoredNamespaces) {
   const { namespaces: capabilityNamespaces, bindings, name: name2 } = capability;
   const bindingNamespaces = bindings.flatMap((binding) => binding.filters.namespaces);
+  const bindingRegexNamespaces = bindings.flatMap((binding) => binding.filters.regexNamespaces || []);
   const namespaceError = generateWatchNamespaceError(
     ignoredNamespaces ? ignoredNamespaces : [],
     bindingNamespaces,
@@ -380,6 +525,33 @@ function namespaceComplianceValidator(capability, ignoredNamespaces) {
       `Error in ${name2} capability. A binding violates namespace rules. Please check ignoredNamespaces and capability namespaces: ${namespaceError}`
     );
   }
+  if (bindingRegexNamespaces && bindingRegexNamespaces.length > 0 && capabilityNamespaces && capabilityNamespaces.length > 0) {
+    for (const regexNamespace of bindingRegexNamespaces) {
+      let matches = false;
+      for (const capabilityNamespace of capabilityNamespaces) {
+        if (regexNamespace !== "" && matchesRegex(regexNamespace, capabilityNamespace)) {
+          matches = true;
+          break;
+        }
+      }
+      if (!matches) {
+        throw new Error(
+          `Ignoring Watch Callback: Object namespace does not match any capability namespace with regex ${regexNamespace}.`
+        );
+      }
+    }
+  }
+  if (bindingRegexNamespaces && bindingRegexNamespaces.length > 0 && ignoredNamespaces && ignoredNamespaces.length > 0) {
+    for (const regexNamespace of bindingRegexNamespaces) {
+      for (const ignoredNS of ignoredNamespaces) {
+        if (matchesRegex(regexNamespace, ignoredNS)) {
+          throw new Error(
+            `Ignoring Watch Callback: Regex namespace: ${regexNamespace}, is an ignored namespace: ${ignoredNS}.`
+          );
+        }
+      }
+    }
+  }
 }
 async function checkDeploymentStatus(namespace2) {
   const deployments = await (0, import_kubernetes_fluent_client2.K8s)(import_kubernetes_fluent_client2.kind.Deployment).InNamespace(namespace2).Get();
@@ -946,7 +1118,7 @@ var peprStoreCRD = {
 };
 
 // src/lib/assets/webhooks.ts
-var import_ramda = require("ramda");
+var import_ramda2 = require("ramda");
 var peprIgnoreLabel = {
   key: "pepr.dev",
   operator: "NotIn",
@@ -985,12 +1157,12 @@ async function generateWebhookRules(assets, isMutateWebhook) {
       rules.push(ruleObject);
     }
   }
-  return (0, import_ramda.uniqWith)(import_ramda.equals, rules);
+  return (0, import_ramda2.uniqWith)(import_ramda2.equals, rules);
 }
 async function webhookConfig(assets, mutateOrValidate, timeoutSeconds = 10) {
   const ignore = [peprIgnoreLabel];
   const { name: name2, tls, config, apiToken, host } = assets;
-  const ignoreNS = (0, import_ramda.concat)(peprIgnoreNamespaces, config.alwaysIgnore.namespaces || []);
+  const ignoreNS = (0, import_ramda2.concat)(peprIgnoreNamespaces, config?.alwaysIgnore?.namespaces || []);
   if (ignoreNS) {
     ignore.push({
       key: "kubernetes.io/metadata.name",
@@ -1158,7 +1330,8 @@ function loadCapabilities(path) {
       env: {
         ...process.env,
         LOG_LEVEL: "warn",
-        PEPR_MODE: "build"
+        PEPR_MODE: "build",
+        NODE_OPTIONS: "--disable-warning=DEP0040"
       }
     });
     program2.on("message", (message) => {
@@ -1689,7 +1862,7 @@ var Assets = class {
   allYaml = async (rbacMode, imagePullSecret) => {
     this.capabilities = await loadCapabilities(this.path);
     for (const capability of this.capabilities) {
-      namespaceComplianceValidator(capability, this.alwaysIgnore.namespaces);
+      namespaceComplianceValidator(capability, this.alwaysIgnore?.namespaces);
     }
     return allYaml(this, rbacMode, imagePullSecret);
   };
@@ -1987,7 +2160,7 @@ var gitIgnore = "# Ignore node_modules and Pepr build artifacts\nnode_modules\nd
 var readmeMd = '# Pepr Module\n\nThis is a Pepr Module. [Pepr](https://github.com/defenseunicorns/pepr) is a type-safe Kubernetes middleware system.\n\nThe `capabilities` directory contains all the capabilities for this module. By default,\na capability is a single typescript file in the format of `capability-name.ts` that is\nimported in the root `pepr.ts` file as `import { HelloPepr } from "./capabilities/hello-pepr";`.\nBecause this is typescript, you can organize this however you choose, e.g. creating a sub-folder\nper-capability or common logic in shared files or folders.\n\nExample Structure:\n\n```\nModule Root\n\u251C\u2500\u2500 package.json\n\u251C\u2500\u2500 pepr.ts\n\u2514\u2500\u2500 capabilities\n    \u251C\u2500\u2500 example-one.ts\n    \u251C\u2500\u2500 example-three.ts\n    \u2514\u2500\u2500 example-two.ts\n```\n';
 var peprTS = 'import { PeprModule } from "pepr";\n// cfg loads your pepr configuration from package.json\nimport cfg from "./package.json";\n\n// HelloPepr is a demo capability that is included with Pepr. Comment or delete the line below to remove it.\nimport { HelloPepr } from "./capabilities/hello-pepr";\n\n/**\n * This is the main entrypoint for this Pepr module. It is run when the module is started.\n * This is where you register your Pepr configurations and capabilities.\n */\nnew PeprModule(cfg, [\n  // "HelloPepr" is a demo capability that is included with Pepr. Comment or delete the line below to remove it.\n  HelloPepr,\n\n  // Your additional capabilities go here\n]);\n';
 var helloPeprTS = 'import {\n  Capability,\n  K8s,\n  Log,\n  PeprMutateRequest,\n  RegisterKind,\n  a,\n  fetch,\n  fetchStatus,\n  kind,\n} from "pepr";\nimport nock from "nock";\n\n/**\n *  The HelloPepr Capability is an example capability to demonstrate some general concepts of Pepr.\n *  To test this capability you run `pepr dev`and then run the following command:\n *  `kubectl apply -f capabilities/hello-pepr.samples.yaml`\n */\nexport const HelloPepr = new Capability({\n  name: "hello-pepr",\n  description: "A simple example capability to show how things work.",\n  namespaces: ["pepr-demo", "pepr-demo-2"],\n});\n\n// Use the \'When\' function to create a new action, use \'Store\' to persist data\nconst { When, Store } = HelloPepr;\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (Namespace)                                   *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action removes the label `remove-me` when a Namespace is created.\n * Note we don\'t need to specify the namespace here, because we\'ve already specified\n * it in the Capability definition above.\n */\nWhen(a.Namespace)\n  .IsCreated()\n  .Mutate(ns => ns.RemoveLabel("remove-me"));\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Watch Action with K8s SSA (Namespace)                           *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action watches for the `pepr-demo-2` namespace to be created, then creates a ConfigMap with\n * the name `pepr-ssa-demo` and adds the namespace UID to the ConfigMap data. Because Pepr uses\n * server-side apply for this operation, the ConfigMap will be created or updated if it already exists.\n */\nWhen(a.Namespace)\n  .IsCreated()\n  .WithName("pepr-demo-2")\n  .Watch(async ns => {\n    Log.info("Namespace pepr-demo-2 was created.");\n\n    try {\n      // Apply the ConfigMap using K8s server-side apply\n      await K8s(kind.ConfigMap).Apply({\n        metadata: {\n          name: "pepr-ssa-demo",\n          namespace: "pepr-demo-2",\n        },\n        data: {\n          "ns-uid": ns.metadata.uid,\n        },\n      });\n    } catch (error) {\n      // You can use the Log object to log messages to the Pepr controller pod\n      Log.error(error, "Failed to apply ConfigMap using server-side apply.");\n    }\n\n    // You can share data between actions using the Store, including between different types of actions\n    Store.setItem("watch-data", "This data was stored by a Watch Action.");\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 1)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This is a single action. They can be in the same file or put imported from other files.\n * In this example, when a ConfigMap is created with the name `example-1`, then add a label and annotation.\n *\n * Equivalent to manually running:\n * `kubectl label configmap example-1 pepr=was-here`\n * `kubectl annotate configmap example-1 pepr.dev=annotations-work-too`\n */\nWhen(a.ConfigMap)\n  .IsCreated()\n  .WithName("example-1")\n  .Mutate(request => {\n    request\n      .SetLabel("pepr", "was-here")\n      .SetAnnotation("pepr.dev", "annotations-work-too");\n\n    // Use the Store to persist data between requests and Pepr controller pods\n    Store.setItem("example-1", "was-here");\n\n    // This data is written asynchronously and can be read back via `Store.getItem()` or `Store.subscribe()`\n    Store.setItem("example-1-data", JSON.stringify(request.Raw.data));\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate & Validate Actions (CM Example 2)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This combines 3 different types of actions: \'Mutate\', \'Validate\', and \'Watch\'. The order\n * of the actions is required, but each action is optional. In this example, when a ConfigMap is created\n * with the name `example-2`, then add a label and annotation, validate that the ConfigMap has the label\n * `pepr`, and log the request.\n */\nWhen(a.ConfigMap)\n  .IsCreated()\n  .WithName("example-2")\n  .Mutate(request => {\n    // This Mutate Action will mutate the request before it is persisted to the cluster\n\n    // Use `request.Merge()` to merge the new data with the existing data\n    request.Merge({\n      metadata: {\n        labels: {\n          pepr: "was-here",\n        },\n        annotations: {\n          "pepr.dev": "annotations-work-too",\n        },\n      },\n    });\n  })\n  .Validate(request => {\n    // This Validate Action will validate the request before it is persisted to the cluster\n\n    // Approve the request if the ConfigMap has the label \'pepr\'\n    if (request.HasLabel("pepr")) {\n      return request.Approve();\n    }\n\n    // Otherwise, deny the request with an error message (optional)\n    return request.Deny("ConfigMap must have label \'pepr\'");\n  })\n  .Watch((cm, phase) => {\n    // This Watch Action will watch the ConfigMap after it has been persisted to the cluster\n    Log.info(cm, `ConfigMap was ${phase} with the name example-2`);\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 2a)                               *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action shows a simple validation that will deny any ConfigMap that has the\n * annotation `evil`. Note that the `Deny()` function takes an optional second parameter that is a\n * user-defined status code to return.\n */\nWhen(a.ConfigMap)\n  .IsCreated()\n  .Validate(request => {\n    if (request.HasAnnotation("evil")) {\n      return request.Deny("No evil CM annotations allowed.", 400);\n    }\n\n    return request.Approve();\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 3)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action combines different styles. Unlike the previous actions, this one will look\n * for any ConfigMap in the `pepr-demo` namespace that has the label `change=by-label` during either\n * CREATE or UPDATE. Note that all conditions added such as `WithName()`, `WithLabel()`, `InNamespace()`,\n * are ANDs so all conditions must be true for the request to be processed.\n */\nWhen(a.ConfigMap)\n  .IsCreatedOrUpdated()\n  .WithLabel("change", "by-label")\n  .Mutate(request => {\n    // The K8s object e are going to mutate\n    const cm = request.Raw;\n\n    // Get the username and uid of the K8s request\n    const { username, uid } = request.Request.userInfo;\n\n    // Store some data about the request in the configmap\n    cm.data["username"] = username;\n    cm.data["uid"] = uid;\n\n    // You can still mix other ways of making changes too\n    request.SetAnnotation("pepr.dev", "making-waves");\n  });\n\n// This action validates the label `change=by-label` is deleted\nWhen(a.ConfigMap)\n  .IsDeleted()\n  .WithLabel("change", "by-label")\n  .Validate(request => {\n    // Log and then always approve the request\n    Log.info("CM with label \'change=by-label\' was deleted.");\n    return request.Approve();\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 4)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action show how you can use the `Mutate()` function without an inline function.\n * This is useful if you want to keep your actions small and focused on a single task,\n * or if you want to reuse the same function in multiple actions.\n */\nWhen(a.ConfigMap).IsCreated().WithName("example-4").Mutate(example4Cb);\n\n// This function uses the complete type definition, but is not required.\nfunction example4Cb(cm: PeprMutateRequest<a.ConfigMap>) {\n  cm.SetLabel("pepr.dev/first", "true");\n  cm.SetLabel("pepr.dev/second", "true");\n  cm.SetLabel("pepr.dev/third", "true");\n}\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 4a)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This is the same as Example 4, except this only operates on a CM in the `pepr-demo-2` namespace.\n * Note because the Capability defines namespaces, the namespace specified here must be one of those.\n * Alternatively, you can remove the namespace from the Capability definition and specify it here.\n */\nWhen(a.ConfigMap)\n  .IsCreated()\n  .InNamespace("pepr-demo-2")\n  .WithName("example-4a")\n  .Mutate(example4Cb);\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 5)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action is a bit more complex. It will look for any ConfigMap in the `pepr-demo`\n * namespace that has the label `chuck-norris` during CREATE. When it finds one, it will fetch a\n * random Chuck Norris joke from the API and add it to the ConfigMap. This is a great example of how\n * you can use Pepr to make changes to your K8s objects based on external data.\n *\n * Note the use of the `async` keyword. This is required for any action that uses `await` or `fetch()`.\n *\n * Also note we are passing a type to the `fetch()` function. This is optional, but it will help you\n * avoid mistakes when working with the data returned from the API. You can also use the `as` keyword to\n * cast the data returned from the API.\n *\n * These are equivalent:\n * ```ts\n * const joke = await fetch<TheChuckNorrisJoke>("https://icanhazdadjoke.com/");\n * const joke = await fetch("https://icanhazdadjoke.com/") as TheChuckNorrisJoke;\n * ```\n *\n * Alternatively, you can drop the type completely:\n *\n * ```ts\n * fetch("https://icanhazdadjoke.com")\n * ```\n */\ninterface TheChuckNorrisJoke {\n  id: string;\n  joke: string;\n  status: number;\n}\n\nWhen(a.ConfigMap)\n  .IsCreatedOrUpdated()\n  .WithLabel("chuck-norris")\n  .Mutate(cm => cm.SetLabel("got-jokes", "true"))\n  .Watch(async cm => {\n    const jokeURL = "https://icanhazdadjoke.com/";\n\n    // Set up Nock to mock the API calls globally with header matching\n    nock(jokeURL).get("/").reply(200, {\n      id: "R7UfaahVfFd",\n      joke: "Funny joke goes here.",\n      status: 200,\n    });\n\n    // Try/catch is not needed as a response object will always be returned\n    const response = await fetch<TheChuckNorrisJoke>(jokeURL, {\n      headers: {\n        Accept: "application/json",\n      },\n    });\n\n    // Instead, check the `response.ok` field\n    if (response.ok) {\n      const { joke } = response.data;\n      // Add Joke to the Store\n      await Store.setItemAndWait(jokeURL, joke);\n      // Add the Chuck Norris joke to the configmap\n      try {\n        await K8s(kind.ConfigMap).Apply({\n          metadata: {\n            name: cm.metadata.name,\n            namespace: cm.metadata.namespace,\n          },\n          data: {\n            "chuck-says": Store.getItem(jokeURL),\n          },\n        });\n      } catch (error) {\n        Log.error(error, "Failed to apply ConfigMap using server-side apply.", {\n          cm,\n        });\n      }\n    }\n\n    // You can also assert on different HTTP response codes\n    if (response.status === fetchStatus.NOT_FOUND) {\n      // Do something else\n      return;\n    }\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (Secret Base64 Handling)                      *\n * ---------------------------------------------------------------------------------------------------\n *\n * The K8s JS client provides incomplete support for base64 encoding/decoding handling for secrets,\n * unlike the GO client. To make this less painful, Pepr automatically handles base64 encoding/decoding\n * secret data before and after the action is executed.\n */\nWhen(a.Secret)\n  .IsCreated()\n  .WithName("secret-1")\n  .Mutate(request => {\n    const secret = request.Raw;\n\n    // This will be encoded at the end of all processing back to base64: "Y2hhbmdlLXdpdGhvdXQtZW5jb2Rpbmc="\n    secret.data.magic = "change-without-encoding";\n\n    // You can modify the data directly, and it will be encoded at the end of all processing\n    secret.data.example += " - modified by Pepr";\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (Untyped Custom Resource)                     *\n * ---------------------------------------------------------------------------------------------------\n *\n * Out of the box, Pepr supports all the standard Kubernetes objects. However, you can also create\n * your own types. This is useful if you are working with an Operator that creates custom resources.\n * There are two ways to do this, the first is to use the `When()` function with a `GenericKind`,\n * the second is to create a new class that extends `GenericKind` and use the `RegisterKind()` function.\n *\n * This example shows how to use the `When()` function with a `GenericKind`. Note that you\n * must specify the `group`, `version`, and `kind` of the object (if applicable). This is how Pepr knows\n * if the action should be triggered or not. Since we are using a `GenericKind`,\n * Pepr will not be able to provide any intellisense for the object, so you will need to refer to the\n * Kubernetes API documentation for the object you are working with.\n *\n * You will need to wait for the CRD in `hello-pepr.samples.yaml` to be created, then you can apply\n *\n * ```yaml\n * apiVersion: pepr.dev/v1\n * kind: Unicorn\n * metadata:\n *   name: example-1\n *   namespace: pepr-demo\n * spec:\n *   message: replace-me\n *   counter: 0\n * ```\n */\nWhen(a.GenericKind, {\n  group: "pepr.dev",\n  version: "v1",\n  kind: "Unicorn",\n})\n  .IsCreated()\n  .WithName("example-1")\n  .Mutate(request => {\n    request.Merge({\n      spec: {\n        message: "Hello Pepr without type data!",\n        counter: Math.random(),\n      },\n    });\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (Typed Custom Resource)                       *\n * ---------------------------------------------------------------------------------------------------\n *\n * This example shows how to use the `RegisterKind()` function to create a new type. This is useful\n * if you are working with an Operator that creates custom resources and you want to have intellisense\n * for the object. Note that you must specify the `group`, `version`, and `kind` of the object (if applicable)\n * as this is how Pepr knows if the action should be triggered or not.\n *\n * Once you register a new Kind with Pepr, you can use the `When()` function with the new Kind. Ideally,\n * you should register custom Kinds at the top of your Capability file or Pepr Module so they are available\n * to all actions, but we are putting it here for demonstration purposes.\n *\n * You will need to wait for the CRD in `hello-pepr.samples.yaml` to be created, then you can apply\n *\n * ```yaml\n * apiVersion: pepr.dev/v1\n * kind: Unicorn\n * metadata:\n *   name: example-2\n *   namespace: pepr-demo\n * spec:\n *   message: replace-me\n *   counter: 0\n * ```*\n */\nclass UnicornKind extends a.GenericKind {\n  spec: {\n    /**\n     * JSDoc comments can be added to explain more details about the field.\n     *\n     * @example\n     * ```ts\n     * request.Raw.spec.message = "Hello Pepr!";\n     * ```\n     * */\n    message: string;\n    counter: number;\n  };\n}\n\nRegisterKind(UnicornKind, {\n  group: "pepr.dev",\n  version: "v1",\n  kind: "Unicorn",\n});\n\nWhen(UnicornKind)\n  .IsCreated()\n  .WithName("example-2")\n  .Mutate(request => {\n    request.Merge({\n      spec: {\n        message: "Hello Pepr with type data!",\n        counter: Math.random(),\n      },\n    });\n  });\n\n/**\n * A callback function that is called once the Pepr Store is fully loaded.\n */\nStore.onReady(data => {\n  Log.info(data, "Pepr Store Ready");\n});\n';
-var packageJSON = { name: "pepr", description: "Kubernetes application engine", author: "Defense Unicorns", homepage: "https://github.com/defenseunicorns/pepr", license: "Apache-2.0", bin: "dist/cli.js", repository: "defenseunicorns/pepr", engines: { node: ">=18.0.0" }, files: ["/dist", "/src"], version: "0.36.0", main: "dist/lib.js", types: "dist/lib.d.ts", scripts: { ci: "npm ci", "gen-data-json": "node hack/build-template-data.js", prebuild: "rm -fr dist/* && npm run gen-data-json", version: "node scripts/set-version.js", build: "tsc && node build.mjs", "build:image": "npm run build && docker buildx build --tag pepr:dev .", test: "npm run test:unit && npm run test:journey", "test:unit": "npm run gen-data-json && jest src --coverage --detectOpenHandles --coverageDirectory=./coverage", "test:journey": "npm run test:journey:k3d && npm run test:journey:build && npm run test:journey:image && npm run test:journey:run", "test:journey:prep": "if [ ! -d ./pepr-upgrade-test ]; then git clone https://github.com/defenseunicorns/pepr-upgrade-test.git ; fi", "test:journey-wasm": "npm run test:journey:k3d && npm run test:journey:build && npm run test:journey:image && npm run test:journey:run-wasm", "test:journey:k3d": "k3d cluster delete pepr-dev && k3d cluster create pepr-dev --k3s-arg '--debug@server:0' --wait && kubectl rollout status deployment -n kube-system", "test:journey:build": "npm run build && npm pack", "test:journey:image": "docker buildx build --tag pepr:dev . && k3d image import pepr:dev -c pepr-dev", "test:journey:run": "jest --detectOpenHandles journey/entrypoint.test.ts && npm run test:journey:prep && npm run test:journey:upgrade", "test:journey:run-wasm": "jest --detectOpenHandles journey/entrypoint-wasm.test.ts", "test:journey:upgrade": "npm run test:journey:k3d && npm run test:journey:image && jest --detectOpenHandles journey/pepr-upgrade.test.ts", "format:check": "eslint src && prettier src --check", "format:fix": "eslint src --fix && prettier src --write" }, dependencies: { "@types/ramda": "0.30.2", express: "4.21.0", "fast-json-patch": "3.1.1", "json-pointer": "^0.6.2", "kubernetes-fluent-client": "3.0.3", pino: "9.4.0", "pino-pretty": "11.2.2", "prom-client": "15.1.3", ramda: "0.30.1" }, devDependencies: { "@commitlint/cli": "19.5.0", "@commitlint/config-conventional": "19.5.0", "@fast-check/jest": "^2.0.1", "@jest/globals": "29.7.0", "@types/eslint": "9.6.1", "@types/express": "4.17.21", "@types/json-pointer": "^1.0.34", "@types/node": "22.x.x", "@types/node-forge": "1.3.11", "@types/prompts": "2.4.9", "@types/uuid": "10.0.0", "fast-check": "^3.19.0", jest: "29.7.0", "js-yaml": "^4.1.0", nock: "^13.5.4", "ts-jest": "29.2.5" }, peerDependencies: { "@typescript-eslint/eslint-plugin": "7.18.0", "@typescript-eslint/parser": "7.18.0", commander: "12.1.0", esbuild: "0.23.0", eslint: "8.57.0", "node-forge": "1.3.1", prettier: "3.3.3", prompts: "2.4.2", typescript: "5.3.3", uuid: "10.0.0" } };
+var packageJSON = { name: "pepr", description: "Kubernetes application engine", author: "Defense Unicorns", homepage: "https://github.com/defenseunicorns/pepr", license: "Apache-2.0", bin: "dist/cli.js", repository: "defenseunicorns/pepr", engines: { node: ">=18.0.0" }, files: ["/dist", "/src"], version: "0.37.1", main: "dist/lib.js", types: "dist/lib.d.ts", scripts: { ci: "npm ci", "gen-data-json": "node hack/build-template-data.js", prebuild: "rm -fr dist/* && npm run gen-data-json", version: "node scripts/set-version.js", build: "tsc && node build.mjs && npm pack", "build:image": "npm run build && docker buildx build --output type=docker --tag pepr:dev .", test: "npm run test:unit && npm run test:journey", "test:unit": "npm run gen-data-json && jest src --coverage --detectOpenHandles --coverageDirectory=./coverage", "test:journey": "npm run test:journey:k3d && npm run build && npm run test:journey:image && npm run test:journey:run", "test:journey:prep": "if [ ! -d ./pepr-upgrade-test ]; then git clone https://github.com/defenseunicorns/pepr-upgrade-test.git ; fi", "test:journey-wasm": "npm run test:journey:k3d && npm run build && npm run test:journey:image && npm run test:journey:run-wasm", "test:journey:k3d": "k3d cluster delete pepr-dev && k3d cluster create pepr-dev --k3s-arg '--debug@server:0' --wait && kubectl rollout status deployment -n kube-system", "test:journey:image": "docker buildx build --output type=docker --tag pepr:dev . && k3d image import pepr:dev -c pepr-dev", "test:journey:run": "jest --detectOpenHandles journey/entrypoint.test.ts && npm run test:journey:prep && npm run test:journey:upgrade", "test:journey:run-wasm": "jest --detectOpenHandles journey/entrypoint-wasm.test.ts", "test:journey:upgrade": "npm run test:journey:k3d && npm run test:journey:image && jest --detectOpenHandles journey/pepr-upgrade.test.ts", "format:check": "eslint src && prettier src --check", "format:fix": "eslint src --fix && prettier src --write", prepare: `if [ "$NODE_ENV" != 'production' ]; then husky; fi` }, dependencies: { "@types/ramda": "0.30.2", express: "4.21.0", "fast-json-patch": "3.1.1", "json-pointer": "^0.6.2", "kubernetes-fluent-client": "3.0.4", pino: "9.4.0", "pino-pretty": "11.2.2", "prom-client": "15.1.3", ramda: "0.30.1" }, devDependencies: { "@commitlint/cli": "19.5.0", "@commitlint/config-conventional": "19.5.0", "@fast-check/jest": "^2.0.1", "@jest/globals": "29.7.0", "@types/eslint": "9.6.1", "@types/express": "5.0.0", "@types/json-pointer": "^1.0.34", "@types/node": "22.x.x", "@types/node-forge": "1.3.11", "@types/uuid": "10.0.0", "fast-check": "^3.19.0", jest: "29.7.0", "js-yaml": "^4.1.0", nock: "^13.5.4", "ts-jest": "29.2.5", husky: "^9.1.6" }, peerDependencies: { "@typescript-eslint/eslint-plugin": "7.18.0", "@typescript-eslint/parser": "7.18.0", commander: "12.1.0", esbuild: "0.23.0", eslint: "8.57.0", "node-forge": "1.3.1", prettier: "3.3.3", "@types/prompts": "2.4.9", prompts: "2.4.2", typescript: "5.3.3", uuid: "10.0.0" } };
 
 // src/templates/pepr.code-snippets.json
 var pepr_code_snippets_default = {
@@ -2048,6 +2221,11 @@ var tsconfig_module_default = {
 // src/cli/init/utils.ts
 var import_fs6 = require("fs");
 function sanitizeName(name2) {
+  if (typeof name2 !== "string") {
+    throw TypeError(
+      `sanitizeName() was called with a non-string value. The value is: ${name2} of type ${typeof name2}`
+    );
+  }
   let sanitized = name2.toLowerCase().replace(/[^a-z0-9-]+/gi, "-");
   sanitized = sanitized.replace(/^-+|-+$/g, "");
   sanitized = sanitized.replace(/--+/g, "-");
@@ -2301,7 +2479,7 @@ function build_default(program2) {
       path
     );
     if (opts?.registry == "Iron Bank") {
-      console.warn(
+      console.info(
         `
 	This command assumes the latest release. Pepr's Iron Bank image release cycle is dictated by renovate and is typically released a few days after the GitHub release.
 	As an alternative you may consider custom --custom-image to target a specific image and version.`
@@ -2446,7 +2624,7 @@ async function buildModule(reloader, entryPoint = peprTS2, embed = true) {
         out.matchAll(pgkErrMatch);
         const conflicts = [...out.matchAll(pgkErrMatch)];
         if (conflicts.length < 1) {
-          console.warn(
+          console.info(
             `
 	One or more imported Pepr Capabilities seem to be using an incompatible version of Pepr.
 	Try updating your Pepr Capabilities to their latest versions.`,
@@ -2454,7 +2632,7 @@ async function buildModule(reloader, entryPoint = peprTS2, embed = true) {
           );
         }
         conflicts.forEach((match) => {
-          console.warn(
+          console.info(
             `
 	Package '${match[1]}' seems to be incompatible with your current version of Pepr.
 	Try updating to the latest version.`,
@@ -2674,8 +2852,6 @@ ${allowOrDeny}  MUTATE     ${name2} (${uid})`);
               }
             }
           } catch {
-            console.warn(`
-IGNORED - Unable to parse line: ${line}.`);
           }
         }
       }
@@ -2708,26 +2884,52 @@ var Errors = {
 var ErrorList = Object.values(Errors);
 
 // src/cli/init/walkthrough.ts
-function walkthrough() {
+async function walkthrough(opts) {
+  const result = {
+    ...await setName(opts?.name),
+    ...await setDescription(opts?.description),
+    ...await setErrorBehavior(opts?.errorBehavior)
+  };
+  return result;
+}
+async function setName(name2) {
   const askName = {
     type: "text",
     name: "name",
     message: "Enter a name for the new Pepr module. This will create a new directory based on the name.\n",
     validate: async (val) => {
       try {
-        const name2 = sanitizeName(val);
-        await import_fs10.promises.access(name2, import_fs10.promises.constants.F_OK);
+        const name3 = sanitizeName(val);
+        await import_fs10.promises.access(name3, import_fs10.promises.constants.F_OK);
         return "A directory with this name already exists";
       } catch (e) {
         return val.length > 2 || "The name must be at least 3 characters long";
       }
     }
   };
+  if (name2 !== void 0) {
+    if (name2.length < 3) {
+      console.error(`Module name must be at least 3 characters long. Received '${name2}'`);
+      const response = (0, import_prompts3.default)([askName]);
+      return response;
+    } else {
+      return { name: name2 };
+    }
+  }
+  return (0, import_prompts3.default)([askName]);
+}
+async function setDescription(description) {
   const askDescription = {
     type: "text",
     name: "description",
     message: "(Recommended) Enter a description for the new Pepr module.\n"
   };
+  if (description !== void 0) {
+    return { description };
+  }
+  return (0, import_prompts3.default)([askDescription]);
+}
+async function setErrorBehavior(errorBehavior) {
   const askErrorBehavior = {
     type: "select",
     name: "errorBehavior",
@@ -2751,11 +2953,21 @@ function walkthrough() {
       }
     ]
   };
-  return (0, import_prompts3.default)([askName, askDescription, askErrorBehavior]);
+  if (errorBehavior !== void 0) {
+    if (!ErrorList.includes(errorBehavior)) {
+      return (0, import_prompts3.default)([askErrorBehavior]);
+    }
+    return { errorBehavior };
+  }
+  return (0, import_prompts3.default)([askErrorBehavior]);
 }
-async function confirm(dirName, packageJSON2, peprTSPath) {
-  console.log(`
-  To be generated:
+async function confirm(dirName, packageJSON2, peprTSPath, skipPrompt) {
+  const confirmationPrompt = {
+    type: "confirm",
+    name: "confirm",
+    message: "Create the new Pepr module?"
+  };
+  const confirmationMessage = `To be generated:
 
     \x1B[1m${dirName}\x1B[0m
     \u251C\u2500\u2500 \x1B[1m${eslint.path}\x1B[0m
@@ -2769,28 +2981,35 @@ ${packageJSON2.print.replace(/^/gm, "    \u2502   ")}
     \u251C\u2500\u2500 \x1B[1m${peprTSPath}\x1B[0m
     \u251C\u2500\u2500 \x1B[1m${readme.path}\x1B[0m
     \u2514\u2500\u2500 \x1B[1m${tsConfig.path}\x1B[0m
-      `);
-  const confirm2 = await (0, import_prompts3.default)({
-    type: "confirm",
-    name: "confirm",
-    message: "Create the new Pepr module?"
-  });
-  return confirm2.confirm;
+  `;
+  if (skipPrompt !== void 0) {
+    return skipPrompt;
+  } else {
+    console.log(confirmationMessage);
+    const confirm2 = await (0, import_prompts3.default)([confirmationPrompt]);
+    const shouldCreateModule = confirm2.confirm === "y" || confirm2.confirm === "yes" || confirm2.confirm === true ? true : false;
+    return shouldCreateModule;
+  }
 }
 
 // src/cli/init/index.ts
 function init_default(program2) {
-  program2.command("init").description("Initialize a new Pepr Module").option("--skip-post-init", "Skip npm install, git init and VSCode launch").action(async (opts) => {
-    let pkgOverride = "";
+  let response = {};
+  let pkgOverride = "";
+  program2.command("init").description("Initialize a new Pepr Module").option("--confirm", "Skip verification prompt when creating a new module.").option("--description <string>", "Explain the purpose of the new module.").option("--name <string>", "Set the name of the new module.").option("--skip-post-init", "Skip npm install, git init, and VSCode launch.").option(`--errorBehavior <${ErrorList.join("|")}>`, "Set a errorBehavior.", Errors.reject).hook("preAction", async (thisCommand) => {
     if (process.env.TEST_MODE === "true") {
       import_prompts4.default.inject(["pepr-test-module", "A test module for Pepr", "ignore", "y"]);
       pkgOverride = "file:../pepr-0.0.0-development.tgz";
+      response = await walkthrough();
+    } else {
+      response = await walkthrough(thisCommand.opts());
+      Object.entries(response).map(([key, value]) => thisCommand.setOptionValue(key, value));
     }
-    const response = await walkthrough();
+  }).action(async (opts) => {
     const dirName = sanitizeName(response.name);
     const packageJSON2 = genPkgJSON(response, pkgOverride);
     const peprTS3 = genPeprTS();
-    const confirmed = await confirm(dirName, packageJSON2, peprTS3.path);
+    const confirmed = await confirm(dirName, packageJSON2, peprTS3.path, opts.confirm);
     if (confirmed) {
       console.log("Creating new Pepr module...");
       try {
@@ -2813,7 +3032,7 @@ function init_default(program2) {
           (0, import_child_process4.execSync)("npm install", {
             stdio: "inherit"
           });
-          (0, import_child_process4.execSync)("git init", {
+          (0, import_child_process4.execSync)("git init --initial-branch=main", {
             stdio: "inherit"
           });
           try {
@@ -2959,9 +3178,12 @@ function kfc_default(program2) {
 
 // src/cli.ts
 if (process.env.npm_lifecycle_event !== "npx") {
-  console.warn("Pepr should be run via `npx pepr <command>` instead of `pepr <command>`.");
+  console.info("Pepr should be run via `npx pepr <command>` instead of `pepr <command>`.");
 }
 var program = new RootCmd();
+if (!process.env.PEPR_NODE_WARNINGS) {
+  process.removeAllListeners("warning");
+}
 program.version(version2).description(`Pepr (v${version2}) - Type safe K8s middleware for humans`).action(() => {
   if (program.args.length < 1) {
     console.log(banner);