pepr 1.0.8 → 1.1.0

package/dist/cli/build/build.helpers.d.ts

@@ -9,6 +9,13 @@ import { Reloader } from "../types";
  * @returns true if the file exists, false otherwise.
  */
 export declare function fileExists(entryPoint?: string): string;
+/**
+ * Determine the module format based on package.json "type" field.
+ *
+ * @param packageJsonPath - Path to the package.json file for auto-detection
+ * @returns "cjs" or "esm"
+ */
+export declare function determineModuleFormat(packageJsonPath: string): "cjs" | "esm";
 interface ImageOptions {
     customImage?: string;
     registryInfo?: string;

package/dist/cli/build/build.helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.helpers.d.ts","sourceRoot":"","sources":["../../../src/cli/build/build.helpers.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAW,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAajD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,UAAU,GAAE,MAAkB,GAAG,MAAM,CAcjE;AAED,UAAU,YAAY;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AACD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAe9D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3B,GAAG,EAAE;IAAE,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACnC,MAAM,CAaR;AAED;;;;GAIG;AAEH,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAI/F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAGzE;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,MAAM,EAAE,EACvB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAQjF;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAC7B,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAarC;AAED,wBAAsB,0BAA0B,CAAC,GAAG,EAAE;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAiChB"}
+{"version":3,"file":"build.helpers.d.ts","sourceRoot":"","sources":["../../../src/cli/build/build.helpers.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAW,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAajD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,UAAU,GAAE,MAAkB,GAAG,MAAM,CAcjE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,CAiB5E;AAED,UAAU,YAAY;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AACD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAe9D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3B,GAAG,EAAE;IAAE,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACnC,MAAM,CAaR;AAED;;;;GAIG;AAEH,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS9E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAI/F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAGzE;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,MAAM,EAAE,EACvB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAQjF;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAC7B,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAarC;AAED,wBAAsB,0BAA0B,CAAC,GAAG,EAAE;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAiChB"}

package/dist/cli/build/buildModule.d.ts

@@ -7,5 +7,11 @@ export type BuildModuleReturn = {
     cfg: PeprConfig;
     uuid: string;
 };
-export declare function buildModule(outputDir: string, reloader?: Reloader, entryPoint?: string, embed?: boolean): Promise<BuildModuleReturn | void>;
+export interface BuildModuleOptions {
+    reloader?: Reloader;
+    entryPoint?: string;
+    embed?: boolean;
+    format?: "cjs" | "esm";
+}
+export declare function buildModule(outputDir: string, options?: BuildModuleOptions): Promise<BuildModuleReturn | void>;
 //# sourceMappingURL=buildModule.d.ts.map

package/dist/cli/build/buildModule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildModule.d.ts","sourceRoot":"","sources":["../../../src/cli/build/buildModule.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAmB,MAAM,SAAS,CAAC;AAKxD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAUF,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,QAAQ,EACnB,UAAU,SAAY,EACtB,KAAK,UAAO,GACX,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAwEnC"}
+{"version":3,"file":"buildModule.d.ts","sourceRoot":"","sources":["../../../src/cli/build/buildModule.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAmB,MAAM,SAAS,CAAC;AAKxD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;CACxB;AAgCD,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAqFnC"}

package/dist/cli/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/build/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,GAAG,IAAI,CA0I/C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/build/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwFpC,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,GAAG,IAAI,CAoF/C"}

package/dist/cli/dev.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../src/cli/dev.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,GAAG,IAAI,CA6G/C"}
+{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../src/cli/dev.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,MAAM,CAAC,OAAO,WAAW,OAAO,EAAE,OAAO,GAAG,IAAI,CA+G/C"}

package/dist/cli/init/templates.d.ts

@@ -40,6 +40,7 @@ export declare const dependencies: {
     globals: string;
     husky: string;
     "js-yaml": string;
+    selfsigned: string;
     shellcheck: string;
     tsx: string;
     undici: string;

package/dist/cli/init/templates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/cli/init/templates.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,YAAY,IAAI,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIrE,eAAO,MAAQ,YAAY;;;;;;;;;;;;;;;;GAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;GAAE,gBAAgB;;;;;;;;;;;GAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAAE,OAAO,QAAgB,CAAC;AAEjG,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1B,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,OAAO,CAAC;YACjB,cAAc,EAAE,MAAM,CAAC;YACvB,YAAY,EAAE,YAAY,CAAC;YAC3B,YAAY,EAAE;gBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;aAAE,CAAC;YACvC,SAAS,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YACtD,KAAK,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YAClD,aAAa,EAAE,MAAM,EAAE,CAAC;YACxB,GAAG,EAAE,MAAM,CAAC;YACZ,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,EAAE,QAAQ,CAAC;SACrB,CAAC;QACF,OAAO,EAAE;YAAE,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACjC,YAAY,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/C,eAAe,EAAE;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KACzC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,CA4D7D;AAED,eAAO,MAAM,cAAc;;;CAG1B,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,WAAW;;;CAGvB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;CAGnB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;CAGxB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAgBlB,CAAC"}
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/cli/init/templates.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,YAAY,IAAI,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIrE,eAAO,MAAQ,YAAY;;;;;;;;;;;;;;;;GAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;GAAE,gBAAgB;;;;;;;;;;;GAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAAE,OAAO,QAAgB,CAAC;AAEjG,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1B,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,OAAO,CAAC;YACjB,cAAc,EAAE,MAAM,CAAC;YACvB,YAAY,EAAE,YAAY,CAAC;YAC3B,YAAY,EAAE;gBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;aAAE,CAAC;YACvC,SAAS,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YACtD,KAAK,EAAE;gBAAE,YAAY,EAAE;oBAAE,UAAU,EAAE,MAAM,EAAE,CAAA;iBAAE,CAAA;aAAE,CAAC;YAClD,aAAa,EAAE,MAAM,EAAE,CAAC;YACxB,GAAG,EAAE,MAAM,CAAC;YACZ,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,EAAE,QAAQ,CAAC;SACrB,CAAC;QACF,OAAO,EAAE;YAAE,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACjC,YAAY,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/C,eAAe,EAAE;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KACzC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,CA4D7D;AAED,eAAO,MAAM,cAAc;;;CAG1B,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,SAAS;;;CAGrB,CAAC;AAEF,eAAO,MAAM,WAAW;;;CAGvB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;CAGnB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;CAGxB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAgBlB,CAAC"}

package/dist/cli.js

@@ -8343,7 +8343,7 @@ function helmLayout(basePath, unique) {
 // src/lib/assets/loader.ts
 var import_child_process = require("child_process");
 function loadCapabilities(path4) {
-  return new Promise((resolve8, reject) => {
+  return new Promise((resolve9, reject) => {
     const program2 = (0, import_child_process.fork)(path4, {
       env: {
         ...process.env,
@@ -8354,7 +8354,7 @@ function loadCapabilities(path4) {
     });
     program2.on("message", (message) => {
       const capabilities = message.valueOf();
-      resolve8(capabilities);
+      resolve9(capabilities);
     });
     program2.on("error", (error) => {
       reject(error);
@@ -9236,6 +9236,21 @@ function fileExists(entryPoint = "pepr.ts") {
   }
   return entryPoint;
 }
+function determineModuleFormat(packageJsonPath) {
+  try {
+    const pkg = JSON.parse((0, import_fs6.readFileSync)(packageJsonPath, "utf-8"));
+    if (pkg.type === "module") {
+      return "esm";
+    }
+    if (pkg.type !== "commonjs") {
+      logger_default.warn(
+        `No 'type' field specified in package.json. Defaulting to CommonJS format. To use ES modules, add '"type": "module"' to your tsconfig.json or package.json.`
+      );
+    }
+  } catch {
+  }
+  return "cjs";
+}
 function assignImage(imageOptions) {
   const { customImage, registryInfo, peprVersion, registry } = imageOptions;
   if (customImage) {
@@ -9567,8 +9582,8 @@ var tsconfig_module_default = {
     emitDeclarationOnly: true,
     esModuleInterop: true,
     lib: ["ES2022"],
-    module: "NodeNext",
-    moduleResolution: "NodeNext",
+    module: "es2022",
+    moduleResolution: "bundler",
     outDir: "dist",
     resolveJsonModule: true,
     rootDir: ".",
@@ -9584,7 +9599,117 @@ var gitIgnore = "# Ignore node_modules and Pepr build artifacts\nnode_modules\nd
 var readmeMd = '# Pepr Module\n\nThis is a Pepr Module. [Pepr](https://github.com/defenseunicorns/pepr) is a type-safe Kubernetes middleware system.\n\nThe `capabilities` directory contains all the capabilities for this module. By default,\na capability is a single typescript file in the format of `capability-name.ts` that is\nimported in the root `pepr.ts` file as `import { HelloPepr } from "./capabilities/hello-pepr";`.\nBecause this is typescript, you can organize this however you choose, e.g. creating a sub-folder\nper-capability or common logic in shared files or folders.\n\nExample Structure:\n\n```text\nModule Root\n\u251C\u2500\u2500 package.json\n\u251C\u2500\u2500 pepr.ts\n\u2514\u2500\u2500 capabilities\n    \u251C\u2500\u2500 example-one.ts\n    \u251C\u2500\u2500 example-three.ts\n    \u2514\u2500\u2500 example-two.ts\n```\n';
 var peprTS = 'import { PeprModule } from "pepr";\n// cfg loads your pepr configuration from package.json\nimport cfg from "./package.json";\n\n// HelloPepr is a demo capability that is included with Pepr. Comment or delete the line below to remove it.\nimport { HelloPepr } from "./capabilities/hello-pepr";\n\n/**\n * This is the main entrypoint for this Pepr module. It is run when the module is started.\n * This is where you register your Pepr configurations and capabilities.\n */\nnew PeprModule(cfg, [\n  // "HelloPepr" is a demo capability that is included with Pepr. Comment or delete the line below to remove it.\n  HelloPepr,\n\n  // Your additional capabilities go here\n]);\n';
 var helloPeprTS = 'import {\n  Capability,\n  K8s,\n  Log,\n  PeprMutateRequest,\n  RegisterKind,\n  a,\n  fetch,\n  fetchStatus,\n  kind,\n} from "pepr";\nimport { MockAgent, setGlobalDispatcher } from "undici";\n\n/**\n *  The HelloPepr Capability is an example capability to demonstrate some general concepts of Pepr.\n *  To test this capability you run `pepr dev`and then run the following command:\n *  `kubectl apply -f capabilities/hello-pepr.samples.yaml`\n */\nexport const HelloPepr = new Capability({\n  name: "hello-pepr",\n  description: "A simple example capability to show how things work.",\n  namespaces: ["pepr-demo", "pepr-demo-2"],\n});\n\n// Use the \'When\' function to create a new action, use \'Store\' to persist data\nconst { When, Store } = HelloPepr;\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (Namespace)                                   *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action removes the label `remove-me` when a Namespace is created.\n * Note we don\'t need to specify the namespace here, because we\'ve already specified\n * it in the Capability definition above.\n */\nWhen(a.Namespace)\n  .IsCreated()\n  .Mutate(ns => ns.RemoveLabel("remove-me"));\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Watch Action with K8s SSA (Namespace)                           *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action watches for the `pepr-demo-2` namespace to be created, then creates a ConfigMap with\n * the name `pepr-ssa-demo` and adds the namespace UID to the ConfigMap data. Because Pepr uses\n * server-side apply for this operation, the ConfigMap will be created or updated if it already exists.\n */\nWhen(a.Namespace)\n  .IsCreated()\n  .WithName("pepr-demo-2")\n  .Watch(async ns => {\n    Log.info("Namespace pepr-demo-2 was created.");\n\n    try {\n      // Apply the ConfigMap using K8s server-side apply\n      await K8s(kind.ConfigMap).Apply({\n        metadata: {\n          name: "pepr-ssa-demo",\n          namespace: "pepr-demo-2",\n        },\n        data: {\n          "ns-uid": ns.metadata.uid,\n        },\n      });\n    } catch (error) {\n      // You can use the Log object to log messages to the Pepr controller pod\n      Log.error({ error }, "Failed to apply ConfigMap using server-side apply.");\n    }\n\n    // You can share data between actions using the Store, including between different types of actions\n    Store.setItem("watch-data", "This data was stored by a Watch Action.");\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 1)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This is a single action. They can be in the same file or put imported from other files.\n * In this example, when a ConfigMap is created with the name `example-1`, then add a label and annotation.\n *\n * Equivalent to manually running:\n * `kubectl label configmap example-1 pepr=was-here`\n * `kubectl annotate configmap example-1 pepr.dev=annotations-work-too`\n */\nWhen(a.ConfigMap)\n  .IsCreated()\n  .WithName("example-1")\n  .Mutate(request => {\n    request.SetLabel("pepr", "was-here").SetAnnotation("pepr.dev", "annotations-work-too");\n\n    // Use the Store to persist data between requests and Pepr controller pods\n    Store.setItem("example-1", "was-here");\n\n    // This data is written asynchronously and can be read back via `Store.getItem()` or `Store.subscribe()`\n    Store.setItem("example-1-data", JSON.stringify(request.Raw.data));\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate & Validate Actions (CM Example 2)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This combines 3 different types of actions: \'Mutate\', \'Validate\', and \'Watch\'. The order\n * of the actions is required, but each action is optional. In this example, when a ConfigMap is created\n * with the name `example-2`, then add a label and annotation, validate that the ConfigMap has the label\n * `pepr`, and log the request.\n */\nWhen(a.ConfigMap)\n  .IsCreated()\n  .WithName("example-2")\n  .Mutate(request => {\n    // This Mutate Action will mutate the request before it is persisted to the cluster\n\n    // Use `request.Merge()` to merge the new data with the existing data\n    request.Merge({\n      metadata: {\n        labels: {\n          pepr: "was-here",\n        },\n        annotations: {\n          "pepr.dev": "annotations-work-too",\n        },\n      },\n    });\n  })\n  .Validate(request => {\n    // This Validate Action will validate the request before it is persisted to the cluster\n\n    // Approve the request if the ConfigMap has the label \'pepr\'\n    if (request.HasLabel("pepr")) {\n      return request.Approve();\n    }\n\n    // Otherwise, deny the request with an error message (optional)\n    return request.Deny("ConfigMap must have label \'pepr\'");\n  })\n  .Watch((cm, phase) => {\n    // This Watch Action will watch the ConfigMap after it has been persisted to the cluster\n    Log.info({ cm }, `ConfigMap was ${phase} with the name example-2`);\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 2a)                               *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action shows a simple validation that will deny any ConfigMap that has the\n * annotation `evil`. Note that the `Deny()` function takes an optional second parameter that is a\n * user-defined status code to return.\n */\nWhen(a.ConfigMap)\n  .IsCreated()\n  .Validate(request => {\n    if (request.HasAnnotation("evil")) {\n      return request.Deny("No evil CM annotations allowed.", 400);\n    }\n\n    return request.Approve();\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 3)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action combines different styles. Unlike the previous actions, this one will look\n * for any ConfigMap in the `pepr-demo` namespace that has the label `change=by-label` during either\n * CREATE or UPDATE. Note that all conditions added such as `WithName()`, `WithLabel()`, `InNamespace()`,\n * are ANDs so all conditions must be true for the request to be processed.\n */\nWhen(a.ConfigMap)\n  .IsCreatedOrUpdated()\n  .WithLabel("change", "by-label")\n  .Mutate(request => {\n    // The K8s object e are going to mutate\n    const cm = request.Raw;\n\n    // Get the username and uid of the K8s request\n    const { username, uid } = request.Request.userInfo;\n\n    // Store some data about the request in the configmap\n    cm.data["username"] = username;\n    cm.data["uid"] = uid;\n\n    // You can still mix other ways of making changes too\n    request.SetAnnotation("pepr.dev", "making-waves");\n  });\n\n// This action validates the label `change=by-label` is deleted\nWhen(a.ConfigMap)\n  .IsDeleted()\n  .WithLabel("change", "by-label")\n  .Validate(request => {\n    // Log and then always approve the request\n    Log.info("CM with label \'change=by-label\' was deleted.");\n    return request.Approve();\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 4)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action show how you can use the `Mutate()` function without an inline function.\n * This is useful if you want to keep your actions small and focused on a single task,\n * or if you want to reuse the same function in multiple actions.\n */\nWhen(a.ConfigMap).IsCreated().WithName("example-4").Mutate(example4Cb);\n\n// This function uses the complete type definition, but is not required.\nfunction example4Cb(cm: PeprMutateRequest<a.ConfigMap>): void {\n  cm.SetLabel("pepr.dev/first", "true");\n  cm.SetLabel("pepr.dev/second", "true");\n  cm.SetLabel("pepr.dev/third", "true");\n}\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 4a)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This is the same as Example 4, except this only operates on a CM in the `pepr-demo-2` namespace.\n * Note because the Capability defines namespaces, the namespace specified here must be one of those.\n * Alternatively, you can remove the namespace from the Capability definition and specify it here.\n */\nWhen(a.ConfigMap).IsCreated().InNamespace("pepr-demo-2").WithName("example-4a").Mutate(example4Cb);\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (CM Example 5)                                *\n * ---------------------------------------------------------------------------------------------------\n *\n * This action is a bit more complex. It will look for any ConfigMap in the `pepr-demo`\n * namespace that has the label `chuck-norris` during CREATE. When it finds one, it will fetch a\n * random Chuck Norris joke from the API and add it to the ConfigMap. This is a great example of how\n * you can use Pepr to make changes to your K8s objects based on external data.\n *\n * Note the use of the `async` keyword. This is required for any action that uses `await` or `fetch()`.\n *\n * Also note we are passing a type to the `fetch()` function. This is optional, but it will help you\n * avoid mistakes when working with the data returned from the API. You can also use the `as` keyword to\n * cast the data returned from the API.\n *\n * These are equivalent:\n * ```ts\n * const joke = await fetch<TheChuckNorrisJoke>("https://icanhazdadjoke.com/");\n * const joke = await fetch("https://icanhazdadjoke.com/") as TheChuckNorrisJoke;\n * ```\n *\n * Alternatively, you can drop the type completely:\n *\n * ```ts\n * fetch("https://icanhazdadjoke.com")\n * ```\n */\ninterface TheChuckNorrisJoke {\n  id: string;\n  joke: string;\n  status: number;\n}\n\nWhen(a.ConfigMap)\n  .IsCreatedOrUpdated()\n  .WithLabel("chuck-norris")\n  .Mutate(cm => cm.SetLabel("got-jokes", "true"))\n  .Watch(async cm => {\n    const jokeURL = "https://icanhazdadjoke.com";\n\n    const mockAgent: MockAgent = new MockAgent();\n    setGlobalDispatcher(mockAgent);\n    const mockClient = mockAgent.get(jokeURL);\n    mockClient.intercept({ path: "/", method: "GET" }).reply(\n      200,\n      {\n        id: "R7UfaahVfFd",\n        joke: "Funny joke goes here.",\n        status: 200,\n      },\n      {\n        headers: {\n          "Content-Type": "application/json; charset=utf-8",\n        },\n      },\n    );\n\n    // Try/catch is not needed as a response object will always be returned\n    const response = await fetch<TheChuckNorrisJoke>(jokeURL, {\n      headers: {\n        Accept: "application/json",\n      },\n    });\n\n    // Instead, check the `response.ok` field\n    if (response.ok) {\n      const { joke } = response.data;\n      // Add Joke to the Store\n      await Store.setItemAndWait(jokeURL, joke);\n      // Add the Chuck Norris joke to the configmap\n      try {\n        await K8s(kind.ConfigMap).Apply({\n          metadata: {\n            name: cm.metadata.name,\n            namespace: cm.metadata.namespace,\n          },\n          data: {\n            "chuck-says": Store.getItem(jokeURL),\n          },\n        });\n      } catch (error) {\n        Log.error({ error, cm }, "Failed to apply ConfigMap using server-side apply.");\n      }\n    }\n\n    // You can also assert on different HTTP response codes\n    if (response.status === fetchStatus.NOT_FOUND) {\n      // Do something else\n      return;\n    }\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (Secret Base64 Handling)                      *\n * ---------------------------------------------------------------------------------------------------\n *\n * The K8s JS client provides incomplete support for base64 encoding/decoding handling for secrets,\n * unlike the GO client. To make this less painful, Pepr automatically handles base64 encoding/decoding\n * secret data before and after the action is executed.\n */\nWhen(a.Secret)\n  .IsCreated()\n  .WithName("secret-1")\n  .Mutate(request => {\n    const secret = request.Raw;\n\n    // This will be encoded at the end of all processing back to base64: "Y2hhbmdlLXdpdGhvdXQtZW5jb2Rpbmc="\n    secret.data.magic = "change-without-encoding";\n\n    // You can modify the data directly, and it will be encoded at the end of all processing\n    secret.data.example += " - modified by Pepr";\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (Untyped Custom Resource)                     *\n * ---------------------------------------------------------------------------------------------------\n *\n * Out of the box, Pepr supports all the standard Kubernetes objects. However, you can also create\n * your own types. This is useful if you are working with an Operator that creates custom resources.\n * There are two ways to do this, the first is to use the `When()` function with a `GenericKind`,\n * the second is to create a new class that extends `GenericKind` and use the `RegisterKind()` function.\n *\n * This example shows how to use the `When()` function with a `GenericKind`. Note that you\n * must specify the `group`, `version`, and `kind` of the object (if applicable). This is how Pepr knows\n * if the action should be triggered or not. Since we are using a `GenericKind`,\n * Pepr will not be able to provide any intellisense for the object, so you will need to refer to the\n * Kubernetes API documentation for the object you are working with.\n *\n * You will need to wait for the CRD in `hello-pepr.samples.yaml` to be created, then you can apply\n *\n * ```yaml\n * apiVersion: pepr.dev/v1\n * kind: Unicorn\n * metadata:\n *   name: example-1\n *   namespace: pepr-demo\n * spec:\n *   message: replace-me\n *   counter: 0\n * ```\n */\nWhen(a.GenericKind, {\n  group: "pepr.dev",\n  version: "v1",\n  kind: "Unicorn",\n})\n  .IsCreated()\n  .WithName("example-1")\n  .Mutate(request => {\n    request.Merge({\n      spec: {\n        message: "Hello Pepr without type data!",\n        counter: Math.random(),\n      },\n    });\n  });\n\n/**\n * ---------------------------------------------------------------------------------------------------\n *                                   Mutate Action (Typed Custom Resource)                       *\n * ---------------------------------------------------------------------------------------------------\n *\n * This example shows how to use the `RegisterKind()` function to create a new type. This is useful\n * if you are working with an Operator that creates custom resources and you want to have intellisense\n * for the object. Note that you must specify the `group`, `version`, and `kind` of the object (if applicable)\n * as this is how Pepr knows if the action should be triggered or not.\n *\n * Once you register a new Kind with Pepr, you can use the `When()` function with the new Kind. Ideally,\n * you should register custom Kinds at the top of your Capability file or Pepr Module so they are available\n * to all actions, but we are putting it here for demonstration purposes.\n *\n * You will need to wait for the CRD in `hello-pepr.samples.yaml` to be created, then you can apply\n *\n * ```yaml\n * apiVersion: pepr.dev/v1\n * kind: Unicorn\n * metadata:\n *   name: example-2\n *   namespace: pepr-demo\n * spec:\n *   message: replace-me\n *   counter: 0\n * ```*\n */\nclass UnicornKind extends a.GenericKind {\n  spec: {\n    /**\n     * JSDoc comments can be added to explain more details about the field.\n     *\n     * @example\n     * ```ts\n     * request.Raw.spec.message = "Hello Pepr!";\n     * ```\n     * */\n    message: string;\n    counter: number;\n  };\n}\n\nRegisterKind(UnicornKind, {\n  group: "pepr.dev",\n  version: "v1",\n  kind: "Unicorn",\n});\n\nWhen(UnicornKind)\n  .IsCreated()\n  .WithName("example-2")\n  .Mutate(request => {\n    request.Merge({\n      spec: {\n        message: "Hello Pepr with type data!",\n        counter: Math.random(),\n      },\n    });\n  });\n\n/**\n * A callback function that is called once the Pepr Store is fully loaded.\n */\nStore.onReady(data => {\n  Log.info({ data }, "Pepr Store Ready");\n});\n';
-var packageJSON = { name: "pepr", description: "Kubernetes application engine", author: "Defense Unicorns", homepage: "https://github.com/defenseunicorns/pepr", license: "Apache-2.0", bin: "dist/cli.js", repository: "defenseunicorns/pepr", engines: { node: ">=20.0.0" }, files: ["/dist", "/src", "!src/**/*.test.ts", "!src/fixtures/**", "!dist/**/*.test.d.ts*"], version: "1.0.8", main: "dist/lib.js", types: "dist/lib.d.ts", scripts: { build: "tsc -p config/tsconfig.root.json && node build.mjs && npm pack", "build:image": "npm run build && docker buildx build --output type=docker --tag pepr:dev .", "build:image:unicorn": "npm run build && docker buildx build --output type=docker --tag pepr/private:dev $(node scripts/read-unicorn-build-args.mjs) .", ci: "npm ci", "cluster:k3d": "k3d cluster delete pepr-dev && k3d cluster create pepr-dev --k3s-arg '--debug@server:0' --wait && kubectl rollout status deployment -n kube-system", "cluster:k3d:import-upstream": "npm run build && docker buildx build --output type=docker --tag pepr:dev . && k3d image import pepr:dev -c pepr-dev", "cluster:k3d:import-unicorn": "npm run build && docker buildx build --output type=docker --tag pepr/private:dev $(node scripts/read-unicorn-build-args.mjs) . && k3d image import pepr/private:dev -c pepr-dev", "format:check": "npm run format:src && npm run format:tests && npm run format:markdown && npm run format:integration && npm run format:prettier -- --check", "format:fix": "npm run format:src -- --fix && npm run format:markdown -- --fix && npm run format:integration -- --fix && npm run format:prettier -- --write", "format:integration": "eslint --config config/eslint.integration.config.mjs integration/cli integration/helpers", "format:markdown": 'npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --rules config/markdownlint-step-format-rule.js "**/*.md"', "format:prettier": "prettier --config config/.prettierrc src integration/cli/**/*.ts integration/helpers/**/*.ts", "format:src": "eslint --config config/eslint.root.config.mjs 'src/**/*.ts' --ignore-pattern '**/*.test.ts' --ignore-pattern 'src/templates/**'", "format:tests": "eslint --config config/eslint.test.config.mjs 'src/**/*.test.ts'", "gen-data-json": "node hack/build-template-data.js", prebuild: "rm -fr dist/* && npm run gen-data-json", prepare: `if [ "$NODE_ENV" != 'production' ]; then husky; fi`, "set-version": 'bash -lc \'ver=${PEPR_VERSION:-}; if [ -z "$ver" ]; then git fetch --tags --force; ver=$(git describe --tags --abbrev=0); fi; ver=${ver#v}; echo Using version $ver; node ./scripts/set-version.js "$ver"\'', test: "npm run test:unit && npm run test:integration", "test:artifacts": "npm run build && vitest run src/build-artifact.test.ts", "test:docs": "vitest run --config=config/vitest.integration.config.ts integration/cli/docs/*.test.ts", "test:integration": "npm run test:integration:prep && npm run test:integration:run", "test:integration:prep": "./integration/prep.sh", "test:integration:run": "vitest run --config=config/vitest.integration.config.ts integration", "test:unit": "npm run gen-data-json && NODE_OPTIONS=--no-deprecation vitest --config config/vitest.root.config.ts run --coverage", "test:upgrade:unicorn": "npm run cluster:k3d && npm run cluster:k3d:import-unicorn && vitest run integration/cluster/upgrade.test.ts", "test:upgrade:upstream": "npm run cluster:k3d && npm run cluster:k3d:import-upstream && vitest run integration/cluster/upgrade.test.ts" }, dependencies: { "@types/ramda": "0.31.1", "command-line-args": "^6.0.1", commander: "14.0.2", express: "5.2.1", "fast-json-patch": "3.1.1", heredoc: "^1.3.1", "http-status-codes": "^2.3.0", "json-pointer": "^0.6.2", "kubernetes-fluent-client": "3.11.0", pino: "10.3.0", "pino-pretty": "13.1.3", "prom-client": "15.1.3", "quicktype-core": "^23.2.6", ramda: "0.32.0", "ts-morph": "^27.0.0" }, devDependencies: { "@commitlint/cli": "20.4.0", "@commitlint/config-conventional": "20.4.0", "@semantic-release/commit-analyzer": "^13.0.1", "@semantic-release/git": "^10.0.1", "@semantic-release/npm": "^13.0.0", "@semantic-release/release-notes-generator": "^14.1.0", "@types/command-line-args": "^5.2.3", "@types/eslint": "9.6.1", "@types/express": "5.0.6", "@types/json-pointer": "^1.0.34", "@types/json-schema": "^7.0.15", "@types/node": "25.x.x", "@types/node-forge": "1.3.14", "@types/readable-stream": "^4.0.21", "@types/urijs": "^1.19.25", "@types/ws": "^8.18.1", "@vitest/coverage-v8": "^4.0.4", "fast-check": "^4.0.0", globals: "^17.0.0", husky: "^9.1.6", "js-yaml": "^4.1.0", shellcheck: "^4.1.0", tsx: "^4.20.3", undici: "7.19.2", vitest: "^4.0.4" }, overrides: { glob: "^9.0.0" }, peerDependencies: { "@types/prompts": "2.4.9", "@typescript-eslint/eslint-plugin": "8.45.0", "@typescript-eslint/parser": "8.45.0", esbuild: "0.25.10", eslint: "9.36.0", "node-forge": "1.3.2", prettier: "3.6.2", prompts: "2.4.2", typescript: "5.8.3", uuid: "13.0.0" } };
+var packageJSON = {
+  name: "pepr",
+  description: "Kubernetes application engine",
+  author: "Defense Unicorns",
+  homepage: "https://github.com/defenseunicorns/pepr",
+  license: "Apache-2.0",
+  bin: "dist/cli.js",
+  repository: "defenseunicorns/pepr",
+  engines: {
+    node: ">=20.0.0"
+  },
+  files: [
+    "/dist",
+    "/src",
+    "!src/**/*.test.ts",
+    "!src/fixtures/**",
+    "!dist/**/*.test.d.ts*"
+  ],
+  version: "1.1.0",
+  main: "dist/lib.js",
+  types: "dist/lib.d.ts",
+  scripts: {
+    build: "tsc -p config/tsconfig.root.json && node build.mjs && npm pack",
+    "build:image": "npm run build && docker buildx build --output type=docker --tag pepr:dev .",
+    "build:image:unicorn": "npm run build && docker buildx build --output type=docker --tag pepr/private:dev $(node scripts/read-unicorn-build-args.mjs) .",
+    ci: "npm ci",
+    "cluster:k3d": "k3d cluster delete pepr-dev && k3d cluster create pepr-dev --k3s-arg '--debug@server:0' --wait && kubectl rollout status deployment -n kube-system",
+    "cluster:k3d:import-upstream": "npm run build && docker buildx build --output type=docker --tag pepr:dev . && k3d image import pepr:dev -c pepr-dev",
+    "cluster:k3d:import-unicorn": "npm run build && docker buildx build --output type=docker --tag pepr/private:dev $(node scripts/read-unicorn-build-args.mjs) . && k3d image import pepr/private:dev -c pepr-dev",
+    "format:check": "npm run format:src && npm run format:tests && npm run format:markdown && npm run format:integration && npm run format:prettier -- --check",
+    "format:fix": "npm run format:src -- --fix && npm run format:markdown -- --fix && npm run format:integration -- --fix && npm run format:prettier -- --write",
+    "format:integration": "eslint --config config/eslint.integration.config.mjs integration/cli integration/helpers",
+    "format:markdown": 'npx -y markdownlint-cli --config config/.markdownlint.json --ignore adr --ignore integration/testroot --ignore pepr-test-module --ignore node_modules --rules config/markdownlint-step-format-rule.js "**/*.md"',
+    "format:prettier": "prettier --config config/.prettierrc src integration/cli/**/*.ts integration/helpers/**/*.ts",
+    "format:src": "eslint --config config/eslint.root.config.mjs 'src/**/*.ts' --ignore-pattern '**/*.test.ts' --ignore-pattern 'src/templates/**'",
+    "format:tests": "eslint --config config/eslint.test.config.mjs 'src/**/*.test.ts'",
+    "gen-data-json": "node hack/build-template-data.mjs",
+    prebuild: "rm -fr dist/* && npm run gen-data-json",
+    prepare: `if [ "$NODE_ENV" != 'production' ]; then husky; fi`,
+    "set-version": 'bash -lc \'ver=${PEPR_VERSION:-}; if [ -z "$ver" ]; then git fetch --tags --force; ver=$(git describe --tags --abbrev=0); fi; ver=${ver#v}; echo Using version $ver; node ./scripts/set-version.js "$ver"\'',
+    test: "npm run test:unit && npm run test:integration",
+    "test:artifacts": "npm run build && vitest run src/build-artifact.test.ts",
+    "test:docs": "vitest run --config=config/vitest.integration.config.ts integration/cli/docs/*.test.ts",
+    "test:integration": "npm run test:integration:prep && npm run test:integration:run",
+    "test:integration:prep": "./integration/prep.sh",
+    "test:integration:run": "vitest run --config=config/vitest.integration.config.ts integration",
+    "test:unit": "npm run gen-data-json && NODE_OPTIONS=--no-deprecation vitest --config config/vitest.root.config.ts run --coverage",
+    "test:upgrade:unicorn": "npm run cluster:k3d && npm run cluster:k3d:import-unicorn && vitest run integration/cluster/upgrade.test.ts",
+    "test:upgrade:upstream": "npm run cluster:k3d && npm run cluster:k3d:import-upstream && vitest run integration/cluster/upgrade.test.ts"
+  },
+  dependencies: {
+    "@types/ramda": "0.31.1",
+    "command-line-args": "^6.0.1",
+    commander: "14.0.3",
+    express: "5.2.1",
+    "fast-json-patch": "3.1.1",
+    heredoc: "^1.3.1",
+    "http-status-codes": "^2.3.0",
+    "json-pointer": "^0.6.2",
+    "kubernetes-fluent-client": "3.11.2",
+    pino: "10.3.1",
+    "pino-pretty": "13.1.3",
+    "prom-client": "15.1.3",
+    "quicktype-core": "^23.2.6",
+    ramda: "0.32.0",
+    "ts-morph": "^27.0.0"
+  },
+  devDependencies: {
+    "@commitlint/cli": "20.4.1",
+    "@commitlint/config-conventional": "20.4.1",
+    "@semantic-release/commit-analyzer": "^13.0.1",
+    "@semantic-release/git": "^10.0.1",
+    "@semantic-release/npm": "^13.0.0",
+    "@semantic-release/release-notes-generator": "^14.1.0",
+    "@types/command-line-args": "^5.2.3",
+    "@types/eslint": "9.6.1",
+    "@types/express": "5.0.6",
+    "@types/json-pointer": "^1.0.34",
+    "@types/json-schema": "^7.0.15",
+    "@types/node": "25.x.x",
+    "@types/node-forge": "1.3.14",
+    "@types/readable-stream": "^4.0.21",
+    "@types/urijs": "^1.19.25",
+    "@types/ws": "^8.18.1",
+    "@vitest/coverage-v8": "^4.0.4",
+    "fast-check": "^4.0.0",
+    globals: "^17.0.0",
+    husky: "^9.1.6",
+    "js-yaml": "^4.1.0",
+    selfsigned: "^5.5.0",
+    shellcheck: "^4.1.0",
+    tsx: "^4.20.3",
+    undici: "7.21.0",
+    vitest: "^4.0.4"
+  },
+  overrides: {
+    glob: "^9.0.0"
+  },
+  peerDependencies: {
+    "@types/prompts": "2.4.9",
+    "@typescript-eslint/eslint-plugin": "8.45.0",
+    "@typescript-eslint/parser": "8.45.0",
+    esbuild: "0.25.10",
+    eslint: "9.36.0",
+    "node-forge": "1.3.2",
+    prettier: "3.6.2",
+    prompts: "2.4.2",
+    typescript: "5.8.3",
+    uuid: "13.0.0"
+  }
+};
 
 // src/cli/init/utils.ts
 var import_fs7 = require("fs");
@@ -9828,18 +9953,38 @@ async function loadModule(outputDir, entryPoint) {
 var externalLibs = Object.keys(dependencies);
 externalLibs.push("pepr");
 externalLibs.push("@kubernetes/client-node");
-async function buildModule(outputDir, reloader, entryPoint = "pepr.ts", embed = true) {
+function resolveFormatAndPath(embed, requestedFormat, loadedPath) {
+  if (embed) {
+    return {
+      format: "cjs",
+      path: requestedFormat === "esm" ? loadedPath.replace(/\.js$/, ".cjs") : loadedPath
+    };
+  }
+  return { format: requestedFormat, path: loadedPath };
+}
+async function buildModule(outputDir, options = {}) {
+  const {
+    reloader,
+    entryPoint = "pepr.ts",
+    embed = true,
+    format: requestedFormat = "cjs"
+  } = options;
   try {
-    const { cfg, modulePath, path: path4, uuid } = await loadModule(outputDir, entryPoint);
+    const { cfg, modulePath, path: loadedPath, uuid } = await loadModule(outputDir, entryPoint);
+    const { format: format2, path: path4 } = resolveFormatAndPath(embed, requestedFormat, loadedPath);
     await checkFormat();
     const npmRoot = (0, import_child_process3.execFileSync)("npm", ["root"]).toString().trim();
-    const args = ["--project", `${modulePath}/tsconfig.json`, "--outdir", outputDir];
-    (0, import_child_process3.execFileSync)(`${npmRoot}/.bin/tsc`, args);
+    (0, import_child_process3.execFileSync)(`${npmRoot}/.bin/tsc`, [
+      "--project",
+      `${modulePath}/tsconfig.json`,
+      "--outdir",
+      outputDir
+    ]);
     const ctxCfg = {
       bundle: true,
       entryPoints: [entryPoint],
       external: externalLibs,
-      format: "cjs",
+      format: format2,
       keepNames: true,
       legalComments: "external",
       metafile: true,
@@ -9869,7 +10014,8 @@ async function buildModule(outputDir, reloader, entryPoint = "pepr.ts", embed =
     }
     if (!embed) {
       ctxCfg.minify = false;
-      ctxCfg.outfile = (0, import_path4.resolve)(outputDir, (0, import_path4.basename)(entryPoint, (0, import_path4.extname)(entryPoint))) + ".js";
+      const outputExtension = format2 === "esm" ? ".mjs" : ".js";
+      ctxCfg.outfile = (0, import_path4.resolve)(outputDir, (0, import_path4.basename)(entryPoint, (0, import_path4.extname)(entryPoint))) + outputExtension;
       ctxCfg.packages = "external";
       ctxCfg.treeShaking = false;
     }
@@ -9919,6 +10065,52 @@ async function checkFormat() {
 }
 
 // src/cli/build/index.ts
+var import_path5 = require("path");
+async function generateDeploymentAssets(buildResult, opts, outputDir) {
+  const { cfg, path: path4 } = buildResult;
+  const image = assignImage({
+    customImage: opts.customImage,
+    registryInfo: opts.registryInfo,
+    peprVersion: cfg.pepr.peprVersion,
+    registry: opts.registry
+  });
+  if (opts.timeout !== void 0) {
+    cfg.pepr.webhookTimeout = opts.timeout;
+  }
+  if (opts.registryInfo !== void 0) {
+    logger_default.info(`Including ${cfg.pepr.includedFiles.length} files in controller image.`);
+    await handleCustomImageBuild(
+      cfg.pepr.includedFiles,
+      cfg.pepr.peprVersion,
+      cfg.description,
+      image
+    );
+  }
+  const assets = new Assets(
+    {
+      ...cfg.pepr,
+      appVersion: cfg.version,
+      description: cfg.description,
+      alwaysIgnore: { namespaces: cfg.pepr.alwaysIgnore?.namespaces },
+      rbacMode: determineRbacMode(opts, cfg)
+    },
+    path4,
+    opts.withPullSecret === "" ? [] : [opts.withPullSecret]
+  );
+  if (image !== "") assets.image = image;
+  if (!validImagePullSecret(opts.withPullSecret)) {
+    throw new Error("Invalid imagePullSecret. Please provide a valid name as defined in RFC 1123.");
+  }
+  handleValidCapabilityNames(assets.capabilities);
+  await generateYamlAndWriteToDisk({
+    uuid: cfg.pepr.uuid,
+    outputDir,
+    imagePullSecret: opts.withPullSecret,
+    zarf: opts.zarf,
+    assets
+  });
+  return assets;
+}
 function build_default(program2) {
   program2.command("build").description("Build a Pepr Module for deployment").addOption(
     new import_commander.Option("-M, --rbac-mode <mode>", "Override module config and set RBAC mode.").choices([
@@ -9960,66 +10152,24 @@ function build_default(program2) {
     new import_commander.Option("-z, --zarf <manifest|chart>", "Set Zarf package type").choices(["manifest", "chart"]).default("manifest")
   ).action(async (opts) => {
     const outputDir = await createOutputDirectory(opts.output);
-    const buildModuleResult = await buildModule(
-      outputDir,
-      void 0,
-      opts.entryPoint,
-      opts.embed
-    );
-    const { cfg, path: path4 } = buildModuleResult;
+    const format2 = determineModuleFormat((0, import_path5.resolve)(process.cwd(), "package.json"));
+    const buildModuleResult = await buildModule(outputDir, {
+      entryPoint: opts.entryPoint,
+      embed: opts.embed,
+      format: format2
+    });
+    if (!buildModuleResult) {
+      return;
+    }
+    const { path: path4 } = buildModuleResult;
     if (opts.customName) {
       process.env.PEPR_CUSTOM_BUILD_NAME = opts.customName;
     }
-    const image = assignImage({
-      customImage: opts.customImage,
-      registryInfo: opts.registryInfo,
-      peprVersion: cfg.pepr.peprVersion,
-      registry: opts.registry
-    });
-    if (opts.timeout !== void 0) {
-      cfg.pepr.webhookTimeout = opts.timeout;
-    }
-    if (opts.registryInfo !== void 0) {
-      logger_default.info(`Including ${cfg.pepr.includedFiles.length} files in controller image.`);
-      await handleCustomImageBuild(
-        cfg.pepr.includedFiles,
-        cfg.pepr.peprVersion,
-        cfg.description,
-        image
-      );
-    }
     if (!opts.embed) {
       logger_default.info(`Module built successfully at ${path4}`);
       return;
     }
-    const assets = new Assets(
-      {
-        ...cfg.pepr,
-        appVersion: cfg.version,
-        description: cfg.description,
-        alwaysIgnore: {
-          namespaces: cfg.pepr.alwaysIgnore?.namespaces
-        },
-        // Can override the rbacMode with the CLI option
-        rbacMode: determineRbacMode(opts, cfg)
-      },
-      path4,
-      opts.withPullSecret === "" ? [] : [opts.withPullSecret]
-    );
-    if (image !== "") assets.image = image;
-    if (!validImagePullSecret(opts.withPullSecret)) {
-      throw new Error(
-        "Invalid imagePullSecret. Please provide a valid name as defined in RFC 1123."
-      );
-    }
-    handleValidCapabilityNames(assets.capabilities);
-    await generateYamlAndWriteToDisk({
-      uuid: cfg.pepr.uuid,
-      outputDir,
-      imagePullSecret: opts.withPullSecret,
-      zarf: opts.zarf,
-      assets
-    });
+    await generateDeploymentAssets(buildModuleResult, opts, outputDir);
   });
 }
 
@@ -10288,14 +10438,14 @@ async function namespaceDeploymentsReady(namespace = "pepr-system") {
     if (ready) {
       return ready;
     }
-    await new Promise((resolve8) => setTimeout(resolve8, 1e3));
+    await new Promise((resolve9) => setTimeout(resolve9, 1e3));
   }
   logger_default.info(`All ${namespace} deployments are ready`);
 }
 
 // src/cli/deploy/buildAndDeploy.ts
 async function buildAndDeployModule(image, force) {
-  const builtModule = await buildModule("dist");
+  const builtModule = await buildModule("dist", {});
   if (!builtModule) {
     return;
   }
@@ -10419,16 +10569,18 @@ ${error}`
           logger_default.debug(`Received SIGINT, removing webhooks`);
         });
       };
-      await buildModule("dist", async (r) => {
-        if (r.errors.length > 0) {
-          logger_default.error(`Error compiling module: ${r.errors}`);
-          return;
-        }
-        if (program3) {
-          program3.once("exit", runFork);
-          program3.kill("SIGKILL");
-        } else {
-          await runFork();
+      await buildModule("dist", {
+        reloader: async (r) => {
+          if (r.errors.length > 0) {
+            logger_default.error(`Error compiling module: ${r.errors}`);
+            return;
+          }
+          if (program3) {
+            program3.once("exit", runFork);
+            program3.kill("SIGKILL");
+          } else {
+            await runFork();
+          }
         }
       });
     } catch (e) {
@@ -10677,11 +10829,11 @@ ${packageJSON2.print.replace(/^/gm, "    \u2502   ")}
 var import_commander3 = require("commander");
 
 // src/cli/init/setupProjectStructure.ts
-var import_path5 = require("path");
+var import_path6 = require("path");
 async function setupProjectStructure(dirName) {
   await createDir(dirName);
-  await createDir((0, import_path5.resolve)(dirName, ".vscode"));
-  await createDir((0, import_path5.resolve)(dirName, "capabilities"));
+  await createDir((0, import_path6.resolve)(dirName, ".vscode"));
+  await createDir((0, import_path6.resolve)(dirName, "capabilities"));
 }
 
 // src/cli/init/doPostInitActions.ts
@@ -10825,7 +10977,7 @@ var import_commander7 = require("commander");
 // src/cli/update/index.ts
 var import_child_process6 = require("child_process");
 var import_fs13 = __toESM(require("fs"));
-var import_path6 = require("path");
+var import_path7 = require("path");
 var import_prompts4 = __toESM(require("prompts"));
 function update_default(program2) {
   program2.command("update").description("Update this Pepr module. Not recommended for prod as it may change files.").option("-s, --skip-template-update", "Do not update template files").option("-y, --yes", "Skip confirmation prompt").action(async (opts) => {
@@ -10859,16 +11011,16 @@ function update_default(program2) {
     logger_default.info("Updating Pepr config and template files...");
     try {
       if (!opts.skipTemplateUpdate) {
-        await write((0, import_path6.resolve)(prettier.path), prettier.data);
-        await write((0, import_path6.resolve)(tsConfig.path), tsConfig.data);
-        await write((0, import_path6.resolve)(".vscode", snippet.path), snippet.data);
-        await write((0, import_path6.resolve)(".vscode", codeSettings.path), codeSettings.data);
-        const samplePath = (0, import_path6.resolve)("capabilities", samplesYaml.path);
+        await write((0, import_path7.resolve)(prettier.path), prettier.data);
+        await write((0, import_path7.resolve)(tsConfig.path), tsConfig.data);
+        await write((0, import_path7.resolve)(".vscode", snippet.path), snippet.data);
+        await write((0, import_path7.resolve)(".vscode", codeSettings.path), codeSettings.data);
+        const samplePath = (0, import_path7.resolve)("capabilities", samplesYaml.path);
         if (import_fs13.default.existsSync(samplePath)) {
           import_fs13.default.unlinkSync(samplePath);
           await write(samplePath, samplesYaml.data);
         }
-        const tsPath = (0, import_path6.resolve)("capabilities", helloPepr.path);
+        const tsPath = (0, import_path7.resolve)("capabilities", helloPepr.path);
         if (import_fs13.default.existsSync(tsPath)) {
           await write(tsPath, helloPepr.data);
         }
@@ -10918,7 +11070,7 @@ var import_commander4 = require("commander");
 
 // src/cli/crd/generate/generators.ts
 var import_fs14 = __toESM(require("fs"));
-var import_path7 = __toESM(require("path"));
+var import_path8 = __toESM(require("path"));
 var import_yaml = __toESM(require_dist());
 var import_ts_morph = require("ts-morph");
 
@@ -10947,24 +11099,24 @@ function extractCRDDetails(content, sourceFile) {
 }
 async function generateCRDs(options) {
   logger_default.warn("This feature is currently in alpha.\n");
-  const outputDir = import_path7.default.resolve(options.output);
+  const outputDir = import_path8.default.resolve(options.output);
   await createDirectoryIfNotExists(outputDir);
   const project = new import_ts_morph.Project();
-  const apiRoot = import_path7.default.resolve("api");
+  const apiRoot = import_path8.default.resolve("api");
   const versions = getAPIVersions(apiRoot);
   for (const version3 of versions) {
-    const sourceFiles = loadVersionFiles(project, import_path7.default.join(apiRoot, version3));
+    const sourceFiles = loadVersionFiles(project, import_path8.default.join(apiRoot, version3));
     for (const sourceFile of sourceFiles) {
       processSourceFile(sourceFile, version3, outputDir);
     }
   }
 }
 function getAPIVersions(apiRoot) {
-  return import_fs14.default.readdirSync(apiRoot).filter((v) => import_fs14.default.statSync(import_path7.default.join(apiRoot, v)).isDirectory());
+  return import_fs14.default.readdirSync(apiRoot).filter((v) => import_fs14.default.statSync(import_path8.default.join(apiRoot, v)).isDirectory());
 }
 function loadVersionFiles(project, versionDir) {
   const files = import_fs14.default.readdirSync(versionDir).filter((f) => f.endsWith(".ts"));
-  const filePaths = files.map((f) => import_path7.default.join(versionDir, f));
+  const filePaths = files.map((f) => import_path8.default.join(versionDir, f));
   return project.addSourceFilesAtPaths(filePaths);
 }
 function processSourceFile(sourceFile, version3, outputDir) {
@@ -10992,7 +11144,7 @@ function processSourceFile(sourceFile, version3, outputDir) {
     specSchema,
     conditionSchema
   });
-  const outPath = import_path7.default.join(outputDir, `${kind8.toLowerCase()}.yaml`);
+  const outPath = import_path8.default.join(outputDir, `${kind8.toLowerCase()}.yaml`);
   import_fs14.default.writeFileSync(outPath, (0, import_yaml.stringify)(crd), "utf8");
   logger_default.info(`\u2714 Created ${outPath}`);
 }
@@ -11241,7 +11393,7 @@ type ${kind8}StatusCondition = {
 };
 
 // src/cli/crd/create/index.ts
-var import_path8 = __toESM(require("path"));
+var import_path9 = __toESM(require("path"));
 function create_default() {
   return new import_commander5.Command("create").description("Create a new CRD TypeScript definition").addOption(
     new import_commander5.Option(
@@ -11250,7 +11402,7 @@ function create_default() {
     ).choices(["Namespaced", "Cluster"]).default("Namespaced")
   ).option("-d, --domain <domain>", "Optional domain for CRD (e.g. pepr.dev)", "pepr.dev").requiredOption("-g, --group <group>", "API group (e.g. cache)").requiredOption("-k, --kind <kind>", "Kind name (e.g. memcached)").option("-p, --plural <plural>", "Plural name for CRD (e.g. memcacheds)").requiredOption("-s, --short-name <name>", "Short name for CRD (e.g. mc)").requiredOption("-v, --version <version>", "API version (e.g. v1alpha1)").action(async ({ group: group2, version: version3, kind: kind8, domain, scope, plural: plural2, shortName }) => {
     logger_default.warn("This feature is currently in alpha.");
-    const outputDir = import_path8.default.resolve(`./api/${version3}`);
+    const outputDir = import_path9.default.resolve(`./api/${version3}`);
     await createDirectoryIfNotExists(outputDir);
     await import_fs15.promises.writeFile(
       `./api/${version3}/${kind8.toLowerCase()}_types.ts`,