@janssenproject/cedarling_wasm 0.0.420-nodejs → 0.0.421

package/cedarling_wasm.d.ts

@@ -56,6 +56,116 @@ export class AuthorizeResultResponse {
     readonly diagnostics: Diagnostics;
 }
 
+/**
+ * WASM wrapper for
+ * `cedarling::BatchAuthorizeResponse<Result<MultiIssuerAuthorizeResult, BatchItemError>>`.
+ * Same shape as [`BatchAuthorizeUnsignedResponse`] with multi-issuer results.
+ */
+export class BatchAuthorizeMultiIssuerResponse {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Shared correlation id stamped on every per-item decision log entry.
+     */
+    readonly batch_id: string;
+    /**
+     * Per-item results in input order — each slot is a
+     * [`BatchItemMultiIssuerResult`].
+     */
+    readonly results: BatchItemMultiIssuerResult[];
+}
+
+/**
+ * WASM wrapper for `cedarling::BatchAuthorizeResponse<Result<AuthorizeResult, BatchItemError>>`.
+ *
+ * Carries a shared `batch_id` (UUIDv7) alongside per-item results. Each result
+ * is a [`BatchItemUnsignedResult`] — Cedar decision on `is_ok()`, per-item
+ * build failure on `error`. `results[i]` corresponds to `items[i]`.
+ */
+export class BatchAuthorizeUnsignedResponse {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Shared correlation id stamped on every per-item decision log entry.
+     */
+    readonly batch_id: string;
+    /**
+     * Per-item results in input order — each slot is a
+     * [`BatchItemUnsignedResult`].
+     */
+    readonly results: BatchItemUnsignedResult[];
+}
+
+/**
+ * Per-item build failure surfaced inside a batch response at `results[i]`
+ * when Cedar couldn't be reached for that item.
+ */
+export class BatchItemError {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Stable variant slug — `action_parse`, `resource_build`, `context_build`,
+     * `principal_build`, `schema_validation`, `multi_issuer_entity`,
+     * `request_validation`.
+     */
+    readonly category: string;
+    /**
+     * Position of the failing item in the original `items` vector.
+     */
+    readonly item_index: number;
+    /**
+     * Human-readable diagnostic. Safe to log.
+     */
+    readonly message: string;
+}
+
+/**
+ * Multi-issuer analog of [`BatchItemUnsignedResult`].
+ */
+export class BatchItemMultiIssuerResult {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * The multi-issuer decision if `is_ok()`; throws otherwise.
+     */
+    unwrap(): MultiIssuerAuthorizeResult;
+    /**
+     * The per-item error if `!is_ok()`; `undefined` otherwise.
+     */
+    readonly error: BatchItemError | undefined;
+    /**
+     * `true` when Cedar evaluated this item.
+     */
+    readonly is_ok: boolean;
+}
+
+/**
+ * One slot in a batch response's `results` array. Callers switch on
+ * `is_ok()` — on `true`, read `unwrap()`; on `false`, read `error()`.
+ */
+export class BatchItemUnsignedResult {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * The Cedar decision if `is_ok()`; throws otherwise.
+     */
+    unwrap(): AuthorizeResult;
+    /**
+     * The per-item error if `!is_ok()`; `undefined` otherwise.
+     */
+    readonly error: BatchItemError | undefined;
+    /**
+     * `true` when Cedar evaluated this item (Allow or Deny); `false` when it
+     * failed to build.
+     */
+    readonly is_ok: boolean;
+}
+
 /**
  * The instance of the Cedarling application.
  */
@@ -139,6 +249,27 @@ export class Cedarling {
      * ```
      */
     authorize_multi_issuer(request: string): Promise<MultiIssuerAuthorizeResult>;
+    /**
+     * Authorize a batch of multi-issuer requests against one shared token set.
+     *
+     * Tokens are validated and token/issuer entities are built once, then
+     * each item is evaluated in input order. Batch-level failures (validation,
+     * JWT verification, status-list refresh) reject the whole call; per-item
+     * failures are returned as `BatchItemError` results and exposed by WASM
+     * with `is_ok=false` and `error`, while genuine Cedar denials remain
+     * `AuthorizeResult` values with `decision=false`.
+     *
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`BatchAuthorizeMultiIssuerRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_multi_issuer_batch(JSON.stringify(batchRequest));
+     * ```
+     */
+    authorize_multi_issuer_batch(request: string): Promise<BatchAuthorizeMultiIssuerResponse>;
     /**
      * Authorize an unsigned request carrying an optional single principal.
      * Makes an authorization decision based on the [`RequestUnsigned`].
@@ -159,6 +290,27 @@ export class Cedarling {
      * ```
      */
     authorize_unsigned(request: string): Promise<AuthorizeResult>;
+    /**
+     * Authorize a batch of unsigned requests against one shared principal.
+     *
+     * Setup work (principal build + pushed-data snapshot) runs once and each
+     * item is evaluated in input order. Results are returned inside a
+     * [`BatchAuthorizeUnsignedResponse`] carrying the shared `batch_id`.
+     * Batch-level failures (validation, principal parse) reject the whole
+     * call; per-item failures are returned as `BatchItemError` results and
+     * exposed by WASM with `is_ok=false` and `error`, while genuine Cedar
+     * denials remain `AuthorizeResult` values with `decision=false`.
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`BatchAuthorizeUnsignedRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_unsigned_batch(JSON.stringify(batchRequest));
+     * ```
+     */
+    authorize_unsigned_batch(request: string): Promise<BatchAuthorizeUnsignedResponse>;
     /**
      * Clear all entries from the data store.
      *
@@ -605,3 +757,170 @@ export function init(config: any): Promise<Cedarling>;
  * ```
  */
 export function init_from_archive_bytes(config: any, archive_bytes: Uint8Array): Promise<Cedarling>;
+
+export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
+
+export interface InitOutput {
+    readonly memory: WebAssembly.Memory;
+    readonly __wbg_authorizeresult_free: (a: number, b: number) => void;
+    readonly __wbg_authorizeresultresponse_free: (a: number, b: number) => void;
+    readonly __wbg_batchauthorizemultiissuerresponse_free: (a: number, b: number) => void;
+    readonly __wbg_batchitemerror_free: (a: number, b: number) => void;
+    readonly __wbg_batchitemmultiissuerresult_free: (a: number, b: number) => void;
+    readonly __wbg_cedarling_free: (a: number, b: number) => void;
+    readonly __wbg_dataentry_free: (a: number, b: number) => void;
+    readonly __wbg_datastorestats_free: (a: number, b: number) => void;
+    readonly __wbg_diagnostics_free: (a: number, b: number) => void;
+    readonly __wbg_get_authorizeresult_decision: (a: number) => number;
+    readonly __wbg_get_authorizeresult_request_id: (a: number, b: number) => void;
+    readonly __wbg_get_authorizeresult_response: (a: number) => number;
+    readonly __wbg_get_dataentry_access_count: (a: number) => bigint;
+    readonly __wbg_get_dataentry_created_at: (a: number, b: number) => void;
+    readonly __wbg_get_dataentry_data_type: (a: number, b: number) => void;
+    readonly __wbg_get_dataentry_expires_at: (a: number, b: number) => void;
+    readonly __wbg_get_dataentry_key: (a: number, b: number) => void;
+    readonly __wbg_get_datastorestats_avg_entry_size_bytes: (a: number) => number;
+    readonly __wbg_get_datastorestats_capacity_usage_percent: (a: number) => number;
+    readonly __wbg_get_datastorestats_entry_count: (a: number) => number;
+    readonly __wbg_get_datastorestats_max_entries: (a: number) => number;
+    readonly __wbg_get_datastorestats_max_entry_size: (a: number) => number;
+    readonly __wbg_get_datastorestats_memory_alert_threshold: (a: number) => number;
+    readonly __wbg_get_datastorestats_memory_alert_triggered: (a: number) => number;
+    readonly __wbg_get_datastorestats_metrics_enabled: (a: number) => number;
+    readonly __wbg_get_datastorestats_total_size_bytes: (a: number) => number;
+    readonly __wbg_policyevaluationerror_free: (a: number, b: number) => void;
+    readonly __wbg_set_authorizeresult_decision: (a: number, b: number) => void;
+    readonly __wbg_set_authorizeresult_request_id: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_authorizeresult_response: (a: number, b: number) => void;
+    readonly __wbg_set_dataentry_access_count: (a: number, b: bigint) => void;
+    readonly __wbg_set_dataentry_created_at: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_dataentry_data_type: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_dataentry_expires_at: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_dataentry_key: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_datastorestats_avg_entry_size_bytes: (a: number, b: number) => void;
+    readonly __wbg_set_datastorestats_capacity_usage_percent: (a: number, b: number) => void;
+    readonly __wbg_set_datastorestats_entry_count: (a: number, b: number) => void;
+    readonly __wbg_set_datastorestats_max_entries: (a: number, b: number) => void;
+    readonly __wbg_set_datastorestats_max_entry_size: (a: number, b: number) => void;
+    readonly __wbg_set_datastorestats_memory_alert_threshold: (a: number, b: number) => void;
+    readonly __wbg_set_datastorestats_memory_alert_triggered: (a: number, b: number) => void;
+    readonly __wbg_set_datastorestats_metrics_enabled: (a: number, b: number) => void;
+    readonly __wbg_set_datastorestats_total_size_bytes: (a: number, b: number) => void;
+    readonly authorizeresult_json_string: (a: number, b: number) => void;
+    readonly authorizeresultresponse_decision: (a: number) => number;
+    readonly authorizeresultresponse_diagnostics: (a: number) => number;
+    readonly batchauthorizemultiissuerresponse_batch_id: (a: number, b: number) => void;
+    readonly batchauthorizemultiissuerresponse_results: (a: number, b: number) => void;
+    readonly batchauthorizeunsignedresponse_results: (a: number, b: number) => void;
+    readonly batchitemerror_category: (a: number, b: number) => void;
+    readonly batchitemerror_item_index: (a: number) => number;
+    readonly batchitemerror_message: (a: number, b: number) => void;
+    readonly batchitemmultiissuerresult_error: (a: number) => number;
+    readonly batchitemmultiissuerresult_is_ok: (a: number) => number;
+    readonly batchitemmultiissuerresult_unwrap: (a: number, b: number) => void;
+    readonly batchitemunsignedresult_unwrap: (a: number, b: number) => void;
+    readonly cedarling_annotation_values: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+    readonly cedarling_annotations_by_policy: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_annotations_map: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_authorize_multi_issuer: (a: number, b: number, c: number) => number;
+    readonly cedarling_authorize_multi_issuer_batch: (a: number, b: number, c: number) => number;
+    readonly cedarling_authorize_unsigned: (a: number, b: number, c: number) => number;
+    readonly cedarling_authorize_unsigned_batch: (a: number, b: number, c: number) => number;
+    readonly cedarling_clear_data_ctx: (a: number, b: number) => void;
+    readonly cedarling_failed_trusted_issuer_ids: (a: number) => number;
+    readonly cedarling_get_data_ctx: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_get_data_entry_ctx: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_get_log_by_id: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_get_log_ids: (a: number) => number;
+    readonly cedarling_get_logs_by_request_id: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_get_logs_by_request_id_and_tag: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+    readonly cedarling_get_stats_ctx: (a: number, b: number) => void;
+    readonly cedarling_is_trusted_issuer_loaded_by_iss: (a: number, b: number, c: number) => number;
+    readonly cedarling_is_trusted_issuer_loaded_by_name: (a: number, b: number, c: number) => number;
+    readonly cedarling_list_data_ctx: (a: number, b: number) => void;
+    readonly cedarling_loaded_trusted_issuer_ids: (a: number) => number;
+    readonly cedarling_loaded_trusted_issuers_count: (a: number) => number;
+    readonly cedarling_new: (a: number) => number;
+    readonly cedarling_new_from_map: (a: number) => number;
+    readonly cedarling_pop_logs: (a: number, b: number) => void;
+    readonly cedarling_push_data_ctx: (a: number, b: number, c: number, d: number, e: number, f: number, g: bigint) => void;
+    readonly cedarling_remove_data_ctx: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_shut_down: (a: number) => number;
+    readonly cedarling_total_issuers: (a: number) => number;
+    readonly dataentry_json_string: (a: number, b: number) => void;
+    readonly dataentry_value: (a: number, b: number) => void;
+    readonly datastorestats_json_string: (a: number, b: number) => void;
+    readonly diagnostics_errors: (a: number, b: number) => void;
+    readonly diagnostics_reason: (a: number, b: number) => void;
+    readonly init: (a: number) => number;
+    readonly init_from_archive_bytes: (a: number, b: number) => number;
+    readonly multiissuerauthorizeresult_json_string: (a: number, b: number) => void;
+    readonly policyevaluationerror_error: (a: number, b: number) => void;
+    readonly policyevaluationerror_id: (a: number, b: number) => void;
+    readonly __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
+    readonly __wbg_intounderlyingsink_free: (a: number, b: number) => void;
+    readonly __wbg_intounderlyingsource_free: (a: number, b: number) => void;
+    readonly intounderlyingbytesource_autoAllocateChunkSize: (a: number) => number;
+    readonly intounderlyingbytesource_cancel: (a: number) => void;
+    readonly intounderlyingbytesource_pull: (a: number, b: number) => number;
+    readonly intounderlyingbytesource_start: (a: number, b: number) => void;
+    readonly intounderlyingbytesource_type: (a: number) => number;
+    readonly intounderlyingsink_abort: (a: number, b: number) => number;
+    readonly intounderlyingsink_close: (a: number) => number;
+    readonly intounderlyingsink_write: (a: number, b: number) => number;
+    readonly intounderlyingsource_cancel: (a: number) => void;
+    readonly intounderlyingsource_pull: (a: number, b: number) => number;
+    readonly rust_zstd_wasm_shim_calloc: (a: number, b: number) => number;
+    readonly rust_zstd_wasm_shim_free: (a: number) => void;
+    readonly rust_zstd_wasm_shim_malloc: (a: number) => number;
+    readonly rust_zstd_wasm_shim_memcmp: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_memcpy: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_memmove: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_memset: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_qsort: (a: number, b: number, c: number, d: number) => void;
+    readonly __wbg_get_multiissuerauthorizeresult_decision: (a: number) => number;
+    readonly __wbg_set_multiissuerauthorizeresult_response: (a: number, b: number) => void;
+    readonly __wbg_set_multiissuerauthorizeresult_request_id: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_multiissuerauthorizeresult_decision: (a: number, b: number) => void;
+    readonly __wbg_get_multiissuerauthorizeresult_response: (a: number) => number;
+    readonly __wbg_get_multiissuerauthorizeresult_request_id: (a: number, b: number) => void;
+    readonly __wbg_multiissuerauthorizeresult_free: (a: number, b: number) => void;
+    readonly __wbg_batchitemunsignedresult_free: (a: number, b: number) => void;
+    readonly __wbg_batchauthorizeunsignedresponse_free: (a: number, b: number) => void;
+    readonly batchitemunsignedresult_is_ok: (a: number) => number;
+    readonly batchitemunsignedresult_error: (a: number) => number;
+    readonly batchauthorizeunsignedresponse_batch_id: (a: number, b: number) => void;
+    readonly cedarling_get_logs_by_tag: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_8780: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_8835: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_12258: (a: number, b: number, c: number) => void;
+    readonly __wasm_bindgen_func_elem_8615: (a: number, b: number) => void;
+    readonly __wbindgen_export: (a: number, b: number) => number;
+    readonly __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
+    readonly __wbindgen_export3: (a: number) => void;
+    readonly __wbindgen_export4: (a: number, b: number) => void;
+    readonly __wbindgen_add_to_stack_pointer: (a: number) => number;
+    readonly __wbindgen_export5: (a: number, b: number, c: number) => void;
+}
+
+export type SyncInitInput = BufferSource | WebAssembly.Module;
+
+/**
+ * Instantiates the given `module`, which can either be bytes or
+ * a precompiled `WebAssembly.Module`.
+ *
+ * @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
+ *
+ * @returns {InitOutput}
+ */
+export function initSync(module: { module: SyncInitInput } | SyncInitInput): InitOutput;
+
+/**
+ * If `module_or_path` is {RequestInfo} or {URL}, makes a request and
+ * for everything else, calls `WebAssembly.instantiate` directly.
+ *
+ * @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
+ *
+ * @returns {Promise<InitOutput>}
+ */
+export default function __wbg_init (module_or_path?: { module_or_path: InitInput | Promise<InitInput> } | InitInput | Promise<InitInput>): Promise<InitOutput>;

package/cedarling_wasm.js

@@ -4,7 +4,7 @@
  * A WASM wrapper for the Rust `cedarling::AuthorizeResult` struct.
  * Represents the result of an authorization request.
  */
-class AuthorizeResult {
+export class AuthorizeResult {
     static __wrap(ptr) {
         const obj = Object.create(AuthorizeResult.prototype);
         obj.__wbg_ptr = ptr;
@@ -112,13 +112,12 @@ class AuthorizeResult {
     }
 }
 if (Symbol.dispose) AuthorizeResult.prototype[Symbol.dispose] = AuthorizeResult.prototype.free;
-exports.AuthorizeResult = AuthorizeResult;
 
 /**
  * A WASM wrapper for the Rust `cedar_policy::Response` struct.
  * Represents the result of an authorization request.
  */
-class AuthorizeResultResponse {
+export class AuthorizeResultResponse {
     static __wrap(ptr) {
         const obj = Object.create(AuthorizeResultResponse.prototype);
         obj.__wbg_ptr = ptr;
@@ -153,12 +152,331 @@ class AuthorizeResultResponse {
     }
 }
 if (Symbol.dispose) AuthorizeResultResponse.prototype[Symbol.dispose] = AuthorizeResultResponse.prototype.free;
-exports.AuthorizeResultResponse = AuthorizeResultResponse;
+
+/**
+ * WASM wrapper for
+ * `cedarling::BatchAuthorizeResponse<Result<MultiIssuerAuthorizeResult, BatchItemError>>`.
+ * Same shape as [`BatchAuthorizeUnsignedResponse`] with multi-issuer results.
+ */
+export class BatchAuthorizeMultiIssuerResponse {
+    static __wrap(ptr) {
+        const obj = Object.create(BatchAuthorizeMultiIssuerResponse.prototype);
+        obj.__wbg_ptr = ptr;
+        BatchAuthorizeMultiIssuerResponseFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BatchAuthorizeMultiIssuerResponseFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_batchauthorizemultiissuerresponse_free(ptr, 0);
+    }
+    /**
+     * Shared correlation id stamped on every per-item decision log entry.
+     * @returns {string}
+     */
+    get batch_id() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchauthorizemultiissuerresponse_batch_id(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            deferred1_0 = r0;
+            deferred1_1 = r1;
+            return getStringFromWasm0(r0, r1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export5(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Per-item results in input order — each slot is a
+     * [`BatchItemMultiIssuerResult`].
+     * @returns {BatchItemMultiIssuerResult[]}
+     */
+    get results() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchauthorizemultiissuerresponse_results(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export5(r0, r1 * 4, 4);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) BatchAuthorizeMultiIssuerResponse.prototype[Symbol.dispose] = BatchAuthorizeMultiIssuerResponse.prototype.free;
+
+/**
+ * WASM wrapper for `cedarling::BatchAuthorizeResponse<Result<AuthorizeResult, BatchItemError>>`.
+ *
+ * Carries a shared `batch_id` (UUIDv7) alongside per-item results. Each result
+ * is a [`BatchItemUnsignedResult`] — Cedar decision on `is_ok()`, per-item
+ * build failure on `error`. `results[i]` corresponds to `items[i]`.
+ */
+export class BatchAuthorizeUnsignedResponse {
+    static __wrap(ptr) {
+        const obj = Object.create(BatchAuthorizeUnsignedResponse.prototype);
+        obj.__wbg_ptr = ptr;
+        BatchAuthorizeUnsignedResponseFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BatchAuthorizeUnsignedResponseFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_batchauthorizeunsignedresponse_free(ptr, 0);
+    }
+    /**
+     * Shared correlation id stamped on every per-item decision log entry.
+     * @returns {string}
+     */
+    get batch_id() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchauthorizeunsignedresponse_batch_id(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            deferred1_0 = r0;
+            deferred1_1 = r1;
+            return getStringFromWasm0(r0, r1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export5(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Per-item results in input order — each slot is a
+     * [`BatchItemUnsignedResult`].
+     * @returns {BatchItemUnsignedResult[]}
+     */
+    get results() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchauthorizeunsignedresponse_results(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export5(r0, r1 * 4, 4);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) BatchAuthorizeUnsignedResponse.prototype[Symbol.dispose] = BatchAuthorizeUnsignedResponse.prototype.free;
+
+/**
+ * Per-item build failure surfaced inside a batch response at `results[i]`
+ * when Cedar couldn't be reached for that item.
+ */
+export class BatchItemError {
+    static __wrap(ptr) {
+        const obj = Object.create(BatchItemError.prototype);
+        obj.__wbg_ptr = ptr;
+        BatchItemErrorFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BatchItemErrorFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_batchitemerror_free(ptr, 0);
+    }
+    /**
+     * Stable variant slug — `action_parse`, `resource_build`, `context_build`,
+     * `principal_build`, `schema_validation`, `multi_issuer_entity`,
+     * `request_validation`.
+     * @returns {string}
+     */
+    get category() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchitemerror_category(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            deferred1_0 = r0;
+            deferred1_1 = r1;
+            return getStringFromWasm0(r0, r1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export5(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Position of the failing item in the original `items` vector.
+     * @returns {number}
+     */
+    get item_index() {
+        const ret = wasm.batchitemerror_item_index(this.__wbg_ptr);
+        return ret >>> 0;
+    }
+    /**
+     * Human-readable diagnostic. Safe to log.
+     * @returns {string}
+     */
+    get message() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchitemerror_message(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            deferred1_0 = r0;
+            deferred1_1 = r1;
+            return getStringFromWasm0(r0, r1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export5(deferred1_0, deferred1_1, 1);
+        }
+    }
+}
+if (Symbol.dispose) BatchItemError.prototype[Symbol.dispose] = BatchItemError.prototype.free;
+
+/**
+ * Multi-issuer analog of [`BatchItemUnsignedResult`].
+ */
+export class BatchItemMultiIssuerResult {
+    static __wrap(ptr) {
+        const obj = Object.create(BatchItemMultiIssuerResult.prototype);
+        obj.__wbg_ptr = ptr;
+        BatchItemMultiIssuerResultFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BatchItemMultiIssuerResultFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_batchitemmultiissuerresult_free(ptr, 0);
+    }
+    /**
+     * The per-item error if `!is_ok()`; `undefined` otherwise.
+     * @returns {BatchItemError | undefined}
+     */
+    get error() {
+        const ret = wasm.batchitemmultiissuerresult_error(this.__wbg_ptr);
+        return ret === 0 ? undefined : BatchItemError.__wrap(ret);
+    }
+    /**
+     * `true` when Cedar evaluated this item.
+     * @returns {boolean}
+     */
+    get is_ok() {
+        const ret = wasm.batchitemmultiissuerresult_is_ok(this.__wbg_ptr);
+        return ret !== 0;
+    }
+    /**
+     * The multi-issuer decision if `is_ok()`; throws otherwise.
+     * @returns {MultiIssuerAuthorizeResult}
+     */
+    unwrap() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchitemmultiissuerresult_unwrap(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return MultiIssuerAuthorizeResult.__wrap(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) BatchItemMultiIssuerResult.prototype[Symbol.dispose] = BatchItemMultiIssuerResult.prototype.free;
+
+/**
+ * One slot in a batch response's `results` array. Callers switch on
+ * `is_ok()` — on `true`, read `unwrap()`; on `false`, read `error()`.
+ */
+export class BatchItemUnsignedResult {
+    static __wrap(ptr) {
+        const obj = Object.create(BatchItemUnsignedResult.prototype);
+        obj.__wbg_ptr = ptr;
+        BatchItemUnsignedResultFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BatchItemUnsignedResultFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_batchitemunsignedresult_free(ptr, 0);
+    }
+    /**
+     * The per-item error if `!is_ok()`; `undefined` otherwise.
+     * @returns {BatchItemError | undefined}
+     */
+    get error() {
+        const ret = wasm.batchitemunsignedresult_error(this.__wbg_ptr);
+        return ret === 0 ? undefined : BatchItemError.__wrap(ret);
+    }
+    /**
+     * `true` when Cedar evaluated this item (Allow or Deny); `false` when it
+     * failed to build.
+     * @returns {boolean}
+     */
+    get is_ok() {
+        const ret = wasm.batchitemunsignedresult_is_ok(this.__wbg_ptr);
+        return ret !== 0;
+    }
+    /**
+     * The Cedar decision if `is_ok()`; throws otherwise.
+     * @returns {AuthorizeResult}
+     */
+    unwrap() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchitemunsignedresult_unwrap(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return AuthorizeResult.__wrap(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) BatchItemUnsignedResult.prototype[Symbol.dispose] = BatchItemUnsignedResult.prototype.free;
 
 /**
  * The instance of the Cedarling application.
  */
-class Cedarling {
+export class Cedarling {
     static __wrap(ptr) {
         const obj = Object.create(Cedarling.prototype);
         obj.__wbg_ptr = ptr;
@@ -313,6 +631,34 @@ class Cedarling {
         const ret = wasm.cedarling_authorize_multi_issuer(this.__wbg_ptr, ptr0, len0);
         return takeObject(ret);
     }
+    /**
+     * Authorize a batch of multi-issuer requests against one shared token set.
+     *
+     * Tokens are validated and token/issuer entities are built once, then
+     * each item is evaluated in input order. Batch-level failures (validation,
+     * JWT verification, status-list refresh) reject the whole call; per-item
+     * failures are returned as `BatchItemError` results and exposed by WASM
+     * with `is_ok=false` and `error`, while genuine Cedar denials remain
+     * `AuthorizeResult` values with `decision=false`.
+     *
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`BatchAuthorizeMultiIssuerRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_multi_issuer_batch(JSON.stringify(batchRequest));
+     * ```
+     * @param {string} request
+     * @returns {Promise<BatchAuthorizeMultiIssuerResponse>}
+     */
+    authorize_multi_issuer_batch(request) {
+        const ptr0 = passStringToWasm0(request, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.cedarling_authorize_multi_issuer_batch(this.__wbg_ptr, ptr0, len0);
+        return takeObject(ret);
+    }
     /**
      * Authorize an unsigned request carrying an optional single principal.
      * Makes an authorization decision based on the [`RequestUnsigned`].
@@ -340,6 +686,34 @@ class Cedarling {
         const ret = wasm.cedarling_authorize_unsigned(this.__wbg_ptr, ptr0, len0);
         return takeObject(ret);
     }
+    /**
+     * Authorize a batch of unsigned requests against one shared principal.
+     *
+     * Setup work (principal build + pushed-data snapshot) runs once and each
+     * item is evaluated in input order. Results are returned inside a
+     * [`BatchAuthorizeUnsignedResponse`] carrying the shared `batch_id`.
+     * Batch-level failures (validation, principal parse) reject the whole
+     * call; per-item failures are returned as `BatchItemError` results and
+     * exposed by WASM with `is_ok=false` and `error`, while genuine Cedar
+     * denials remain `AuthorizeResult` values with `decision=false`.
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`BatchAuthorizeUnsignedRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_unsigned_batch(JSON.stringify(batchRequest));
+     * ```
+     * @param {string} request
+     * @returns {Promise<BatchAuthorizeUnsignedResponse>}
+     */
+    authorize_unsigned_batch(request) {
+        const ptr0 = passStringToWasm0(request, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.cedarling_authorize_unsigned_batch(this.__wbg_ptr, ptr0, len0);
+        return takeObject(ret);
+    }
     /**
      * Clear all entries from the data store.
      *
@@ -830,13 +1204,12 @@ class Cedarling {
     }
 }
 if (Symbol.dispose) Cedarling.prototype[Symbol.dispose] = Cedarling.prototype.free;
-exports.Cedarling = Cedarling;
 
 /**
  * A WASM wrapper for the Rust `cedarling::DataEntry` struct.
  * Represents a data entry in the DataStore with value and metadata.
  */
-class DataEntry {
+export class DataEntry {
     static __wrap(ptr) {
         const obj = Object.create(DataEntry.prototype);
         obj.__wbg_ptr = ptr;
@@ -1025,13 +1398,12 @@ class DataEntry {
     }
 }
 if (Symbol.dispose) DataEntry.prototype[Symbol.dispose] = DataEntry.prototype.free;
-exports.DataEntry = DataEntry;
 
 /**
  * A WASM wrapper for the Rust `cedarling::DataStoreStats` struct.
  * Statistics about the DataStore.
  */
-class DataStoreStats {
+export class DataStoreStats {
     static __wrap(ptr) {
         const obj = Object.create(DataStoreStats.prototype);
         obj.__wbg_ptr = ptr;
@@ -1205,7 +1577,6 @@ class DataStoreStats {
     }
 }
 if (Symbol.dispose) DataStoreStats.prototype[Symbol.dispose] = DataStoreStats.prototype.free;
-exports.DataStoreStats = DataStoreStats;
 
 /**
  * Diagnostics
@@ -1213,7 +1584,7 @@ exports.DataStoreStats = DataStoreStats;
  *
  * Provides detailed information about how a policy decision was made, including policies that contributed to the decision and any errors encountered during evaluation.
  */
-class Diagnostics {
+export class Diagnostics {
     static __wrap(ptr) {
         const obj = Object.create(Diagnostics.prototype);
         obj.__wbg_ptr = ptr;
@@ -1270,9 +1641,8 @@ class Diagnostics {
     }
 }
 if (Symbol.dispose) Diagnostics.prototype[Symbol.dispose] = Diagnostics.prototype.free;
-exports.Diagnostics = Diagnostics;
 
-class IntoUnderlyingByteSource {
+export class IntoUnderlyingByteSource {
     __destroy_into_raw() {
         const ptr = this.__wbg_ptr;
         this.__wbg_ptr = 0;
@@ -1317,9 +1687,8 @@ class IntoUnderlyingByteSource {
     }
 }
 if (Symbol.dispose) IntoUnderlyingByteSource.prototype[Symbol.dispose] = IntoUnderlyingByteSource.prototype.free;
-exports.IntoUnderlyingByteSource = IntoUnderlyingByteSource;
 
-class IntoUnderlyingSink {
+export class IntoUnderlyingSink {
     __destroy_into_raw() {
         const ptr = this.__wbg_ptr;
         this.__wbg_ptr = 0;
@@ -1357,9 +1726,8 @@ class IntoUnderlyingSink {
     }
 }
 if (Symbol.dispose) IntoUnderlyingSink.prototype[Symbol.dispose] = IntoUnderlyingSink.prototype.free;
-exports.IntoUnderlyingSink = IntoUnderlyingSink;
 
-class IntoUnderlyingSource {
+export class IntoUnderlyingSource {
     __destroy_into_raw() {
         const ptr = this.__wbg_ptr;
         this.__wbg_ptr = 0;
@@ -1384,13 +1752,12 @@ class IntoUnderlyingSource {
     }
 }
 if (Symbol.dispose) IntoUnderlyingSource.prototype[Symbol.dispose] = IntoUnderlyingSource.prototype.free;
-exports.IntoUnderlyingSource = IntoUnderlyingSource;
 
 /**
  * A WASM wrapper for the Rust `cedarling::MultiIssuerAuthorizeResult` struct.
  * Represents the result of a multi-issuer authorization request.
  */
-class MultiIssuerAuthorizeResult {
+export class MultiIssuerAuthorizeResult {
     static __wrap(ptr) {
         const obj = Object.create(MultiIssuerAuthorizeResult.prototype);
         obj.__wbg_ptr = ptr;
@@ -1494,7 +1861,6 @@ class MultiIssuerAuthorizeResult {
     }
 }
 if (Symbol.dispose) MultiIssuerAuthorizeResult.prototype[Symbol.dispose] = MultiIssuerAuthorizeResult.prototype.free;
-exports.MultiIssuerAuthorizeResult = MultiIssuerAuthorizeResult;
 
 /**
  * PolicyEvaluationError
@@ -1502,7 +1868,7 @@ exports.MultiIssuerAuthorizeResult = MultiIssuerAuthorizeResult;
  *
  * Represents an error that occurred when evaluating a Cedar policy.
  */
-class PolicyEvaluationError {
+export class PolicyEvaluationError {
     static __wrap(ptr) {
         const obj = Object.create(PolicyEvaluationError.prototype);
         obj.__wbg_ptr = ptr;
@@ -1561,7 +1927,6 @@ class PolicyEvaluationError {
     }
 }
 if (Symbol.dispose) PolicyEvaluationError.prototype[Symbol.dispose] = PolicyEvaluationError.prototype.free;
-exports.PolicyEvaluationError = PolicyEvaluationError;
 
 /**
  * Create a new instance of the Cedarling application.
@@ -1569,11 +1934,10 @@ exports.PolicyEvaluationError = PolicyEvaluationError;
  * @param {any} config
  * @returns {Promise<Cedarling>}
  */
-function init(config) {
+export function init(config) {
     const ret = wasm.init(addHeapObject(config));
     return takeObject(ret);
 }
-exports.init = init;
 
 /**
  * Create a new instance of the Cedarling application from archive bytes.
@@ -1595,11 +1959,10 @@ exports.init = init;
  * @param {Uint8Array} archive_bytes
  * @returns {Promise<Cedarling>}
  */
-function init_from_archive_bytes(config, archive_bytes) {
+export function init_from_archive_bytes(config, archive_bytes) {
     const ret = wasm.init_from_archive_bytes(addHeapObject(config), addHeapObject(archive_bytes));
     return takeObject(ret);
 }
-exports.init_from_archive_bytes = init_from_archive_bytes;
 function __wbg_get_imports() {
     const import0 = {
         __proto__: null,
@@ -1699,6 +2062,22 @@ function __wbg_get_imports() {
             const ret = AuthorizeResult.__wrap(arg0);
             return addHeapObject(ret);
         },
+        __wbg_batchauthorizemultiissuerresponse_new: function(arg0) {
+            const ret = BatchAuthorizeMultiIssuerResponse.__wrap(arg0);
+            return addHeapObject(ret);
+        },
+        __wbg_batchauthorizeunsignedresponse_new: function(arg0) {
+            const ret = BatchAuthorizeUnsignedResponse.__wrap(arg0);
+            return addHeapObject(ret);
+        },
+        __wbg_batchitemmultiissuerresult_new: function(arg0) {
+            const ret = BatchItemMultiIssuerResult.__wrap(arg0);
+            return addHeapObject(ret);
+        },
+        __wbg_batchitemunsignedresult_new: function(arg0) {
+            const ret = BatchItemUnsignedResult.__wrap(arg0);
+            return addHeapObject(ret);
+        },
         __wbg_body_18c9f2ac15ead4b2: function(arg0) {
             const ret = getObject(arg0).body;
             return isLikeNone(ret) ? 0 : addHeapObject(ret);
@@ -1999,7 +2378,7 @@ function __wbg_get_imports() {
                     const a = state0.a;
                     state0.a = 0;
                     try {
-                        return __wasm_bindgen_func_elem_8750(a, state0.b, arg0, arg1);
+                        return __wasm_bindgen_func_elem_8835(a, state0.b, arg0, arg1);
                     } finally {
                         state0.a = a;
                     }
@@ -2208,18 +2587,18 @@ function __wbg_get_imports() {
             console.warn(...getObject(arg0));
         },
         __wbindgen_cast_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 1196, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_12170);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 1193, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_12258);
             return addHeapObject(ret);
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 995, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_8695);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 992, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_8780);
             return addHeapObject(ret);
         },
         __wbindgen_cast_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 883, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_8530);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 876, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_8615);
             return addHeapObject(ret);
         },
         __wbindgen_cast_0000000000000004: function(arg0) {
@@ -2261,18 +2640,18 @@ function __wbg_get_imports() {
     };
 }
 
-function __wasm_bindgen_func_elem_8530(arg0, arg1) {
-    wasm.__wasm_bindgen_func_elem_8530(arg0, arg1);
+function __wasm_bindgen_func_elem_8615(arg0, arg1) {
+    wasm.__wasm_bindgen_func_elem_8615(arg0, arg1);
 }
 
-function __wasm_bindgen_func_elem_12170(arg0, arg1, arg2) {
-    wasm.__wasm_bindgen_func_elem_12170(arg0, arg1, addHeapObject(arg2));
+function __wasm_bindgen_func_elem_12258(arg0, arg1, arg2) {
+    wasm.__wasm_bindgen_func_elem_12258(arg0, arg1, addHeapObject(arg2));
 }
 
-function __wasm_bindgen_func_elem_8695(arg0, arg1, arg2) {
+function __wasm_bindgen_func_elem_8780(arg0, arg1, arg2) {
     try {
         const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-        wasm.__wasm_bindgen_func_elem_8695(retptr, arg0, arg1, addHeapObject(arg2));
+        wasm.__wasm_bindgen_func_elem_8780(retptr, arg0, arg1, addHeapObject(arg2));
         var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
         var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
         if (r1) {
@@ -2283,8 +2662,8 @@ function __wasm_bindgen_func_elem_8695(arg0, arg1, arg2) {
     }
 }
 
-function __wasm_bindgen_func_elem_8750(arg0, arg1, arg2, arg3) {
-    wasm.__wasm_bindgen_func_elem_8750(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
+function __wasm_bindgen_func_elem_8835(arg0, arg1, arg2, arg3) {
+    wasm.__wasm_bindgen_func_elem_8835(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
 }
 
 
@@ -2310,6 +2689,21 @@ const AuthorizeResultFinalization = (typeof FinalizationRegistry === 'undefined'
 const AuthorizeResultResponseFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_authorizeresultresponse_free(ptr, 1));
+const BatchAuthorizeMultiIssuerResponseFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_batchauthorizemultiissuerresponse_free(ptr, 1));
+const BatchAuthorizeUnsignedResponseFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_batchauthorizeunsignedresponse_free(ptr, 1));
+const BatchItemErrorFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_batchitemerror_free(ptr, 1));
+const BatchItemMultiIssuerResultFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_batchitemmultiissuerresult_free(ptr, 1));
+const BatchItemUnsignedResultFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_batchitemunsignedresult_free(ptr, 1));
 const CedarlingFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_cedarling_free(ptr, 1));
@@ -2565,7 +2959,15 @@ function takeObject(idx) {
 
 let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
 cachedTextDecoder.decode();
+const MAX_SAFARI_DECODE_BYTES = 2146435072;
+let numBytesDecoded = 0;
 function decodeText(ptr, len) {
+    numBytesDecoded += len;
+    if (numBytesDecoded >= MAX_SAFARI_DECODE_BYTES) {
+        cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+        cachedTextDecoder.decode();
+        numBytesDecoded = len;
+    }
     return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
 }
 
@@ -2584,8 +2986,95 @@ if (!('encodeInto' in cachedTextEncoder)) {
 
 let WASM_VECTOR_LEN = 0;
 
-const wasmPath = `${__dirname}/cedarling_wasm_bg.wasm`;
-const wasmBytes = require('fs').readFileSync(wasmPath);
-const wasmModule = new WebAssembly.Module(wasmBytes);
-let wasmInstance = new WebAssembly.Instance(wasmModule, __wbg_get_imports());
-let wasm = wasmInstance.exports;
+let wasmModule, wasmInstance, wasm;
+function __wbg_finalize_init(instance, module) {
+    wasmInstance = instance;
+    wasm = instance.exports;
+    wasmModule = module;
+    cachedDataViewMemory0 = null;
+    cachedUint8ArrayMemory0 = null;
+    return wasm;
+}
+
+async function __wbg_load(module, imports) {
+    if (typeof Response === 'function' && module instanceof Response) {
+        if (typeof WebAssembly.instantiateStreaming === 'function') {
+            try {
+                return await WebAssembly.instantiateStreaming(module, imports);
+            } catch (e) {
+                const validResponse = module.ok && expectedResponseType(module.type);
+
+                if (validResponse && module.headers.get('Content-Type') !== 'application/wasm') {
+                    console.warn("`WebAssembly.instantiateStreaming` failed because your server does not serve Wasm with `application/wasm` MIME type. Falling back to `WebAssembly.instantiate` which is slower. Original error:\n", e);
+
+                } else { throw e; }
+            }
+        }
+
+        const bytes = await module.arrayBuffer();
+        return await WebAssembly.instantiate(bytes, imports);
+    } else {
+        const instance = await WebAssembly.instantiate(module, imports);
+
+        if (instance instanceof WebAssembly.Instance) {
+            return { instance, module };
+        } else {
+            return instance;
+        }
+    }
+
+    function expectedResponseType(type) {
+        switch (type) {
+            case 'basic': case 'cors': case 'default': return true;
+        }
+        return false;
+    }
+}
+
+function initSync(module) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module !== undefined) {
+        if (Object.getPrototypeOf(module) === Object.prototype) {
+            ({module} = module)
+        } else {
+            console.warn('using deprecated parameters for `initSync()`; pass a single object instead')
+        }
+    }
+
+    const imports = __wbg_get_imports();
+    if (!(module instanceof WebAssembly.Module)) {
+        module = new WebAssembly.Module(module);
+    }
+    const instance = new WebAssembly.Instance(module, imports);
+    return __wbg_finalize_init(instance, module);
+}
+
+async function __wbg_init(module_or_path) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module_or_path !== undefined) {
+        if (Object.getPrototypeOf(module_or_path) === Object.prototype) {
+            ({module_or_path} = module_or_path)
+        } else {
+            console.warn('using deprecated parameters for the initialization function; pass a single object instead')
+        }
+    }
+
+    if (module_or_path === undefined) {
+        module_or_path = new URL('cedarling_wasm_bg.wasm', import.meta.url);
+    }
+    const imports = __wbg_get_imports();
+
+    if (typeof module_or_path === 'string' || (typeof Request === 'function' && module_or_path instanceof Request) || (typeof URL === 'function' && module_or_path instanceof URL)) {
+        module_or_path = fetch(module_or_path);
+    }
+
+    const { instance, module } = await __wbg_load(await module_or_path, imports);
+
+    return __wbg_finalize_init(instance, module);
+}
+
+export { initSync, __wbg_init as default };

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@janssenproject/cedarling_wasm",
+  "type": "module",
   "description": "The Cedarling is a performant local authorization service that runs the Rust Cedar Engine",
-  "version": "0.0.420-nodejs",
+  "version": "0.0.421",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -13,5 +14,8 @@
     "cedarling_wasm.d.ts"
   ],
   "main": "cedarling_wasm.js",
-  "types": "cedarling_wasm.d.ts"
+  "types": "cedarling_wasm.d.ts",
+  "sideEffects": [
+    "./snippets/*"
+  ]
 }