@greenpandastudios/aug-cli 0.19.0 → 0.21.0

package/examples/oidc-login/.aug-spec/august/0.19.0/crypto/jose.aug.md

@@ -1,266 +0,0 @@
-<!-- Generated by aug spec. Edit the August source, then regenerate. -->
-
-# `jose.aug` specification
-
-August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
-
-## In this file
-
-- [`JwtError`](jose.aug.md#symbol-JwtError) is a class implementing `Error`.
-- [`JwtHeader`](jose.aug.md#symbol-JwtHeader) is an immutable record.
-- [`RsaJwk`](jose.aug.md#symbol-RsaJwk) is an immutable record.
-- [`RsaJwks`](jose.aug.md#symbol-RsaJwks) is an immutable record.
-- [`rsaJwk`](jose.aug.md#symbol-rsaJwk) is a function returning `RsaJwk`.
-- [`importJwk`](jose.aug.md#symbol-importJwk) is a function returning `RsaPublicKey`.
-- [`signJwt`](jose.aug.md#symbol-signJwt) is a function returning `string`.
-- [`verifyJwt`](jose.aug.md#symbol-verifyJwt) is a function returning `Json`.
-
-<a id="symbol-JwtError"></a>
-
-## `JwtError`
-
-[source](jose.aug#L6)
-
-Behavioral class.
-
-Satisfies `Error`.
-
-**Author documentation**
-
-A failed JOSE validation reveals no unverified claims.
-
-<a id="symbol-JwtHeader"></a>
-
-## `JwtHeader`
-
-[source](jose.aug#L9)
-
-Immutable record.
-
-**Author documentation**
-
-This profile accepts only RS256, a configured key id, and an explicit token type.
-
-**Inputs**
-
-- `alg` (`string`) — required labeled input — stored as `alg` and read-only after initialization.
-- `kid` (`string`) — required labeled input — stored as `kid` and read-only after initialization.
-- `typ` (`string`) — required labeled input — stored as `typ` and read-only after initialization.
-
-<a id="symbol-RsaJwk"></a>
-
-## `RsaJwk`
-
-[source](jose.aug#L11)
-
-Immutable record.
-
-**Author documentation**
-
-Public signing-key metadata in RFC 7517 / RFC 7518 form.
-
-**Inputs**
-
-- `kty` (`string`) — required labeled input — stored as `kty` and read-only after initialization.
-- `kid` (`string`) — required labeled input — stored as `kid` and read-only after initialization.
-- `alg` (`string`) — required labeled input — stored as `alg` and read-only after initialization.
-- `use` (`string`) — required labeled input — stored as `use` and read-only after initialization.
-- `n` (`string`) — required labeled input — stored as `n` and read-only after initialization.
-- `e` (`string`) — required labeled input — stored as `e` and read-only after initialization.
-
-<a id="symbol-RsaJwks"></a>
-
-## `RsaJwks`
-
-[source](jose.aug#L12)
-
-Immutable record.
-
-**Inputs**
-
-- `keys` (`List<RsaJwk>`) — required labeled input — stored as `keys` and read-only after initialization.
-
-<a id="symbol-rsaJwk"></a>
-
-## `rsaJwk`
-
-[source](jose.aug#L15)
-
-**Inputs**
-
-- `publicKey` (`RsaPublicKey`) — required labeled input.
-- `kid` (`string`) — required labeled input.
-- `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) — injected; callers omit it.
-
-Returns: [`RsaJwk`](jose.aug.md#symbol-RsaJwk).
-
-Capabilities: [`crypto.exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa).
-
-Can fail with `CryptoError`. Callers must catch or propagate these errors.
-
-**What it does**
-
-- Split call [`Crypto.exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa) on `crypto` with `publicKey` = `publicKey` into `modulus`, `exponent`, in that order.
-- Return call [`RsaJwk`](jose.aug.md#symbol-RsaJwk) with `kty` = `"RSA"`; `kid` = `kid`; `alg` = `"RS256"`; `use` = `"sig"`; `n` = call `base64url` on `modulus`; `e` = call `base64url` on `exponent`.
-
-**Author documentation**
-
-Export public parameters. Private key material never enters the JSON document.
-
-<a id="symbol-importJwk"></a>
-
-## `importJwk`
-
-[source](jose.aug#L20)
-
-**Inputs**
-
-- `jwk` ([`RsaJwk`](jose.aug.md#symbol-RsaJwk)) — required labeled input.
-- `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) — injected; callers omit it.
-
-Returns: `RsaPublicKey`.
-
-Capabilities: [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url), [`crypto.importRsa`](contracts.aug.md#symbol-Crypto.importRsa).
-
-Can fail with `JwtError`. Callers must catch or propagate these errors.
-
-**What it does**
-
-- If ((`kty` of `jwk` does not equal `"RSA"`) or (`alg` of `jwk` does not equal `"RS256"`)) or (`use` of `jwk` does not equal `"sig"`):
-  - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-- Try these operations:
-  - Set `modulus` to call [`Crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) on `crypto` with `input` = `n` of `jwk`.
-  - Set `exponent` to call [`Crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) on `crypto` with `input` = `e` of `jwk`.
-  - Return call [`Crypto.importRsa`](contracts.aug.md#symbol-Crypto.importRsa) on `crypto` with `modulus` = `modulus`; `exponent` = `exponent`.
-- If they fail with `CryptoError`, name the failure `error` and recover:
-  - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-
-**Author documentation**
-
-Import only an RSA signing key for RS256. The transport caller selects the trusted JWKS URL.
-
-<a id="symbol-signJwt"></a>
-
-## `signJwt`
-
-[source](jose.aug#L31)
-
-**Inputs**
-
-- `key` (`RsaPrivateKey`) — required labeled input.
-- `claims` (`Json`) — required labeled input.
-- `kid` (`string`) — required labeled input.
-- `tokenType` (`string`) — required labeled input.
-- `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) — injected; callers omit it.
-
-Returns: `string`.
-
-Capabilities: [`crypto.signRsa`](contracts.aug.md#symbol-Crypto.signRsa).
-
-Can fail with `JwtError`. Callers must catch or propagate these errors.
-
-**What it does**
-
-- Try these operations:
-  - Set `header` to call `stringify` on call `Json` with `value` = call [`JwtHeader`](jose.aug.md#symbol-JwtHeader) with `alg` = `"RS256"`; `kid` = `kid`; `typ` = `tokenType`.
-  - Set `payload` to call `stringify` on `claims`.
-  - Set `signing` to text formed by joining call `base64url` on call `bytes` on `header`, `"."`, call `base64url` on call `bytes` on `payload` in order.
-  - Set `signature` to call [`Crypto.signRsa`](contracts.aug.md#symbol-Crypto.signRsa) on `crypto` with `key` = `key`; `input` = call `bytes` on `signing`.
-  - Return text formed by joining `signing`, `"."`, call `base64url` on `signature` in order.
-- If they fail with `CryptoError`, name the failure `error` and recover:
-  - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-- If they fail with `JsonError`, name the failure `error` and recover:
-  - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-
-**Author documentation**
-
-Sign immutable JSON with an explicit key id and token type. Claims are validated by the protocol that consumes the token.
-
-<a id="symbol-verifyJwt"></a>
-
-## `verifyJwt`
-
-[source](jose.aug#L44)
-
-**Inputs**
-
-- `token` (`string`) — required labeled input.
-- `publicKey` (`RsaPublicKey`) — required labeled input.
-- `kid` (`string`) — required labeled input.
-- `tokenType` (`string`) — required labeled input.
-- `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) — injected; callers omit it.
-
-Returns: `Json`.
-
-Capabilities: [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url), [`crypto.verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa).
-
-Can fail with `JwtError`. Callers must catch or propagate these errors.
-
-**What it does**
-
-- If call `length` on `token` is greater than `16384`:
-  - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-- Set `parts` to call `split` on `token` with `separator` = `"."`.
-- If call `length` on `parts` does not equal `3`:
-  - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-- Try these operations:
-  - Set `first` to call `get` on `parts` with `index` = `0`.
-  - Set `second` to call `get` on `parts` with `index` = `1`.
-  - Set `third` to call `get` on `parts` with `index` = `2`.
-  - Set `header` to call `decode` on call [`parse`](../json/contracts.aug.md#symbol-parse) with `input` = call `text` on call [`Crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) on `crypto` with `input` = `first` with type arguments [`JwtHeader`](jose.aug.md#symbol-JwtHeader).
-  - If ((`alg` of `header` does not equal `"RS256"`) or (`kid` of `header` does not equal `kid`)) or (`typ` of `header` does not equal `tokenType`):
-    - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-  - Set `signature` to call [`Crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) on `crypto` with `input` = `third`.
-  - If not (call [`Crypto.verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa) on `crypto` with `publicKey` = `publicKey`; `input` = call `bytes` on text formed by joining `first`, `"."`, `second` in order; `signature` = `signature`):
-    - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-  - Return call [`parse`](../json/contracts.aug.md#symbol-parse) with `input` = call `text` on call [`Crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) on `crypto` with `input` = `second`.
-- If they fail with `CryptoError`, name the failure `error` and recover:
-  - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-- If they fail with `ConversionError`, name the failure `error` and recover:
-  - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-- If they fail with `JsonError`, name the failure `error` and recover:
-  - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-- If they fail with `IndexError`, name the failure `error` and recover:
-  - Fail with call [`JwtError`](jose.aug.md#symbol-JwtError). Transfer control to a matching catch or propagate the failure.
-
-**Author documentation**
-
-Verify the signature and configured algorithm, key id, and type before exposing the JSON payload. Never follows token-supplied URLs.
-
-## Dependencies used by this file
-
-Only referenced types and operations appear here. Each name links to its complete specification.
-
-### [`Crypto`](contracts.aug.md#symbol-Crypto)
-
-Capability interface from `contracts`.
-
-- [`Crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) (`input`: `string`) → `Bytes`; can fail with `CryptoError`.
-- [`Crypto.exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa) (`publicKey`: `RsaPublicKey`) → `Tuple<Bytes,Bytes>`; can fail with `CryptoError`.
-- [`Crypto.importRsa`](contracts.aug.md#symbol-Crypto.importRsa) (`modulus`: `Bytes`, `exponent`: `Bytes`) → `RsaPublicKey`; can fail with `CryptoError`.
-- [`Crypto.signRsa`](contracts.aug.md#symbol-Crypto.signRsa) (`key`: `RsaPrivateKey`, `input`: `Bytes`) → `Bytes`; can fail with `CryptoError`.
-- [`Crypto.verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa) (`publicKey`: `RsaPublicKey`, `input`: `Bytes`, `signature`: `Bytes`) → `bool`; can fail with `CryptoError`.
-
-### [`parse`](../json/contracts.aug.md#symbol-parse)
-
-Function from `august.json`.
-
-- [`parse`](../json/contracts.aug.md#symbol-parse) (`input`: `string`) → `Json`; can fail with `JsonError`.
-
-## Built-in operations used by this file
-
-- `Bytes.base64url` (no inputs) → `string`: Encode immutable bytes as unpadded RFC 4648 URL-safe base64.
-- `Bytes.text` (no inputs) → `string`: Decode UTF-8 strictly. Invalid input raises ConversionError; embedded NUL is preserved. Can fail with `ConversionError`.
-- `Json.decode` (no inputs) → `JwtHeader`: Decode a checked record or data type: json.decode<Profile>(). Unknown fields, type mismatches, and validation errors are rejected. Can fail with `JsonError`.
-- `Json.stringify` (no inputs) → `string`: Serialize this JSON value with checked UTF-8 escaping and exact int64 values. Can fail with `JsonError`.
-- `List<string>.get` (`index`: `int`) → `string`: Read a zero-based position. An invalid index raises checked IndexError. Reference results grant reading. Can fail with `IndexError`.
-- `List<string>.length` (no inputs) → `int`: Read the number of elements.
-- `string.bytes` (no inputs) → `Bytes`: Encode this string as immutable UTF-8 bytes.
-- `string.length` (no inputs) → `int`: Read the number of UTF-8 bytes. Unicode text is preserved losslessly.
-- `string.split` (`separator`: `string`) → `List<string>`: Split at an exact separator, preserving empty parts.
-
-[Full built-in reference](https://greenpandastudios.github.io/augscript/language-constructs).
-
-## Shared language rules
-
-See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.

package/examples/oidc-login/.aug-spec/august/0.19.0/json/contracts.aug.md

@@ -1,55 +0,0 @@
-<!-- Generated by aug spec. Edit the August source, then regenerate. -->
-
-# `contracts.aug` specification
-
-August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
-
-## In this file
-
-- [`_aug_json_parse`](contracts.aug.md#symbol-_aug_json_parse) is a function returning `Json`.
-- [`parse`](contracts.aug.md#symbol-parse) is a function returning `Json`.
-
-<a id="symbol-parse"></a>
-
-## `parse`
-
-[source](contracts.aug#L4)
-
-**Inputs**
-
-- `input` (`string`) — required labeled input.
-
-Returns: `Json`.
-
-Can fail with `JsonError`. Callers must catch or propagate these errors.
-
-**What it does**
-
-- Enter an unsafe boundary. Native calls use their declared contracts; their foreign implementation is outside this specification:
-  - Return call [`_aug_json_parse`](contracts.aug.md#symbol-_aug_json_parse) with `input` = `input`.
-
-**Author documentation**
-
-Parse strict UTF-8 JSON. Duplicate keys, invalid Unicode, oversized integers, and nesting beyond 64 levels raise JsonError.
-
-<a id="symbol-_aug_json_parse"></a>
-
-## `_aug_json_parse`
-
-[source](contracts.aug#L2)
-
-Private to its defining scope.
-
-**Inputs**
-
-- `input` (`string`) — required labeled input.
-
-Returns: `Json`.
-
-Can fail with `JsonError`. Callers must catch or propagate these errors.
-
-Native C operation. Its declared inputs, result, effects, and errors are the visible contract. The C implementation is outside this specification.
-
-## Shared language rules
-
-See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.

package/examples/oidc-login/.aug-spec/august/0.19.0/memory/store.aug.md

@@ -1,250 +0,0 @@
-<!-- Generated by aug spec. Edit the August source, then regenerate. -->
-
-# `store.aug` specification
-
-August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
-
-## In this file
-
-- [`StoreFull`](store.aug.md#symbol-StoreFull) is a class implementing `Error`.
-- [`_Entry`](store.aug.md#symbol-_Entry) is an immutable record.
-- [`ExpiringStore`](store.aug.md#symbol-ExpiringStore) is a capability interface.
-- [`MemoryStore`](store.aug.md#symbol-MemoryStore) is a class implementing `ExpiringStore<T>`.
-
-<a id="symbol-StoreFull"></a>
-
-## `StoreFull`
-
-[source](store.aug#L3)
-
-Behavioral class.
-
-Satisfies `Error`.
-
-**Author documentation**
-
-The bounded store could not accept another live entry.
-
-<a id="symbol-ExpiringStore"></a>
-
-## `ExpiringStore`
-
-[source](store.aug#L8)
-
-Capability interface.
-
-Type parameters: `T` must satisfy `Data`.
-
-**Author documentation**
-
-A bounded, expiring capability for immutable values. Each generic DI binding has its own table.
-
-<a id="symbol-ExpiringStore.put"></a>
-
-### `ExpiringStore.put`
-
-[source](store.aug#L10)
-
-**Inputs**
-
-- `key` (`string`) — required labeled input.
-- `value` (`T`) — required labeled input.
-- `expires` (`int`) — required labeled input.
-- `now` (`int`) — required labeled input.
-
-Returns: no value.
-
-Capabilities: [`ExpiringStore.put`](store.aug.md#symbol-ExpiringStore.put).
-
-Can fail with `StoreFull`. Callers must catch or propagate these errors.
-
-Interface contract. A selected implementation supplies the behavior.
-
-**Author documentation**
-
-Remove expired entries, then store at most 512 live entries. Time is supplied by the caller.
-
-<a id="symbol-ExpiringStore.take"></a>
-
-### `ExpiringStore.take`
-
-[source](store.aug#L12)
-
-**Inputs**
-
-- `key` (`string`) — required labeled input.
-- `now` (`int`) — required labeled input.
-
-Returns: `optional T`.
-
-Capabilities: [`ExpiringStore.take`](store.aug.md#symbol-ExpiringStore.take).
-
-Interface contract. A selected implementation supplies the behavior.
-
-**Author documentation**
-
-Atomically remove a value. Expired or absent entries return null.
-
-<a id="symbol-ExpiringStore.get"></a>
-
-### `ExpiringStore.get`
-
-[source](store.aug#L14)
-
-**Inputs**
-
-- `key` (`string`) — required labeled input.
-- `now` (`int`) — required labeled input.
-
-Returns: `optional T`.
-
-Capabilities: [`ExpiringStore.get`](store.aug.md#symbol-ExpiringStore.get).
-
-Interface contract. A selected implementation supplies the behavior.
-
-**Author documentation**
-
-Read a live value without consuming it.
-
-<a id="symbol-MemoryStore"></a>
-
-## `MemoryStore`
-
-[source](store.aug#L17)
-
-Behavioral class.
-
-Type parameters: `T` must satisfy `Data`.
-
-Satisfies [`ExpiringStore`](store.aug.md#symbol-ExpiringStore).
-
-**Author documentation**
-
-A synchronized table with short critical sections and no I/O while locked.
-
-**Field initialization**
-
-- Initialize `_entries` of type `Shared<Map<string,_Entry<T>>>` to call `Shared` with `value` = an empty map from `string` to [`_Entry<T>`](store.aug.md#symbol-_Entry). Read-only storage, private to this class.
-
-<a id="symbol-MemoryStore.put"></a>
-
-### `MemoryStore.put`
-
-[source](store.aug#L19)
-
-**Inputs**
-
-- `key` (`string`) — required labeled input.
-- `value` (`T`) — required labeled input.
-- `expires` (`int`) — required labeled input.
-- `now` (`int`) — required labeled input.
-
-Returns: no value.
-
-Capabilities: [`ExpiringStore<T>.put`](store.aug.md#symbol-ExpiringStore.put).
-
-Can fail with `StoreFull`. Callers must catch or propagate these errors.
-
-**What it does**
-
-- Set `entry` to call [`_Entry`](store.aug.md#symbol-_Entry) with type arguments `T` with `value` = `value`; `expires` = `expires`.
-- Lock `_entries`, expose its mutable value as `entries`, and release the lock on every exit:
-  - For each `name` and `saved` in a snapshot of `entries`, in iteration order:
-    - If `expires` of `saved` is at most `now`:
-      - Call `take` on `entries` with `key` = `name`.
-  - If (call `length` on `entries` is at least `512`) and not (call `contains` on `entries` with `key` = `key`):
-    - Fail with call [`StoreFull`](store.aug.md#symbol-StoreFull). Transfer control to a matching catch or propagate the failure.
-  - Call `set` on `entries` with `key` = `key`; `value` = `entry`.
-
-**Author documentation**
-
-Remove expired entries, then store at most 512 live entries. Time is supplied by the caller.
-
-<a id="symbol-MemoryStore.take"></a>
-
-### `MemoryStore.take`
-
-[source](store.aug#L28)
-
-**Inputs**
-
-- `key` (`string`) — required labeled input.
-- `now` (`int`) — required labeled input.
-
-Returns: `optional T`.
-
-Capabilities: [`ExpiringStore<T>.take`](store.aug.md#symbol-ExpiringStore.take).
-
-**What it does**
-
-- Lock `_entries`, expose its mutable value as `entries`, and release the lock on every exit:
-  - Select the matching case for call `take` on `entries` with `key` = `key`:
-    - A null value, including omitted optional input:
-      - Return null.
-    - A present, non-null value, named `saved`:
-      - If `expires` of `saved` is at most `now`:
-        - Return null.
-      - Return `value` of `saved`.
-
-**Author documentation**
-
-Atomically remove a value. Expired or absent entries return null.
-
-<a id="symbol-MemoryStore.get"></a>
-
-### `MemoryStore.get`
-
-[source](store.aug#L37)
-
-**Inputs**
-
-- `key` (`string`) — required labeled input.
-- `now` (`int`) — required labeled input.
-
-Returns: `optional T`.
-
-Capabilities: [`ExpiringStore<T>.get`](store.aug.md#symbol-ExpiringStore.get).
-
-**What it does**
-
-- Lock `_entries`, expose its mutable value as `entries`, and release the lock on every exit:
-  - Select the matching case for call `get` on `entries` with `key` = `key`:
-    - A null value, including omitted optional input:
-      - Return null.
-    - A present, non-null value, named `saved`:
-      - If `expires` of `saved` is at most `now`:
-        - Return null.
-      - Return `value` of `saved`.
-
-**Author documentation**
-
-Read a live value without consuming it.
-
-<a id="symbol-_Entry"></a>
-
-## `_Entry`
-
-[source](store.aug#L5)
-
-Immutable record, private to this file.
-
-Type parameters: `T` must satisfy `Data`.
-
-**Inputs**
-
-- `value` (`T`) — required labeled input — stored as `value` and read-only after initialization.
-- `expires` (`int`) — required labeled input — stored as `expires` and read-only after initialization.
-
-## Built-in operations used by this file
-
-- `Map<string, _Entry<T>>.contains` (`key`: `string`) → `bool`: Check for a key, including entries whose value is null.
-- `Map<string, _Entry<T>>.get` (`key`: `string`) → `optional _Entry<T>`: Read a value by key; an absent key returns null. contains distinguishes an absent key from a stored null.
-- `Map<string, _Entry<T>>.length` (no inputs) → `int`: Read the number of elements.
-- `Map<string, _Entry<T>>.set` (`key`: `string`, `value`: `_Entry<T>`) → `void`: Insert or replace an entry with exclusive mutable access. Changes the receiver.
-- `Map<string, _Entry<T>>.take` (`key`: `string`) → `optional _Entry<T>`: Remove and return an entry under exclusive access. An absent key returns null. Changes the receiver.
-
-[Full built-in reference](https://greenpandastudios.github.io/augscript/language-constructs).
-
-## Shared language rules
-
-See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.

package/examples/oidc-login/.aug-spec/august/0.19.0/time/contracts.aug.md

@@ -1,96 +0,0 @@
-<!-- Generated by aug spec. Edit the August source, then regenerate. -->
-
-# `contracts.aug` specification
-
-August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
-
-## In this file
-
-- [`Clock`](contracts.aug.md#symbol-Clock) is a capability interface.
-- [`_aug_time_now`](contracts.aug.md#symbol-_aug_time_now) is a function returning `int`.
-- [`SystemClock`](contracts.aug.md#symbol-SystemClock) is a class implementing `Clock`.
-
-<a id="symbol-Clock"></a>
-
-## `Clock`
-
-[source](contracts.aug#L3)
-
-Capability interface.
-
-**Author documentation**
-
-An explicit clock dependency makes time-based behavior replaceable in tests.
-
-<a id="symbol-Clock.now"></a>
-
-### `Clock.now`
-
-[source](contracts.aug#L5)
-
-Returns: `int`.
-
-Capabilities: [`Clock.now`](contracts.aug.md#symbol-Clock.now).
-
-Can fail with `TimeError`. Callers must catch or propagate these errors.
-
-Interface contract. A selected implementation supplies the behavior.
-
-**Author documentation**
-
-Read whole Unix seconds in UTC.
-
-<a id="symbol-SystemClock"></a>
-
-## `SystemClock`
-
-[source](contracts.aug#L8)
-
-Behavioral class.
-
-Satisfies [`Clock`](contracts.aug.md#symbol-Clock).
-
-**Author documentation**
-
-Operating-system wall clock.
-
-<a id="symbol-SystemClock.now"></a>
-
-### `SystemClock.now`
-
-[source](contracts.aug#L9)
-
-Returns: `int`.
-
-Capabilities: [`Clock.now`](contracts.aug.md#symbol-Clock.now).
-
-Can fail with `TimeError`. Callers must catch or propagate these errors.
-
-**What it does**
-
-- Enter an unsafe boundary. Native calls use their declared contracts; their foreign implementation is outside this specification:
-  - Return call [`_aug_time_now`](contracts.aug.md#symbol-_aug_time_now).
-
-**Author documentation**
-
-Read whole Unix seconds in UTC.
-
-<a id="symbol-_aug_time_now"></a>
-
-## `_aug_time_now`
-
-[source](contracts.aug#L6)
-
-Private to its defining scope.
-
-Returns: `int`.
-
-Capabilities: [`Clock.now`](contracts.aug.md#symbol-Clock.now).
-
-Can fail with `TimeError`. Callers must catch or propagate these errors.
-
-Native C operation. Its declared inputs, result, effects, and errors are the visible contract. The C implementation is outside this specification.
-
-## Shared language rules
-
-See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.