@greenpandastudios/aug-cli 0.19.0 → 0.20.1

package/docs/examples/oidc-login/common/keys.md

@@ -49,7 +49,8 @@ pageClass: aug-example-page
 ::: code-group
 
 ```aug [Indentation]
-import Crypto from august.crypto
+// aug-spec: "keys.aug.md" explains this file. Read it before changes; refresh with aug spec.
+import Crypto from crypto
 KeyError() implements Error:
     pass
 /** Keys are initialized explicitly in main and expose distinct provider and session roles. */
@@ -59,34 +60,35 @@ capability SigningKeys:
     session() returns RsaPrivateKey uses SigningKeys.session unless KeyError
 MemorySigningKeys() implements SigningKeys:
     Shared<Map<string,RsaPrivateKey>> _keys = Shared(value=Map<string, RsaPrivateKey>())
-    configure(RsaPrivateKey provider, RsaPrivateKey session) uses SigningKeys.configure unless KeyError:
+    configure(RsaPrivateKey provider, RsaPrivateKey session):
         lock _keys as keys:
             if keys.length() != 0:
                 throw KeyError()
             keys.set(key="provider", value=provider)
             keys.set(key="session", value=session)
-    provider() returns RsaPrivateKey uses SigningKeys.provider unless KeyError:
+    provider():
         lock _keys as keys:
             match keys.get(key="provider"):
                 when null:
                     throw KeyError()
                 when some key:
                     return key
-    session() returns RsaPrivateKey uses SigningKeys.session unless KeyError:
+    session():
         lock _keys as keys:
             match keys.get(key="session"):
                 when null:
                     throw KeyError()
                 when some key:
                     return key
-initializeKeys(resolve Crypto crypto, resolve SigningKeys keys) uses crypto.generateRsa and keys.configure unless CryptoError and KeyError:
+initializeKeys(resolve Crypto crypto, resolve SigningKeys keys):
     provider = crypto.generateRsa()
     session = crypto.generateRsa()
     keys.configure(provider, session)
 ```
 
 ```aug [Braces]
-import Crypto from august.crypto
+// aug-spec: "keys.aug.md" explains this file. Read it before changes; refresh with aug spec.
+import Crypto from crypto
 KeyError() implements Error {
     pass
 }
@@ -98,7 +100,7 @@ capability SigningKeys {
 }
 MemorySigningKeys() implements SigningKeys {
     Shared<Map<string,RsaPrivateKey>> _keys = Shared(value=Map<string, RsaPrivateKey>())
-    configure(RsaPrivateKey provider, RsaPrivateKey session) uses SigningKeys.configure unless KeyError {
+    configure(RsaPrivateKey provider, RsaPrivateKey session) {
         lock _keys as keys {
             if keys.length() != 0 {
                 throw KeyError()
@@ -107,7 +109,7 @@ MemorySigningKeys() implements SigningKeys {
             keys.set(key="session", value=session)
         }
     }
-    provider() returns RsaPrivateKey uses SigningKeys.provider unless KeyError {
+    provider() {
         lock _keys as keys {
             match keys.get(key="provider") {
                 when null {
@@ -119,7 +121,7 @@ MemorySigningKeys() implements SigningKeys {
             }
         }
     }
-    session() returns RsaPrivateKey uses SigningKeys.session unless KeyError {
+    session() {
         lock _keys as keys {
             match keys.get(key="session") {
                 when null {
@@ -132,7 +134,7 @@ MemorySigningKeys() implements SigningKeys {
         }
     }
 }
-initializeKeys(resolve Crypto crypto, resolve SigningKeys keys) uses crypto.generateRsa and keys.configure unless CryptoError and KeyError {
+initializeKeys(resolve Crypto crypto, resolve SigningKeys keys) {
     provider = crypto.generateRsa()
     session = crypto.generateRsa()
     keys.configure(provider, session)
@@ -147,189 +149,63 @@ initializeKeys(resolve Crypto crypto, resolve SigningKeys keys) uses crypto.gene
 
 ## Compiled specification {#specification}
 
-August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
+### `KeyError` · class · [source](keys.md#code) {#symbol-KeyError}
 
-### In this file
+It implements `Error`.
 
-- [`KeyError`](keys.md#symbol-KeyError) is a class implementing `Error`.
-- [`SigningKeys`](keys.md#symbol-SigningKeys) is a capability interface.
-- [`MemorySigningKeys`](keys.md#symbol-MemorySigningKeys) is a class implementing `SigningKeys`.
-- [`initializeKeys`](keys.md#symbol-initializeKeys) is a function.
-
-### `KeyError` {#symbol-KeyError}
-
-[source](keys.md#code)
-
-Behavioral class.
-
-Satisfies `Error`.
-
-### `SigningKeys` {#symbol-SigningKeys}
-
-[source](keys.md#code)
-
-Capability interface.
-
-**Author documentation**
+### `SigningKeys` · capability interface · [source](keys.md#code) {#symbol-SigningKeys}
 
 Keys are initialized explicitly in main and expose distinct provider and session roles.
 
-#### `SigningKeys.configure` {#symbol-SigningKeys.configure}
-
-[source](keys.md#code)
-
-**Inputs**
-
-- `provider` (`RsaPrivateKey`) — required labeled input.
-- `session` (`RsaPrivateKey`) — required labeled input.
-
-Returns: no value.
-
-Capabilities: [`SigningKeys.configure`](keys.md#symbol-SigningKeys.configure).
-
-Can fail with `KeyError`. Callers must catch or propagate these errors.
-
-Interface contract. A selected implementation supplies the behavior.
-
-#### `SigningKeys.provider` {#symbol-SigningKeys.provider}
-
-[source](keys.md#code)
-
-Returns: `RsaPrivateKey`.
-
-Capabilities: [`SigningKeys.provider`](keys.md#symbol-SigningKeys.provider).
-
-Can fail with `KeyError`. Callers must catch or propagate these errors.
-
-Interface contract. A selected implementation supplies the behavior.
-
-#### `SigningKeys.session` {#symbol-SigningKeys.session}
-
-[source](keys.md#code)
-
-Returns: `RsaPrivateKey`.
-
-Capabilities: [`SigningKeys.session`](keys.md#symbol-SigningKeys.session).
-
-Can fail with `KeyError`. Callers must catch or propagate these errors.
-
-Interface contract. A selected implementation supplies the behavior.
-
-### `MemorySigningKeys` {#symbol-MemorySigningKeys}
-
-[source](keys.md#code)
-
-Behavioral class.
-
-Satisfies [`SigningKeys`](keys.md#symbol-SigningKeys).
-
-**Field initialization**
-
-- Initialize `_keys` of type `Shared<Map<string,RsaPrivateKey>>` to call `Shared` with `value` = an empty map from `string` to `RsaPrivateKey`. Read-only storage, private to this class.
-
-#### `MemorySigningKeys.configure` {#symbol-MemorySigningKeys.configure}
-
-[source](keys.md#code)
-
-**Inputs**
-
-- `provider` (`RsaPrivateKey`) — required labeled input.
-- `session` (`RsaPrivateKey`) — required labeled input.
-
-Returns: no value.
-
-Capabilities: [`SigningKeys.configure`](keys.md#symbol-SigningKeys.configure).
-
-Can fail with `KeyError`. Callers must catch or propagate these errors.
-
-**What it does**
-
-- Lock `_keys`, expose its mutable value as `keys`, and release the lock on every exit:
-  - If call `length` on `keys` does not equal `0`:
-    - Fail with call [`KeyError`](keys.md#symbol-KeyError). Transfer control to a matching catch or propagate the failure.
-  - Call `set` on `keys` with `key` = `"provider"`; `value` = `provider`.
-  - Call `set` on `keys` with `key` = `"session"`; `value` = `session`.
-
-#### `MemorySigningKeys.provider` {#symbol-MemorySigningKeys.provider}
-
-[source](keys.md#code)
-
-Returns: `RsaPrivateKey`.
-
-Capabilities: [`SigningKeys.provider`](keys.md#symbol-SigningKeys.provider).
-
-Can fail with `KeyError`. Callers must catch or propagate these errors.
-
-**What it does**
-
-- Lock `_keys`, expose its mutable value as `keys`, and release the lock on every exit:
-  - Select the matching case for call `get` on `keys` with `key` = `"provider"`:
-    - A null value, including omitted optional input:
-      - Fail with call [`KeyError`](keys.md#symbol-KeyError). Transfer control to a matching catch or propagate the failure.
-    - A present, non-null value, named `key`:
-      - Return `key`.
-
-#### `MemorySigningKeys.session` {#symbol-MemorySigningKeys.session}
-
-[source](keys.md#code)
+#### `SigningKeys.configure` · [source](keys.md#code) {#symbol-SigningKeys.configure}
 
-Returns: `RsaPrivateKey`.
+It takes `provider` and `session` as `RsaPrivateKey`. It can call [`SigningKeys.configure`](keys.md#symbol-SigningKeys.configure). Failures can raise [`KeyError`](keys.md#symbol-KeyError).
 
-Capabilities: [`SigningKeys.session`](keys.md#symbol-SigningKeys.session).
+#### `SigningKeys.provider` · [source](keys.md#code) {#symbol-SigningKeys.provider}
 
-Can fail with `KeyError`. Callers must catch or propagate these errors.
+It returns `RsaPrivateKey`. It can call [`SigningKeys.provider`](keys.md#symbol-SigningKeys.provider). Failures can raise [`KeyError`](keys.md#symbol-KeyError).
 
-**What it does**
+#### `SigningKeys.session` · [source](keys.md#code) {#symbol-SigningKeys.session}
 
-- Lock `_keys`, expose its mutable value as `keys`, and release the lock on every exit:
-  - Select the matching case for call `get` on `keys` with `key` = `"session"`:
-    - A null value, including omitted optional input:
-      - Fail with call [`KeyError`](keys.md#symbol-KeyError). Transfer control to a matching catch or propagate the failure.
-    - A present, non-null value, named `key`:
-      - Return `key`.
+It returns `RsaPrivateKey`. It can call [`SigningKeys.session`](keys.md#symbol-SigningKeys.session). Failures can raise [`KeyError`](keys.md#symbol-KeyError).
 
-### `initializeKeys` {#symbol-initializeKeys}
+### `MemorySigningKeys` · class · [source](keys.md#code) {#symbol-MemorySigningKeys}
 
-[source](keys.md#code)
+It implements [`SigningKeys`](keys.md#symbol-SigningKeys). The read-only, private field `_keys` has type `Shared<Map<string,RsaPrivateKey>>` and starts as a `Shared` with `value` from an empty map from `string` to `RsaPrivateKey`.
 
-**Inputs**
+#### `MemorySigningKeys.configure` · [source](keys.md#code) {#symbol-MemorySigningKeys.configure}
 
-- `crypto` ([`Crypto`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto)) — injected; callers omit it.
-- `keys` ([`SigningKeys`](keys.md#symbol-SigningKeys)) — injected; callers omit it.
+It takes `provider` and `session` as `RsaPrivateKey`. Failures can raise [`KeyError`](keys.md#symbol-KeyError).
 
-Returns: no value.
+While holding the lock on `_keys` as mutable `keys`, it checks that the number of elements in `keys` equals `0`. It raises a [`KeyError`](keys.md#symbol-KeyError) at the first failed check. It stores `provider` in `keys` under `"provider"`. It stores `session` in `keys` under `"session"`.
 
-Capabilities: [`crypto.generateRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.generateRsa), [`keys.configure`](keys.md#symbol-SigningKeys.configure).
+Release this lock when the block exits, including on return or failure.
 
-Can fail with `CryptoError`, `KeyError`. Callers must catch or propagate these errors.
+#### `MemorySigningKeys.provider` · [source](keys.md#code) {#symbol-MemorySigningKeys.provider}
 
-**What it does**
+Failures can raise [`KeyError`](keys.md#symbol-KeyError).
 
-- Set `provider` to call [`Crypto.generateRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.generateRsa) on `crypto`.
-- Set `session` to call [`Crypto.generateRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.generateRsa) on `crypto`.
-- Call [`SigningKeys.configure`](keys.md#symbol-SigningKeys.configure) on `keys` with `provider` = `provider`; `session` = `session`.
+While holding the lock on `_keys` as mutable `keys`, it obtains the value under `"provider"` in `keys`. If no value is found, it raises a [`KeyError`](keys.md#symbol-KeyError). The non-null result becomes `key`. It returns `key`.
 
-### Dependencies used by this file
+Release this lock when the block exits, including on return or failure.
 
-Only referenced types and operations appear here. Each name links to its complete specification.
+#### `MemorySigningKeys.session` · [source](keys.md#code) {#symbol-MemorySigningKeys.session}
 
-#### [`Crypto`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto)
+Failures can raise [`KeyError`](keys.md#symbol-KeyError).
 
-Capability interface from `august.crypto`.
+While holding the lock on `_keys` as mutable `keys`, it obtains the value under `"session"` in `keys`. If no value is found, it raises a [`KeyError`](keys.md#symbol-KeyError). The non-null result becomes `key`. It returns `key`.
 
-- [`Crypto.generateRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.generateRsa) (no caller inputs) → `RsaPrivateKey`; can fail with `CryptoError`.
+Release this lock when the block exits, including on return or failure.
 
-### Built-in operations used by this file
+### `initializeKeys` · [source](keys.md#code) {#symbol-initializeKeys}
 
-- `Map<string, RsaPrivateKey>.get` (`key`: `string`) → `optional RsaPrivateKey`: Read a value by key; an absent key returns null. contains distinguishes an absent key from a stored null.
-- `Map<string, RsaPrivateKey>.length` (no inputs) → `int`: Read the number of elements.
-- `Map<string, RsaPrivateKey>.set` (`key`: `string`, `value`: `RsaPrivateKey`) → `void`: Insert or replace an entry with exclusive mutable access. Changes the receiver.
+It gets `crypto` ([`Crypto`](../dependencies/packages/%40git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/contracts.md#symbol-Crypto)) and `keys` ([`SigningKeys`](keys.md#symbol-SigningKeys)) from dependency injection. Failures can raise `CryptoError` and [`KeyError`](keys.md#symbol-KeyError). It sets `provider` and `session` separately, each to [`crypto.generateRsa`](../dependencies/packages/%40git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/contracts.md#symbol-Crypto.generateRsa). It calls [`keys.configure`](keys.md#symbol-SigningKeys.configure) with `provider` and `session`.
 
-[Full built-in reference](https://greenpandastudios.github.io/augscript/language-constructs).
+### Dependencies
 
-### Shared language rules
+It uses [`Crypto`](../dependencies/packages/%40git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/contracts.md#symbol-Crypto) ([`generateRsa`](../dependencies/packages/%40git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/contracts.md#symbol-Crypto.generateRsa)) from `crypto`.
 
-See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.
+Built-in operations follow the [language reference](https://greenpandastudios.github.io/augscript/language-constructs).
 
 ::::
 

package/docs/examples/oidc-login/common/settings.md

@@ -49,17 +49,33 @@ pageClass: aug-example-page
 ::: code-group
 
 ```aug [Indentation]
+// aug-spec: "settings.aug.md" explains this file. Read it before changes; refresh with aug spec.
 /** Explicit loopback development settings. The provider accepts one registered client and its exact callback URI. */
 record Settings(string baseUrl, string issuer, string clientId, string callback, int sessionSeconds, bool secureCookies)
-settings() returns Settings:
-    return Settings(baseUrl="http://127.0.0.1:8787", issuer="http://127.0.0.1:8787/provider", clientId="august-login-app", callback="http://127.0.0.1:8787/login/callback", sessionSeconds=900, secureCookies=false)
+settings():
+    return Settings(
+        baseUrl="http://127.0.0.1:8787",
+        issuer="http://127.0.0.1:8787/provider",
+        clientId="august-login-app",
+        callback="http://127.0.0.1:8787/login/callback",
+        sessionSeconds=900,
+        secureCookies=false
+    )
 ```
 
 ```aug [Braces]
+// aug-spec: "settings.aug.md" explains this file. Read it before changes; refresh with aug spec.
 /** Explicit loopback development settings. The provider accepts one registered client and its exact callback URI. */
 record Settings(string baseUrl, string issuer, string clientId, string callback, int sessionSeconds, bool secureCookies)
-settings() returns Settings {
-    return Settings(baseUrl="http://127.0.0.1:8787", issuer="http://127.0.0.1:8787/provider", clientId="august-login-app", callback="http://127.0.0.1:8787/login/callback", sessionSeconds=900, secureCookies=false)
+settings() {
+    return Settings(
+        baseUrl="http://127.0.0.1:8787",
+        issuer="http://127.0.0.1:8787/provider",
+        clientId="august-login-app",
+        callback="http://127.0.0.1:8787/login/callback",
+        sessionSeconds=900,
+        secureCookies=false
+    )
 }
 ```
 
@@ -71,45 +87,13 @@ settings() returns Settings {
 
 ## Compiled specification {#specification}
 
-August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
+### `Settings` · immutable record · [source](settings.md#code) {#symbol-Settings}
 
-### In this file
+Explicit loopback development settings. The provider accepts one registered client and its exact callback URI. It takes `baseUrl`, `issuer`, `clientId`, and `callback` as strings, kept read-only, `sessionSeconds` as an integer, kept read-only, and `secureCookies` as a boolean, kept read-only.
 
-- [`Settings`](settings.md#symbol-Settings) is an immutable record.
-- [`settings`](settings.md#symbol-settings) is a function returning `Settings`.
+### `settings` · [source](settings.md#code) {#symbol-settings}
 
-### `Settings` {#symbol-Settings}
-
-[source](settings.md#code)
-
-Immutable record.
-
-**Author documentation**
-
-Explicit loopback development settings. The provider accepts one registered client and its exact callback URI.
-
-**Inputs**
-
-- `baseUrl` (`string`) — required labeled input — stored as `baseUrl` and read-only after initialization.
-- `issuer` (`string`) — required labeled input — stored as `issuer` and read-only after initialization.
-- `clientId` (`string`) — required labeled input — stored as `clientId` and read-only after initialization.
-- `callback` (`string`) — required labeled input — stored as `callback` and read-only after initialization.
-- `sessionSeconds` (`int`) — required labeled input — stored as `sessionSeconds` and read-only after initialization.
-- `secureCookies` (`bool`) — required labeled input — stored as `secureCookies` and read-only after initialization.
-
-### `settings` {#symbol-settings}
-
-[source](settings.md#code)
-
-Returns: [`Settings`](settings.md#symbol-Settings).
-
-**What it does**
-
-- Return call [`Settings`](settings.md#symbol-Settings) with `baseUrl` = `"http://127.0.0.1:8787"`; `issuer` = `"http://127.0.0.1:8787/provider"`; `clientId` = `"august-login-app"`; `callback` = `"http://127.0.0.1:8787/login/callback"`; `sessionSeconds` = `900`; `secureCookies` = `false`.
-
-### Shared language rules
-
-See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.
+It returns a [`Settings`](settings.md#symbol-Settings) with `baseUrl` `"http://127.0.0.1:8787"`, `issuer` `"http://127.0.0.1:8787/provider"`, `clientId` `"august-login-app"`, `callback` `"http://127.0.0.1:8787/login/callback"`, `sessionSeconds` `900`, and `secureCookies` `false`.
 
 ::::
 

package/docs/examples/oidc-login/common/views.md

@@ -49,14 +49,16 @@ pageClass: aug-example-page
 ::: code-group
 
 ```aug [Indentation]
+// aug-spec: "views.aug.md" explains this file. Read it before changes; refresh with aug spec.
 /** Small server components keep each page's behavior and dependencies visible. */
-Page(string title, List<Html> children) returns Html:
+Page(string title, List<Html> children):
     return <html lang={"en"}><head><meta charset={"utf-8"} /><meta name={"viewport"} content={"width=device-width, initial-scale=1"} /><title>{title} — August</title></head><body style={"margin:0;background:#f3f5f9;color:#17233a;font:17px system-ui,sans-serif;line-height:1.6"}><main style={"max-width:640px;margin:48px auto;padding:28px;background:white;border-radius:20px;box-shadow:0 12px 48px #17233a12"}><nav><a href={"/"} style={"color:#4852d7;font-weight:750;text-decoration:none"}>August · OpenID Connect</a></nav><h1>{title}</h1>{children}</main></body></html>
 ```
 
 ```aug [Braces]
+// aug-spec: "views.aug.md" explains this file. Read it before changes; refresh with aug spec.
 /** Small server components keep each page's behavior and dependencies visible. */
-Page(string title, List<Html> children) returns Html {
+Page(string title, List<Html> children) {
     return <html lang={"en"}><head><meta charset={"utf-8"} /><meta name={"viewport"} content={"width=device-width, initial-scale=1"} /><title>{title} — August</title></head><body style={"margin:0;background:#f3f5f9;color:#17233a;font:17px system-ui,sans-serif;line-height:1.6"}><main style={"max-width:640px;margin:48px auto;padding:28px;background:white;border-radius:20px;box-shadow:0 12px 48px #17233a12"}><nav><a href={"/"} style={"color:#4852d7;font-weight:750;text-decoration:none"}>August · OpenID Connect</a></nav><h1>{title}</h1>{children}</main></body></html>
 }
 ```
@@ -69,34 +71,11 @@ Page(string title, List<Html> children) returns Html {
 
 ## Compiled specification {#specification}
 
-August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
+### `Page` · [source](views.md#code) {#symbol-Page}
 
-### In this file
+Small server components keep each page's behavior and dependencies visible. It takes `title` as a string and `children` as `List<Html>`.
 
-- [`Page`](views.md#symbol-Page) is a function returning `Html`.
-
-### `Page` {#symbol-Page}
-
-[source](views.md#code)
-
-**Inputs**
-
-- `title` (`string`) — required labeled input.
-- `children` (`List<Html>`) — required labeled input.
-
-Returns: `Html`.
-
-**What it does**
-
-- Return the HTML element `html` with `lang` = `"en"` containing the HTML element `head` containing the HTML element `meta` with `charset` = `"utf-8"` (rendered on the server with embedded text escaped), the HTML element `meta` with `name` = `"viewport"`, `content` = `"width=device-width, initial-scale=1"` (rendered on the server with embedded text escaped), the HTML element `title` containing `title`, ` — August` (rendered on the server with embedded text escaped) (rendered on the server with embedded text escaped), the HTML element `body` with `style` = `"margin:0;background:#f3f5f9;color:#17233a;font:17px system-ui,sans-serif;line-height:1.6"` containing the HTML element `main` with `style` = `"max-width:640px;margin:48px auto;padding:28px;background:white;border-radius:20px;box-shadow:0 12px 48px #17233a12"` containing the HTML element `nav` containing the HTML element `a` with `href` = `"/"`, `style` = `"color:#4852d7;font-weight:750;text-decoration:none"` containing `August · OpenID Connect` (rendered on the server with embedded text escaped) (rendered on the server with embedded text escaped), the HTML element `h1` containing `title` (rendered on the server with embedded text escaped), `children` (rendered on the server with embedded text escaped) (rendered on the server with embedded text escaped) (rendered on the server with embedded text escaped).
-
-**Author documentation**
-
-Small server components keep each page's behavior and dependencies visible.
-
-### Shared language rules
-
-See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.
+It returns the HTML element `html` with `lang` = `"en"` containing the HTML element `head` containing the HTML element `meta` with `charset` = `"utf-8"` with escaped text, the HTML element `meta` with `name` = `"viewport"`, `content` = `"width=device-width, initial-scale=1"` with escaped text, the HTML element `title` containing `title`, ` — August` with escaped text with escaped text, the HTML element `body` with `style` = `"margin:0;background:#f3f5f9;color:#17233a;font:17px system-ui,sans-serif;line-height:1.6"` containing the HTML element `main` with `style` = `"max-width:640px;margin:48px auto;padding:28px;background:white;border-radius:20px;box-shadow:0 12px 48px #17233a12"` containing the HTML element `nav` containing a link with `href` = `"/"`, `style` = `"color:#4852d7;font-weight:750;text-decoration:none"` containing `August · OpenID Connect` with escaped text with escaped text, a heading containing `title` with escaped text, `children` with escaped text with escaped text with escaped text.
 
 ::::
 

package/docs/examples/oidc-login/dependencies/packages/@git/url_0eb7c89453c87681ed15/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/store.md

@@ -0,0 +1,205 @@
+---
+title: "packages/@git/url_0eb7c89453c87681ed15/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/store.aug · OpenID Connect login application"
+generated: true
+source: "examples/oidc-login/.aug-spec/packages/@git/url_0eb7c89453c87681ed15/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/store.aug"
+editLink: false
+prev: false
+next: false
+outline: [2, 3]
+search: false
+pageClass: aug-example-page
+---
+
+# `packages/@git/url_0eb7c89453c87681ed15/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/store.aug`
+
+[OpenID Connect login application](../../../../../index.md) · Dependency source and specification
+
+This is the exact dependency version used by this example.
+
+::::: example-compare
+
+:::: example-code
+
+## Code {#code}
+
+::: code-group
+
+```aug [Indentation]
+/** The bounded store could not accept another live entry. */
+StoreFull() implements Error:
+    pass
+record _Entry<T implements Data>(T value, int expires)
+/** A bounded, expiring capability for immutable values. Each generic DI binding has its own table. */
+capability ExpiringStore<T implements Data>:
+    /** Remove expired entries, then store at most 512 live entries. Time is supplied by the caller. */
+    put(string key, T value, int expires, int now) uses ExpiringStore.put unless StoreFull
+    /** Atomically remove a value. Expired or absent entries return null. */
+    take(string key, int now) returns optional T uses ExpiringStore.take
+    /** Read a live value without consuming it. */
+    get(string key, int now) returns optional T uses ExpiringStore.get
+/** A synchronized table with short critical sections and no I/O while locked. */
+MemoryStore<T implements Data>() implements ExpiringStore<T>:
+    Shared<Map<string,_Entry<T>>> _entries = Shared(value=Map<string, _Entry<T>>())
+    put(string key, T value, int expires, int now) unless StoreFull:
+        entry = _Entry<T>(value=value, expires=expires)
+        lock _entries as entries:
+            for (name, saved) in entries:
+                if saved.expires <= now:
+                    entries.take(key=name)
+            if entries.length() >= 512 and (not entries.contains(key=key)):
+                throw StoreFull()
+            entries.set(key=key, value=entry)
+    take(string key, int now) returns optional T:
+        lock _entries as entries:
+            match entries.take(key=key):
+                when null:
+                    return null
+                when some saved:
+                    if saved.expires <= now:
+                        return null
+                    return saved.value
+    get(string key, int now) returns optional T:
+        lock _entries as entries:
+            match entries.get(key=key):
+                when null:
+                    return null
+                when some saved:
+                    if saved.expires <= now:
+                        return null
+                    return saved.value
+```
+
+```aug [Braces]
+/** The bounded store could not accept another live entry. */
+StoreFull() implements Error {
+    pass
+}
+record _Entry<T implements Data>(T value, int expires)
+/** A bounded, expiring capability for immutable values. Each generic DI binding has its own table. */
+capability ExpiringStore<T implements Data> {
+    /** Remove expired entries, then store at most 512 live entries. Time is supplied by the caller. */
+    put(string key, T value, int expires, int now) uses ExpiringStore.put unless StoreFull
+    /** Atomically remove a value. Expired or absent entries return null. */
+    take(string key, int now) returns optional T uses ExpiringStore.take
+    /** Read a live value without consuming it. */
+    get(string key, int now) returns optional T uses ExpiringStore.get
+}
+/** A synchronized table with short critical sections and no I/O while locked. */
+MemoryStore<T implements Data>() implements ExpiringStore<T> {
+    Shared<Map<string,_Entry<T>>> _entries = Shared(value=Map<string, _Entry<T>>())
+    put(string key, T value, int expires, int now) unless StoreFull {
+        entry = _Entry<T>(value=value, expires=expires)
+        lock _entries as entries {
+            for (name, saved) in entries {
+                if saved.expires <= now {
+                    entries.take(key=name)
+                }
+            }
+            if entries.length() >= 512 and (not entries.contains(key=key)) {
+                throw StoreFull()
+            }
+            entries.set(key=key, value=entry)
+        }
+    }
+    take(string key, int now) returns optional T {
+        lock _entries as entries {
+            match entries.take(key=key) {
+                when null {
+                    return null
+                }
+                when some saved {
+                    if saved.expires <= now {
+                        return null
+                    }
+                    return saved.value
+                }
+            }
+        }
+    }
+    get(string key, int now) returns optional T {
+        lock _entries as entries {
+            match entries.get(key=key) {
+                when null {
+                    return null
+                }
+                when some saved {
+                    if saved.expires <= now {
+                        return null
+                    }
+                    return saved.value
+                }
+            }
+        }
+    }
+}
+```
+
+:::
+
+::::
+
+:::: example-spec
+
+## Compiled specification {#specification}
+
+### `StoreFull` · class · [source](store.md#code) {#symbol-StoreFull}
+
+The bounded store could not accept another live entry. It implements `Error`.
+
+### `ExpiringStore` · capability interface · [source](store.md#code) {#symbol-ExpiringStore}
+
+A bounded, expiring capability for immutable values. Each generic DI binding has its own table. The type parameters are `T` which must satisfy `Data`.
+
+#### `ExpiringStore.put` · [source](store.md#code) {#symbol-ExpiringStore.put}
+
+Remove expired entries, then store at most 512 live entries. Time is supplied by the caller. It takes `key` as a string, `value` as `T`, and `expires` and `now` as integers.
+
+It can call [`ExpiringStore.put`](store.md#symbol-ExpiringStore.put). Failures can raise [`StoreFull`](store.md#symbol-StoreFull).
+
+#### `ExpiringStore.take` · [source](store.md#code) {#symbol-ExpiringStore.take}
+
+Atomically remove a value. Expired or absent entries return null. It takes `key` as a string and `now` as an integer.
+
+It returns `optional T`. It can call [`ExpiringStore.take`](store.md#symbol-ExpiringStore.take).
+
+#### `ExpiringStore.get` · [source](store.md#code) {#symbol-ExpiringStore.get}
+
+Read a live value without consuming it. It takes `key` as a string and `now` as an integer. It returns `optional T`. It can call [`ExpiringStore.get`](store.md#symbol-ExpiringStore.get).
+
+### `MemoryStore` · class · [source](store.md#code) {#symbol-MemoryStore}
+
+A synchronized table with short critical sections and no I/O while locked. It implements [`ExpiringStore<T>`](store.md#symbol-ExpiringStore). The type parameters are `T` which must satisfy `Data`. The read-only, private field `_entries` has type `Shared<Map<string,_Entry<T>>>` and starts as a `Shared` with `value` from an empty map from `string` to [`_Entry<T>`](store.md#symbol-_Entry).
+
+#### `MemoryStore.put` · [source](store.md#code) {#symbol-MemoryStore.put}
+
+Remove expired entries, then store at most 512 live entries. Time is supplied by the caller. It takes `key` as a string, `value` as `T`, and `expires` and `now` as integers. Failures can raise [`StoreFull`](store.md#symbol-StoreFull).
+
+It sets `entry` to a [`_Entry`](store.md#symbol-_Entry) for `T` with `value` and `expires`. While holding the lock on `_entries` as mutable `entries`, for each `name` and `saved` in a snapshot of `entries`, if `saved.expires` is at most `now`, it removes the key `name` from `entries`. After the loop, it checks that the number of elements in `entries` is less than `512` or whether `entries` contains the key `key` returns true. It raises a [`StoreFull`](store.md#symbol-StoreFull) at the first failed check.
+
+It stores `entry` in `entries` under `key`. Release this lock when the block exits, including on return or failure.
+
+#### `MemoryStore.take` · [source](store.md#code) {#symbol-MemoryStore.take}
+
+Atomically remove a value. Expired or absent entries return null. It takes `key` as a string and `now` as an integer.
+
+While holding the lock on `_entries` as mutable `entries`, it obtains `entries.take` with `key`. If no value is found, it returns null. The non-null result becomes `saved`. It returns null if `saved.expires` is at most `now`, or `saved.value` otherwise.
+
+Release this lock when the block exits, including on return or failure.
+
+#### `MemoryStore.get` · [source](store.md#code) {#symbol-MemoryStore.get}
+
+Read a live value without consuming it. It takes `key` as a string and `now` as an integer.
+
+While holding the lock on `_entries` as mutable `entries`, it obtains the value under `key` in `entries`. If no value is found, it returns null. The non-null result becomes `saved`. It returns null if `saved.expires` is at most `now`, or `saved.value` otherwise.
+
+Release this lock when the block exits, including on return or failure.
+
+### `_Entry` · immutable record · [source](store.md#code) {#symbol-_Entry}
+
+It is private to this file. The type parameters are `T` which must satisfy `Data`. It takes `value` as `T`, kept read-only and `expires` as an integer, kept read-only.
+
+Built-in operations follow the [language reference](https://greenpandastudios.github.io/augscript/language-constructs).
+
+::::
+
+:::::