@voxgig/sdkgen 4.10.0 → 4.12.0

package/project/.sdk/tm/ocaml/test/vendor/omni/omni.ml

@@ -1,5 +1,5 @@
 (* VENDORED: @voxgig/omni sdk-20260908-1556-0 (ocaml/src/omni.ml) *)
-(* Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260908-1556-0] *)
+(* Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0] *)
 (* License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream. *)
 (* Omni: the shared multi-language test runner (OCaml port).
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Capability.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Capability.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Capability;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Catalog.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Catalog.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Catalog;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Config.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Config.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Config;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Depend.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Depend.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Depend;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Env.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Env.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Env;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Export.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Export.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Export;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Graph.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Graph.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Graph;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Host.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Host.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Host;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Order.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Order.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Order;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Point.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Point.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Point;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Ref.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Ref.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Ref;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Resolve.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Resolve.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Resolve;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Types.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Types.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Types;
 
@@ -22,6 +22,30 @@ use strict;
 use warnings;
 use B ();
 use Scalar::Util qw(blessed reftype);
+
+# PERL 5.36 OR LATER, SAID ONCE, HERE.
+#
+# `builtin` is core from 5.36 and does not exist before it, so on 5.34 the
+# interpreter reports `Can't locate builtin.pm` and then unwinds through a
+# BEGIN failure for every module on the way down — eight of them when the
+# library is loaded through a host — naming each file and never the
+# requirement. The README states the minimum; nothing in the code did, so
+# the one person who most needs to be told reads the least useful message.
+#
+# This is the file that depends on it: `is_bool` is the only way perl can
+# tell a true boolean from the number 1, and `jsontype` below is the whole
+# of the port's answer to having no JSON types.
+#
+# A BEGIN block rather than `use v5.36`, which would also switch on that
+# release's feature bundle and change how the rest of this file compiles.
+BEGIN {
+    if ($] < 5.036) {
+        die "Voxgig::Plugin::Types requires perl 5.36 or later (this is $]):"
+            . " it uses builtin::is_bool, the only way perl can tell a true"
+            . " boolean from the number 1.\n";
+    }
+}
+
 use builtin qw(is_bool);
 no warnings 'experimental::builtin';
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin/Version.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin/Version.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin::Version;
 

package/project/.sdk/tm/perl/feature/secrets/plugin/Voxgig/Plugin.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin sdk-20260908-1556-0 (perl/lib/Voxgig/Plugin.pm)
-# Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Plugin;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Aws.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Aws.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Aws;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Azuresecrets.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Azuresecrets.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Azuresecrets;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Boru.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Boru.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Boru;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Doppler.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Doppler.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Doppler;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Gcpsecrets.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Gcpsecrets.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Gcpsecrets;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Hashicorp.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Hashicorp.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Hashicorp;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Httpjson.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Httpjson.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Httpjson;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Infisical.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Infisical.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Infisical;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Onepassword.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Onepassword.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Onepassword;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Proc.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Proc.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Proc;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Secretspec.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Secretspec.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Secretspec;
 

package/project/.sdk/tm/perl/feature/secrets/plugins/Voxgig/Sekreto/Plugins/Sigv4.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/plugins/Voxgig/Sekreto/Plugins/Sigv4.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Plugins::Sigv4;
 

package/project/.sdk/tm/perl/feature/secrets/sekreto/Voxgig/Sekreto/Addr.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/lib/Voxgig/Sekreto/Addr.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Addr;
 

package/project/.sdk/tm/perl/feature/secrets/sekreto/Voxgig/Sekreto/Providers.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/lib/Voxgig/Sekreto/Providers.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto::Providers;
 

package/project/.sdk/tm/perl/feature/secrets/sekreto/Voxgig/Sekreto.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (perl/lib/Voxgig/Sekreto.pm)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Sekreto;
 

package/project/.sdk/tm/perl/feature/secrets_feature.pm

@@ -325,10 +325,18 @@ sub transport {
 }
 
 
-# One resolution, shared by every request. A settled SUCCESS is kept only
-# when caching is on (`cache: false` means every resolve asks the chain
-# again); a FAILURE is never kept, so a transient vault outage cannot
-# poison the client permanently - the next request asks the chain again.
+# One resolution, shared by every request. A settled HIT is kept only when
+# caching is on (`cache: false` means every resolve asks the chain again);
+# a FAILURE is never kept, so a transient vault outage cannot poison the
+# client permanently - the next request asks the chain again.
+#
+# A MISS is not kept either, however caching is set. That rule is
+# sekreto's, not this feature's: `A miss is never cached: the next read
+# asks again`, in sekreto's own source. Keeping a settled miss here would
+# override that from the layer above, and a secret provisioned after
+# startup - a mounted file, a policy granted a minute late - would never be
+# picked up for the life of the client. `cache` is about caching a HIT; it
+# was never a promise to keep saying no.
 #
 # Returns an error MESSAGE (a string) or undef.
 sub resolve {
@@ -337,23 +345,26 @@ sub resolve {
   return $self->{initerr} if defined $self->{initerr};
   return undef if $self->{resolved} && $self->{cache};
 
-  my $err = $self->_resolve_once();
-  $self->{resolved} = defined($err) ? 0 : 1;
+  my ($err, $hit) = $self->_resolve_once();
+  $self->{resolved} = (defined($err) || !$hit) ? 0 : 1;
 
   return $err;
 }
 
 
+# Resolve once, answering ($err, $hit): whether a credential came out of
+# it. That flag is the whole of what resolve needs to tell a cacheable HIT
+# from a miss it must not keep.
 sub _resolve_once {
   my ($self) = @_;
 
-  return undef unless defined $self->{sek};
+  return (undef, 0) unless defined $self->{sek};
 
   # sekreto's miss-vs-error rule, inherited: `try` returns undef on a MISS
   # and dies on a provider ERROR.
   my $found;
   my $ok = eval { $found = $self->{sek}->try($self->{secretname}); 1 };
-  return _trim(defined $@ && '' ne "$@" ? "$@" : 'secrets: provider failed')
+  return (_trim(defined $@ && '' ne "$@" ? "$@" : 'secrets: provider failed'), 0)
     if !$ok;
 
   if (!defined $self->{exchange}) {
@@ -363,7 +374,7 @@ sub _resolve_once {
     # way - it seats FIRST in the chain as a memory provider, so the chain
     # HITS while one is set and this branch is unreachable.)
     $self->{cred} = defined $found ? "$found" : '';
-    return undef;
+    return (undef, defined($found) ? 1 : 0);
   }
 
   # Exchanging: what the chain resolved is the REFRESH token, kept for
@@ -381,13 +392,23 @@ sub _resolve_once {
   # A starting access token was supplied. Spend it: if it is stale the API
   # answers with an expiry status and the wrapper buys another, which is
   # the same path expiry takes anyway.
-  return undef if '' ne $self->{cred};
+  return (undef, 1) if '' ne $self->{cred};
+
+  # `auth => undef` is the documented way to send NO credential, and a
+  # purchase is a credential-bearing call: the refresh token goes to the
+  # token endpoint in the request body. _with_refresh honours suppression
+  # for the RETRY, but it runs after this - by then the refresh token has
+  # already left the process, and no later check can call it back. The
+  # suppression has to be honoured here, before the first purchase, or it
+  # only ever half-held.
+  return (undef, 0)
+    if !defined ProjectNameHelpers::gp($self->{liveopts}, 'auth');
 
   my ($token, $err) = $self->_buy();
-  return $err if defined $err;
+  return ($err, 0) if defined $err;
 
   $self->{cred} = $token;
-  return undef;
+  return (undef, 1);
 }
 
 

package/project/.sdk/tm/perl/lib/Voxgig/Struct.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/struct 0.1.1 (perl/lib/Voxgig/Struct.pm)
-# Source: https://github.com/voxgig/struct @ adda9521c828147573df5a8878408a3f2193ddf4  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/struct @ abd93227e3295151f8dcd18597c3f3f2577af8b7  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Copyright (c) 2025-2026 Voxgig Ltd. MIT LICENSE.
 # Perl port of the canonical TypeScript implementation (ts/src/StructUtility.ts).

package/project/.sdk/tm/perl/t/feature/secrets/secrets.t

@@ -510,6 +510,45 @@ SKIP: {
 
 # --- cache -----------------------------------------------------------------
 
+# A MISS IS NOT A CACHEABLE ANSWER - sekreto's own rule, which this feature
+# used to override from the layer above.
+#
+# DEFAULT caching here, which is the whole point: `cache: true` is about
+# holding a HIT (the block after next pins that half), and keeping the
+# settled resolution after a miss meant the chain was never asked again for
+# the life of the client. A secret provisioned after startup (a mounted
+# file, a vault policy granted a minute late) was invisible forever.
+{
+  clear_env();
+
+  my $calls = 0;
+  my $present = 0;
+  my $late = {
+    'lookup' => sub { $calls++; return $present ? 'LATEKEY01' : undef },
+    'describe' => sub { 'late:test' },
+  };
+
+  my $stub = counting_fetch();
+  my $sdk = secrets_sdk($stub, { 'providers' => [$late] });
+
+  $sdk->direct({ 'path' => '/one' });
+  no_credential($stub->{calls}[0]{auth},
+    'the chain has nothing yet, so no credential should go out');
+
+  my $asked = $calls;
+  ok(0 < $asked, 'the chain was asked at least once');
+
+  # The secret is provisioned while the client is live.
+  $present = 1;
+
+  $sdk->direct({ 'path' => '/two' });
+
+  ok($asked < $calls,
+    'the MISS was cached: a secret that appears later can never be picked up');
+  credential_is($stub->{calls}[1]{auth}, 'LATEKEY01', 'the late secret goes out');
+}
+
+
 {
   clear_env();
 
@@ -907,6 +946,14 @@ sub exchange_sdk {
     'exchange: a suppressed request must not be retried');
   no_credential(api_calls($stub)->[0]{auth},
     'exchange: no credential may be sent when auth is suppressed');
+
+  # AND NO PURCHASE. resolve runs before _with_refresh's suppression check,
+  # so the refresh token used to go to the token endpoint in a request body
+  # even here. Stopping the retry does not unsend it, and only the token
+  # endpoint can see this.
+  is(scalar @{ token_calls($stub) }, 0,
+    'exchange: auth undef suppressed the credential but the refresh token '
+      . 'was still POSTed to the exchange endpoint');
 }
 
 {

package/project/.sdk/tm/perl/t/vendor/omni/Voxgig/Omni/Runner.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/omni 0.1.0 (perl/lib/Voxgig/Omni/Runner.pm)
-# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Omni::Runner;
 

package/project/.sdk/tm/perl/t/vendor/omni/Voxgig/Omni/Util.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/omni 0.1.0 (perl/lib/Voxgig/Omni/Util.pm)
-# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Omni::Util;
 

package/project/.sdk/tm/perl/t/vendor/omni/Voxgig/Omni.pm

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/omni 0.1.0 (perl/lib/Voxgig/Omni.pm)
-# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260908-1556-0]
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package Voxgig::Omni;
 

package/project/.sdk/tm/php/feature/SecretsFeature.php

@@ -309,6 +309,14 @@ class ProjectNameSecretsFeature extends ProjectNameBaseFeature
     // is never cached, so a transient vault outage does not poison the
     // client after the vault recovers.
     //
+    // A MISS is not cached either, however caching is set. That rule is
+    // sekreto's, not this feature's: `A miss is never cached: the next read
+    // asks again`, in sekreto's own source. Caching a settled miss here
+    // would override that from the layer above, and a secret provisioned
+    // after startup - a mounted file, a policy granted a minute late -
+    // would never be picked up for the life of the client. `cache` is about
+    // caching a HIT; it was never a promise to keep saying no.
+    //
     // Answers the error rather than throwing it: the caller is the
     // transport gate, whose contract is a [value, err] pair.
     public function resolve(): ?\Throwable
@@ -321,22 +329,25 @@ class ProjectNameSecretsFeature extends ProjectNameBaseFeature
         }
 
         try {
-            $this->resolve_once();
+            $hit = $this->resolve_once();
         } catch (\Throwable $e) {
             return $e;
         }
 
-        if ($this->cache) {
+        if ($this->cache && $hit) {
             $this->resolved = true;
         }
 
         return null;
     }
 
-    private function resolve_once(): void
+    // Resolve once, answering whether a credential came out of it. That
+    // bool is the whole of what resolve() needs to tell a cacheable HIT
+    // from a miss it must not cache.
+    private function resolve_once(): bool
     {
         if (null === $this->sekreto) {
-            return;
+            return false;
         }
 
         // Miss-vs-error: `try` answers null for "no store has it" and
@@ -355,7 +366,7 @@ class ProjectNameSecretsFeature extends ProjectNameBaseFeature
             // chain as a memory provider, so the chain HITS while one is
             // set and the miss branch is unreachable.)
             $this->setcred($found);
-            return;
+            return null !== $found;
         }
 
         // Exchanging: what the chain resolved is the REFRESH token, kept
@@ -377,10 +388,23 @@ class ProjectNameSecretsFeature extends ProjectNameBaseFeature
             // A starting access token was supplied. Spend it: if it is
             // stale the API answers with an expiry status and the wrapper
             // buys another, which is the same path expiry takes anyway.
-            return;
+            return true;
+        }
+
+        // `auth: null` is the documented way to send NO credential, and a
+        // purchase is a credential-bearing call: the refresh token goes to
+        // the token endpoint in the request body. with_refresh honours
+        // suppression for the RETRY, but it runs after this - by then the
+        // refresh token has already left the process, and no later check
+        // can call it back. The suppression has to be honoured here, before
+        // the first purchase, or it only ever half-held.
+        if (null === ($this->liveopts['auth'] ?? null)) {
+            return false;
         }
 
         $this->buy();
+
+        return true;
     }
 
     // Buy a token and try the request again when the API says the current

package/project/.sdk/tm/php/feature/secrets/plugin/Capability.php

@@ -1,6 +1,6 @@
 <?php
 // VENDORED: @voxgig/plugin sdk-20260908-1556-0 (php/src/Capability.php)
-// Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/plugin/Catalog.php

@@ -1,6 +1,6 @@
 <?php
 // VENDORED: @voxgig/plugin sdk-20260908-1556-0 (php/src/Catalog.php)
-// Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/plugin/Config.php

@@ -1,6 +1,6 @@
 <?php
 // VENDORED: @voxgig/plugin sdk-20260908-1556-0 (php/src/Config.php)
-// Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/plugin/Depend.php

@@ -1,6 +1,6 @@
 <?php
 // VENDORED: @voxgig/plugin sdk-20260908-1556-0 (php/src/Depend.php)
-// Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/plugin/Env.php

@@ -1,6 +1,6 @@
 <?php
 // VENDORED: @voxgig/plugin sdk-20260908-1556-0 (php/src/Env.php)
-// Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/plugin/Export.php

@@ -1,6 +1,6 @@
 <?php
 // VENDORED: @voxgig/plugin sdk-20260908-1556-0 (php/src/Export.php)
-// Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/plugin/Graph.php

@@ -1,6 +1,6 @@
 <?php
 // VENDORED: @voxgig/plugin sdk-20260908-1556-0 (php/src/Graph.php)
-// Source: https://github.com/voxgig/plugin @ 48392f5e2b6d1434ee9b1a4a9a11f4480aaeb46a  [tag: sdk-20260908-1556-0]
+// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**