@voxgig/sdkgen 4.29.0 → 4.30.1

package/project/.sdk/tm/go/test/omni/omni.go

@@ -1,17 +1,6 @@
-// VENDORED: @voxgig/omni sdk-20260917-1242-0 (go/omni.go)
-// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/omni sdk-20260925-1316-0 (go/omni.go)
+// Source: https://github.com/voxgig/omni @ b909ff51fc644e4955c850e30cc65e74be076df2  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
-// Omni: the shared multi-language test runner.
-//
-// A test spec is plain JSON. The same spec file drives the same tests in
-// every language that ships an omni port.
-//
-// Port of the canonical TypeScript implementation
-// (typescript/src/Runner.ts). Behaviour must match, case for case.
-//
-// Go has no exceptions, so a failing check is returned as an error rather
-// than thrown: `if err := runset(spec, subject); nil != err { t.Fatal(err) }`.
-
 package omni
 
 import (
@@ -44,14 +33,6 @@ type Provider struct {
 	Contextify func(val any) any
 	// Inject resolves references in client options against the store.
 	Inject func(options any, store any) any
-	// Errify builds the `match.err` base from the raised error, REPLACING
-	// the default Errify. A library whose errors carry a code can then
-	// assert on it with `match: {err: {code: "x"}}` instead of
-	// pattern-matching prose.
-	//
-	// `any`, not `map[string]any`, because the canonical is `(err) => Json`
-	// and `match.err` compares a scalar or a list as readily as a map. The
-	// built-in Errify happens to return a map; a hook is not held to that.
 	Errify func(err any) any
 }
 
@@ -81,10 +62,6 @@ func (runpack *RunPack) Set(name string) any {
 // Runner resolves one named section of a spec.
 type Runner func(name string, store any) (*RunPack, error)
 
-// SPECVERSION is the newest spec format version this runner understands. A
-// spec with no OMNI block is version 0: the original, lenient format,
-// frozen forever. Version 1 turns on strict entry validation (see
-// checkentry).
 const SPECVERSION = 1
 
 // CAPABILITIES are the capability strings this runner supports beyond the
@@ -662,15 +639,6 @@ func Match(flags Flags, index int, entry map[string]any, check any, base any) er
 
 		baseval := GetPath(cbase, path)
 
-		// The sentinels are tested BEFORE the identity check below. Otherwise
-		// a subject returning the literal string "__UNDEF__" satisfies an
-		// assertion that the key is absent - two mutually exclusive states
-		// passing one check. A sentinel that accepts its own literal is not a
-		// sentinel. (NULLMARK still accepts NULLMARK: under the default null
-		// flag a real null has already been normalised to it, so the two are
-		// genuinely indistinguishable here - that one needs a raw-value
-		// escape, not an ordering change.)
-
 		// Explicitly absent: satisfied only by a genuinely missing key, never
 		// by a present null (the distinction the sentinels exist to keep).
 		if UNDEFMARK == val {
@@ -702,8 +670,6 @@ func Match(flags Flags, index int, entry map[string]any, check any, base any) er
 			return val
 		}
 
-		// Identical values match. This sits below the sentinel branches on
-		// purpose - see the note above.
 		if DeepEqual(val, baseval) {
 			return val
 		}

package/project/.sdk/tm/go/test/omni/util.go

@@ -1,13 +1,6 @@
-// VENDORED: @voxgig/omni sdk-20260917-1242-0 (go/util.go)
-// Source: https://github.com/voxgig/omni @ b9e6085d185e174be84f9e6123be807ccd9fcb4e  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/omni sdk-20260925-1316-0 (go/util.go)
+// Source: https://github.com/voxgig/omni @ b909ff51fc644e4955c850e30cc65e74be076df2  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
-// Omni internal JSON utilities.
-//
-// This file is deliberately self-contained: the omni runner must be able to
-// test *any* library, including libraries that provide these same
-// operations, so it can never borrow them from the system under test.
-// Standard library only, by design.
-
 package omni
 
 import (
@@ -249,7 +242,6 @@ func DeepEqual(a any, b any) bool {
 	return reflect.DeepEqual(a, b)
 }
 
-// NumStr renders a number the same way in every port: 5.0 prints as 5.
 func NumStr(val float64) string {
 	if math.IsNaN(val) || math.IsInf(val, 0) {
 		return "null"
@@ -288,13 +280,6 @@ func Quote(val string) string {
 	return out.String()
 }
 
-// JsonStr is compact JSON text with map keys sorted, so that messages are
-// identical in every port regardless of local map ordering.
-//
-// GUARDED against cycles: this renders FAILURE MESSAGES, and an entry
-// carrying a live cyclic value recursed until the stack gave out. A cycle
-// renders as "[Circular]". The ancestor set tracks the CURRENT PATH only,
-// removed again on the way out, so a DAG still renders in full.
 func JsonStr(val any) string {
 	return jsonstrSeen(val, map[uintptr]bool{})
 }

package/project/.sdk/tm/go/test/pipeline_test.go

@@ -554,7 +554,10 @@ func TestPipelinePrepareAuth(t *testing.T) {
 		ctx := plCtx(client, utility, nil)
 		ctx.Spec = sdk.NewSpec(map[string]any{"step": "s"})
 		if cred != nil && seed != nil {
-			plAuthBag(ctx.Spec, cred.where)[cred.name] = seed
+			// Seed what prepareAuth would have written: cred.pair is the
+			// `<scheme>=` lead-in for a cookie and "" for a header or query,
+			// so an opaque seed is never mistaken for a stranger's cookie.
+			plAuthBag(ctx.Spec, cred.where)[cred.name] = cred.pair + seed.(string)
 		}
 		if _, err := utility.PrepareAuth(ctx); err != nil {
 			t.Fatalf("unexpected error: %v", err)

package/project/.sdk/tm/go/utility/struct/voxgigstruct.go

@@ -1,57 +1,8 @@
 // VENDORED: @voxgig/struct 0.1.0 (go/voxgigstruct.go)
-// Source: https://github.com/voxgig/struct @ 3110e839a3f35b2fbdb047bf0c24f29d144027ea  [tag: sdk-20260917-1242-0]
+// Source: https://github.com/voxgig/struct @ 3a42881b1d26c75ebbed9f1897f0ba94cf3cf780  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025 Voxgig Ltd. MIT LICENSE. */
 
-/* Voxgig Struct
- * =============
- *
- * Utility functions to manipulate in-memory JSON-like data
- * structures. These structures assumed to be composed of nested
- * "nodes", where a node is a list or map, and has named or indexed
- * fields.  The general design principle is "by-example". Transform
- * specifications mirror the desired output.  This implementation is
- * designed for porting to multiple language, and to be tolerant of
- * undefined values.
- *
- * Main utilities
- * - getpath: get the value at a key path deep inside an object.
- * - merge: merge multiple nodes, overriding values in earlier nodes.
- * - walk: walk a node tree, applying a function at each node and leaf.
- * - inject: inject values from a data store into a new data structure.
- * - transform: transform a data structure to an example structure.
- * - validate: valiate a data structure against a shape specification.
- *
- * Minor utilities
- * - isnode, islist, ismap, iskey, isfunc: identify value kinds.
- * - isempty: undefined values, or empty nodes.
- * - keysof: sorted list of node keys (ascending).
- * - haskey: true if key value is defined.
- * - clone: create a copy of a JSON-like data structure.
- * - items: list entries of a map or list as [key, value] pairs.
- * - getprop: safely get a property value by key.
- * - setprop: safely set a property value by key.
- * - stringify: human-friendly string version of a value.
- * - escre: escape a regular expresion string.
- * - escurl: escape a url.
- * - joinurl: join parts of a url, merging forward slashes.
- *
- * This set of functions and supporting utilities is designed to work
- * uniformly across many languages, meaning that some code that may be
- * functionally redundant in specific languages is still retained to
- * keep the code human comparable.
- *
- * NOTE: In this code JSON nulls are in general *not* considered the
- * same as the undefined value in the given language. However most
- * JSON parsers do use the undefined value to represent JSON
- * null. This is ambiguous as JSON null is a separate value, not an
- * undefined value. You should convert such values to a special value
- * to represent JSON null, if this ambiguity creates issues
- * (thankfully in most APIs, JSON nulls are not used). For example,
- * the unit tests use the string "__NULL__" where necessary.
- *
- */
-
 package voxgigstruct
 
 import (
@@ -133,13 +84,11 @@ const (
 	T_function = 1 << 24
 	T_symbol   = 1 << 23
 	T_null     = 1 << 22
-	// 7 bits reserved
 	T_list     = 1 << 14
 	T_map      = 1 << 13
 	T_instance = 1 << 12
-	// 4 bits reserved
-	T_scalar = 1 << 7
-	T_node   = 1 << 6
+	T_scalar   = 1 << 7
+	T_node     = 1 << 6
 )
 
 // TYPENAME maps bit position (via leading zeros count) to type name string.
@@ -170,18 +119,6 @@ type _sentinel struct{ name string }
 var SKIP = &_sentinel{"SKIP"}
 var DELETE = &_sentinel{"DELETE"}
 
-// NOVAL is Go's no-value: the third state canonical spells `undefined`.
-//
-// Go's value domain has nil and it has real values, and nothing between,
-// so `Typify(nil)` is T_scalar|T_null and T_noval was unreachable - this
-// port could not express `typify()` as distinct from `typify(null)`, which
-// the corpus pins as two different results (1073741824 vs 4194432). Every
-// other port models the distinction, natively or with a sentinel of its
-// own; NOVAL is Go's.
-//
-// It is recognised AHEAD of the reflect dispatch, in Typify, IsEmpty and
-// Clone. That ordering is the whole trick: a Go sentinel is a struct
-// pointer, so reflect would otherwise class it as a node.
 var NOVAL = &_sentinel{"NOVAL"}
 
 // Regex matching integer keys (including negative).
@@ -440,16 +377,6 @@ func IsKey(val any) bool {
 
 // Check for an "empty" value - nil, empty string, array, object.
 
-// denoval collapses NOVAL to nil. Canonical distinguishes undefined from
-// null in exactly one place - typify - and treats them alike everywhere
-// else (`null == val` in JavaScript is true for both). The functions below
-// follow canonical, so they take a value that has already been collapsed.
-//
-// The Group A readers - GetDef, GetProp, GetElem and (through GetProp)
-// HasKey - collapse it on the way in AND on the way out, so a NOVAL reached
-// as a container, a key, or a stored value reads as absent and yields the
-// alt. That is canonical: `getprop({a: undefined}, 'a', alt)` is alt, and
-// `haskey` is false, because `undefined == null` in JavaScript.
 func denoval(val any) any {
 	if NOVAL == val {
 		return nil
@@ -923,11 +850,6 @@ func Items(val any) [][2]any {
 		out := make([][2]any, 0, len(m))
 
 		keys := KeysOf(val)
-		// keys := make([]string, 0, len(m))
-		// for k := range m {
-		// 	keys = append(keys, k)
-		// }
-		// sort.Strings(keys)
 
 		for _, k := range keys {
 			out = append(out, [2]any{k, m[k]})
@@ -1040,15 +962,6 @@ func ReFindAll(pattern, input string) [][]string {
 	return regexp.MustCompile(pattern).FindAllStringSubmatch(input, -1)
 }
 
-// ReReplace replaces every match. The replacement supports Go's $0..$N
-// reference syntax (functionally equivalent to JS $&..$N).
-//
-// Note: Go's `regexp` (RE2) suppresses an empty match immediately
-// following a non-empty match at the same offset. This is RE2's
-// chosen convention and differs from ECMAScript / Python / Java etc:
-// `re_replace("a*", "abc", "X")` returns "XbXcX" here, "XXbXcX" on
-// PCRE/ECMA engines. The variance is inherent to the host regex
-// package; see REGEX_PATHOLOGICAL.md.
 func ReReplace(pattern, input, replacement string) string {
 	return regexp.MustCompile(pattern).ReplaceAllString(input, replacement)
 }
@@ -1206,9 +1119,6 @@ func Join(arr []any, args ...any) string {
 	return strings.Join(parts, sep)
 }
 
-// Output JSON in a "standard" format, with 2 space indents, each property on a new line,
-// and spaces after {[: and before ]}. Any "weird" values (NaN, etc) are output as null.
-// In general, the behavior of JavaScript's JSON.stringify(val,null,2) is followed.
 func Jsonify(val any, flags ...map[string]any) string {
 	str := S_null
 
@@ -1542,13 +1452,6 @@ func DelProp(parent any, key any) any {
 	return parent
 }
 
-// Safely set a property. Undefined arguments and invalid keys are ignored.
-// Returns the (possibly modified) parent.
-// If the value is undefined the key will be deleted from the parent.
-// If the parent is a list, and the key is negative, prepend the value.
-// NOTE: If the key is above the list size, append the value; below, prepend.
-// If the value is undefined, remove the list element at index key, and shift the
-// remaining elements down.  These rules avoid "holes" in the list.
 func SetProp(parent any, key any, newval any) any {
 	if !IsKey(key) {
 		return parent
@@ -1667,16 +1570,6 @@ func SetProp(parent any, key any, newval any) any {
 	return parent
 }
 
-// Walk a data structure depth first, applying functions to each value.
-// Walk(val, before) - before callback only (pre-order).
-// Walk(val, before, after) - both before and after callbacks.
-// Walk(val, before, after, maxdepth) - with maximum recursion depth.
-// Pass nil for before or after to skip that callback.
-// For backward compatibility, Walk(val, apply) applies the callback after children (post-order).
-//
-// The `path` passed to callbacks is a single mutable slice per depth, reused
-// across recursive calls. Callbacks must clone it (see WalkApply) if they want
-// to retain it beyond the invocation.
 func Walk(
 	val any,
 	apply WalkApply,
@@ -1987,13 +1880,6 @@ func Merge(val any, maxdepths ...int) any {
 	return out
 }
 
-// Get a value deep inside a node using a key path.  For example the
-// path `a.b` gets the value 1 from {a:{b:1}}.  The path can specified
-// as a dotted string, or a string array.  If the path starts with a
-// dot (or the first element is "), the path is considered local, and
-// resolved against the `current` argument, if defined.  Integer path
-// parts are used as array indexes.  The inj argument allows for
-// custom handling when called from `inject` or `transform`.
 func GetPath(store any, path any, injdefs ...*Injection) any {
 	var inj *Injection
 	if len(injdefs) > 0 {
@@ -2207,15 +2093,6 @@ func SetPath(store any, path any, val any, injdefs ...map[string]any) any {
 	}
 }
 
-// Inject store values into a string. Not a public utility - used by
-// `inject`.  Inject are marked with `path` where path is resolved
-// with getpath against the store or current (if defined)
-// arguments. See `getpath`.  Custom injection handling can be
-// provided by inj.handler (this is used for transform functions).
-// The path can also have the special syntax $NAME999 where NAME is
-// upper case letters only, and 999 is any digits, which are
-// discarded. This syntax specifies the name of a transform, and
-// optionally allows transforms to be ordered by alphanumeric sorting.
 func _injectStr(
 	val string,
 	store any,
@@ -2225,8 +2102,6 @@ func _injectStr(
 		return S_MT
 	}
 
-	// Pattern examples: "`a.b.c`", "`$NAME`", "`$NAME1`"
-	// fullRe := regexp.MustCompile("^`([^`]+)[0-9]*`$")
 	fullRe := regexp.MustCompile("^`(\\$[A-Z]+|[^`]*)[0-9]*`$")
 	matches := fullRe.FindStringSubmatch(val)
 
@@ -2294,10 +2169,6 @@ func _injectStr(
 	return out
 }
 
-// Inject values from a data store into a node recursively, resolving
-// paths against the store, or current if they are local. The modify
-// argument allows custom modification of the result. The inj
-// (Injection) argument is used to maintain recursive inj.
 func Inject(
 	val any,
 	store any,
@@ -2451,8 +2322,6 @@ func Inject(
 
 	inj.Val = val
 
-	// Original val reference may no longer be correct.
-	// This return value is only used as the top level result.
 	rval := GetProp(inj.Parent, S_DTOP)
 
 	return rval
@@ -2610,8 +2479,6 @@ var Transform_MERGE Injector = func(
 			return inj.Key
 		}
 
-		// Literals in the parent have precedence, but we still merge onto
-		// the parent object, so that node tree references are not changed.
 		mergeList := []any{inj.Parent}
 		mergeList = append(mergeList, list...)
 		mergeList = append(mergeList, Clone(inj.Parent))
@@ -2761,14 +2628,12 @@ var Transform_EACH Injector = func(
 
 	SetProp(target, tkey, rval)
 
-	// Prevent callee from damaging first list entry (since we are in val mode).
 	if len(rval) > 0 {
 		return rval[0]
 	}
 	return nil
 }
 
-// transform_PACK => `$PACK`
 var Transform_PACK Injector = func(
 	inj *Injection,
 	val any,
@@ -2950,9 +2815,6 @@ var Transform_PACK Injector = func(
 	return nil
 }
 
-// transform_APPLY => `$APPLY`
-// Reference original spec (enables recursive transformations).
-// Format: ['`$REF`', '`spec-path`']
 var Transform_REF Injector = func(
 	inj *Injection,
 	val any,
@@ -3138,9 +3000,6 @@ var Transform_APPLY Injector = func(
 	return out
 }
 
-// transform_FORMAT => `$FORMAT`
-// injectChild resolves a child value via injection, going up the injection chain
-// to get the correct data context.
 func InjectChild(child any, store any, inj *Injection) *Injection {
 	cinj := inj
 
@@ -3335,15 +3194,6 @@ var Transform_FORMAT Injector = func(
 // ---------------------------------------------------------------------
 // Transform function: top-level
 
-// Transform returns an error when the transform collected any - an unknown
-// `$FORMAT`, say - and the caller did not supply their own error collector.
-// Canonical TypeScript throws at exactly that point (StructUtility.ts:
-// `const generr = 0 < size(errs) && !collect`), and Validate in this port
-// already surfaces it the same way. Transform did not, so every error a
-// transform collected was silently dropped: `Transform(nil, ["`$FORMAT`",
-// "not-a-format", "a"])` returned nil rather than reporting the unknown
-// format. The corpus pins that behaviour in transform/format, a group this
-// port's own test runner used to skip in full.
 func Transform(
 	data any, // source data
 	spec any, // transform specification
@@ -3765,7 +3615,6 @@ var validate_CHILD Injector = func(
 	// List syntax
 	if inj.Mode == M_VAL {
 
-		// We expect 'parent' to be a slice of any, like ["`$CHILD`", childTemplate].
 		if !IsList(inj.Parent) {
 			inj.Errs.Append("Invalid $CHILD as value")
 			return nil
@@ -3808,7 +3657,6 @@ var validate_CHILD Injector = func(
 			newParent[i] = Clone(child)
 		}
 
-		// Replace parent with the new slice
 		if lr, ok := inj.Parent.(*ListRef[any]); ok {
 			lr.List = newParent
 		} else {
@@ -3850,7 +3698,6 @@ func init_validate_ONE() {
 	) any {
 		// Only operate in "val mode" (list mode).
 		if inj.Mode == M_VAL {
-			// Validate that parent is a list and we're at the first element
 			if !IsList(inj.Parent) || inj.KeyI != 0 {
 				inj.Errs.Append("The $ONE validator at field " +
 					Pathify(inj.Path.List, 1, 1) +
@@ -3858,7 +3705,6 @@ func init_validate_ONE() {
 				return nil
 			}
 
-			// Once we handle `$ONE`, we skip further iteration by setting KeyI to keys.length
 			inj.KeyI = len(inj.Keys.List)
 
 			// The parent is assumed to be a slice: ["`$ONE`", alt0, alt1, ...].
@@ -3867,38 +3713,19 @@ func init_validate_ONE() {
 				return nil
 			}
 
-			// PATCH (optspec port, pending upstream fix): use inj.setval, as
-			// the ts reference and the py/java ports do, instead of writing
-			// through a hand-held grandparent.
-			//
-			// setval DELETES on a nil value; SetProp deliberately keeps one
-			// ("Preserve nil values (like JS null)"). For a key the DATA does
-			// not have, the reference therefore removes the `[$ONE, ...]` node
-			// outright, while this set it to the data's nil and then, below,
-			// to whichever alternative matched. An OPTIONAL entry
-			// (`['`$ONE`', <spec>, '`$NIL`']`) that the caller omitted came
-			// back MATERIALISED, complete with the spec's `$OPEN` marker and a
-			// null for every option — which is exactly what that encoding
-			// exists to prevent. In an SDK's option spec that put an entry in
-			// `options.feature` for every feature the model declares, and the
-			// feature ADD ORDER is derived from those keys.
-			//
-			// Reassigning inj.Parent is part of the same divergence: the
-			// reference leaves it pointing at the `[$ONE, ...]` LIST, so the
-			// write-back below lands on a list under a string key and is a
-			// no-op — the data node, already replaced above, is what survives.
-
-			// Clean up structure by replacing [$ONE, ...] with current value
+			// setval, not a hand-held grandparent: setval DELETES on a nil
+			// value where SetProp keeps one, so an optional entry the caller
+			// omitted came back materialised.
 			inj.setval(inj.Dparent, 2)
 
-			// Adjust the path
+			// Path shortens for the message only: `modify` reads
+			// getprop(inj.Parent, inj.Key), and inj.Parent is still this list.
 			inj.Path.List = inj.Path.List[:len(inj.Path.List)-1]
-			inj.Key = inj.Path.List[len(inj.Path.List)-1]
 
-			// The shape alternatives are everything after the first element.
-			tvals := parentSlice[1:] // alt0, alt1, ...
+			// COPY, not a view: setval below rewrites the node this slice
+			// aliases, which rewrote the alternatives the error message reports.
+			tvals := append([]any(nil), parentSlice[1:]...) // alt0, alt1, ...
 
-			// Ensure we have at least one alternative
 			if len(tvals) == 0 {
 				inj.Errs.Append("The $ONE validator at field " +
 					Pathify(inj.Path.List, 1, 1) +
@@ -3918,16 +3745,13 @@ func init_validate_ONE() {
 				// Attempt validation of data with shape `tval`
 				vcurrent, err := Validate(inj.Dparent, tval, &Injection{Extra: vstore, Errs: terrs})
 
-				// PATCH (optspec port, pending upstream fix): see above.
 				inj.setval(vcurrent, -2)
 
-				// If no errors, we found a match
 				if err == nil && len(terrs.List) == 0 {
 					return nil
 				}
 			}
 
-			// If we get here, there was no match
 			mapped := make([]string, len(tvals))
 			for i, v := range tvals {
 				mapped[i] = Stringify(v)
@@ -3972,7 +3796,6 @@ func init_validate_EXACT() {
 	) any {
 		// Only operate in "val mode" (list mode).
 		if inj.Mode == M_VAL {
-			// Validate that parent is a list and we're at the first element
 			if !IsList(inj.Parent) || inj.KeyI != 0 {
 				inj.Errs.Append("The $EXACT validator at field " +
 					Pathify(inj.Path.List, 1, 1) +
@@ -3980,7 +3803,6 @@ func init_validate_EXACT() {
 				return nil
 			}
 
-			// Once we handle `$EXACT`, we skip further iteration by setting KeyI to keys.length
 			inj.KeyI = len(inj.Keys.List)
 
 			// The parent is assumed to be a slice: ["`$EXACT`", alt0, alt1, ...].
@@ -4004,7 +3826,6 @@ func init_validate_EXACT() {
 			// The exact values to match are everything after the first element.
 			tvals := parentSlice[1:] // alt0, alt1, ...
 
-			// Ensure we have at least one alternative
 			if len(tvals) == 0 {
 				inj.Errs.Append("The $EXACT validator at field " +
 					Pathify(inj.Path.List, 1, 1) +
@@ -4012,7 +3833,6 @@ func init_validate_EXACT() {
 				return nil
 			}
 
-			// See if we can find an exact value match
 			var currentStr *string
 			for _, tval := range tvals {
 				exactMatch := false
@@ -4040,7 +3860,6 @@ func init_validate_EXACT() {
 				}
 			}
 
-			// If we get here, there was no match
 			mapped := make([]string, len(tvals))
 			for i, v := range tvals {
 				mapped[i] = Stringify(v)
@@ -4334,8 +4153,6 @@ func Validate(
 	// Run the transformation with validation and _validatehandler
 	out := TransformModifyHandler(data, spec, store, validationFn, _validatehandler, errs, meta)
 
-	// Generate an error if we collected any errors and the caller didn't provide
-	// their own error collection
 	var err error
 	generr := 0 < len(errs.List) && collecterrs == nil
 	if generr {
@@ -4757,11 +4574,6 @@ func _invalidTypeMsg(path []string, needtype string, vt string, v any, whence ..
 	// Build the main error message
 	message := "Expected " + fieldPart + needtype + ", but found " + typePart + vs
 
-	// Uncomment to help debug validation errors
-	// if len(whence) > 0 {
-	//    message += " [" + whence[0] + "]"
-	// }
-
 	return message + "."
 }
 
@@ -4771,7 +4583,6 @@ func _invalidTypeMsg(path []string, needtype string, vt string, v any, whence ..
 // Floats are truncated to integers.
 // Booleans, objects, arrays, null, undefined all return empty string.
 
-// TODO: rename to _strKey
 func StrKey(key any) string {
 	if nil == key {
 		return S_MT
@@ -4922,7 +4733,6 @@ func _toFloat64(val any) (float64, error) {
 
 // _parseInt is a helper to convert a string to int safely.
 func _parseInt(s string) (int, error) {
-	// We'll do a very simple parse:
 	var x int
 	sign := 1
 	for i, c := range s {

package/project/.sdk/tm/java/feature/secrets/plugin/Capability.java

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (java/src/voxgig/plugin/Capability.java)
-// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/plugin sdk-20260925-1316-0 (java/src/voxgig/plugin/Capability.java)
+// Source: https://github.com/voxgig/plugin @ 43acbf266b0dbcf52e5ab5463d85c822da9cd234  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package JAVAPACKAGE.feature.secrets.plugin;
 

package/project/.sdk/tm/java/feature/secrets/plugin/Catalog.java

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (java/src/voxgig/plugin/Catalog.java)
-// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/plugin sdk-20260925-1316-0 (java/src/voxgig/plugin/Catalog.java)
+// Source: https://github.com/voxgig/plugin @ 43acbf266b0dbcf52e5ab5463d85c822da9cd234  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package JAVAPACKAGE.feature.secrets.plugin;
 

package/project/.sdk/tm/java/feature/secrets/plugin/Config.java

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (java/src/voxgig/plugin/Config.java)
-// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/plugin sdk-20260925-1316-0 (java/src/voxgig/plugin/Config.java)
+// Source: https://github.com/voxgig/plugin @ 43acbf266b0dbcf52e5ab5463d85c822da9cd234  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package JAVAPACKAGE.feature.secrets.plugin;
 

package/project/.sdk/tm/java/feature/secrets/plugin/Definition.java

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (java/src/voxgig/plugin/Definition.java)
-// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/plugin sdk-20260925-1316-0 (java/src/voxgig/plugin/Definition.java)
+// Source: https://github.com/voxgig/plugin @ 43acbf266b0dbcf52e5ab5463d85c822da9cd234  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package JAVAPACKAGE.feature.secrets.plugin;
 

package/project/.sdk/tm/java/feature/secrets/plugin/Depend.java

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (java/src/voxgig/plugin/Depend.java)
-// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/plugin sdk-20260925-1316-0 (java/src/voxgig/plugin/Depend.java)
+// Source: https://github.com/voxgig/plugin @ 43acbf266b0dbcf52e5ab5463d85c822da9cd234  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package JAVAPACKAGE.feature.secrets.plugin;
 

package/project/.sdk/tm/java/feature/secrets/plugin/Entry.java

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (java/src/voxgig/plugin/Entry.java)
-// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/plugin sdk-20260925-1316-0 (java/src/voxgig/plugin/Entry.java)
+// Source: https://github.com/voxgig/plugin @ 43acbf266b0dbcf52e5ab5463d85c822da9cd234  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package JAVAPACKAGE.feature.secrets.plugin;
 

package/project/.sdk/tm/java/feature/secrets/plugin/Env.java

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (java/src/voxgig/plugin/Env.java)
-// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/plugin sdk-20260925-1316-0 (java/src/voxgig/plugin/Env.java)
+// Source: https://github.com/voxgig/plugin @ 43acbf266b0dbcf52e5ab5463d85c822da9cd234  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package JAVAPACKAGE.feature.secrets.plugin;
 

package/project/.sdk/tm/java/feature/secrets/plugin/Export.java

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (java/src/voxgig/plugin/Export.java)
-// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/plugin sdk-20260925-1316-0 (java/src/voxgig/plugin/Export.java)
+// Source: https://github.com/voxgig/plugin @ 43acbf266b0dbcf52e5ab5463d85c822da9cd234  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package JAVAPACKAGE.feature.secrets.plugin;
 

package/project/.sdk/tm/java/feature/secrets/plugin/Graph.java

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/plugin sdk-20260917-1242-0 (java/src/voxgig/plugin/Graph.java)
-// Source: https://github.com/voxgig/plugin @ 721de3a1bb5ac879b5c118dd9fc55c474a8730c4  [tag: sdk-20260917-1242-0]
+// VENDORED: @voxgig/plugin sdk-20260925-1316-0 (java/src/voxgig/plugin/Graph.java)
+// Source: https://github.com/voxgig/plugin @ 43acbf266b0dbcf52e5ab5463d85c822da9cd234  [tag: sdk-20260925-1316-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 package JAVAPACKAGE.feature.secrets.plugin;