@aws/dogwood-wasm 0.0.0-stage → 1.1.0

package/dogwood_wasm.js

@@ -0,0 +1,895 @@
+/* @ts-self-types="./dogwood_wasm.d.ts" */
+
+/**
+ * A **stateful, live** Dogwood authorizer: lower a policy set once, then feed
+ * events as they happen and get a decision per event, with temporal history
+ * accumulating across calls.
+ *
+ * This is the counterpart to the one-shot [`replay`](crate::replay): same
+ * engine and same lowering, but the caller drives the loop. Because it holds
+ * temporal state, one instance corresponds to one history — see
+ * [`reset`](DogwoodAuthorizer::reset).
+ */
+class DogwoodAuthorizer {
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        DogwoodAuthorizerFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_dogwoodauthorizer_free(ptr, 0);
+    }
+    /**
+     * Every **fully qualified** action id this instance can decide
+     * (`["Drupe::Action::Read", …]`) — the actions the action schema declares.
+     * An event naming anything else is rejected, so a host that maps its own
+     * operation names onto Cedar actions can check the mapping against this
+     * once at startup rather than discovering a gap one denied request at a
+     * time.
+     * @returns {string[]}
+     */
+    get actions() {
+        const ret = wasm.dogwoodauthorizer_actions(this.__wbg_ptr);
+        var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]);
+        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+        return v1;
+    }
+    /**
+     * How many decisions this instance has returned — the `index` the next
+     * decision will carry.
+     * @returns {number}
+     */
+    get decisionCount() {
+        const ret = wasm.dogwoodauthorizer_decisionCount(this.__wbg_ptr);
+        return ret >>> 0;
+    }
+    /**
+     * The event kinds that are decision points under this instance's event
+     * schema (`["request"]` by default) — the kinds for which
+     * [`isAuthorized`](Self::is_authorized) returns a decision rather than
+     * `undefined`.
+     *
+     * A kind in [`eventKinds`](Self::event_kinds) but not here is history-only:
+     * it is accepted, it updates temporal state, and it yields no verdict.
+     * @returns {string[]}
+     */
+    get decisionKinds() {
+        const ret = wasm.dogwoodauthorizer_decisionKinds(this.__wbg_ptr);
+        var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]);
+        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+        return v1;
+    }
+    /**
+     * Every event kind this instance's event schema declares, decision points
+     * and history-only alike (`["error", "request", "response"]` by default).
+     * Any other kind is rejected — see [`isAuthorized`](Self::is_authorized).
+     * @returns {string[]}
+     */
+    get eventKinds() {
+        const ret = wasm.dogwoodauthorizer_eventKinds(this.__wbg_ptr);
+        var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]);
+        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+        return v1;
+    }
+    /**
+     * Authorize one event.
+     *
+     * Returns the [`AuthorizerDecision`] for a decision-kind event (by
+     * default, `kind: "request"`), or `undefined` for a history-only event —
+     * which still updates temporal history, and is how a host records the
+     * `response` half of a call so later policies can correlate against it.
+     *
+     * Throws a `DogwoodError` if the event is malformed (a missing `action`, a
+     * bad `__entity` tag, a wrong-typed field), **too large** (a value nested
+     * deeper than 128 levels, or past the size limits in `bounds`), or
+     * **rejected** by
+     * [`check`](Self::check) — an action or kind the schema does not declare, or
+     * a timestamp before the previous event's. Either way the instance is left
+     * **usable** and the temporal history untouched: the event is validated
+     * before it is observed, so a failed call is a no-op and the next call
+     * decides normally.
+     *
+     * A *policy* problem is never thrown: an evaluation failure comes back as a
+     * fail-closed `deny` with the cause in
+     * [`errors`](AuthorizerDecision::errors).
+     *
+     * The parameter is taken as a `JsValue` and deserialized here rather than
+     * declared as `EventInput` directly, which is load-bearing: wasm-bindgen
+     * acquires the `&mut self` borrow *before* converting arguments, so a
+     * conversion that fails propagates the exception without releasing the
+     * borrow — permanently poisoning the instance (every later call, `free()`
+     * included, then fails with "recursive use of an object"). Converting
+     * inside the body means the failure is an ordinary `Err` return and the
+     * borrow is released. `unchecked_param_type` keeps the TypeScript
+     * signature `EventInput`.
+     * @param {EventInput} event
+     * @returns {AuthorizerDecision | undefined}
+     */
+    isAuthorized(event) {
+        const ret = wasm.dogwoodauthorizer_isAuthorized(this.__wbg_ptr, event);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return takeFromExternrefTable0(ret[0]);
+    }
+    /**
+     * The timestamp of the most recent event observed, or `undefined` before
+     * the first (and after a [`reset`](Self::reset)). The next event's
+     * timestamp must be at least this.
+     *
+     * Widened to `f64` so the TypeScript type is `number`, matching
+     * [`AuthorizerDecision::timestamp`] and the `timestamp` a host passes in.
+     * An `i64` would come back a `BigInt`, which compares false against every
+     * plain number it is likely to be compared with (`5n == 5` is true but
+     * `5n === 5` is false, and mixed arithmetic throws) — a needless trap on a
+     * value that is a count of seconds and so nowhere near `f64`'s exact-integer
+     * limit.
+     * @returns {number | undefined}
+     */
+    get lastTimestamp() {
+        const ret = wasm.dogwoodauthorizer_lastTimestamp(this.__wbg_ptr);
+        return ret[0] === 0 ? undefined : ret[1];
+    }
+    /**
+     * Lower `source` against `actionSchema` and build a fresh authorizer with
+     * empty temporal history. Throws a `DogwoodError` (with `.diagnostic`) on
+     * a parse, macro, lowering, or schema failure — the same error contract as
+     * every other operation in these bindings.
+     *
+     * The trailing arguments are the optional service-schema overrides
+     * (event-schema DSL text, `providers.json` text, macro-library text);
+     * omit them for the defaults.
+     * @param {string} source
+     * @param {string} action_schema
+     * @param {string | null} [event_schema]
+     * @param {string | null} [providers]
+     * @param {string | null} [macros]
+     */
+    constructor(source, action_schema, event_schema, providers, macros) {
+        const ptr0 = passStringToWasm0(source, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(action_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        var ptr2 = isLikeNone(event_schema) ? 0 : passStringToWasm0(event_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len2 = WASM_VECTOR_LEN;
+        var ptr3 = isLikeNone(providers) ? 0 : passStringToWasm0(providers, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len3 = WASM_VECTOR_LEN;
+        var ptr4 = isLikeNone(macros) ? 0 : passStringToWasm0(macros, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len4 = WASM_VECTOR_LEN;
+        const ret = wasm.dogwoodauthorizer_new(ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3, ptr4, len4);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        this.__wbg_ptr = ret[0];
+        DogwoodAuthorizerFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+    /**
+     * Drop all accumulated temporal history and start over, re-lowering the
+     * original sources. Cheaper than constructing a new instance only in that
+     * the caller need not keep the sources around; the lowering cost is the
+     * same. The decision index restarts at 0.
+     */
+    reset() {
+        const ret = wasm.dogwoodauthorizer_reset(this.__wbg_ptr);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
+}
+if (Symbol.dispose) DogwoodAuthorizer.prototype[Symbol.dispose] = DogwoodAuthorizer.prototype.free;
+exports.DogwoodAuthorizer = DogwoodAuthorizer;
+
+/**
+ * Check a Cedar action schema (`.cedarschema`) in isolation.
+ * @param {string} source
+ * @returns {SchemaCheckReport}
+ */
+function checkActionSchema(source) {
+    const ptr0 = passStringToWasm0(source, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.checkActionSchema(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.checkActionSchema = checkActionSchema;
+
+/**
+ * Check an event-schema DSL (`.dwschema`) in isolation.
+ * @param {string} source
+ * @returns {SchemaCheckReport}
+ */
+function checkEventSchema(source) {
+    const ptr0 = passStringToWasm0(source, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.checkEventSchema(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.checkEventSchema = checkEventSchema;
+
+/**
+ * Parse and macro-expand a `.dw` policy set, reporting syntax/macro errors and
+ * per-policy structural summaries. Needs no action schema.
+ * @param {string} source
+ * @param {string | null} [event_schema]
+ * @param {string | null} [providers]
+ * @param {string | null} [macros]
+ * @returns {CheckParseReport}
+ */
+function checkParse(source, event_schema, providers, macros) {
+    const ptr0 = passStringToWasm0(source, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    var ptr1 = isLikeNone(event_schema) ? 0 : passStringToWasm0(event_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len1 = WASM_VECTOR_LEN;
+    var ptr2 = isLikeNone(providers) ? 0 : passStringToWasm0(providers, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len2 = WASM_VECTOR_LEN;
+    var ptr3 = isLikeNone(macros) ? 0 : passStringToWasm0(macros, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len3 = WASM_VECTOR_LEN;
+    const ret = wasm.checkParse(ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.checkParse = checkParse;
+
+/**
+ * Check an information-provider declarations file (`providers.json`) in
+ * isolation.
+ * @param {string} json
+ * @returns {SchemaCheckReport}
+ */
+function checkProviders(json) {
+    const ptr0 = passStringToWasm0(json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.checkProviders(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.checkProviders = checkProviders;
+
+/**
+ * Parse (with macro expansion) and informalize a `.dw` policy set into
+ * deterministic semi-English, rule by rule. The action schema is optional:
+ * with it, the single declared namespace is dropped from names. Nothing is
+ * validated — an invalid-but-parsable policy is still explained.
+ * @param {string} source
+ * @param {string | null} [action_schema]
+ * @param {string | null} [event_schema]
+ * @param {string | null} [providers]
+ * @param {string | null} [macros]
+ * @returns {ExplainReport}
+ */
+function explain(source, action_schema, event_schema, providers, macros) {
+    const ptr0 = passStringToWasm0(source, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    var ptr1 = isLikeNone(action_schema) ? 0 : passStringToWasm0(action_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len1 = WASM_VECTOR_LEN;
+    var ptr2 = isLikeNone(event_schema) ? 0 : passStringToWasm0(event_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len2 = WASM_VECTOR_LEN;
+    var ptr3 = isLikeNone(providers) ? 0 : passStringToWasm0(providers, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len3 = WASM_VECTOR_LEN;
+    var ptr4 = isLikeNone(macros) ? 0 : passStringToWasm0(macros, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len4 = WASM_VECTOR_LEN;
+    const ret = wasm.explain(ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3, ptr4, len4);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.explain = explain;
+
+/**
+ * Module start hook, invoked automatically on load. In a development build
+ * (feature `dev`, `npm run build:dev`) it installs a panic hook so a Rust panic
+ * surfaces as a readable `console.error`; a release build installs nothing,
+ * and a panic aborts with an opaque `unreachable` without logging its message.
+ */
+function init() {
+    wasm.init();
+}
+exports.init = init;
+
+/**
+ * Lower a `.dw` policy set to Cedar and return the emitted artifacts (policies
+ * and augmented schema, in text and Cedar-JSON forms).
+ * @param {string} source
+ * @param {string} action_schema
+ * @param {string | null} [event_schema]
+ * @param {string | null} [providers]
+ * @param {string | null} [macros]
+ * @returns {LowerArtifacts}
+ */
+function lower(source, action_schema, event_schema, providers, macros) {
+    const ptr0 = passStringToWasm0(source, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(action_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    var ptr2 = isLikeNone(event_schema) ? 0 : passStringToWasm0(event_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len2 = WASM_VECTOR_LEN;
+    var ptr3 = isLikeNone(providers) ? 0 : passStringToWasm0(providers, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len3 = WASM_VECTOR_LEN;
+    var ptr4 = isLikeNone(macros) ? 0 : passStringToWasm0(macros, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len4 = WASM_VECTOR_LEN;
+    const ret = wasm.lower(ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3, ptr4, len4);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.lower = lower;
+
+/**
+ * Generate a Cedar action schema (`.cedarschema` text) from an MCP
+ * `tools/list` manifest, layered on the embedded Drupe template.
+ * @param {string} manifest_json
+ * @returns {string}
+ */
+function mcpToCedarSchema(manifest_json) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passStringToWasm0(manifest_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.mcpToCedarSchema(ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+}
+exports.mcpToCedarSchema = mcpToCedarSchema;
+
+/**
+ * Lower, then drive a `.log` event trace through a stateful authorizer,
+ * returning the per-decision verdict stream.
+ *
+ * Any evaluation error forces a deny, exactly as in
+ * `DogwoodAuthorizer::isAuthorized` (see [`fail_closed`]).
+ * @param {string} source
+ * @param {string} action_schema
+ * @param {string} log
+ * @param {string | null} [event_schema]
+ * @param {string | null} [providers]
+ * @param {string | null} [macros]
+ * @returns {ReplayReport}
+ */
+function replay(source, action_schema, log, event_schema, providers, macros) {
+    const ptr0 = passStringToWasm0(source, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(action_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passStringToWasm0(log, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len2 = WASM_VECTOR_LEN;
+    var ptr3 = isLikeNone(event_schema) ? 0 : passStringToWasm0(event_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len3 = WASM_VECTOR_LEN;
+    var ptr4 = isLikeNone(providers) ? 0 : passStringToWasm0(providers, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len4 = WASM_VECTOR_LEN;
+    var ptr5 = isLikeNone(macros) ? 0 : passStringToWasm0(macros, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len5 = WASM_VECTOR_LEN;
+    const ret = wasm.replay(ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3, ptr4, len4, ptr5, len5);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.replay = replay;
+
+/**
+ * Lower against the Cedar action schema and type-check. Fatal parse/lower
+ * errors throw; a successful lower with type findings returns the report.
+ * @param {string} source
+ * @param {string} action_schema
+ * @param {string | null} [event_schema]
+ * @param {string | null} [providers]
+ * @param {string | null} [macros]
+ * @returns {ValidateReport}
+ */
+function validate(source, action_schema, event_schema, providers, macros) {
+    const ptr0 = passStringToWasm0(source, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(action_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    var ptr2 = isLikeNone(event_schema) ? 0 : passStringToWasm0(event_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len2 = WASM_VECTOR_LEN;
+    var ptr3 = isLikeNone(providers) ? 0 : passStringToWasm0(providers, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len3 = WASM_VECTOR_LEN;
+    var ptr4 = isLikeNone(macros) ? 0 : passStringToWasm0(macros, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len4 = WASM_VECTOR_LEN;
+    const ret = wasm.validate(ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3, ptr4, len4);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.validate = validate;
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg_Error_30c8987f7c2ed4e2: function(arg0, arg1) {
+            const ret = Error(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_Number_14af1003b8dd5ead: function(arg0) {
+            const ret = Number(arg0);
+            return ret;
+        },
+        __wbg_String_8564e559799eccda: function(arg0, arg1) {
+            const ret = String(arg1);
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_bigint_get_as_i64_a2383202b9353e4c: function(arg0, arg1) {
+            const v = arg1;
+            const ret = typeof(v) === 'bigint' ? v : undefined;
+            getDataViewMemory0().setBigInt64(arg0 + 8 * 1, isLikeNone(ret) ? BigInt(0) : ret, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+        },
+        __wbg___wbindgen_boolean_get_5b446f51afd21013: function(arg0) {
+            const v = arg0;
+            const ret = typeof(v) === 'boolean' ? v : undefined;
+            return isLikeNone(ret) ? 0xFFFFFF : ret ? 1 : 0;
+        },
+        __wbg___wbindgen_debug_string_4687d8d8c2017d52: function(arg0, arg1) {
+            const ret = debugString(arg1);
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_in_92f62ee1427d9e49: function(arg0, arg1) {
+            const ret = arg0 in arg1;
+            return ret;
+        },
+        __wbg___wbindgen_is_bigint_b123553bed3bb382: function(arg0) {
+            const ret = typeof(arg0) === 'bigint';
+            return ret;
+        },
+        __wbg___wbindgen_is_function_1f9d30630b8b1d3d: function(arg0) {
+            const ret = typeof(arg0) === 'function';
+            return ret;
+        },
+        __wbg___wbindgen_is_object_3c45d4f2dde4e749: function(arg0) {
+            const val = arg0;
+            const ret = typeof(val) === 'object' && val !== null;
+            return ret;
+        },
+        __wbg___wbindgen_is_string_90b56bc79aad6f6c: function(arg0) {
+            const ret = typeof(arg0) === 'string';
+            return ret;
+        },
+        __wbg___wbindgen_is_undefined_8865fb403f8fe9d8: function(arg0) {
+            const ret = arg0 === undefined;
+            return ret;
+        },
+        __wbg___wbindgen_jsval_eq_02babf21faa37971: function(arg0, arg1) {
+            const ret = arg0 === arg1;
+            return ret;
+        },
+        __wbg___wbindgen_jsval_loose_eq_677f21e468d6b461: function(arg0, arg1) {
+            const ret = arg0 == arg1;
+            return ret;
+        },
+        __wbg___wbindgen_number_get_2e0e7dee9f701a71: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'number' ? obj : undefined;
+            getDataViewMemory0().setFloat64(arg0 + 8 * 1, isLikeNone(ret) ? 0 : ret, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+        },
+        __wbg___wbindgen_string_get_0380ccaa2f57f0d9: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'string' ? obj : undefined;
+            var ptr1 = isLikeNone(ret) ? 0 : passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            var len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_throw_41e9ee4f547fc59a: function(arg0, arg1) {
+            throw new Error(getStringFromWasm0(arg0, arg1));
+        },
+        __wbg_call_6137034ef55c9d0f: function() { return handleError(function (arg0, arg1) {
+            const ret = arg0.call(arg1);
+            return ret;
+        }, arguments); },
+        __wbg_done_b41a1d26cdb37fb6: function(arg0) {
+            const ret = arg0.done;
+            return ret;
+        },
+        __wbg_entries_fb6397112b1de25f: function(arg0) {
+            const ret = Object.entries(arg0);
+            return ret;
+        },
+        __wbg_forEach_7ad975c8e42636ed: function(arg0, arg1, arg2) {
+            try {
+                var state0 = {a: arg1, b: arg2};
+                var cb0 = (arg0, arg1) => {
+                    const a = state0.a;
+                    state0.a = 0;
+                    try {
+                        return wasm_bindgen_cfade1c0cc745d74___convert__closures_____invoke___js_sys_a2eda7c66b84933c___Function_fn_wasm_bindgen_cfade1c0cc745d74___JsValue_____wasm_bindgen_cfade1c0cc745d74___sys__Undefined___js_sys_a2eda7c66b84933c___Function_fn_wasm_bindgen_cfade1c0cc745d74___JsValue_____wasm_bindgen_cfade1c0cc745d74___sys__Undefined_______true_(a, state0.b, arg0, arg1);
+                    } finally {
+                        state0.a = a;
+                    }
+                };
+                arg0.forEach(cb0);
+            } finally {
+                state0.a = 0;
+            }
+        },
+        __wbg_getRandomValues_a608c4436c19407a: function() { return handleError(function (arg0, arg1) {
+            globalThis.crypto.getRandomValues(getArrayU8FromWasm0(arg0, arg1));
+        }, arguments); },
+        __wbg_get_658f6698067d9515: function() { return handleError(function (arg0, arg1) {
+            const ret = Reflect.get(arg0, arg1);
+            return ret;
+        }, arguments); },
+        __wbg_get_6c896e0571ddae51: function(arg0, arg1) {
+            const ret = arg0[arg1 >>> 0];
+            return ret;
+        },
+        __wbg_get_unchecked_288889d017702237: function(arg0, arg1) {
+            const ret = arg0[arg1 >>> 0];
+            return ret;
+        },
+        __wbg_get_with_ref_key_6412cf3094599694: function(arg0, arg1) {
+            const ret = arg0[arg1];
+            return ret;
+        },
+        __wbg_instanceof_ArrayBuffer_a99f175873e5d9b8: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof ArrayBuffer;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_instanceof_Map_b2611749102d7ba3: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Map;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_instanceof_Uint8Array_828cef2aaacafc31: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Uint8Array;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_isArray_e15a2ff68ffdbef2: function(arg0) {
+            const ret = Array.isArray(arg0);
+            return ret;
+        },
+        __wbg_isSafeInteger_717808ad6a54bd9e: function(arg0) {
+            const ret = Number.isSafeInteger(arg0);
+            return ret;
+        },
+        __wbg_iterator_e3c31c892080e444: function() {
+            const ret = Symbol.iterator;
+            return ret;
+        },
+        __wbg_length_78dac82682e59660: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_length_7f3c00c40364105e: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_length_d4bdea10311bd9cf: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_new_1dbf7428bba60a42: function(arg0) {
+            const ret = new Uint8Array(arg0);
+            return ret;
+        },
+        __wbg_new_343a093a3c2ffb4e: function(arg0, arg1) {
+            const ret = new Error(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_new_617a8cdb8bb1130e: function() {
+            const ret = new Object();
+            return ret;
+        },
+        __wbg_new_ee2291f50781bf1d: function() {
+            const ret = new Array();
+            return ret;
+        },
+        __wbg_next_33784799010f1bbe: function(arg0) {
+            const ret = arg0.next;
+            return ret;
+        },
+        __wbg_next_f4aac29c42af995c: function() { return handleError(function (arg0) {
+            const ret = arg0.next();
+            return ret;
+        }, arguments); },
+        __wbg_parse_0fc53dead14b3b42: function() { return handleError(function (arg0, arg1) {
+            const ret = JSON.parse(getStringFromWasm0(arg0, arg1));
+            return ret;
+        }, arguments); },
+        __wbg_prototypesetcall_bc27214492979395: function(arg0, arg1, arg2) {
+            Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
+        },
+        __wbg_set_145a351398b48c65: function() { return handleError(function (arg0, arg1, arg2) {
+            const ret = Reflect.set(arg0, arg1, arg2);
+            return ret;
+        }, arguments); },
+        __wbg_set_6be42768c690e380: function(arg0, arg1, arg2) {
+            arg0[arg1] = arg2;
+        },
+        __wbg_set_bea140a88be9b277: function(arg0, arg1, arg2) {
+            arg0[arg1 >>> 0] = arg2;
+        },
+        __wbg_set_name_2c630595dc90a7aa: function(arg0, arg1, arg2) {
+            arg0.name = getStringFromWasm0(arg1, arg2);
+        },
+        __wbg_size_c2498a9484dc789c: function(arg0) {
+            const ret = arg0.size;
+            return ret;
+        },
+        __wbg_value_f3c585ee8f5ba40c: function(arg0) {
+            const ret = arg0.value;
+            return ret;
+        },
+        __wbindgen_generic_0000000000000001: function(arg0) {
+            // Cast intrinsic for `F64 -> Externref`.
+            const ret = arg0;
+            return ret;
+        },
+        __wbindgen_generic_0000000000000002: function(arg0) {
+            // Cast intrinsic for `I64 -> Externref`.
+            const ret = arg0;
+            return ret;
+        },
+        __wbindgen_generic_0000000000000003: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_generic_0000000000000004: function(arg0) {
+            // Cast intrinsic for `U64 -> Externref`.
+            const ret = BigInt.asUintN(64, arg0);
+            return ret;
+        },
+        __wbindgen_init_externref_table: function() {
+            const table = wasm.__wbindgen_externrefs;
+            const offset = table.grow(4);
+            table.set(0, undefined);
+            table.set(offset + 0, undefined);
+            table.set(offset + 1, null);
+            table.set(offset + 2, true);
+            table.set(offset + 3, false);
+        },
+    };
+    return {
+        __proto__: null,
+        "./dogwood_wasm_bg.js": import0,
+    };
+}
+
+function wasm_bindgen_cfade1c0cc745d74___convert__closures_____invoke___js_sys_a2eda7c66b84933c___Function_fn_wasm_bindgen_cfade1c0cc745d74___JsValue_____wasm_bindgen_cfade1c0cc745d74___sys__Undefined___js_sys_a2eda7c66b84933c___Function_fn_wasm_bindgen_cfade1c0cc745d74___JsValue_____wasm_bindgen_cfade1c0cc745d74___sys__Undefined_______true_(arg0, arg1, arg2, arg3) {
+    wasm.wasm_bindgen_cfade1c0cc745d74___convert__closures_____invoke___js_sys_a2eda7c66b84933c___Function_fn_wasm_bindgen_cfade1c0cc745d74___JsValue_____wasm_bindgen_cfade1c0cc745d74___sys__Undefined___js_sys_a2eda7c66b84933c___Function_fn_wasm_bindgen_cfade1c0cc745d74___JsValue_____wasm_bindgen_cfade1c0cc745d74___sys__Undefined_______true_(arg0, arg1, arg2, arg3);
+}
+
+const DogwoodAuthorizerFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_dogwoodauthorizer_free(ptr, 1));
+
+function addToExternrefTable0(obj) {
+    const idx = wasm.__externref_table_alloc();
+    wasm.__wbindgen_externrefs.set(idx, obj);
+    return idx;
+}
+
+function debugString(val) {
+    // primitive types
+    const type = typeof val;
+    if (type == 'number' || type == 'boolean' || val == null) {
+        return  `${val}`;
+    }
+    if (type == 'string') {
+        return `"${val}"`;
+    }
+    if (type == 'symbol') {
+        const description = val.description;
+        if (description == null) {
+            return 'Symbol';
+        } else {
+            return `Symbol(${description})`;
+        }
+    }
+    if (type == 'function') {
+        const name = val.name;
+        if (typeof name == 'string' && name.length > 0) {
+            return `Function(${name})`;
+        } else {
+            return 'Function';
+        }
+    }
+    // objects
+    if (Array.isArray(val)) {
+        const length = val.length;
+        let debug = '[';
+        if (length > 0) {
+            debug += debugString(val[0]);
+        }
+        for(let i = 1; i < length; i++) {
+            debug += ', ' + debugString(val[i]);
+        }
+        debug += ']';
+        return debug;
+    }
+    // Test for built-in
+    const builtInMatches = /\[object ([^\]]+)\]/.exec(toString.call(val));
+    let className;
+    if (builtInMatches && builtInMatches.length > 1) {
+        className = builtInMatches[1];
+    } else {
+        // Failed to match the standard '[object ClassName]'
+        return toString.call(val);
+    }
+    if (className == 'Object') {
+        // we're a user defined class or Object
+        // JSON.stringify avoids problems with cycles, and is generally much
+        // easier than looping through ownProperties of `val`.
+        try {
+            return 'Object(' + JSON.stringify(val) + ')';
+        } catch (_) {
+            return 'Object';
+        }
+    }
+    // errors
+    if (val instanceof Error) {
+        return `${val.name}: ${val.message}\n${val.stack}`;
+    }
+    // TODO we could test for more things here, like `Set`s and `Map`s.
+    return className;
+}
+
+function getArrayJsValueFromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    const mem = getDataViewMemory0();
+    const result = [];
+    for (let i = ptr; i < ptr + 4 * len; i += 4) {
+        result.push(wasm.__wbindgen_externrefs.get(mem.getUint32(i, true)));
+    }
+    wasm.__externref_drop_slice(ptr, len);
+    return result;
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    return decodeText(ptr >>> 0, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        const idx = addToExternrefTable0(e);
+        wasm.__wbindgen_exn_store(idx);
+    }
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+function decodeText(ptr, len) {
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+const wasmPath = `${__dirname}/dogwood_wasm_bg.wasm`;
+const wasmBytes = require('fs').readFileSync(wasmPath);
+const wasmModule = new WebAssembly.Module(wasmBytes);
+let wasmInstance = new WebAssembly.Instance(wasmModule, __wbg_get_imports());
+let wasm = wasmInstance.exports;
+wasm.__wbindgen_start();