@greenpandastudios/aug-cli 0.19.0 → 0.20.1

package/examples/oidc-login/.aug-spec/packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/contracts.aug.md

@@ -0,0 +1,244 @@
+<!-- Generated by aug spec. Edit the August source, then regenerate. -->
+
+# `contracts.aug`
+
+<a id="symbol-Crypto"></a>
+## `Crypto` · capability interface · [source](contracts.aug#L4)
+
+Explicit permission for native cryptographic operations. Keys and bytes are immutable.
+
+<a id="symbol-Crypto.random"></a>
+### `Crypto.random` · [source](contracts.aug#L6)
+
+Generate unpredictable bytes with the operating-system-backed GnuTLS RNG. It takes `size` as an integer.
+
+It returns `Bytes`. It can call [`Crypto.random`](contracts.aug.md#symbol-Crypto.random). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.sha256"></a>
+### `Crypto.sha256` · [source](contracts.aug#L8)
+
+Hash the complete input using SHA-256. It takes `input` as `Bytes`.
+
+It returns `Bytes`. It can call [`Crypto.sha256`](contracts.aug.md#symbol-Crypto.sha256). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.generateRsa"></a>
+### `Crypto.generateRsa` · [source](contracts.aug#L10)
+
+Create a fresh 3072-bit RSA private key. Private material is opaque and scrubbed on reclamation.
+
+It returns `RsaPrivateKey`. It can call [`Crypto.generateRsa`](contracts.aug.md#symbol-Crypto.generateRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.publicRsa"></a>
+### `Crypto.publicRsa` · [source](contracts.aug#L12)
+
+Export the corresponding public key as an opaque immutable value. It takes `key` as `RsaPrivateKey`.
+
+It returns `RsaPublicKey`. It can call [`Crypto.publicRsa`](contracts.aug.md#symbol-Crypto.publicRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.signRsa"></a>
+### `Crypto.signRsa` · [source](contracts.aug#L14)
+
+Sign bytes using RSASSA-PKCS1-v1_5 with SHA-256 (JOSE RS256). It takes `key` as `RsaPrivateKey` and `input` as `Bytes`.
+
+It returns `Bytes`. It can call [`Crypto.signRsa`](contracts.aug.md#symbol-Crypto.signRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.verifyRsa"></a>
+### `Crypto.verifyRsa` · [source](contracts.aug#L16)
+
+Verify only RS256. Invalid signatures return false; invalid keys raise CryptoError. It takes `publicKey` as `RsaPublicKey` and `input` and `signature` as `Bytes`.
+
+It returns `bool`. It can call [`Crypto.verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.decodeBase64url"></a>
+### `Crypto.decodeBase64url` · [source](contracts.aug#L18)
+
+Decode canonical unpadded URL-safe base64, rejecting invalid characters and unused bits. It takes `input` as a string.
+
+It returns `Bytes`. It can call [`Crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.equal"></a>
+### `Crypto.equal` · [source](contracts.aug#L20)
+
+Compare bytes without early exit on their contents. Length remains observable. It takes `left` and `right` as `Bytes`.
+
+It returns `bool`. It can call [`Crypto.equal`](contracts.aug.md#symbol-Crypto.equal).
+
+<a id="symbol-Crypto.exportRsa"></a>
+### `Crypto.exportRsa` · [source](contracts.aug#L22)
+
+Export unsigned big-endian modulus and exponent for an RSA JWK. It takes `publicKey` as `RsaPublicKey`.
+
+It returns `Tuple<Bytes,Bytes>`. It can call [`Crypto.exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.importRsa"></a>
+### `Crypto.importRsa` · [source](contracts.aug#L24)
+
+Import canonical public RSA parameters. Keys must have 2048 to 8192 bits. It takes `modulus` and `exponent` as `Bytes`.
+
+It returns `RsaPublicKey`. It can call [`Crypto.importRsa`](contracts.aug.md#symbol-Crypto.importRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.passwordHash"></a>
+### `Crypto.passwordHash` · [source](contracts.aug#L26)
+
+PBKDF2-HMAC-SHA256, producing 32 bytes. Use a unique 16–64 byte salt; supported work factors are 100,000–2,000,000. It takes `password` and `salt` as `Bytes` and `iterations` as an integer.
+
+It returns `Bytes`. It can call [`Crypto.passwordHash`](contracts.aug.md#symbol-Crypto.passwordHash). Failures can raise `CryptoError`.
+
+<a id="symbol-GnuTlsCrypto"></a>
+## `GnuTlsCrypto` · class · [source](contracts.aug#L41)
+
+GnuTLS-backed capability adapter. Its constructor performs no I/O or key generation. It implements [`Crypto`](contracts.aug.md#symbol-Crypto).
+
+<a id="symbol-GnuTlsCrypto.random"></a>
+### `GnuTlsCrypto.random` · [source](contracts.aug#L42)
+
+Generate unpredictable bytes with the operating-system-backed GnuTLS RNG. It takes `size` as an integer. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_random`](contracts.aug.md#symbol-_aug_crypto_random) with `size`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.sha256"></a>
+### `GnuTlsCrypto.sha256` · [source](contracts.aug#L45)
+
+Hash the complete input using SHA-256. It takes `input` as `Bytes`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_sha256`](contracts.aug.md#symbol-_aug_crypto_sha256) with `input`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.generateRsa"></a>
+### `GnuTlsCrypto.generateRsa` · [source](contracts.aug#L48)
+
+Create a fresh 3072-bit RSA private key. Private material is opaque and scrubbed on reclamation. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_generate_rsa`](contracts.aug.md#symbol-_aug_crypto_generate_rsa). Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.publicRsa"></a>
+### `GnuTlsCrypto.publicRsa` · [source](contracts.aug#L51)
+
+Export the corresponding public key as an opaque immutable value. It takes `key` as `RsaPrivateKey`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_public_rsa`](contracts.aug.md#symbol-_aug_crypto_public_rsa) with `key`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.signRsa"></a>
+### `GnuTlsCrypto.signRsa` · [source](contracts.aug#L54)
+
+Sign bytes using RSASSA-PKCS1-v1_5 with SHA-256 (JOSE RS256). It takes `key` as `RsaPrivateKey` and `input` as `Bytes`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_sign_rsa`](contracts.aug.md#symbol-_aug_crypto_sign_rsa) with `key` and `input`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.verifyRsa"></a>
+### `GnuTlsCrypto.verifyRsa` · [source](contracts.aug#L57)
+
+Verify only RS256. Invalid signatures return false; invalid keys raise CryptoError. It takes `publicKey` as `RsaPublicKey` and `input` and `signature` as `Bytes`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_verify_rsa`](contracts.aug.md#symbol-_aug_crypto_verify_rsa) with `publicKey`, `input`, and `signature`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.decodeBase64url"></a>
+### `GnuTlsCrypto.decodeBase64url` · [source](contracts.aug#L60)
+
+Decode canonical unpadded URL-safe base64, rejecting invalid characters and unused bits. It takes `input` as a string. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_decode_base64url`](contracts.aug.md#symbol-_aug_crypto_decode_base64url) with `input`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.equal"></a>
+### `GnuTlsCrypto.equal` · [source](contracts.aug#L63)
+
+Compare bytes without early exit on their contents. Length remains observable. It takes `left` and `right` as `Bytes`.
+
+Within an unsafe block, it returns [`_aug_crypto_equal`](contracts.aug.md#symbol-_aug_crypto_equal) with `left` and `right`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.exportRsa"></a>
+### `GnuTlsCrypto.exportRsa` · [source](contracts.aug#L66)
+
+Export unsigned big-endian modulus and exponent for an RSA JWK. It takes `publicKey` as `RsaPublicKey`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_export_rsa`](contracts.aug.md#symbol-_aug_crypto_export_rsa) with `publicKey`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.importRsa"></a>
+### `GnuTlsCrypto.importRsa` · [source](contracts.aug#L69)
+
+Import canonical public RSA parameters. Keys must have 2048 to 8192 bits. It takes `modulus` and `exponent` as `Bytes`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_import_rsa`](contracts.aug.md#symbol-_aug_crypto_import_rsa) with `modulus` and `exponent`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.passwordHash"></a>
+### `GnuTlsCrypto.passwordHash` · [source](contracts.aug#L72)
+
+PBKDF2-HMAC-SHA256, producing 32 bytes. Use a unique 16–64 byte salt; supported work factors are 100,000–2,000,000. It takes `password` and `salt` as `Bytes` and `iterations` as an integer. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_password_hash`](contracts.aug.md#symbol-_aug_crypto_password_hash) with `password`, `salt`, and `iterations`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-_aug_crypto_random"></a>
+## `_aug_crypto_random` · [source](contracts.aug#L28)
+
+It is private to its defining scope. It takes `size` as an integer.
+
+It returns `Bytes`. It can call [`Crypto.random`](contracts.aug.md#symbol-Crypto.random). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_sha256"></a>
+## `_aug_crypto_sha256` · [source](contracts.aug#L29)
+
+It is private to its defining scope. It takes `input` as `Bytes`.
+
+It returns `Bytes`. It can call [`Crypto.sha256`](contracts.aug.md#symbol-Crypto.sha256). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_generate_rsa"></a>
+## `_aug_crypto_generate_rsa` · [source](contracts.aug#L30)
+
+It is private to its defining scope. It returns `RsaPrivateKey`. It can call [`Crypto.generateRsa`](contracts.aug.md#symbol-Crypto.generateRsa). Failures can raise `CryptoError`.
+
+Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_public_rsa"></a>
+## `_aug_crypto_public_rsa` · [source](contracts.aug#L31)
+
+It is private to its defining scope. It takes `key` as `RsaPrivateKey`.
+
+It returns `RsaPublicKey`. It can call [`Crypto.publicRsa`](contracts.aug.md#symbol-Crypto.publicRsa). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_sign_rsa"></a>
+## `_aug_crypto_sign_rsa` · [source](contracts.aug#L32)
+
+It is private to its defining scope. It takes `key` as `RsaPrivateKey` and `input` as `Bytes`.
+
+It returns `Bytes`. It can call [`Crypto.signRsa`](contracts.aug.md#symbol-Crypto.signRsa). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_verify_rsa"></a>
+## `_aug_crypto_verify_rsa` · [source](contracts.aug#L33)
+
+It is private to its defining scope. It takes `publicKey` as `RsaPublicKey` and `input` and `signature` as `Bytes`.
+
+It returns `bool`. It can call [`Crypto.verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_decode_base64url"></a>
+## `_aug_crypto_decode_base64url` · [source](contracts.aug#L34)
+
+It is private to its defining scope. It takes `input` as a string.
+
+It returns `Bytes`. It can call [`Crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_equal"></a>
+## `_aug_crypto_equal` · [source](contracts.aug#L35)
+
+It is private to its defining scope. It takes `left` and `right` as `Bytes`. It returns `bool`. It can call [`Crypto.equal`](contracts.aug.md#symbol-Crypto.equal).
+
+Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_export_rsa"></a>
+## `_aug_crypto_export_rsa` · [source](contracts.aug#L36)
+
+It is private to its defining scope. It takes `publicKey` as `RsaPublicKey`.
+
+It returns `Tuple<Bytes,Bytes>`. It can call [`Crypto.exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_import_rsa"></a>
+## `_aug_crypto_import_rsa` · [source](contracts.aug#L37)
+
+It is private to its defining scope. It takes `modulus` and `exponent` as `Bytes`.
+
+It returns `RsaPublicKey`. It can call [`Crypto.importRsa`](contracts.aug.md#symbol-Crypto.importRsa). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_password_hash"></a>
+## `_aug_crypto_password_hash` · [source](contracts.aug#L38)
+
+It is private to its defining scope. It takes `password` and `salt` as `Bytes` and `iterations` as an integer.
+
+It returns `Bytes`. It can call [`Crypto.passwordHash`](contracts.aug.md#symbol-Crypto.passwordHash). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.

package/examples/oidc-login/.aug-spec/{august/0.19.0/crypto → packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40}/jose.aug

@@ -1,6 +1,7 @@
 // Generated by aug spec. This is a copy of the installed dependency source.
+// aug-spec: "jose.aug.md" explains this file. Read it before changes; refresh with aug spec.
 import Crypto from contracts
-import parse from august.json
+import parse from "https://github.com/GreenPandaStudios/augscript/src/stdlib/json#v0.19.0"
 
 /** A failed JOSE validation reveals no unverified claims. */
 JwtError() implements Error:
@@ -12,12 +13,12 @@ record RsaJwk(string kty, string kid, string alg, string use, string n, string e
 record RsaJwks(List<RsaJwk> keys)
 
 /** Export public parameters. Private key material never enters the JSON document. */
-rsaJwk(RsaPublicKey publicKey, string kid, resolve Crypto crypto) returns RsaJwk uses crypto.exportRsa unless CryptoError:
+rsaJwk(RsaPublicKey publicKey, string kid, resolve Crypto crypto) :
     (modulus, exponent) = crypto.exportRsa(publicKey)
     return RsaJwk(kty="RSA", kid=kid, alg="RS256", use="sig", n=modulus.base64url(), e=exponent.base64url())
 
 /** Import only an RSA signing key for RS256. The transport caller selects the trusted JWKS URL. */
-importJwk(RsaJwk jwk, resolve Crypto crypto) returns RsaPublicKey uses crypto.decodeBase64url and crypto.importRsa unless JwtError:
+importJwk(RsaJwk jwk, resolve Crypto crypto) :
     if jwk.kty != "RSA" or jwk.alg != "RS256" or jwk.use != "sig":
         throw JwtError()
     try:
@@ -28,7 +29,7 @@ importJwk(RsaJwk jwk, resolve Crypto crypto) returns RsaPublicKey uses crypto.de
         throw JwtError()
 
 /** Sign immutable JSON with an explicit key id and token type. Claims are validated by the protocol that consumes the token. */
-signJwt(RsaPrivateKey key, Json claims, string kid, string tokenType, resolve Crypto crypto) returns string uses crypto.signRsa unless JwtError:
+signJwt(RsaPrivateKey key, Json claims, string kid, string tokenType, resolve Crypto crypto) :
     try:
         header = Json(value=JwtHeader(alg="RS256", kid=kid, typ=tokenType)).stringify()
         payload = claims.stringify()
@@ -41,7 +42,7 @@ signJwt(RsaPrivateKey key, Json claims, string kid, string tokenType, resolve Cr
         throw JwtError()
 
 /** Verify the signature and configured algorithm, key id, and type before exposing the JSON payload. Never follows token-supplied URLs. */
-verifyJwt(string token, RsaPublicKey publicKey, string kid, string tokenType, resolve Crypto crypto) returns Json uses crypto.decodeBase64url and crypto.verifyRsa unless JwtError:
+verifyJwt(string token, RsaPublicKey publicKey, string kid, string tokenType, resolve Crypto crypto) :
     if token.length() > 16384:
         throw JwtError()
     parts = token.split(separator=".")

package/examples/oidc-login/.aug-spec/packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/jose.aug.md

@@ -0,0 +1,71 @@
+<!-- Generated by aug spec. Edit the August source, then regenerate. -->
+
+# `jose.aug`
+
+<a id="symbol-JwtError"></a>
+## `JwtError` · class · [source](jose.aug#L7)
+
+A failed JOSE validation reveals no unverified claims. It implements `Error`.
+
+<a id="symbol-JwtHeader"></a>
+## `JwtHeader` · immutable record · [source](jose.aug#L10)
+
+This profile accepts only RS256, a configured key id, and an explicit token type. It takes `alg`, `kid`, and `typ` as strings, kept read-only.
+
+<a id="symbol-RsaJwk"></a>
+## `RsaJwk` · immutable record · [source](jose.aug#L12)
+
+Public signing-key metadata in RFC 7517 / RFC 7518 form. It takes `kty`, `kid`, `alg`, `use`, `n`, and `e` as strings, kept read-only.
+
+<a id="symbol-RsaJwks"></a>
+## `RsaJwks` · immutable record · [source](jose.aug#L13)
+
+It takes `keys` as `List<RsaJwk>`, kept read-only.
+
+<a id="symbol-rsaJwk"></a>
+## `rsaJwk` · [source](jose.aug#L16)
+
+Export public parameters. Private key material never enters the JSON document. It takes `publicKey` as `RsaPublicKey` and `kid` as a string. It gets `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) from dependency injection.
+
+Failures can raise `CryptoError`. It splits [`crypto.exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa) with `publicKey` into `modulus` and `exponent` in order. It returns a [`RsaJwk`](jose.aug.md#symbol-RsaJwk) with `kty` `"RSA"`, `kid`, `alg` `"RS256"`, `use` `"sig"`, `n` from the URL-safe base64 encoding of `modulus`, and `e` from the URL-safe base64 encoding of `exponent`.
+
+<a id="symbol-importJwk"></a>
+## `importJwk` · [source](jose.aug#L21)
+
+Import only an RSA signing key for RS256. The transport caller selects the trusted JWKS URL. It takes `jwk` as [`RsaJwk`](jose.aug.md#symbol-RsaJwk). It gets `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) from dependency injection.
+
+Failures can raise [`JwtError`](jose.aug.md#symbol-JwtError). It checks that `jwk.kty` equals `"RSA"` and `jwk.alg` equals `"RS256"` and `jwk.use` equals `"sig"`. It raises a [`JwtError`](jose.aug.md#symbol-JwtError) at the first failed check.
+
+It tries to set `modulus` to [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) with `input` from `jwk.n`, then set `exponent` to [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) with `input` from `jwk.e`, then return [`crypto.importRsa`](contracts.aug.md#symbol-Crypto.importRsa) with `modulus` and `exponent`. If this work raises `CryptoError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError).
+
+<a id="symbol-signJwt"></a>
+## `signJwt` · [source](jose.aug#L32)
+
+Sign immutable JSON with an explicit key id and token type. Claims are validated by the protocol that consumes the token. It takes `key` as `RsaPrivateKey`, `claims` as `Json`, and `kid` and `tokenType` as strings. It gets `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) from dependency injection.
+
+Failures can raise [`JwtError`](jose.aug.md#symbol-JwtError).
+
+It sets `header` to `stringify` on a `Json` with `value` from a [`JwtHeader`](jose.aug.md#symbol-JwtHeader) with `alg` `"RS256"`, `kid`, and `typ` from `tokenType`. It sets `payload` to `claims.stringify`. It builds `signing` as the text `{the URL-safe base64 encoding of the UTF-8 bytes of header}.{the URL-safe base64 encoding of the UTF-8 bytes of payload}`. It sets `signature` to [`crypto.signRsa`](contracts.aug.md#symbol-Crypto.signRsa) with `key` and `input` from the UTF-8 bytes of `signing`.
+
+It returns the text `{signing}.{the URL-safe base64 encoding of signature}`. If this work raises `CryptoError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError). If this work raises `JsonError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError).
+
+<a id="symbol-verifyJwt"></a>
+## `verifyJwt` · [source](jose.aug#L45)
+
+Verify the signature and configured algorithm, key id, and type before exposing the JSON payload. Never follows token-supplied URLs. It takes `token` as a string, `publicKey` as `RsaPublicKey`, and `kid` and `tokenType` as strings. It gets `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) from dependency injection.
+
+Failures can raise [`JwtError`](jose.aug.md#symbol-JwtError). It checks that the byte length of `token` is at most `16384`. It raises a [`JwtError`](jose.aug.md#symbol-JwtError) at the first failed check. It sets `parts` to `token.split` with `separator` `"."`.
+
+It checks that the number of elements in `parts` equals `3`. It raises a [`JwtError`](jose.aug.md#symbol-JwtError) at the first failed check. It sets `first` to the item at index `0` in `parts`. It sets `second` to the item at index `1` in `parts`.
+
+It sets `third` to the item at index `2` in `parts`. It sets `header` to `decode` on [`parse`](../../url_2d3c37c690c0fa115be1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md#symbol-parse) with `input` from `text` on [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) with `input` from `first` for [`JwtHeader`](jose.aug.md#symbol-JwtHeader). It checks that `header.alg` equals `"RS256"` and `header.kid` equals `kid` and `header.typ` equals `tokenType`. It raises a [`JwtError`](jose.aug.md#symbol-JwtError) at the first failed check.
+
+It sets `signature` to [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) with `input` from `third`. It checks that [`crypto.verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa) with `publicKey`, `input` from the UTF-8 bytes of the text `{first}.{second}`, and `signature` returns true. It raises a [`JwtError`](jose.aug.md#symbol-JwtError) at the first failed check. It returns [`parse`](../../url_2d3c37c690c0fa115be1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md#symbol-parse) with `input` from `text` on [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) with `input` from `second`.
+
+If this work raises `CryptoError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError). If this work raises `ConversionError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError). If this work raises `JsonError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError). If this work raises `IndexError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError).
+
+## Dependencies
+
+It uses [`parse`](../../url_2d3c37c690c0fa115be1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md#symbol-parse) from `https://github.com/GreenPandaStudios/augscript/src/stdlib/json#v0.19.0`. It uses [`Crypto`](contracts.aug.md#symbol-Crypto) ([`decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url), [`exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa), [`importRsa`](contracts.aug.md#symbol-Crypto.importRsa), [`signRsa`](contracts.aug.md#symbol-Crypto.signRsa), and [`verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa)) from `contracts`.
+
+Built-in operations follow the [language reference](https://greenpandastudios.github.io/augscript/language-constructs).

package/examples/oidc-login/.aug-spec/packages/@git/url_c092cd151499c4e1d8a1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md

@@ -0,0 +1,30 @@
+<!-- Generated by aug spec. Edit the August source, then regenerate. -->
+
+# `contracts.aug`
+
+<a id="symbol-Clock"></a>
+## `Clock` · capability interface · [source](contracts.aug#L3)
+
+An explicit clock dependency makes time-based behavior replaceable in tests.
+
+<a id="symbol-Clock.now"></a>
+### `Clock.now` · [source](contracts.aug#L5)
+
+Read whole Unix seconds in UTC. It returns `int`. It can call [`Clock.now`](contracts.aug.md#symbol-Clock.now). Failures can raise `TimeError`.
+
+<a id="symbol-SystemClock"></a>
+## `SystemClock` · class · [source](contracts.aug#L8)
+
+Operating-system wall clock. It implements [`Clock`](contracts.aug.md#symbol-Clock).
+
+<a id="symbol-SystemClock.now"></a>
+### `SystemClock.now` · [source](contracts.aug#L9)
+
+Read whole Unix seconds in UTC. Failures can raise `TimeError`. Within an unsafe block, it returns [`_aug_time_now`](contracts.aug.md#symbol-_aug_time_now). Native operations must satisfy their declared C contracts.
+
+<a id="symbol-_aug_time_now"></a>
+## `_aug_time_now` · [source](contracts.aug#L6)
+
+It is private to its defining scope. It returns `int`. It can call [`Clock.now`](contracts.aug.md#symbol-Clock.now). Failures can raise `TimeError`.
+
+Native C implementation; only its declared contract is visible here.

package/examples/oidc-login/aug.lock.json

@@ -0,0 +1,100 @@
+{
+  "format": 1,
+  "compiler": "0.20.1",
+  "specifications": {
+    "crypto": "https://github.com/GreenPandaStudios/augscript/src/stdlib/crypto#b14a0f9aa41f1ce58bd51133bcdc424033e40d40",
+    "json": "https://github.com/GreenPandaStudios/augscript/src/stdlib/json#v0.19.0",
+    "memory": "https://github.com/GreenPandaStudios/augscript/src/stdlib/memory#v0.19.0",
+    "time": "https://github.com/GreenPandaStudios/augscript/src/stdlib/time#v0.19.0",
+    "web": "https://github.com/GreenPandaStudios/augscript/src/stdlib/web#v0.19.0"
+  },
+  "roots": {
+    "crypto": "packages/url_c64a406ed867b506f314",
+    "json": "packages/url_ac5ce553f84fc815ffc3",
+    "memory": "packages/url_c0ae6b2968a0e749820c",
+    "time": "packages/url_d13f6c7bf776c8e5c665",
+    "web": "packages/url_3d8a4bc50002396b26a3"
+  },
+  "npm": {},
+  "git": [
+    {
+      "request": "https://github.com/GreenPandaStudios/augscript/src/stdlib/crypto#b14a0f9aa41f1ce58bd51133bcdc424033e40d40",
+      "repository": "https://github.com/GreenPandaStudios/augscript.git",
+      "revision": "b14a0f9aa41f1ce58bd51133bcdc424033e40d40",
+      "folder": "src/stdlib/crypto",
+      "commit": "b14a0f9aa41f1ce58bd51133bcdc424033e40d40"
+    },
+    {
+      "request": "https://github.com/GreenPandaStudios/augscript/src/stdlib/json#v0.19.0",
+      "repository": "https://github.com/GreenPandaStudios/augscript.git",
+      "revision": "v0.19.0",
+      "folder": "src/stdlib/json",
+      "commit": "a39fc582565d4fca40be4f75fa304d71adc69301"
+    },
+    {
+      "request": "https://github.com/GreenPandaStudios/augscript/src/stdlib/memory#v0.19.0",
+      "repository": "https://github.com/GreenPandaStudios/augscript.git",
+      "revision": "v0.19.0",
+      "folder": "src/stdlib/memory",
+      "commit": "a39fc582565d4fca40be4f75fa304d71adc69301"
+    },
+    {
+      "request": "https://github.com/GreenPandaStudios/augscript/src/stdlib/time#v0.19.0",
+      "repository": "https://github.com/GreenPandaStudios/augscript.git",
+      "revision": "v0.19.0",
+      "folder": "src/stdlib/time",
+      "commit": "a39fc582565d4fca40be4f75fa304d71adc69301"
+    },
+    {
+      "request": "https://github.com/GreenPandaStudios/augscript/src/stdlib/web#v0.19.0",
+      "repository": "https://github.com/GreenPandaStudios/augscript.git",
+      "revision": "v0.19.0",
+      "folder": "src/stdlib/web",
+      "commit": "a39fc582565d4fca40be4f75fa304d71adc69301"
+    }
+  ],
+  "packages": [
+    {
+      "path": "packages/url_3d8a4bc50002396b26a3",
+      "name": "@git/url_897efafd565158fc4908",
+      "version": "0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301",
+      "source": ".",
+      "digest": "51308a4dc69f952f8eaaafc9e6d1be3a903cd60389e4b3c614594d74c1b58653",
+      "dependencies": {}
+    },
+    {
+      "path": "packages/url_ac5ce553f84fc815ffc3",
+      "name": "@git/url_2d3c37c690c0fa115be1",
+      "version": "0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301",
+      "source": ".",
+      "digest": "fa30fce8a20017921a6a568b901785de6df6f2a276762cfbea2ed8cdc9eee360",
+      "dependencies": {}
+    },
+    {
+      "path": "packages/url_c0ae6b2968a0e749820c",
+      "name": "@git/url_0eb7c89453c87681ed15",
+      "version": "0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301",
+      "source": ".",
+      "digest": "3def29fd500e43dff62f62828dc458f253623bd1a6eed299d76870f528b4c6c2",
+      "dependencies": {}
+    },
+    {
+      "path": "packages/url_c64a406ed867b506f314",
+      "name": "@git/url_9ef654c66d34ab8f5527",
+      "version": "0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40",
+      "source": ".",
+      "digest": "42a3a3567867da26f1b9fdf7d0c43ce323fd3ece03be74fd449c317cb845b960",
+      "dependencies": {
+        "url_ac5ce553f84fc815ffc3": "packages/url_ac5ce553f84fc815ffc3"
+      }
+    },
+    {
+      "path": "packages/url_d13f6c7bf776c8e5c665",
+      "name": "@git/url_c092cd151499c4e1d8a1",
+      "version": "0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301",
+      "source": ".",
+      "digest": "9f299994afc477c182fe3404c811e974e1856282df4b2fe5c327799f780f9cac",
+      "dependencies": {}
+    }
+  ]
+}

package/examples/oidc-login/client/contracts.aug

@@ -1,3 +1,4 @@
+// aug-spec: "contracts.aug.md" explains this file. Read it before changes; refresh with aug spec.
 /** Browser-bound client state, nonce and PKCE verifier, consumed by the callback. */
 record LoginTransaction(string state, string nonce, string verifier, int expires)
 /** Sessions require their own issuer, audience, key and JWT type, plus a live registry entry. */

package/examples/oidc-login/client/contracts.aug.md

@@ -1,80 +1,23 @@
 <!-- Generated by aug spec. Edit the August source, then regenerate. -->
 
-# `contracts.aug` specification
-
-August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
-
-## In this file
-
-- [`LoginTransaction`](contracts.aug.md#symbol-LoginTransaction) is an immutable record.
-- [`SessionClaims`](contracts.aug.md#symbol-SessionClaims) is an immutable record.
-- [`LogoutForm`](contracts.aug.md#symbol-LogoutForm) is an immutable record.
-- [`SessionError`](contracts.aug.md#symbol-SessionError) is a class implementing `Error`.
+# `contracts.aug`
 
 <a id="symbol-LoginTransaction"></a>
+## `LoginTransaction` · immutable record · [source](contracts.aug#L3)
 
-## `LoginTransaction`
-
-[source](contracts.aug#L2)
-
-Immutable record.
-
-**Author documentation**
-
-Browser-bound client state, nonce and PKCE verifier, consumed by the callback.
-
-**Inputs**
-
-- `state` (`string`) — required labeled input — stored as `state` and read-only after initialization.
-- `nonce` (`string`) — required labeled input — stored as `nonce` and read-only after initialization.
-- `verifier` (`string`) — required labeled input — stored as `verifier` and read-only after initialization.
-- `expires` (`int`) — required labeled input — stored as `expires` and read-only after initialization.
+Browser-bound client state, nonce and PKCE verifier, consumed by the callback. It takes `state`, `nonce`, and `verifier` as strings, kept read-only and `expires` as an integer, kept read-only.
 
 <a id="symbol-SessionClaims"></a>
+## `SessionClaims` · immutable record · [source](contracts.aug#L5)
 
-## `SessionClaims`
-
-[source](contracts.aug#L4)
-
-Immutable record.
-
-**Author documentation**
-
-Sessions require their own issuer, audience, key and JWT type, plus a live registry entry.
-
-**Inputs**
-
-- `iss` (`string`) — required labeled input — stored as `iss` and read-only after initialization.
-- `sub` (`string`) — required labeled input — stored as `sub` and read-only after initialization.
-- `aud` (`string`) — required labeled input — stored as `aud` and read-only after initialization.
-- `exp` (`int`) — required labeled input — stored as `exp` and read-only after initialization.
-- `iat` (`int`) — required labeled input — stored as `iat` and read-only after initialization.
-- `jti` (`string`) — required labeled input — stored as `jti` and read-only after initialization.
-- `csrf` (`string`) — required labeled input — stored as `csrf` and read-only after initialization.
-- `name` (`string`) — required labeled input — stored as `name` and read-only after initialization.
+Sessions require their own issuer, audience, key and JWT type, plus a live registry entry. It takes `iss`, `sub`, and `aud` as strings, kept read-only, `exp` and `iat` as integers, kept read-only, and `jti`, `csrf`, and `name` as strings, kept read-only.
 
 <a id="symbol-LogoutForm"></a>
+## `LogoutForm` · immutable record · [source](contracts.aug#L6)
 
-## `LogoutForm`
-
-[source](contracts.aug#L5)
-
-Immutable record.
-
-**Inputs**
-
-- `csrf` (`string`) — required labeled input — stored as `csrf` and read-only after initialization.
+It takes `csrf` as a string, kept read-only.
 
 <a id="symbol-SessionError"></a>
+## `SessionError` · class · [source](contracts.aug#L7)
 
-## `SessionError`
-
-[source](contracts.aug#L6)
-
-Behavioral class.
-
-Satisfies `Error`.
-
-## Shared language rules
-
-See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.
+It implements `Error`.

package/examples/oidc-login/client/endpoints.aug

@@ -1,14 +1,15 @@
+// aug-spec: "endpoints.aug.md" explains this file. Read it before changes; refresh with aug spec.
 import SessionClaims and SessionError from contracts
 import authenticate from session
 import LoginPage and Welcome from views
 import UserInfo from provider
 import settings and SigningKeys and KeyError and securityHeaders and withCookie from common
-import Crypto from august.crypto
-import Clock from august.time
-import ExpiringStore from august.memory
+import Crypto from crypto
+import Clock from time
+import ExpiringStore from memory
 
 /** The app renders a verified session or offers its OIDC login flow. No token claims are displayed before verification. */
-endpoint GET "/" as home(optional string token from cookie "aug_session", resolve Crypto crypto, resolve Clock clock, resolve SigningKeys keys, resolve ExpiringStore<SessionClaims> sessions) returns HttpResponse<Html> uses crypto.publicRsa and crypto.decodeBase64url and crypto.verifyRsa and crypto.equal and clock.now and keys.session and sessions.get unless KeyError and TimeError and HttpError:
+endpoint GET "/" as home(optional string token from cookie "aug_session", resolve Crypto crypto, resolve Clock clock, resolve SigningKeys keys, resolve ExpiringStore<SessionClaims> sessions) :
     try:
         session = authenticate(token)
         return HttpResponse(body=Welcome(session), headers=securityHeaders())
@@ -16,6 +17,6 @@ endpoint GET "/" as home(optional string token from cookie "aug_session", resolv
         return HttpResponse(body=LoginPage(), headers=securityHeaders())
 
 /** A protected JSON resource accepts only a live, verified application session. */
-endpoint GET "/me" as me(optional string token from cookie "aug_session", resolve Crypto crypto, resolve Clock clock, resolve SigningKeys keys, resolve ExpiringStore<SessionClaims> sessions) returns HttpResponse<UserInfo> uses crypto.publicRsa and crypto.decodeBase64url and crypto.verifyRsa and crypto.equal and clock.now and keys.session and sessions.get unless SessionError with status 401 and KeyError and TimeError and HttpError:
+endpoint GET "/me" as me(optional string token from cookie "aug_session", resolve Crypto crypto, resolve Clock clock, resolve SigningKeys keys, resolve ExpiringStore<SessionClaims> sessions) unless SessionError with status 401 and KeyError and TimeError and HttpError:
     session = authenticate(token)
     return HttpResponse(body=UserInfo(sub=session.sub, name=session.name), headers=securityHeaders())