@voxgig/sdkgen 4.8.3 → 4.9.0

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/config.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/config.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """The declarative document (section 9): normalization, and the ten-level
 precedence ladder.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/depend.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/depend.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Dependency cardinality, policy, and the restart graph (section 11.3).
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/env.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/env.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Environment overrides (section 9.5) - level 7 of the ladder.
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/export.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/export.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Exports (section 11).
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/graph.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/graph.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Whole-graph resolution (section 11.4) - a phase, not a discovery.
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/host.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/host.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """The host: the lifecycle state machine (section 5), extension points
 (section 6), and resource capture (section 8).

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/order.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/order.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Ordering (section 7) - one rule, one place.
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/point.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/point.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Extension points (section 6). Three kinds, chosen because they are what
 the two existing systems actually needed, and no more.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/ref.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/ref.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Identity: name+tag, written `name$tag` (section 4).
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/resolve.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/resolve.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Dynamic resolution (section 10.2) - name to candidate module ids.
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/types.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/types.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Shared types. Deliberately small: the design's section 19 budget says
 the library owns naming, configuration, lifecycle, ordering, binding and

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_plugin/version.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/plugin 0.1.6 (python/voxgig_plugin/version.py)
-# Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Versions and ranges (section 11.2).
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/__init__.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/__init__.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # voxgig_sekreto - one interface for secrets, wherever they live.
 #
@@ -46,6 +46,7 @@ from .sekreto import (
     sekreto,
     validname,
     vaultref,
+    writejson,
 )
 
 __all__ = [
@@ -71,4 +72,5 @@ __all__ = [
     'sekreto',
     'validname',
     'vaultref',
+    'writejson',
 ]

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/addr.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/addr.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The plaintext-address guard, in the core because it is pure - a handful
 # of string steps, no socket - and because it is on the spec: every port

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/aws.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/aws.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The aws plugin: Secrets Manager and SSM Parameter Store, with requests
 # SigV4-signed in-tree (sigv4.py, beside this file). Needs HTTPS and
@@ -12,7 +12,7 @@ import os
 import time
 
 from ..addr import checkaddr
-from ..sekreto import SekretoError, awsparam, vaultref
+from ..sekreto import SekretoError, awsparam, vaultref, writejson
 from ..providers import Provider, providerplugin
 from .httpjson import fetchjson
 from .sigv4 import sigv4
@@ -56,7 +56,7 @@ def awscall(opts, service, target, payload):
     checkaddr(addr)
 
     url = addr.rstrip('/') + '/'
-    body = json.dumps(payload, separators=(',', ':'))
+    body = writejson(payload)
     headers = {
         'content-type': 'application/x-amz-json-1.1',
         'x-amz-target': target,

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/azuresecrets.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/azuresecrets.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The azuresecrets plugin: Azure Key Vault. Needs HTTPS. A port of
 # typescript/plugins/azuresecrets.ts.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/boru.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/boru.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The boru plugin: a boru vault through its CLI, or over `boru vault
 # serve`. Needs a child process, or HTTPS in wire mode. A port of

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/doppler.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/doppler.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The doppler plugin: Doppler, one bulk download per config. Needs
 # HTTPS. A port of typescript/plugins/doppler.ts.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/gcpsecrets.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/gcpsecrets.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The gcpsecrets plugin: GCP Secret Manager. Needs HTTPS. A port of
 # typescript/plugins/gcpsecrets.ts.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/hashicorp.py

@@ -1,14 +1,13 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/hashicorp.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The hashicorp plugin: HashiCorp Vault, and OpenBao. Needs HTTPS, and
 # the filesystem for a kubernetes service-account JWT. A port of
 # typescript/plugins/hashicorp.ts.
-import json
 import time
 
 from ..addr import checkaddr
-from ..sekreto import SekretoError, vaultref
+from ..sekreto import SekretoError, vaultref, writejson
 from ..providers import Provider, providerplugin
 from .httpjson import fetchjson, tonumber
 
@@ -89,7 +88,7 @@ class HashicorpProvider(Provider):
             )
 
         status, resbody = fetchjson(
-            'POST', url, self.baseheaders(), json.dumps(body, separators=(',', ':'))
+            'POST', url, self.baseheaders(), writejson(body)
         )
 
         got = ((resbody or {}).get('auth') or {}).get('client_token')

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/httpjson.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/httpjson.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The HTTP half of every plugin that speaks to a store over the wire, in
 # one place and OUTSIDE the core: a chain of built-ins never imports this

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/infisical.py

@@ -1,13 +1,12 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/infisical.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The infisical plugin: Infisical. Needs HTTPS. A port of
 # typescript/plugins/infisical.ts.
-import json
 import time
 
 from ..addr import checkaddr
-from ..sekreto import SekretoError, envkey
+from ..sekreto import SekretoError, envkey, writejson
 from ..providers import Provider, providerplugin
 from .httpjson import fetchjson, tonumber, urlpart
 
@@ -40,9 +39,8 @@ class InfisicalProvider(Provider):
             'POST',
             addr + '/api/v1/auth/universal-auth/login',
             {'content-type': 'application/json'},
-            json.dumps(
-                {'clientId': self.opts['clientid'], 'clientSecret': self.opts['clientsecret']},
-                separators=(',', ':'),
+            writejson(
+                {'clientId': self.opts['clientid'], 'clientSecret': self.opts['clientsecret']}
             ),
         )
 

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/onepassword.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/onepassword.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The onepassword plugin: 1Password, through a Connect server. Needs
 # HTTPS. A port of typescript/plugins/onepassword.ts.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/secretspec.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/secretspec.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # The secretspec plugin: SecretSpec, through its CLI. Needs a child
 # process. A port of typescript/plugins/secretspec.ts.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/plugins/sigv4.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/plugins/sigv4.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # AWS Signature Version 4, hand-rolled.
 #

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/providers.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/providers.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # What a provider is, how a provider kind becomes a voxgig/plugin
 # definition - and the four BUILT-IN kinds.

package/project/.sdk/tm/py/pkg/feature/secrets/voxgig_sekreto/sekreto.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/sekreto 0.2.0 (python/voxgig_sekreto/sekreto.py)
-# Source: https://github.com/voxgig/sekreto @ a5a00db6e6d3a1ddbdef7ac62e8a75be53a9e042  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/sekreto @ 86ba35a646e68a311bdece43cd5689369ca62e9d  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # sekreto: one interface for secrets, wherever they live.
 #
@@ -17,6 +17,7 @@
 # project handed it in through `plugins`. See
 # docs/design/plugin-providers.md.
 
+import json
 import re
 import types
 
@@ -36,6 +37,25 @@ class SekretoError(Exception):
 NAMEPART = re.compile(r'\A[a-z0-9_]+\Z')
 
 
+def writejson(value):
+    """JSON text for a value that LEAVES the process.
+
+    Two defaults have to be turned off. `ensure_ascii` escapes every
+    non-ASCII character as \\uXXXX, and `separators` otherwise puts a space
+    after each comma and colon. Neither is wrong, and both made python one
+    of only three ports whose bytes differed: the rest emit a secret's
+    accented or non-Latin characters as the UTF-8 they already are. The
+    writer's output is part of what the ports agree on - the CLI line is
+    compared byte for byte across all of them - so python matches the
+    rest.
+
+    Use this for a request body, a returned secret, the CLI's line. A
+    `json.dumps` whose text is parsed again without ever being emitted
+    needs no such care.
+    """
+    return json.dumps(value, ensure_ascii=False, separators=(',', ':'))
+
+
 def validname(name):
     """Is this a well-formed secret name?"""
     if not isinstance(name, str) or 0 == len(name):

package/project/.sdk/tm/py/pkg/utility/voxgig_struct/voxgig_struct.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/struct 0.1.1 (python/voxgig_struct/voxgig_struct.py)
-# Source: https://github.com/voxgig/struct @ 2caf7f448f265144c18dd6fab6ba270a7f3bca07  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/struct @ adda9521c828147573df5a8878408a3f2193ddf4  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Copyright (c) 2025 Voxgig Ltd. MIT LICENSE.
 #

package/project/.sdk/tm/py/test/voxgig_omni/__init__.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/omni 0.1.0 (python/voxgig_omni/__init__.py)
-# Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """voxgig_omni - shared multi-language test runner."""
 

package/project/.sdk/tm/py/test/voxgig_omni/runner.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/omni 0.1.0 (python/voxgig_omni/runner.py)
-# Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Omni: the shared multi-language test runner.
 
@@ -268,6 +268,13 @@ def errify(err: Any) -> dict:
         out['name'] = type(err).__name__
         out['message'] = str(err)
         return out
+    # An error-SHAPED plain map ({name, message, ...}) carries its fields
+    # into the base the same way an exception's attributes do - collapsing
+    # it to str(err) fails both the `err` check and every match.err leaf.
+    if isinstance(err, dict):
+        out = {'name': 'Error'}
+        out.update(err)
+        return out
     return {'name': 'Error', 'message': str(err)}
 
 
@@ -278,6 +285,8 @@ def errbase(err: Any, provider: Any) -> dict:
 
 
 def errmessage(err: Any) -> str:
+    if isinstance(err, dict) and isinstance(err.get('message'), str):
+        return err['message']
     return str(err)
 
 
@@ -378,7 +387,12 @@ def handleerror(
 
 def match(flags: dict, index: int, entry: dict, check: Any, base: Any) -> None:
     """Check that every leaf of `check` is present, and matches, in `base`."""
-    cbase = clone(base)
+    # Read the base DIRECTLY. The clone bought nothing - the walk below
+    # only reads, via getpath - and it blows the stack on a cyclic base. A
+    # port driving entries with live objects rather than pure JSON produces
+    # those routinely (voxgig/sdkgen's corpus matches a live client context
+    # whose root context reaches the client again).
+    cbase = base
 
     def at(path):
         return '<root>' if len(path) == 0 else pathify(path)

package/project/.sdk/tm/py/test/voxgig_omni/util.py

@@ -1,5 +1,5 @@
 # VENDORED: @voxgig/omni 0.1.0 (python/voxgig_omni/util.py)
-# Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 """Omni internal JSON utilities.
 
@@ -174,8 +174,15 @@ def _quote(val: str) -> str:
     return ''.join(out)
 
 
-def jsonstr(val: Any) -> str:
-    """Compact JSON text with map keys sorted, identical in every port."""
+def jsonstr(val: Any, seen: set | None = None) -> str:
+    """Compact JSON text with map keys sorted, identical in every port.
+
+    GUARDED against cycles: this renders FAILURE MESSAGES, and an entry
+    carrying a live cyclic value recursed until the stack gave out. A
+    cycle renders as "[Circular]". ``seen`` tracks the ANCESTORS of the
+    current value, removed again on the way out, so a DAG still renders
+    in full.
+    """
     if val is ABSENT:
         return 'undefined'
 
@@ -191,15 +198,23 @@ def jsonstr(val: Any) -> str:
     if isnum(val):
         return numstr(val)
 
-    if islist(val):
-        return '[' + ','.join(jsonstr(entry) for entry in val) + ']'
-
-    if ismap(val):
-        return (
-            '{'
-            + ','.join(_quote(str(key)) + ':' + jsonstr(val[key]) for key in sorted(val.keys()))
-            + '}'
-        )
+    if islist(val) or ismap(val):
+        seen = seen if seen is not None else set()
+        if id(val) in seen:
+            return '"[Circular]"'
+        seen.add(id(val))
+        if islist(val):
+            out = '[' + ','.join(jsonstr(entry, seen) for entry in val) + ']'
+        else:
+            out = (
+                '{'
+                + ','.join(
+                    _quote(str(key)) + ':' + jsonstr(val[key], seen)
+                    for key in sorted(val.keys()))
+                + '}'
+            )
+        seen.discard(id(val))
+        return out
 
     if callable(val):
         return '[Function ' + getattr(val, '__name__', '') + ']'

package/project/.sdk/tm/rb/test/vendor/omni/runner.rb

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/omni sdk-20260904-1610-0 (ruby/lib/voxgig_omni/runner.rb)
-# Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+# VENDORED: @voxgig/omni sdk-20260907-0029-0 (ruby/lib/voxgig_omni/runner.rb)
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Omni: the shared multi-language test runner.
 #

package/project/.sdk/tm/rb/test/vendor/omni/util.rb

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/omni sdk-20260904-1610-0 (ruby/lib/voxgig_omni/util.rb)
-# Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+# VENDORED: @voxgig/omni sdk-20260907-0029-0 (ruby/lib/voxgig_omni/util.rb)
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # Omni internal JSON utilities.
 #

package/project/.sdk/tm/rb/test/vendor/omni/voxgig_omni.rb

@@ -1,5 +1,5 @@
-# VENDORED: @voxgig/omni sdk-20260904-1610-0 (ruby/lib/voxgig_omni.rb)
-# Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+# VENDORED: @voxgig/omni sdk-20260907-0029-0 (ruby/lib/voxgig_omni.rb)
+# Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 # License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 # voxgig_omni - shared multi-language test runner.
 

package/project/.sdk/tm/rust/tests/vendor/omni/json.rs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (rust/src/json.rs)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (rust/src/json.rs)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 //! The omni JSON value model, with a small in-tree parser.
 //!

package/project/.sdk/tm/rust/tests/vendor/omni/mod.rs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (rust/src/lib.rs)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (rust/src/lib.rs)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 //! voxgig_omni - the shared multi-language test runner.
 //!

package/project/.sdk/tm/rust/tests/vendor/omni/regex.rs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (rust/src/regex.rs)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (rust/src/regex.rs)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 //! A small backtracking regex engine.
 //!

package/project/.sdk/tm/rust/tests/vendor/omni/runner.rs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (rust/src/runner.rs)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (rust/src/runner.rs)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 //! Omni: the shared multi-language test runner.
 //!

package/project/.sdk/tm/rust/tests/vendor/omni/util.rs

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (rust/src/util.rs)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (rust/src/util.rs)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 //! Omni internal JSON utilities.
 //!

package/project/.sdk/tm/scala/sdktest/vendor/omni/Json.scala

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (scala/src/Json.scala)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (scala/src/Json.scala)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // The omni JSON value model, with a small in-tree parser.
 //

package/project/.sdk/tm/scala/sdktest/vendor/omni/Runner.scala

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (scala/src/Runner.scala)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (scala/src/Runner.scala)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni: the shared multi-language test runner (Scala port).
 //

package/project/.sdk/tm/scala/sdktest/vendor/omni/Util.scala

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (scala/src/Util.scala)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (scala/src/Util.scala)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni internal JSON utilities.
 //

package/project/.sdk/tm/swift/Tests/vendor/omni/Json.swift

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (swift/Sources/Omni/Json.swift)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (swift/Sources/Omni/Json.swift)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // The omni JSON value model, with a small in-tree parser.
 //

package/project/.sdk/tm/swift/Tests/vendor/omni/Runner.swift

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (swift/Sources/Omni/Runner.swift)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (swift/Sources/Omni/Runner.swift)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni: the shared multi-language test runner (Swift port).
 //

package/project/.sdk/tm/swift/Tests/vendor/omni/Util.swift

@@ -1,5 +1,5 @@
-// VENDORED: @voxgig/omni sdk-20260904-1610-0 (swift/Sources/Omni/Util.swift)
-// Source: https://github.com/voxgig/omni @ 8c3e1b573a8d35796f7fc45e3226b977023cabf7  [tag: sdk-20260904-1610-0]
+// VENDORED: @voxgig/omni sdk-20260907-0029-0 (swift/Sources/Omni/Util.swift)
+// Source: https://github.com/voxgig/omni @ 274708cc2d12b21707d975543953f845f8444be0  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 // Omni internal JSON utilities.
 //

package/project/.sdk/tm/ts/src/feature/secrets/plugin/Capability.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (typescript/src/Capability.ts)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* Capabilities (§11.1).
  *

package/project/.sdk/tm/ts/src/feature/secrets/plugin/Catalog.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (typescript/src/Catalog.ts)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The definition catalog (§10.1).
  *

package/project/.sdk/tm/ts/src/feature/secrets/plugin/Config.ts

@@ -1,5 +1,5 @@
 // VENDORED: @voxgig/plugin 0.1.6 (typescript/src/Config.ts)
-// Source: https://github.com/voxgig/plugin @ 8d8968afc0a2008fbd795b41ab166307d989f02a  [tag: sdk-20260904-1610-0]
+// Source: https://github.com/voxgig/plugin @ b48ae643eb0eb56c5ebe3198da98cecdf6a7f7fc  [tag: sdk-20260907-0029-0]
 // License: MIT (c) voxgig - see repository LICENSE. Do not edit: resync from upstream.
 /* The declarative document (§9): normalization, and the ten-level
  * precedence ladder.