@janssenproject/cedarling_wasm 0.0.420 → 0.0.421-nodejs

package/cedarling_wasm.d.ts

@@ -56,6 +56,116 @@ export class AuthorizeResultResponse {
     readonly diagnostics: Diagnostics;
 }
 
+/**
+ * WASM wrapper for
+ * `cedarling::BatchAuthorizeResponse<Result<MultiIssuerAuthorizeResult, BatchItemError>>`.
+ * Same shape as [`BatchAuthorizeUnsignedResponse`] with multi-issuer results.
+ */
+export class BatchAuthorizeMultiIssuerResponse {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Shared correlation id stamped on every per-item decision log entry.
+     */
+    readonly batch_id: string;
+    /**
+     * Per-item results in input order — each slot is a
+     * [`BatchItemMultiIssuerResult`].
+     */
+    readonly results: BatchItemMultiIssuerResult[];
+}
+
+/**
+ * WASM wrapper for `cedarling::BatchAuthorizeResponse<Result<AuthorizeResult, BatchItemError>>`.
+ *
+ * Carries a shared `batch_id` (UUIDv7) alongside per-item results. Each result
+ * is a [`BatchItemUnsignedResult`] — Cedar decision on `is_ok()`, per-item
+ * build failure on `error`. `results[i]` corresponds to `items[i]`.
+ */
+export class BatchAuthorizeUnsignedResponse {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Shared correlation id stamped on every per-item decision log entry.
+     */
+    readonly batch_id: string;
+    /**
+     * Per-item results in input order — each slot is a
+     * [`BatchItemUnsignedResult`].
+     */
+    readonly results: BatchItemUnsignedResult[];
+}
+
+/**
+ * Per-item build failure surfaced inside a batch response at `results[i]`
+ * when Cedar couldn't be reached for that item.
+ */
+export class BatchItemError {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Stable variant slug — `action_parse`, `resource_build`, `context_build`,
+     * `principal_build`, `schema_validation`, `multi_issuer_entity`,
+     * `request_validation`.
+     */
+    readonly category: string;
+    /**
+     * Position of the failing item in the original `items` vector.
+     */
+    readonly item_index: number;
+    /**
+     * Human-readable diagnostic. Safe to log.
+     */
+    readonly message: string;
+}
+
+/**
+ * Multi-issuer analog of [`BatchItemUnsignedResult`].
+ */
+export class BatchItemMultiIssuerResult {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * The multi-issuer decision if `is_ok()`; throws otherwise.
+     */
+    unwrap(): MultiIssuerAuthorizeResult;
+    /**
+     * The per-item error if `!is_ok()`; `undefined` otherwise.
+     */
+    readonly error: BatchItemError | undefined;
+    /**
+     * `true` when Cedar evaluated this item.
+     */
+    readonly is_ok: boolean;
+}
+
+/**
+ * One slot in a batch response's `results` array. Callers switch on
+ * `is_ok()` — on `true`, read `unwrap()`; on `false`, read `error()`.
+ */
+export class BatchItemUnsignedResult {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * The Cedar decision if `is_ok()`; throws otherwise.
+     */
+    unwrap(): AuthorizeResult;
+    /**
+     * The per-item error if `!is_ok()`; `undefined` otherwise.
+     */
+    readonly error: BatchItemError | undefined;
+    /**
+     * `true` when Cedar evaluated this item (Allow or Deny); `false` when it
+     * failed to build.
+     */
+    readonly is_ok: boolean;
+}
+
 /**
  * The instance of the Cedarling application.
  */
@@ -139,6 +249,27 @@ export class Cedarling {
      * ```
      */
     authorize_multi_issuer(request: string): Promise<MultiIssuerAuthorizeResult>;
+    /**
+     * Authorize a batch of multi-issuer requests against one shared token set.
+     *
+     * Tokens are validated and token/issuer entities are built once, then
+     * each item is evaluated in input order. Batch-level failures (validation,
+     * JWT verification, status-list refresh) reject the whole call; per-item
+     * failures are returned as `BatchItemError` results and exposed by WASM
+     * with `is_ok=false` and `error`, while genuine Cedar denials remain
+     * `AuthorizeResult` values with `decision=false`.
+     *
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`BatchAuthorizeMultiIssuerRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_multi_issuer_batch(JSON.stringify(batchRequest));
+     * ```
+     */
+    authorize_multi_issuer_batch(request: string): Promise<BatchAuthorizeMultiIssuerResponse>;
     /**
      * Authorize an unsigned request carrying an optional single principal.
      * Makes an authorization decision based on the [`RequestUnsigned`].
@@ -159,6 +290,27 @@ export class Cedarling {
      * ```
      */
     authorize_unsigned(request: string): Promise<AuthorizeResult>;
+    /**
+     * Authorize a batch of unsigned requests against one shared principal.
+     *
+     * Setup work (principal build + pushed-data snapshot) runs once and each
+     * item is evaluated in input order. Results are returned inside a
+     * [`BatchAuthorizeUnsignedResponse`] carrying the shared `batch_id`.
+     * Batch-level failures (validation, principal parse) reject the whole
+     * call; per-item failures are returned as `BatchItemError` results and
+     * exposed by WASM with `is_ok=false` and `error`, while genuine Cedar
+     * denials remain `AuthorizeResult` values with `decision=false`.
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`BatchAuthorizeUnsignedRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_unsigned_batch(JSON.stringify(batchRequest));
+     * ```
+     */
+    authorize_unsigned_batch(request: string): Promise<BatchAuthorizeUnsignedResponse>;
     /**
      * Clear all entries from the data store.
      *
@@ -605,150 +757,3 @@ export function init(config: any): Promise<Cedarling>;
  * ```
  */
 export function init_from_archive_bytes(config: any, archive_bytes: Uint8Array): Promise<Cedarling>;
-
-export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
-
-export interface InitOutput {
-    readonly memory: WebAssembly.Memory;
-    readonly __wbg_authorizeresult_free: (a: number, b: number) => void;
-    readonly __wbg_authorizeresultresponse_free: (a: number, b: number) => void;
-    readonly __wbg_cedarling_free: (a: number, b: number) => void;
-    readonly __wbg_dataentry_free: (a: number, b: number) => void;
-    readonly __wbg_datastorestats_free: (a: number, b: number) => void;
-    readonly __wbg_diagnostics_free: (a: number, b: number) => void;
-    readonly __wbg_get_authorizeresult_decision: (a: number) => number;
-    readonly __wbg_get_authorizeresult_request_id: (a: number, b: number) => void;
-    readonly __wbg_get_authorizeresult_response: (a: number) => number;
-    readonly __wbg_get_dataentry_access_count: (a: number) => bigint;
-    readonly __wbg_get_dataentry_created_at: (a: number, b: number) => void;
-    readonly __wbg_get_dataentry_data_type: (a: number, b: number) => void;
-    readonly __wbg_get_dataentry_expires_at: (a: number, b: number) => void;
-    readonly __wbg_get_dataentry_key: (a: number, b: number) => void;
-    readonly __wbg_get_datastorestats_avg_entry_size_bytes: (a: number) => number;
-    readonly __wbg_get_datastorestats_capacity_usage_percent: (a: number) => number;
-    readonly __wbg_get_datastorestats_entry_count: (a: number) => number;
-    readonly __wbg_get_datastorestats_max_entries: (a: number) => number;
-    readonly __wbg_get_datastorestats_max_entry_size: (a: number) => number;
-    readonly __wbg_get_datastorestats_memory_alert_threshold: (a: number) => number;
-    readonly __wbg_get_datastorestats_memory_alert_triggered: (a: number) => number;
-    readonly __wbg_get_datastorestats_metrics_enabled: (a: number) => number;
-    readonly __wbg_get_datastorestats_total_size_bytes: (a: number) => number;
-    readonly __wbg_policyevaluationerror_free: (a: number, b: number) => void;
-    readonly __wbg_set_authorizeresult_decision: (a: number, b: number) => void;
-    readonly __wbg_set_authorizeresult_request_id: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_authorizeresult_response: (a: number, b: number) => void;
-    readonly __wbg_set_dataentry_access_count: (a: number, b: bigint) => void;
-    readonly __wbg_set_dataentry_created_at: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_dataentry_data_type: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_dataentry_expires_at: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_dataentry_key: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_datastorestats_avg_entry_size_bytes: (a: number, b: number) => void;
-    readonly __wbg_set_datastorestats_capacity_usage_percent: (a: number, b: number) => void;
-    readonly __wbg_set_datastorestats_entry_count: (a: number, b: number) => void;
-    readonly __wbg_set_datastorestats_max_entries: (a: number, b: number) => void;
-    readonly __wbg_set_datastorestats_max_entry_size: (a: number, b: number) => void;
-    readonly __wbg_set_datastorestats_memory_alert_threshold: (a: number, b: number) => void;
-    readonly __wbg_set_datastorestats_memory_alert_triggered: (a: number, b: number) => void;
-    readonly __wbg_set_datastorestats_metrics_enabled: (a: number, b: number) => void;
-    readonly __wbg_set_datastorestats_total_size_bytes: (a: number, b: number) => void;
-    readonly authorizeresult_json_string: (a: number, b: number) => void;
-    readonly authorizeresultresponse_decision: (a: number) => number;
-    readonly authorizeresultresponse_diagnostics: (a: number) => number;
-    readonly cedarling_annotation_values: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-    readonly cedarling_annotations_by_policy: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_annotations_map: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_authorize_multi_issuer: (a: number, b: number, c: number) => number;
-    readonly cedarling_authorize_unsigned: (a: number, b: number, c: number) => number;
-    readonly cedarling_clear_data_ctx: (a: number, b: number) => void;
-    readonly cedarling_failed_trusted_issuer_ids: (a: number) => number;
-    readonly cedarling_get_data_ctx: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_get_data_entry_ctx: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_get_log_by_id: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_get_log_ids: (a: number) => number;
-    readonly cedarling_get_logs_by_request_id: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_get_logs_by_request_id_and_tag: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-    readonly cedarling_get_stats_ctx: (a: number, b: number) => void;
-    readonly cedarling_is_trusted_issuer_loaded_by_iss: (a: number, b: number, c: number) => number;
-    readonly cedarling_is_trusted_issuer_loaded_by_name: (a: number, b: number, c: number) => number;
-    readonly cedarling_list_data_ctx: (a: number, b: number) => void;
-    readonly cedarling_loaded_trusted_issuer_ids: (a: number) => number;
-    readonly cedarling_loaded_trusted_issuers_count: (a: number) => number;
-    readonly cedarling_new: (a: number) => number;
-    readonly cedarling_new_from_map: (a: number) => number;
-    readonly cedarling_pop_logs: (a: number, b: number) => void;
-    readonly cedarling_push_data_ctx: (a: number, b: number, c: number, d: number, e: number, f: number, g: bigint) => void;
-    readonly cedarling_remove_data_ctx: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_shut_down: (a: number) => number;
-    readonly cedarling_total_issuers: (a: number) => number;
-    readonly dataentry_json_string: (a: number, b: number) => void;
-    readonly dataentry_value: (a: number, b: number) => void;
-    readonly datastorestats_json_string: (a: number, b: number) => void;
-    readonly diagnostics_errors: (a: number, b: number) => void;
-    readonly diagnostics_reason: (a: number, b: number) => void;
-    readonly init: (a: number) => number;
-    readonly init_from_archive_bytes: (a: number, b: number) => number;
-    readonly multiissuerauthorizeresult_json_string: (a: number, b: number) => void;
-    readonly policyevaluationerror_error: (a: number, b: number) => void;
-    readonly policyevaluationerror_id: (a: number, b: number) => void;
-    readonly __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
-    readonly __wbg_intounderlyingsink_free: (a: number, b: number) => void;
-    readonly __wbg_intounderlyingsource_free: (a: number, b: number) => void;
-    readonly intounderlyingbytesource_autoAllocateChunkSize: (a: number) => number;
-    readonly intounderlyingbytesource_cancel: (a: number) => void;
-    readonly intounderlyingbytesource_pull: (a: number, b: number) => number;
-    readonly intounderlyingbytesource_start: (a: number, b: number) => void;
-    readonly intounderlyingbytesource_type: (a: number) => number;
-    readonly intounderlyingsink_abort: (a: number, b: number) => number;
-    readonly intounderlyingsink_close: (a: number) => number;
-    readonly intounderlyingsink_write: (a: number, b: number) => number;
-    readonly intounderlyingsource_cancel: (a: number) => void;
-    readonly intounderlyingsource_pull: (a: number, b: number) => number;
-    readonly rust_zstd_wasm_shim_calloc: (a: number, b: number) => number;
-    readonly rust_zstd_wasm_shim_free: (a: number) => void;
-    readonly rust_zstd_wasm_shim_malloc: (a: number) => number;
-    readonly rust_zstd_wasm_shim_memcmp: (a: number, b: number, c: number) => number;
-    readonly rust_zstd_wasm_shim_memcpy: (a: number, b: number, c: number) => number;
-    readonly rust_zstd_wasm_shim_memmove: (a: number, b: number, c: number) => number;
-    readonly rust_zstd_wasm_shim_memset: (a: number, b: number, c: number) => number;
-    readonly rust_zstd_wasm_shim_qsort: (a: number, b: number, c: number, d: number) => void;
-    readonly __wbg_get_multiissuerauthorizeresult_decision: (a: number) => number;
-    readonly __wbg_set_multiissuerauthorizeresult_response: (a: number, b: number) => void;
-    readonly __wbg_set_multiissuerauthorizeresult_request_id: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_multiissuerauthorizeresult_decision: (a: number, b: number) => void;
-    readonly __wbg_get_multiissuerauthorizeresult_response: (a: number) => number;
-    readonly __wbg_get_multiissuerauthorizeresult_request_id: (a: number, b: number) => void;
-    readonly __wbg_multiissuerauthorizeresult_free: (a: number, b: number) => void;
-    readonly cedarling_get_logs_by_tag: (a: number, b: number, c: number, d: number) => void;
-    readonly __wasm_bindgen_func_elem_8692: (a: number, b: number, c: number, d: number) => void;
-    readonly __wasm_bindgen_func_elem_8747: (a: number, b: number, c: number, d: number) => void;
-    readonly __wasm_bindgen_func_elem_12170: (a: number, b: number, c: number) => void;
-    readonly __wasm_bindgen_func_elem_8527: (a: number, b: number) => void;
-    readonly __wbindgen_export: (a: number, b: number) => number;
-    readonly __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
-    readonly __wbindgen_export3: (a: number) => void;
-    readonly __wbindgen_export4: (a: number, b: number) => void;
-    readonly __wbindgen_add_to_stack_pointer: (a: number) => number;
-    readonly __wbindgen_export5: (a: number, b: number, c: number) => void;
-}
-
-export type SyncInitInput = BufferSource | WebAssembly.Module;
-
-/**
- * Instantiates the given `module`, which can either be bytes or
- * a precompiled `WebAssembly.Module`.
- *
- * @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
- *
- * @returns {InitOutput}
- */
-export function initSync(module: { module: SyncInitInput } | SyncInitInput): InitOutput;
-
-/**
- * If `module_or_path` is {RequestInfo} or {URL}, makes a request and
- * for everything else, calls `WebAssembly.instantiate` directly.
- *
- * @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
- *
- * @returns {Promise<InitOutput>}
- */
-export default function __wbg_init (module_or_path?: { module_or_path: InitInput | Promise<InitInput> } | InitInput | Promise<InitInput>): Promise<InitOutput>;

package/cedarling_wasm.js

@@ -4,7 +4,7 @@
  * A WASM wrapper for the Rust `cedarling::AuthorizeResult` struct.
  * Represents the result of an authorization request.
  */
-export class AuthorizeResult {
+class AuthorizeResult {
     static __wrap(ptr) {
         const obj = Object.create(AuthorizeResult.prototype);
         obj.__wbg_ptr = ptr;
@@ -112,12 +112,13 @@ export class AuthorizeResult {
     }
 }
 if (Symbol.dispose) AuthorizeResult.prototype[Symbol.dispose] = AuthorizeResult.prototype.free;
+exports.AuthorizeResult = AuthorizeResult;
 
 /**
  * A WASM wrapper for the Rust `cedar_policy::Response` struct.
  * Represents the result of an authorization request.
  */
-export class AuthorizeResultResponse {
+class AuthorizeResultResponse {
     static __wrap(ptr) {
         const obj = Object.create(AuthorizeResultResponse.prototype);
         obj.__wbg_ptr = ptr;
@@ -152,11 +153,337 @@ export class AuthorizeResultResponse {
     }
 }
 if (Symbol.dispose) AuthorizeResultResponse.prototype[Symbol.dispose] = AuthorizeResultResponse.prototype.free;
+exports.AuthorizeResultResponse = AuthorizeResultResponse;
+
+/**
+ * WASM wrapper for
+ * `cedarling::BatchAuthorizeResponse<Result<MultiIssuerAuthorizeResult, BatchItemError>>`.
+ * Same shape as [`BatchAuthorizeUnsignedResponse`] with multi-issuer results.
+ */
+class BatchAuthorizeMultiIssuerResponse {
+    static __wrap(ptr) {
+        const obj = Object.create(BatchAuthorizeMultiIssuerResponse.prototype);
+        obj.__wbg_ptr = ptr;
+        BatchAuthorizeMultiIssuerResponseFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BatchAuthorizeMultiIssuerResponseFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_batchauthorizemultiissuerresponse_free(ptr, 0);
+    }
+    /**
+     * Shared correlation id stamped on every per-item decision log entry.
+     * @returns {string}
+     */
+    get batch_id() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchauthorizemultiissuerresponse_batch_id(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            deferred1_0 = r0;
+            deferred1_1 = r1;
+            return getStringFromWasm0(r0, r1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export5(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Per-item results in input order — each slot is a
+     * [`BatchItemMultiIssuerResult`].
+     * @returns {BatchItemMultiIssuerResult[]}
+     */
+    get results() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchauthorizemultiissuerresponse_results(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export5(r0, r1 * 4, 4);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) BatchAuthorizeMultiIssuerResponse.prototype[Symbol.dispose] = BatchAuthorizeMultiIssuerResponse.prototype.free;
+exports.BatchAuthorizeMultiIssuerResponse = BatchAuthorizeMultiIssuerResponse;
+
+/**
+ * WASM wrapper for `cedarling::BatchAuthorizeResponse<Result<AuthorizeResult, BatchItemError>>`.
+ *
+ * Carries a shared `batch_id` (UUIDv7) alongside per-item results. Each result
+ * is a [`BatchItemUnsignedResult`] — Cedar decision on `is_ok()`, per-item
+ * build failure on `error`. `results[i]` corresponds to `items[i]`.
+ */
+class BatchAuthorizeUnsignedResponse {
+    static __wrap(ptr) {
+        const obj = Object.create(BatchAuthorizeUnsignedResponse.prototype);
+        obj.__wbg_ptr = ptr;
+        BatchAuthorizeUnsignedResponseFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BatchAuthorizeUnsignedResponseFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_batchauthorizeunsignedresponse_free(ptr, 0);
+    }
+    /**
+     * Shared correlation id stamped on every per-item decision log entry.
+     * @returns {string}
+     */
+    get batch_id() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchauthorizeunsignedresponse_batch_id(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            deferred1_0 = r0;
+            deferred1_1 = r1;
+            return getStringFromWasm0(r0, r1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export5(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Per-item results in input order — each slot is a
+     * [`BatchItemUnsignedResult`].
+     * @returns {BatchItemUnsignedResult[]}
+     */
+    get results() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchauthorizeunsignedresponse_results(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export5(r0, r1 * 4, 4);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) BatchAuthorizeUnsignedResponse.prototype[Symbol.dispose] = BatchAuthorizeUnsignedResponse.prototype.free;
+exports.BatchAuthorizeUnsignedResponse = BatchAuthorizeUnsignedResponse;
+
+/**
+ * Per-item build failure surfaced inside a batch response at `results[i]`
+ * when Cedar couldn't be reached for that item.
+ */
+class BatchItemError {
+    static __wrap(ptr) {
+        const obj = Object.create(BatchItemError.prototype);
+        obj.__wbg_ptr = ptr;
+        BatchItemErrorFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BatchItemErrorFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_batchitemerror_free(ptr, 0);
+    }
+    /**
+     * Stable variant slug — `action_parse`, `resource_build`, `context_build`,
+     * `principal_build`, `schema_validation`, `multi_issuer_entity`,
+     * `request_validation`.
+     * @returns {string}
+     */
+    get category() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchitemerror_category(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            deferred1_0 = r0;
+            deferred1_1 = r1;
+            return getStringFromWasm0(r0, r1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export5(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Position of the failing item in the original `items` vector.
+     * @returns {number}
+     */
+    get item_index() {
+        const ret = wasm.batchitemerror_item_index(this.__wbg_ptr);
+        return ret >>> 0;
+    }
+    /**
+     * Human-readable diagnostic. Safe to log.
+     * @returns {string}
+     */
+    get message() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchitemerror_message(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            deferred1_0 = r0;
+            deferred1_1 = r1;
+            return getStringFromWasm0(r0, r1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export5(deferred1_0, deferred1_1, 1);
+        }
+    }
+}
+if (Symbol.dispose) BatchItemError.prototype[Symbol.dispose] = BatchItemError.prototype.free;
+exports.BatchItemError = BatchItemError;
+
+/**
+ * Multi-issuer analog of [`BatchItemUnsignedResult`].
+ */
+class BatchItemMultiIssuerResult {
+    static __wrap(ptr) {
+        const obj = Object.create(BatchItemMultiIssuerResult.prototype);
+        obj.__wbg_ptr = ptr;
+        BatchItemMultiIssuerResultFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BatchItemMultiIssuerResultFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_batchitemmultiissuerresult_free(ptr, 0);
+    }
+    /**
+     * The per-item error if `!is_ok()`; `undefined` otherwise.
+     * @returns {BatchItemError | undefined}
+     */
+    get error() {
+        const ret = wasm.batchitemmultiissuerresult_error(this.__wbg_ptr);
+        return ret === 0 ? undefined : BatchItemError.__wrap(ret);
+    }
+    /**
+     * `true` when Cedar evaluated this item.
+     * @returns {boolean}
+     */
+    get is_ok() {
+        const ret = wasm.batchitemmultiissuerresult_is_ok(this.__wbg_ptr);
+        return ret !== 0;
+    }
+    /**
+     * The multi-issuer decision if `is_ok()`; throws otherwise.
+     * @returns {MultiIssuerAuthorizeResult}
+     */
+    unwrap() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchitemmultiissuerresult_unwrap(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return MultiIssuerAuthorizeResult.__wrap(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) BatchItemMultiIssuerResult.prototype[Symbol.dispose] = BatchItemMultiIssuerResult.prototype.free;
+exports.BatchItemMultiIssuerResult = BatchItemMultiIssuerResult;
+
+/**
+ * One slot in a batch response's `results` array. Callers switch on
+ * `is_ok()` — on `true`, read `unwrap()`; on `false`, read `error()`.
+ */
+class BatchItemUnsignedResult {
+    static __wrap(ptr) {
+        const obj = Object.create(BatchItemUnsignedResult.prototype);
+        obj.__wbg_ptr = ptr;
+        BatchItemUnsignedResultFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BatchItemUnsignedResultFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_batchitemunsignedresult_free(ptr, 0);
+    }
+    /**
+     * The per-item error if `!is_ok()`; `undefined` otherwise.
+     * @returns {BatchItemError | undefined}
+     */
+    get error() {
+        const ret = wasm.batchitemunsignedresult_error(this.__wbg_ptr);
+        return ret === 0 ? undefined : BatchItemError.__wrap(ret);
+    }
+    /**
+     * `true` when Cedar evaluated this item (Allow or Deny); `false` when it
+     * failed to build.
+     * @returns {boolean}
+     */
+    get is_ok() {
+        const ret = wasm.batchitemunsignedresult_is_ok(this.__wbg_ptr);
+        return ret !== 0;
+    }
+    /**
+     * The Cedar decision if `is_ok()`; throws otherwise.
+     * @returns {AuthorizeResult}
+     */
+    unwrap() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.batchitemunsignedresult_unwrap(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return AuthorizeResult.__wrap(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) BatchItemUnsignedResult.prototype[Symbol.dispose] = BatchItemUnsignedResult.prototype.free;
+exports.BatchItemUnsignedResult = BatchItemUnsignedResult;
 
 /**
  * The instance of the Cedarling application.
  */
-export class Cedarling {
+class Cedarling {
     static __wrap(ptr) {
         const obj = Object.create(Cedarling.prototype);
         obj.__wbg_ptr = ptr;
@@ -311,6 +638,34 @@ export class Cedarling {
         const ret = wasm.cedarling_authorize_multi_issuer(this.__wbg_ptr, ptr0, len0);
         return takeObject(ret);
     }
+    /**
+     * Authorize a batch of multi-issuer requests against one shared token set.
+     *
+     * Tokens are validated and token/issuer entities are built once, then
+     * each item is evaluated in input order. Batch-level failures (validation,
+     * JWT verification, status-list refresh) reject the whole call; per-item
+     * failures are returned as `BatchItemError` results and exposed by WASM
+     * with `is_ok=false` and `error`, while genuine Cedar denials remain
+     * `AuthorizeResult` values with `decision=false`.
+     *
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`BatchAuthorizeMultiIssuerRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_multi_issuer_batch(JSON.stringify(batchRequest));
+     * ```
+     * @param {string} request
+     * @returns {Promise<BatchAuthorizeMultiIssuerResponse>}
+     */
+    authorize_multi_issuer_batch(request) {
+        const ptr0 = passStringToWasm0(request, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.cedarling_authorize_multi_issuer_batch(this.__wbg_ptr, ptr0, len0);
+        return takeObject(ret);
+    }
     /**
      * Authorize an unsigned request carrying an optional single principal.
      * Makes an authorization decision based on the [`RequestUnsigned`].
@@ -338,6 +693,34 @@ export class Cedarling {
         const ret = wasm.cedarling_authorize_unsigned(this.__wbg_ptr, ptr0, len0);
         return takeObject(ret);
     }
+    /**
+     * Authorize a batch of unsigned requests against one shared principal.
+     *
+     * Setup work (principal build + pushed-data snapshot) runs once and each
+     * item is evaluated in input order. Results are returned inside a
+     * [`BatchAuthorizeUnsignedResponse`] carrying the shared `batch_id`.
+     * Batch-level failures (validation, principal parse) reject the whole
+     * call; per-item failures are returned as `BatchItemError` results and
+     * exposed by WASM with `is_ok=false` and `error`, while genuine Cedar
+     * denials remain `AuthorizeResult` values with `decision=false`.
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`BatchAuthorizeUnsignedRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_unsigned_batch(JSON.stringify(batchRequest));
+     * ```
+     * @param {string} request
+     * @returns {Promise<BatchAuthorizeUnsignedResponse>}
+     */
+    authorize_unsigned_batch(request) {
+        const ptr0 = passStringToWasm0(request, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.cedarling_authorize_unsigned_batch(this.__wbg_ptr, ptr0, len0);
+        return takeObject(ret);
+    }
     /**
      * Clear all entries from the data store.
      *
@@ -828,12 +1211,13 @@ export class Cedarling {
     }
 }
 if (Symbol.dispose) Cedarling.prototype[Symbol.dispose] = Cedarling.prototype.free;
+exports.Cedarling = Cedarling;
 
 /**
  * A WASM wrapper for the Rust `cedarling::DataEntry` struct.
  * Represents a data entry in the DataStore with value and metadata.
  */
-export class DataEntry {
+class DataEntry {
     static __wrap(ptr) {
         const obj = Object.create(DataEntry.prototype);
         obj.__wbg_ptr = ptr;
@@ -1022,12 +1406,13 @@ export class DataEntry {
     }
 }
 if (Symbol.dispose) DataEntry.prototype[Symbol.dispose] = DataEntry.prototype.free;
+exports.DataEntry = DataEntry;
 
 /**
  * A WASM wrapper for the Rust `cedarling::DataStoreStats` struct.
  * Statistics about the DataStore.
  */
-export class DataStoreStats {
+class DataStoreStats {
     static __wrap(ptr) {
         const obj = Object.create(DataStoreStats.prototype);
         obj.__wbg_ptr = ptr;
@@ -1201,6 +1586,7 @@ export class DataStoreStats {
     }
 }
 if (Symbol.dispose) DataStoreStats.prototype[Symbol.dispose] = DataStoreStats.prototype.free;
+exports.DataStoreStats = DataStoreStats;
 
 /**
  * Diagnostics
@@ -1208,7 +1594,7 @@ if (Symbol.dispose) DataStoreStats.prototype[Symbol.dispose] = DataStoreStats.pr
  *
  * Provides detailed information about how a policy decision was made, including policies that contributed to the decision and any errors encountered during evaluation.
  */
-export class Diagnostics {
+class Diagnostics {
     static __wrap(ptr) {
         const obj = Object.create(Diagnostics.prototype);
         obj.__wbg_ptr = ptr;
@@ -1265,8 +1651,9 @@ export class Diagnostics {
     }
 }
 if (Symbol.dispose) Diagnostics.prototype[Symbol.dispose] = Diagnostics.prototype.free;
+exports.Diagnostics = Diagnostics;
 
-export class IntoUnderlyingByteSource {
+class IntoUnderlyingByteSource {
     __destroy_into_raw() {
         const ptr = this.__wbg_ptr;
         this.__wbg_ptr = 0;
@@ -1311,8 +1698,9 @@ export class IntoUnderlyingByteSource {
     }
 }
 if (Symbol.dispose) IntoUnderlyingByteSource.prototype[Symbol.dispose] = IntoUnderlyingByteSource.prototype.free;
+exports.IntoUnderlyingByteSource = IntoUnderlyingByteSource;
 
-export class IntoUnderlyingSink {
+class IntoUnderlyingSink {
     __destroy_into_raw() {
         const ptr = this.__wbg_ptr;
         this.__wbg_ptr = 0;
@@ -1350,8 +1738,9 @@ export class IntoUnderlyingSink {
     }
 }
 if (Symbol.dispose) IntoUnderlyingSink.prototype[Symbol.dispose] = IntoUnderlyingSink.prototype.free;
+exports.IntoUnderlyingSink = IntoUnderlyingSink;
 
-export class IntoUnderlyingSource {
+class IntoUnderlyingSource {
     __destroy_into_raw() {
         const ptr = this.__wbg_ptr;
         this.__wbg_ptr = 0;
@@ -1376,12 +1765,13 @@ export class IntoUnderlyingSource {
     }
 }
 if (Symbol.dispose) IntoUnderlyingSource.prototype[Symbol.dispose] = IntoUnderlyingSource.prototype.free;
+exports.IntoUnderlyingSource = IntoUnderlyingSource;
 
 /**
  * A WASM wrapper for the Rust `cedarling::MultiIssuerAuthorizeResult` struct.
  * Represents the result of a multi-issuer authorization request.
  */
-export class MultiIssuerAuthorizeResult {
+class MultiIssuerAuthorizeResult {
     static __wrap(ptr) {
         const obj = Object.create(MultiIssuerAuthorizeResult.prototype);
         obj.__wbg_ptr = ptr;
@@ -1485,6 +1875,7 @@ export class MultiIssuerAuthorizeResult {
     }
 }
 if (Symbol.dispose) MultiIssuerAuthorizeResult.prototype[Symbol.dispose] = MultiIssuerAuthorizeResult.prototype.free;
+exports.MultiIssuerAuthorizeResult = MultiIssuerAuthorizeResult;
 
 /**
  * PolicyEvaluationError
@@ -1492,7 +1883,7 @@ if (Symbol.dispose) MultiIssuerAuthorizeResult.prototype[Symbol.dispose] = Multi
  *
  * Represents an error that occurred when evaluating a Cedar policy.
  */
-export class PolicyEvaluationError {
+class PolicyEvaluationError {
     static __wrap(ptr) {
         const obj = Object.create(PolicyEvaluationError.prototype);
         obj.__wbg_ptr = ptr;
@@ -1551,6 +1942,7 @@ export class PolicyEvaluationError {
     }
 }
 if (Symbol.dispose) PolicyEvaluationError.prototype[Symbol.dispose] = PolicyEvaluationError.prototype.free;
+exports.PolicyEvaluationError = PolicyEvaluationError;
 
 /**
  * Create a new instance of the Cedarling application.
@@ -1558,10 +1950,11 @@ if (Symbol.dispose) PolicyEvaluationError.prototype[Symbol.dispose] = PolicyEval
  * @param {any} config
  * @returns {Promise<Cedarling>}
  */
-export function init(config) {
+function init(config) {
     const ret = wasm.init(addHeapObject(config));
     return takeObject(ret);
 }
+exports.init = init;
 
 /**
  * Create a new instance of the Cedarling application from archive bytes.
@@ -1583,10 +1976,11 @@ export function init(config) {
  * @param {Uint8Array} archive_bytes
  * @returns {Promise<Cedarling>}
  */
-export function init_from_archive_bytes(config, archive_bytes) {
+function init_from_archive_bytes(config, archive_bytes) {
     const ret = wasm.init_from_archive_bytes(addHeapObject(config), addHeapObject(archive_bytes));
     return takeObject(ret);
 }
+exports.init_from_archive_bytes = init_from_archive_bytes;
 function __wbg_get_imports() {
     const import0 = {
         __proto__: null,
@@ -1686,6 +2080,22 @@ function __wbg_get_imports() {
             const ret = AuthorizeResult.__wrap(arg0);
             return addHeapObject(ret);
         },
+        __wbg_batchauthorizemultiissuerresponse_new: function(arg0) {
+            const ret = BatchAuthorizeMultiIssuerResponse.__wrap(arg0);
+            return addHeapObject(ret);
+        },
+        __wbg_batchauthorizeunsignedresponse_new: function(arg0) {
+            const ret = BatchAuthorizeUnsignedResponse.__wrap(arg0);
+            return addHeapObject(ret);
+        },
+        __wbg_batchitemmultiissuerresult_new: function(arg0) {
+            const ret = BatchItemMultiIssuerResult.__wrap(arg0);
+            return addHeapObject(ret);
+        },
+        __wbg_batchitemunsignedresult_new: function(arg0) {
+            const ret = BatchItemUnsignedResult.__wrap(arg0);
+            return addHeapObject(ret);
+        },
         __wbg_body_18c9f2ac15ead4b2: function(arg0) {
             const ret = getObject(arg0).body;
             return isLikeNone(ret) ? 0 : addHeapObject(ret);
@@ -1986,7 +2396,7 @@ function __wbg_get_imports() {
                     const a = state0.a;
                     state0.a = 0;
                     try {
-                        return __wasm_bindgen_func_elem_8747(a, state0.b, arg0, arg1);
+                        return __wasm_bindgen_func_elem_8836(a, state0.b, arg0, arg1);
                     } finally {
                         state0.a = a;
                     }
@@ -2195,18 +2605,18 @@ function __wbg_get_imports() {
             console.warn(...getObject(arg0));
         },
         __wbindgen_cast_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 1196, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_12170);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 1193, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_12258);
             return addHeapObject(ret);
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 995, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_8692);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 992, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_8781);
             return addHeapObject(ret);
         },
         __wbindgen_cast_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 883, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_8527);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 876, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, __wasm_bindgen_func_elem_8616);
             return addHeapObject(ret);
         },
         __wbindgen_cast_0000000000000004: function(arg0) {
@@ -2248,18 +2658,18 @@ function __wbg_get_imports() {
     };
 }
 
-function __wasm_bindgen_func_elem_8527(arg0, arg1) {
-    wasm.__wasm_bindgen_func_elem_8527(arg0, arg1);
+function __wasm_bindgen_func_elem_8616(arg0, arg1) {
+    wasm.__wasm_bindgen_func_elem_8616(arg0, arg1);
 }
 
-function __wasm_bindgen_func_elem_12170(arg0, arg1, arg2) {
-    wasm.__wasm_bindgen_func_elem_12170(arg0, arg1, addHeapObject(arg2));
+function __wasm_bindgen_func_elem_12258(arg0, arg1, arg2) {
+    wasm.__wasm_bindgen_func_elem_12258(arg0, arg1, addHeapObject(arg2));
 }
 
-function __wasm_bindgen_func_elem_8692(arg0, arg1, arg2) {
+function __wasm_bindgen_func_elem_8781(arg0, arg1, arg2) {
     try {
         const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-        wasm.__wasm_bindgen_func_elem_8692(retptr, arg0, arg1, addHeapObject(arg2));
+        wasm.__wasm_bindgen_func_elem_8781(retptr, arg0, arg1, addHeapObject(arg2));
         var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
         var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
         if (r1) {
@@ -2270,8 +2680,8 @@ function __wasm_bindgen_func_elem_8692(arg0, arg1, arg2) {
     }
 }
 
-function __wasm_bindgen_func_elem_8747(arg0, arg1, arg2, arg3) {
-    wasm.__wasm_bindgen_func_elem_8747(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
+function __wasm_bindgen_func_elem_8836(arg0, arg1, arg2, arg3) {
+    wasm.__wasm_bindgen_func_elem_8836(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
 }
 
 
@@ -2297,6 +2707,21 @@ const AuthorizeResultFinalization = (typeof FinalizationRegistry === 'undefined'
 const AuthorizeResultResponseFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_authorizeresultresponse_free(ptr, 1));
+const BatchAuthorizeMultiIssuerResponseFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_batchauthorizemultiissuerresponse_free(ptr, 1));
+const BatchAuthorizeUnsignedResponseFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_batchauthorizeunsignedresponse_free(ptr, 1));
+const BatchItemErrorFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_batchitemerror_free(ptr, 1));
+const BatchItemMultiIssuerResultFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_batchitemmultiissuerresult_free(ptr, 1));
+const BatchItemUnsignedResultFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_batchitemunsignedresult_free(ptr, 1));
 const CedarlingFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_cedarling_free(ptr, 1));
@@ -2552,15 +2977,7 @@ function takeObject(idx) {
 
 let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
 cachedTextDecoder.decode();
-const MAX_SAFARI_DECODE_BYTES = 2146435072;
-let numBytesDecoded = 0;
 function decodeText(ptr, len) {
-    numBytesDecoded += len;
-    if (numBytesDecoded >= MAX_SAFARI_DECODE_BYTES) {
-        cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
-        cachedTextDecoder.decode();
-        numBytesDecoded = len;
-    }
     return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
 }
 
@@ -2579,95 +2996,8 @@ if (!('encodeInto' in cachedTextEncoder)) {
 
 let WASM_VECTOR_LEN = 0;
 
-let wasmModule, wasmInstance, wasm;
-function __wbg_finalize_init(instance, module) {
-    wasmInstance = instance;
-    wasm = instance.exports;
-    wasmModule = module;
-    cachedDataViewMemory0 = null;
-    cachedUint8ArrayMemory0 = null;
-    return wasm;
-}
-
-async function __wbg_load(module, imports) {
-    if (typeof Response === 'function' && module instanceof Response) {
-        if (typeof WebAssembly.instantiateStreaming === 'function') {
-            try {
-                return await WebAssembly.instantiateStreaming(module, imports);
-            } catch (e) {
-                const validResponse = module.ok && expectedResponseType(module.type);
-
-                if (validResponse && module.headers.get('Content-Type') !== 'application/wasm') {
-                    console.warn("`WebAssembly.instantiateStreaming` failed because your server does not serve Wasm with `application/wasm` MIME type. Falling back to `WebAssembly.instantiate` which is slower. Original error:\n", e);
-
-                } else { throw e; }
-            }
-        }
-
-        const bytes = await module.arrayBuffer();
-        return await WebAssembly.instantiate(bytes, imports);
-    } else {
-        const instance = await WebAssembly.instantiate(module, imports);
-
-        if (instance instanceof WebAssembly.Instance) {
-            return { instance, module };
-        } else {
-            return instance;
-        }
-    }
-
-    function expectedResponseType(type) {
-        switch (type) {
-            case 'basic': case 'cors': case 'default': return true;
-        }
-        return false;
-    }
-}
-
-function initSync(module) {
-    if (wasm !== undefined) return wasm;
-
-
-    if (module !== undefined) {
-        if (Object.getPrototypeOf(module) === Object.prototype) {
-            ({module} = module)
-        } else {
-            console.warn('using deprecated parameters for `initSync()`; pass a single object instead')
-        }
-    }
-
-    const imports = __wbg_get_imports();
-    if (!(module instanceof WebAssembly.Module)) {
-        module = new WebAssembly.Module(module);
-    }
-    const instance = new WebAssembly.Instance(module, imports);
-    return __wbg_finalize_init(instance, module);
-}
-
-async function __wbg_init(module_or_path) {
-    if (wasm !== undefined) return wasm;
-
-
-    if (module_or_path !== undefined) {
-        if (Object.getPrototypeOf(module_or_path) === Object.prototype) {
-            ({module_or_path} = module_or_path)
-        } else {
-            console.warn('using deprecated parameters for the initialization function; pass a single object instead')
-        }
-    }
-
-    if (module_or_path === undefined) {
-        module_or_path = new URL('cedarling_wasm_bg.wasm', import.meta.url);
-    }
-    const imports = __wbg_get_imports();
-
-    if (typeof module_or_path === 'string' || (typeof Request === 'function' && module_or_path instanceof Request) || (typeof URL === 'function' && module_or_path instanceof URL)) {
-        module_or_path = fetch(module_or_path);
-    }
-
-    const { instance, module } = await __wbg_load(await module_or_path, imports);
-
-    return __wbg_finalize_init(instance, module);
-}
-
-export { initSync, __wbg_init as default };
+const wasmPath = `${__dirname}/cedarling_wasm_bg.wasm`;
+const wasmBytes = require('fs').readFileSync(wasmPath);
+const wasmModule = new WebAssembly.Module(wasmBytes);
+let wasmInstance = new WebAssembly.Instance(wasmModule, __wbg_get_imports());
+let wasm = wasmInstance.exports;

package/package.json

@@ -1,8 +1,7 @@
 {
   "name": "@janssenproject/cedarling_wasm",
-  "type": "module",
   "description": "The Cedarling is a performant local authorization service that runs the Rust Cedar Engine",
-  "version": "0.0.420",
+  "version": "0.0.421-nodejs",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -14,8 +13,5 @@
     "cedarling_wasm.d.ts"
   ],
   "main": "cedarling_wasm.js",
-  "types": "cedarling_wasm.d.ts",
-  "sideEffects": [
-    "./snippets/*"
-  ]
+  "types": "cedarling_wasm.d.ts"
 }