@greenpandastudios/aug-cli 0.19.0 → 0.21.0

package/examples/oidc-login/.aug-spec/packages/@git/url_897efafd565158fc4908/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md

@@ -0,0 +1,125 @@
+<!-- Generated by aug spec. Edit the August source, then regenerate. -->
+
+# `contracts.aug`
+
+<a id="symbol-Principal"></a>
+## `Principal` · immutable record · [source](contracts.aug#L3)
+
+Immutable identity returned by an explicitly injected authentication adapter. It takes `subject` as a string, kept read-only and `permissions` as `List<string>`, kept read-only.
+
+<a id="symbol-Authentication"></a>
+## `Authentication` · capability interface · [source](contracts.aug#L6)
+
+Verify the request's credentials. null means unauthenticated; adapter failures raise HttpError.
+
+<a id="symbol-Authentication.authenticate"></a>
+### `Authentication.authenticate` · [source](contracts.aug#L7)
+
+It takes `request` as `HttpRequest`. It returns [`optional Principal`](contracts.aug.md#symbol-Principal). It can call [`Authentication.authenticate`](contracts.aug.md#symbol-Authentication.authenticate). Failures can raise `HttpError`.
+
+<a id="symbol-Authorization"></a>
+## `Authorization` · capability interface · [source](contracts.aug#L10)
+
+Decide whether a verified identity has one named permission.
+
+<a id="symbol-Authorization.authorize"></a>
+### `Authorization.authorize` · [source](contracts.aug#L11)
+
+It takes `identity` as [`Principal`](contracts.aug.md#symbol-Principal) and `permission` as a string. It returns `bool`. It can call [`Authorization.authorize`](contracts.aug.md#symbol-Authorization.authorize). Failures can raise `HttpError`.
+
+<a id="symbol-RequestLogger"></a>
+## `RequestLogger` · capability interface · [source](contracts.aug#L14)
+
+Observe a completed HTTP exchange, including failures and disconnects.
+
+<a id="symbol-RequestLogger.complete"></a>
+### `RequestLogger.complete` · [source](contracts.aug#L15)
+
+It takes `method` and `path` as strings and `status` and `milliseconds` as integers. It can call [`RequestLogger.complete`](contracts.aug.md#symbol-RequestLogger.complete).
+
+<a id="symbol-WebRequestLogger"></a>
+## `WebRequestLogger` · class · [source](contracts.aug#L19)
+
+Emit escaped JSON request metadata to standard error. Credentials and query strings are excluded. It implements [`RequestLogger`](contracts.aug.md#symbol-RequestLogger).
+
+<a id="symbol-WebRequestLogger.complete"></a>
+### `WebRequestLogger.complete` · [source](contracts.aug#L20)
+
+It takes `method` and `path` as strings and `status` and `milliseconds` as integers. Within an unsafe block, it calls [`_aug_http_log`](contracts.aug.md#symbol-_aug_http_log) with `method`, `path`, `status`, and `milliseconds`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-HttpClient"></a>
+## `HttpClient` · capability interface · [source](contracts.aug#L25)
+
+An explicit outbound network capability. TLS verifies the peer and redirects are returned to the caller.
+
+<a id="symbol-HttpClient.request"></a>
+### `HttpClient.request` · [source](contracts.aug#L27)
+
+Perform an HTTP request with bounded bytes. Inside a task, waiting suspends the task's C stack. It takes `method` and `url` as strings, `headers` as `optional Headers`, and `body` as `optional Bytes`. Omitted optional inputs are null.
+
+It returns `HttpResponse<Bytes>`. It can call [`HttpClient.request`](contracts.aug.md#symbol-HttpClient.request). Failures can raise `HttpError`.
+
+<a id="symbol-WebHttpClient"></a>
+## `WebHttpClient` · class · [source](contracts.aug#L32)
+
+Native libwebsockets transport. No socket is opened by construction. It implements [`HttpClient`](contracts.aug.md#symbol-HttpClient).
+
+<a id="symbol-WebHttpClient.request"></a>
+### `WebHttpClient.request` · [source](contracts.aug#L33)
+
+Perform an HTTP request with bounded bytes. Inside a task, waiting suspends the task's C stack. It takes `method` and `url` as strings, `headers` as `optional Headers`, and `body` as `optional Bytes`. Omitted optional inputs are null.
+
+Failures can raise `HttpError`. Within an unsafe block, it returns [`_aug_http_request`](contracts.aug.md#symbol-_aug_http_request) with `method`, `url`, `headers`, and `body`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-redirect"></a>
+## `redirect` · [source](contracts.aug#L38)
+
+Return a redirect with an explicit status. Location is checked as a header value. It takes `location` as a string and `status` as `optional int`. Omitted optional inputs are null.
+
+Failures can raise `HttpError`.
+
+It sets `code` to `303`. If `status` is null, it continues without an operation. If `status` is not null, using `value` for it sets `code` to `value`. It sets `headers` to a `Headers` with the header `"location"` set to `location`.
+
+It returns HTTP code with `""` and `headers` headers.
+
+<a id="symbol-urlEncode"></a>
+## `urlEncode` · [source](contracts.aug#L50)
+
+Encode a UTF-8 value as one URL query or form component using RFC 3986 unreserved characters. It takes `input` as a string. Failures can raise `HttpError`.
+
+Within an unsafe block, it returns [`_aug_http_url_encode`](contracts.aug.md#symbol-_aug_http_url_encode) with `input`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-cookie"></a>
+## `cookie` · [source](contracts.aug#L56)
+
+Construct an HttpOnly, SameSite=Lax session cookie. Secure defaults are chosen explicitly at the call site. Values and paths reject delimiters and controls. maxAge=0 clears the cookie.
+
+It takes `name`, `value`, and `path` as strings, `maxAge` as an integer, and `secure` as a boolean. Failures can raise `HttpError`. Within an unsafe block, it returns [`_aug_http_cookie`](contracts.aug.md#symbol-_aug_http_cookie) with `name`, `value`, `path`, `maxAge`, and `secure`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-_aug_http_log"></a>
+## `_aug_http_log` · [source](contracts.aug#L17)
+
+It is private to its defining scope. It takes `method` and `path` as strings and `status` and `milliseconds` as integers. It can call [`RequestLogger.complete`](contracts.aug.md#symbol-RequestLogger.complete). Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_http_request"></a>
+## `_aug_http_request` · [source](contracts.aug#L29)
+
+It is private to its defining scope. It takes `method` and `url` as strings, `headers` as `optional Headers`, and `body` as `optional Bytes`. Omitted optional inputs are null.
+
+It returns `HttpResponse<Bytes>`. It can call [`HttpClient.request`](contracts.aug.md#symbol-HttpClient.request). Failures can raise `HttpError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_http_url_encode"></a>
+## `_aug_http_url_encode` · [source](contracts.aug#L48)
+
+It is private to its defining scope. It takes `input` as a string. It returns `string`. Failures can raise `HttpError`.
+
+Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_http_cookie"></a>
+## `_aug_http_cookie` · [source](contracts.aug#L54)
+
+It is private to its defining scope. It takes `name`, `value`, and `path` as strings, `maxAge` as an integer, and `secure` as a boolean. It returns `Headers`. Failures can raise `HttpError`.
+
+Native C implementation; only its declared contract is visible here.
+
+Built-in operations follow the [language reference](https://greenpandastudios.github.io/augscript/language-constructs).

package/examples/oidc-login/.aug-spec/{august/0.19.0/crypto → packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40}/contracts.aug

@@ -1,4 +1,5 @@
 // Generated by aug spec. This is a copy of the installed dependency source.
+// aug-spec: "contracts.aug.md" explains this file. Read it before changes; refresh with aug spec.
 /** Explicit permission for native cryptographic operations. Keys and bytes are immutable. */
 capability Crypto:
     /** Generate unpredictable bytes with the operating-system-backed GnuTLS RNG. */
@@ -38,36 +39,36 @@ extern C value _aug_crypto_password_hash(Bytes password, Bytes salt, int iterati
 
 /** GnuTLS-backed capability adapter. Its constructor performs no I/O or key generation. */
 GnuTlsCrypto() implements Crypto:
-    random(int size) returns Bytes unless CryptoError:
+    random(int size) :
         unsafe:
             return _aug_crypto_random(size)
-    sha256(Bytes input) returns Bytes unless CryptoError:
+    sha256(Bytes input) :
         unsafe:
             return _aug_crypto_sha256(input)
-    generateRsa() returns RsaPrivateKey unless CryptoError:
+    generateRsa() :
         unsafe:
             return _aug_crypto_generate_rsa()
-    publicRsa(RsaPrivateKey key) returns RsaPublicKey unless CryptoError:
+    publicRsa(RsaPrivateKey key) :
         unsafe:
             return _aug_crypto_public_rsa(key)
-    signRsa(RsaPrivateKey key, Bytes input) returns Bytes unless CryptoError:
+    signRsa(RsaPrivateKey key, Bytes input) :
         unsafe:
             return _aug_crypto_sign_rsa(key, input)
-    verifyRsa(RsaPublicKey publicKey, Bytes input, Bytes signature) returns bool unless CryptoError:
+    verifyRsa(RsaPublicKey publicKey, Bytes input, Bytes signature) :
         unsafe:
             return _aug_crypto_verify_rsa(publicKey, input, signature)
-    decodeBase64url(string input) returns Bytes unless CryptoError:
+    decodeBase64url(string input) :
         unsafe:
             return _aug_crypto_decode_base64url(input)
-    equal(Bytes left, Bytes right) returns bool:
+    equal(Bytes left, Bytes right) :
         unsafe:
             return _aug_crypto_equal(left, right)
-    exportRsa(RsaPublicKey publicKey) returns Tuple<Bytes, Bytes> unless CryptoError:
+    exportRsa(RsaPublicKey publicKey) :
         unsafe:
             return _aug_crypto_export_rsa(publicKey)
-    importRsa(Bytes modulus, Bytes exponent) returns RsaPublicKey unless CryptoError:
+    importRsa(Bytes modulus, Bytes exponent) :
         unsafe:
             return _aug_crypto_import_rsa(modulus, exponent)
-    passwordHash(Bytes password, Bytes salt, int iterations) returns Bytes unless CryptoError:
+    passwordHash(Bytes password, Bytes salt, int iterations) :
         unsafe:
             return _aug_crypto_password_hash(password, salt, iterations)

package/examples/oidc-login/.aug-spec/packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/contracts.aug.md

@@ -0,0 +1,244 @@
+<!-- Generated by aug spec. Edit the August source, then regenerate. -->
+
+# `contracts.aug`
+
+<a id="symbol-Crypto"></a>
+## `Crypto` · capability interface · [source](contracts.aug#L4)
+
+Explicit permission for native cryptographic operations. Keys and bytes are immutable.
+
+<a id="symbol-Crypto.random"></a>
+### `Crypto.random` · [source](contracts.aug#L6)
+
+Generate unpredictable bytes with the operating-system-backed GnuTLS RNG. It takes `size` as an integer.
+
+It returns `Bytes`. It can call [`Crypto.random`](contracts.aug.md#symbol-Crypto.random). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.sha256"></a>
+### `Crypto.sha256` · [source](contracts.aug#L8)
+
+Hash the complete input using SHA-256. It takes `input` as `Bytes`.
+
+It returns `Bytes`. It can call [`Crypto.sha256`](contracts.aug.md#symbol-Crypto.sha256). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.generateRsa"></a>
+### `Crypto.generateRsa` · [source](contracts.aug#L10)
+
+Create a fresh 3072-bit RSA private key. Private material is opaque and scrubbed on reclamation.
+
+It returns `RsaPrivateKey`. It can call [`Crypto.generateRsa`](contracts.aug.md#symbol-Crypto.generateRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.publicRsa"></a>
+### `Crypto.publicRsa` · [source](contracts.aug#L12)
+
+Export the corresponding public key as an opaque immutable value. It takes `key` as `RsaPrivateKey`.
+
+It returns `RsaPublicKey`. It can call [`Crypto.publicRsa`](contracts.aug.md#symbol-Crypto.publicRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.signRsa"></a>
+### `Crypto.signRsa` · [source](contracts.aug#L14)
+
+Sign bytes using RSASSA-PKCS1-v1_5 with SHA-256 (JOSE RS256). It takes `key` as `RsaPrivateKey` and `input` as `Bytes`.
+
+It returns `Bytes`. It can call [`Crypto.signRsa`](contracts.aug.md#symbol-Crypto.signRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.verifyRsa"></a>
+### `Crypto.verifyRsa` · [source](contracts.aug#L16)
+
+Verify only RS256. Invalid signatures return false; invalid keys raise CryptoError. It takes `publicKey` as `RsaPublicKey` and `input` and `signature` as `Bytes`.
+
+It returns `bool`. It can call [`Crypto.verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.decodeBase64url"></a>
+### `Crypto.decodeBase64url` · [source](contracts.aug#L18)
+
+Decode canonical unpadded URL-safe base64, rejecting invalid characters and unused bits. It takes `input` as a string.
+
+It returns `Bytes`. It can call [`Crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.equal"></a>
+### `Crypto.equal` · [source](contracts.aug#L20)
+
+Compare bytes without early exit on their contents. Length remains observable. It takes `left` and `right` as `Bytes`.
+
+It returns `bool`. It can call [`Crypto.equal`](contracts.aug.md#symbol-Crypto.equal).
+
+<a id="symbol-Crypto.exportRsa"></a>
+### `Crypto.exportRsa` · [source](contracts.aug#L22)
+
+Export unsigned big-endian modulus and exponent for an RSA JWK. It takes `publicKey` as `RsaPublicKey`.
+
+It returns `Tuple<Bytes,Bytes>`. It can call [`Crypto.exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.importRsa"></a>
+### `Crypto.importRsa` · [source](contracts.aug#L24)
+
+Import canonical public RSA parameters. Keys must have 2048 to 8192 bits. It takes `modulus` and `exponent` as `Bytes`.
+
+It returns `RsaPublicKey`. It can call [`Crypto.importRsa`](contracts.aug.md#symbol-Crypto.importRsa). Failures can raise `CryptoError`.
+
+<a id="symbol-Crypto.passwordHash"></a>
+### `Crypto.passwordHash` · [source](contracts.aug#L26)
+
+PBKDF2-HMAC-SHA256, producing 32 bytes. Use a unique 16–64 byte salt; supported work factors are 100,000–2,000,000. It takes `password` and `salt` as `Bytes` and `iterations` as an integer.
+
+It returns `Bytes`. It can call [`Crypto.passwordHash`](contracts.aug.md#symbol-Crypto.passwordHash). Failures can raise `CryptoError`.
+
+<a id="symbol-GnuTlsCrypto"></a>
+## `GnuTlsCrypto` · class · [source](contracts.aug#L41)
+
+GnuTLS-backed capability adapter. Its constructor performs no I/O or key generation. It implements [`Crypto`](contracts.aug.md#symbol-Crypto).
+
+<a id="symbol-GnuTlsCrypto.random"></a>
+### `GnuTlsCrypto.random` · [source](contracts.aug#L42)
+
+Generate unpredictable bytes with the operating-system-backed GnuTLS RNG. It takes `size` as an integer. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_random`](contracts.aug.md#symbol-_aug_crypto_random) with `size`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.sha256"></a>
+### `GnuTlsCrypto.sha256` · [source](contracts.aug#L45)
+
+Hash the complete input using SHA-256. It takes `input` as `Bytes`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_sha256`](contracts.aug.md#symbol-_aug_crypto_sha256) with `input`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.generateRsa"></a>
+### `GnuTlsCrypto.generateRsa` · [source](contracts.aug#L48)
+
+Create a fresh 3072-bit RSA private key. Private material is opaque and scrubbed on reclamation. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_generate_rsa`](contracts.aug.md#symbol-_aug_crypto_generate_rsa). Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.publicRsa"></a>
+### `GnuTlsCrypto.publicRsa` · [source](contracts.aug#L51)
+
+Export the corresponding public key as an opaque immutable value. It takes `key` as `RsaPrivateKey`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_public_rsa`](contracts.aug.md#symbol-_aug_crypto_public_rsa) with `key`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.signRsa"></a>
+### `GnuTlsCrypto.signRsa` · [source](contracts.aug#L54)
+
+Sign bytes using RSASSA-PKCS1-v1_5 with SHA-256 (JOSE RS256). It takes `key` as `RsaPrivateKey` and `input` as `Bytes`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_sign_rsa`](contracts.aug.md#symbol-_aug_crypto_sign_rsa) with `key` and `input`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.verifyRsa"></a>
+### `GnuTlsCrypto.verifyRsa` · [source](contracts.aug#L57)
+
+Verify only RS256. Invalid signatures return false; invalid keys raise CryptoError. It takes `publicKey` as `RsaPublicKey` and `input` and `signature` as `Bytes`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_verify_rsa`](contracts.aug.md#symbol-_aug_crypto_verify_rsa) with `publicKey`, `input`, and `signature`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.decodeBase64url"></a>
+### `GnuTlsCrypto.decodeBase64url` · [source](contracts.aug#L60)
+
+Decode canonical unpadded URL-safe base64, rejecting invalid characters and unused bits. It takes `input` as a string. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_decode_base64url`](contracts.aug.md#symbol-_aug_crypto_decode_base64url) with `input`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.equal"></a>
+### `GnuTlsCrypto.equal` · [source](contracts.aug#L63)
+
+Compare bytes without early exit on their contents. Length remains observable. It takes `left` and `right` as `Bytes`.
+
+Within an unsafe block, it returns [`_aug_crypto_equal`](contracts.aug.md#symbol-_aug_crypto_equal) with `left` and `right`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.exportRsa"></a>
+### `GnuTlsCrypto.exportRsa` · [source](contracts.aug#L66)
+
+Export unsigned big-endian modulus and exponent for an RSA JWK. It takes `publicKey` as `RsaPublicKey`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_export_rsa`](contracts.aug.md#symbol-_aug_crypto_export_rsa) with `publicKey`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.importRsa"></a>
+### `GnuTlsCrypto.importRsa` · [source](contracts.aug#L69)
+
+Import canonical public RSA parameters. Keys must have 2048 to 8192 bits. It takes `modulus` and `exponent` as `Bytes`. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_import_rsa`](contracts.aug.md#symbol-_aug_crypto_import_rsa) with `modulus` and `exponent`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-GnuTlsCrypto.passwordHash"></a>
+### `GnuTlsCrypto.passwordHash` · [source](contracts.aug#L72)
+
+PBKDF2-HMAC-SHA256, producing 32 bytes. Use a unique 16–64 byte salt; supported work factors are 100,000–2,000,000. It takes `password` and `salt` as `Bytes` and `iterations` as an integer. Failures can raise `CryptoError`.
+
+Within an unsafe block, it returns [`_aug_crypto_password_hash`](contracts.aug.md#symbol-_aug_crypto_password_hash) with `password`, `salt`, and `iterations`. Native operations must satisfy their declared C contracts.
+
+<a id="symbol-_aug_crypto_random"></a>
+## `_aug_crypto_random` · [source](contracts.aug#L28)
+
+It is private to its defining scope. It takes `size` as an integer.
+
+It returns `Bytes`. It can call [`Crypto.random`](contracts.aug.md#symbol-Crypto.random). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_sha256"></a>
+## `_aug_crypto_sha256` · [source](contracts.aug#L29)
+
+It is private to its defining scope. It takes `input` as `Bytes`.
+
+It returns `Bytes`. It can call [`Crypto.sha256`](contracts.aug.md#symbol-Crypto.sha256). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_generate_rsa"></a>
+## `_aug_crypto_generate_rsa` · [source](contracts.aug#L30)
+
+It is private to its defining scope. It returns `RsaPrivateKey`. It can call [`Crypto.generateRsa`](contracts.aug.md#symbol-Crypto.generateRsa). Failures can raise `CryptoError`.
+
+Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_public_rsa"></a>
+## `_aug_crypto_public_rsa` · [source](contracts.aug#L31)
+
+It is private to its defining scope. It takes `key` as `RsaPrivateKey`.
+
+It returns `RsaPublicKey`. It can call [`Crypto.publicRsa`](contracts.aug.md#symbol-Crypto.publicRsa). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_sign_rsa"></a>
+## `_aug_crypto_sign_rsa` · [source](contracts.aug#L32)
+
+It is private to its defining scope. It takes `key` as `RsaPrivateKey` and `input` as `Bytes`.
+
+It returns `Bytes`. It can call [`Crypto.signRsa`](contracts.aug.md#symbol-Crypto.signRsa). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_verify_rsa"></a>
+## `_aug_crypto_verify_rsa` · [source](contracts.aug#L33)
+
+It is private to its defining scope. It takes `publicKey` as `RsaPublicKey` and `input` and `signature` as `Bytes`.
+
+It returns `bool`. It can call [`Crypto.verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_decode_base64url"></a>
+## `_aug_crypto_decode_base64url` · [source](contracts.aug#L34)
+
+It is private to its defining scope. It takes `input` as a string.
+
+It returns `Bytes`. It can call [`Crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_equal"></a>
+## `_aug_crypto_equal` · [source](contracts.aug#L35)
+
+It is private to its defining scope. It takes `left` and `right` as `Bytes`. It returns `bool`. It can call [`Crypto.equal`](contracts.aug.md#symbol-Crypto.equal).
+
+Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_export_rsa"></a>
+## `_aug_crypto_export_rsa` · [source](contracts.aug#L36)
+
+It is private to its defining scope. It takes `publicKey` as `RsaPublicKey`.
+
+It returns `Tuple<Bytes,Bytes>`. It can call [`Crypto.exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_import_rsa"></a>
+## `_aug_crypto_import_rsa` · [source](contracts.aug#L37)
+
+It is private to its defining scope. It takes `modulus` and `exponent` as `Bytes`.
+
+It returns `RsaPublicKey`. It can call [`Crypto.importRsa`](contracts.aug.md#symbol-Crypto.importRsa). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.
+
+<a id="symbol-_aug_crypto_password_hash"></a>
+## `_aug_crypto_password_hash` · [source](contracts.aug#L38)
+
+It is private to its defining scope. It takes `password` and `salt` as `Bytes` and `iterations` as an integer.
+
+It returns `Bytes`. It can call [`Crypto.passwordHash`](contracts.aug.md#symbol-Crypto.passwordHash). Failures can raise `CryptoError`. Native C implementation; only its declared contract is visible here.

package/examples/oidc-login/.aug-spec/{august/0.19.0/crypto → packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40}/jose.aug

@@ -1,6 +1,7 @@
 // Generated by aug spec. This is a copy of the installed dependency source.
+// aug-spec: "jose.aug.md" explains this file. Read it before changes; refresh with aug spec.
 import Crypto from contracts
-import parse from august.json
+import parse from "https://github.com/GreenPandaStudios/augscript/src/stdlib/json#v0.19.0"
 
 /** A failed JOSE validation reveals no unverified claims. */
 JwtError() implements Error:
@@ -12,12 +13,12 @@ record RsaJwk(string kty, string kid, string alg, string use, string n, string e
 record RsaJwks(List<RsaJwk> keys)
 
 /** Export public parameters. Private key material never enters the JSON document. */
-rsaJwk(RsaPublicKey publicKey, string kid, resolve Crypto crypto) returns RsaJwk uses crypto.exportRsa unless CryptoError:
+rsaJwk(RsaPublicKey publicKey, string kid, resolve Crypto crypto) :
     (modulus, exponent) = crypto.exportRsa(publicKey)
     return RsaJwk(kty="RSA", kid=kid, alg="RS256", use="sig", n=modulus.base64url(), e=exponent.base64url())
 
 /** Import only an RSA signing key for RS256. The transport caller selects the trusted JWKS URL. */
-importJwk(RsaJwk jwk, resolve Crypto crypto) returns RsaPublicKey uses crypto.decodeBase64url and crypto.importRsa unless JwtError:
+importJwk(RsaJwk jwk, resolve Crypto crypto) :
     if jwk.kty != "RSA" or jwk.alg != "RS256" or jwk.use != "sig":
         throw JwtError()
     try:
@@ -28,7 +29,7 @@ importJwk(RsaJwk jwk, resolve Crypto crypto) returns RsaPublicKey uses crypto.de
         throw JwtError()
 
 /** Sign immutable JSON with an explicit key id and token type. Claims are validated by the protocol that consumes the token. */
-signJwt(RsaPrivateKey key, Json claims, string kid, string tokenType, resolve Crypto crypto) returns string uses crypto.signRsa unless JwtError:
+signJwt(RsaPrivateKey key, Json claims, string kid, string tokenType, resolve Crypto crypto) :
     try:
         header = Json(value=JwtHeader(alg="RS256", kid=kid, typ=tokenType)).stringify()
         payload = claims.stringify()
@@ -41,7 +42,7 @@ signJwt(RsaPrivateKey key, Json claims, string kid, string tokenType, resolve Cr
         throw JwtError()
 
 /** Verify the signature and configured algorithm, key id, and type before exposing the JSON payload. Never follows token-supplied URLs. */
-verifyJwt(string token, RsaPublicKey publicKey, string kid, string tokenType, resolve Crypto crypto) returns Json uses crypto.decodeBase64url and crypto.verifyRsa unless JwtError:
+verifyJwt(string token, RsaPublicKey publicKey, string kid, string tokenType, resolve Crypto crypto) :
     if token.length() > 16384:
         throw JwtError()
     parts = token.split(separator=".")

package/examples/oidc-login/.aug-spec/packages/@git/url_9ef654c66d34ab8f5527/0.0.0-git.b14a0f9aa41f1ce58bd51133bcdc424033e40d40/jose.aug.md

@@ -0,0 +1,71 @@
+<!-- Generated by aug spec. Edit the August source, then regenerate. -->
+
+# `jose.aug`
+
+<a id="symbol-JwtError"></a>
+## `JwtError` · class · [source](jose.aug#L7)
+
+A failed JOSE validation reveals no unverified claims. It implements `Error`.
+
+<a id="symbol-JwtHeader"></a>
+## `JwtHeader` · immutable record · [source](jose.aug#L10)
+
+This profile accepts only RS256, a configured key id, and an explicit token type. It takes `alg`, `kid`, and `typ` as strings, kept read-only.
+
+<a id="symbol-RsaJwk"></a>
+## `RsaJwk` · immutable record · [source](jose.aug#L12)
+
+Public signing-key metadata in RFC 7517 / RFC 7518 form. It takes `kty`, `kid`, `alg`, `use`, `n`, and `e` as strings, kept read-only.
+
+<a id="symbol-RsaJwks"></a>
+## `RsaJwks` · immutable record · [source](jose.aug#L13)
+
+It takes `keys` as `List<RsaJwk>`, kept read-only.
+
+<a id="symbol-rsaJwk"></a>
+## `rsaJwk` · [source](jose.aug#L16)
+
+Export public parameters. Private key material never enters the JSON document. It takes `publicKey` as `RsaPublicKey` and `kid` as a string. It gets `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) from dependency injection.
+
+Failures can raise `CryptoError`. It splits [`crypto.exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa) with `publicKey` into `modulus` and `exponent` in order. It returns a [`RsaJwk`](jose.aug.md#symbol-RsaJwk) with `kty` `"RSA"`, `kid`, `alg` `"RS256"`, `use` `"sig"`, `n` from the URL-safe base64 encoding of `modulus`, and `e` from the URL-safe base64 encoding of `exponent`.
+
+<a id="symbol-importJwk"></a>
+## `importJwk` · [source](jose.aug#L21)
+
+Import only an RSA signing key for RS256. The transport caller selects the trusted JWKS URL. It takes `jwk` as [`RsaJwk`](jose.aug.md#symbol-RsaJwk). It gets `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) from dependency injection.
+
+Failures can raise [`JwtError`](jose.aug.md#symbol-JwtError). It checks that `jwk.kty` equals `"RSA"` and `jwk.alg` equals `"RS256"` and `jwk.use` equals `"sig"`. It raises a [`JwtError`](jose.aug.md#symbol-JwtError) at the first failed check.
+
+It tries to set `modulus` to [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) with `input` from `jwk.n`, then set `exponent` to [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) with `input` from `jwk.e`, then return [`crypto.importRsa`](contracts.aug.md#symbol-Crypto.importRsa) with `modulus` and `exponent`. If this work raises `CryptoError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError).
+
+<a id="symbol-signJwt"></a>
+## `signJwt` · [source](jose.aug#L32)
+
+Sign immutable JSON with an explicit key id and token type. Claims are validated by the protocol that consumes the token. It takes `key` as `RsaPrivateKey`, `claims` as `Json`, and `kid` and `tokenType` as strings. It gets `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) from dependency injection.
+
+Failures can raise [`JwtError`](jose.aug.md#symbol-JwtError).
+
+It sets `header` to `stringify` on a `Json` with `value` from a [`JwtHeader`](jose.aug.md#symbol-JwtHeader) with `alg` `"RS256"`, `kid`, and `typ` from `tokenType`. It sets `payload` to `claims.stringify`. It builds `signing` as the text `{the URL-safe base64 encoding of the UTF-8 bytes of header}.{the URL-safe base64 encoding of the UTF-8 bytes of payload}`. It sets `signature` to [`crypto.signRsa`](contracts.aug.md#symbol-Crypto.signRsa) with `key` and `input` from the UTF-8 bytes of `signing`.
+
+It returns the text `{signing}.{the URL-safe base64 encoding of signature}`. If this work raises `CryptoError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError). If this work raises `JsonError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError).
+
+<a id="symbol-verifyJwt"></a>
+## `verifyJwt` · [source](jose.aug#L45)
+
+Verify the signature and configured algorithm, key id, and type before exposing the JSON payload. Never follows token-supplied URLs. It takes `token` as a string, `publicKey` as `RsaPublicKey`, and `kid` and `tokenType` as strings. It gets `crypto` ([`Crypto`](contracts.aug.md#symbol-Crypto)) from dependency injection.
+
+Failures can raise [`JwtError`](jose.aug.md#symbol-JwtError). It checks that the byte length of `token` is at most `16384`. It raises a [`JwtError`](jose.aug.md#symbol-JwtError) at the first failed check. It sets `parts` to `token.split` with `separator` `"."`.
+
+It checks that the number of elements in `parts` equals `3`. It raises a [`JwtError`](jose.aug.md#symbol-JwtError) at the first failed check. It sets `first` to the item at index `0` in `parts`. It sets `second` to the item at index `1` in `parts`.
+
+It sets `third` to the item at index `2` in `parts`. It sets `header` to `decode` on [`parse`](../../url_2d3c37c690c0fa115be1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md#symbol-parse) with `input` from `text` on [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) with `input` from `first` for [`JwtHeader`](jose.aug.md#symbol-JwtHeader). It checks that `header.alg` equals `"RS256"` and `header.kid` equals `kid` and `header.typ` equals `tokenType`. It raises a [`JwtError`](jose.aug.md#symbol-JwtError) at the first failed check.
+
+It sets `signature` to [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) with `input` from `third`. It checks that [`crypto.verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa) with `publicKey`, `input` from the UTF-8 bytes of the text `{first}.{second}`, and `signature` returns true. It raises a [`JwtError`](jose.aug.md#symbol-JwtError) at the first failed check. It returns [`parse`](../../url_2d3c37c690c0fa115be1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md#symbol-parse) with `input` from `text` on [`crypto.decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url) with `input` from `second`.
+
+If this work raises `CryptoError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError). If this work raises `ConversionError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError). If this work raises `JsonError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError). If this work raises `IndexError`, it raises a [`JwtError`](jose.aug.md#symbol-JwtError).
+
+## Dependencies
+
+It uses [`parse`](../../url_2d3c37c690c0fa115be1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md#symbol-parse) from `https://github.com/GreenPandaStudios/augscript/src/stdlib/json#v0.19.0`. It uses [`Crypto`](contracts.aug.md#symbol-Crypto) ([`decodeBase64url`](contracts.aug.md#symbol-Crypto.decodeBase64url), [`exportRsa`](contracts.aug.md#symbol-Crypto.exportRsa), [`importRsa`](contracts.aug.md#symbol-Crypto.importRsa), [`signRsa`](contracts.aug.md#symbol-Crypto.signRsa), and [`verifyRsa`](contracts.aug.md#symbol-Crypto.verifyRsa)) from `contracts`.
+
+Built-in operations follow the [language reference](https://greenpandastudios.github.io/augscript/language-constructs).

package/examples/oidc-login/.aug-spec/packages/@git/url_c092cd151499c4e1d8a1/0.0.0-git.a39fc582565d4fca40be4f75fa304d71adc69301/contracts.aug.md

@@ -0,0 +1,30 @@
+<!-- Generated by aug spec. Edit the August source, then regenerate. -->
+
+# `contracts.aug`
+
+<a id="symbol-Clock"></a>
+## `Clock` · capability interface · [source](contracts.aug#L3)
+
+An explicit clock dependency makes time-based behavior replaceable in tests.
+
+<a id="symbol-Clock.now"></a>
+### `Clock.now` · [source](contracts.aug#L5)
+
+Read whole Unix seconds in UTC. It returns `int`. It can call [`Clock.now`](contracts.aug.md#symbol-Clock.now). Failures can raise `TimeError`.
+
+<a id="symbol-SystemClock"></a>
+## `SystemClock` · class · [source](contracts.aug#L8)
+
+Operating-system wall clock. It implements [`Clock`](contracts.aug.md#symbol-Clock).
+
+<a id="symbol-SystemClock.now"></a>
+### `SystemClock.now` · [source](contracts.aug#L9)
+
+Read whole Unix seconds in UTC. Failures can raise `TimeError`. Within an unsafe block, it returns [`_aug_time_now`](contracts.aug.md#symbol-_aug_time_now). Native operations must satisfy their declared C contracts.
+
+<a id="symbol-_aug_time_now"></a>
+## `_aug_time_now` · [source](contracts.aug#L6)
+
+It is private to its defining scope. It returns `int`. It can call [`Clock.now`](contracts.aug.md#symbol-Clock.now). Failures can raise `TimeError`.
+
+Native C implementation; only its declared contract is visible here.