pepr 0.46.3-nightly.6 → 0.46.3-nightly.8

package/dist/lib.js

@@ -909,142 +909,122 @@ var MeasureWebhookTimeout = class {
   }
 };
 
-// src/lib/filter/adjudicators/postCollection.ts
-var import_ramda5 = require("ramda");
+// src/lib/filter/adjudicators/admissionRequest.ts
+var import_ramda3 = require("ramda");
+var declaredOperation = (0, import_ramda3.pipe)(
+  (request) => request?.operation,
+  (0, import_ramda3.defaultTo)("")
+);
+var declaredGroup = (0, import_ramda3.pipe)(
+  (request) => request?.kind?.group,
+  (0, import_ramda3.defaultTo)("")
+);
+var declaredVersion = (0, import_ramda3.pipe)(
+  (request) => request?.kind?.version,
+  (0, import_ramda3.defaultTo)("")
+);
+var declaredKind = (0, import_ramda3.pipe)(
+  (request) => request?.kind?.kind,
+  (0, import_ramda3.defaultTo)("")
+);
+var declaredUid = (0, import_ramda3.pipe)(
+  (request) => request?.uid,
+  (0, import_ramda3.defaultTo)("")
+);
 
 // src/lib/filter/adjudicators/binding.ts
-var import_ramda3 = require("ramda");
-var definesDeletionTimestamp = (0, import_ramda3.pipe)(
+var import_ramda4 = require("ramda");
+var definesDeletionTimestamp = (0, import_ramda4.pipe)(
   (binding) => binding?.filters?.deletionTimestamp ?? false,
-  (0, import_ramda3.defaultTo)(false)
+  (0, import_ramda4.defaultTo)(false)
 );
-var ignoresDeletionTimestamp = (0, import_ramda3.complement)(definesDeletionTimestamp);
-var definedName = (0, import_ramda3.pipe)((binding) => {
+var ignoresDeletionTimestamp = (0, import_ramda4.complement)(definesDeletionTimestamp);
+var definedName = (0, import_ramda4.pipe)((binding) => {
   return binding.filters.name;
-}, (0, import_ramda3.defaultTo)(""));
-var definesName = (0, import_ramda3.pipe)(definedName, (0, import_ramda3.equals)(""), import_ramda3.not);
-var ignoresName = (0, import_ramda3.complement)(definesName);
-var definedNameRegex = (0, import_ramda3.pipe)(
+}, (0, import_ramda4.defaultTo)(""));
+var definesName = (0, import_ramda4.pipe)(definedName, (0, import_ramda4.equals)(""), import_ramda4.not);
+var ignoresName = (0, import_ramda4.complement)(definesName);
+var definedNameRegex = (0, import_ramda4.pipe)(
   (binding) => binding.filters?.regexName,
-  (0, import_ramda3.defaultTo)("")
+  (0, import_ramda4.defaultTo)("")
 );
-var definesNameRegex = (0, import_ramda3.pipe)(definedNameRegex, (0, import_ramda3.equals)(""), import_ramda3.not);
-var definedNamespaces = (0, import_ramda3.pipe)((binding) => binding?.filters?.namespaces, (0, import_ramda3.defaultTo)([]));
-var definesNamespaces = (0, import_ramda3.pipe)(definedNamespaces, (0, import_ramda3.equals)([]), import_ramda3.not);
-var definedNamespaceRegexes = (0, import_ramda3.pipe)(
+var definesNameRegex = (0, import_ramda4.pipe)(definedNameRegex, (0, import_ramda4.equals)(""), import_ramda4.not);
+var definedNamespaces = (0, import_ramda4.pipe)((binding) => binding?.filters?.namespaces, (0, import_ramda4.defaultTo)([]));
+var definesNamespaces = (0, import_ramda4.pipe)(definedNamespaces, (0, import_ramda4.equals)([]), import_ramda4.not);
+var definedNamespaceRegexes = (0, import_ramda4.pipe)(
   (binding) => binding?.filters?.regexNamespaces,
-  (0, import_ramda3.defaultTo)([])
+  (0, import_ramda4.defaultTo)([])
 );
-var definesNamespaceRegexes = (0, import_ramda3.pipe)(definedNamespaceRegexes, (0, import_ramda3.equals)([]), import_ramda3.not);
-var definedAnnotations = (0, import_ramda3.pipe)(
+var definesNamespaceRegexes = (0, import_ramda4.pipe)(definedNamespaceRegexes, (0, import_ramda4.equals)([]), import_ramda4.not);
+var definedAnnotations = (0, import_ramda4.pipe)(
   (binding) => binding?.filters?.annotations,
-  (0, import_ramda3.defaultTo)({})
+  (0, import_ramda4.defaultTo)({})
 );
-var definesAnnotations = (0, import_ramda3.pipe)(definedAnnotations, (0, import_ramda3.equals)({}), import_ramda3.not);
-var definedLabels = (0, import_ramda3.pipe)(
+var definesAnnotations = (0, import_ramda4.pipe)(definedAnnotations, (0, import_ramda4.equals)({}), import_ramda4.not);
+var definedLabels = (0, import_ramda4.pipe)(
   (binding) => binding?.filters?.labels,
-  (0, import_ramda3.defaultTo)({})
+  (0, import_ramda4.defaultTo)({})
 );
-var definesLabels = (0, import_ramda3.pipe)(definedLabels, (0, import_ramda3.equals)({}), import_ramda3.not);
+var definesLabels = (0, import_ramda4.pipe)(definedLabels, (0, import_ramda4.equals)({}), import_ramda4.not);
 var definedEvent = (binding) => {
   return binding.event;
 };
-var definesDelete = (0, import_ramda3.pipe)(definedEvent, (0, import_ramda3.equals)("DELETE" /* DELETE */));
-var definedGroup = (0, import_ramda3.pipe)((binding) => binding?.kind?.group, (0, import_ramda3.defaultTo)(""));
-var definesGroup = (0, import_ramda3.pipe)(definedGroup, (0, import_ramda3.equals)(""), import_ramda3.not);
-var definedVersion = (0, import_ramda3.pipe)(
+var definesDelete = (0, import_ramda4.pipe)(definedEvent, (0, import_ramda4.equals)("DELETE" /* DELETE */));
+var definedGroup = (0, import_ramda4.pipe)((binding) => binding?.kind?.group, (0, import_ramda4.defaultTo)(""));
+var definesGroup = (0, import_ramda4.pipe)(definedGroup, (0, import_ramda4.equals)(""), import_ramda4.not);
+var definedVersion = (0, import_ramda4.pipe)(
   (binding) => binding?.kind?.version,
-  (0, import_ramda3.defaultTo)("")
+  (0, import_ramda4.defaultTo)("")
 );
-var definesVersion = (0, import_ramda3.pipe)(definedVersion, (0, import_ramda3.equals)(""), import_ramda3.not);
-var definedKind = (0, import_ramda3.pipe)((binding) => binding?.kind?.kind, (0, import_ramda3.defaultTo)(""));
-var definesKind = (0, import_ramda3.pipe)(definedKind, (0, import_ramda3.equals)(""), import_ramda3.not);
+var definesVersion = (0, import_ramda4.pipe)(definedVersion, (0, import_ramda4.equals)(""), import_ramda4.not);
+var definedKind = (0, import_ramda4.pipe)((binding) => binding?.kind?.kind, (0, import_ramda4.defaultTo)(""));
+var definesKind = (0, import_ramda4.pipe)(definedKind, (0, import_ramda4.equals)(""), import_ramda4.not);
 var definedCallback = (binding) => {
   return binding.isFinalize ? binding.finalizeCallback : binding.isWatch ? binding.watchCallback : binding.isMutate ? binding.mutateCallback : binding.isValidate ? binding.validateCallback : null;
 };
-var definedCallbackName = (0, import_ramda3.pipe)(
+var definedCallbackName = (0, import_ramda4.pipe)(
   definedCallback,
-  (0, import_ramda3.defaultTo)({ name: "" }),
+  (0, import_ramda4.defaultTo)({ name: "" }),
   (callback) => callback.name
 );
 
 // src/lib/filter/adjudicators/kubernetesObject.ts
-var import_ramda4 = require("ramda");
-var carriesDeletionTimestamp = (0, import_ramda4.pipe)(
+var import_ramda5 = require("ramda");
+var carriesDeletionTimestamp = (0, import_ramda5.pipe)(
   (kubernetesObject) => !!kubernetesObject.metadata?.deletionTimestamp,
-  (0, import_ramda4.defaultTo)(false)
+  (0, import_ramda5.defaultTo)(false)
 );
-var missingDeletionTimestamp = (0, import_ramda4.complement)(carriesDeletionTimestamp);
-var carriedKind = (0, import_ramda4.pipe)(
+var missingDeletionTimestamp = (0, import_ramda5.complement)(carriesDeletionTimestamp);
+var carriedKind = (0, import_ramda5.pipe)(
   (kubernetesObject) => kubernetesObject?.kind,
-  (0, import_ramda4.defaultTo)("not set")
+  (0, import_ramda5.defaultTo)("not set")
 );
-var carriedVersion = (0, import_ramda4.pipe)(
+var carriedVersion = (0, import_ramda5.pipe)(
   (kubernetesObject) => kubernetesObject?.metadata?.resourceVersion,
-  (0, import_ramda4.defaultTo)("not set")
+  (0, import_ramda5.defaultTo)("not set")
 );
-var carriedName = (0, import_ramda4.pipe)(
+var carriedName = (0, import_ramda5.pipe)(
   (kubernetesObject) => kubernetesObject?.metadata?.name,
-  (0, import_ramda4.defaultTo)("")
+  (0, import_ramda5.defaultTo)("")
 );
-var carriesName = (0, import_ramda4.pipe)(carriedName, (0, import_ramda4.equals)(""), import_ramda4.not);
-var missingName = (0, import_ramda4.complement)(carriesName);
-var carriedNamespace = (0, import_ramda4.pipe)(
+var carriesName = (0, import_ramda5.pipe)(carriedName, (0, import_ramda5.equals)(""), import_ramda5.not);
+var missingName = (0, import_ramda5.complement)(carriesName);
+var carriedNamespace = (0, import_ramda5.pipe)(
   (kubernetesObject) => kubernetesObject?.metadata?.namespace,
-  (0, import_ramda4.defaultTo)("")
+  (0, import_ramda5.defaultTo)("")
 );
-var carriesNamespace = (0, import_ramda4.pipe)(carriedNamespace, (0, import_ramda4.equals)(""), import_ramda4.not);
-var carriedAnnotations = (0, import_ramda4.pipe)(
+var carriesNamespace = (0, import_ramda5.pipe)(carriedNamespace, (0, import_ramda5.equals)(""), import_ramda5.not);
+var carriedAnnotations = (0, import_ramda5.pipe)(
   (kubernetesObject) => kubernetesObject?.metadata?.annotations,
-  (0, import_ramda4.defaultTo)({})
+  (0, import_ramda5.defaultTo)({})
 );
-var carriesAnnotations = (0, import_ramda4.pipe)(carriedAnnotations, (0, import_ramda4.equals)({}), import_ramda4.not);
-var carriedLabels = (0, import_ramda4.pipe)(
+var carriesAnnotations = (0, import_ramda5.pipe)(carriedAnnotations, (0, import_ramda5.equals)({}), import_ramda5.not);
+var carriedLabels = (0, import_ramda5.pipe)(
   (kubernetesObject) => kubernetesObject?.metadata?.labels,
-  (0, import_ramda4.defaultTo)({})
+  (0, import_ramda5.defaultTo)({})
 );
-var carriesLabels = (0, import_ramda4.pipe)(carriedLabels, (0, import_ramda4.equals)({}), import_ramda4.not);
-var uncarryableNamespace = (0, import_ramda4.allPass)([
-  (0, import_ramda4.pipe)((0, import_ramda4.nthArg)(0), import_ramda4.length, (0, import_ramda4.gt)(import_ramda4.__, 0)),
-  (0, import_ramda4.pipe)((namespaceSelector, kubernetesObject) => {
-    if (kubernetesObject?.kind === "Namespace") {
-      return namespaceSelector.includes(kubernetesObject?.metadata?.name);
-    }
-    if (carriesNamespace(kubernetesObject)) {
-      return namespaceSelector.includes(carriedNamespace(kubernetesObject));
-    }
-    return true;
-  }, import_ramda4.not)
-]);
-var missingCarriableNamespace = (0, import_ramda4.allPass)([
-  (0, import_ramda4.pipe)((0, import_ramda4.nthArg)(0), import_ramda4.length, (0, import_ramda4.gt)(import_ramda4.__, 0)),
-  (0, import_ramda4.pipe)(
-    (namespaceSelector, kubernetesObject) => kubernetesObject.kind === "Namespace" ? !namespaceSelector.includes(kubernetesObject.metadata.name) : !carriesNamespace(kubernetesObject)
-  )
-]);
-var carriesIgnoredNamespace = (0, import_ramda4.allPass)([
-  (0, import_ramda4.pipe)((0, import_ramda4.nthArg)(0), import_ramda4.length, (0, import_ramda4.gt)(import_ramda4.__, 0)),
-  (0, import_ramda4.pipe)((namespaceSelector, kubernetesObject) => {
-    if (kubernetesObject?.kind === "Namespace") {
-      return namespaceSelector.includes(kubernetesObject?.metadata?.name);
-    }
-    if (carriesNamespace(kubernetesObject)) {
-      return namespaceSelector.includes(carriedNamespace(kubernetesObject));
-    }
-    return false;
-  })
-]);
-
-// src/lib/filter/adjudicators/postCollection.ts
-var bindsToKind = (0, import_ramda5.curry)(
-  (0, import_ramda5.allPass)([
-    (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), definedKind, (0, import_ramda5.equals)(""), import_ramda5.not),
-    (0, import_ramda5.pipe)((binding, kind3) => definedKind(binding) === kind3)
-  ])
-);
-var bindsToNamespace = (0, import_ramda5.curry)((0, import_ramda5.pipe)(bindsToKind(import_ramda5.__, "Namespace")));
-var misboundNamespace = (0, import_ramda5.allPass)([bindsToNamespace, definesNamespaces]);
-var uncarryableNamespace2 = (0, import_ramda5.allPass)([
+var carriesLabels = (0, import_ramda5.pipe)(carriedLabels, (0, import_ramda5.equals)({}), import_ramda5.not);
+var uncarryableNamespace = (0, import_ramda5.allPass)([
   (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), import_ramda5.length, (0, import_ramda5.gt)(import_ramda5.__, 0)),
   (0, import_ramda5.pipe)((namespaceSelector, kubernetesObject) => {
     if (kubernetesObject?.kind === "Namespace") {
@@ -1056,13 +1036,13 @@ var uncarryableNamespace2 = (0, import_ramda5.allPass)([
     return true;
   }, import_ramda5.not)
 ]);
-var missingCarriableNamespace2 = (0, import_ramda5.allPass)([
+var missingCarriableNamespace = (0, import_ramda5.allPass)([
   (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), import_ramda5.length, (0, import_ramda5.gt)(import_ramda5.__, 0)),
   (0, import_ramda5.pipe)(
     (namespaceSelector, kubernetesObject) => kubernetesObject.kind === "Namespace" ? !namespaceSelector.includes(kubernetesObject.metadata.name) : !carriesNamespace(kubernetesObject)
   )
 ]);
-var carriesIgnoredNamespace2 = (0, import_ramda5.allPass)([
+var carriesIgnoredNamespace = (0, import_ramda5.allPass)([
   (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), import_ramda5.length, (0, import_ramda5.gt)(import_ramda5.__, 0)),
   (0, import_ramda5.pipe)((namespaceSelector, kubernetesObject) => {
     if (kubernetesObject?.kind === "Namespace") {
@@ -1074,78 +1054,41 @@ var carriesIgnoredNamespace2 = (0, import_ramda5.allPass)([
     return false;
   })
 ]);
-var unbindableNamespaces = (0, import_ramda5.allPass)([
-  (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(0), import_ramda5.length, (0, import_ramda5.gt)(import_ramda5.__, 0)),
-  (0, import_ramda5.pipe)((0, import_ramda5.nthArg)(1), definesNamespaces),
-  (0, import_ramda5.pipe)(
-    (namespaceSelector, binding) => (0, import_ramda5.difference)(definedNamespaces(binding), namespaceSelector),
-    import_ramda5.length,
-    (0, import_ramda5.equals)(0),
-    import_ramda5.not
-  )
-]);
-var misboundDeleteWithDeletionTimestamp = (0, import_ramda5.allPass)([
-  definesDelete,
-  definesDeletionTimestamp
-]);
-
-// src/lib/filter/adjudicators/admissionRequest.ts
-var import_ramda6 = require("ramda");
-var declaredOperation = (0, import_ramda6.pipe)(
-  (request) => request?.operation,
-  (0, import_ramda6.defaultTo)("")
-);
-var declaredGroup = (0, import_ramda6.pipe)(
-  (request) => request?.kind?.group,
-  (0, import_ramda6.defaultTo)("")
-);
-var declaredVersion = (0, import_ramda6.pipe)(
-  (request) => request?.kind?.version,
-  (0, import_ramda6.defaultTo)("")
-);
-var declaredKind = (0, import_ramda6.pipe)(
-  (request) => request?.kind?.kind,
-  (0, import_ramda6.defaultTo)("")
-);
-var declaredUid = (0, import_ramda6.pipe)(
-  (request) => request?.uid,
-  (0, import_ramda6.defaultTo)("")
-);
 
 // src/lib/filter/adjudicators/mismatch.ts
-var import_ramda7 = require("ramda");
-var mismatchedDeletionTimestamp = (0, import_ramda7.allPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesDeletionTimestamp),
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(1), missingDeletionTimestamp)
+var import_ramda6 = require("ramda");
+var mismatchedDeletionTimestamp = (0, import_ramda6.allPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(0), definesDeletionTimestamp),
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(1), missingDeletionTimestamp)
 ]);
-var mismatchedName = (0, import_ramda7.allPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesName),
-  (0, import_ramda7.pipe)((binding, kubernetesObject) => definedName(binding) !== carriedName(kubernetesObject))
+var mismatchedName = (0, import_ramda6.allPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(0), definesName),
+  (0, import_ramda6.pipe)((binding, kubernetesObject) => definedName(binding) !== carriedName(kubernetesObject))
 ]);
-var mismatchedNameRegex = (0, import_ramda7.allPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesNameRegex),
-  (0, import_ramda7.pipe)(
+var mismatchedNameRegex = (0, import_ramda6.allPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(0), definesNameRegex),
+  (0, import_ramda6.pipe)(
     (binding, kubernetesObject) => new RegExp(definedNameRegex(binding)).test(carriedName(kubernetesObject)),
-    import_ramda7.not
+    import_ramda6.not
   )
 ]);
-var mismatchedNamespace = (0, import_ramda7.allPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesNamespaces),
-  (0, import_ramda7.pipe)(
+var mismatchedNamespace = (0, import_ramda6.allPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(0), definesNamespaces),
+  (0, import_ramda6.pipe)(
     (binding, kubernetesObject) => definedNamespaces(binding).includes(carriedNamespace(kubernetesObject)),
-    import_ramda7.not
+    import_ramda6.not
   )
 ]);
-var mismatchedNamespaceRegex = (0, import_ramda7.allPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesNamespaceRegexes),
-  (0, import_ramda7.pipe)(
-    (binding, kubernetesObject) => (0, import_ramda7.pipe)(
-      (0, import_ramda7.any)((regEx) => new RegExp(regEx).test(carriedNamespace(kubernetesObject))),
-      import_ramda7.not
+var mismatchedNamespaceRegex = (0, import_ramda6.allPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(0), definesNamespaceRegexes),
+  (0, import_ramda6.pipe)(
+    (binding, kubernetesObject) => (0, import_ramda6.pipe)(
+      (0, import_ramda6.any)((regEx) => new RegExp(regEx).test(carriedNamespace(kubernetesObject))),
+      import_ramda6.not
     )(definedNamespaceRegexes(binding))
   )
 ]);
-var metasMismatch = (0, import_ramda7.pipe)(
+var metasMismatch = (0, import_ramda6.pipe)(
   (defined, carried) => {
     const result = { defined, carried, unalike: {} };
     result.unalike = Object.entries(result.defined).map(([key, value]) => {
@@ -1159,42 +1102,150 @@ var metasMismatch = (0, import_ramda7.pipe)(
   },
   (unalike) => Object.keys(unalike).length > 0
 );
-var mismatchedAnnotations = (0, import_ramda7.allPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesAnnotations),
-  (0, import_ramda7.pipe)(
+var mismatchedAnnotations = (0, import_ramda6.allPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(0), definesAnnotations),
+  (0, import_ramda6.pipe)(
     (binding, kubernetesObject) => metasMismatch(definedAnnotations(binding), carriedAnnotations(kubernetesObject))
   )
 ]);
-var mismatchedLabels = (0, import_ramda7.allPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesLabels),
-  (0, import_ramda7.pipe)(
+var mismatchedLabels = (0, import_ramda6.allPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(0), definesLabels),
+  (0, import_ramda6.pipe)(
     (binding, kubernetesObject) => metasMismatch(definedLabels(binding), carriedLabels(kubernetesObject))
   )
 ]);
-var mismatchedEvent = (0, import_ramda7.pipe)(
+var mismatchedEvent = (0, import_ramda6.pipe)(
   (binding, request) => operationMatchesEvent(declaredOperation(request), definedEvent(binding)),
-  import_ramda7.not
+  import_ramda6.not
 );
-var mismatchedGroup = (0, import_ramda7.allPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesGroup),
-  (0, import_ramda7.pipe)((binding, request) => definedGroup(binding) !== declaredGroup(request))
+var mismatchedGroup = (0, import_ramda6.allPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(0), definesGroup),
+  (0, import_ramda6.pipe)((binding, request) => definedGroup(binding) !== declaredGroup(request))
 ]);
-var mismatchedVersion = (0, import_ramda7.allPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesVersion),
-  (0, import_ramda7.pipe)((binding, request) => definedVersion(binding) !== declaredVersion(request))
+var mismatchedVersion = (0, import_ramda6.allPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(0), definesVersion),
+  (0, import_ramda6.pipe)((binding, request) => definedVersion(binding) !== declaredVersion(request))
 ]);
-var mismatchedKind = (0, import_ramda7.allPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definesKind),
-  (0, import_ramda7.pipe)((binding, request) => definedKind(binding) !== declaredKind(request))
+var mismatchedKind = (0, import_ramda6.allPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(0), definesKind),
+  (0, import_ramda6.pipe)((binding, request) => definedKind(binding) !== declaredKind(request))
 ]);
-var operationMatchesEvent = (0, import_ramda7.anyPass)([
-  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(1), (0, import_ramda7.equals)("*" /* ANY */)),
-  (0, import_ramda7.pipe)((operation, event) => operation.valueOf() === event.valueOf()),
-  (0, import_ramda7.pipe)(
+var operationMatchesEvent = (0, import_ramda6.anyPass)([
+  (0, import_ramda6.pipe)((0, import_ramda6.nthArg)(1), (0, import_ramda6.equals)("*" /* ANY */)),
+  (0, import_ramda6.pipe)((operation, event) => operation.valueOf() === event.valueOf()),
+  (0, import_ramda6.pipe)(
     (operation, event) => operation ? event.includes(operation) : false
   )
 ]);
 
+// src/lib/filter/adjudicators/postCollection.ts
+var import_ramda7 = require("ramda");
+var bindsToKind = (0, import_ramda7.curry)(
+  (0, import_ramda7.allPass)([
+    (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), definedKind, (0, import_ramda7.equals)(""), import_ramda7.not),
+    (0, import_ramda7.pipe)((binding, kind3) => definedKind(binding) === kind3)
+  ])
+);
+var bindsToNamespace = (0, import_ramda7.curry)((0, import_ramda7.pipe)(bindsToKind(import_ramda7.__, "Namespace")));
+var misboundNamespace = (0, import_ramda7.allPass)([bindsToNamespace, definesNamespaces]);
+var uncarryableNamespace2 = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), import_ramda7.length, (0, import_ramda7.gt)(import_ramda7.__, 0)),
+  (0, import_ramda7.pipe)((namespaceSelector, kubernetesObject) => {
+    if (kubernetesObject?.kind === "Namespace") {
+      return namespaceSelector.includes(kubernetesObject?.metadata?.name);
+    }
+    if (carriesNamespace(kubernetesObject)) {
+      return namespaceSelector.includes(carriedNamespace(kubernetesObject));
+    }
+    return true;
+  }, import_ramda7.not)
+]);
+var missingCarriableNamespace2 = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), import_ramda7.length, (0, import_ramda7.gt)(import_ramda7.__, 0)),
+  (0, import_ramda7.pipe)(
+    (namespaceSelector, kubernetesObject) => kubernetesObject.kind === "Namespace" ? !namespaceSelector.includes(kubernetesObject.metadata.name) : !carriesNamespace(kubernetesObject)
+  )
+]);
+var carriesIgnoredNamespace2 = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), import_ramda7.length, (0, import_ramda7.gt)(import_ramda7.__, 0)),
+  (0, import_ramda7.pipe)((namespaceSelector, kubernetesObject) => {
+    if (kubernetesObject?.kind === "Namespace") {
+      return namespaceSelector.includes(kubernetesObject?.metadata?.name);
+    }
+    if (carriesNamespace(kubernetesObject)) {
+      return namespaceSelector.includes(carriedNamespace(kubernetesObject));
+    }
+    return false;
+  })
+]);
+var unbindableNamespaces = (0, import_ramda7.allPass)([
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(0), import_ramda7.length, (0, import_ramda7.gt)(import_ramda7.__, 0)),
+  (0, import_ramda7.pipe)((0, import_ramda7.nthArg)(1), definesNamespaces),
+  (0, import_ramda7.pipe)(
+    (namespaceSelector, binding) => (0, import_ramda7.difference)(definedNamespaces(binding), namespaceSelector),
+    import_ramda7.length,
+    (0, import_ramda7.equals)(0),
+    import_ramda7.not
+  )
+]);
+var misboundDeleteWithDeletionTimestamp = (0, import_ramda7.allPass)([
+  definesDelete,
+  definesDeletionTimestamp
+]);
+
+// src/lib/filter/adjudication.ts
+function adjudicateMisboundNamespace(binding) {
+  return misboundNamespace(binding) ? "Cannot use namespace filter on a namespace object." : null;
+}
+function adjudicateMisboundDeleteWithDeletionTimestamp(binding) {
+  return misboundDeleteWithDeletionTimestamp(binding) ? "Cannot use deletionTimestamp filter on a DELETE operation." : null;
+}
+function adjudicateMismatchedDeletionTimestamp(binding, obj) {
+  return mismatchedDeletionTimestamp(binding, obj) ? "Binding defines deletionTimestamp but Object does not carry it." : null;
+}
+function adjudicateMismatchedEvent(binding, req) {
+  return mismatchedEvent(binding, req) ? `Binding defines event '${definedEvent(binding)}' but Request declares '${declaredOperation(req)}'.` : null;
+}
+function adjudicateMismatchedName(binding, obj) {
+  return mismatchedName(binding, obj) ? `Binding defines name '${definedName(binding)}' but Object carries '${carriedName(obj)}'.` : null;
+}
+function adjudicateMismatchedGroup(binding, req) {
+  return mismatchedGroup(binding, req) ? `Binding defines group '${definedGroup(binding)}' but Request declares '${declaredGroup(req)}'.` : null;
+}
+function adjudicateMismatchedVersion(binding, req) {
+  return mismatchedVersion(binding, req) ? `Binding defines version '${definedVersion(binding)}' but Request declares '${declaredVersion(req)}'.` : null;
+}
+function adjudicateMismatchedKind(binding, req) {
+  return mismatchedKind(binding, req) ? `Binding defines kind '${definedKind(binding)}' but Request declares '${declaredKind(req)}'.` : null;
+}
+function adjudicateUnbindableNamespaces(capabilityNamespaces, binding) {
+  return unbindableNamespaces(capabilityNamespaces, binding) ? `Binding defines namespaces ${JSON.stringify(definedNamespaces(binding))} but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
+}
+function adjudicateUncarryableNamespace(capabilityNamespaces, obj) {
+  return uncarryableNamespace2(capabilityNamespaces, obj) ? `Object carries namespace '${obj.kind && obj.kind === "Namespace" ? obj.metadata?.name : carriedNamespace(obj)}' but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
+}
+function adjudicateMismatchedNamespace(binding, obj) {
+  return mismatchedNamespace(binding, obj) ? `Binding defines namespaces '${JSON.stringify(definedNamespaces(binding))}' but Object carries '${carriedNamespace(obj)}'.` : null;
+}
+function adjudicateMismatchedLabels(binding, obj) {
+  return mismatchedLabels(binding, obj) ? `Binding defines labels '${JSON.stringify(definedLabels(binding))}' but Object carries '${JSON.stringify(carriedLabels(obj))}'.` : null;
+}
+function adjudicateMismatchedAnnotations(binding, obj) {
+  return mismatchedAnnotations(binding, obj) ? `Binding defines annotations '${JSON.stringify(definedAnnotations(binding))}' but Object carries '${JSON.stringify(carriedAnnotations(obj))}'.` : null;
+}
+function adjudicateMismatchedNamespaceRegex(binding, obj) {
+  return mismatchedNamespaceRegex(binding, obj) ? `Binding defines namespace regexes '${JSON.stringify(definedNamespaceRegexes(binding))}' but Object carries '${carriedNamespace(obj)}'.` : null;
+}
+function adjudicateMismatchedNameRegex(binding, obj) {
+  return mismatchedNameRegex(binding, obj) ? `Binding defines name regex '${definedNameRegex(binding)}' but Object carries '${carriedName(obj)}'.` : null;
+}
+function adjudicateCarriesIgnoredNamespace(ignoredNamespaces, obj) {
+  return carriesIgnoredNamespace2(ignoredNamespaces, obj) ? `Object carries namespace '${obj.kind && obj.kind === "Namespace" ? obj.metadata?.name : carriedNamespace(obj)}' but ignored namespaces include '${JSON.stringify(ignoredNamespaces)}'.` : null;
+}
+function adjudicateMissingCarriableNamespace(capabilityNamespaces, obj) {
+  return missingCarriableNamespace2(capabilityNamespaces, obj) ? `Object does not carry a namespace but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
+}
+
 // src/lib/filter/filter.ts
 function shouldSkipRequest(binding, req, capabilityNamespaces, ignoredNamespaces) {
   const obj = req.operation === "DELETE" /* DELETE */ ? req.oldObject : req.object;
@@ -1249,57 +1300,6 @@ function filterNoMatchReason(binding, obj, capabilityNamespaces, ignoredNamespac
   }
   return "";
 }
-function adjudicateMisboundNamespace(binding) {
-  return misboundNamespace(binding) ? "Cannot use namespace filter on a namespace object." : null;
-}
-function adjudicateMisboundDeleteWithDeletionTimestamp(binding) {
-  return misboundDeleteWithDeletionTimestamp(binding) ? "Cannot use deletionTimestamp filter on a DELETE operation." : null;
-}
-function adjudicateMismatchedDeletionTimestamp(binding, obj) {
-  return mismatchedDeletionTimestamp(binding, obj) ? "Binding defines deletionTimestamp but Object does not carry it." : null;
-}
-function adjudicateMismatchedEvent(binding, req) {
-  return mismatchedEvent(binding, req) ? `Binding defines event '${definedEvent(binding)}' but Request declares '${declaredOperation(req)}'.` : null;
-}
-function adjudicateMismatchedName(binding, obj) {
-  return mismatchedName(binding, obj) ? `Binding defines name '${definedName(binding)}' but Object carries '${carriedName(obj)}'.` : null;
-}
-function adjudicateMismatchedGroup(binding, req) {
-  return mismatchedGroup(binding, req) ? `Binding defines group '${definedGroup(binding)}' but Request declares '${declaredGroup(req)}'.` : null;
-}
-function adjudicateMismatchedVersion(binding, req) {
-  return mismatchedVersion(binding, req) ? `Binding defines version '${definedVersion(binding)}' but Request declares '${declaredVersion(req)}'.` : null;
-}
-function adjudicateMismatchedKind(binding, req) {
-  return mismatchedKind(binding, req) ? `Binding defines kind '${definedKind(binding)}' but Request declares '${declaredKind(req)}'.` : null;
-}
-function adjudicateUnbindableNamespaces(capabilityNamespaces, binding) {
-  return unbindableNamespaces(capabilityNamespaces, binding) ? `Binding defines namespaces ${JSON.stringify(definedNamespaces(binding))} but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
-}
-function adjudicateUncarryableNamespace(capabilityNamespaces, obj) {
-  return uncarryableNamespace2(capabilityNamespaces, obj) ? `Object carries namespace '${obj.kind && obj.kind === "Namespace" ? obj.metadata?.name : carriedNamespace(obj)}' but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
-}
-function adjudicateMismatchedNamespace(binding, obj) {
-  return mismatchedNamespace(binding, obj) ? `Binding defines namespaces '${JSON.stringify(definedNamespaces(binding))}' but Object carries '${carriedNamespace(obj)}'.` : null;
-}
-function adjudicateMismatchedLabels(binding, obj) {
-  return mismatchedLabels(binding, obj) ? `Binding defines labels '${JSON.stringify(definedLabels(binding))}' but Object carries '${JSON.stringify(carriedLabels(obj))}'.` : null;
-}
-function adjudicateMismatchedAnnotations(binding, obj) {
-  return mismatchedAnnotations(binding, obj) ? `Binding defines annotations '${JSON.stringify(definedAnnotations(binding))}' but Object carries '${JSON.stringify(carriedAnnotations(obj))}'.` : null;
-}
-function adjudicateMismatchedNamespaceRegex(binding, obj) {
-  return mismatchedNamespaceRegex(binding, obj) ? `Binding defines namespace regexes '${JSON.stringify(definedNamespaceRegexes(binding))}' but Object carries '${carriedNamespace(obj)}'.` : null;
-}
-function adjudicateMismatchedNameRegex(binding, obj) {
-  return mismatchedNameRegex(binding, obj) ? `Binding defines name regex '${definedNameRegex(binding)}' but Object carries '${carriedName(obj)}'.` : null;
-}
-function adjudicateCarriesIgnoredNamespace(ignoredNamespaces, obj) {
-  return carriesIgnoredNamespace2(ignoredNamespaces, obj) ? `Object carries namespace '${obj.kind && obj.kind === "Namespace" ? obj.metadata?.name : carriedNamespace(obj)}' but ignored namespaces include '${JSON.stringify(ignoredNamespaces)}'.` : null;
-}
-function adjudicateMissingCarriableNamespace(capabilityNamespaces, obj) {
-  return missingCarriableNamespace2(capabilityNamespaces, obj) ? `Object does not carry a namespace but namespaces allowed by Capability are '${JSON.stringify(capabilityNamespaces)}'.` : null;
-}
 
 // src/lib/mutate-request.ts
 var import_ramda8 = require("ramda");