@greenpandastudios/aug-cli 0.19.0

package/docs/examples/new-syntax/main.md

@@ -0,0 +1,135 @@
+---
+title: "main.aug · Labeled calls and injection"
+generated: true
+source: "examples/new-syntax/main.aug"
+editLink: false
+prev: false
+next: false
+outline: [2, 3]
+pageClass: aug-example-page
+---
+
+# `main.aug`
+
+[Labeled calls and injection](index.md) · Source and specification
+
+::: details Files in this project
+
+- [`main.aug`](main.md)
+- [`console.aug`](console.md)
+- [`greeter.aug`](greeter.md)
+- [`logger.aug`](logger.md)
+- [`math.aug`](math.md)
+
+:::
+
+::::: example-compare
+
+:::: example-code
+
+## Code {#code}
+
+::: code-group
+
+```aug [Indentation]
+import Console and SystemConsole from august.io
+implement Console with SystemConsole
+import Logger from logger
+import ConsoleLogger from console
+import Greeter from greeter
+import increment from math
+implement Logger with ConsoleLogger
+greeter = Greeter(x=4)
+greeter.greet(name="AugScript")
+int count = 7
+count = increment(value=count)
+print(value=count)
+```
+
+```aug [Braces]
+import Console and SystemConsole from august.io
+implement Console with SystemConsole
+import Logger from logger
+import ConsoleLogger from console
+import Greeter from greeter
+import increment from math
+implement Logger with ConsoleLogger
+greeter = Greeter(x=4)
+greeter.greet(name="AugScript")
+int count = 7
+count = increment(value=count)
+print(value=count)
+```
+
+:::
+
+::::
+
+:::: example-spec
+
+## Compiled specification {#specification}
+
+August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
+
+### In this file
+
+- Register 2 dependency providers before startup.
+- Run 5 other startup steps in source order.
+
+### Dependency providers
+
+Register these providers before startup. Their declaration order does not set initialization order; shared instances initialize in dependency order.
+
+- Provide [`SystemConsole`](dependencies/august/0.19.0/io/contracts.md#symbol-SystemConsole) when `Console` is requested. Reuse one instance.
+- Provide [`ConsoleLogger`](console.md#symbol-ConsoleLogger) when `Logger` is requested. Reuse one instance.
+
+### Startup, in source order
+
+- Set `greeter` to call [`Greeter`](greeter.md#symbol-Greeter) with `x` = `4`; inject `logger` from `Logger`.
+- Call [`Greeter.greet`](greeter.md#symbol-Greeter.greet) on `greeter` with `name` = `"AugScript"`; inject `console` from `Console`.
+- Set `count` of type `int` to `7`.
+- Set `count` to call [`increment`](math.md#symbol-increment) with `value` = `count`.
+- Call `print` with `value` = `count`.
+
+### Dependencies used by this file
+
+Only referenced types and operations appear here. Each name links to its complete specification.
+
+#### [`SystemConsole`](dependencies/august/0.19.0/io/contracts.md#symbol-SystemConsole)
+
+Class from `august.io`.
+
+Used as a type or provider.
+
+#### [`ConsoleLogger`](console.md#symbol-ConsoleLogger)
+
+Class from `console`.
+
+Used as a type or provider.
+
+#### [`Greeter`](greeter.md#symbol-Greeter)
+
+Class from `greeter`.
+
+- Construct with `x`: `int` → [`Greeter`](greeter.md#symbol-Greeter).
+- [`Greeter.greet`](greeter.md#symbol-Greeter.greet) (`name`: `string`) → `void`; inject `console`: [`Console`](dependencies/august/0.19.0/io/contracts.md#symbol-Console); uses [`Console.write`](dependencies/august/0.19.0/io/contracts.md#symbol-Console.write).
+
+#### [`increment`](math.md#symbol-increment)
+
+Function from `math`.
+
+- [`increment`](math.md#symbol-increment) (`value`: `int`) → `int`.
+
+### Built-in operations used by this file
+
+- `print` (`value`: `any`) → `void`: Composition and test output. Other callables receive Console and declare uses console.write.
+
+[Full built-in reference](https://greenpandastudios.github.io/augscript/language-constructs).
+
+### Shared language rules
+
+See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.
+
+::::
+
+:::::

package/docs/examples/new-syntax/math.md

@@ -0,0 +1,79 @@
+---
+title: "math.aug · Labeled calls and injection"
+generated: true
+source: "examples/new-syntax/math.aug"
+editLink: false
+prev: false
+next: false
+outline: [2, 3]
+pageClass: aug-example-page
+---
+
+# `math.aug`
+
+[Labeled calls and injection](index.md) · Source and specification
+
+::: details Files in this project
+
+- [`main.aug`](main.md)
+- [`console.aug`](console.md)
+- [`greeter.aug`](greeter.md)
+- [`logger.aug`](logger.md)
+- [`math.aug`](math.md)
+
+:::
+
+::::: example-compare
+
+:::: example-code
+
+## Code {#code}
+
+::: code-group
+
+```aug [Indentation]
+increment(int value) returns int:
+    return value + 1
+```
+
+```aug [Braces]
+increment(int value) returns int {
+    return value + 1
+}
+```
+
+:::
+
+::::
+
+:::: example-spec
+
+## Compiled specification {#specification}
+
+August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
+
+### In this file
+
+- [`increment`](math.md#symbol-increment) is a function returning `int`.
+
+### `increment` {#symbol-increment}
+
+[source](math.md#code)
+
+**Inputs**
+
+- `value` (`int`) — required labeled input.
+
+Returns: `int`.
+
+**What it does**
+
+- Return `value` plus `1`.
+
+### Shared language rules
+
+See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.
+
+::::
+
+:::::

package/docs/examples/oidc-login/client/contracts.md

@@ -0,0 +1,151 @@
+---
+title: "client/contracts.aug · OpenID Connect login application"
+generated: true
+source: "examples/oidc-login/client/contracts.aug"
+editLink: false
+prev: false
+next: false
+outline: [2, 3]
+pageClass: aug-example-page
+---
+
+# `client/contracts.aug`
+
+[OpenID Connect login application](../index.md) · Source and specification
+
+::: details Files in this project
+
+- [`main.aug`](../main.md)
+- [`client/contracts.aug`](contracts.md)
+- [`client/endpoints.aug`](endpoints.md)
+- [`client/export.aug`](export.md)
+- [`client/login.aug`](login.md)
+- [`client/logout.aug`](logout.md)
+- [`client/protocol.aug`](protocol.md)
+- [`client/session.aug`](session.md)
+- [`client/views.aug`](views.md)
+- [`common/export.aug`](../common/export.md)
+- [`common/headers.aug`](../common/headers.md)
+- [`common/keys.aug`](../common/keys.md)
+- [`common/settings.aug`](../common/settings.md)
+- [`common/views.aug`](../common/views.md)
+- [`provider/authorization.aug`](../provider/authorization.md)
+- [`provider/contracts.aug`](../provider/contracts.md)
+- [`provider/credentials.aug`](../provider/credentials.md)
+- [`provider/discovery.aug`](../provider/discovery.md)
+- [`provider/export.aug`](../provider/export.md)
+- [`provider/token.aug`](../provider/token.md)
+- [`provider/userinfo.aug`](../provider/userinfo.md)
+- [`provider/views.aug`](../provider/views.md)
+
+:::
+
+::::: example-compare
+
+:::: example-code
+
+## Code {#code}
+
+::: code-group
+
+```aug [Indentation]
+/** Browser-bound client state, nonce and PKCE verifier, consumed by the callback. */
+record LoginTransaction(string state, string nonce, string verifier, int expires)
+/** Sessions require their own issuer, audience, key and JWT type, plus a live registry entry. */
+record SessionClaims(string iss, string sub, string aud, int exp, int iat, string jti, string csrf, string name)
+record LogoutForm(string csrf)
+SessionError() implements Error:
+    pass
+```
+
+```aug [Braces]
+/** Browser-bound client state, nonce and PKCE verifier, consumed by the callback. */
+record LoginTransaction(string state, string nonce, string verifier, int expires)
+/** Sessions require their own issuer, audience, key and JWT type, plus a live registry entry. */
+record SessionClaims(string iss, string sub, string aud, int exp, int iat, string jti, string csrf, string name)
+record LogoutForm(string csrf)
+SessionError() implements Error {
+    pass
+}
+```
+
+:::
+
+::::
+
+:::: example-spec
+
+## Compiled specification {#specification}
+
+August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
+
+### In this file
+
+- [`LoginTransaction`](contracts.md#symbol-LoginTransaction) is an immutable record.
+- [`SessionClaims`](contracts.md#symbol-SessionClaims) is an immutable record.
+- [`LogoutForm`](contracts.md#symbol-LogoutForm) is an immutable record.
+- [`SessionError`](contracts.md#symbol-SessionError) is a class implementing `Error`.
+
+### `LoginTransaction` {#symbol-LoginTransaction}
+
+[source](contracts.md#code)
+
+Immutable record.
+
+**Author documentation**
+
+Browser-bound client state, nonce and PKCE verifier, consumed by the callback.
+
+**Inputs**
+
+- `state` (`string`) — required labeled input — stored as `state` and read-only after initialization.
+- `nonce` (`string`) — required labeled input — stored as `nonce` and read-only after initialization.
+- `verifier` (`string`) — required labeled input — stored as `verifier` and read-only after initialization.
+- `expires` (`int`) — required labeled input — stored as `expires` and read-only after initialization.
+
+### `SessionClaims` {#symbol-SessionClaims}
+
+[source](contracts.md#code)
+
+Immutable record.
+
+**Author documentation**
+
+Sessions require their own issuer, audience, key and JWT type, plus a live registry entry.
+
+**Inputs**
+
+- `iss` (`string`) — required labeled input — stored as `iss` and read-only after initialization.
+- `sub` (`string`) — required labeled input — stored as `sub` and read-only after initialization.
+- `aud` (`string`) — required labeled input — stored as `aud` and read-only after initialization.
+- `exp` (`int`) — required labeled input — stored as `exp` and read-only after initialization.
+- `iat` (`int`) — required labeled input — stored as `iat` and read-only after initialization.
+- `jti` (`string`) — required labeled input — stored as `jti` and read-only after initialization.
+- `csrf` (`string`) — required labeled input — stored as `csrf` and read-only after initialization.
+- `name` (`string`) — required labeled input — stored as `name` and read-only after initialization.
+
+### `LogoutForm` {#symbol-LogoutForm}
+
+[source](contracts.md#code)
+
+Immutable record.
+
+**Inputs**
+
+- `csrf` (`string`) — required labeled input — stored as `csrf` and read-only after initialization.
+
+### `SessionError` {#symbol-SessionError}
+
+[source](contracts.md#code)
+
+Behavioral class.
+
+Satisfies `Error`.
+
+### Shared language rules
+
+See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.
+
+::::
+
+:::::

package/docs/examples/oidc-login/client/endpoints.md

@@ -0,0 +1,263 @@
+---
+title: "client/endpoints.aug · OpenID Connect login application"
+generated: true
+source: "examples/oidc-login/client/endpoints.aug"
+editLink: false
+prev: false
+next: false
+outline: [2, 3]
+pageClass: aug-example-page
+---
+
+# `client/endpoints.aug`
+
+[OpenID Connect login application](../index.md) · Source and specification
+
+::: details Files in this project
+
+- [`main.aug`](../main.md)
+- [`client/contracts.aug`](contracts.md)
+- [`client/endpoints.aug`](endpoints.md)
+- [`client/export.aug`](export.md)
+- [`client/login.aug`](login.md)
+- [`client/logout.aug`](logout.md)
+- [`client/protocol.aug`](protocol.md)
+- [`client/session.aug`](session.md)
+- [`client/views.aug`](views.md)
+- [`common/export.aug`](../common/export.md)
+- [`common/headers.aug`](../common/headers.md)
+- [`common/keys.aug`](../common/keys.md)
+- [`common/settings.aug`](../common/settings.md)
+- [`common/views.aug`](../common/views.md)
+- [`provider/authorization.aug`](../provider/authorization.md)
+- [`provider/contracts.aug`](../provider/contracts.md)
+- [`provider/credentials.aug`](../provider/credentials.md)
+- [`provider/discovery.aug`](../provider/discovery.md)
+- [`provider/export.aug`](../provider/export.md)
+- [`provider/token.aug`](../provider/token.md)
+- [`provider/userinfo.aug`](../provider/userinfo.md)
+- [`provider/views.aug`](../provider/views.md)
+
+:::
+
+::::: example-compare
+
+:::: example-code
+
+## Code {#code}
+
+::: code-group
+
+```aug [Indentation]
+import SessionClaims and SessionError from contracts
+import authenticate from session
+import LoginPage and Welcome from views
+import UserInfo from provider
+import settings and SigningKeys and KeyError and securityHeaders and withCookie from common
+import Crypto from august.crypto
+import Clock from august.time
+import ExpiringStore from august.memory
+/** The app renders a verified session or offers its OIDC login flow. No token claims are displayed before verification. */
+endpoint GET "/" as home(optional string token from cookie "aug_session", resolve Crypto crypto, resolve Clock clock, resolve SigningKeys keys, resolve ExpiringStore<SessionClaims> sessions) returns HttpResponse<Html> uses crypto.publicRsa and crypto.decodeBase64url and crypto.verifyRsa and crypto.equal and clock.now and keys.session and sessions.get unless KeyError and TimeError and HttpError:
+    try:
+        session = authenticate(token)
+        return HttpResponse(body=Welcome(session), headers=securityHeaders())
+    catch SessionError error:
+        return HttpResponse(body=LoginPage(), headers=securityHeaders())
+/** A protected JSON resource accepts only a live, verified application session. */
+endpoint GET "/me" as me(optional string token from cookie "aug_session", resolve Crypto crypto, resolve Clock clock, resolve SigningKeys keys, resolve ExpiringStore<SessionClaims> sessions) returns HttpResponse<UserInfo> uses crypto.publicRsa and crypto.decodeBase64url and crypto.verifyRsa and crypto.equal and clock.now and keys.session and sessions.get unless SessionError with status 401 and KeyError and TimeError and HttpError:
+    session = authenticate(token)
+    return HttpResponse(body=UserInfo(sub=session.sub, name=session.name), headers=securityHeaders())
+```
+
+```aug [Braces]
+import SessionClaims and SessionError from contracts
+import authenticate from session
+import LoginPage and Welcome from views
+import UserInfo from provider
+import settings and SigningKeys and KeyError and securityHeaders and withCookie from common
+import Crypto from august.crypto
+import Clock from august.time
+import ExpiringStore from august.memory
+/** The app renders a verified session or offers its OIDC login flow. No token claims are displayed before verification. */
+endpoint GET "/" as home(optional string token from cookie "aug_session", resolve Crypto crypto, resolve Clock clock, resolve SigningKeys keys, resolve ExpiringStore<SessionClaims> sessions) returns HttpResponse<Html> uses crypto.publicRsa and crypto.decodeBase64url and crypto.verifyRsa and crypto.equal and clock.now and keys.session and sessions.get unless KeyError and TimeError and HttpError {
+    try {
+        session = authenticate(token)
+        return HttpResponse(body=Welcome(session), headers=securityHeaders())
+    }
+    catch SessionError error {
+        return HttpResponse(body=LoginPage(), headers=securityHeaders())
+    }
+}
+/** A protected JSON resource accepts only a live, verified application session. */
+endpoint GET "/me" as me(optional string token from cookie "aug_session", resolve Crypto crypto, resolve Clock clock, resolve SigningKeys keys, resolve ExpiringStore<SessionClaims> sessions) returns HttpResponse<UserInfo> uses crypto.publicRsa and crypto.decodeBase64url and crypto.verifyRsa and crypto.equal and clock.now and keys.session and sessions.get unless SessionError with status 401 and KeyError and TimeError and HttpError {
+    session = authenticate(token)
+    return HttpResponse(body=UserInfo(sub=session.sub, name=session.name), headers=securityHeaders())
+}
+```
+
+:::
+
+::::
+
+:::: example-spec
+
+## Compiled specification {#specification}
+
+August 0.19.0. This document is compiled from checked code with deterministic wording guided by Simplified Technical English.
+
+### In this file
+
+- [`home`](endpoints.md#symbol-home) handles `GET` `/` returning `HttpResponse<Html>`.
+- [`me`](endpoints.md#symbol-me) handles `GET` `/me` returning `HttpResponse<UserInfo>`.
+
+### `home` {#symbol-home}
+
+[source](endpoints.md#code)
+
+**Inputs**
+
+- `token` (`optional string`) — read from the HTTP cookie named `aug_session`; absent value becomes null.
+- `crypto` ([`Crypto`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto)) — injected; callers omit it.
+- `clock` ([`Clock`](../dependencies/august/0.19.0/time/contracts.md#symbol-Clock)) — injected; callers omit it.
+- `keys` ([`SigningKeys`](../common/keys.md#symbol-SigningKeys)) — injected; callers omit it.
+- `sessions` ([`ExpiringStore<SessionClaims>`](../dependencies/august/0.19.0/memory/store.md#symbol-ExpiringStore)) — injected; callers omit it.
+
+Returns: `HttpResponse<Html>`.
+
+Capabilities: [`crypto.publicRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.publicRsa), [`crypto.decodeBase64url`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.decodeBase64url), [`crypto.verifyRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.verifyRsa), [`crypto.equal`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.equal), [`clock.now`](../dependencies/august/0.19.0/time/contracts.md#symbol-Clock.now), [`keys.session`](../common/keys.md#symbol-SigningKeys.session), [`sessions.get`](../dependencies/august/0.19.0/memory/store.md#symbol-ExpiringStore.get).
+
+Can fail with `KeyError`, `TimeError`, `HttpError`. Callers must catch or propagate these errors.
+
+HTTP route: `GET` `/`. Use status 200 when the handler returns a body; a returned HttpResponse can set its own status. An unhandled request failure returns status 500 and cancels its request tasks.
+
+**What it does**
+
+- Try these operations:
+  - Set `session` to call [`authenticate`](session.md#symbol-authenticate) with `token` = `token`; inject `crypto` from `crypto`, `clock` from `clock`, `keys` from `keys`, `sessions` from `sessions`.
+  - Return call `HttpResponse` with `body` = call [`Welcome`](views.md#symbol-Welcome) with `session` = `session`; `headers` = call [`securityHeaders`](../common/headers.md#symbol-securityHeaders).
+- If they fail with [`SessionError`](contracts.md#symbol-SessionError), name the failure `error` and recover:
+  - Return call `HttpResponse` with `body` = call [`LoginPage`](views.md#symbol-LoginPage); `headers` = call [`securityHeaders`](../common/headers.md#symbol-securityHeaders).
+
+**Author documentation**
+
+The app renders a verified session or offers its OIDC login flow. No token claims are displayed before verification.
+
+### `me` {#symbol-me}
+
+[source](endpoints.md#code)
+
+**Inputs**
+
+- `token` (`optional string`) — read from the HTTP cookie named `aug_session`; absent value becomes null.
+- `crypto` ([`Crypto`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto)) — injected; callers omit it.
+- `clock` ([`Clock`](../dependencies/august/0.19.0/time/contracts.md#symbol-Clock)) — injected; callers omit it.
+- `keys` ([`SigningKeys`](../common/keys.md#symbol-SigningKeys)) — injected; callers omit it.
+- `sessions` ([`ExpiringStore<SessionClaims>`](../dependencies/august/0.19.0/memory/store.md#symbol-ExpiringStore)) — injected; callers omit it.
+
+Returns: `HttpResponse<UserInfo>`.
+
+Capabilities: [`crypto.publicRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.publicRsa), [`crypto.decodeBase64url`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.decodeBase64url), [`crypto.verifyRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.verifyRsa), [`crypto.equal`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.equal), [`clock.now`](../dependencies/august/0.19.0/time/contracts.md#symbol-Clock.now), [`keys.session`](../common/keys.md#symbol-SigningKeys.session), [`sessions.get`](../dependencies/august/0.19.0/memory/store.md#symbol-ExpiringStore.get).
+
+Can fail with `SessionError`, `KeyError`, `TimeError`, `HttpError`. Callers must catch or propagate these errors.
+
+HTTP route: `GET` `/me`. Use status 200 when the handler returns a body; a returned HttpResponse can set its own status. An unhandled request failure returns status 500 and cancels its request tasks.
+
+Declared HTTP failures: [`SessionError`](contracts.md#symbol-SessionError) returns status 401.
+
+**What it does**
+
+- Set `session` to call [`authenticate`](session.md#symbol-authenticate) with `token` = `token`; inject `crypto` from `crypto`, `clock` from `clock`, `keys` from `keys`, `sessions` from `sessions`.
+- Return call `HttpResponse` with `body` = call [`UserInfo`](../provider/contracts.md#symbol-UserInfo) with `sub` = `sub` of `session`; `name` = `name` of `session`; `headers` = call [`securityHeaders`](../common/headers.md#symbol-securityHeaders).
+
+**Author documentation**
+
+A protected JSON resource accepts only a live, verified application session.
+
+### Dependencies used by this file
+
+Only referenced types and operations appear here. Each name links to its complete specification.
+
+#### [`Crypto`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto)
+
+Capability interface from `august.crypto`.
+
+- [`Crypto.decodeBase64url`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.decodeBase64url) (`input`: `string`) → `Bytes`; can fail with `CryptoError`.
+- [`Crypto.equal`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.equal) (`left`: `Bytes`, `right`: `Bytes`) → `bool`.
+- [`Crypto.publicRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.publicRsa) (`key`: `RsaPrivateKey`) → `RsaPublicKey`; can fail with `CryptoError`.
+- [`Crypto.verifyRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.verifyRsa) (`publicKey`: `RsaPublicKey`, `input`: `Bytes`, `signature`: `Bytes`) → `bool`; can fail with `CryptoError`.
+
+#### [`ExpiringStore`](../dependencies/august/0.19.0/memory/store.md#symbol-ExpiringStore)
+
+Capability interface from `august.memory`.
+
+- [`ExpiringStore.get`](../dependencies/august/0.19.0/memory/store.md#symbol-ExpiringStore.get) (`key`: `string`, `now`: `int`) → `optional T`.
+
+#### [`Clock`](../dependencies/august/0.19.0/time/contracts.md#symbol-Clock)
+
+Capability interface from `august.time`.
+
+- [`Clock.now`](../dependencies/august/0.19.0/time/contracts.md#symbol-Clock.now) (no caller inputs) → `int`; can fail with `TimeError`.
+
+#### [`SessionClaims`](contracts.md#symbol-SessionClaims)
+
+Record from `contracts`.
+
+- Read `name` (`string`).
+- Read `sub` (`string`).
+
+#### [`SessionError`](contracts.md#symbol-SessionError)
+
+Class from `contracts`.
+
+Used as a type or provider.
+
+#### [`authenticate`](session.md#symbol-authenticate)
+
+Function from `session`.
+
+- [`authenticate`](session.md#symbol-authenticate) (`token`: `optional string`) → [`SessionClaims`](contracts.md#symbol-SessionClaims); inject `crypto`: [`Crypto`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto), `clock`: [`Clock`](../dependencies/august/0.19.0/time/contracts.md#symbol-Clock), `keys`: [`SigningKeys`](../common/keys.md#symbol-SigningKeys), `sessions`: [`ExpiringStore<SessionClaims>`](../dependencies/august/0.19.0/memory/store.md#symbol-ExpiringStore); uses [`crypto.publicRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.publicRsa), [`crypto.decodeBase64url`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.decodeBase64url), [`crypto.verifyRsa`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.verifyRsa), [`crypto.equal`](../dependencies/august/0.19.0/crypto/contracts.md#symbol-Crypto.equal), [`clock.now`](../dependencies/august/0.19.0/time/contracts.md#symbol-Clock.now), [`keys.session`](../common/keys.md#symbol-SigningKeys.session), [`sessions.get`](../dependencies/august/0.19.0/memory/store.md#symbol-ExpiringStore.get); can fail with `SessionError`, `KeyError`, `TimeError`.
+
+#### [`LoginPage`](views.md#symbol-LoginPage)
+
+Function from `views`.
+
+- [`LoginPage`](views.md#symbol-LoginPage) (no caller inputs) → `Html`.
+
+#### [`Welcome`](views.md#symbol-Welcome)
+
+Function from `views`.
+
+- [`Welcome`](views.md#symbol-Welcome) (`session`: [`SessionClaims`](contracts.md#symbol-SessionClaims)) → `Html`; can fail with `HttpError`.
+
+#### [`securityHeaders`](../common/headers.md#symbol-securityHeaders)
+
+Function from `common`.
+
+- [`securityHeaders`](../common/headers.md#symbol-securityHeaders) (no caller inputs) → `Headers`; can fail with `HttpError`.
+
+#### [`KeyError`](../common/keys.md#symbol-KeyError)
+
+Class from `common`.
+
+Used as a type or provider.
+
+#### [`SigningKeys`](../common/keys.md#symbol-SigningKeys)
+
+Capability interface from `common`.
+
+- [`SigningKeys.session`](../common/keys.md#symbol-SigningKeys.session) (no caller inputs) → `RsaPrivateKey`; can fail with `KeyError`.
+
+#### [`UserInfo`](../provider/contracts.md#symbol-UserInfo)
+
+Record from `provider`.
+
+- Construct with `sub`: `string`, `name`: `string` → [`UserInfo`](../provider/contracts.md#symbol-UserInfo).
+
+### Shared language rules
+
+See the [language reference](https://greenpandastudios.github.io/augscript/reference) for numeric, equality, ownership, and task rules.
+
+::::
+
+:::::