@voxgig/sdkgen 4.20.0 → 4.22.0

package/project/.sdk/tm/ts/src/feature/secrets/sekreto/plugins/onepassword.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/sekreto 0.2.0 (typescript/plugins/onepassword.ts)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025 Voxgig Ltd, MIT License */
 

package/project/.sdk/tm/ts/src/feature/secrets/sekreto/plugins/secretspec.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/sekreto 0.2.0 (typescript/plugins/secretspec.ts)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025 Voxgig Ltd, MIT License */
 

package/project/.sdk/tm/ts/src/feature/secrets/sekreto/plugins/sigv4.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/sekreto 0.2.0 (typescript/plugins/sigv4.ts)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // AWS Signature Version 4, hand-rolled.
 //

package/project/.sdk/tm/ts/src/feature/secrets/sekreto/provider/addr.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/sekreto 0.2.0 (typescript/src/provider/addr.ts)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025 Voxgig Ltd, MIT License */
 

package/project/.sdk/tm/ts/src/feature/secrets/sekreto/provider/builtin.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/sekreto 0.2.0 (typescript/src/provider/builtin.ts)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025 Voxgig Ltd, MIT License */
 
@@ -33,5 +33,6 @@ export const KINDS = {
   plugin: [
     'hashicorp', 'boru', 'awssecrets', 'awsparams', 'gcpsecrets',
     'azuresecrets', 'onepassword', 'doppler', 'infisical', 'secretspec',
+    'minivault',
   ],
 }

package/project/.sdk/tm/ts/src/feature/secrets/sekreto/provider/dotenv.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/sekreto 0.2.0 (typescript/src/provider/dotenv.ts)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025 Voxgig Ltd, MIT License */
 

package/project/.sdk/tm/ts/src/feature/secrets/sekreto/provider/env.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/sekreto 0.2.0 (typescript/src/provider/env.ts)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025 Voxgig Ltd, MIT License */
 

package/project/.sdk/tm/ts/src/feature/secrets/sekreto/provider/file.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/sekreto 0.2.0 (typescript/src/provider/file.ts)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025 Voxgig Ltd, MIT License */
 

package/project/.sdk/tm/ts/src/feature/secrets/sekreto/provider/memory.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/sekreto 0.2.0 (typescript/src/provider/memory.ts)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025 Voxgig Ltd, MIT License */
 

package/project/.sdk/tm/ts/src/feature/secrets/sekreto/provider/support.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/sekreto 0.2.0 (typescript/src/provider/support.ts)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // What a provider is, what its declarative form looks like, and how a
 // provider kind becomes a voxgig/plugin definition.
@@ -161,6 +161,16 @@ export type ProviderSpec = {
   /** infisical: the environment slug and secret path. */
   environment?: string
   path?: string
+  /** minivault: the passphrase that unwraps `vaultkey`. */
+  passphrase?: string
+  /** minivault: which key in the vault file to open with, defaulting to
+   * `master`. Named apart from `key` and `keyid` because those already
+   * mean a secret name and an AWS access key id. */
+  vaultkey?: string
+  /** minivault: PBKDF2 rounds, used only when a key is created. */
+  iterations?: number
+  /** minivault: make the vault file if it is not there. */
+  create?: boolean
 }
 
 // --- providers as voxgig/plugin definitions --------------------------

package/project/.sdk/tm/ts/src/feature/streaming/StreamingFeature.ts

@@ -5,13 +5,6 @@ import type { ProjectNameSDK } from '../../ProjectNameSDK'
 import { BaseFeature } from '../base/BaseFeature'
 
 
-// Streaming result support. For list-style operations it attaches a
-// `result.stream()` async-iterator so callers can consume items
-// incrementally with `for await (const item of result.stream())` instead of
-// materialising the whole array. The iterator reads the result's data
-// lazily, so it reflects the parsed entities. A `chunkDelay` (ms) simulates
-// paced/chunked delivery for offline tests via the injectable `sleep`; a
-// `chunkSize` groups items into batches when set.
 class StreamingFeature extends BaseFeature {
   version = '0.0.1'
   name = 'streaming'

package/project/.sdk/tm/ts/src/feature/telemetry/TelemetryFeature.ts

@@ -5,13 +5,6 @@ import type { ProjectNameSDK } from '../../ProjectNameSDK'
 import { BaseFeature } from '../base/BaseFeature'
 
 
-// Distributed-tracing telemetry. Opens a span per operation (PrePoint),
-// propagates trace context to the server as W3C `traceparent` plus
-// `X-Trace-Id` / `X-Span-Id` headers (PreRequest), and closes the span on
-// completion (PreDone) or failure (PreUnexpected). Finished spans are kept
-// on `client._telemetry.spans`; an `exporter` callback, when provided, is
-// invoked with each finished span. Trace/span id generation and the clock
-// are injectable for deterministic tests.
 class TelemetryFeature extends BaseFeature {
   version = '0.0.1'
   name = 'telemetry'

package/project/.sdk/tm/ts/src/feature/test/TestFeature.ts

@@ -8,14 +8,17 @@ import { BaseFeature } from '../base/BaseFeature'
 const S_NOT_FOUND = 'Not found'
 
 
-// Which param is entity X's own identifier, as opposed to a parent key —
-// the load op's canonical point's LAST path segment, by construction (a
-// route addresses parents first, the record last). Mirrors recordKey in
-// sdkgen's Main_seneca-provider.ts; written again here because a template
-// ships standalone, outside that package. A renamed id (e.g. Airtable's
-// record_id) needs its own seeded field: matching only ever happens
-// against the API's real param names, never a bare 'id' the API itself
-// does not use.
+// The `%04x%04x%04x%04x` every other target mints, so the id's shape does not
+// depend on which language answered.
+function mintId(): string {
+  let out = ''
+  for (let i = 0; i < 4; i++) {
+    out += ((Math.random() * 0x10000) | 0).toString(16).padStart(4, '0')
+  }
+  return out
+}
+
+
 function ownIdField(config: any, getpath: any, entityName: string): string {
   let fallback = ''
 
@@ -32,17 +35,6 @@ function ownIdField(config: any, getpath: any, entityName: string): string {
       if (ptterm !== bestterm ? ptterm : pt.parts.length < best.parts.length) best = pt
     }
     const parts: string[] = (best && best.parts) || []
-    // THE LAST PART, not the last param anywhere in the path. A record route
-    // ENDS in its key: /orgs/{org}/private-registries/{secret_name} does,
-    // /orgs/{org}/private-registries/public-key does not. Reading the last
-    // param wherever it fell returned `{org}` for that second path — a PARENT
-    // reference — and the seeding walk then stamped the record's own key over
-    // org_id, destroying the ORG01 the fixture set and the test looks up from
-    // idmap. github's private_registry failed its update with a 404 that named
-    // nothing to do with orgs.
-    //
-    // A point that does not end in a param says nothing about this entity's
-    // key, so move on to the next op rather than guess from it.
     const lastPart = 0 < parts.length ? String(parts[parts.length - 1]) : ''
     if (lastPart.startsWith('{')) return lastPart.slice(1, -1)
 
@@ -66,23 +58,6 @@ function ownIdField(config: any, getpath: any, entityName: string): string {
     }
   }
 
-  // ONLY AFTER EVERY OP, because an op whose routes all end in a literal
-  // says nothing while another op may still name the key outright.
-  // github's `private_registry` reads
-  // `/orgs/{org}/private-registries/public-key` under `load` and writes
-  // `/orgs/{org}/private-registries/{secret_name}` under `update`:
-  // returning the load route's last parameter made the key `org`, and its
-  // update answered 404 for want of a registry named after an
-  // organisation.
-  //
-  // Reached at all only by an entity with no record-terminal route
-  // anywhere — github's `copilot` is read from
-  // `/orgs/{org_id}/members/{username}/copilot`, whose key is plainly
-  // `username`. Abstaining left the mock stamping no key on a created
-  // record while the provider addressed it by `username`, so the load
-  // straight after a create found nothing. The provider's recordKey has
-  // always used this fallback; matching it removes a disagreement rather
-  // than adding a guess.
   if ('' !== fallback) {
     return fallback
   }
@@ -141,22 +116,11 @@ class TestFeature extends BaseFeature {
       const delprop = struct.delprop
       const getdef = struct.getdef
 
-      // Shape the mock payload the way the real API would, so the op's
-      // response transform recovers the entity from it. A point carrying
-      // `transform.res: \`body.item\`` describes an API that answers
-      // `{item: {...}}`; handing back the bare entity means the transform
-      // unwraps a property that is not there and the caller gets undefined.
-      // The mock has to agree with the model, or it only ever simulates APIs
-      // whose responses happen to be unwrapped.
       function envelope(data: any) {
         const restf = getprop(getprop(ctx.point, 'transform', {}), 'res')
         if (null == data || 'string' !== typeof restf) {
           return data
         }
-        // Rebuild whatever nesting the op's response transform unwraps, so
-        // the mock agrees with the model. Multi-segment on purpose: GraphQL
-        // ops unwrap `body.data.<field>` (and `body.data.<field>.<entity>`
-        // for mutation payloads), not just a single envelope property.
         const m = restf.match(/^`body\.(.+)`$/)
         if (null == m) {
           return data
@@ -253,10 +217,7 @@ class TestFeature extends BaseFeature {
         const args = self.buildArgs(ctx, op, ctx.reqdata)
         let id = param(ctx, 'id')
         if (null == id) {
-          id = ((1e4 * Math.random() | 0).toString(16) +
-            (1e4 * Math.random() | 0).toString(16) +
-            (1e4 * Math.random() | 0).toString(16) +
-            (1e4 * Math.random() | 0).toString(16)).padEnd(16, '0')
+          id = mintId()
         }
 
         const ent = clone(ctx.reqdata)
@@ -390,20 +351,6 @@ class TestFeature extends BaseFeature {
     const qand: any[] = []
     const q = { '`$AND`': qand }
 
-    // WHERE A PATH PARAMETER'S VALUE ACTUALLY LIVES IN A RECORD.
-    //
-    // A request addresses a record by path parameter; a stored record carries
-    // whatever the API's response carries. Those are not always the same
-    // name, and are not always at the same depth: github addresses a repo by
-    // `{owner}/{repo}` and returns the owner as an OBJECT (`owner.login`)
-    // with the repository under `name`. Matching by parameter name alone
-    // found nothing for such a record, so a seeded composite record was
-    // unfindable and every read of it came back 404.
-    //
-    // `id.from` in the model says where each parameter is carried, as a
-    // dotted path. `select` matches a NESTED query shape but not a dotted
-    // key, so the path is expanded into one — `owner.login` becomes
-    // `{ owner: { login: value } }`.
     const idfrom = getpath(ctx.config, [
       'entity', getprop(ctx.entity, 'name'), 'id', 'from']) || {}
 
@@ -416,29 +363,6 @@ class TestFeature extends BaseFeature {
       return out
     }
 
-    // THE COMPOSITE PARTS FROM THE ENTITY MATCH TOO.
-    //
-    // A path parameter does not have to travel with the body. The seneca
-    // provider puts a composite record's parts in the ENTITY MATCH and
-    // leaves the body as the caller wrote it, because a path parameter is
-    // not a field — so `update`, which builds its query from `reqdata`,
-    // never looked at them. The query then matched every repo and
-    // `Repo({match:{owner,repo}}).update(...)` answered 404 while the same
-    // call with the parts in the body succeeded.
-    //
-    // EXACTLY THE PARTS, and only when nothing else addresses the record.
-    //
-    // Not every key the match holds: the match ACCRETES across calls on one
-    // entity instance, so after a create and an update it carries that
-    // record's parent scope as well — and the create branch below stamps the
-    // record's OWN key over the field it was seeded with, so a later read
-    // constrained on an accreted value finds nothing. Twenty-five of this
-    // SDK's own entity tests failed that way.
-    //
-    // And not when the call already carries an `id`: a direct id IS the
-    // address, and an accreted part then only narrows it wrongly — this
-    // SDK's own activity test updates `id: ACTIVITY00` on an entity whose
-    // match still holds the `repo` a previous list used.
     const match = ctx.match || {}
     const names: any[] = [...keysof(args)]
 
@@ -488,6 +412,7 @@ class TestFeature extends BaseFeature {
 export {
   TestFeature,
   ownIdField,
+  mintId,
 }
 
 

package/project/.sdk/tm/ts/src/feature/validate/ValidateFeature.ts

@@ -6,30 +6,6 @@ import { ENTITYSPEC } from '../../Schema'
 import { BaseFeature } from '../base/BaseFeature'
 
 
-// Payload validation against the model's own field types.
-//
-// The specs are NOT written here and not written in the model either: every
-// entity field already carries a canonical type sentinel (`$STRING`,
-// `$INTEGER`, the `$ONE` union for an OpenAPI multi-type), which is the same
-// vocabulary struct.validate speaks. The generator maps them once
-// (helpers/canonSpec) and emits `ENTITYSPEC` beside this file, so a field
-// whose type changes in the API spec changes what this feature enforces with
-// no edit anywhere.
-//
-// WHAT IS CHECKED
-//   outbound (PreSpec)  the payload the caller asked to send, against
-//                       `spec.op[<opname>]` — the operation's request shape,
-//                       which is the SAME partiality policy that decides what
-//                       the generated `<Name>CreateData` type requires.
-//   inbound  (PreDone)  each record the operation returned, against
-//                       `spec.data` — the entity's own field types.
-//
-// WHAT IS NOT. The model carries no array element types, no nested object
-// schemas, no enums, formats or bounds (see canonSpec's note), so this checks
-// the shape the model knows and nothing more. It is a guard against the
-// mistakes the model CAN see — a number where a string belongs, a required
-// field left out, a misspelled key under `strict` — not a substitute for the
-// server's own validation.
 class ValidateFeature extends BaseFeature {
   version = '0.0.1'
   name = 'validate'
@@ -49,12 +25,6 @@ class ValidateFeature extends BaseFeature {
     this._options = options || {}
     this.active = (options as any).active
 
-    // DEFAULTS ARE APPLIED HERE, not by the option spec. The model's
-    // `config.options` documents them and types them; it does not inject
-    // them, because each feature entry in the spec is optional and struct
-    // fills in nothing through an optional union. So every feature resolves
-    // its own — and a `mode` left undefined here once meant `'throw' !==
-    // undefined`, which silently turned every rejection into a no-op.
     this._request = false !== this._options.request
     this._response = true === this._options.response
 
@@ -64,16 +34,10 @@ class ValidateFeature extends BaseFeature {
     // rejects the typo outright; this is what happens if it ever does not.
     this._mode = 'report' === this._options.mode ? 'report' : 'throw'
 
-    // `strict` is applied ONCE, here, by rebuilding the spec tree without the
-    // `$OPEN` markers — rather than per call, which would clone a spec for
-    // every request an SDK ever makes.
     this._spec = true === this._options.strict ? close(ENTITYSPEC) : ENTITYSPEC
   }
 
 
-  // Outbound. `makeSpec` short-circuits on an `ctx.out.spec` that is already
-  // set, so assigning the error here rejects the operation before the request
-  // is built — the same seam rbac uses one stage earlier.
   PreSpec(this: any, ctx: any) {
     if (!this.active || !this._request) {
       return
@@ -100,22 +64,6 @@ class ValidateFeature extends BaseFeature {
   }
 
 
-  // Inbound. PreDone rather than PreResult: the records are extracted from
-  // the response body by `makeResult`, which runs between the two, so at
-  // PreResult there is nothing to check but the envelope.
-  //
-  // HOOK ORDER MATTERS HERE, and the default order is not the one you want.
-  // PreDone hooks fire in feature ADD order, which defaults to `test` first
-  // and then names sorted — and `validate` sorts last, after `audit`,
-  // `cost`, `debug`, `metrics` and `telemetry`. Those observers therefore
-  // record the operation as a success before this hook has looked at it.
-  // Activating features as an ORDERED ARRAY fixes it:
-  //
-  //   feature: [{ name: 'validate', active: true, response: true },
-  //             { name: 'metrics', active: true }]
-  //
-  // What this feature can fix from here, it does: the result is marked
-  // failed and its records are cleared, so the entity absorbs nothing.
   PreDone(this: any, ctx: any) {
     if (!this.active || !this._response) {
       return
@@ -140,10 +88,6 @@ class ValidateFeature extends BaseFeature {
         continue
       }
 
-      // A NON-OBJECT IS A FAILURE, not something to skip. A load that
-      // answered `42` where the entity's spec wants a record used to pass
-      // this feature silently, which is the one outcome a validator must
-      // never produce. struct rejects it with the field it could not find.
       for (const e of this._check(ctx, unwrap(record), spec.data, 'response')) {
         errs.push(e)
       }
@@ -156,33 +100,15 @@ class ValidateFeature extends BaseFeature {
     const err = ctx.error('validate_failed',
       'Invalid response for entity "' + entname(ctx) + '": ' + errs.join('; '))
 
-    // BOTH, and `ok` is the load-bearing half: `done` returns `resdata`
-    // whenever `result.ok` is true and never looks at `err`, so setting the
-    // error alone handed the caller the very records that failed the spec.
     ctx.result.ok = false
     ctx.result.err = err
 
-    // AND THE DATA GOES. The load/update fragments copy `result.resdata`
-    // into the entity's own state on any non-null value, BEFORE `done`
-    // raises — so rejecting the operation while leaving the records in place
-    // left the caller holding an entity populated from a payload this
-    // feature had just declared invalid. Clearing it is the only half of
-    // that this feature owns; see the note on hook order below.
     ctx.result.resdata = undefined
 
     return err
   }
 
 
-  // The payload an operation is about to send.
-  //
-  // TWO SLOTS, AND THE OP PICKS. A body op (create/update/patch) carries the
-  // caller's argument in `reqdata` over the entity's `data`; a match op
-  // (load/list/remove) carries it in `reqmatch` over `match`. That is what
-  // the Entity*Op fragments pass to makeContext and what makePoint reads
-  // (`getprop(ctx, 'req' + op.input)`) — so reading `reqdata` for every op
-  // checked a `load({ id })` against the entity's STALE stored match and
-  // rejected it for the id the caller had just supplied.
   _payload(this: any, ctx: any, opname: string): Record<string, any> {
     const body = 'create' === opname || 'update' === opname || 'patch' === opname
 
@@ -207,9 +133,6 @@ class ValidateFeature extends BaseFeature {
   }
 
 
-  // One validate call. Errors are COLLECTED, never thrown: struct throws on
-  // the first failure unless given an `errs` array, and a caller fixing a
-  // payload wants every problem with it, not the first one.
   _check(this: any, ctx: any, data: any, spec: any, direction: string): string[] {
     const struct = ctx.utility.struct
     const errs: string[] = []
@@ -242,13 +165,6 @@ class ValidateFeature extends BaseFeature {
 }
 
 
-// A RESULT RECORD AS DATA.
-//
-// `makeResult` turns every record of a LIST into an entity instance
-// (`entity.make()` then `ent.data(entry)`), so what reaches PreDone for a
-// list is wrappers, not records — and a wrapper checked against a field spec
-// fails on every required field while its actual data goes unchecked. A load
-// returns the record itself, so this has to handle both.
 function unwrap(record: any): any {
   if (null != record && 'function' === typeof record.data) {
     const data = record.data()
@@ -265,9 +181,6 @@ function entname(ctx: any): string {
 }
 
 
-// The spec tree with every `$OPEN` marker removed, so an undeclared key is an
-// error rather than a pass. Rebuilt rather than mutated: ENTITYSPEC is a
-// module constant shared by every client in the process.
 function close(node: any): any {
   if (Array.isArray(node)) {
     return node.map((n: any) => close(n))

package/project/.sdk/tm/ts/src/utility/CleanUtility.ts

@@ -14,18 +14,6 @@ function clean(ctx: Context, val: any) {
   const cleankeyre = options?.__derived__?.clean?.keyre
   const hintsize = 4
 
-  /*
-  if (null != cleankeyre) {
-    val = walk(clone(val), (key: any, subval: any) => {
-      if (cleankeyre.exec(key) && 'string' === typeof subval) {
-        const len = size(subval)
-        const hint = (hintsize * 4) < len ? slice(subval, 0, hintsize) : ''
-        subval = pad(hint, len, '*')
-      }
-      return subval
-    })
-  }
-  */
 
   return val
 }

package/project/.sdk/tm/ts/src/utility/FeatureAddUtility.ts

@@ -12,7 +12,6 @@ function featureAdd(ctx: Context, f: Feature) {
   let added = false
   const features = client._features
 
-  // TODO: make this a utility
   if (fopts.__before__ || fopts.__after__ || fopts.__replace__) {
 
     for (let i = 0; i < features.length; i++) {

package/project/.sdk/tm/ts/src/utility/GraphqlUtility.ts

@@ -2,23 +2,8 @@
 import { Context } from '../types'
 
 
-// GraphQL transport. API-INDEPENDENT: every GraphQL SDK this generator
-// produces uses this file unchanged. The API-specific part — which
-// operations exist and what each one's document is — is model data,
-// computed once by apidef and emitted into Config.
-//
-// Two jobs:
-//
-//   graphqlBody    — build { query, variables } for a point, binding the
-//                    op's arguments to the document's declared variables.
-//
-//   graphqlErrors  — lift a GraphQL failure into an SDK error. GraphQL
-//                    reports failures as a top-level `errors` array under
-//                    HTTP 200, so the status-driven path in resultBasic
-//                    never sees them.
-
-
-// Content type every GraphQL-over-HTTP request uses.
+
+
 const GRAPHQL_CONTENT_TYPE = 'application/json'
 
 
@@ -47,12 +32,6 @@ function graphqlErrorCode(gqlerr: any): string {
 }
 
 
-// Build the request body for a GraphQL point.
-//
-// Variables come from the op's own arguments: a named variable binds to the
-// like-named argument (`from`), and the input-object variable (empty `from`)
-// takes the request data as a whole — which is what makes a generated
-// create/update call look exactly like its REST equivalent.
 function graphqlBody(ctx: Context): any {
   const utility = ctx.utility
   const struct = utility.struct
@@ -105,13 +84,6 @@ function graphqlBody(ctx: Context): any {
 }
 
 
-// Inspect a decoded GraphQL response body and record a failure when the
-// server reported one. Returns true when an error was recorded.
-//
-// Partial data (`data` alongside `errors`) is treated as failure: the REST
-// surface has no partial-success concept, and silently returning half an
-// object would be worse than failing. The raw envelope stays available on
-// the result for callers that need it.
 function graphqlErrors(ctx: Context): boolean {
   const result: any = ctx.result
   const point: any = ctx.point

package/project/.sdk/tm/ts/src/utility/MakeErrorUtility.ts

@@ -23,9 +23,6 @@ function makeError(ctx: Context, err?: any) {
   err = err || ctx.error('unknown', 'unknown error')
 
   const errmsg = err.message || 'unknown error'
-  // TODO: project name should come from config
-  // avoids spurious changes between template and generated utility
-  // applies for all utility files
   const msg = 'ProjectNameSDK: ' + op.name + ': ' + errmsg
   err.message = clean(ctx, msg)
 
@@ -61,7 +58,6 @@ function makeError(ctx: Context, err?: any) {
     ctx.utility.featureHook(ctx, 'PreUnexpected')
   }
 
-  // TODO: model option to return instead
   if (false === ctx.ctrl.throw) {
     return result.resdata
   }

package/project/.sdk/tm/ts/src/utility/MakeOptionsUtility.ts

@@ -15,25 +15,8 @@ function makeOptions(ctx: Context) {
 
   let opts = { ...(options || {}) }
 
-  // EXPLICIT AUTH SUPPRESSION, captured BEFORE merge and validate.
-  //
-  // `auth: null` is the documented way to disable auth outright, and
-  // prepareAuth honours it. But struct 0.3.2's getprop treats a stored
-  // null as "no value", so validate fills in the optspec's `auth`
-  // default and the suppression silently became "use default auth" —
-  // transmitting a credential the caller explicitly asked not to send.
-  // (0.0.10 rejected `auth: null` outright, so nothing depended on the
-  // old behaviour, and nothing catches the new one.)
-  //
-  // Suppliedness cannot be recovered after validate, hence here.
   const authSuppressed = null === (options || {}).auth
 
-  // Feature add-order. `options.feature` may be given as an ordered ARRAY of
-  // { name, active, ...opts } entries (the array position IS the order in
-  // which features are added), or as a { name: {opts} } map. Normalize an
-  // array to a map (so merge/validate/init are unchanged) and remember the
-  // explicit order; a map defaults to test-first so the `test` mock transport
-  // is installed as the base of the transport wrapper chain.
   let featureorder: string[] = []
   if (Array.isArray(opts.feature)) {
     const fmap: any = {}
@@ -55,18 +38,6 @@ function makeOptions(ctx: Context) {
   let config = ctx.config || {}
   let cfgopts = config.options || {}
 
-  // THE OPTION SPEC IS GENERATED, NOT WRITTEN HERE.
-  //
-  // `Spec.OPTSPEC` is built from the model: `main.kit.optspec` for the
-  // standard options, plus one entry per feature this target carries, taken
-  // from that feature's own `config.options` / `config.optspec`. Editing this
-  // file to add an option would put it back where it was — one of twenty
-  // hand-maintained copies of a schema nothing cross-checked — so add it to
-  // the model instead and every ported target validates it.
-  //
-  // NOT MUTATED. It is a module-level constant shared by every client this
-  // process constructs; the platform default below is applied to the RESULT,
-  // never to the spec.
   const optspec = OPTSPEC
 
   // Clone the config side before merging: `config` is a module-level
@@ -77,11 +48,6 @@ function makeOptions(ctx: Context) {
 
   opts = validate(opts, optspec)
 
-  // The platform fetch, supplied AFTER validate rather than as a spec
-  // default. `system.fetch` is declared `$ANY`, which passes a caller's own
-  // fetch through untouched but inserts nothing when the key is absent — and
-  // the spec is shared, so writing the default into it (as this did while the
-  // spec was a per-call literal) would hand one client's fetch to the next.
   opts.system = opts.system || {}
   if (null == opts.system.fetch) {
     opts.system.fetch = global.fetch
@@ -92,12 +58,6 @@ function makeOptions(ctx: Context) {
     opts.auth = null
   }
 
-  // Resolve a templated base URL (e.g. https://{tenant_id}.hanko.io).
-  // Every placeholder must resolve to a non-empty value: from
-  // options.server (user), else the Config default. A placeholder that
-  // resolves to '' is a construction ERROR in live mode — the URL cannot
-  // work — but in test mode substitutes the deterministic value
-  // `test-<name>` so offline tests need no configuration.
   if ('string' === typeof opts.base && opts.base.includes('{')) {
     const testmode = true === opts.test.active ||
       true === (opts.feature && opts.feature.test && opts.feature.test.active)
@@ -127,12 +87,6 @@ function makeOptions(ctx: Context) {
     names = names.indexOf('test') < 0
       ? names
       : ['test'].concat(names.filter((n: string) => 'test' !== n))
-    // Station special case, mirroring test's: its transport wrap must
-    // sit immediately outside the base transport (inside retry/cache/
-    // netsim), so map-form activation hoists it to just after test -
-    // or first, when no test entry exists. Without this the sorted
-    // default would init station last and wrap OUTSIDE the recording
-    // features, turning its wire-truth events into fiction.
     const si = names.indexOf('station')
     if (0 <= si) {
       names.splice(si, 1)