@greenpandastudios/aug-cli 0.19.0 → 0.20.1

package/examples/new-syntax/main.aug.md

@@ -1,64 +1,19 @@
 <!-- Generated by aug spec. Edit the August source, then regenerate. -->
 
-# `main.aug` specification
+# `main.aug`
 
-August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
+## Providers
 
-## In this file
+`Console` is provided by [`SystemConsole`](.aug-spec/august/0.20.1/io/contracts.aug.md#symbol-SystemConsole). The same instance is shared. `Logger` is provided by [`ConsoleLogger`](console.aug.md#symbol-ConsoleLogger). The same instance is shared.
 
-- Register 2 dependency providers before startup.
-- Run 5 other startup steps in source order.
+## Startup
 
-## Dependency providers
+It sets `greeter` to a [`Greeter`](greeter.aug.md#symbol-Greeter) with `x` `4` using injected `Logger` for `logger`. It passes `"AugScript"` to [`greeter.greet`](greeter.aug.md#symbol-Greeter.greet), using injected `Console`. It sets `count` to `7`. It sets `count` to [`increment`](math.aug.md#symbol-increment) with `value` from `count`.
 
-Register these providers before startup. Their declaration order does not set initialization order; shared instances initialize in dependency order.
+It prints `count`.
 
-- Provide [`SystemConsole`](.aug-spec/august/0.19.0/io/contracts.aug.md#symbol-SystemConsole) when `Console` is requested. Reuse one instance.
-- Provide [`ConsoleLogger`](console.aug.md#symbol-ConsoleLogger) when `Logger` is requested. Reuse one instance.
+## Dependencies
 
-## Startup, in source order
+It uses [`SystemConsole`](.aug-spec/august/0.20.1/io/contracts.aug.md#symbol-SystemConsole) from `august.io`. It uses [`ConsoleLogger`](console.aug.md#symbol-ConsoleLogger) from `console`. It uses [`Greeter`](greeter.aug.md#symbol-Greeter) ([`greet`](greeter.aug.md#symbol-Greeter.greet)) from `greeter`. It uses [`increment`](math.aug.md#symbol-increment) from `math`.
 
-- Set `greeter` to call [`Greeter`](greeter.aug.md#symbol-Greeter) with `x` = `4`; inject `logger` from `Logger`.
-- Call [`Greeter.greet`](greeter.aug.md#symbol-Greeter.greet) on `greeter` with `name` = `"AugScript"`; inject `console` from `Console`.
-- Set `count` of type `int` to `7`.
-- Set `count` to call [`increment`](math.aug.md#symbol-increment) with `value` = `count`.
-- Call `print` with `value` = `count`.
-
-## Dependencies used by this file
-
-Only referenced types and operations appear here. Each name links to its complete specification.
-
-### [`SystemConsole`](.aug-spec/august/0.19.0/io/contracts.aug.md#symbol-SystemConsole)
-
-Class from `august.io`.
-
-Used as a type or provider.
-
-### [`ConsoleLogger`](console.aug.md#symbol-ConsoleLogger)
-
-Class from `console`.
-
-Used as a type or provider.
-
-### [`Greeter`](greeter.aug.md#symbol-Greeter)
-
-Class from `greeter`.
-
-- Construct with `x`: `int` → [`Greeter`](greeter.aug.md#symbol-Greeter).
-- [`Greeter.greet`](greeter.aug.md#symbol-Greeter.greet) (`name`: `string`) → `void`; inject `console`: [`Console`](.aug-spec/august/0.19.0/io/contracts.aug.md#symbol-Console); uses [`Console.write`](.aug-spec/august/0.19.0/io/contracts.aug.md#symbol-Console.write).
-
-### [`increment`](math.aug.md#symbol-increment)
-
-Function from `math`.
-
-- [`increment`](math.aug.md#symbol-increment) (`value`: `int`) → `int`.
-
-## Built-in operations used by this file
-
-- `print` (`value`: `any`) → `void`: Composition and test output. Other callables receive Console and declare uses console.write.
-
-[Full built-in reference](https://greenpandastudios.github.io/augscript/language-constructs).
-
-## Shared language rules
-
-See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.
+Built-in operations follow the [language reference](https://greenpandastudios.github.io/augscript/language-constructs).

package/examples/new-syntax/math.aug

@@ -1,3 +1,4 @@
-increment(int value) returns int {
+// aug-spec: "math.aug.md" explains this file. Read it before changes; refresh with aug spec.
+increment(int value) {
     return value + 1
 }

package/examples/new-syntax/math.aug.md

@@ -1,29 +1,8 @@
 <!-- Generated by aug spec. Edit the August source, then regenerate. -->
 
-# `math.aug` specification
-
-August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
-
-## In this file
-
-- [`increment`](math.aug.md#symbol-increment) is a function returning `int`.
+# `math.aug`
 
 <a id="symbol-increment"></a>
+## `increment` · [source](math.aug#L2)
 
-## `increment`
-
-[source](math.aug#L1)
-
-**Inputs**
-
-- `value` (`int`) — required labeled input.
-
-Returns: `int`.
-
-**What it does**
-
-- Return `value` plus `1`.
-
-## Shared language rules
-
-See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.
+It takes `value` as an integer. It returns `value` plus `1`.

package/examples/oidc-login/.aug-spec/manifest.json

@@ -1,18 +1,18 @@
 {
   "format": 1,
   "files": [
-    ".aug-spec/august/0.19.0/crypto/contracts.aug",
-    ".aug-spec/august/0.19.0/crypto/contracts.aug.md",
-    ".aug-spec/august/0.19.0/crypto/jose.aug",
-    ".aug-spec/august/0.19.0/crypto/jose.aug.md",
-    ".aug-spec/august/0.19.0/json/contracts.aug",
-    ".aug-spec/august/0.19.0/json/contracts.aug.md",
-    ".aug-spec/august/0.19.0/memory/store.aug",
-    ".aug-spec/august/0.19.0/memory/store.aug.md",
-    ".aug-spec/august/0.19.0/time/contracts.aug",
-    ".aug-spec/august/0.19.0/time/contracts.aug.md",
-    ".aug-spec/august/0.19.0/web/contracts.aug",
-    ".aug-spec/august/0.19.0/web/contracts.aug.md",
+    ".aug-spec/packages/@git/url_0eb7c89453c87681ed15/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/store.aug",
+    ".aug-spec/packages/@git/url_0eb7c89453c87681ed15/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/store.aug.md",
+    ".aug-spec/packages/@git/url_2d3c37c690c0fa115be1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug",
+    ".aug-spec/packages/@git/url_2d3c37c690c0fa115be1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md",
+    ".aug-spec/packages/@git/url_897efafd565158fc4908/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug",
+    ".aug-spec/packages/@git/url_897efafd565158fc4908/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md",
+    ".aug-spec/packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/contracts.aug",
+    ".aug-spec/packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/contracts.aug.md",
+    ".aug-spec/packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/jose.aug",
+    ".aug-spec/packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/jose.aug.md",
+    ".aug-spec/packages/@git/url_c092cd151499c4e1d8a1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug",
+    ".aug-spec/packages/@git/url_c092cd151499c4e1d8a1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md",
     "client/contracts.aug.md",
     "client/endpoints.aug.md",
     "client/export.aug.md",
@@ -36,5 +36,5 @@
     "provider/userinfo.aug.md",
     "provider/views.aug.md"
   ],
-  "digest": "21ab7e44109d4b6f126220d3aece959d724d2d71cf1e07dd5aa214f18e87e2fd"
+  "digest": "78cf80d2658be477f75de6700d0b2f997ddc6a912af4f3ca63462b6f927f8588"
 }

package/examples/oidc-login/.aug-spec/packages/@git/url_0eb7c89453c87681ed15/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/store.aug.md

@@ -0,0 +1,71 @@
+<!-- Generated by aug spec. Edit the August source, then regenerate. -->
+
+# `store.aug`
+
+<a id="symbol-StoreFull"></a>
+## `StoreFull` · class · [source](store.aug#L3)
+
+The bounded store could not accept another live entry. It implements `Error`.
+
+<a id="symbol-ExpiringStore"></a>
+## `ExpiringStore` · capability interface · [source](store.aug#L8)
+
+A bounded, expiring capability for immutable values. Each generic DI binding has its own table. The type parameters are `T` which must satisfy `Data`.
+
+<a id="symbol-ExpiringStore.put"></a>
+### `ExpiringStore.put` · [source](store.aug#L10)
+
+Remove expired entries, then store at most 512 live entries. Time is supplied by the caller. It takes `key` as a string, `value` as `T`, and `expires` and `now` as integers.
+
+It can call [`ExpiringStore.put`](store.aug.md#symbol-ExpiringStore.put). Failures can raise [`StoreFull`](store.aug.md#symbol-StoreFull).
+
+<a id="symbol-ExpiringStore.take"></a>
+### `ExpiringStore.take` · [source](store.aug#L12)
+
+Atomically remove a value. Expired or absent entries return null. It takes `key` as a string and `now` as an integer.
+
+It returns `optional T`. It can call [`ExpiringStore.take`](store.aug.md#symbol-ExpiringStore.take).
+
+<a id="symbol-ExpiringStore.get"></a>
+### `ExpiringStore.get` · [source](store.aug#L14)
+
+Read a live value without consuming it. It takes `key` as a string and `now` as an integer. It returns `optional T`. It can call [`ExpiringStore.get`](store.aug.md#symbol-ExpiringStore.get).
+
+<a id="symbol-MemoryStore"></a>
+## `MemoryStore` · class · [source](store.aug#L17)
+
+A synchronized table with short critical sections and no I/O while locked. It implements [`ExpiringStore<T>`](store.aug.md#symbol-ExpiringStore). The type parameters are `T` which must satisfy `Data`. The read-only, private field `_entries` has type `Shared<Map<string,_Entry<T>>>` and starts as a `Shared` with `value` from an empty map from `string` to [`_Entry<T>`](store.aug.md#symbol-_Entry).
+
+<a id="symbol-MemoryStore.put"></a>
+### `MemoryStore.put` · [source](store.aug#L19)
+
+Remove expired entries, then store at most 512 live entries. Time is supplied by the caller. It takes `key` as a string, `value` as `T`, and `expires` and `now` as integers. Failures can raise [`StoreFull`](store.aug.md#symbol-StoreFull).
+
+It sets `entry` to a [`_Entry`](store.aug.md#symbol-_Entry) for `T` with `value` and `expires`. While holding the lock on `_entries` as mutable `entries`, for each `name` and `saved` in a snapshot of `entries`, if `saved.expires` is at most `now`, it removes the key `name` from `entries`. After the loop, it checks that the number of elements in `entries` is less than `512` or whether `entries` contains the key `key` returns true. It raises a [`StoreFull`](store.aug.md#symbol-StoreFull) at the first failed check.
+
+It stores `entry` in `entries` under `key`. Release this lock when the block exits, including on return or failure.
+
+<a id="symbol-MemoryStore.take"></a>
+### `MemoryStore.take` · [source](store.aug#L28)
+
+Atomically remove a value. Expired or absent entries return null. It takes `key` as a string and `now` as an integer.
+
+While holding the lock on `_entries` as mutable `entries`, it obtains `entries.take` with `key`. If no value is found, it returns null. The non-null result becomes `saved`. It returns null if `saved.expires` is at most `now`, or `saved.value` otherwise.
+
+Release this lock when the block exits, including on return or failure.
+
+<a id="symbol-MemoryStore.get"></a>
+### `MemoryStore.get` · [source](store.aug#L37)
+
+Read a live value without consuming it. It takes `key` as a string and `now` as an integer.
+
+While holding the lock on `_entries` as mutable `entries`, it obtains the value under `key` in `entries`. If no value is found, it returns null. The non-null result becomes `saved`. It returns null if `saved.expires` is at most `now`, or `saved.value` otherwise.
+
+Release this lock when the block exits, including on return or failure.
+
+<a id="symbol-_Entry"></a>
+## `_Entry` · immutable record · [source](store.aug#L5)
+
+It is private to this file. The type parameters are `T` which must satisfy `Data`. It takes `value` as `T`, kept read-only and `expires` as an integer, kept read-only.
+
+Built-in operations follow the [language reference](https://greenpandastudios.github.io/augscript/language-constructs).

package/examples/oidc-login/.aug-spec/packages/@git/url_2d3c37c690c0fa115be1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md

@@ -0,0 +1,17 @@
+<!-- Generated by aug spec. Edit the August source, then regenerate. -->
+
+# `contracts.aug`
+
+<a id="symbol-parse"></a>
+## `parse` · [source](contracts.aug#L4)
+
+Parse strict UTF-8 JSON. Duplicate keys, invalid Unicode, oversized integers, and nesting beyond 64 levels raise JsonError. It takes `input` as a string. Failures can raise `JsonError`.
+
+Within an unsafe block, it returns [`_aug_json_parse`](contracts.aug.md#symbol-_aug_json_parse) with `input`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-_aug_json_parse"></a>
+## `_aug_json_parse` · [source](contracts.aug#L2)
+
+It is private to its defining scope. It takes `input` as a string. It returns `Json`. Failures can raise `JsonError`.
+
+Native C implementation; only its declared contract is visible here.

package/examples/oidc-login/.aug-spec/packages/@git/url_897efafd565158fc4908/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md

@@ -0,0 +1,125 @@
+<!-- Generated by aug spec. Edit the August source, then regenerate. -->
+
+# `contracts.aug`
+
+<a id="symbol-Principal"></a>
+## `Principal` · immutable record · [source](contracts.aug#L3)
+
+Immutable identity returned by an explicitly injected authentication adapter. It takes `subject` as a string, kept read-only and `permissions` as `List<string>`, kept read-only.
+
+<a id="symbol-Authentication"></a>
+## `Authentication` · capability interface · [source](contracts.aug#L6)
+
+Verify the request's credentials. null means unauthenticated; adapter failures raise HttpError.
+
+<a id="symbol-Authentication.authenticate"></a>
+### `Authentication.authenticate` · [source](contracts.aug#L7)
+
+It takes `request` as `HttpRequest`. It returns [`optional Principal`](contracts.aug.md#symbol-Principal). It can call [`Authentication.authenticate`](contracts.aug.md#symbol-Authentication.authenticate). Failures can raise `HttpError`.
+
+<a id="symbol-Authorization"></a>
+## `Authorization` · capability interface · [source](contracts.aug#L10)
+
+Decide whether a verified identity has one named permission.
+
+<a id="symbol-Authorization.authorize"></a>
+### `Authorization.authorize` · [source](contracts.aug#L11)
+
+It takes `identity` as [`Principal`](contracts.aug.md#symbol-Principal) and `permission` as a string. It returns `bool`. It can call [`Authorization.authorize`](contracts.aug.md#symbol-Authorization.authorize). Failures can raise `HttpError`.
+
+<a id="symbol-RequestLogger"></a>
+## `RequestLogger` · capability interface · [source](contracts.aug#L14)
+
+Observe a completed HTTP exchange, including failures and disconnects.
+
+<a id="symbol-RequestLogger.complete"></a>
+### `RequestLogger.complete` · [source](contracts.aug#L15)
+
+It takes `method` and `path` as strings and `status` and `milliseconds` as integers. It can call [`RequestLogger.complete`](contracts.aug.md#symbol-RequestLogger.complete).
+
+<a id="symbol-WebRequestLogger"></a>
+## `WebRequestLogger` · class · [source](contracts.aug#L19)
+
+Emit escaped JSON request metadata to standard error. Credentials and query strings are excluded. It implements [`RequestLogger`](contracts.aug.md#symbol-RequestLogger).
+
+<a id="symbol-WebRequestLogger.complete"></a>
+### `WebRequestLogger.complete` · [source](contracts.aug#L20)
+
+It takes `method` and `path` as strings and `status` and `milliseconds` as integers. Within an unsafe block, it calls [`_aug_http_log`](contracts.aug.md#symbol-_aug_http_log) with `method`, `path`, `status`, and `milliseconds`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-HttpClient"></a>
+## `HttpClient` · capability interface · [source](contracts.aug#L25)
+
+An explicit outbound network capability. TLS verifies the peer and redirects are returned to the caller.
+
+<a id="symbol-HttpClient.request"></a>
+### `HttpClient.request` · [source](contracts.aug#L27)
+
+Perform an HTTP request with bounded bytes. Inside a task, waiting suspends the task's C stack. It takes `method` and `url` as strings, `headers` as `optional Headers`, and `body` as `optional Bytes`. Omitted optional inputs are null.
+
+It returns `HttpResponse<Bytes>`. It can call [`HttpClient.request`](contracts.aug.md#symbol-HttpClient.request). Failures can raise `HttpError`.
+
+<a id="symbol-WebHttpClient"></a>
+## `WebHttpClient` · class · [source](contracts.aug#L32)
+
+Native libwebsockets transport. No socket is opened by construction. It implements [`HttpClient`](contracts.aug.md#symbol-HttpClient).
+
+<a id="symbol-WebHttpClient.request"></a>
+### `WebHttpClient.request` · [source](contracts.aug#L33)
+
+Perform an HTTP request with bounded bytes. Inside a task, waiting suspends the task's C stack. It takes `method` and `url` as strings, `headers` as `optional Headers`, and `body` as `optional Bytes`. Omitted optional inputs are null.
+
+Failures can raise `HttpError`. Within an unsafe block, it returns [`_aug_http_request`](contracts.aug.md#symbol-_aug_http_request) with `method`, `url`, `headers`, and `body`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-redirect"></a>
+## `redirect` · [source](contracts.aug#L38)
+
+Return a redirect with an explicit status. Location is checked as a header value. It takes `location` as a string and `status` as `optional int`. Omitted optional inputs are null.
+
+Failures can raise `HttpError`.
+
+It sets `code` to `303`. If `status` is null, it continues without an operation. If `status` is not null, using `value` for it sets `code` to `value`. It sets `headers` to a `Headers` with the header `"location"` set to `location`.
+
+It returns HTTP code with `""` and `headers` headers.
+
+<a id="symbol-urlEncode"></a>
+## `urlEncode` · [source](contracts.aug#L50)
+
+Encode a UTF-8 value as one URL query or form component using RFC 3986 unreserved characters. It takes `input` as a string. Failures can raise `HttpError`.
+
+Within an unsafe block, it returns [`_aug_http_url_encode`](contracts.aug.md#symbol-_aug_http_url_encode) with `input`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-cookie"></a>
+## `cookie` · [source](contracts.aug#L56)
+
+Construct an HttpOnly, SameSite=Lax session cookie. Secure defaults are chosen explicitly at the call site. Values and paths reject delimiters and controls. maxAge=0 clears the cookie.
+
+It takes `name`, `value`, and `path` as strings, `maxAge` as an integer, and `secure` as a boolean. Failures can raise `HttpError`. Within an unsafe block, it returns [`_aug_http_cookie`](contracts.aug.md#symbol-_aug_http_cookie) with `name`, `value`, `path`, `maxAge`, and `secure`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-_aug_http_log"></a>
+## `_aug_http_log` · [source](contracts.aug#L17)
+
+It is private to its defining scope. It takes `method` and `path` as strings and `status` and `milliseconds` as integers. It can call [`RequestLogger.complete`](contracts.aug.md#symbol-RequestLogger.complete). Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_http_request"></a>
+## `_aug_http_request` · [source](contracts.aug#L29)
+
+It is private to its defining scope. It takes `method` and `url` as strings, `headers` as `optional Headers`, and `body` as `optional Bytes`. Omitted optional inputs are null.
+
+It returns `HttpResponse<Bytes>`. It can call [`HttpClient.request`](contracts.aug.md#symbol-HttpClient.request). Failures can raise `HttpError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_http_url_encode"></a>
+## `_aug_http_url_encode` · [source](contracts.aug#L48)
+
+It is private to its defining scope. It takes `input` as a string. It returns `string`. Failures can raise `HttpError`.
+
+Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_http_cookie"></a>
+## `_aug_http_cookie` · [source](contracts.aug#L54)
+
+It is private to its defining scope. It takes `name`, `value`, and `path` as strings, `maxAge` as an integer, and `secure` as a boolean. It returns `Headers`. Failures can raise `HttpError`.
+
+Native C implementation; only its declared contract is visible here.
+
+Built-in operations follow the [language reference](https://greenpandastudios.github.io/augscript/language-constructs).

package/examples/oidc-login/.aug-spec/{august/0.19.0/crypto → packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40}/contracts.aug

@@ -1,4 +1,5 @@
 // Generated by aug spec. This is a copy of the installed dependency source.
+// aug-spec: "contracts.aug.md" explains this file. Read it before changes; refresh with aug spec.
 /** Explicit permission for native cryptographic operations. Keys and bytes are immutable. */
 capability Crypto:
     /** Generate unpredictable bytes with the operating-system-backed GnuTLS RNG. */
@@ -38,36 +39,36 @@ extern C value _aug_crypto_password_hash(Bytes password, Bytes salt, int iterati
 
 /** GnuTLS-backed capability adapter. Its constructor performs no I/O or key generation. */
 GnuTlsCrypto() implements Crypto:
-    random(int size) returns Bytes unless CryptoError:
+    random(int size) :
         unsafe:
             return _aug_crypto_random(size)
-    sha256(Bytes input) returns Bytes unless CryptoError:
+    sha256(Bytes input) :
         unsafe:
             return _aug_crypto_sha256(input)
-    generateRsa() returns RsaPrivateKey unless CryptoError:
+    generateRsa() :
         unsafe:
             return _aug_crypto_generate_rsa()
-    publicRsa(RsaPrivateKey key) returns RsaPublicKey unless CryptoError:
+    publicRsa(RsaPrivateKey key) :
         unsafe:
             return _aug_crypto_public_rsa(key)
-    signRsa(RsaPrivateKey key, Bytes input) returns Bytes unless CryptoError:
+    signRsa(RsaPrivateKey key, Bytes input) :
         unsafe:
             return _aug_crypto_sign_rsa(key, input)
-    verifyRsa(RsaPublicKey publicKey, Bytes input, Bytes signature) returns bool unless CryptoError:
+    verifyRsa(RsaPublicKey publicKey, Bytes input, Bytes signature) :
         unsafe:
             return _aug_crypto_verify_rsa(publicKey, input, signature)
-    decodeBase64url(string input) returns Bytes unless CryptoError:
+    decodeBase64url(string input) :
         unsafe:
             return _aug_crypto_decode_base64url(input)
-    equal(Bytes left, Bytes right) returns bool:
+    equal(Bytes left, Bytes right) :
         unsafe:
             return _aug_crypto_equal(left, right)
-    exportRsa(RsaPublicKey publicKey) returns Tuple<Bytes, Bytes> unless CryptoError:
+    exportRsa(RsaPublicKey publicKey) :
         unsafe:
             return _aug_crypto_export_rsa(publicKey)
-    importRsa(Bytes modulus, Bytes exponent) returns RsaPublicKey unless CryptoError:
+    importRsa(Bytes modulus, Bytes exponent) :
         unsafe:
             return _aug_crypto_import_rsa(modulus, exponent)
-    passwordHash(Bytes password, Bytes salt, int iterations) returns Bytes unless CryptoError:
+    passwordHash(Bytes password, Bytes salt, int iterations) :
         unsafe:
             return _aug_crypto_password_hash(password, salt, iterations)