for review: initial auth logic ast, parser, lexer, marshal, etc.