npm - @voxgig/sdkgen - Versions diffs - 4.20.0 → 4.22.0 - Mend

@voxgig/sdkgen 4.20.0 → 4.22.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1561) hide show

package/project/.sdk/tm/csharp/feature/secrets/plugins/OnePassword.cs CHANGED Viewed

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/plugins/OnePassword.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/plugins/OnePassword.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // 1Password Connect, as a voxgig/plugin definition.
 //

package/project/.sdk/tm/csharp/feature/secrets/plugins/SecretSpec.cs CHANGED Viewed

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/plugins/SecretSpec.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/plugins/SecretSpec.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // SecretSpec, as a voxgig/plugin definition.
 //

package/project/.sdk/tm/csharp/feature/secrets/plugins/Sigv4.cs CHANGED Viewed

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/plugins/Sigv4.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/plugins/Sigv4.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // AWS Signature Version 4, hand-rolled.
 //

package/project/.sdk/tm/csharp/feature/secrets/sekreto/Json.cs CHANGED Viewed

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/src/Json.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/src/Json.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Just enough JSON for sekreto.
 //

package/project/.sdk/tm/csharp/feature/secrets/sekreto/Providers.cs CHANGED Viewed

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/src/Providers.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/src/Providers.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // The four BUILT-IN provider kinds, and what a provider is.
 //
@@ -498,6 +498,7 @@ namespace Voxgig.Sekreto
         {
             "hashicorp", "boru", "awssecrets", "awsparams", "gcpsecrets",
             "azuresecrets", "onepassword", "doppler", "infisical", "secretspec",
+            "minivault",
         };
     }
 }

package/project/.sdk/tm/csharp/feature/secrets/sekreto/Sekreto.cs CHANGED Viewed

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (csharp/src/Sekreto.cs)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (csharp/src/Sekreto.cs)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // sekreto: one interface for secrets, wherever they live.
 //

package/project/.sdk/tm/csharp/src/feature/validate/.gitkeep ADDED Viewed

File without changes

package/project/.sdk/tm/csharp/test/vendor/omni/Runner.cs CHANGED Viewed

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260908-1556-0 (csharp/src/Runner.cs)
-// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/omni sdk-20260917-1242-0 (csharp/src/Runner.cs)
+// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni: the shared multi-language test runner (C# port).
 //

package/project/.sdk/tm/csharp/test/vendor/omni/Util.cs CHANGED Viewed

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260908-1556-0 (csharp/src/Util.cs)
-// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/omni sdk-20260917-1242-0 (csharp/src/Util.cs)
+// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni internal JSON utilities.
 //

package/project/.sdk/tm/csharp/utility/MakeOptions.cs CHANGED Viewed

@@ -164,91 +164,18 @@ public static partial class SdkUtility
             co is Dictionary<string, object?> cm
             ? cm : new Dictionary<string, object?>();
-        var optspec = new Dictionary<string, object?>
-        {
-            ["apikey"] = "",
-            ["secret"] = "",
-            ["base"] = "http://localhost:8000",
-            ["prefix"] = "",
-            ["suffix"] = "",
-            // `basic` and `secret`: HTTP Basic Auth needs a second credential
-            // and a flag to say the pair is Basic rather than a single bearer
-            // token.
-            //
-            // `in` and `name`: WHERE the credential goes and UNDER WHAT NAME.
-            // apidef resolves both from the spec's securityScheme into
-            // main.kit.info.security, and the generated config carries them
-            // whenever they differ from header/Authorization. This map is
-            // CLOSED - validate rejects any key it does not declare - so
-            // without these two an apiKey-in-query SDK fails to construct on
-            // its own config with "Unexpected keys at field auth: in, name".
-            // '' means "take what the spec said".
-            ["auth"] = new Dictionary<string, object?>
-            {
-                ["prefix"] = "",
-                ["basic"] = false,
-                ["in"] = "",
-                ["name"] = "",
-            },
-            ["headers"] = new Dictionary<string, object?>
-            {
-                ["`$CHILD`"] = "`$STRING`",
-            },
-            // OpenAPI server-variable defaults, carried by the generated
-            // config whenever the spec's server URL is templated. Accepted
-            // here so validation does not reject the SDK's own config; the
-            // {name} substitution into base is a separate concern.
-            ["server"] = new Dictionary<string, object?>
-            {
-                ["`$CHILD`"] = "",
-            },
-            ["allow"] = new Dictionary<string, object?>
-            {
-                ["method"] = "GET,PUT,POST,PATCH,DELETE,OPTIONS",
-                ["op"] = "create,update,load,list,remove,command,direct,graphql",
-            },
-            ["entity"] = new Dictionary<string, object?>
-            {
-                ["`$CHILD`"] = new Dictionary<string, object?>
-                {
-                    ["`$OPEN`"] = true,
-                    ["active"] = false,
-                    ["alias"] = new Dictionary<string, object?>(),
-                },
-            },
-            ["feature"] = new Dictionary<string, object?>
-            {
-                ["`$CHILD`"] = new Dictionary<string, object?>
-                {
-                    ["`$OPEN`"] = true,
-                    ["active"] = false,
-                },
-            },
-            ["utility"] = new Dictionary<string, object?>(),
-            // Feature INSTANCES supplied at construction (the `extend` seam
-            // the client constructor reads after the config-driven features):
-            // class instances, not data, so `$ANY` accepts them verbatim.
-            // Without this entry the seam is DEAD - validate REJECTS the
-            // unknown key ("Unexpected keys at field <root>: extend"), so a
-            // caller cannot hand in a feature the model did not activate,
-            // although the README documents the option. Ported from
-            // MakeOptionsUtility.ts / make_options.go / MakeOptions.java,
-            // which all carry it.
-            ["extend"] = "`$ANY`",
-            ["system"] = new Dictionary<string, object?>(),
-            ["test"] = new Dictionary<string, object?>
-            {
-                ["active"] = false,
-                ["entity"] = new Dictionary<string, object?>
-                {
-                    ["`$OPEN`"] = true,
-                },
-            },
-            ["clean"] = new Dictionary<string, object?>
-            {
-                ["keys"] = "key,token,id",
-            },
-        };
+        // THE OPTION SPEC IS GENERATED, NOT WRITTEN HERE.
+        //
+        // Built from the model: `main.kit.optspec` for the standard options,
+        // plus one entry per feature this target carries, from that feature's
+        // own `config.options` / `config.optspec`. Editing this file to add an
+        // option would put it back where it was - one of twenty
+        // hand-maintained copies of a schema nothing cross-checked - so add it
+        // to the model instead and every ported target validates it.
+        //
+        // Shared, not copied: MakeOptions validates AGAINST the spec and
+        // writes into the options, never into the spec.
+        var optspec = SdkSchema.Optspec;
         // Preserve system.fetch across merge/validate (delegates survive
         // Clone, but validation may reshape the system block).

package/project/.sdk/tm/csharp/utility/struct/Struct.cs CHANGED Viewed

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/struct 0.1.1 (csharp/Struct.cs)
-// Source: https://github.com/voxgig/struct @ abd93227e3295151f8dcd18597c3f3f2577af8b7  [tag: sdk-20260911-2013-0]
+// Source: https://github.com/voxgig/struct @ 3110e839a3f35b2fbdb047bf0c24f29d144027ea  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025-2026 Voxgig Ltd. MIT LICENSE. */
@@ -2952,14 +2952,35 @@ namespace Voxgig.Struct
                 return null;
             }
+            // PATCH (optspec port, pending upstream fix): re-validate NONE, not
+            // null, when the data has no value here.
+            //
+            // ts hands validate_ONE's nested call `inj.dparent`, which is
+            // `undefined` for a key the data does not have — so `$NIL` matches
+            // and the alternative succeeds. Here DParent is descended with
+            // GetProp, which answers null for a missing key, and Typify tells
+            // null (T_null) from NONE (T_noval) exactly as ts does: the nested
+            // `$NIL` therefore saw a null and REJECTED it. Every optional entry
+            // the caller omitted — `['`$ONE`', <spec>, '`$NIL`']`, which is how
+            // the generated option spec writes every feature — failed with
+            // "to be one of …, nil, but found no value", and a default client
+            // could not be constructed at all.
+            //
+            // The cost is that a STORED null under a $ONE now reads as absent,
+            // where ts would reject it. GetProp has already conflated the two
+            // by the time this runs, so that is not recoverable here; it is the
+            // same compromise the rb port's patch documents, and the permissive
+            // direction of it.
+            object? dval = inj.DParent ?? NONE;
             foreach (object? tval in tvals)
             {
                 var terrs = new List<object?>();
                 var vstore = (Dictionary<string, object?>)Merge(
                     new List<object?> { new Dictionary<string, object?>(), store }, 1)!;
-                vstore[S_DTOP] = inj.DParent;
+                vstore[S_DTOP] = dval;
-                object? vcurrent = Validate(inj.DParent, tval, new InjectState
+                object? vcurrent = Validate(dval, tval, new InjectState
                 {
                     Extra = vstore,
                     Errs = terrs,

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/capability.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/capability.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/capability.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Capability do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/catalog.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/catalog.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/catalog.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Catalog do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/config.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/config.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/config.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Config do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/depend.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/depend.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/depend.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Depend do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/env.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/env.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/env.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Env do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/error.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/error.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/error.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Error do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/export.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/export.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/export.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Export do
   @moduledoc """
@@ -23,8 +23,11 @@ defmodule Voxgig.Plugin.Export do
   never a corpus value, so it uses atom keys where the data does not.
   """
   def resolve_export(spec, exported) do
-    case :binary.match(spec, "/") do
-      :nomatch ->
+    # THE LAST `/`, not the first: a NAME may hold slashes (§4), a key may
+    # not. `:binary.matches` returns every hit, so the last one is the
+    # split; `:binary.match` returns only the first.
+    case List.last(:binary.matches(spec, "/")) do
+      nil ->
         Types.fail("plugin_export_ambiguous", "export spec needs a key: #{spec}",
                    %{"spec" => spec})

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/graph.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/graph.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/graph.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Graph do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/host.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/host.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/host.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Host do
   @moduledoc """
@@ -641,6 +641,17 @@ defmodule Voxgig.Plugin.Host do
   #
   # `remember` is false for the questions asked ABOUT an instance rather
   # than BY it: introspection must not create a binding.
+  @doc false
+  # The instance api's way onto `chosen`, which is private.
+  def instcapability(host, ref, name) do
+    Depend.requirements(field(host, ref, "options"))
+    |> Enum.find(fn req -> Types.get(req, "name") == name end)
+    |> case do
+      nil -> nil
+      req -> chosen(host, ref, req, true)
+    end
+  end
   defp chosen(host, ref, req, remember) do
     cands = providersof(host, req)
     name = Types.get(req, "name")

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/inst.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/inst.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/inst.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Inst do
   @moduledoc """
@@ -105,6 +105,19 @@ defmodule Voxgig.Plugin.Inst do
     Host.entry_update(host, ref, &Map.put(&1, "exports", Map.put(&1["exports"], key, value)))
   end
+  @doc """
+  WHICH provider this instance is bound to for `name` (section 11.1), as
+  a ref, or nil when nothing provides it.
+  The host's own `capability` answers with the live providers RANKED, not
+  with the one THIS instance took; section 11.4's reluctant rebinding
+  makes those differ. A REF, not the instance. The selection is
+  REMEMBERED, because this is the instance asking.
+  """
+  def capability(%__MODULE__{host: host, ref: ref}, name) do
+    Host.instcapability(host, ref, name)
+  end
   @doc "What this instance can do for others (section 11.1)."
   def provides(%__MODULE__{host: host, ref: ref}, prov) do
     Host.entry_update(host, ref, &Map.put(&1, "provides", &1["provides"] ++ [prov]))

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/json.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/json.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/json.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Json do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/order.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/order.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/order.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Order do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/point.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/point.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/point.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Point do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/ref.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/ref.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/ref.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Ref do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/resolve.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/resolve.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/resolve.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Resolve do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/types.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/types.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/types.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Types do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/version.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin/version.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin/version.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin.Version do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/plugin/voxgig_plugin.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/plugin sdk-20260908-1556-0 (elixir/lib/voxgig_plugin.ex)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/plugin sdk-20260917-1242-0 (elixir/lib/voxgig_plugin.ex)
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 defmodule Voxgig.Plugin do
   @moduledoc """

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/json.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/src/json.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/src/json.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Minimal JSON support for sekreto.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/aws.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/aws.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/aws.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # AWS Secrets Manager and SSM Parameter Store, as sekreto plugins.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/azuresecrets.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/azuresecrets.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/azuresecrets.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Azure Key Vault, as a sekreto plugin.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/boru.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/boru.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/boru.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # A boru vault, as a sekreto plugin.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/doppler.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/doppler.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/doppler.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Doppler, as a sekreto plugin.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/gcpsecrets.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/gcpsecrets.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/gcpsecrets.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # GCP Secret Manager, as a sekreto plugin.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/hashicorp.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/hashicorp.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/hashicorp.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # HashiCorp Vault, as a sekreto plugin.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/http.ex CHANGED Viewed

@@ -1,9 +1,9 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/http.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/http.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # One HTTP round-trip, framed in-tree over OTP's own sockets - and
 # OUTSIDE THE CORE, because a socket is what makes a kind a plugin. Seven
-# of the ten plugin kinds reach a vault over HTTPS; a chain of the four
+# of the eleven plugin kinds reach a vault over HTTPS; a chain of the four
 # built-ins never loads this module at all, and the BEAM never loads a
 # module nothing calls.
 #

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/httpjson.ex CHANGED Viewed

@@ -1,10 +1,10 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/httpjson.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/httpjson.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The round-trip every remote store shares - and OUTSIDE THE CORE with the
 # client under it.
 #
-# Eight of the ten plugin kinds read a vault over HTTPS, and all eight
+# Eight of the eleven plugin kinds read a vault over HTTPS, and all eight
 # want the same three things: one JSON round-trip whose failures are
 # never a miss, a login token renewed shortly before its lease runs out,
 # and a handful of conversions between a JSON value and the string a

package/project/.sdk/tm/elixir/lib/projectname/feature/secrets/sekreto/plugins/infisical.ex CHANGED Viewed

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (elixir/plugins/infisical.ex)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (elixir/plugins/infisical.ex)
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Infisical, as a sekreto plugin.
 #