@voxgig/sdkgen 4.20.0 → 4.22.0

package/project/.sdk/tm/php/feature/secrets/sekreto/plugins/onepassword.php

@@ -1,6 +1,6 @@
 <?php
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (php/plugins/onepassword.php)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (php/plugins/onepassword.php)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/sekreto/plugins/runcmd.php

@@ -1,6 +1,6 @@
 <?php
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (php/plugins/runcmd.php)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (php/plugins/runcmd.php)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/sekreto/plugins/secretspec.php

@@ -1,6 +1,6 @@
 <?php
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (php/plugins/secretspec.php)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (php/plugins/secretspec.php)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/sekreto/plugins/sigv4.php

@@ -1,6 +1,6 @@
 <?php
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (php/plugins/sigv4.php)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (php/plugins/sigv4.php)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/sekreto/src/Addr.php

@@ -1,6 +1,6 @@
 <?php
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (php/src/Addr.php)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (php/src/Addr.php)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/feature/secrets/sekreto/src/Providers.php

@@ -1,6 +1,6 @@
 <?php
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (php/src/Providers.php)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (php/src/Providers.php)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**
@@ -22,7 +22,8 @@
  * THIS FILE REQUIRES NOTHING UNDER plugins/, OPENS NO SOCKET, SPAWNS NO
  * PROCESS AND HASHES NOTHING. What makes a kind built in is that it needs
  * nothing of the platform beyond reading a local file; every kind that
- * opens a socket, signs a request or spawns a process is a plugin under
+ * opens a socket, signs a request, spawns a process or does cryptography
+ * is a plugin under
  * plugins/, in its own file and its own namespace, required only by a
  * program that names it (docs/design/plugin-providers.md).
  *
@@ -319,4 +320,5 @@ const BUILTIN_KINDS = ['env', 'memory', 'dotenv', 'file'];
 const PLUGIN_KINDS = [
     'hashicorp', 'boru', 'awssecrets', 'awsparams', 'gcpsecrets',
     'azuresecrets', 'onepassword', 'doppler', 'infisical', 'secretspec',
+    'minivault',
 ];

package/project/.sdk/tm/php/feature/secrets/sekreto/src/Sekreto.php

@@ -1,6 +1,6 @@
 <?php
-// VENDORED: @voxgig/sekreto sdk-20260908-1556-0 (php/src/Sekreto.php)
-// Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/sekreto sdk-20260917-1242-0 (php/src/Sekreto.php)
+// Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/test/vendor/omni/Runner.php

@@ -1,6 +1,6 @@
 <?php
-// VENDORED: @voxgig/omni sdk-20260908-1556-0 (php/src/Runner.php)
-// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/omni sdk-20260917-1242-0 (php/src/Runner.php)
+// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/test/vendor/omni/Util.php

@@ -1,6 +1,6 @@
 <?php
-// VENDORED: @voxgig/omni sdk-20260908-1556-0 (php/src/Util.php)
-// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260911-2013-0]
+// VENDORED: @voxgig/omni sdk-20260917-1242-0 (php/src/Util.php)
+// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 
 /**

package/project/.sdk/tm/php/utility/MakeOptions.php

@@ -147,37 +147,21 @@ class ProjectNameMakeOptions
         $config = $ctx->config ?? [];
         $cfgopts = isset($config['options']) && is_array($config['options']) ? $config['options'] : [];
 
-        $optspec = [
-            'apikey' => '',
-            'secret' => '',
-            'base' => 'http://localhost:8000',
-            'prefix' => '',
-            'suffix' => '',
-            // `in` and `name` say WHERE the credential goes and under what
-            // name (header | query | cookie). The generated config carries
-            // them whenever the spec's scheme is not the header/Authorization
-            // default, and validate REJECTS a key this spec does not declare,
-            // so an apiKey-in-query SDK cannot be constructed without them.
-            // '' means "take what the spec said", which is what prepare_auth
-            // was generated from.
-            'auth' => ['prefix' => '', 'basic' => false, 'in' => '', 'name' => ''],
-            'headers' => ['`$CHILD`' => '`$STRING`'],
-            'allow' => [
-                'method' => 'GET,PUT,POST,PATCH,DELETE,OPTIONS',
-                'op' => 'create,update,load,list,remove,command,direct,graphql',
-            ],
-            'entity' => ['`$CHILD`' => ['`$OPEN`' => true, 'active' => false, 'alias' => (object)[]]],
-            'feature' => ['`$CHILD`' => ['`$OPEN`' => true, 'active' => false]],
-            'utility' => (object)[],
-            'system' => (object)[],
-            'test' => ['active' => false, 'entity' => ['`$OPEN`' => true]],
-            'clean' => ['keys' => 'key,token,id'],
-            // Server-variable values for a templated base URL (OpenAPI server
-            // variables): {name} placeholders in 'base' are substituted from
-            // this map at construction. Spec defaults arrive via the generated
-            // config; user values override them.
-            'server' => ['`$CHILD`' => ''],
-        ];
+        // THE OPTION SPEC IS GENERATED, NOT WRITTEN HERE.
+        //
+        // `ProjectNameSchema::optspec()` is built from the model:
+        // `main.kit.optspec` for the standard options, plus one entry per
+        // feature this target carries, taken from that feature's own
+        // `config.options` / `config.optspec`. Editing this file to add an
+        // option would put it back where it was — one of twenty
+        // hand-maintained copies of a schema nothing cross-checked — so add
+        // it to the model instead and every ported target validates it.
+        //
+        // Required explicitly rather than left to the classmap: the generated
+        // SDK is exercised (README examples, the compile checks) without a
+        // dumped composer autoload.
+        require_once __DIR__ . '/../schema.php';
+        $optspec = ProjectNameSchema::optspec();
 
         // Empty [] would be treated as a list and clobber the map under merge;
         // substitute an empty stdClass to preserve map semantics.

package/project/.sdk/tm/php/utility/struct/Struct.php

@@ -137,8 +137,16 @@ class Struct
 
     private const S_CM = ',';
 
+    // PATCH (optspec port, pending upstream fix): 'nil', not 'noval'.
+    //
+    // validate_TYPE resolves a sentinel by NAME — array_search(strtolower(
+    // substr($ref, 1)), TYPENAME) — so `$NIL` looked up 'nil', found nothing,
+    // and got a type bitmask of 0. `0 === ($t & 0)` is true for every value,
+    // so `$NIL` reported a type error against ANYTHING, including the absent
+    // value it exists to match. The slot is already T_noval's (1 << 30); only
+    // the spelling was wrong, and the ts reference spells it 'nil'.
     private const TYPENAME = [
-        'any', 'noval', 'boolean', 'decimal', 'integer', 'number', 'string',
+        'any', 'nil', 'boolean', 'decimal', 'integer', 'number', 'string',
         'function', 'symbol', 'null',
         '', '', '', '', '', '', '',
         'list', 'map', 'instance',
@@ -2626,16 +2634,42 @@ class Struct
 
                 $vstore = array_merge((array) $store, [self::S_DTOP => $inj->dparent]);
 
-                $vcurrent = self::validate($inj->dparent, $tval, (object) [
+                // PATCH (optspec port, pending upstream fix): read the trial
+                // errors back off the injdef.
+                //
+                // `$terrs` is a PHP array, so it was passed BY VALUE into the
+                // object literal below; validate wraps it, fills the wrapper,
+                // and unwraps onto `$injdef->errs` — never touching the local.
+                // `count($terrs)` was therefore always 0, so the first
+                // alternative always counted as a match and the "no match"
+                // branch below was unreachable. Keeping the injdef and reading
+                // its `errs` is what makes the loop actually try alternatives.
+                $topts = (object) [
                     'extra' => $vstore,
                     'errs' => $terrs,
                     'meta' => $inj->meta,
-                ]);
-
-                $inj->setval($vcurrent, 2);
+                ];
+
+                $vcurrent = self::validate($inj->dparent, $tval, $topts);
+
+                // PATCH (optspec port, pending upstream fix): the ancestor is
+                // -2, not 2.
+                //
+                // ts writes the trial result back with `setval(vcurrent, -2)`.
+                // A NEGATIVE ancestor takes setval's `< 2` branch, which
+                // writes to `inj->parent` — still the `[$ONE, ...]` LIST at
+                // this point, under a string key, so the write is a no-op and
+                // the node the first setval above already put in place is what
+                // survives. With `2` this wrote through to the GRANDPARENT
+                // instead, which both resurrected a key the data did not have
+                // (an optional `['`$ONE`', <spec>, '`$NIL`']` entry the caller
+                // omitted came back materialised) and, one level out, invented
+                // a synthetic entry named after its own parent carrying the
+                // trial store's `$TOP`.
+                $inj->setval($vcurrent, -2);
 
                 // Accept current value if there was a match
-                if (0 === count($terrs)) {
+                if (0 === count((array) $topts->errs)) {
                     return self::undef();
                 }
             }
@@ -2903,9 +2937,24 @@ class Struct
             '$ONE' => [self::class, 'validate_ONE'],
             '$EXACT' => [self::class, 'validate_EXACT'],
 
+        // PATCH (optspec port, pending upstream fix): $ERRS LAST, so it wins.
+        //
+        // This merged `$extra` last, so a caller-supplied store overrode
+        // `$ERRS`. validate_ONE builds its trial store from the OUTER store —
+        // which carries the outer `$ERRS` — so every alternative it tried
+        // recorded its failures into the CALLER's error list. A union whose
+        // first alternative did not match therefore reported that alternative's
+        // failure even when a later one matched, which made `['`$ONE`', X,
+        // '`$NIL`']` (the encoding for an optional value) reject an absent key,
+        // and `['`$ONE`', 0, '`$NUMBER`']` reject 0.002.
+        //
+        // The ts reference merges in the order { sentinels }, extra, { $ERRS },
+        // and says so: "NOTE: collecterrs parameter always wins." Same order
+        // here now.
+        ], (array) ($extra ?? []), [
             // A special top level value to collect errors.
             '$ERRS' => $errs,
-        ], (array) ($extra ?? []));
+        ]);
 
         $meta = is_object($injdef) && property_exists($injdef, 'meta') ? $injdef->meta : null;
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/__init__.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/__init__.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """The canonical surface `make parity` checks (AGENTS.md section 4).
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/capability.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/capability.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Capabilities (section 11.1).
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/catalog.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/catalog.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """The definition catalog (section 10.1).
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/config.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/config.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """The declarative document (section 9): normalization, and the ten-level
 precedence ladder.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/depend.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/depend.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Dependency cardinality, policy, and the restart graph (section 11.3).
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/env.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/env.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Environment overrides (section 9.5) - level 7 of the ladder.
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/export.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/export.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Exports (section 11).
 
@@ -19,7 +19,7 @@ from .ref import canon_ref, parse_ref
 
 
 def resolve_export(spec, exported):
-    cut = spec.find('/')
+    cut = spec.rfind('/')
     if -1 == cut:
         fail('plugin_export_ambiguous', 'export spec needs a key: ' + spec,
              {'spec': spec})

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/graph.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/graph.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Whole-graph resolution (section 11.4) - a phase, not a discovery.
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/host.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/host.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """The host: the lifecycle state machine (section 5), extension points
 (section 6), and resource capture (section 8).
@@ -129,6 +129,22 @@ class Inst:
         11)."""
         self._entry['exports'][key] = value
 
+    def capability(self, name):
+        """WHICH provider this instance is bound to for `name` (section
+        11.1), as a ref, or None when nothing provides it.
+
+        The host's own `capability` answers with the live providers
+        RANKED, not with the one THIS instance took; section 11.4's
+        reluctant rebinding makes those differ. A REF, not the instance:
+        every port can return a string and a corpus entry can assert on
+        one. The selection is REMEMBERED, because this is the instance
+        asking.
+        """
+        for req in requirements(self._entry['options']):
+            if req['name'] == name:
+                return self._host._chosen(self._entry, req, True)
+        return None
+
     def provides(self, prov):
         """What this instance can do for others (section 11.1)."""
         self._entry['provides'].append(prov)

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/order.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/order.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Ordering (section 7) - one rule, one place.
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/point.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/point.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Extension points (section 6). Three kinds, chosen because they are what
 the two existing systems actually needed, and no more.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/ref.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/ref.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Identity: name+tag, written `name$tag` (section 4).
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/resolve.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/resolve.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Dynamic resolution (section 10.2) - name to candidate module ids.
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/types.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/types.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Shared types. Deliberately small: the design's section 19 budget says
 the library owns naming, configuration, lifecycle, ordering, binding and

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/version.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/version.py)
-# Source: https://github.com/voxgig/plugin @ 91c4936555a4ce198669ca2c578b91e27e92e5ec  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Versions and ranges (section 11.2).
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/__init__.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/__init__.py)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # voxgig_sekreto - one interface for secrets, wherever they live.
 #

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/addr.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/addr.py)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The plaintext-address guard, in the core because it is pure - a handful
 # of string steps, no socket - and because it is on the spec: every port

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/aws.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/aws.py)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The aws plugin: Secrets Manager and SSM Parameter Store, with requests
 # SigV4-signed in-tree (sigv4.py, beside this file). Needs HTTPS and

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/azuresecrets.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/azuresecrets.py)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The azuresecrets plugin: Azure Key Vault. Needs HTTPS. A port of
 # typescript/plugins/azuresecrets.ts.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/boru.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/boru.py)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The boru plugin: a boru vault through its CLI, or over `boru vault
 # serve`. Needs a child process, or HTTPS in wire mode. A port of

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/doppler.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/doppler.py)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The doppler plugin: Doppler, one bulk download per config. Needs
 # HTTPS. A port of typescript/plugins/doppler.ts.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/gcpsecrets.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/gcpsecrets.py)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The gcpsecrets plugin: GCP Secret Manager. Needs HTTPS. A port of
 # typescript/plugins/gcpsecrets.ts.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/hashicorp.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/hashicorp.py)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The hashicorp plugin: HashiCorp Vault, and OpenBao. Needs HTTPS, and
 # the filesystem for a kubernetes service-account JWT. A port of

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/httpjson.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/httpjson.py)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The HTTP half of every plugin that speaks to a store over the wire, in
 # one place and OUTSIDE the core: a chain of built-ins never imports this

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/infisical.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/infisical.py)
-# Source: https://github.com/voxgig/sekreto @ 1267ee2e5f49566bc92695bc9eb3a60ef4924998  [tag: sdk-20260911-2013-0]
+# Source: https://github.com/voxgig/sekreto @ 108c4a914bee7b6534c30d1c68c25cd1b9377696  [tag: sdk-20260917-1242-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The infisical plugin: Infisical. Needs HTTPS. A port of
 # typescript/plugins/infisical.ts.