@voxgig/sdkgen 4.20.0 → 4.21.0

package/project/.sdk/tm/csharp/feature/secrets/plugins/OnePassword.cs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/plugins/OnePassword.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/plugins/OnePassword.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // 1Password Connect, as a voxgig/plugin definition.
 //

package/project/.sdk/tm/csharp/feature/secrets/plugins/SecretSpec.cs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/plugins/SecretSpec.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/plugins/SecretSpec.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // SecretSpec, as a voxgig/plugin definition.
 //

package/project/.sdk/tm/csharp/feature/secrets/plugins/Sigv4.cs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/plugins/Sigv4.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/plugins/Sigv4.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // AWS Signature Version 4, hand-rolled.
 //

package/project/.sdk/tm/csharp/feature/secrets/sekreto/Json.cs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/src/Json.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/src/Json.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Just enough JSON for sekreto.
 //

package/project/.sdk/tm/csharp/feature/secrets/sekreto/Providers.cs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/src/Providers.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/src/Providers.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // The four BUILT-IN provider kinds, and what a provider is.
 //
@@ -498,6 +498,7 @@ namespace Voxgig.Sekreto
         {
             "hashicorp", "boru", "awssecrets", "awsparams", "gcpsecrets",
             "azuresecrets", "onepassword", "doppler", "infisical", "secretspec",
+            "minivault",
         };
     }
 }

package/project/.sdk/tm/csharp/feature/secrets/sekreto/Sekreto.cs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/src/Sekreto.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/src/Sekreto.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // sekreto: one interface for secrets, wherever they live.
 //

package/project/.sdk/tm/csharp/test/vendor/omni/Runner.cs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260908-1556-0 (csharp/src/Runner.cs)
-// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/omni sdk-20260917-1242-0 (csharp/src/Runner.cs)
+// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni: the shared multi-language test runner (C# port).
 //

package/project/.sdk/tm/csharp/test/vendor/omni/Util.cs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260908-1556-0 (csharp/src/Util.cs)
-// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/omni sdk-20260917-1242-0 (csharp/src/Util.cs)
+// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni internal JSON utilities.
 //

package/project/.sdk/tm/csharp/utility/MakeOptions.cs

@@ -164,91 +164,18 @@ public static partial class SdkUtility
             co is Dictionary<string, object?> cm
             ? cm : new Dictionary<string, object?>();
 
-        var optspec = new Dictionary<string, object?>
-        {
-            ["apikey"] = "",
-            ["secret"] = "",
-            ["base"] = "http://localhost:8000",
-            ["prefix"] = "",
-            ["suffix"] = "",
-            // `basic` and `secret`: HTTP Basic Auth needs a second credential
-            // and a flag to say the pair is Basic rather than a single bearer
-            // token.
-            //
-            // `in` and `name`: WHERE the credential goes and UNDER WHAT NAME.
-            // apidef resolves both from the spec's securityScheme into
-            // main.kit.info.security, and the generated config carries them
-            // whenever they differ from header/Authorization. This map is
-            // CLOSED - validate rejects any key it does not declare - so
-            // without these two an apiKey-in-query SDK fails to construct on
-            // its own config with "Unexpected keys at field auth: in, name".
-            // '' means "take what the spec said".
-            ["auth"] = new Dictionary<string, object?>
-            {
-                ["prefix"] = "",
-                ["basic"] = false,
-                ["in"] = "",
-                ["name"] = "",
-            },
-            ["headers"] = new Dictionary<string, object?>
-            {
-                ["`$CHILD`"] = "`$STRING`",
-            },
-            // OpenAPI server-variable defaults, carried by the generated
-            // config whenever the spec's server URL is templated. Accepted
-            // here so validation does not reject the SDK's own config; the
-            // {name} substitution into base is a separate concern.
-            ["server"] = new Dictionary<string, object?>
-            {
-                ["`$CHILD`"] = "",
-            },
-            ["allow"] = new Dictionary<string, object?>
-            {
-                ["method"] = "GET,PUT,POST,PATCH,DELETE,OPTIONS",
-                ["op"] = "create,update,load,list,remove,command,direct,graphql",
-            },
-            ["entity"] = new Dictionary<string, object?>
-            {
-                ["`$CHILD`"] = new Dictionary<string, object?>
-                {
-                    ["`$OPEN`"] = true,
-                    ["active"] = false,
-                    ["alias"] = new Dictionary<string, object?>(),
-                },
-            },
-            ["feature"] = new Dictionary<string, object?>
-            {
-                ["`$CHILD`"] = new Dictionary<string, object?>
-                {
-                    ["`$OPEN`"] = true,
-                    ["active"] = false,
-                },
-            },
-            ["utility"] = new Dictionary<string, object?>(),
-            // Feature INSTANCES supplied at construction (the `extend` seam
-            // the client constructor reads after the config-driven features):
-            // class instances, not data, so `$ANY` accepts them verbatim.
-            // Without this entry the seam is DEAD - validate REJECTS the
-            // unknown key ("Unexpected keys at field <root>: extend"), so a
-            // caller cannot hand in a feature the model did not activate,
-            // although the README documents the option. Ported from
-            // MakeOptionsUtility.ts / make_options.go / MakeOptions.java,
-            // which all carry it.
-            ["extend"] = "`$ANY`",
-            ["system"] = new Dictionary<string, object?>(),
-            ["test"] = new Dictionary<string, object?>
-            {
-                ["active"] = false,
-                ["entity"] = new Dictionary<string, object?>
-                {
-                    ["`$OPEN`"] = true,
-                },
-            },
-            ["clean"] = new Dictionary<string, object?>
-            {
-                ["keys"] = "key,token,id",
-            },
-        };
+        // THE OPTION SPEC IS GENERATED, NOT WRITTEN HERE.
+        //
+        // Built from the model: `main.kit.optspec` for the standard options,
+        // plus one entry per feature this target carries, from that feature's
+        // own `config.options` / `config.optspec`. Editing this file to add an
+        // option would put it back where it was - one of twenty
+        // hand-maintained copies of a schema nothing cross-checked - so add it
+        // to the model instead and every ported target validates it.
+        //
+        // Shared, not copied: MakeOptions validates AGAINST the spec and
+        // writes into the options, never into the spec.
+        var optspec = SdkSchema.Optspec;
 
         // Preserve system.fetch across merge/validate (delegates survive
         // Clone, but validation may reshape the system block).

package/project/.sdk/tm/csharp/utility/struct/Struct.cs

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/struct 0.1.1 (csharp/Struct.cs)
-// Source: https://github.com/voxgig/struct @ abd93227e3295151f8dcd18597c3f3f2577af8b7  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/struct @ 3110e839a3f35b2fbdb047bf0c24f29d144027ea  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025-2026 Voxgig Ltd. MIT LICENSE. */
 
@@ -2952,14 +2952,35 @@ namespace Voxgig.Struct
                 return null;
             }
 
+            // PATCH (optspec port, pending upstream fix): re-validate NONE, not
+            // null, when the data has no value here.
+            //
+            // ts hands validate_ONE's nested call `inj.dparent`, which is
+            // `undefined` for a key the data does not have — so `$NIL` matches
+            // and the alternative succeeds. Here DParent is descended with
+            // GetProp, which answers null for a missing key, and Typify tells
+            // null (T_null) from NONE (T_noval) exactly as ts does: the nested
+            // `$NIL` therefore saw a null and REJECTED it. Every optional entry
+            // the caller omitted — `['`$ONE`', <spec>, '`$NIL`']`, which is how
+            // the generated option spec writes every feature — failed with
+            // "to be one of …, nil, but found no value", and a default client
+            // could not be constructed at all.
+            //
+            // The cost is that a STORED null under a $ONE now reads as absent,
+            // where ts would reject it. GetProp has already conflated the two
+            // by the time this runs, so that is not recoverable here; it is the
+            // same compromise the rb port's patch documents, and the permissive
+            // direction of it.
+            object? dval = inj.DParent ?? NONE;
+
             foreach (object? tval in tvals)
             {
                 var terrs = new List<object?>();
                 var vstore = (Dictionary<string, object?>)Merge(
                     new List<object?> { new Dictionary<string, object?>(), store }, 1)!;
-                vstore[S_DTOP] = inj.DParent;
+                vstore[S_DTOP] = dval;
 
-                object? vcurrent = Validate(inj.DParent, tval, new InjectState
+                object? vcurrent = Validate(dval, tval, new InjectState
                 {
                     Extra = vstore,
                     Errs = terrs,

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/capability.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/capability.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/capability.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Capability do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/catalog.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/catalog.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/catalog.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Catalog do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/config.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/config.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/config.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Config do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/depend.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/depend.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/depend.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Depend do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/env.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/env.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/env.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Env do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/error.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/error.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/error.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Error do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/export.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/export.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/export.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Export do
   @moduledoc """
@@ -23,8 +23,11 @@ defmodule Voxgig.Plugin.Export do
   never a corpus value, so it uses atom keys where the data does not.
   """
   def resolve_export(spec, exported) do
-    case :binary.match(spec, "/") do
-      :nomatch ->
+    # THE LAST `/`, not the first: a NAME may hold slashes (§4), a key may
+    # not. `:binary.matches` returns every hit, so the last one is the
+    # split; `:binary.match` returns only the first.
+    case List.last(:binary.matches(spec, "/")) do
+      nil ->
         Types.fail("plugin_export_ambiguous", "export spec needs a key: #{spec}",
                    %{"spec" => spec})
 

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/graph.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/graph.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/graph.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Graph do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/host.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/host.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/host.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Host do
   @moduledoc """
@@ -641,6 +641,17 @@ defmodule Voxgig.Plugin.Host do
   #
   # `remember` is false for the questions asked ABOUT an instance rather
   # than BY it: introspection must not create a binding.
+  @doc false
+  # The instance api's way onto `chosen`, which is private.
+  def instcapability(host, ref, name) do
+    Depend.requirements(field(host, ref, "options"))
+    |> Enum.find(fn req -> Types.get(req, "name") == name end)
+    |> case do
+      nil -> nil
+      req -> chosen(host, ref, req, true)
+    end
+  end
+
   defp chosen(host, ref, req, remember) do
     cands = providersof(host, req)
     name = Types.get(req, "name")

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/inst.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/inst.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/inst.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Inst do
   @moduledoc """
@@ -105,6 +105,19 @@ defmodule Voxgig.Plugin.Inst do
     Host.entry_update(host, ref, &Map.put(&1, "exports", Map.put(&1["exports"], key, value)))
   end
 
+  @doc """
+  WHICH provider this instance is bound to for `name` (section 11.1), as
+  a ref, or nil when nothing provides it.
+
+  The host's own `capability` answers with the live providers RANKED, not
+  with the one THIS instance took; section 11.4's reluctant rebinding
+  makes those differ. A REF, not the instance. The selection is
+  REMEMBERED, because this is the instance asking.
+  """
+  def capability(%__MODULE__{host: host, ref: ref}, name) do
+    Host.instcapability(host, ref, name)
+  end
+
   @doc "What this instance can do for others (section 11.1)."
   def provides(%__MODULE__{host: host, ref: ref}, prov) do
     Host.entry_update(host, ref, &Map.put(&1, "provides", &1["provides"] ++ [prov]))

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/json.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/json.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/json.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Json do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/order.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/order.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/order.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Order do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/point.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/point.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/point.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Point do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/ref.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/ref.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/ref.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Ref do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/resolve.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/resolve.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/resolve.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Resolve do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/types.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/types.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/types.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Types do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/version.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/version.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/version.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Version do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/voxgig_plugin.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/json.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/src/json.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/src/json.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Minimal JSON support for sekreto.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/aws.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/aws.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/aws.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # AWS Secrets Manager and SSM Parameter Store, as sekreto plugins.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/azuresecrets.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/azuresecrets.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/azuresecrets.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Azure Key Vault, as a sekreto plugin.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/boru.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/boru.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/boru.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # A boru vault, as a sekreto plugin.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/doppler.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/doppler.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/doppler.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Doppler, as a sekreto plugin.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/gcpsecrets.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/gcpsecrets.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/gcpsecrets.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # GCP Secret Manager, as a sekreto plugin.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/hashicorp.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/hashicorp.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/hashicorp.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # HashiCorp Vault, as a sekreto plugin.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/http.ex

@@ -1,9 +1,9 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/http.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/http.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # One HTTP round-trip, framed in-tree over OTP's own sockets - and
 # OUTSIDE THE CORE, because a socket is what makes a kind a plugin. Seven
-# of the ten plugin kinds reach a vault over HTTPS; a chain of the four
+# of the eleven plugin kinds reach a vault over HTTPS; a chain of the four
 # built-ins never loads this module at all, and the BEAM never loads a
 # module nothing calls.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/httpjson.ex

@@ -1,10 +1,10 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/httpjson.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/httpjson.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The round-trip every remote store shares - and OUTSIDE THE CORE with the
 # client under it.
 #
-# Eight of the ten plugin kinds read a vault over HTTPS, and all eight
+# Eight of the eleven plugin kinds read a vault over HTTPS, and all eight
 # want the same three things: one JSON round-trip whose failures are
 # never a miss, a login token renewed shortly before its lease runs out,
 # and a handful of conversions between a JSON value and the string a

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/infisical.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/infisical.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/infisical.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Infisical, as a sekreto plugin.
 #