@voxgig/sdkgen 4.8.3 → 4.9.0

package/bin/voxgig-sdkgen

@@ -8,7 +8,7 @@ const { Shape, One, Skip } = require('shape')
 
 const { SdkGen } = require('../dist/sdkgen.js')
 
-const VERSION = '4.8.3'
+const VERSION = '4.9.0'
 const KONSOLE = console
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voxgig/sdkgen",
-  "version": "4.8.3",
+  "version": "4.9.0",
   "main": "dist/sdkgen.js",
   "type": "commonjs",
   "engines": {

package/project/.sdk/model/target/zig.aon

@@ -8,6 +8,15 @@ main: kit: target: zig: {
   base: 'BASE'
   srcfeature: false
 
+  # Files earlier toolchains generated that this target has RETIRED
+  # (vendor-tag rollout): the hand-written struct runner, whose engine half
+  # AND assertion half are now the vendored omni port driven through
+  # test/omniresolver.zig. `doctor` reports leftovers; `doctor prune`
+  # deletes them.
+  superseded: [
+    'test/struct_runner.zig'
+  ]
+
   # The vendored voxgig struct port is in-tree (utility/voxgigstruct) — Zig
   # has no package registry to depend on, so there are no external deps.
   deps: &: {

package/project/.sdk/src/cmp/zig/Package_zig.ts

@@ -12,7 +12,7 @@ import type {
 } from '@voxgig/apidef'
 
 
-import { zigModuleName } from './utility_zig'
+import { zigModuleName, zigPackageFingerprint } from './utility_zig'
 
 
 // build.zig.zon — the Zig package manifest. Zig has no central package
@@ -24,16 +24,19 @@ import { zigModuleName } from './utility_zig'
 //
 // The `.paths` allow-list mirrors the (registry-less) template: it only
 // matters when packaging for a registry, which zig does not do, so it is kept
-// stable. `.name` is a plain string here rather than the newer enum-literal +
-// fingerprint form.
+// stable.
 //
-// TOOLCHAIN PIN: the string form REQUIRES zig <= 0.13. Zig 0.14 rejects it
-// outright — `build.zig.zon:2:13: error: expected enum literal` — so the
-// generated SDK will not build at all on a newer toolchain. The consumer CI
-// job pins 0.13.0 to match (create-sdkgen
-// project/standard/.github/workflows/ci.yml). Moving to a newer zig means
-// changing BOTH: `.name = .${name}` plus a `.fingerprint` here, and the CI
-// pin there.
+// TOOLCHAIN: zig 0.16. `.name` is an ENUM LITERAL (`.solar_sdk`), and a
+// `.fingerprint` is required beside it. That pairing is what a modern zig
+// wants: 0.14 rejects the older plain-string form outright —
+// `build.zig.zon:2:13: error: expected enum literal` — and 0.13 rejects the
+// enum-literal form, so the two cannot both be supported from one generator.
+// A move BACK to 0.13 would mean reverting both fields here and the CI pin in
+// create-sdkgen project/standard/.github/workflows/ci.yml together.
+//
+// The fingerprint is derived from the package name, not random, so
+// regenerating the same model does not rewrite this file — see
+// zigPackageFingerprint for why, and for what zig checks.
 const Package = cmp(async function Package(props: any) {
   const ctx$ = props.ctx$
   const target = props.target
@@ -43,8 +46,9 @@ const Package = cmp(async function Package(props: any) {
 
   File({ name: 'build.zig.zon' }, () => {
     Content(`.{
-    .name = "${name}",
+    .name = .${name},
     .version = "${packageVersion(model, target.name)}",
+    .fingerprint = ${zigPackageFingerprint(name)},
     .dependencies = .{},
     .paths = .{
         "src",

package/project/.sdk/src/cmp/zig/fragment/Entity.fragment.zig

@@ -231,9 +231,9 @@ pub const EntyClass = struct {
         if (data == .array) {
             return data.array.data.items;
         } else if (!h.is_noval(data)) {
-            var out = std.ArrayList(Value).init(h.A());
-            out.append(data) catch {};
-            return out.toOwnedSlice() catch &.{};
+            var out: std.ArrayList(Value) = .empty;
+            out.append(h.A(), data) catch {};
+            return out.toOwnedSlice(h.A()) catch &.{};
         }
         return &.{};
     }

package/project/.sdk/src/cmp/zig/fragment/EntityListOp.fragment.zig

@@ -16,18 +16,18 @@ pub fn list(self: *EntyClass, reqmatch: Value, ctrl: Value) EntListResult {
     // `list` resolves to one ENTITY per record. make_result cannot build them
     // here — it works in Value, which has no slot for an entity — so the op
     // does, mirroring what the dynamic targets get from make_result.
-    var items = std.ArrayList(*EntyClass).init(h.A());
+    var items: std.ArrayList(*EntyClass) = .empty;
     if (out == .array) {
         for (out.array.data.items) |entry| {
             const ent = EntyClass.new(self.client, h.clone(self.entopts));
             if (entry == .object) {
                 _ = ent.data_impl(entry);
             }
-            items.append(ent) catch {};
+            items.append(h.A(), ent) catch {};
         }
     }
 
-    return EntListResult{ .ok = items.toOwnedSlice() catch &[_]*EntyClass{} };
+    return EntListResult{ .ok = items.toOwnedSlice(h.A()) catch &[_]*EntyClass{} };
 }
 
 fn list_post_done(self: *EntyClass, ctx: *Context) void {

package/project/.sdk/src/cmp/zig/fragment/Main.fragment.zig

@@ -45,7 +45,7 @@ pub const ProjectNameSDK = struct {
             .mode = "live",
             .options = h.vnull(),
             .sdkUtility = Utility.new(),
-            .features = std.ArrayList(Feature).init(h.A()),
+            .features = .empty,
             .rootctx = null,
         };
 
@@ -93,8 +93,8 @@ pub const ProjectNameSDK = struct {
         }
 
         // Initialize features.
-        var snap = std.ArrayList(Feature).init(h.A());
-        for (sdk.features.items) |f| snap.append(f) catch {};
+        var snap: std.ArrayList(Feature) = .empty;
+        for (sdk.features.items) |f| snap.append(h.A(), f) catch {};
         for (snap.items) |f| sdk.sdkUtility.feature_init(rootctx, f);
 
         sdk.sdkUtility.feature_hook(rootctx, "PostConstruct");

package/project/.sdk/src/cmp/zig/utility_zig.ts

@@ -26,8 +26,56 @@ function zigVarName(name: string): string {
 
 // The zig module identifier, e.g. solar_sdk (informational; the build module
 // is named "sdk").
+//
+// It is also the `.name` of build.zig.zon, which zig 0.16 reads as an enum
+// literal and requires to be a BARE identifier — `.@"2fa_sdk"` is rejected as
+// firmly as `.2fa_sdk` is — so a model name starting with a digit is given a
+// leading underscore. Nothing else in the target derives an identifier from
+// this, and the alternative for such a model is a package that does not build.
 function zigModuleName(model: any): string {
-  return `${model.name}_sdk`.toLowerCase().replace(/[^a-z0-9_]/g, '_')
+  const name = `${model.name}_sdk`.toLowerCase().replace(/[^a-z0-9_]/g, '_')
+  return /^[0-9]/.test(name) ? '_' + name : name
+}
+
+
+// The `.fingerprint` zig 0.14+ requires in build.zig.zon, as a 0x-prefixed
+// 16-digit hex literal.
+//
+// Zig reads the field as a packed struct of two u32s: the LOW half is a free
+// `id`, and the HIGH half is a `checksum` that must equal the CRC-32 (IEEE, as
+// zlib computes it) of the package name. Get the checksum wrong and zig
+// refuses to build, printing the value it wanted; get it right and any id in
+// [1, 0xfffffffe] is accepted.
+//
+// The id exists so a fork can be told apart from what it forked. A generated
+// SDK gets a DERIVED one — FNV-1a over the same name — rather than a random
+// one, because this file is regenerated on every run: a random id would
+// rewrite build.zig.zon each time and churn the consumer's diff, and a package
+// that changes identity between two generations of the same model is worse
+// than one that shares an id with a fork of itself. Distinct names still get
+// distinct ids.
+function zigPackageFingerprint(name: string): string {
+  // CRC-32 (IEEE 802.3, reflected, poly 0xEDB88320) — the one zig's
+  // std.hash.Crc32 and zlib both compute.
+  let crc = 0xffffffff
+  for (let i = 0; i < name.length; i++) {
+    crc ^= name.charCodeAt(i) & 0xff
+    for (let b = 0; b < 8; b++) {
+      crc = (crc >>> 1) ^ (0xedb88320 & -(crc & 1))
+    }
+  }
+  const checksum = (crc ^ 0xffffffff) >>> 0
+
+  // FNV-1a 32-bit, folded into the 1..0xfffffffe zig accepts.
+  let fnv = 0x811c9dc5
+  for (let i = 0; i < name.length; i++) {
+    fnv ^= name.charCodeAt(i) & 0xff
+    fnv = Math.imul(fnv, 0x01000193) >>> 0
+  }
+  const id = (fnv % 0xfffffffd) + 1
+
+  const hex = (n: number) => n.toString(16).padStart(8, '0')
+  return `0x${hex(checksum)}${hex(id)}`
 }
 
 
@@ -142,5 +190,6 @@ export {
   clean,
   formatZigValue,
   zigModuleName,
+  zigPackageFingerprint,
   zigVarName,
 }

package/project/.sdk/tm/c/tests/vendor/omni/json.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (c/src/json.c)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (c/src/json.c)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The omni JSON value model, pool allocator, parser and printer.
  *

package/project/.sdk/tm/c/tests/vendor/omni/omni.h

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (c/src/omni.h)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (c/src/omni.h)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Omni: the shared multi-language test runner (C port).
  *

package/project/.sdk/tm/c/tests/vendor/omni/runner.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (c/src/runner.c)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (c/src/runner.c)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Omni: the shared multi-language test runner (C port).
  *

package/project/.sdk/tm/c/tests/vendor/omni/util.c

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (c/src/util.c)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (c/src/util.c)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Omni internal JSON utilities: clone, path lookup, deep equality, and
  * the regex bridge.

package/project/.sdk/tm/clojure/test/vendor/omni/voxgig/omni/json.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/omni sdk-20260904-1610-0 (clojure/src/voxgig/omni/json.clj)
-;; Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+;; VENDORED: @voxgig/omni sdk-20260907-0029-0 (clojure/src/voxgig/omni/json.clj)
+;; Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 ;; The omni JSON parser.
 ;;

package/project/.sdk/tm/clojure/test/vendor/omni/voxgig/omni/runner.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/omni sdk-20260904-1610-0 (clojure/src/voxgig/omni/runner.clj)
-;; Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+;; VENDORED: @voxgig/omni sdk-20260907-0029-0 (clojure/src/voxgig/omni/runner.clj)
+;; Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 ;; Omni: the shared multi-language test runner (Clojure port).
 ;;

package/project/.sdk/tm/clojure/test/vendor/omni/voxgig/omni/util.clj

@@ -1,5 +1,5 @@
-;; VENDORED: @voxgig/omni sdk-20260904-1610-0 (clojure/src/voxgig/omni/util.clj)
-;; Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+;; VENDORED: @voxgig/omni sdk-20260907-0029-0 (clojure/src/voxgig/omni/util.clj)
+;; Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 ;; License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 ;; Omni internal JSON utilities.
 ;;

package/project/.sdk/tm/cpp/test/vendor/omni/json.hpp

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (cpp/src/json.hpp)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (cpp/src/json.hpp)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // The omni JSON value model, with a small in-tree parser.
 //

package/project/.sdk/tm/cpp/test/vendor/omni/omni.hpp

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (cpp/src/omni.hpp)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (cpp/src/omni.hpp)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni: the shared multi-language test runner (C++ port).
 //

package/project/.sdk/tm/cpp/test/vendor/omni/util.hpp

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (cpp/src/util.hpp)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (cpp/src/util.hpp)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni internal JSON utilities.
 //

package/project/.sdk/tm/csharp/test/vendor/omni/Runner.cs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (csharp/src/Runner.cs)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (csharp/src/Runner.cs)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni: the shared multi-language test runner (C# port).
 //

package/project/.sdk/tm/csharp/test/vendor/omni/Util.cs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (csharp/src/Util.cs)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (csharp/src/Util.cs)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni internal JSON utilities.
 //

package/project/.sdk/tm/csharp/utility/struct/Struct.cs

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/struct 0.1.1 (csharp/Struct.cs)
-// Source: https://github.com/voxgig/struct @ 2caf7f448f265144c18dd6fab6ba270a7f3bca07  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/struct @ adda9521c828147573df5a8878408a3f2193ddf4  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Copyright (c) 2025-2026 Voxgig Ltd. MIT LICENSE. */
 

package/project/.sdk/tm/dart/test/vendor/omni/omni.dart

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (dart/lib/omni.dart)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (dart/lib/omni.dart)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // voxgig_omni - shared multi-language test runner.
 

package/project/.sdk/tm/dart/test/vendor/omni/runner.dart

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (dart/lib/runner.dart)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (dart/lib/runner.dart)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni: the shared multi-language test runner (Dart port).
 //

package/project/.sdk/tm/dart/test/vendor/omni/util.dart

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (dart/lib/util.dart)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (dart/lib/util.dart)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni internal JSON utilities.
 //

package/project/.sdk/tm/elixir/test/vendor/omni/json.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/omni sdk-20260904-1610-0 (elixir/lib/json.ex)
-# Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+# VENDORED: @voxgig/omni sdk-20260907-0029-0 (elixir/lib/json.ex)
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The omni JSON parser.
 #

package/project/.sdk/tm/elixir/test/vendor/omni/runner.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/omni sdk-20260904-1610-0 (elixir/lib/runner.ex)
-# Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+# VENDORED: @voxgig/omni sdk-20260907-0029-0 (elixir/lib/runner.ex)
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Omni: the shared multi-language test runner (Elixir port).
 #

package/project/.sdk/tm/elixir/test/vendor/omni/util.ex

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/omni sdk-20260904-1610-0 (elixir/lib/util.ex)
-# Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+# VENDORED: @voxgig/omni sdk-20260907-0029-0 (elixir/lib/util.ex)
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Omni internal JSON utilities.
 #

package/project/.sdk/tm/go/feature/secrets/plugin/capability.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/capability.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Capabilities (§11.1).
  *

package/project/.sdk/tm/go/feature/secrets/plugin/catalog.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/catalog.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The definition catalog (§10.1).
  *

package/project/.sdk/tm/go/feature/secrets/plugin/config.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/config.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The declarative document (§9): normalization, and the ten-level
  * precedence ladder.

package/project/.sdk/tm/go/feature/secrets/plugin/depend.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/depend.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Dependency cardinality, policy, and the restart graph (§11.3).
  *

package/project/.sdk/tm/go/feature/secrets/plugin/env.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/env.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Environment overrides (§9.5) — level 7 of the ladder.
  *

package/project/.sdk/tm/go/feature/secrets/plugin/export.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/export.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Exports (§11).
  *

package/project/.sdk/tm/go/feature/secrets/plugin/graph.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/graph.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Whole-graph resolution (§11.4) — a phase, not a discovery.
  *

package/project/.sdk/tm/go/feature/secrets/plugin/host.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/host.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The host: the lifecycle state machine (§5), extension points (§6), and
  * resource capture (§8).

package/project/.sdk/tm/go/feature/secrets/plugin/order.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/order.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Ordering (§7) — one rule, one place.
  *

package/project/.sdk/tm/go/feature/secrets/plugin/point.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/point.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Extension points (§6). Three kinds, chosen because they are what the
  * two existing systems actually needed, and no more.

package/project/.sdk/tm/go/feature/secrets/plugin/ref.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/ref.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Identity: name+tag, written `name$tag` (§4).
  *

package/project/.sdk/tm/go/feature/secrets/plugin/resolve.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/resolve.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Dynamic resolution (§10.2) — name to candidate module ids.
  *

package/project/.sdk/tm/go/feature/secrets/plugin/types.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/types.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Shared types. Deliberately small: the design's §19 budget says the
  * library owns naming, configuration, lifecycle, ordering, binding and

package/project/.sdk/tm/go/feature/secrets/plugin/util.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/util.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The handful of helpers the port needs that the canonical gets from
  * JavaScript for free: sorted map keys (Object.keys(x).sort()), a

package/project/.sdk/tm/go/feature/secrets/plugin/version.go

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (go/plugin/version.go)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Versions and ranges (§11.2).
  *

package/project/.sdk/tm/go/feature/secrets/plugins/aws/aws.go

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260904-1610-0 (go/plugins/aws/aws.go)
-// Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/sekreto sdk-20260907-0029-0 (go/plugins/aws/aws.go)
+// Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // The aws plugin: Secrets Manager and SSM Parameter Store, with requests
 // SigV4-signed in-tree (sigv4.go, beside this file). Needs HTTPS and
@@ -155,7 +155,7 @@ func (provider *SecretsProvider) Lookup(name string) (string, bool, error) {
 		return "", false, err
 	}
 
-	payload, _ := json.Marshal(struct {
+	payload, _ := sekreto.WriteJSON(struct {
 		SecretID string `json:"SecretId"`
 	}{SecretID: ref.Path})
 
@@ -236,7 +236,7 @@ func (provider *ParamsProvider) Lookup(name string) (string, bool, error) {
 		return "", false, err
 	}
 
-	payload, _ := json.Marshal(struct {
+	payload, _ := sekreto.WriteJSON(struct {
 		Name           string `json:"Name"`
 		WithDecryption bool   `json:"WithDecryption"`
 	}{Name: param, WithDecryption: true})

package/project/.sdk/tm/go/feature/secrets/plugins/aws/sigv4.go

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260904-1610-0 (go/plugins/aws/sigv4.go)
-// Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/sekreto sdk-20260907-0029-0 (go/plugins/aws/sigv4.go)
+// Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // AWS Signature Version 4, hand-rolled.
 //

package/project/.sdk/tm/go/feature/secrets/plugins/azuresecrets/azuresecrets.go

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260904-1610-0 (go/plugins/azuresecrets/azuresecrets.go)
-// Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/sekreto sdk-20260907-0029-0 (go/plugins/azuresecrets/azuresecrets.go)
+// Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // The azuresecrets plugin: Azure Key Vault. Needs HTTPS. A port of
 // typescript/plugins/azuresecrets.ts.

package/project/.sdk/tm/go/feature/secrets/plugins/boru/boru.go

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260904-1610-0 (go/plugins/boru/boru.go)
-// Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/sekreto sdk-20260907-0029-0 (go/plugins/boru/boru.go)
+// Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // The boru plugin: a boru vault through its CLI, or over `boru vault
 // serve`. Needs a child process, or HTTPS in wire mode. A port of

package/project/.sdk/tm/go/feature/secrets/plugins/doppler/doppler.go

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260904-1610-0 (go/plugins/doppler/doppler.go)
-// Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/sekreto sdk-20260907-0029-0 (go/plugins/doppler/doppler.go)
+// Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // The doppler plugin: Doppler, one bulk download per config. Needs
 // HTTPS. A port of typescript/plugins/doppler.ts.

package/project/.sdk/tm/go/feature/secrets/plugins/gcpsecrets/gcpsecrets.go

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/sekreto sdk-20260904-1610-0 (go/plugins/gcpsecrets/gcpsecrets.go)
-// Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/sekreto sdk-20260907-0029-0 (go/plugins/gcpsecrets/gcpsecrets.go)
+// Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // The gcpsecrets plugin: GCP Secret Manager. Needs HTTPS. A port of
 // typescript/plugins/gcpsecrets.ts.