@greenpandastudios/aug-cli 0.19.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 AugScript contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,13 @@
+# August CLI
+
+`@greenpandastudios/aug-cli` installs `aug` and `aug-cli` (compiler, project starter, native builds, tests and language server) and `aug-native` (explicit native dependency bootstrap).
+
+Requires Node.js 24+ and a C11 compiler. The CLI installs matching standard, web and crypto packages. Source imports remain `august.io`, `august.web`, and `august.crypto`.
+
+```sh
+npx @greenpandastudios/aug-cli@next init hello-august
+```
+
+The starter refuses a nonempty directory. It includes `main.aug`, an interface and implementation with a same-file test, and a README. Early npm releases use `@next`; publication status is tracked in the installation guide. Native builds support macOS and Linux.
+
+See [installation](https://github.com/GreenPandaStudios/augscript/blob/main/docs/packages.md), [the language wiki](https://GreenPandaStudios.github.io/augscript/) and [the repository](https://github.com/GreenPandaStudios/augscript). Guides and examples are included in this package.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,18 @@
+# Native dependency sources
+
+August's compiler/runtime code is MIT licensed. Native dependencies are downloaded explicitly by `aug-native` or `scripts/bootstrap-native.mjs`; their source archives, headers and binaries are not included in these source/npm/VSIX artifacts. Versions and archive checksums are pinned in `scripts/native-dependencies.lock.json`.
+
+| Dependency | Official source and license information |
+| --- | --- |
+| CMake | [Kitware CMake](https://github.com/Kitware/CMake), `Copyright.txt` |
+| GMP | [GNU GMP](https://gmplib.org/manual/Copying), LGPL 3 or later or GPL 2 or later; `COPYING` and `COPYING.LESSERv3` in its source archive |
+| Nettle | [GNU Nettle](https://www.lysator.liu.se/~nisse/nettle/), LGPL 3 or later or GPL 2 or later; source archive license files |
+| GnuTLS | [GnuTLS](https://www.gnutls.org/), LGPL 2.1 or later core; `COPYING` and `COPYING.LESSERv2` in its source archive |
+| libtasn1, included by GnuTLS build | [GNU libtasn1](https://www.gnu.org/software/libtasn1/), LGPL 2.1 or later; inspect bundled source license files |
+| libunistring, included by GnuTLS build | [GNU libunistring](https://www.gnu.org/software/libunistring/manual/html_node/Licenses.html), LGPL 3 or later or GPL 2 or later; inspect bundled source license files |
+| libwebsockets | [libwebsockets](https://github.com/warmcat/libwebsockets/blob/main/LICENSE), MIT core with additional notices for selected bundled files; `LICENSE` |
+| yyjson | [yyjson](https://github.com/ibireme/yyjson/blob/master/LICENSE), MIT |
+| minicoro | [minicoro](https://github.com/edubart/minicoro/blob/main/LICENSE), public domain or MIT No Attribution |
+| zlib | Host system library; [zlib](https://zlib.net/zlib_license.html) |
+
+Applications built using web/crypto link native libraries from the selected dependency prefix. Redistributors of compiled applications must preserve the notices and satisfy the licenses of the libraries they include. The release process currently distributes compiler/library source packages and VSIX rather than prebuilt native dependency bundles.

package/bin/aug.mjs

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { main } from '../src/cli.js';
+process.exitCode = await main(process.argv.slice(2));

package/docs/api/crypto.md

@@ -0,0 +1,351 @@
+---
+generated: true
+source: src/stdlib/crypto
+editLink: false
+---
+
+# august.crypto
+
+Public declarations exported by this module. Import names explicitly from `august.crypto`. Built-in wire/value types are described in [language constructs](../language-constructs.md).
+
+- [Crypto](#api-Crypto)
+- [GnuTlsCrypto](#api-GnuTlsCrypto)
+- [JwtError](#api-JwtError)
+- [RsaJwk](#api-RsaJwk)
+- [RsaJwks](#api-RsaJwks)
+- [rsaJwk](#api-rsaJwk)
+- [importJwk](#api-importJwk)
+- [signJwt](#api-signJwt)
+- [verifyJwt](#api-verifyJwt)
+
+## Crypto {#api-Crypto}
+
+```text
+capability Crypto
+```
+
+Explicit permission for native cryptographic operations. Keys and bytes are immutable.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L2)
+
+### Crypto.random
+
+```text
+random(int size) returns Bytes uses Crypto.random unless CryptoError
+```
+
+Generate unpredictable bytes with the operating-system-backed GnuTLS RNG.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L4)
+
+### Crypto.sha256
+
+```text
+sha256(Bytes input) returns Bytes uses Crypto.sha256 unless CryptoError
+```
+
+Hash the complete input using SHA-256.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L6)
+
+### Crypto.generateRsa
+
+```text
+generateRsa() returns RsaPrivateKey uses Crypto.generateRsa unless CryptoError
+```
+
+Create a fresh 3072-bit RSA private key. Private material is opaque and scrubbed on reclamation.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L8)
+
+### Crypto.publicRsa
+
+```text
+publicRsa(RsaPrivateKey key) returns RsaPublicKey uses Crypto.publicRsa unless CryptoError
+```
+
+Export the corresponding public key as an opaque immutable value.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L10)
+
+### Crypto.signRsa
+
+```text
+signRsa(RsaPrivateKey key, Bytes input) returns Bytes uses Crypto.signRsa unless CryptoError
+```
+
+Sign bytes using RSASSA-PKCS1-v1_5 with SHA-256 (JOSE RS256).
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L12)
+
+### Crypto.verifyRsa
+
+```text
+verifyRsa(RsaPublicKey publicKey, Bytes input, Bytes signature) returns bool uses Crypto.verifyRsa unless CryptoError
+```
+
+Verify only RS256. Invalid signatures return false; invalid keys raise CryptoError.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L14)
+
+### Crypto.decodeBase64url
+
+```text
+decodeBase64url(string input) returns Bytes uses Crypto.decodeBase64url unless CryptoError
+```
+
+Decode canonical unpadded URL-safe base64, rejecting invalid characters and unused bits.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L16)
+
+### Crypto.equal
+
+```text
+equal(Bytes left, Bytes right) returns bool uses Crypto.equal
+```
+
+Compare bytes without early exit on their contents. Length remains observable.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L18)
+
+### Crypto.exportRsa
+
+```text
+exportRsa(RsaPublicKey publicKey) returns Tuple<Bytes, Bytes> uses Crypto.exportRsa unless CryptoError
+```
+
+Export unsigned big-endian modulus and exponent for an RSA JWK.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L20)
+
+### Crypto.importRsa
+
+```text
+importRsa(Bytes modulus, Bytes exponent) returns RsaPublicKey uses Crypto.importRsa unless CryptoError
+```
+
+Import canonical public RSA parameters. Keys must have 2048 to 8192 bits.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L22)
+
+### Crypto.passwordHash
+
+```text
+passwordHash(Bytes password, Bytes salt, int iterations) returns Bytes uses Crypto.passwordHash unless CryptoError
+```
+
+PBKDF2-HMAC-SHA256, producing 32 bytes. Use a unique 16–64 byte salt; supported work factors are 100,000–2,000,000.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L24)
+
+## GnuTlsCrypto {#api-GnuTlsCrypto}
+
+```text
+GnuTlsCrypto() implements Crypto
+```
+
+GnuTLS-backed capability adapter. Its constructor performs no I/O or key generation.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L39)
+
+### GnuTlsCrypto.random
+
+```text
+random(int size) returns Bytes unless CryptoError
+```
+
+Generate unpredictable bytes with the operating-system-backed GnuTLS RNG.
+
+Inferred capabilities: `Crypto.random`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L40)
+
+### GnuTlsCrypto.sha256
+
+```text
+sha256(Bytes input) returns Bytes unless CryptoError
+```
+
+Hash the complete input using SHA-256.
+
+Inferred capabilities: `Crypto.sha256`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L43)
+
+### GnuTlsCrypto.generateRsa
+
+```text
+generateRsa() returns RsaPrivateKey unless CryptoError
+```
+
+Create a fresh 3072-bit RSA private key. Private material is opaque and scrubbed on reclamation.
+
+Inferred capabilities: `Crypto.generateRsa`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L46)
+
+### GnuTlsCrypto.publicRsa
+
+```text
+publicRsa(RsaPrivateKey key) returns RsaPublicKey unless CryptoError
+```
+
+Export the corresponding public key as an opaque immutable value.
+
+Inferred capabilities: `Crypto.publicRsa`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L49)
+
+### GnuTlsCrypto.signRsa
+
+```text
+signRsa(RsaPrivateKey key, Bytes input) returns Bytes unless CryptoError
+```
+
+Sign bytes using RSASSA-PKCS1-v1_5 with SHA-256 (JOSE RS256).
+
+Inferred capabilities: `Crypto.signRsa`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L52)
+
+### GnuTlsCrypto.verifyRsa
+
+```text
+verifyRsa(RsaPublicKey publicKey, Bytes input, Bytes signature) returns bool unless CryptoError
+```
+
+Verify only RS256. Invalid signatures return false; invalid keys raise CryptoError.
+
+Inferred capabilities: `Crypto.verifyRsa`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L55)
+
+### GnuTlsCrypto.decodeBase64url
+
+```text
+decodeBase64url(string input) returns Bytes unless CryptoError
+```
+
+Decode canonical unpadded URL-safe base64, rejecting invalid characters and unused bits.
+
+Inferred capabilities: `Crypto.decodeBase64url`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L58)
+
+### GnuTlsCrypto.equal
+
+```text
+equal(Bytes left, Bytes right) returns bool
+```
+
+Compare bytes without early exit on their contents. Length remains observable.
+
+Inferred capabilities: `Crypto.equal`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L61)
+
+### GnuTlsCrypto.exportRsa
+
+```text
+exportRsa(RsaPublicKey publicKey) returns Tuple<Bytes, Bytes> unless CryptoError
+```
+
+Export unsigned big-endian modulus and exponent for an RSA JWK.
+
+Inferred capabilities: `Crypto.exportRsa`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L64)
+
+### GnuTlsCrypto.importRsa
+
+```text
+importRsa(Bytes modulus, Bytes exponent) returns RsaPublicKey unless CryptoError
+```
+
+Import canonical public RSA parameters. Keys must have 2048 to 8192 bits.
+
+Inferred capabilities: `Crypto.importRsa`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L67)
+
+### GnuTlsCrypto.passwordHash
+
+```text
+passwordHash(Bytes password, Bytes salt, int iterations) returns Bytes unless CryptoError
+```
+
+PBKDF2-HMAC-SHA256, producing 32 bytes. Use a unique 16–64 byte salt; supported work factors are 100,000–2,000,000.
+
+Inferred capabilities: `Crypto.passwordHash`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/contracts.aug#L70)
+
+## JwtError {#api-JwtError}
+
+```text
+JwtError() implements Error
+```
+
+A failed JOSE validation reveals no unverified claims.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/jose.aug#L5)
+
+## RsaJwk {#api-RsaJwk}
+
+```text
+record RsaJwk(string kty, string kid, string alg, string use, string n, string e)
+```
+
+Public signing-key metadata in RFC 7517 / RFC 7518 form.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/jose.aug#L10)
+
+## RsaJwks {#api-RsaJwks}
+
+```text
+record RsaJwks(List<RsaJwk> keys)
+```
+
+The signature defines this public contract.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/jose.aug#L11)
+
+## rsaJwk {#api-rsaJwk}
+
+```text
+rsaJwk(RsaPublicKey publicKey, string kid, resolve Crypto crypto) returns RsaJwk uses crypto.exportRsa unless CryptoError
+```
+
+Export public parameters. Private key material never enters the JSON document.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/jose.aug#L14)
+
+## importJwk {#api-importJwk}
+
+```text
+importJwk(RsaJwk jwk, resolve Crypto crypto) returns RsaPublicKey uses crypto.decodeBase64url and crypto.importRsa unless JwtError
+```
+
+Import only an RSA signing key for RS256. The transport caller selects the trusted JWKS URL.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/jose.aug#L19)
+
+## signJwt {#api-signJwt}
+
+```text
+signJwt(RsaPrivateKey key, Json claims, string kid, string tokenType, resolve Crypto crypto) returns string uses crypto.signRsa unless JwtError
+```
+
+Sign immutable JSON with an explicit key id and token type. Claims are validated by the protocol that consumes the token.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/jose.aug#L30)
+
+## verifyJwt {#api-verifyJwt}
+
+```text
+verifyJwt(string token, RsaPublicKey publicKey, string kid, string tokenType, resolve Crypto crypto) returns Json uses crypto.decodeBase64url and crypto.verifyRsa unless JwtError
+```
+
+Verify the signature and configured algorithm, key id, and type before exposing the JSON payload. Never follows token-supplied URLs.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/crypto/jose.aug#L43)

package/docs/api/io.md

@@ -0,0 +1,207 @@
+---
+generated: true
+source: src/stdlib/io
+editLink: false
+---
+
+# august.io
+
+Public declarations exported by this module. Import names explicitly from `august.io`. Built-in wire/value types are described in [language constructs](../language-constructs.md).
+
+- [Console](#api-Console)
+- [SystemConsole](#api-SystemConsole)
+- [FileReader](#api-FileReader)
+- [FileWriter](#api-FileWriter)
+- [LocalFiles](#api-LocalFiles)
+- [Arguments](#api-Arguments)
+- [ProcessArguments](#api-ProcessArguments)
+
+## Console {#api-Console}
+
+```text
+capability Console
+```
+
+Permission to write to a console, provided by an explicitly selected adapter.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L2)
+
+### Console.write
+
+```text
+write<T>(T value) uses Console.write
+```
+
+Write one line of text.
+
+**Parameters**
+- `value`: Text to display.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L4)
+
+## SystemConsole {#api-SystemConsole}
+
+```text
+SystemConsole() implements Console
+```
+
+The native standard-output adapter. Construction performs no output.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L7)
+
+### SystemConsole.write
+
+```text
+write<T>(T value)
+```
+
+Write one line of text.
+
+**Parameters**
+- `value`: Text to display.
+
+Inferred capabilities: `Console.write`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L8)
+
+## FileReader {#api-FileReader}
+
+```text
+capability FileReader
+```
+
+Read UTF-8 text through an explicitly selected filesystem adapter.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L12)
+
+### FileReader.read
+
+```text
+read(string path) returns string uses FileReader.read unless FileError
+```
+
+Read text.
+
+**Parameters**
+- `path`: File path.
+
+**Throws**
+- `FileError`: The file could not be read.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L14)
+
+## FileWriter {#api-FileWriter}
+
+```text
+capability FileWriter
+```
+
+Write UTF-8 text through an explicitly selected filesystem adapter.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L17)
+
+### FileWriter.write
+
+```text
+write(string path, string content) uses FileWriter.write unless FileError
+```
+
+Write text.
+
+**Parameters**
+- `path`: File path.
+- `content`: Text.
+
+**Throws**
+- `FileError`: Writing failed.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L19)
+
+## LocalFiles {#api-LocalFiles}
+
+```text
+LocalFiles() implements FileReader, FileWriter
+```
+
+Native files. Operations are explicit; construction opens no files.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L22)
+
+### LocalFiles.read
+
+```text
+read(string path) returns string unless FileError
+```
+
+Read text.
+
+**Parameters**
+- `path`: File path.
+
+**Throws**
+- `FileError`: The file could not be read.
+
+Inferred capabilities: `FileReader.read`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L23)
+
+### LocalFiles.write
+
+```text
+write(string path, string content) unless FileError
+```
+
+Write text.
+
+**Parameters**
+- `path`: File path.
+- `content`: Text.
+
+**Throws**
+- `FileError`: Writing failed.
+
+Inferred capabilities: `FileWriter.write`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L25)
+
+## Arguments {#api-Arguments}
+
+```text
+capability Arguments
+```
+
+Read command-line input through an explicit dependency.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L29)
+
+### Arguments.read
+
+```text
+read() returns List<string> uses Arguments.read
+```
+
+The signature declares inputs, result, effects and checked errors.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L30)
+
+## ProcessArguments {#api-ProcessArguments}
+
+```text
+ProcessArguments() implements Arguments
+```
+
+Native command-line arguments.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L33)
+
+### ProcessArguments.read
+
+```text
+read() returns List<string>
+```
+
+The signature declares inputs, result, effects and checked errors.
+
+Inferred capabilities: `Arguments.read`.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/io/contracts.aug#L34)

package/docs/api/json.md

@@ -0,0 +1,21 @@
+---
+generated: true
+source: src/stdlib/json
+editLink: false
+---
+
+# august.json
+
+Public declarations exported by this module. Import names explicitly from `august.json`. Built-in wire/value types are described in [language constructs](../language-constructs.md).
+
+- [parse](#api-parse)
+
+## parse {#api-parse}
+
+```text
+parse(string input) returns Json unless JsonError
+```
+
+Parse strict UTF-8 JSON. Duplicate keys, invalid Unicode, oversized integers, and nesting beyond 64 levels raise JsonError.
+
+[Source](https://github.com/GreenPandaStudios/augscript/blob/main/src/stdlib/json/contracts.aug#L3)