@voxgig/sdkgen 4.19.1 → 4.21.0

package/project/.sdk/tm/c/feature/validate.c

@@ -0,0 +1,364 @@
+// Payload validation against the model's own field types (mirrors
+// feature/validate.rs and tm/ts/src/feature/validate/ValidateFeature.ts).
+//
+// The specs are NOT written here and not written in the model either: every
+// entity field already carries a canonical type sentinel (`$STRING`,
+// `$INTEGER`, the `$ONE` union for an OpenAPI multi-type), which is the same
+// vocabulary voxgig_validate speaks. The generator maps them once
+// (helpers/canonSpec) and emits `shared_entityspec()` into core/schema.c, so
+// a field whose type changes in the API spec changes what this feature
+// enforces with no edit anywhere.
+//
+// WHAT IS CHECKED
+//   outbound (PreSpec)  the payload the caller asked to send, against
+//                       spec.op[opname] - the operation's request shape.
+//   inbound  (PreDone)  each record the operation returned, against
+//                       spec.data - the entity's own field types.
+//
+// WHAT IS NOT. The model carries no array element types, no nested object
+// schemas, no enums, formats or bounds, so this checks the shape the model
+// knows and nothing more.
+
+#include "validate.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+typedef struct {
+  Feature base;
+  char* name;
+  bool active;
+  voxgig_value* add_opts;
+  voxgig_value* options;
+  voxgig_value* spec;
+
+  bool request;
+  bool response;
+  char* mode;
+
+  ValidateReportFn on_invalid;
+  void* on_invalid_ud;
+} ValidateFeature;
+
+// Built rather than written, so the backticks cannot be lost in an edit.
+static const char* validate_open_key(void) {
+  static char key[8];
+  if ('\0' == key[0]) {
+    snprintf(key, sizeof(key), "%c$OPEN%c", (char)96, (char)96);
+  }
+  return key;
+}
+
+// The entity name for the current op: the resolved entity when present, else
+// the operation's declared entity.
+static const char* validate_entity_name(Context* ctx) {
+  if (ctx->entity) {
+    const char* name = ctx->entity->vt->get_name(ctx->entity);
+    if (name && '\0' != name[0]) return name;
+  }
+  return ctx->op ? ctx->op->entity : "";
+}
+
+static const char* validate_op_name(Context* ctx) {
+  return ctx->op && ctx->op->name ? ctx->op->name : "";
+}
+
+static voxgig_value* validate_entity_spec(ValidateFeature* vf, Context* ctx) {
+  return getp(vf->spec, validate_entity_name(ctx));
+}
+
+// The spec tree with every `$OPEN` marker removed, so an undeclared key is an
+// error rather than a pass. Rebuilt rather than mutated: shared_entityspec()
+// hands out a process-lifetime singleton every client reads.
+static voxgig_value* validate_close(voxgig_value* node) {
+  if (voxgig_is_list(node)) {
+    voxgig_list* l = voxgig_as_list(node);
+    voxgig_value* out = v_list();
+    for (size_t i = 0; i < l->len; i++) {
+      voxgig_list_push(voxgig_as_list(out), validate_close(l->items[i]));
+    }
+    return out;
+  }
+
+  if (voxgig_is_map(node)) {
+    voxgig_map* m = voxgig_as_map(node);
+    const char* open = validate_open_key();
+    voxgig_value* out = v_map();
+    for (size_t i = 0; i < voxgig_map_len(m); i++) {
+      const char* k = voxgig_map_key_at(m, i);
+      if (0 == strcmp(k, open)) continue;
+      setp(out, k, validate_close(voxgig_map_val_at(m, i)));
+    }
+    return out;
+  }
+
+  return voxgig_retain(node);
+}
+
+// The payload an operation is about to send.
+//
+// TWO SLOTS, AND THE OP PICKS. A body op (create/update/patch) carries the
+// caller's argument in `reqdata` over the entity's `data`; a match op
+// (load/list/remove) carries it in `reqmatch` over `mtch`. That is what the
+// entity operations pass to context_new and what make_point reads - so
+// reading `reqdata` for every op would check a `load({id})` against the
+// entity's STALE stored match and reject it for the id the caller had just
+// supplied.
+static voxgig_value* validate_payload(Context* ctx, const char* opname) {
+  bool body = 0 == strcmp(opname, "create") || 0 == strcmp(opname, "update") ||
+              0 == strcmp(opname, "patch");
+
+  voxgig_value* srcs[2];
+  srcs[0] = body ? ctx->data : ctx->mtch;
+  srcs[1] = body ? ctx->reqdata : ctx->reqmatch;
+
+  voxgig_value* out = v_map();
+  for (int s = 0; s < 2; s++) {
+    if (!voxgig_is_map(srcs[s])) continue;
+    voxgig_map* m = voxgig_as_map(srcs[s]);
+    for (size_t i = 0; i < voxgig_map_len(m); i++) {
+      setp(out, voxgig_map_key_at(m, i), voxgig_retain(voxgig_map_val_at(m, i)));
+    }
+  }
+
+  // `$action` SELECTS A CUSTOM ENDPOINT; it is not a field of the record.
+  // make_point reads it off this same argument and the request transformer
+  // drops it before the body is built, so a spec built from the API's own
+  // fields will never name it - and under `strict` every custom-action call
+  // would be rejected for the one key that made it reachable.
+  voxgig_map_erase(voxgig_as_map(out), "$action");
+
+  return out;
+}
+
+// Join the collected failures into one message. Returns a malloc'd string the
+// caller frees.
+static char* validate_join(voxgig_value* errs) {
+  size_t total = 1;
+  voxgig_list* l = voxgig_as_list(errs);
+  for (size_t i = 0; i < l->len; i++) {
+    const char* s = voxgig_is_string(l->items[i]) ? voxgig_as_string(l->items[i]) : "?";
+    total += strlen(s) + 2;
+  }
+
+  char* out = (char*)calloc(1, total);
+  for (size_t i = 0; i < l->len; i++) {
+    const char* s = voxgig_is_string(l->items[i]) ? voxgig_as_string(l->items[i]) : "?";
+    if (0 < i) strcat(out, "; ");
+    strcat(out, s);
+  }
+  return out;
+}
+
+// One validate call. Errors are COLLECTED, never returned one at a time:
+// voxgig_validate stops at the first failure unless given an `errs` list, and
+// a caller fixing a payload wants every problem with it, not the first one.
+// Failures are APPENDED to `errs`, which the caller owns.
+static void validate_check(ValidateFeature* vf, Context* ctx, voxgig_value* data,
+                           voxgig_value* spec, const char* direction,
+                           voxgig_value* errs) {
+  voxgig_injection* sub = voxgig_inj_new(NULL, NULL);
+  sub->mode = 0;
+  voxgig_release(sub->errs);
+  sub->errs = voxgig_new_list();
+
+  voxgig_validate(data, spec, sub);
+
+  voxgig_list* collected = voxgig_as_list(sub->errs);
+  size_t before = voxgig_list_len(voxgig_as_list(errs));
+  for (size_t i = 0; i < collected->len; i++) {
+    voxgig_list_push(voxgig_as_list(errs), voxgig_retain(collected->items[i]));
+  }
+  size_t added = voxgig_list_len(voxgig_as_list(errs)) - before;
+
+  voxgig_inj_free(sub);
+
+  if (0 == added || NULL == vf->on_invalid) return;
+
+  // A callback receiving every failure, whatever `mode` does with it, so a
+  // client can log or count invalid payloads without changing what the SDK
+  // returns.
+  voxgig_value* reported = v_list();
+  voxgig_list* all = voxgig_as_list(errs);
+  for (size_t i = before; i < all->len; i++) {
+    voxgig_list_push(voxgig_as_list(reported), voxgig_retain(all->items[i]));
+  }
+
+  voxgig_value* report = cmap(5,
+      "entity", v_str(validate_entity_name(ctx)),
+      "op", v_str(validate_op_name(ctx)),
+      "direction", v_str(direction),
+      "errs", reported,
+      "data", voxgig_retain(data));
+  vf->on_invalid(report, vf->on_invalid_ud);
+}
+
+// Outbound. make_spec surfaces an out_spec_err before the request is built,
+// the same seam rbac uses one stage earlier through out_point_err.
+static void validate_pre_spec(ValidateFeature* vf, Context* ctx) {
+  if (!vf->active || !vf->request) return;
+
+  const char* opname = validate_op_name(ctx);
+  voxgig_value* opspec = getp(getp(validate_entity_spec(vf, ctx), "op"), opname);
+  if (v_is_noval(opspec) || v_is_null(opspec)) return;
+
+  voxgig_value* errs = v_list();
+  validate_check(vf, ctx, validate_payload(ctx, opname), opspec, "request", errs);
+
+  if (0 == voxgig_list_len(voxgig_as_list(errs))) return;
+  if (0 == strcmp(vf->mode, "report")) return;
+
+  char* joined = validate_join(errs);
+  size_t msgsz = strlen(joined) + strlen(opname) + 128;
+  char* msg = (char*)malloc(msgsz);
+  snprintf(msg, msgsz, "Invalid %s request for entity \"%s\": %s", opname,
+           validate_entity_name(ctx), joined);
+  free(joined);
+
+  ctx_out_set_spec_err(ctx, context_make_error(ctx, "validate_failed", msg));
+  free(msg);
+}
+
+// Inbound. PreDone rather than PreResult: the records are extracted from the
+// response body by make_result, which runs between the two, so at PreResult
+// there is nothing to check but the envelope.
+//
+// HOOK ORDER MATTERS HERE, and the default order is not the one you want.
+// PreDone hooks fire in feature ADD order, which defaults to `test` first and
+// then names sorted - and `validate` sorts last, after audit, cost, debug,
+// metrics and telemetry. Those observers therefore record the operation as a
+// success before this hook has looked at it. Activating features as an
+// ORDERED LIST fixes it.
+static void validate_pre_done(ValidateFeature* vf, Context* ctx) {
+  if (!vf->active || !vf->response) return;
+
+  voxgig_value* dataspec = getp(validate_entity_spec(vf, ctx), "data");
+  if (v_is_noval(dataspec) || v_is_null(dataspec)) return;
+
+  SdkResult* result = ctx->result;
+  if (NULL == result) return;
+
+  voxgig_value* resdata = result->resdata;
+  if (v_is_noval(resdata) || v_is_null(resdata)) return;
+
+  // A list op returns many records and a load returns one; both are checked
+  // against the same record spec, because they are the same entity.
+  //
+  // NO UNWRAP STEP, unlike the ts and go ports: make_result already stores a
+  // list entry as the item's own data (a voxgig_value cannot hold an Entity),
+  // so what arrives here is records either way.
+  voxgig_value* errs = v_list();
+  if (voxgig_is_list(resdata)) {
+    voxgig_list* l = voxgig_as_list(resdata);
+    for (size_t i = 0; i < l->len; i++) {
+      voxgig_value* record = l->items[i];
+      if (v_is_noval(record) || v_is_null(record)) continue;
+
+      // A NON-OBJECT IS A FAILURE, not something to skip. A load that
+      // answered 42 where the entity's spec wants a record must not pass this
+      // feature silently - struct rejects it with the field it could not find.
+      validate_check(vf, ctx, record, dataspec, "response", errs);
+    }
+  } else {
+    validate_check(vf, ctx, resdata, dataspec, "response", errs);
+  }
+
+  if (0 == voxgig_list_len(voxgig_as_list(errs))) return;
+  if (0 == strcmp(vf->mode, "report")) return;
+
+  char* joined = validate_join(errs);
+  size_t msgsz = strlen(joined) + 128;
+  char* msg = (char*)malloc(msgsz);
+  snprintf(msg, msgsz, "Invalid response for entity \"%s\": %s",
+           validate_entity_name(ctx), joined);
+  free(joined);
+
+  PNError* err = context_make_error(ctx, "validate_failed", msg);
+  free(msg);
+
+  // BOTH, and `ok` is the load-bearing half: done returns resdata whenever
+  // result->ok is true and never looks at err, so setting the error alone
+  // would hand the caller the very records that failed the spec.
+  result->ok = false;
+  result->err = err;
+
+  // AND THE DATA GOES. The load/update paths copy result->resdata into the
+  // entity's own state on any non-null value, BEFORE done raises - so
+  // rejecting the operation while leaving the records in place would leave
+  // the caller holding an entity populated from a payload this feature had
+  // just declared invalid.
+  result->resdata = v_undef();
+}
+
+static const char* validate_name(Feature* f) { return ((ValidateFeature*)f)->name; }
+static bool validate_active(Feature* f) { return ((ValidateFeature*)f)->active; }
+static voxgig_value* validate_add_options(Feature* f) {
+  return ((ValidateFeature*)f)->add_opts;
+}
+
+static void validate_init(Feature* f, Context* ctx, voxgig_value* options) {
+  (void)ctx;
+  ValidateFeature* vf = (ValidateFeature*)f;
+  vf->options = options;
+  vf->active = fopt_bool(options, "active", false);
+
+  // DEFAULTS ARE APPLIED HERE, not by the option spec. The model's
+  // `config.options` documents them and types them; it does not inject them,
+  // because each feature entry in the spec is optional and struct fills in
+  // nothing through an optional union. So every feature resolves its own.
+  vf->request = fopt_bool(options, "request", true);
+  vf->response = fopt_bool(options, "response", false);
+
+  // FAIL CLOSED. Only the exact string "report" selects report mode, so a
+  // typo (`mode: "thow"`) still rejects rather than silently turning
+  // enforcement off - the failure nobody would notice. The option spec
+  // rejects the typo outright; this is what happens if it ever does not.
+  free(vf->mode);
+  vf->mode = strdup(0 == strcmp(fopt_str(options, "mode", "throw"), "report")
+                        ? "report" : "throw");
+
+  // `strict` is applied ONCE, here, by rebuilding the spec tree without the
+  // `$OPEN` markers - rather than per call, which would clone a spec for
+  // every request an SDK ever makes.
+  voxgig_value* entityspec = shared_entityspec();
+  vf->spec = fopt_bool(options, "strict", false) ? validate_close(entityspec)
+                                                 : entityspec;
+}
+
+static void validate_hook(Feature* f, const char* name, Context* ctx) {
+  ValidateFeature* vf = (ValidateFeature*)f;
+  if (0 == strcmp(name, "PreSpec")) {
+    validate_pre_spec(vf, ctx);
+  } else if (0 == strcmp(name, "PreDone")) {
+    validate_pre_done(vf, ctx);
+  }
+}
+
+static const FeatureVT VALIDATE_VT = {
+  validate_name, validate_active, validate_add_options, validate_init,
+  validate_hook, NULL,
+};
+
+Feature* feature_validate_new(void) {
+  ValidateFeature* vf = (ValidateFeature*)calloc(1, sizeof(ValidateFeature));
+  vf->base.vt = &VALIDATE_VT;
+  vf->name = strdup("validate");
+  vf->active = true; // matches rust new() (overridden by init from options)
+  vf->add_opts = NULL;
+  vf->options = voxgig_new_undef();
+  vf->spec = voxgig_new_map();
+  vf->request = true;
+  vf->response = false;
+  vf->mode = strdup("throw");
+  vf->on_invalid = NULL;
+  vf->on_invalid_ud = NULL;
+  return (Feature*)vf;
+}
+
+// The `onInvalid` callback, set after construction (feature/validate.h).
+void feature_validate_on_invalid(Feature* f, ValidateReportFn fn, void* ud) {
+  ValidateFeature* vf = (ValidateFeature*)f;
+  vf->on_invalid = fn;
+  vf->on_invalid_ud = ud;
+}

package/project/.sdk/tm/c/feature/validate.h

@@ -0,0 +1,29 @@
+// The validate feature's public surface (feature/validate.c). A header of its
+// own, like feature/secrets.h and for the same reason: a caller needs more
+// than the constructor sdk.h's list gives every bundled feature. Here it is
+// the `onInvalid` callback, which the model types a `$FUNCTION` and a C
+// option value cannot hold - so it is set on the feature after construction,
+// the way the retry port takes its injectable sleep.
+//
+// The feature is GATED (model/feature/validate.aon `needs: { schema: true }`
+// and model/target/c.aon `provides`), so its constructor is NOT in sdk.h's
+// bundled list: core/config.c emits the prototype for a project that selected
+// it, and this header repeats it for a caller that includes only this file.
+
+#ifndef PROJECTNAME_FEATURE_VALIDATE_H
+#define PROJECTNAME_FEATURE_VALIDATE_H
+
+#include "sdk.h"
+
+Feature* feature_validate_new(void);
+
+// Called with a report map for every failure, whatever `mode` does with it,
+// so a client can log or count invalid payloads without changing what the SDK
+// returns. The report carries `entity`, `op`, `direction` ("request" or
+// "response"), `errs` (a list of messages) and `data` (what was checked); it
+// is owned by the SDK and must not be released by the callback.
+typedef void (*ValidateReportFn)(voxgig_value* report, void* ud);
+
+void feature_validate_on_invalid(Feature* f, ValidateReportFn fn, void* ud);
+
+#endif // PROJECTNAME_FEATURE_VALIDATE_H

package/project/.sdk/tm/c/tests/vendor/omni/json.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260908-1556-0 (c/src/json.c)
-// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/omni sdk-20260917-1242-0 (c/src/json.c)
+// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The omni JSON value model, pool allocator, parser and printer.
  *

package/project/.sdk/tm/c/tests/vendor/omni/omni.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260908-1556-0 (c/src/omni.h)
-// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/omni sdk-20260917-1242-0 (c/src/omni.h)
+// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Omni: the shared multi-language test runner (C port).
  *

package/project/.sdk/tm/c/tests/vendor/omni/runner.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260908-1556-0 (c/src/runner.c)
-// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/omni sdk-20260917-1242-0 (c/src/runner.c)
+// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Omni: the shared multi-language test runner (C port).
  *

package/project/.sdk/tm/c/tests/vendor/omni/util.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260908-1556-0 (c/src/util.c)
-// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/omni sdk-20260917-1242-0 (c/src/util.c)
+// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Omni internal JSON utilities: clone, path lookup, deep equality, and
  * the regex bridge.

package/project/.sdk/tm/c/utility/make_options.c

@@ -71,30 +71,18 @@ voxgig_value* make_options_util(Context* ctx) {
   voxgig_value* cfgopts = to_map(getp(config, "options"));
   if (!voxgig_is_map(cfgopts)) cfgopts = voxgig_new_map();
 
-  // Build the option spec (validation shape). Marker keys use backticks.
-  voxgig_value* optspec = cmap(13,
-    "apikey", v_str(""),
-    "base", v_str("http://localhost:8000"),
-    "prefix", v_str(""),
-    "suffix", v_str(""),
-    "auth", cmap(1, "prefix", v_str("")),
-    "headers", cmap(1, "`$CHILD`", v_str("`$STRING`")),
-    "allow", cmap(2,
-      "method", v_str("GET,PUT,POST,PATCH,DELETE,OPTIONS"),
-      "op", v_str("create,update,load,list,remove,command,direct,graphql")),
-    "entity", cmap(1, "`$CHILD`", cmap(3,
-      "`$OPEN`", v_bool(true),
-      "active", v_bool(false),
-      "alias", v_map())),
-    "feature", cmap(1, "`$CHILD`", cmap(2,
-      "`$OPEN`", v_bool(true),
-      "active", v_bool(false))),
-    "utility", v_map(),
-    "system", v_map(),
-    "test", cmap(2,
-      "active", v_bool(false),
-      "entity", cmap(1, "`$OPEN`", v_bool(true))),
-    "clean", cmap(1, "keys", v_str("key,token,id")));
+  /* THE OPTION SPEC IS GENERATED, NOT WRITTEN HERE.
+   *
+   * Built from the model: `main.kit.optspec` for the standard options, plus
+   * one entry per feature this target carries, from that feature's own
+   * `config.options` / `config.optspec`. Editing this file to add an option
+   * would put it back where it was - one of twenty hand-maintained copies of
+   * a schema nothing cross-checked - so add it to the model instead and every
+   * ported target validates it.
+   *
+   * Parsed once and shared: make_options validates AGAINST the spec and
+   * writes into the options, never into the spec. */
+  voxgig_value* optspec = shared_optspec();
 
   // Preserve system.fetch before merge/validate (validation strips it).
   voxgig_value* sys_fetch = getpath2(opts, "system", "fetch");

package/project/.sdk/tm/c/utility/make_spec.c

@@ -8,6 +8,14 @@
 Spec* make_spec_util(Context* ctx, PNError** err) {
   *err = NULL;
 
+  /* A PreSpec feature hook (e.g. validate) may short-circuit by storing an
+   * error; surface it before the request is built, the same way make_point
+   * surfaces out_point_err. */
+  if (ctx->out_spec_err) {
+    *err = ctx->out_spec_err;
+    return NULL;
+  }
+
   if (ctx->out_spec) {
     ctx->spec = ctx->out_spec;
     return ctx->out_spec;

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/capability.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/capability.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/capability.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.capability
   "Capabilities (section 11.1).

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/catalog.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/catalog.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/catalog.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.catalog
   "The definition catalog (section 10.1).

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/config.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/config.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/config.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.config
   "The declarative document (section 9): normalization, and the ten-level

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/depend.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/depend.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/depend.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.depend
   "Dependency cardinality, policy, and the restart graph (section 11.3).

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/env.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/env.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/env.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.env
   "Environment overrides (section 9.5) - level 7 of the ladder.

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/export.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/export.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/export.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.export
   "Exports (section 11).
@@ -20,7 +20,7 @@
   "`exported` is a list of `{:ref :key :value}` - an internal shape, never
   a corpus value, so it uses keyword keys where the data does not."
   [spec exported]
-  (let [cut (.indexOf ^String spec "/")]
+  (let [cut (.lastIndexOf ^String spec "/")]
     (when (neg? cut)
       (t/fail "plugin_export_ambiguous" (str "export spec needs a key: " spec)
               {"spec" spec}))

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/graph.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/graph.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/graph.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.graph
   "Whole-graph resolution (section 11.4) - a phase, not a discovery.

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/host.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/host.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/host.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.host
   "The host: the lifecycle state machine (section 5), extension points
@@ -273,6 +273,21 @@
   (entry-update! (.host i) (.ref i) #(assoc-in % ["exports" k] v))
   nil)
 
+(defn inst-capability
+  "WHICH provider this instance is bound to for `nm` (section 11.1), as a
+  ref, or nil when nothing provides it.
+
+  The host's own `capability` answers with the live providers RANKED, not
+  with the one THIS instance took; section 11.4's reluctant rebinding
+  makes those differ. A REF, not the instance. The selection is
+  REMEMBERED, because this is the instance asking."
+  [^Instance i nm]
+  (let [h (.host i)
+        ref (.ref i)
+        req (first (filter #(= nm (t/get % "name"))
+                           (dep/requirements (field h ref "options"))))]
+    (when (some? req) (chosen h ref req true))))
+
 (defn provides!
   "What this instance can do for others (section 11.1)."
   [^Instance i prov]

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/json.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/json.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/json.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.json
   "The JSON parser, and the only one this port has.

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/order.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/order.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/order.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.order
   "Ordering (section 7) - one rule, one place.

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/point.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/point.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/point.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.point
   "Extension points (section 6). Three kinds, chosen because they are what

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/ref.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/ref.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/ref.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.ref
   "Identity: name+tag, written `name$tag` (section 4).

package/project/.sdk/tm/clojure/feature/secrets/voxgig/plugin/resolve.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/plugin sdk-20260908-1556-0 (clojure/src/voxgig/plugin/resolve.clj)
-;; Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+;; VENDORED: @voxgig/plugin sdk-20260917-1242-0 (clojure/src/voxgig/plugin/resolve.clj)
+;; Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 (ns voxgig.plugin.resolve
   "Dynamic resolution (section 10.2) - name to candidate module ids.