pepr 0.46.0 → 0.46.1-nightly.0

package/dist/lib.js

@@ -712,7 +712,7 @@ var Capability = class {
 };
 
 // src/lib/core/module.ts
-var import_ramda9 = require("ramda");
+var import_ramda13 = require("ramda");
 
 // src/lib/controller/index.ts
 var import_express = __toESM(require("express"));
@@ -850,7 +850,7 @@ var metricsCollector = new MetricsCollector("pepr");
 
 // src/lib/processors/mutate-processor.ts
 var import_fast_json_patch = __toESM(require("fast-json-patch"));
-var import_ramda6 = require("ramda");
+var import_ramda10 = require("ramda");
 
 // src/lib/telemetry/timeUtils.ts
 var getNow = () => performance.now();
@@ -882,59 +882,11 @@ var MeasureWebhookTimeout = class {
   }
 };
 
-// src/lib/filter/adjudicators/adjudicators.ts
+// src/lib/filter/adjudicators/postCollection.ts
+var import_ramda5 = require("ramda");
+
+// src/lib/filter/adjudicators/binding.ts
 var import_ramda3 = require("ramda");
-var declaredOperation = (0, import_ramda3.pipe)(
-  (request) => request?.operation,
-  (0, import_ramda3.defaultTo)("")
-);
-var declaredGroup = (0, import_ramda3.pipe)(
-  (request) => request?.kind?.group,
-  (0, import_ramda3.defaultTo)("")
-);
-var declaredVersion = (0, import_ramda3.pipe)(
-  (request) => request?.kind?.version,
-  (0, import_ramda3.defaultTo)("")
-);
-var declaredKind = (0, import_ramda3.pipe)(
-  (request) => request?.kind?.kind,
-  (0, import_ramda3.defaultTo)("")
-);
-var declaredUid = (0, import_ramda3.pipe)((request) => request?.uid, (0, import_ramda3.defaultTo)(""));
-var carriesDeletionTimestamp = (0, import_ramda3.pipe)(
-  (kubernetesObject) => !!kubernetesObject.metadata?.deletionTimestamp,
-  (0, import_ramda3.defaultTo)(false)
-);
-var missingDeletionTimestamp = (0, import_ramda3.complement)(carriesDeletionTimestamp);
-var carriedKind = (0, import_ramda3.pipe)(
-  (kubernetesObject) => kubernetesObject?.kind,
-  (0, import_ramda3.defaultTo)("not set")
-);
-var carriedVersion = (0, import_ramda3.pipe)(
-  (kubernetesObject) => kubernetesObject?.metadata?.resourceVersion,
-  (0, import_ramda3.defaultTo)("not set")
-);
-var carriedName = (0, import_ramda3.pipe)(
-  (kubernetesObject) => kubernetesObject?.metadata?.name,
-  (0, import_ramda3.defaultTo)("")
-);
-var carriesName = (0, import_ramda3.pipe)(carriedName, (0, import_ramda3.equals)(""), import_ramda3.not);
-var missingName = (0, import_ramda3.complement)(carriesName);
-var carriedNamespace = (0, import_ramda3.pipe)(
-  (kubernetesObject) => kubernetesObject?.metadata?.namespace,
-  (0, import_ramda3.defaultTo)("")
-);
-var carriesNamespace = (0, import_ramda3.pipe)(carriedNamespace, (0, import_ramda3.equals)(""), import_ramda3.not);
-var carriedAnnotations = (0, import_ramda3.pipe)(
-  (kubernetesObject) => kubernetesObject?.metadata?.annotations,
-  (0, import_ramda3.defaultTo)({})
-);
-var carriesAnnotations = (0, import_ramda3.pipe)(carriedAnnotations, (0, import_ramda3.equals)({}), import_ramda3.not);
-var carriedLabels = (0, import_ramda3.pipe)(
-  (kubernetesObject) => kubernetesObject?.metadata?.labels,
-  (0, import_ramda3.defaultTo)({})
-);
-var carriesLabels = (0, import_ramda3.pipe)(carriedLabels, (0, import_ramda3.equals)({}), import_ramda3.not);
 var definesDeletionTimestamp = (0, import_ramda3.pipe)(
   (binding) => binding?.filters?.deletionTimestamp ?? false,
   (0, import_ramda3.defaultTo)(false)
@@ -975,61 +927,83 @@ var definedCallback = (binding) => {
   return binding.isFinalize ? binding.finalizeCallback : binding.isWatch ? binding.watchCallback : binding.isMutate ? binding.mutateCallback : binding.isValidate ? binding.validateCallback : null;
 };
 var definedCallbackName = (0, import_ramda3.pipe)(definedCallback, (0, import_ramda3.defaultTo)({ name: "" }), (callback) => callback.name);
-var mismatchedDeletionTimestamp = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definesDeletionTimestamp),
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(1), missingDeletionTimestamp)
-]);
-var mismatchedName = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definesName),
-  (0, import_ramda3.pipe)((binding, kubernetesObject) => definedName(binding) !== carriedName(kubernetesObject))
-]);
-var mismatchedNameRegex = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definesNameRegex),
-  (0, import_ramda3.pipe)((binding, kubernetesObject) => new RegExp(definedNameRegex(binding)).test(carriedName(kubernetesObject)), import_ramda3.not)
-]);
-var bindsToKind = (0, import_ramda3.curry)(
-  (0, import_ramda3.allPass)([(0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definedKind, (0, import_ramda3.equals)(""), import_ramda3.not), (0, import_ramda3.pipe)((binding, kind3) => definedKind(binding) === kind3)])
+
+// src/lib/filter/adjudicators/kubernetesObject.ts
+var import_ramda4 = require("ramda");
+var carriesDeletionTimestamp = (0, import_ramda4.pipe)(
+  (kubernetesObject) => !!kubernetesObject.metadata?.deletionTimestamp,
+  (0, import_ramda4.defaultTo)(false)
+);
+var missingDeletionTimestamp = (0, import_ramda4.complement)(carriesDeletionTimestamp);
+var carriedKind = (0, import_ramda4.pipe)(
+  (kubernetesObject) => kubernetesObject?.kind,
+  (0, import_ramda4.defaultTo)("not set")
+);
+var carriedVersion = (0, import_ramda4.pipe)(
+  (kubernetesObject) => kubernetesObject?.metadata?.resourceVersion,
+  (0, import_ramda4.defaultTo)("not set")
+);
+var carriedName = (0, import_ramda4.pipe)(
+  (kubernetesObject) => kubernetesObject?.metadata?.name,
+  (0, import_ramda4.defaultTo)("")
+);
+var carriesName = (0, import_ramda4.pipe)(carriedName, (0, import_ramda4.equals)(""), import_ramda4.not);
+var missingName = (0, import_ramda4.complement)(carriesName);
+var carriedNamespace = (0, import_ramda4.pipe)(
+  (kubernetesObject) => kubernetesObject?.metadata?.namespace,
+  (0, import_ramda4.defaultTo)("")
 );
-var bindsToNamespace = (0, import_ramda3.curry)((0, import_ramda3.pipe)(bindsToKind(import_ramda3.__, "Namespace")));
-var misboundNamespace = (0, import_ramda3.allPass)([bindsToNamespace, definesNamespaces]);
-var mismatchedNamespace = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definesNamespaces),
-  (0, import_ramda3.pipe)((binding, kubernetesObject) => definedNamespaces(binding).includes(carriedNamespace(kubernetesObject)), import_ramda3.not)
+var carriesNamespace = (0, import_ramda4.pipe)(carriedNamespace, (0, import_ramda4.equals)(""), import_ramda4.not);
+var carriedAnnotations = (0, import_ramda4.pipe)(
+  (kubernetesObject) => kubernetesObject?.metadata?.annotations,
+  (0, import_ramda4.defaultTo)({})
+);
+var carriesAnnotations = (0, import_ramda4.pipe)(carriedAnnotations, (0, import_ramda4.equals)({}), import_ramda4.not);
+var carriedLabels = (0, import_ramda4.pipe)(
+  (kubernetesObject) => kubernetesObject?.metadata?.labels,
+  (0, import_ramda4.defaultTo)({})
+);
+var carriesLabels = (0, import_ramda4.pipe)(carriedLabels, (0, import_ramda4.equals)({}), import_ramda4.not);
+var uncarryableNamespace = (0, import_ramda4.allPass)([
+  (0, import_ramda4.pipe)((0, import_ramda4.nthArg)(0), import_ramda4.length, (0, import_ramda4.gt)(import_ramda4.__, 0)),
+  (0, import_ramda4.pipe)((namespaceSelector, kubernetesObject) => {
+    if (kubernetesObject?.kind === "Namespace") {
+      return namespaceSelector.includes(kubernetesObject?.metadata?.name);
+    }
+    if (carriesNamespace(kubernetesObject)) {
+      return namespaceSelector.includes(carriedNamespace(kubernetesObject));
+    }
+    return true;
+  }, import_ramda4.not)
 ]);
-var mismatchedNamespaceRegex = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definesNamespaceRegexes),
-  (0, import_ramda3.pipe)(
-    (binding, kubernetesObject) => (0, import_ramda3.pipe)(
-      (0, import_ramda3.any)((regEx) => new RegExp(regEx).test(carriedNamespace(kubernetesObject))),
-      import_ramda3.not
-    )(definedNamespaceRegexes(binding))
+var missingCarriableNamespace = (0, import_ramda4.allPass)([
+  (0, import_ramda4.pipe)((0, import_ramda4.nthArg)(0), import_ramda4.length, (0, import_ramda4.gt)(import_ramda4.__, 0)),
+  (0, import_ramda4.pipe)(
+    (namespaceSelector, kubernetesObject) => kubernetesObject.kind === "Namespace" ? !namespaceSelector.includes(kubernetesObject.metadata.name) : !carriesNamespace(kubernetesObject)
   )
 ]);
-var metasMismatch = (0, import_ramda3.pipe)(
-  (defined, carried) => {
-    const result = { defined, carried, unalike: {} };
-    result.unalike = Object.entries(result.defined).map(([key, value]) => {
-      const keyMissing = !Object.hasOwn(result.carried, key);
-      const noValue = !value;
-      const valMissing = !result.carried[key];
-      const valDiffers = result.carried[key] !== result.defined[key];
-      return keyMissing ? { [key]: value } : noValue ? {} : valMissing ? { [key]: value } : valDiffers ? { [key]: value } : {};
-    }).reduce((acc, cur) => ({ ...acc, ...cur }), {});
-    return result.unalike;
-  },
-  (unalike) => Object.keys(unalike).length > 0
-);
-var mismatchedAnnotations = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definesAnnotations),
-  (0, import_ramda3.pipe)((binding, kubernetesObject) => metasMismatch(definedAnnotations(binding), carriedAnnotations(kubernetesObject)))
-]);
-var mismatchedLabels = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definesLabels),
-  (0, import_ramda3.pipe)((binding, kubernetesObject) => metasMismatch(definedLabels(binding), carriedLabels(kubernetesObject)))
+var carriesIgnoredNamespace = (0, import_ramda4.allPass)([
+  (0, import_ramda4.pipe)((0, import_ramda4.nthArg)(0), import_ramda4.length, (0, import_ramda4.gt)(import_ramda4.__, 0)),
+  (0, import_ramda4.pipe)((namespaceSelector, kubernetesObject) => {
+    if (kubernetesObject?.kind === "Namespace") {
+      return namespaceSelector.includes(kubernetesObject?.metadata?.name);
+    }
+    if (carriesNamespace(kubernetesObject)) {
+      return namespaceSelector.includes(carriedNamespace(kubernetesObject));
+    }
+    return false;
+  })
 ]);
-var uncarryableNamespace = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), import_ramda3.length, (0, import_ramda3.gt)(import_ramda3.__, 0)),
-  (0, import_ramda3.pipe)((namespaceSelector, kubernetesObject) => {
+
+// src/lib/filter/adjudicators/postCollection.ts
+var bindsToKind = (0, import_ramda5.curry)(
+  (0, import_ramda5.allPass)([(0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), definedKind, (0, import_ramda5.equals)(""), import_ramda5.not), (0, import_ramda5.pipe)((binding, kind3) => definedKind(binding) === kind3)])
+);
+var bindsToNamespace = (0, import_ramda5.curry)((0, import_ramda5.pipe)(bindsToKind(import_ramda5.__, "Namespace")));
+var misboundNamespace = (0, import_ramda5.allPass)([bindsToNamespace, definesNamespaces]);
+var uncarryableNamespace2 = (0, import_ramda5.allPass)([
+  (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), import_ramda5.length, (0, import_ramda5.gt)(import_ramda5.__, 0)),
+  (0, import_ramda5.pipe)((namespaceSelector, kubernetesObject) => {
     if (kubernetesObject?.kind === "Namespace") {
       return namespaceSelector.includes(kubernetesObject?.metadata?.name);
     }
@@ -1037,17 +1011,17 @@ var uncarryableNamespace = (0, import_ramda3.allPass)([
       return namespaceSelector.includes(carriedNamespace(kubernetesObject));
     }
     return true;
-  }, import_ramda3.not)
+  }, import_ramda5.not)
 ]);
-var missingCarriableNamespace = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), import_ramda3.length, (0, import_ramda3.gt)(import_ramda3.__, 0)),
-  (0, import_ramda3.pipe)(
+var missingCarriableNamespace2 = (0, import_ramda5.allPass)([
+  (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), import_ramda5.length, (0, import_ramda5.gt)(import_ramda5.__, 0)),
+  (0, import_ramda5.pipe)(
     (namespaceSelector, kubernetesObject) => kubernetesObject.kind === "Namespace" ? !namespaceSelector.includes(kubernetesObject.metadata.name) : !carriesNamespace(kubernetesObject)
   )
 ]);
-var carriesIgnoredNamespace = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), import_ramda3.length, (0, import_ramda3.gt)(import_ramda3.__, 0)),
-  (0, import_ramda3.pipe)((namespaceSelector, kubernetesObject) => {
+var carriesIgnoredNamespace2 = (0, import_ramda5.allPass)([
+  (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), import_ramda5.length, (0, import_ramda5.gt)(import_ramda5.__, 0)),
+  (0, import_ramda5.pipe)((namespaceSelector, kubernetesObject) => {
     if (kubernetesObject?.kind === "Namespace") {
       return namespaceSelector.includes(kubernetesObject?.metadata?.name);
     }
@@ -1057,37 +1031,107 @@ var carriesIgnoredNamespace = (0, import_ramda3.allPass)([
     return false;
   })
 ]);
-var unbindableNamespaces = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), import_ramda3.length, (0, import_ramda3.gt)(import_ramda3.__, 0)),
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(1), definesNamespaces),
-  (0, import_ramda3.pipe)(
-    (namespaceSelector, binding) => (0, import_ramda3.difference)(definedNamespaces(binding), namespaceSelector),
-    import_ramda3.length,
-    (0, import_ramda3.equals)(0),
-    import_ramda3.not
+var unbindableNamespaces = (0, import_ramda5.allPass)([
+  (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), import_ramda5.length, (0, import_ramda5.gt)(import_ramda5.__, 0)),
+  (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(1), definesNamespaces),
+  (0, import_ramda5.pipe)(
+    (namespaceSelector, binding) => (0, import_ramda5.difference)(definedNamespaces(binding), namespaceSelector),
+    import_ramda5.length,
+    (0, import_ramda5.equals)(0),
+    import_ramda5.not
+  )
+]);
+var misboundDeleteWithDeletionTimestamp = (0, import_ramda5.allPass)([definesDelete, definesDeletionTimestamp]);
+
+// src/lib/filter/adjudicators/admissionRequest.ts
+var import_ramda6 = require("ramda");
+var declaredOperation = (0, import_ramda6.pipe)(
+  (request) => request?.operation,
+  (0, import_ramda6.defaultTo)("")
+);
+var declaredGroup = (0, import_ramda6.pipe)(
+  (request) => request?.kind?.group,
+  (0, import_ramda6.defaultTo)("")
+);
+var declaredVersion = (0, import_ramda6.pipe)(
+  (request) => request?.kind?.version,
+  (0, import_ramda6.defaultTo)("")
+);
+var declaredKind = (0, import_ramda6.pipe)(
+  (request) => request?.kind?.kind,
+  (0, import_ramda6.defaultTo)("")
+);
+var declaredUid = (0, import_ramda6.pipe)((request) => request?.uid, (0, import_ramda6.defaultTo)(""));
+
+// src/lib/filter/adjudicators/mismatch.ts
+var import_ramda7 = require("ramda");
+var mismatchedDeletionTimestamp = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesDeletionTimestamp),
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(1), missingDeletionTimestamp)
+]);
+var mismatchedName = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesName),
+  (0, import_ramda7.pipe)((binding, kubernetesObject) => definedName(binding) !== carriedName(kubernetesObject))
+]);
+var mismatchedNameRegex = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesNameRegex),
+  (0, import_ramda7.pipe)((binding, kubernetesObject) => new RegExp(definedNameRegex(binding)).test(carriedName(kubernetesObject)), import_ramda7.not)
+]);
+var mismatchedNamespace = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesNamespaces),
+  (0, import_ramda7.pipe)((binding, kubernetesObject) => definedNamespaces(binding).includes(carriedNamespace(kubernetesObject)), import_ramda7.not)
+]);
+var mismatchedNamespaceRegex = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesNamespaceRegexes),
+  (0, import_ramda7.pipe)(
+    (binding, kubernetesObject) => (0, import_ramda7.pipe)(
+      (0, import_ramda7.any)((regEx) => new RegExp(regEx).test(carriedNamespace(kubernetesObject))),
+      import_ramda7.not
+    )(definedNamespaceRegexes(binding))
   )
 ]);
-var misboundDeleteWithDeletionTimestamp = (0, import_ramda3.allPass)([definesDelete, definesDeletionTimestamp]);
-var operationMatchesEvent = (0, import_ramda3.anyPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(1), (0, import_ramda3.equals)("*" /* ANY */)),
-  (0, import_ramda3.pipe)((operation, event) => operation.valueOf() === event.valueOf()),
-  (0, import_ramda3.pipe)((operation, event) => operation ? event.includes(operation) : false)
+var metasMismatch = (0, import_ramda7.pipe)(
+  (defined, carried) => {
+    const result = { defined, carried, unalike: {} };
+    result.unalike = Object.entries(result.defined).map(([key, value]) => {
+      const keyMissing = !Object.hasOwn(result.carried, key);
+      const noValue = !value;
+      const valMissing = !result.carried[key];
+      const valDiffers = result.carried[key] !== result.defined[key];
+      return keyMissing ? { [key]: value } : noValue ? {} : valMissing ? { [key]: value } : valDiffers ? { [key]: value } : {};
+    }).reduce((acc, cur) => ({ ...acc, ...cur }), {});
+    return result.unalike;
+  },
+  (unalike) => Object.keys(unalike).length > 0
+);
+var mismatchedAnnotations = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesAnnotations),
+  (0, import_ramda7.pipe)((binding, kubernetesObject) => metasMismatch(definedAnnotations(binding), carriedAnnotations(kubernetesObject)))
+]);
+var mismatchedLabels = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesLabels),
+  (0, import_ramda7.pipe)((binding, kubernetesObject) => metasMismatch(definedLabels(binding), carriedLabels(kubernetesObject)))
 ]);
-var mismatchedEvent = (0, import_ramda3.pipe)(
+var mismatchedEvent = (0, import_ramda7.pipe)(
   (binding, request) => operationMatchesEvent(declaredOperation(request), definedEvent(binding)),
-  import_ramda3.not
+  import_ramda7.not
 );
-var mismatchedGroup = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definesGroup),
-  (0, import_ramda3.pipe)((binding, request) => definedGroup(binding) !== declaredGroup(request))
+var mismatchedGroup = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesGroup),
+  (0, import_ramda7.pipe)((binding, request) => definedGroup(binding) !== declaredGroup(request))
 ]);
-var mismatchedVersion = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definesVersion),
-  (0, import_ramda3.pipe)((binding, request) => definedVersion(binding) !== declaredVersion(request))
+var mismatchedVersion = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesVersion),
+  (0, import_ramda7.pipe)((binding, request) => definedVersion(binding) !== declaredVersion(request))
 ]);
-var mismatchedKind = (0, import_ramda3.allPass)([
-  (0, import_ramda3.pipe)((0, import_ramda3.nthArg)(0), definesKind),
-  (0, import_ramda3.pipe)((binding, request) => definedKind(binding) !== declaredKind(request))
+var mismatchedKind = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesKind),
+  (0, import_ramda7.pipe)((binding, request) => definedKind(binding) !== declaredKind(request))
+]);
+var operationMatchesEvent = (0, import_ramda7.anyPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(1), (0, import_ramda7.equals)("*" /* ANY */)),
+  (0, import_ramda7.pipe)((operation, event) => operation.valueOf() === event.valueOf()),
+  (0, import_ramda7.pipe)((operation, event) => operation ? event.includes(operation) : false)
 ]);
 
 // src/lib/filter/filter.ts
@@ -1172,7 +1216,7 @@ function adjudicateUnbindableNamespaces(capabilityNamespaces, binding) {
   return unbindableNamespaces(capabilityNamespaces, binding) ? `Binding defines namespaces ${JSON.stringify(definedNamespaces(binding))} but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
 }
 function adjudicateUncarryableNamespace(capabilityNamespaces, obj) {
-  return uncarryableNamespace(capabilityNamespaces, obj) ? `Object carries namespace '${obj.kind && obj.kind === "Namespace" ? obj.metadata?.name : carriedNamespace(obj)}' but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
+  return uncarryableNamespace2(capabilityNamespaces, obj) ? `Object carries namespace '${obj.kind && obj.kind === "Namespace" ? obj.metadata?.name : carriedNamespace(obj)}' but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
 }
 function adjudicateMismatchedNamespace(binding, obj) {
   return mismatchedNamespace(binding, obj) ? `Binding defines namespaces '${JSON.stringify(definedNamespaces(binding))}' but Object carries '${carriedNamespace(obj)}'.` : null;
@@ -1190,14 +1234,14 @@ function adjudicateMismatchedNameRegex(binding, obj) {
   return mismatchedNameRegex(binding, obj) ? `Binding defines name regex '${definedNameRegex(binding)}' but Object carries '${carriedName(obj)}'.` : null;
 }
 function adjudicateCarriesIgnoredNamespace(ignoredNamespaces, obj) {
-  return carriesIgnoredNamespace(ignoredNamespaces, obj) ? `Object carries namespace '${obj.kind && obj.kind === "Namespace" ? obj.metadata?.name : carriedNamespace(obj)}' but ignored namespaces include '${JSON.stringify(ignoredNamespaces)}'.` : null;
+  return carriesIgnoredNamespace2(ignoredNamespaces, obj) ? `Object carries namespace '${obj.kind && obj.kind === "Namespace" ? obj.metadata?.name : carriedNamespace(obj)}' but ignored namespaces include '${JSON.stringify(ignoredNamespaces)}'.` : null;
 }
 function adjudicateMissingCarriableNamespace(capabilityNamespaces, obj) {
-  return missingCarriableNamespace(capabilityNamespaces, obj) ? `Object does not carry a namespace but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
+  return missingCarriableNamespace2(capabilityNamespaces, obj) ? `Object does not carry a namespace but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
 }
 
 // src/lib/mutate-request.ts
-var import_ramda4 = require("ramda");
+var import_ramda8 = require("ramda");
 var PeprMutateRequest = class {
   Raw;
   #input;
@@ -1216,16 +1260,16 @@ var PeprMutateRequest = class {
   constructor(input) {
     this.#input = input;
     if (input.operation.toUpperCase() === "DELETE" /* DELETE */) {
-      this.Raw = (0, import_ramda4.clone)(input.oldObject);
+      this.Raw = (0, import_ramda8.clone)(input.oldObject);
     } else {
-      this.Raw = (0, import_ramda4.clone)(input.object);
+      this.Raw = (0, import_ramda8.clone)(input.object);
     }
     if (!this.Raw) {
       throw new Error("Unable to load the request object into PeprRequest.Raw");
     }
   }
   Merge = (obj) => {
-    this.Raw = (0, import_ramda4.mergeDeepRight)(this.Raw, obj);
+    this.Raw = (0, import_ramda8.mergeDeepRight)(this.Raw, obj);
   };
   SetLabel = (key, value) => {
     const ref = this.Raw;
@@ -1312,7 +1356,7 @@ var OnError = /* @__PURE__ */ ((OnError2) => {
 })(OnError || {});
 
 // src/lib/assets/webhooks.ts
-var import_ramda5 = require("ramda");
+var import_ramda9 = require("ramda");
 function resolveIgnoreNamespaces(ignoredNSConfig = []) {
   const ignoredNSEnv = process.env.PEPR_ADDITIONAL_IGNORED_NAMESPACES;
   if (!ignoredNSEnv) {
@@ -1353,7 +1397,7 @@ function decodeData(wrapped) {
   return { skipped, wrapped };
 }
 function reencodeData(wrapped, skipped) {
-  const transformed = (0, import_ramda6.clone)(wrapped.Raw);
+  const transformed = (0, import_ramda10.clone)(wrapped.Raw);
   const isSecret = wrapped.Request.kind.version === "v1" && wrapped.Request.kind.kind === "Secret";
   if (isSecret) {
     convertToBase64Map(transformed, skipped);
@@ -1456,7 +1500,7 @@ function updateResponsePatchAndWarnings(patches, response) {
 }
 
 // src/lib/validate-request.ts
-var import_ramda7 = require("ramda");
+var import_ramda11 = require("ramda");
 var PeprValidateRequest = class {
   Raw;
   #input;
@@ -1481,9 +1525,9 @@ var PeprValidateRequest = class {
   constructor(input) {
     this.#input = input;
     if (input.operation.toUpperCase() === "DELETE" /* DELETE */) {
-      this.Raw = (0, import_ramda7.clone)(input.oldObject);
+      this.Raw = (0, import_ramda11.clone)(input.oldObject);
     } else {
-      this.Raw = (0, import_ramda7.clone)(input.object);
+      this.Raw = (0, import_ramda11.clone)(input.object);
     }
     if (!this.Raw) {
       throw new Error("unable to load the request object into PeprRequest.Raw");
@@ -1598,7 +1642,7 @@ async function validateProcessor(config, capabilities, req, reqMetadata) {
 
 // src/lib/controller/store.ts
 var import_kubernetes_fluent_client5 = require("kubernetes-fluent-client");
-var import_ramda8 = require("ramda");
+var import_ramda12 = require("ramda");
 
 // src/lib/k8s.ts
 var import_kubernetes_fluent_client3 = require("kubernetes-fluent-client");
@@ -1712,7 +1756,7 @@ var StoreController = class {
     for (const name2 of Object.keys(this.#stores)) {
       const offset = `${name2}-`.length;
       for (const key of Object.keys(data)) {
-        if ((0, import_ramda8.startsWith)(name2, key) && !(0, import_ramda8.startsWith)(`${name2}-v2`, key)) {
+        if ((0, import_ramda12.startsWith)(name2, key) && !(0, import_ramda12.startsWith)(`${name2}-v2`, key)) {
           storeCache = fillStoreCache(storeCache, name2, "remove", {
             key: [key.slice(offset)],
             value: data[key]
@@ -1736,7 +1780,7 @@ var StoreController = class {
         const offset = `${name2}-`.length;
         const filtered = {};
         for (const key of Object.keys(data)) {
-          if ((0, import_ramda8.startsWith)(name2, key)) {
+          if ((0, import_ramda12.startsWith)(name2, key)) {
             filtered[key.slice(offset)] = data[key];
           }
         }
@@ -2207,7 +2251,7 @@ async function runBinding(binding, capabilityNamespaces, ignoredNamespaces) {
       }
     }
   };
-  const watcher = (0, import_kubernetes_fluent_client6.K8s)(binding.model, binding.filters).Watch(async (obj, phase) => {
+  const watcher = (0, import_kubernetes_fluent_client6.K8s)(binding.model, { ...binding.filters, kindOverride: binding.kind }).Watch(async (obj, phase) => {
     logger_default.debug(obj, `Watch event ${phase} received`);
     if (binding.isQueue) {
       const queue = getOrCreateQueue(obj);
@@ -2268,7 +2312,7 @@ var PeprModule = class {
    * @param opts Options for the Pepr runtime
    */
   constructor({ description, pepr }, capabilities = [], opts = {}) {
-    const config = (0, import_ramda9.clone)(pepr);
+    const config = (0, import_ramda13.clone)(pepr);
     config.description = description;
     ValidateError(config.onError);
     if (isBuildMode()) {