@voxgig/sdkgen 4.20.0 → 4.21.0

package/project/.sdk/src/cmp/scala/Schema_scala.ts

@@ -0,0 +1,108 @@
+import {
+  Content,
+  File,
+  cmp,
+  entitySpecMap,
+  optionSpec,
+} from '@voxgig/sdkgen'
+
+
+import {
+  Model,
+} from '@voxgig/apidef'
+
+
+import {
+  scalaPackage,
+  jsonAppendLines,
+} from './utility_scala'
+
+
+// THE GENERATED SCHEMA MODULE: the model's schemas, as data the SDK can run.
+//
+// The scala peer of src/cmp/ts/Schema_ts.ts. Same two members, same source:
+// optspec from `main.kit.optspec` plus each feature's own `config.options`,
+// entityspec from the entity field sentinels — both built by the shared
+// helpers, so what scala validates against and what ts validates against
+// cannot drift.
+//
+// EMBEDDED AS JSON, PARSED AT LOAD, where ts emits an object literal: JSON is
+// a subset of TypeScript's own literal syntax and is not a subset of scala's.
+// Chunked StringBuilder appends, exactly as Config.scala carries its config,
+// keep every string constant far below the JVM's 64KB limit no matter how
+// many features or entities the model grows.
+//
+// The round-trip is exact because the spec holds only strings and booleans:
+// pinned by "strings and booleans only, so the JSON round-trip is lossless"
+// in ts/test/optspec.test.ts. That is not incidental — Json.parse decodes a
+// JSON number to one scala type and struct reads a spec BY EXAMPLE, so one
+// number in here would mean something different in scala than in ts.
+const Schema = cmp(async function Schema(props: any) {
+  const ctx$ = props.ctx$
+  const target = props.target
+
+  const model: Model = ctx$.model
+  const scalapackage = scalaPackage(model)
+
+  const optspec = optionSpec(model, target.name)
+  const entityspec = entitySpecMap(model, target.name) || {}
+
+  // Beside Config.scala, and for the same reason: core owns the generated
+  // data, so nothing in utility or feature has to reach up for it.
+  File({ name: 'Schema.' + target.ext }, () => {
+
+    Content(`package ${scalapackage}.core
+
+import java.util.{Map => JMap}
+
+import ${scalapackage}.utility.Json
+
+// ${model.const.Name} ${target.Name} SDK: generated schemas. Do not edit.
+//
+// Generated from the model: \`main.kit.optspec\` and each feature's
+// \`config.options\` for the option spec; entity \`fields[].type\` for the
+// entity specs.
+object Schema {
+
+  // Parsed ONCE, on first use. The spec is read on every client construction
+  // and never mutated, so a per-call parse would be pure waste - and a shared
+  // map is safe for the same reason the spec is a constant: makeOptions
+  // validates AGAINST it and writes into the options, never into the spec.
+  //
+  // A lazy val is initialised once, on first use, under a lock, as
+  // Config.sharedConfig is, so concurrent first calls parse it exactly once.
+
+  // The option spec makeOptions validates client options against.
+  lazy val optspec: JMap[String, Object] =
+    Json.parse(optspecJson()).asInstanceOf[JMap[String, Object]]
+
+  // Per-entity data and request specs, keyed by entity name.
+  lazy val entityspec: JMap[String, Object] =
+    Json.parse(entityspecJson()).asInstanceOf[JMap[String, Object]]
+
+  private def optspecJson(): String = {
+    val b = new StringBuilder()
+`)
+
+    Content(jsonAppendLines(optspec, 'b'))
+
+    Content(`    b.toString
+  }
+
+  private def entityspecJson(): String = {
+    val b = new StringBuilder()
+`)
+
+    Content(jsonAppendLines(entityspec, 'b'))
+
+    Content(`    b.toString
+  }
+}
+`)
+  })
+})
+
+
+export {
+  Schema
+}

package/project/.sdk/src/cmp/swift/Main_swift.ts

@@ -23,6 +23,7 @@ import {
 
 import { Package } from './Package_swift'
 import { Config } from './Config_swift'
+import { Schema } from './Schema_swift'
 import { PrepareAuth } from './PrepareAuth_swift'
 import { Gitignore } from './Gitignore_swift'
 import { MainEntity } from './MainEntity_swift'
@@ -161,6 +162,8 @@ const Main = cmp(async function Main(props: any) {
 
         Config({ target })
 
+        Schema({ target })
+
         SdkError({ target })
 
         EntityBase({ target })

package/project/.sdk/src/cmp/swift/Schema_swift.ts

@@ -0,0 +1,92 @@
+import {
+  Content,
+  File,
+  cmp,
+  entitySpecMap,
+  optionSpec,
+} from '@voxgig/sdkgen'
+
+
+import {
+  Model,
+} from '@voxgig/apidef'
+
+
+// THE GENERATED SCHEMA MODULE: the model's schemas, as data the SDK can run.
+//
+// The swift peer of src/cmp/ts/Schema_ts.ts. Same two members, same source:
+// optspec from `main.kit.optspec` plus each feature's own `config.options`,
+// entityspec from the entity field sentinels — both built by the shared
+// helpers, so what swift validates against and what ts validates against
+// cannot drift.
+//
+// EMBEDDED AS JSON, PARSED AT LOAD, where ts emits an object literal: JSON is
+// a subset of TypeScript's own literal syntax and is not a subset of swift's.
+// A raw string literal, exactly as Config.swift carries its config — raw
+// (`#"""`) so the spec's own backslashes and quotes need no re-escaping.
+//
+// The round-trip is exact because the spec holds only strings and booleans:
+// pinned by "strings and booleans only, so the JSON round-trip is lossless"
+// in ts/test/optspec.test.ts. That is not incidental — JSON.parse decodes a
+// JSON number to one Value case and struct reads a spec BY EXAMPLE, so one
+// number in here would mean something different in swift than in ts.
+const Schema = cmp(async function Schema(props: any) {
+  const ctx$ = props.ctx$
+  const target = props.target
+
+  const model: Model = ctx$.model
+
+  const optspec = optionSpec(model, target.name)
+  const entityspec = entitySpecMap(model, target.name) || {}
+
+  const optspecJson = JSON.stringify(optspec, null, 2)
+  const entityspecJson = JSON.stringify(entityspec, null, 2)
+
+  // Beside Config.swift, and for the same reason: core owns the generated
+  // data, so nothing in the copied runtime has to reach up for it.
+  File({ name: 'Schema.' + target.ext }, () => {
+
+    Content(`// ${model.const.Name} SDK - generated schemas. GENERATED from the API model -
+// do not edit by hand.
+//
+// Built from the model: \`main.kit.optspec\` and each feature's
+// \`config.options\` for optspec; entity \`fields[].type\` for entityspec.
+
+import Foundation
+
+public enum SdkSchema {
+
+  // Parsed ONCE, on first use. The spec is read on every client construction
+  // and never mutated, so a per-call parse would be pure waste - and a shared
+  // VMap is safe for the same reason the spec is a constant: makeOptions
+  // validates AGAINST it and writes into the options, never into the spec.
+  //
+  // A static let in an enum is lazy and initialised exactly once, thread-safe
+  // via swift_once, as SdkConfig.sharedConfigVal is.
+  //
+  // The results are SHARED: treat them as read-only.
+
+  /// The option spec makeOptions validates client options against.
+  public static let optspec: Value = {
+    let json = #"""
+${optspecJson}
+"""#
+    return (try? JSON.parse(json)) ?? .map(VMap())
+  }()
+
+  /// Per-entity data and request specs, keyed by entity name.
+  public static let entityspec: Value = {
+    let json = #"""
+${entityspecJson}
+"""#
+    return (try? JSON.parse(json)) ?? .map(VMap())
+  }()
+}
+`)
+  })
+})
+
+
+export {
+  Schema
+}

package/project/.sdk/src/cmp/zig/Main_zig.ts

@@ -21,6 +21,7 @@ import {
 
 
 import { Config, FeaturePlugins, BUILTIN_FEATURES } from './Config_zig'
+import { Schema } from './Schema_zig'
 import { Gitignore } from './Gitignore_zig'
 import { MainEntity } from './MainEntity_zig'
 import { Package } from './Package_zig'
@@ -294,6 +295,8 @@ const Main = cmp(async function Main(props: any) {
     })
 
     Config({ target })
+
+    Schema({ target })
   })
 
 })

package/project/.sdk/src/cmp/zig/Schema_zig.ts

@@ -0,0 +1,114 @@
+import {
+  Content,
+  File,
+  cmp,
+  entitySpecMap,
+  optionSpec,
+} from '@voxgig/sdkgen'
+
+
+import {
+  Model,
+} from '@voxgig/apidef'
+
+
+// THE GENERATED SCHEMA MODULE: the model's schemas, as data the SDK can run.
+//
+// The zig peer of src/cmp/ts/Schema_ts.ts. Same two members, same source:
+// optspec from `main.kit.optspec` plus each feature's own `config.options`,
+// entityspec from the entity field sentinels — both built by the shared
+// helpers, so what zig validates against and what ts validates against cannot
+// drift.
+//
+// EMBEDDED AS JSON, PARSED AT LOAD, where ts emits an object literal: JSON is
+// a subset of TypeScript's own literal syntax and is not a subset of zig's.
+// A string constant, exactly as config.zig carries its data rep above the
+// size threshold, and for the same reason — a nested `h.jo(...)` literal is
+// one expression zig's comptime evaluator walks in full at every build. The
+// spec has no threshold of its own because it is bounded by the option list
+// and the feature set rather than by the API.
+//
+// The escaping is JSON.stringify's, which is valid Zig: it escapes every
+// backslash, so the JSON's own `\uXXXX` reaches the file as `\\uXXXX` and no
+// Zig escape sequence is ever formed from it.
+//
+// The round-trip is exact because the spec holds only strings and booleans:
+// pinned by "strings and booleans only, so the JSON round-trip is lossless"
+// in ts/test/optspec.test.ts.
+const Schema = cmp(async function Schema(props: any) {
+  const ctx$ = props.ctx$
+  const target = props.target
+
+  const model: Model = ctx$.model
+
+  const optspec = optionSpec(model, target.name)
+  const entityspec = entitySpecMap(model, target.name) || {}
+
+  // Beside config.zig, in core, and for the same reason: core owns the
+  // generated data, so nothing in utility or feature has to reach up for it.
+  File({ name: 'schema.' + target.ext }, () => {
+
+    Content(`// ${model.const.Name} SDK: generated schemas. Do not edit.
+//
+// Built from the model: \`main.kit.optspec\` and each feature's
+// \`config.options\` for the option spec; entity \`fields[].type\` for the
+// entity specs.
+
+const h = @import("helpers.zig");
+const jsonparse = @import("../utility/jsonparse.zig");
+const Value = h.Value;
+
+const OPTSPEC_DATA: []const u8 = ${JSON.stringify(JSON.stringify(optspec))};
+
+const ENTITYSPEC_DATA: []const u8 = ${JSON.stringify(JSON.stringify(entityspec))};
+
+/// The option spec make_options validates client options against.
+///
+/// Unreachable on error: the constant is generated by a JSON serialiser and
+/// never edited by hand. Panicking beats returning an empty spec, which would
+/// validate everything and fail far from the cause.
+pub fn make_optspec() Value {
+    return jsonparse.json_parse(OPTSPEC_DATA) catch
+        @panic("${model.const.Name}: embedded option spec is not valid JSON");
+}
+
+/// Per-entity data and request specs, keyed by entity name.
+pub fn make_entityspec() Value {
+    return jsonparse.json_parse(ENTITYSPEC_DATA) catch
+        @panic("${model.const.Name}: embedded entity spec is not valid JSON");
+}
+
+// SHARED SPECS, the shape config.shared_config uses and for the same reasons:
+// the spec is read on every client construction and never mutated, so a
+// per-call parse would be pure waste. Value nodes are arena-allocated and
+// reference-stable, so the shared value is genuinely one structure.
+//
+// The returned Values SHARE their nodes: treat them as read-only.
+// make_options validates AGAINST the spec and writes into the options, never
+// into the spec.
+var shared_optspec_val: ?Value = null;
+var shared_entityspec_val: ?Value = null;
+
+/// The process-wide option spec, built once on first use.
+pub fn shared_optspec() Value {
+    if (shared_optspec_val) |s| return s;
+    const s = make_optspec();
+    shared_optspec_val = s;
+    return s;
+}
+
+/// The process-wide entity specs, built once on first use.
+pub fn shared_entityspec() Value {
+    if (shared_entityspec_val) |s| return s;
+    const s = make_entityspec();
+    shared_entityspec_val = s;
+    return s;
+}
+`)
+  })
+})
+
+
+export {
+  Schema
+}

package/project/.sdk/tm/c/core/context.c

@@ -32,6 +32,9 @@ void ctx_out_set_point_err(Context* ctx, PNError* e) {
   ctx->out_point_err = e;
   ctx->out_point_val = NULL;
 }
+void ctx_out_set_spec_err(Context* ctx, PNError* e) {
+  ctx->out_spec_err = e;
+}
 voxgig_value* ctx_out_extra_get(Context* ctx, const char* key) {
   return getp(ctx->out_extra, key);
 }

package/project/.sdk/tm/c/core/sdk.h

@@ -375,6 +375,10 @@ struct Context {
   voxgig_value* out_point_val;
   PNError* out_point_err;
   Spec* out_spec;
+  // A PreSpec hook (e.g. validate) rejecting the operation. `out_spec` above
+  // is a Spec, so it cannot carry the error the way go's `out["spec"]` map
+  // slot does; this is the same seam as out_point_err, one stage later.
+  PNError* out_spec_err;
   Response* out_request;
   Response* out_response;
   SdkResult* out_result;
@@ -407,6 +411,7 @@ Utility* context_util(Context* ctx);
 // ctx.out helpers.
 void ctx_out_set_point_val(Context* ctx, voxgig_value* v);
 void ctx_out_set_point_err(Context* ctx, PNError* e);
+void ctx_out_set_spec_err(Context* ctx, PNError* e);
 voxgig_value* ctx_out_extra_get(Context* ctx, const char* key);
 void ctx_out_extra_set(Context* ctx, const char* key, voxgig_value* v);
 
@@ -446,6 +451,15 @@ voxgig_value* sdk_graphql(ProjectNameSDK* sdk, const char* query,
 // Generated config (core/config.c).
 voxgig_value* make_config(void);
 voxgig_value* shared_config(void);
+
+// Generated schemas (core/schema.c): the model's option spec, which
+// make_options validates client options against, and the per-entity field
+// specs. The shared_* accessors parse once and hand back a value that is
+// READ-ONLY to the caller, exactly as shared_config does.
+voxgig_value* make_optspec(void);
+voxgig_value* shared_optspec(void);
+voxgig_value* make_entityspec(void);
+voxgig_value* shared_entityspec(void);
 Feature* make_feature(const char* name);
 
 // The plugin DEFINITIONS the model selected for one feature's chain - the c

package/project/.sdk/tm/c/feature/secrets/plugin/capability.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/capability.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/capability.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Capabilities (§11.1). */
 

package/project/.sdk/tm/c/feature/secrets/plugin/capability.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/capability.h)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/capability.h)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Capabilities (§11.1).
  *

package/project/.sdk/tm/c/feature/secrets/plugin/catalog.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/catalog.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/catalog.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The definition catalog (§10.1). */
 

package/project/.sdk/tm/c/feature/secrets/plugin/catalog.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/catalog.h)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/catalog.h)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The definition catalog (§10.1).
  *

package/project/.sdk/tm/c/feature/secrets/plugin/config.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/config.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/config.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The declarative document (§9): normalization, and the ten-level
  * precedence ladder.

package/project/.sdk/tm/c/feature/secrets/plugin/config.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/config.h)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/config.h)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The declarative document (§9): normalization, and the ten-level
  * precedence ladder. See config.c for why the two functions are split. */

package/project/.sdk/tm/c/feature/secrets/plugin/depend.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/depend.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/depend.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Dependency cardinality, policy, and the restart graph (§11.3).
  *

package/project/.sdk/tm/c/feature/secrets/plugin/depend.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/depend.h)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/depend.h)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Dependency cardinality, policy, and the restart graph (§11.3). Two
  * axes, both declared by the definition that has the requirement,

package/project/.sdk/tm/c/feature/secrets/plugin/env.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/env.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/env.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Environment overrides (§9.5) — level 7 of the ladder.
  *

package/project/.sdk/tm/c/feature/secrets/plugin/env.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/env.h)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/env.h)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Environment overrides (§9.5) — level 7 of the ladder. Pure: a
  * function over a string map and a ref set, so the corpus tests it

package/project/.sdk/tm/c/feature/secrets/plugin/export.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/export.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/export.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Exports (§11).
  *
@@ -23,7 +23,7 @@ static int bytewise(const void *a, const void *b) {
 
 Value *resolveexport(Value *spec, Value *exported) {
   const char *s = visstr(spec) ? vasstr(spec) : "";
-  const char *cut = strchr(s, '/');
+  const char *cut = strrchr(s, '/');
   if (NULL == cut) {
     size_t sz = strlen(s) + 40;
     char *text = (char *)arena_alloc(sz);

package/project/.sdk/tm/c/feature/secrets/plugin/export.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/export.h)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/export.h)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Exports (§11). An instance publishes values for other plugins and for
  * the application. THE UNQUALIFIED ALIAS IS THE INTERESTING PART; see

package/project/.sdk/tm/c/feature/secrets/plugin/graph.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/graph.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/graph.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Whole-graph resolution (§11.4) — a phase, not a discovery.
  *

package/project/.sdk/tm/c/feature/secrets/plugin/graph.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/graph.h)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/graph.h)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Whole-graph resolution (§11.4) — a pure function of the registry that
  * answers which instances can be live, and for each blocked one THE

package/project/.sdk/tm/c/feature/secrets/plugin/host.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/host.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/host.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The host: the lifecycle state machine (§5), extension points (§6),
  * and resource capture (§8). See host.h for the two rules that shape
@@ -421,6 +421,29 @@ void inst_export(Inst *e, const char *key, Value *value) {
 
 void inst_provides(Inst *e, Value *p) { vpush(e->provides, p); }
 
+/* Defined with the rest of §11.4's selection, below; `inst_capability`
+ * is the one caller that comes before it. */
+static const char *chosen(Host *h, Inst *e, Value *req, bool remember);
+
+/* WHICH provider this instance is bound to for `name` (§11.1), as a ref,
+ * or NULL when nothing provides it.
+ *
+ * The host's own `capability` answers with the live providers RANKED,
+ * not with the one THIS instance took; §11.4's reluctant rebinding makes
+ * those differ. A REF, not the instance. The selection is REMEMBERED,
+ * because this is the instance asking. */
+const char *inst_capability(Inst *e, const char *name) {
+  Value *reqs = requirements(e->options);
+  for (size_t i = 0; i < vlen(reqs); i++) {
+    Value *r = vat(reqs, i);
+    const char *rn = vasstr(vget(r, "name"));
+    if (NULL != rn && 0 == strcmp(rn, name)) {
+      return chosen(inst_host(e), e, r, true);
+    }
+  }
+  return NULL;
+}
+
 /* The scope entry carries the inner host as its context — C's stand-in
  * for the closure every other port writes here. */
 static void closeinner(void *ctx) { host_close((Host *)ctx); }

package/project/.sdk/tm/c/feature/secrets/plugin/host.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/host.h)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/host.h)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The host: the lifecycle state machine (§5), extension points (§6),
  * and resource capture (§8).
@@ -116,6 +116,7 @@ void inst_bind(Inst *i, const char *point, HookFn hook, ChainFn chain,
                void *ctx, Value *band);
 void inst_export(Inst *i, const char *key, Value *value);
 void inst_provides(Inst *i, Value *p);
+const char *inst_capability(Inst *i, const char *name);
 /* Returns a handle a plugin can hand back early. The scope still holds
  * the entry and unwinding it twice is a no-op — releasing early must
  * not make teardown wrong. */

package/project/.sdk/tm/c/feature/secrets/plugin/order.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/order.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/order.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Ordering (§7) — one rule, one place.
  *

package/project/.sdk/tm/c/feature/secrets/plugin/order.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/order.h)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/order.h)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Ordering (§7) — constraints, then bands, then declaration position.
  * CONSTRAINTS BEAT BANDS so the correct tool wins when both are

package/project/.sdk/tm/c/feature/secrets/plugin/point.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/point.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/point.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Extension points (§6). See point.h for the closure representation. */
 

package/project/.sdk/tm/c/feature/secrets/plugin/point.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/point.h)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/point.h)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Extension points (§6). Three kinds, chosen because they are what the
  * two existing systems actually needed, and no more.

package/project/.sdk/tm/c/feature/secrets/plugin/ref.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260908-1556-0 (c/src/ref.c)
-// Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (c/src/ref.c)
+// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Identity: name+tag (§4). */