@voxgig/sdkgen 1.2.1 → 1.3.2

package/dist/utility.js

@@ -7,33 +7,61 @@ exports.SdkGenError = void 0;
 exports.resolvePath = resolvePath;
 exports.requirePath = requirePath;
 exports.isAuthActive = isAuthActive;
+exports.resolveAuthPrefix = resolveAuthPrefix;
 const node_path_1 = __importDefault(require("node:path"));
 const apidef_1 = require("@voxgig/apidef");
 function resolvePath(ctx$, path) {
     const fullpath = node_path_1.default.join(ctx$.folder, '.sdk', 'dist', path);
     return fullpath;
 }
-// True unless the model explicitly declares main.kit.config.auth.active: false.
-// Used by templates to gate apikey-related code, docs, and examples for
-// public APIs that need no authentication.
+// True unless the model declares auth off. Templates use this to gate
+// apikey-related code, docs, and examples for public APIs that need no
+// authentication. Two opt-outs, in priority order:
+//   1. main.kit.info.auth: false        (user-facing, set in api-info.aontu)
+//   2. main.kit.config.auth.active: false
 function isAuthActive(model) {
+    const info = (0, apidef_1.getModelPath)(model, `main.${apidef_1.KIT}.info`, { only_active: false, required: false });
+    if (info && false === info.auth)
+        return false;
     const auth = (0, apidef_1.getModelPath)(model, `main.${apidef_1.KIT}.config.auth`, { only_active: false, required: false });
     return null == auth || false !== auth.active;
 }
+// The credential prefix for the Authorization header value, resolved in
+// priority order:
+//   1. main.kit.config.auth.prefix   (per-SDK user override)
+//   2. main.kit.info.security.prefix (spec-derived, set by apidef from the
+//      API's securityScheme — e.g. 'OAuth' for Statuspage)
+//   3. 'Bearer'                      (conventional fallback)
+// '' is a valid resolved value: it means a raw credential with no prefix
+// (e.g. an apiKey scheme in a custom header). Config generators for every
+// language target must use this instead of hardcoding 'Bearer'.
+function resolveAuthPrefix(model) {
+    const auth = (0, apidef_1.getModelPath)(model, `main.${apidef_1.KIT}.config.auth`, { only_active: false, required: false });
+    if (null != auth && null != auth.prefix)
+        return String(auth.prefix);
+    const security = (0, apidef_1.getModelPath)(model, `main.${apidef_1.KIT}.info.security`, { only_active: false, required: false });
+    if (null != security && null != security.prefix)
+        return String(security.prefix);
+    return 'Bearer';
+}
 function requirePath(ctx$, path, flags) {
     const fullpath = resolvePath(ctx$, path);
     const ignore = null == flags?.ignore ? false : flags.ignore;
-    try {
-        return require(fullpath);
-    }
-    catch (err) {
-        if (ignore) {
-            ctx$.log.warn({ point: 'require-missing', path, note: path });
+    // When `ignore` is set, only swallow a genuine "module not found"
+    // resolution failure. A module that resolves but throws while loading
+    // (syntax error, runtime bug, or a missing *nested* dependency) must
+    // propagate — otherwise the optional component silently renders nothing
+    // and the real failure is invisible.
+    if (ignore) {
+        try {
+            require.resolve(fullpath);
         }
-        else {
-            throw err;
+        catch (err) {
+            ctx$.log.warn({ point: 'require-missing', path, note: path });
+            return undefined;
         }
     }
+    return require(fullpath);
 }
 class SdkGenError extends Error {
     constructor(...args) {

package/dist/utility.js.map

@@ -1 +1 @@
-{"version":3,"file":"utility.js","sourceRoot":"","sources":["../src/utility.ts"],"names":[],"mappings":";;;;;;AAmDE,kCAAW;AACX,kCAAW;AACX,oCAAY;AApDd,0DAA4B;AAI5B,2CAAkD;AAGlD,SAAS,WAAW,CAAC,IAAS,EAAE,IAAY;IAC1C,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7D,OAAO,QAAQ,CAAA;AACjB,CAAC;AAGD,gFAAgF;AAChF,wEAAwE;AACxE,2CAA2C;AAC3C,SAAS,YAAY,CAAC,KAAU;IAC9B,MAAM,IAAI,GAAG,IAAA,qBAAY,EAAC,KAAK,EAAE,QAAQ,YAAG,cAAc,EACxD,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1C,OAAO,IAAI,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,CAAA;AAC9C,CAAC;AAGD,SAAS,WAAW,CAAC,IAAS,EAAE,IAAY,EAAE,KAA4B;IACxE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,IAAI,IAAI,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAA;IAE3D,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,GAAQ,EAAE,CAAC;QAChB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/D,CAAC;aACI,CAAC;YACJ,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAGD,MAAM,WAAY,SAAQ,KAAK;IAC7B,YAAY,GAAG,IAAW;QACxB,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,aAAa,CAAA;IAC3B,CAAC;CACF;AAOC,kCAAW"}
+{"version":3,"file":"utility.js","sourceRoot":"","sources":["../src/utility.ts"],"names":[],"mappings":";;;;;;AAoFE,kCAAW;AACX,kCAAW;AACX,oCAAY;AACZ,8CAAiB;AAtFnB,0DAA4B;AAI5B,2CAAkD;AAGlD,SAAS,WAAW,CAAC,IAAS,EAAE,IAAY;IAC1C,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7D,OAAO,QAAQ,CAAA;AACjB,CAAC;AAGD,sEAAsE;AACtE,uEAAuE;AACvE,mDAAmD;AACnD,6EAA6E;AAC7E,0CAA0C;AAC1C,SAAS,YAAY,CAAC,KAAU;IAC9B,MAAM,IAAI,GAAG,IAAA,qBAAY,EAAC,KAAK,EAAE,QAAQ,YAAG,OAAO,EACjD,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1C,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAE7C,MAAM,IAAI,GAAG,IAAA,qBAAY,EAAC,KAAK,EAAE,QAAQ,YAAG,cAAc,EACxD,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1C,OAAO,IAAI,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,CAAA;AAC9C,CAAC;AAGD,wEAAwE;AACxE,kBAAkB;AAClB,6DAA6D;AAC7D,2EAA2E;AAC3E,2DAA2D;AAC3D,6DAA6D;AAC7D,yEAAyE;AACzE,0EAA0E;AAC1E,gEAAgE;AAChE,SAAS,iBAAiB,CAAC,KAAU;IACnC,MAAM,IAAI,GAAG,IAAA,qBAAY,EAAC,KAAK,EAAE,QAAQ,YAAG,cAAc,EACxD,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1C,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAEnE,MAAM,QAAQ,GAAG,IAAA,qBAAY,EAAC,KAAK,EAAE,QAAQ,YAAG,gBAAgB,EAC9D,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1C,IAAI,IAAI,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAE/E,OAAO,QAAQ,CAAA;AACjB,CAAC;AAGD,SAAS,WAAW,CAAC,IAAS,EAAE,IAAY,EAAE,KAA4B;IACxE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,IAAI,IAAI,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAA;IAE3D,kEAAkE;IAClE,sEAAsE;IACtE,qEAAqE;IACrE,wEAAwE;IACxE,qCAAqC;IACrC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC3B,CAAC;QACD,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7D,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAA;AAC1B,CAAC;AAGD,MAAM,WAAY,SAAQ,KAAK;IAC7B,YAAY,GAAG,IAAW;QACxB,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,aAAa,CAAA;IAC3B,CAAC;CACF;AAQC,kCAAW"}

package/model/sdkgen.aontu

@@ -0,0 +1,137 @@
+
+
+main: def: {
+  desc: *'' | string
+}
+
+
+# Canonical order for language targets in generated documentation
+# (top-level README, per-language docs links). Targets present in the
+# SDK but not listed here are appended afterwards in spec-defined
+# order. Override per-SDK by setting
+# `main.kit.config.docs_order: ['py','ts',...]` in
+# `<sdk>/.sdk/model/config.aontu`.
+main: kit: config: docs_order: *['ts','py','php','go','rb','lua'] | [&: string]
+
+main: kit: target: &: {
+  name: key()
+  active: *true | boolean
+  ext: string
+  comment: line: string
+  module: {
+    name: string
+  }
+  deps: &: {
+    active: *false | boolean
+    version: *'*' | string
+  }
+
+  # Publication: how (and whether) this port is released. Credentials are
+  # always injected by the aql key vault (never on disk or argv).
+  #
+  # Every port gets a git release tag `<prefix>/vX.Y.Z` (prefix defaults
+  # to the target name). Ports with a `registry` entry also publish a
+  # package to that registry — but only when the registry is active
+  # (`registry.state === 'active'`): registries are activated one at a
+  # time as each ecosystem is ready. Until then a port is 'pending'
+  # (declared + git-tag-published, but not yet uploaded to the registry).
+  # Tag-only ports (the go family: the Go proxy resolves from GitHub
+  # tags) simply leave `registry` unset — they are implicitly pending
+  # until their `<target>/vX.Y.Z` tag exists.
+  publish: {
+    # Git release tag (all ports).
+    tag: {
+      active: *true | boolean
+      prefix: *'' | string       # '' -> target name
+      # Who implements the tag publish: 'port' delegates to the port's
+      # own Makefile publish recipe (which may do more, e.g. go proxy
+      # priming); 'root' uses the generated root tag-push recipe (for
+      # ports without a Makefile, e.g. go-cli / go-mcp).
+      via: *'port' | string
+      vault: {
+        recipe: *'github' | string   # aql `vault exec --for=<recipe>=<alias>`
+        alias: *'github' | string    # default vault alias for the token
+      }
+    }
+
+    # Package registry (omit for tag-only ports).
+    registry: {
+      # Publication state (tri-state):
+      #   'pending'  — declared + git-tag-published, NOT yet on the
+      #                registry (the default: READMEs point at the git
+      #                tag, deploy publishes the tag only).
+      #   'active'   — package is uploaded to the registry; READMEs show
+      #                the real `npm install`/`pip install`/... command.
+      #   'inactive' — registry deliberately disabled (also tag-only).
+      # Kept as a plain string (default 'pending') rather than a literal
+      # disjunction to sidestep aontu's literal-disjunction fragility;
+      # code (packageMeta.registryState / Deploy) enforces the tri-state.
+      state: *'pending' | string
+      # Back-compat alias: `active: true` still means state === 'active'.
+      active: *false | boolean   # real publishes refuse when not active
+      name: *'' | string         # npm | pypi | packagist | rubygems | luarocks
+      url: *'' | string
+      package: *'' | string      # registry package name ('' -> derived)
+      vault: {
+        recipe: *'' | string     # aql --for preset (npm, pypi, gem, ...)
+        alias: *'' | string      # vault alias ('' -> registry name)
+        env: *'' | string        # raw env var to inject when no preset exists
+      }
+    }
+  }
+}
+
+
+main: kit: entity: &: {
+  name: key()
+  active: *true | boolean
+
+  alias: {}
+}
+
+
+main: kit: feature: &: {
+  name: key()
+  active: *false | boolean
+  title: string
+
+  # TODO: version '0.0.1' | semver # where semver is a string format type as per semver.org
+  version: *'0.0.1' | string
+
+  hook: &: {
+   active: *false | boolean
+   await: *false | boolean
+  }
+
+  hook: {
+    PostConstruct: {}
+    PostConstructEntity: {}
+    SetData: {}
+    GetData: {}
+    GetMatch: {}
+        
+    PreTarget: {}
+    PreSpec: {}
+    PreRequest: {}
+    PreResponse: {}
+    PreResult: {}
+    PostOperation: {}
+  }
+
+  # Target specific structures 
+  target: &: deps: &: {
+    active: *false | boolean
+    version: *'*' | string 
+  }
+}
+
+
+main: kit: option: &: {
+  name: key()
+  active: *true | boolean
+}
+
+
+
+
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voxgig/sdkgen",
-  "version": "1.2.1",
+  "version": "1.3.2",
   "main": "dist/sdkgen.js",
   "type": "commonjs",
   "types": "dist/sdkgen.d.ts",
@@ -23,12 +23,18 @@
     "test-some": "node --enable-source-maps --test-name-pattern=\"$npm_config_pattern\" --test dist-test/**/*.test.js",
     "watch": "tsc --build src test -w",
     "build": "tsc --build src test",
-    "clean": "rm -rf node_modules yarn.lock package-lock.json",
+    "clean": "rm -rf dist dist-test node_modules yarn.lock package-lock.json",
     "reset": "npm run clean && npm i && npm run build && npm test",
     "embed-version": "node build/version.js",
+    "repo-bump": "npm version patch --no-git-tag-version && node -e \"console.log('bumped to v' + require('./package.json').version + ' (package.json only - commit via repo-tag / repo-release)')\"",
     "repo-tag": "REPO_VERSION=`node -e \"console.log(require('./package').version)\"` && echo TAG: v$REPO_VERSION && git commit -a -m v$REPO_VERSION && git push && git tag v$REPO_VERSION && git push --tags;",
+    "repo-tag-dry": "REPO_VERSION=`node -e \"console.log(require('./package').version)\"` && echo \"[dry-run] TAG: v$REPO_VERSION\" && if git rev-parse -q --verify refs/tags/v$REPO_VERSION >/dev/null; then echo \"[dry-run] WARNING: tag v$REPO_VERSION already exists - bump the version first\"; else echo \"[dry-run] would commit -a, push, tag v$REPO_VERSION and push --tags; nothing done\"; fi && git status --short",
     "repo-publish": "npm run clean && npm i && npm run repo-publish-quick",
-    "repo-publish-quick": "npm run embed-version && npm run build && npm run test && npm run repo-tag && npm publish --registry https://registry.npmjs.org --access=public"
+    "repo-publish-dry": "npm run clean && npm i && npm run repo-publish-quick-dry",
+    "repo-publish-quick": "npm run embed-version && npm run build && npm run test && npm run repo-tag && npm publish --registry https://registry.npmjs.org --access=public",
+    "repo-publish-quick-dry": "npm run build && npm run test && ( npm publish --dry-run --registry https://registry.npmjs.org --access=public || echo \"[dry-run] npm publish refused (see npm error above) - usually the version is already published; bump package.json before a real release\" )",
+    "repo-release": "npm run repo-publish && npm run repo-tag",
+    "repo-release-dry": "npm run repo-publish-quick-dry && npm run repo-tag-dry"
   },
   "license": "MIT",
   "files": [
@@ -41,9 +47,9 @@
   ],
   "devDependencies": {
     "@types/js-yaml": "4.0.9",
-    "@types/node": "25.8.0",
+    "@types/node": "26.1.0",
     "json-schema-to-ts": "3.1.1",
-    "memfs": "4.57.2",
+    "memfs": "4.62.0",
     "typescript": "6.0.3"
   },
   "peerDependencies": {

package/project/.sdk/model/feature/feature-index.aontu

@@ -0,0 +1,5 @@
+# Features
+
+
+@"test.aontu"
+@"log.aontu"

package/project/.sdk/model/target/go-cli.aontu

@@ -0,0 +1,47 @@
+
+// Go CLI target — a Go program that *consumes* the sibling Go SDK
+// (generated by the `go` target into the same SDK repo). It is not a
+// language SDK in its own right, so the standard per-entity /
+// per-feature / readme / test generation phases are switched off via
+// the `phase` map below.
+
+main: kit: target: 'go-cli': {
+
+  title: 'Go CLI'
+  ext: go
+  comment: line: "//"
+  module: name: '$$name$$'
+
+  // Per-generation-phase activation. Mirrors the feature pattern
+  // (`main.kit.feature.<name>: { active: true }`). Root.ts inspects
+  // `target.phase.<name>.active` — defaults to true (active) when
+  // the entry is missing, so existing standard targets need no
+  // changes. A CLI-style target switches the standard phases off
+  // and runs only Main.
+  phase: {
+    entity:  { active: false }
+    feature: { active: false }
+    readme:  { active: false }
+    test:    { active: false }
+  }
+
+  // No external module deps declared here; the generated go.mod uses
+  // a relative replace to the sibling SDK at ../go and (until
+  // aql/eng is published with a subdir tag) a local replace for the
+  // AQL engine. See Main_go-cli.ts.
+  deps: {}
+}
+
+
+// Feature-deps map slot — every target carries this so the same
+// feature can specify per-target dep variants.
+main: kit: feature: &: target: 'go-cli': deps: &: {
+  kind: *'prod' | string
+}
+
+
+# Publication: tag-only — the Go module proxy resolves versions from the
+# go-cli/vX.Y.Z GitHub tag; there is no package registry to upload to.
+main: kit: target: 'go-cli': publish: {
+  tag: { active: true, via: 'root' }
+}

package/project/.sdk/model/target/go-mcp.aontu

@@ -0,0 +1,41 @@
+
+// Go MCP server target — a Go program that *consumes* the sibling Go
+// SDK and exposes it as MCP tools. Like go-cli, it is not a language
+// SDK in its own right, so the standard per-entity / per-feature /
+// readme / test generation phases are switched off via the `phase`
+// map below.
+
+main: kit: target: 'go-mcp': {
+
+  title: 'Go MCP server'
+  ext: go
+  comment: line: "//"
+  module: name: '$$name$$'
+
+  // Per-generation-phase activation. Mirrors go-cli — only Main runs.
+  phase: {
+    entity:  { active: false }
+    feature: { active: false }
+    readme:  { active: false }
+    test:    { active: false }
+  }
+
+  // No external module deps declared here. The generated go.mod uses
+  // a relative replace to the sibling SDK at ../go and declares the
+  // MCP Go SDK as a direct dep. See Main_go-mcp.ts.
+  deps: {}
+}
+
+
+// Feature-deps map slot — every target carries this so the same
+// feature can specify per-target dep variants.
+main: kit: feature: &: target: 'go-mcp': deps: &: {
+  kind: *'prod' | string
+}
+
+
+# Publication: tag-only — the Go module proxy resolves versions from the
+# go-mcp/vX.Y.Z GitHub tag; there is no package registry to upload to.
+main: kit: target: 'go-mcp': publish: {
+  tag: { active: true, via: 'root' }
+}

package/project/.sdk/model/target/go.aontu

@@ -0,0 +1,28 @@
+
+main: kit: target: go: {
+
+  title: Golang
+  ext: go
+  comment: line: "//"
+  module: name: '$$name$$'
+  srcfeature: false
+
+  deps: &: {
+    kind: *'prod' | string
+  }
+
+  // struct is inlined under <gomodule>/utility/struct — no external dep.
+  deps: {}
+}
+
+
+main: kit: feature: &: target: go: deps: &: {
+  kind: *'prod' | string
+}
+
+
+# Publication: tag-only — the Go module proxy resolves versions from the
+# go/vX.Y.Z GitHub tag; there is no package registry to upload to.
+main: kit: target: go: publish: {
+  tag: { active: true }
+}

package/project/.sdk/model/target/{js.jsonic → js.aontu}

@@ -21,3 +21,16 @@ main: kit: feature: &: target: js: deps: &: {
   # TODO: fix aontu disjunctions!
   kind: *'prod' | string # 'peer' |'dev'
 }
+
+
+# Publication: npm registry (declared, publish pending — git-tag only).
+main: kit: target: js: publish: {
+  tag: { active: true }
+  registry: {
+    state: 'pending'
+    active: false
+    name: 'npm'
+    url: 'https://registry.npmjs.org'
+    vault: { recipe: 'npm', alias: 'npm' }
+  }
+}

package/project/.sdk/model/target/{lua.jsonic → lua.aontu}

@@ -21,3 +21,16 @@ main: kit: target: lua: {
 main: kit: feature: &: target: lua: deps: &: {
   kind: *'prod' | string
 }
+
+
+# Publication: luarocks registry (declared, publish pending — git-tag only).
+main: kit: target: lua: publish: {
+  tag: { active: true }
+  registry: {
+    state: 'pending'
+    active: false
+    name: 'luarocks'
+    url: 'https://luarocks.org'
+    vault: { alias: 'luarocks', env: 'LUAROCKS_API_KEY' }
+  }
+}

package/project/.sdk/model/target/{php.jsonic → php.aontu}

@@ -19,3 +19,16 @@ main: kit: target: php: {
 main: kit: feature: &: target: php: deps: &: {
   kind: *'prod' | string
 }
+
+
+# Publication: packagist registry (declared, publish pending — git-tag only).
+main: kit: target: php: publish: {
+  tag: { active: true }
+  registry: {
+    state: 'pending'
+    active: false
+    name: 'packagist'
+    url: 'https://packagist.org'
+    vault: { alias: 'packagist', env: 'PACKAGIST_API_TOKEN' }
+  }
+}

package/project/.sdk/model/target/{py.jsonic → py.aontu}

@@ -21,3 +21,16 @@ main: kit: target: py: {
 main: kit: feature: &: target: py: deps: &: {
   kind: *'prod' | string
 }
+
+
+# Publication: pypi registry (declared, publish pending — git-tag only).
+main: kit: target: py: publish: {
+  tag: { active: true }
+  registry: {
+    state: 'pending'
+    active: false
+    name: 'pypi'
+    url: 'https://pypi.org'
+    vault: { recipe: 'pypi', alias: 'pypi' }
+  }
+}

package/project/.sdk/model/target/{rb.jsonic → rb.aontu}

@@ -21,3 +21,16 @@ main: kit: target: rb: {
 main: kit: feature: &: target: rb: deps: &: {
   kind: *'prod' | string
 }
+
+
+# Publication: rubygems registry (declared, publish pending — git-tag only).
+main: kit: target: rb: publish: {
+  tag: { active: true }
+  registry: {
+    state: 'pending'
+    active: false
+    name: 'rubygems'
+    url: 'https://rubygems.org'
+    vault: { recipe: 'gem', alias: 'gem' }
+  }
+}

package/project/.sdk/model/target/{ts.jsonic → ts.aontu}

@@ -24,3 +24,16 @@ main: kit: feature: &: target: ts: deps: &: {
   # TODO: fix aontu disjunctions!
   kind: *'prod' | string # 'peer' |'dev'
 }
+
+
+# Publication: npm registry (declared, publish pending — git-tag only).
+main: kit: target: ts: publish: {
+  tag: { active: true }
+  registry: {
+    state: 'pending'
+    active: false
+    name: 'npm'
+    url: 'https://registry.npmjs.org'
+    vault: { recipe: 'npm', alias: 'npm' }
+  }
+}

package/project/.sdk/src/cmp/go/Config_go.ts

@@ -10,6 +10,7 @@ import {
   cmp,
   each,
   isAuthActive,
+  resolveAuthPrefix,
 } from '@voxgig/sdkgen'
 
 
@@ -39,8 +40,8 @@ const Config = cmp(async function Config(props: any) {
   const headers = getModelPath(model, `main.${KIT}.config.headers`) || {}
 
   const authActive = isAuthActive(model)
-  let authPrefix = ''
-  try { authPrefix = getModelPath(model, `main.${KIT}.config.auth.prefix`) } catch (_e) { }
+  // config.auth.prefix override -> spec-derived info.security.prefix -> 'Bearer'
+  const authPrefix = resolveAuthPrefix(model)
 
   let baseUrl = ''
   try { baseUrl = getModelPath(model, `main.${KIT}.info.servers.0.url`) } catch (_e) { }

package/project/.sdk/src/cmp/go/EntityOperation_go.ts

@@ -30,6 +30,7 @@ const EntityOperation = cmp(function Operation(props: any) {
     replace: {
       ...entrep,
       'GOMODULE': gomodule,
+      '"github.com/voxgig/struct"': `"${gomodule}/utility/struct"`,
       ProjectName: model.const.Name,
       EntityName: entity.Name,
       entityname: entity.name,