@voxgig/sdkgen 4.20.0 → 4.22.0

package/project/.sdk/src/cmp/go-cli/Main_go-cli.ts

@@ -16,12 +16,6 @@ import {
 } from '@voxgig/apidef'
 
 
-// Published boru/eng/go version. The engine module
-// github.com/boru-lang/boru/eng/go is not yet tagged under the boru path (the
-// eng/go/v0.0.1 tag predates the aql->boru rename and still declares the old
-// aql-lang/aql module path), so we pin a commit pseudo-version. Bump here —
-// to a real eng/go/v<X.Y.Z> once one is published, or a newer pseudo-version —
-// when adopting a newer engine.
 const BORU_ENG_VERSION = 'v0.0.2-0.20260804163932-0d66b55c5110'
 
 // go.sum entries for BORU_ENG_VERSION and its transitive deps. The sibling
@@ -50,54 +44,21 @@ const Main = cmp(function Main(props: any) {
   const { model } = props.ctx$
 
   const org = model.origin || 'voxgig-sdk'
-  // The two names on the next lines are DIFFERENT KINDS of name, and the
-  // adjacency is the trap. `sdkModule` is the Go SDK this CLI imports — a
-  // different target, so it keeps its own name and must NOT follow this
-  // target's alias. `cliModule` is this target itself, so it must.
   const sdkModule = goModule(model, 'go')
   const cliModule = goModule(model, target.name)
 
   const entityMap: any = getModelPath(model, `main.${KIT}.entity`)
-  // Derive each entity's PascalCase `Name` here rather than relying on another
-  // TARGET having run first. This target sets `phase.entity: { active: false }`
-  // (see model/target/go-{cli,mcp}.aon), so create-sdkgen's Root.ts never
-  // calls names() for it — the accessor emitted below used to read `Name` off
-  // objects the `go` target happened to have named as a side effect, which
-  // yields `client.undefined(nil)` whenever this target is generated without
-  // `go`, or before it in target order.
   deriveEntityNames(entityMap)
   const entityNames = Object.keys(entityMap).map(n => n.toLowerCase())
 
   const FRAGMENT = Path.normalize(__dirname + '/../../../src/cmp/go-cli/fragment')
 
-  // .gitignore — build output (dist/), any stray top-level binaries, and
-  // jostraca's bookkeeping.
-  //
-  // `.jostraca/` matters only when this target is generated OUT OF TREE
-  // (`output: path`), which is a mode every target has: jostraca drops its
-  // meta log and a full duplicate of the last generated output at the output
-  // ROOT, and the destination is a different repository that nothing here
-  // puts under version control — so without this line the first regeneration
-  // leaves that repo dirty with hundreds of untracked files. In-tree the SDK
-  // repo's own ignore file already covers it, which is why this was missed:
-  // only `seneca-provider` was ever generated out of tree, and it was the
-  // only target whose ignore file carried the line. The other 21 targets
-  // still do not — see docs/design/seneca-provider-package.md.
   File({ name: '.gitignore' }, () => Content(`/dist/
 /${model.name}-cli
 /go-cli
 .jostraca/
 `))
 
-  // ==========================================================================
-  // README.md — Diátaxis-structured, examples-first usage guide.
-  //
-  // EVERYTHING here is MODEL-DRIVEN: verbs, examples and how-to sections are
-  // gated on whether an active entity actually exposes that op
-  // (op.<name>.active !== false) — never document an operation no entity
-  // supports. The CLI implements three boru words (list / load / update; see
-  // words.fragment.go + runOp).
-  // ==========================================================================
   const bin = `${model.name}-cli`
   const entityList = entityNames.length > 0 ? entityNames.join(' ') : '(none)'
   const entityCount = entityNames.length
@@ -149,7 +110,6 @@ const Main = cmp(function Main(props: any) {
   const cliExampleExpr = exampleOp || '--help'
   const replExampleExpr = exampleOp || '/help'
 
-  // ---- Examples block (up front) -------------------------------------------
   const ex: string[] = []
   ex.push(`# 1. Build a native binary (-> dist/<os>-<arch>/${bin})`)
   ex.push('make build')
@@ -180,7 +140,6 @@ const Main = cmp(function Main(props: any) {
   ex.push(`${model.name}> /quit`)
   const exampleBlock = ex.join('\n')
 
-  // ---- How-to guides (gated) -----------------------------------------------
   const howtos: string[] = []
   if (firstHas('list')) howtos.push(`### List the records of an entity
 
@@ -406,10 +365,6 @@ replace ${sdkModule} => ../go
   // BORU_ENG_VERSION above.
   File({ name: 'go.sum' }, () => Content(BORU_ENG_GOSUM))
 
-  // Makefile — `make build` for the current machine, `make build-all` to
-  // cross-compile for the three desktop OSes (linux, darwin, windows) on
-  // amd64 + arm64. Every binary is named ${model.name}-cli (+ .exe on windows)
-  // inside its own dist/<os>-<arch>/ folder — no loose top-level binary.
   File({ name: 'Makefile' }, () => Content(`# ${model.name}-cli build. GENERATED by @voxgig/sdkgen go-cli target.
 BINARY := ${model.name}-cli
 DIST := dist
@@ -437,8 +392,6 @@ clean:
 \trm -rf $(DIST) $(BINARY) go-cli
 `))
 
-  // main.go — produced from fragment/main.fragment.go with two Slots
-  // for the prompt label and the entity help line.
   File({ name: 'main.go' }, () => {
     Fragment(
       {
@@ -459,8 +412,6 @@ clean:
     )
   })
 
-  // words.go — produced from fragment/words.fragment.go with a single
-  // Slot that emits one `case "<name>":` per entity.
   File({ name: 'words.go' }, () => {
     Fragment(
       {

package/project/.sdk/src/cmp/go-cli/fragment/words.fragment.go

@@ -9,18 +9,6 @@ import (
 	sdk "GOMODULE"
 )
 
-// registerSDKWords installs three native boru words bound to the SDK:
-// list / load / update. Each is declared with two overloads matching
-// the signature  [query?:(Node or Scalar) entity:atom]:
-//
-//   [entity:Atom]            — no query (e.g. `list book`)
-//   [query:Any entity:Atom]  — query is any Node or Scalar (e.g.
-//                              `load {id:1} book`, `load 1 book`)
-//
-// The entity slot is /q-quoted so a bareword `book` parses as the
-// Atom "book" rather than dispatching as an undefined word. Both
-// overloads are all-forward (BarrierAllForward), so args are collected
-// from the tokens following the word.
 func registerSDKWords(r *eng.Registry, client *sdk.ProjectNameSDK) {
 	for _, op := range []string{"list", "load", "update"} {
 		op := op

package/project/.sdk/src/cmp/go-mcp/Main_go-mcp.ts

@@ -50,21 +50,10 @@ const Main = cmp(function Main(props: any) {
   const { model } = props.ctx$
 
   const org = model.origin || 'voxgig-sdk'
-  // The two names on the next lines are DIFFERENT KINDS of name, and the
-  // adjacency is the trap. `sdkModule` is the Go SDK this CLI imports — a
-  // different target, so it keeps its own name and must NOT follow this
-  // target's alias. `mcpModule` is this target itself, so it must.
   const sdkModule = goModule(model, 'go')
   const mcpModule = goModule(model, target.name)
 
   const entityMap: any = getModelPath(model, `main.${KIT}.entity`)
-  // Derive each entity's PascalCase `Name` here rather than relying on another
-  // TARGET having run first. This target sets `phase.entity: { active: false }`
-  // (see model/target/go-{cli,mcp}.aon), so create-sdkgen's Root.ts never
-  // calls names() for it — the accessor emitted below used to read `Name` off
-  // objects the `go` target happened to have named as a side effect, which
-  // yields `client.undefined(nil)` whenever this target is generated without
-  // `go`, or before it in target order.
   deriveEntityNames(entityMap)
   const entityNames = Object.keys(entityMap).map(n => n.toLowerCase())
   const entityHelp = entityNames.length > 0 ? entityNames.join(' | ') : '(none)'
@@ -76,19 +65,11 @@ const Main = cmp(function Main(props: any) {
 
   const FRAGMENT = Path.normalize(__dirname + '/../../../src/cmp/go-mcp/fragment')
 
-  // .gitignore — build output (dist/) and any stray top-level binaries.
   File({ name: '.gitignore' }, () => Content(`/dist/
 /${model.name}-mcp
 /go-mcp
 `))
 
-  // ==========================================================================
-  // README.md — Diátaxis-structured, examples-first usage guide.
-  //
-  // The server ALWAYS registers exactly two tools (<slug>_list / <slug>_load;
-  // see tools.fragment.go), so tools are not gated. Concrete tool-call and
-  // entity examples are MODEL-DRIVEN off the real slug + entity names.
-  // ==========================================================================
   const bin = `${model.name}-mcp`
   const toolList = `${slugLower}_list`
   const toolLoad = `${slugLower}_load`
@@ -319,8 +300,6 @@ this repo, or upstream at
 \`github.com/voxgig/sdkgen/project/.sdk/src/cmp/go-mcp/\`.
 `))
 
-  // go.mod — sibling SDK via relative replace; MCP Go SDK pulled from
-  // the public proxy. The MCP Go SDK requires go >= 1.25.
   File({ name: 'go.mod' }, () => Content(`module ${mcpModule}
 
 go ${goVersion(model, target.name, '1.25.0')}
@@ -340,15 +319,8 @@ require (
 replace ${sdkModule} => ../go
 `))
 
-  // go.sum — required for `go build` to accept the MCP SDK dependency
-  // (the path-replaced sibling SDK needs no entry). Pinned alongside
-  // MCP_GO_SDK_VERSION above.
   File({ name: 'go.sum' }, () => Content(MCP_GO_SDK_GOSUM))
 
-  // Makefile — `make build` for the current machine, `make build-all` to
-  // cross-compile for the three desktop OSes (linux, darwin, windows) on
-  // amd64 + arm64. Every binary is named ${model.name}-mcp (+ .exe on windows)
-  // inside its own dist/<os>-<arch>/ folder — no loose top-level binary.
   File({ name: 'Makefile' }, () => Content(`# ${model.name}-mcp build. GENERATED by @voxgig/sdkgen go-mcp target.
 BINARY := ${model.name}-mcp
 DIST := dist
@@ -376,8 +348,6 @@ clean:
 \trm -rf $(DIST) $(BINARY) go-mcp
 `))
 
-  // main.go — produced from fragment/main.fragment.go with one Slot
-  // for the MCP server's announced name.
   File({ name: 'main.go' }, () => {
     Fragment(
       {
@@ -385,8 +355,6 @@ clean:
         replace: {
           ...props.ctx$.stdrep,
           GOMODULE: sdkModule,
-          // Env vars the server reads: <PROJ>_APIKEY for the key and <PROJ>_BASE
-          // to override the API base URL (both injectable by a secrets vault).
           APIKEYENVVAR: String(model.name).toUpperCase().replace(/[^A-Z0-9]/g, '_') + '_APIKEY',
           BASEENVVAR: String(model.name).toUpperCase().replace(/[^A-Z0-9]/g, '_') + '_BASE',
         },
@@ -397,10 +365,6 @@ clean:
     )
   })
 
-  // tools.go — produced from fragment/tools.fragment.go with Slots
-  // for: the entity help string in the input-schema description,
-  // the two tool name prefixes (`<slug>_list` / `<slug>_load`), and
-  // a per-entity `case` block in the entity dispatch switch.
   File({ name: 'tools.go' }, () => {
     Fragment(
       {

package/project/.sdk/src/cmp/go-mcp/fragment/main.fragment.go

@@ -1,23 +1,3 @@
-// Command ProjectName-mcp is an MCP server exposing the ProjectName
-// SDK as MCP tools.
-//
-// Two tools are registered:
-//
-//	ProjectName_list  — list records of an entity
-//	ProjectName_load  — load a single record of an entity
-//
-// Each accepts an `entity` argument and an optional `query` object
-// (mapped 1:1 onto the SDK's reqmatch parameter).
-//
-// Transports:
-//
-//	-transport stdio   (default) — JSON-RPC over stdin/stdout, the
-//	                   standard for spawnable agent-installed servers.
-//	-transport http    — streamable HTTP on -addr (default :8080),
-//	                   useful when sharing one running server between
-//	                   multiple agents.
-//
-// Generated by sdkgen go-mcp target.
 package main
 
 import (

package/project/.sdk/src/cmp/go-mcp/fragment/tools.fragment.go

@@ -1,4 +1,3 @@
-// Generated by sdkgen go-mcp target.
 package main
 
 import (
@@ -82,8 +81,6 @@ func entityFor(client *sdk.ProjectNameSDK, name string) (sdk.ProjectNameEntity,
 	return nil, fmt.Errorf("unknown entity %q", name)
 }
 
-// extractData walks an SDK result and replaces any sdk.Entity wrapper
-// with its underlying record (via .Data()).
 func extractData(x any) any {
 	switch v := x.(type) {
 	case sdk.Entity:

package/project/.sdk/src/cmp/java/Config_java.ts

@@ -46,81 +46,29 @@ const Config = cmp(async function Config(props: any) {
   const javapackage = javaPackage(model)
 
   const entity = getModelPath(model, `main.${KIT}.entity`)
-  // Gated by the applicability tags, so this target never imports or
-  // registers a feature it has no source for. One rule, one place:
-  // helpers/applicability.
   const feature = targetFeatures(model, target)
 
   const headers = getModelPath(model, `main.${KIT}.config.headers`) || {}
 
   const authActive = isAuthActive(model)
-  // config.auth.prefix override -> spec-derived info.security.prefix -> 'Bearer'
   const authPrefix = resolveAuthPrefix(model)
   const authBasic = isHttpBasicAuth(model)
-  // `in` and `name` travel with the prefix now. They were resolved by
-  // apidef all along and dropped here, so an apiKey-in-query API got an
-  // Authorization header it does not read. Emitted only when they differ
-  // from the defaults, so a header/Authorization SDK is byte-identical to
-  // what it generated before.
   const authIn = resolveAuthIn(model)
   const authName = resolveAuthName(model)
 
   let baseUrl = ''
   try { baseUrl = getModelPath(model, `main.${KIT}.info.servers.0.url`) } catch (_e) { }
 
-  // Identity comes from configDefinition's def, not re-derived here, so
-  // this target cannot disagree with the shared emitter on main.slug /
-  // main.version / main.target (the three station descriptor fields,
-  // station design §4) — passing target.name is what opts this target in.
   const { def: configDef } = configDefinition(model, target.name)
 
-  // PLUGIN DEFINITIONS, per feature — the java peer of Config_go's
-  // featurePlugins map (and of Config_ts's pluginImports/pluginDefs).
-  //
-  // Upstream sekreto replaced its self-registration registry with
-  // voxgig/plugin definitions: a provider kind the caller did not pass in
-  // via `plugins(...)` is unknown to that Sekreto. So the config imports
-  // each active plugin's exported Definition BY NAME (the model's
-  // per-target `def` map — `Hashicorp.PLUGIN`, a class-qualified java
-  // symbol) and hands the list to the feature through
-  // Config.featurePlugins.
-  //
-  // Emitted in core (not in the feature package) so the dependency runs
-  // core -> plugins -> sekreto -> plugin with no cycle; the feature reads
-  // it back as List<Object> and instanceof-tests, so core never names a
-  // vendored type.
   const pluginImports = new Set<string>()
   const featurePlugins: Record<string, string[]> = {}
 
-  // featurePlugins is emitted UNCONDITIONALLY — the method always exists,
-  // and answers List.of() for a name with no active groups. This is the go
-  // donor's shape (Config_go emits `var featurePlugins = map[string][]any`
-  // with no gate) and it is not a stylistic choice: java is a flat-container
-  // target (srcfeature: false), so Main's blanket Copy carries
-  // feature/SecretsFeature.java into the tree whenever tm/ holds it —
-  // including for a model that never DECLARED the feature at all, which is
-  // every project whose `target add` predates it or which dropped the
-  // feature afterwards. Gating the method on the model (on ACTIVE or on
-  // DECLARED, either way) leaves that copied source calling a method that
-  // was never emitted, and javac — which does no dead-code elimination —
-  // refuses the whole SDK on `cannot find symbol: featurePlugins`. An
-  // always-present method costs one empty switch; a conditional one costs
-  // the build.
-  //
-  // The SYMBOLS come from the ACTIVE view: an inactive feature's plugin
-  // files were removed by the generate-time trim, so importing them would
-  // be the same hard build failure from the other side.
   each(feature, (f: any) => {
     const syms: string[] = []
     each(f.plugin, (plugin: any) => {
-      // Filter on `active` HERE rather than trusting the feature object to
-      // arrive filtered (see Config_ts.pluginImports / Config_go): getting
-      // this wrong emits an import for a class the trim just deleted, and
-      // javac does no dead-code elimination — it is a hard build failure.
       if (false === plugin.active || null == plugin.active) return
       for (const [sym, one] of Object.entries(plugin.def?.java || {})) {
-        // 'feature/secrets/sekreto/plugins/Hashicorp.java' -> the package
-        // directory; 'Hashicorp.PLUGIN' -> the class to import.
         const dir = String(one).replace(/\/[^/]+$/, '').replace(/\//g, '.')
         pluginImports.add(javapackage + '.' + dir + '.' + sym.split('.')[0])
         syms.push(sym)
@@ -186,10 +134,6 @@ const Config = cmp(async function Config(props: any) {
 
   if (authActive) {
     const auth: Record<string, any> = { prefix: authPrefix }
-    // `basic` joins it for the same reason: the generated prepareAuth only
-    // emits the base64(user:pass) branch for a spec-declared HTTP Basic
-    // scheme, and that branch reads this option at runtime — without it the
-    // branch could never fire.
     if (authBasic) { auth.basic = true }
     if ('header' !== authIn) { auth.in = authIn }
     if ('Authorization' !== authName) { auth.name = authName }
@@ -198,12 +142,6 @@ const Config = cmp(async function Config(props: any) {
   options.headers = headers
   options.entity = optionsEntity
 
-  // configDefinition's `def.entity` verbatim, NOT rebuilt here. This reduce
-  // was one of fourteen copies of that function's entityDefs loop, and when
-  // configDefinition started reconstructing a point's `parts` from apidef's
-  // segment vector (its ADR-003), only the copies that read `configDef` got
-  // it — this target's literal config emitted paths with no parts at all
-  // while its data config had them. One rule, one place.
   const entityConfig = configDef.entity
 
   const config = {
@@ -213,7 +151,6 @@ const Config = cmp(async function Config(props: any) {
     entity: entityConfig,
   }
 
-  // Config lives in the core package alongside the client.
   File({ name: 'Config.' + target.ext }, () => {
 
     Content(`package ${javapackage}.core;

package/project/.sdk/src/cmp/java/EntityTypes_java.ts

@@ -1,36 +1,5 @@
 
 
-// Typed-model generator (Java target). Port of EntityTypes_py.ts /
-// EntityTypes_csharp.ts.
-//
-// Reads main.<KIT>.entity.<e>.fields[] and per-op params
-// (op.<name>.points[].args.params[]) and emits ONE file, core/<Name>Types.java,
-// holding a container class with a nested `public record` per active entity
-// plus a request/match record per active op.
-//
-// WHY A CONTAINER CLASS: Java permits only ONE public top-level type per file
-// (the file name must match it), so — unlike C# which emits many top-level
-// records — every generated record is a nested (implicitly static) member of a
-// single `public final class <Name>Types`. This keeps the whole reference model
-// in one file whatever the entity count.
-//
-// TYPE CHOICE: reference `record` types with BOXED (nullable) component types,
-// NOT the wired runtime type. The generated ops take/return the loose object
-// model (`Map<String, Object>` / `Object`), so these records are NOT wired into
-// the op signatures — they are documentation/DX reference shapes a caller may
-// use to describe a payload before converting it to a map. This mirrors the JS
-// target's JSDoc typedefs (annotation only, no runtime effect). Emitting unused
-// records is harmless — they compile and have no runtime effect.
-//
-// OPTIONAL FIELDS: every component is a boxed reference type, hence inherently
-// nullable, so a `req:false` field/param needs no distinct rendering in Java.
-//
-// Sentinels map to Java types via the SHARED canonToType 'java' column (the
-// single source of truth per language — do not keep a local table here).
-//
-// Keep the SAME type-name scheme as every other language: <Name>,
-// <Name>LoadMatch, <Name>ListMatch, <Name>CreateData, <Name>UpdateData,
-// <Name>RemoveMatch (via the shared opTypeName helper).
 
 import {
   cmp, each, names,
@@ -60,9 +29,6 @@ const JAVA_KEYWORDS = new Set<string>([
 ])
 
 
-// A field/param name that has a safe Java identifier rendering. Names that are
-// not valid identifiers (hyphens, leading digits) have no clean component form
-// and are skipped — they remain reachable via the runtime map.
 function javaIdent(name: string): boolean {
   return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) && !JAVA_KEYWORDS.has(name)
 }
@@ -71,12 +37,6 @@ function javaIdent(name: string): boolean {
 const LANG = 'java'
 
 
-// Emit a nested `public record <typeName>(...)` from {name, type} items. An
-// item whose name is not a legal identifier is skipped (WITH a warning — the
-// key stays reachable via the runtime map, but its absence from the typed
-// model should be visible, not silent); a duplicate component name (after the
-// identifier filter) is dropped. An empty record is a valid, zero-component
-// shape.
 function emitRecord(typeName: string, items: any[], log?: any): void {
   const seen = new Set<string>()
   const usable = items.filter((it: any) => {
@@ -124,10 +84,6 @@ const EntityTypes = cmp(function EntityTypes(props: any) {
 
   const javapackage = props.javapackage || javaPackage(model)
 
-  // only_active:false — getModelPath DROPS active:false entries by default,
-  // but the consumer scaffold (create-sdkgen Root.ts) iterates the RAW entity
-  // collection, so inactive entities still get generated entity code that
-  // references these typed names. The typed model must cover them too.
   const entity = getModelPath(model, `main.${KIT}.entity`, { only_active: false, required: false })
   // Emit for EVERY entity that gets generated entity code: the consumer
   // scaffold (create-sdkgen Root.ts) iterates entities WITHOUT an active
@@ -139,9 +95,6 @@ const EntityTypes = cmp(function EntityTypes(props: any) {
   // entity not yet named (e.g. a fieldless placeholder) would otherwise read
   // `Name = undefined` below. Parity with the go/py/csharp emitter's fix.
 
-  // Surface duplicate generated type names (two entities with the same
-  // PascalCase Name) — they would redeclare a type in statically-typed
-  // targets. Detection only; renaming is a model-level decision.
   warnEntityTypeCollisions(entity, log, LANG)
 
   File({ name: model.const.Name + 'Types.' + ext }, () => {
@@ -175,13 +128,10 @@ public final class ${model.const.Name}Types {
       const fields = (ent.fields ? each(ent.fields) : [])
         .filter((f: any) => f.active !== false)
 
-      // Entity data model: one component per field.
       emitRecord(Name, fields.map((f: any) => ({
         name: f.name, type: f.type,
       })), log)
 
-      // Per active op: a request/match record. Members come from the shared
-      // partiality policy (opRequestShape).
       const ops = ent.op || {}
       ;['load', 'list', 'create', 'update', 'remove'].forEach((opname: string) => {
         if (null == ops[opname]) {

package/project/.sdk/src/cmp/java/Entity_java.ts

@@ -36,18 +36,12 @@ const Entity = cmp(function Entity(props: any) {
 
   const ff = Path.normalize(__dirname + '/../../../src/cmp/java/fragment/')
 
-  // Entity classes go to the entity/ folder; the file name must match the
-  // public class name (Java requirement).
   Folder({ name: 'entity' }, () => {
 
     File({ name: cls + '.' + target.ext }, () => {
 
       const opnames = Object.keys(entity.op || {})
 
-      // For each CRUD op: if the spec defines it, splice in the real
-      // implementation. Otherwise emit a stub that satisfies the SdkEntity
-      // interface (so the package compiles) but errors at runtime if the
-      // caller invokes an unsupported op.
       const opfrags =
         (['load', 'list', 'create', 'update', 'remove']
           .reduce((a: any, opname: string) =>

package/project/.sdk/src/cmp/java/Main_java.ts

@@ -23,6 +23,7 @@ import {
 
 import { Package } from './Package_java'
 import { Config } from './Config_java'
+import { Schema } from './Schema_java'
 import { Gitignore } from './Gitignore_java'
 import { MainEntity } from './MainEntity_java'
 import { EntityBase } from './EntityBase_java'
@@ -43,8 +44,6 @@ const Main = cmp(async function Main(props: any) {
   // helpers/applicability.
   const feature = targetFeatures(model, target)
 
-  // The Java package root for every runtime piece (like GOMODULE for go):
-  // e.g. voxgig.solardemosdk -> voxgig.solardemosdk.core etc.
   const javapackage = javaPackage(model)
 
   Package({ target })
@@ -55,14 +54,6 @@ const Main = cmp(async function Main(props: any) {
   // token used throughout the templates (package/import statements).
   Copy({
     from: 'tm/' + target.name,
-    // pluginExcludes: the generate-time plugin trim (an INACTIVE plugin
-    // group's declared files stay out of the tree - the model's `path`
-    // entries are target-root-relative, which is this Copy's root).
-    // javac performs no dead-code elimination and the trim deletes whole
-    // .java files, so a surviving reference to a trimmed class is a hard
-    // build failure - which is why Config_java imports only the ACTIVE
-    // plugin symbols. The FEATURE-level trim stays an add-time concern
-    // (vendor-tag rollout, Decision 5), as it does for go and py.
     exclude: [/src\//, TEST_CONTROL_EXCLUDE, ...pluginExcludes(model)],
     replace: {
       ...props.ctx$.stdrep,
@@ -70,23 +61,10 @@ const Main = cmp(async function Main(props: any) {
     }
   })
 
-  // Shared entity runtime (entity/EntityBase.java).
   EntityBase({ target })
 
-  // utility/PrepareAuth.java. WHERE the credential goes (header, query
-  // parameter or cookie) and UNDER WHAT NAME are facts about the API, so
-  // the file is generated from the model rather than copied from tm/ —
-  // which is why tm/java/utility/PrepareAuth.java was deleted: the blanket
-  // Copy above and this component would otherwise both claim that path and
-  // jostraca refuses a duplicate output path.
-  //
-  // Called HERE, at Main's top level, and NOT inside the `core` Folder
-  // below. The java target is flat — utility/ is a SIBLING of core/, not a
-  // child — and the component opens `utility` itself, exactly as
-  // EntityBase opens `entity`.
   PrepareAuth({ target })
 
-  // Generate the client class and config in core/.
   Folder({ name: 'core' }, () => {
 
     SdkError({ target })
@@ -108,7 +86,6 @@ this.utility.featureHook.apply(this.rootctx, "${name}");
           }
         },
 
-        // Entities - injected at SLOT
         () => {
           each(entity, (entity: ModelEntity) => {
             const entitySDK = getModelPath(model, `main.${KIT}.entity.${entity.name}`)
@@ -119,6 +96,7 @@ this.utility.featureHook.apply(this.rootctx, "${name}");
     })
 
     Config({ target })
+    Schema({ target })
 
     // Generate the typed reference-model file (<Name>Types.java) beside the
     // other generated core files. Documentation/DX shapes only — not wired

package/project/.sdk/src/cmp/java/PrepareAuth_java.ts

@@ -14,51 +14,17 @@ import {
 import { javaPackage } from './utility_java'
 
 
-// WHERE THE CREDENTIAL GOES IS A FACT ABOUT THE API, so it is generated
-// rather than templated.
-//
-// This was a static file in `tm/java/utility/` that hardcoded
-// `authorization` and a header. apidef has always resolved the scheme's
-// `in` and `name` into `main.kit.info.security` — joplin's says
-// `in: "query", name: "token"` — and generation dropped both. The result
-// was an SDK that sent a header the API does not read and never sent the
-// query parameter it does, so it could not authenticate at all. Four
-// repos in the cedar fleet shipped that way: joplin (`token`), pipedrive
-// (`api_token`), trello (`key`), lm-umbrella (`apiKey`).
-//
-// A template cannot fix this, because the three placements need three
-// different bodies and a template has to pick one. A component emits the
-// branch this API actually uses and nothing else — no dead query code in
-// a bearer-token SDK, and no runtime `if` on a value that is fixed at
-// generation time. The ts port (PrepareAuth_ts) is the donor.
 const PrepareAuth = cmp(async function PrepareAuth(props: any) {
   const { target } = props
   const { model } = props.ctx$
 
   const javapackage = javaPackage(model)
 
-  // `!isAuthSuppressed`, NOT `isAuthActive`. The latter is also false when
-  // the SPEC merely declares no security scheme (`main.kit.info.auth:
-  // false`), and those SDKs still carry a credential: optspec always
-  // declares `apikey` and makeOptions fills `options.auth` from its
-  // defaults, so the runtime guard never fired and they have always sent
-  // it. Only an explicit `main.kit.config.auth.active: false` means "no
-  // credential, ever", which is what isAuthSuppressed reads.
   const active = !isAuthSuppressed(model)
   const where = resolveAuthIn(model)
   const name = resolveAuthName(model)
   const basic = isHttpBasicAuth(model)
 
-  // FOLDER NESTING. The java target is FLAT: Main opens no `src` folder at
-  // all, and the blanket `Copy({ from: 'tm/java' })` lands core/, utility/,
-  // feature/ and test/ straight at the target root (pom.xml declares
-  // `sourceDirectory` as the project base and includes `utility/**`). So
-  // `utility` is opened HERE — the same shape EntityBase_java uses for
-  // `entity` — and this component must be called from Main's TOP level,
-  // NOT from inside its `Folder({ name: 'core' })`. Nested there it would
-  // write core/utility/PrepareAuth.java, which javac would compile into
-  // the wrong package while Register.java kept calling the stale
-  // utility/PrepareAuth.java.
   Folder({ name: 'utility' }, () => {
     File({ name: 'PrepareAuth.' + target.ext }, () => {
       Content(render({ javapackage, active, where, name, basic }))
@@ -73,8 +39,6 @@ function render(spec: {
 }): string {
   const jp = spec.javapackage
 
-  // NO AUTH AT ALL. A public API's SDK gets a prepareAuth that is honest
-  // about it rather than one that deletes a header nobody set.
   if (!spec.active) {
     return `package ${jp}.utility;
 
@@ -224,22 +188,6 @@ ${place(spec.where)}
 }
 
 
-// THE CREDENTIAL NAME AS THIS TARGET SPELLS IT.
-//
-// java's header map is a plain case-sensitive LinkedHashMap and the whole
-// generated SDK — Fetcher, SecretsFeature, and the SDK's own PipelineTest —
-// spells the default header `authorization`, exactly as the deleted
-// tm/java/utility/PrepareAuth.java did. Keep that spelling when the model
-// resolves the DEFAULT, so a header-based java SDK behaves byte-for-byte as
-// it did before; a spec that names a header explicitly gets that name
-// verbatim, as do query parameters and cookies.
-// EVERY header name, not just the default. java's map is a case-sensitive
-// LinkedHashMap and the generated SDK spells headers lower-case throughout
-// — Fetcher, SecretsFeature and PipelineTest all do. Special-casing only
-// the literal 'Authorization' left a spec-named header like `X-API-Key`
-// capitalised here while the other nineteen targets lower-cased it, so the
-// same model produced a header java could not find and the rest could.
-// Query parameters and cookies stay verbatim: those ARE case-sensitive.
 function credName(where: string, name: string): string {
   return 'header' === where ? name.toLowerCase() : name
 }
@@ -252,9 +200,6 @@ function clear(where: string): string {
 
 function place(where: string): string {
   if ('query' === where) {
-    // NO PREFIX IN A QUERY STRING. `?token=Bearer%20abc` is not a thing any
-    // API reads; the prefix is a header convention and is dropped here
-    // deliberately rather than silently concatenated.
     return `      String apikeyVal = apikey instanceof String ? (String) apikey : "";
       // NO PREFIX IN A QUERY STRING: ?name=Bearer%20abc is not a thing any
       // API reads, so the auth.prefix option is dropped here deliberately.

package/project/.sdk/src/cmp/java/ReadmeEntity_java.ts

@@ -56,7 +56,6 @@ const ReadmeEntity = cmp(function ReadmeEntity(props: any) {
   publishedEntities.map((entity: any) => {
     const opnames = Object.keys(entity.op || {})
     const fields = entity.fields || []
-    // Model-driven id key: null when this entity has no id-like field.
     const idF = entityIdField(entity)
     // Sanitise the local variable name — a camelCased Java keyword gets a
     // trailing underscore (javaVarName) so the snippet compiles.