@janssenproject/cedarling_wasm 2.4.0 → 2.5.0

package/{cedarling_wasm.d.ts → dist/types/cjs/generated.d.ts}

@@ -1,3 +1,4 @@
+/// <reference lib="esnext.disposable" />
 /* tslint:disable */
 /* eslint-disable */
 /**
@@ -19,7 +20,7 @@ export class AuthorizeResult {
     /**
      * Convert `AuthorizeResult` to json string value
      */
-    json_string(): string;
+    jsonString(): string;
     /**
      * Result of authorization
      * true means `ALLOW`
@@ -186,14 +187,17 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * const redirects = cedarling.annotation_values(result.response.diagnostics.reason, "redirect");
+     * const redirects = cedarling.annotationValues(
+     *   result.response.diagnostics.reason,
+     *   "redirect",
+     * );
      * // ["/upgrade"]
      * ```
      */
-    annotation_values(policy_ids: string[], key: string): string[];
+    annotationValues(policy_ids: string[], key: string): string[];
     /**
-     * Return the annotations of each given policy, grouped by policy ID
-     * the loss-free companion to `annotations_map`. Unknown policy IDs are
+     * Return the annotations of each given policy, grouped by policy ID. It is
+     * the loss-free companion to `annotationsMap`. Unknown policy IDs are
      * silently skipped.
      *
      * # Arguments
@@ -205,11 +209,11 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * const byPolicy = cedarling.annotations_by_policy(result.response.diagnostics.reason);
+     * const byPolicy = cedarling.annotationsByPolicy(result.response.diagnostics.reason);
      * // { "5": { redirect: "/upgrade", tier: "premium" } }
      * ```
      */
-    annotations_by_policy(policy_ids: string[]): any;
+    annotationsByPolicy(policy_ids: string[]): any;
     /**
      * Merge the annotations (`@key("value")`) of the given policies into a single object.
      *
@@ -217,7 +221,7 @@ export class Cedarling {
      * pass `result.response.diagnostics.reason`.
      *
      * Lossy: if the same annotation key appears on several policies, one value wins
-     * arbitrarily. Use `annotation_values` / `annotations_by_policy` when duplicates
+     * arbitrarily. Use `annotationValues` / `annotationsByPolicy` when duplicates
      * matter. Unknown policy IDs are silently skipped.
      *
      * # Arguments
@@ -229,11 +233,32 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * const annotations = cedarling.annotations_map(result.response.diagnostics.reason);
+     * const annotations = cedarling.annotationsMap(result.response.diagnostics.reason);
      * // { redirect: "/upgrade", tier: "premium" }
      * ```
      */
-    annotations_map(policy_ids: string[]): any;
+    annotationsMap(policy_ids: string[]): any;
+    /**
+     * Authorize a batch of multi-issuer requests against one shared token set.
+     *
+     * Tokens are validated and token/issuer entities are built once, then
+     * each item is evaluated in input order. Batch-level failures (validation,
+     * JWT verification, status-list refresh) reject the whole call; per-item
+     * failures are returned as `BatchItemError` results and exposed by WASM
+     * with `is_ok=false` and `error`, while genuine Cedar denials remain
+     * `AuthorizeResult` values with `decision=false`.
+     *
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`BatchAuthorizeMultiIssuerRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorizeMultiIssuerBatch(JSON.stringify(batchRequest));
+     * ```
+     */
+    authorizeMultiIssuerBatch(request: string): Promise<BatchAuthorizeMultiIssuerResponse>;
     /**
      * Authorize multi-issuer request.
      * Makes authorization decision based on multiple JWT tokens from different issuers.
@@ -245,31 +270,31 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * const result = await cedarling.authorize_multi_issuer(JSON.stringify(request));
+     * const result = await cedarling.authorizeMultiIssuer(JSON.stringify(request));
      * ```
      */
-    authorize_multi_issuer(request: string): Promise<MultiIssuerAuthorizeResult>;
+    authorizeMultiIssuer(request: string): Promise<MultiIssuerAuthorizeResult>;
     /**
-     * Authorize a batch of multi-issuer requests against one shared token set.
-     *
-     * Tokens are validated and token/issuer entities are built once, then
-     * each item is evaluated in input order. Batch-level failures (validation,
-     * JWT verification, status-list refresh) reject the whole call; per-item
-     * failures are returned as `BatchItemError` results and exposed by WASM
-     * with `is_ok=false` and `error`, while genuine Cedar denials remain
-     * `AuthorizeResult` values with `decision=false`.
+     * Authorize a batch of unsigned requests against one shared principal.
      *
+     * Setup work (principal build + pushed-data snapshot) runs once and each
+     * item is evaluated in input order. Results are returned inside a
+     * [`BatchAuthorizeUnsignedResponse`] carrying the shared `batch_id`.
+     * Batch-level failures (validation, principal parse) reject the whole
+     * call; per-item failures are returned as `BatchItemError` results and
+     * exposed by WASM with `is_ok=false` and `error`, while genuine Cedar
+     * denials remain `AuthorizeResult` values with `decision=false`.
      * # Arguments
      *
-     * * `request` - JSON string representation of [`BatchAuthorizeMultiIssuerRequest`].
+     * * `request` - JSON string representation of [`BatchAuthorizeUnsignedRequest`].
      *
      * # Example
      *
      * ```javascript
-     * const result = await cedarling.authorize_multi_issuer_batch(JSON.stringify(batchRequest));
+     * const result = await cedarling.authorizeUnsignedBatch(JSON.stringify(batchRequest));
      * ```
      */
-    authorize_multi_issuer_batch(request: string): Promise<BatchAuthorizeMultiIssuerResponse>;
+    authorizeUnsignedBatch(request: string): Promise<BatchAuthorizeUnsignedResponse>;
     /**
      * Authorize an unsigned request carrying an optional single principal.
      * Makes an authorization decision based on the [`RequestUnsigned`].
@@ -286,52 +311,56 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * const result = await cedarling.authorize_unsigned(JSON.stringify(request));
+     * const result = await cedarling.authorizeUnsigned(JSON.stringify(request));
      * ```
      */
-    authorize_unsigned(request: string): Promise<AuthorizeResult>;
+    authorizeUnsigned(request: string): Promise<AuthorizeResult>;
     /**
-     * Authorize a batch of unsigned requests against one shared principal.
+     * Clear all entries from the data store.
      *
-     * Setup work (principal build + pushed-data snapshot) runs once and each
-     * item is evaluated in input order. Results are returned inside a
-     * [`BatchAuthorizeUnsignedResponse`] carrying the shared `batch_id`.
-     * Batch-level failures (validation, principal parse) reject the whole
-     * call; per-item failures are returned as `BatchItemError` results and
-     * exposed by WASM with `is_ok=false` and `error`, while genuine Cedar
-     * denials remain `AuthorizeResult` values with `decision=false`.
      * # Arguments
      *
-     * * `request` - JSON string representation of [`BatchAuthorizeUnsignedRequest`].
+     * None.
      *
      * # Example
      *
      * ```javascript
-     * const result = await cedarling.authorize_unsigned_batch(JSON.stringify(batchRequest));
+     * cedarling.clearDataCtx();
+     * console.log("All data entries cleared");
      * ```
      */
-    authorize_unsigned_batch(request: string): Promise<BatchAuthorizeUnsignedResponse>;
+    clearDataCtx(): void;
     /**
-     * Clear all entries from the data store.
+     * Destructive read: returns the telemetry metrics snapshot and resets
+     * the counters for the next interval.
+     *
+     * Fails when `CEDARLING_METRICS_COLLECTION` is disabled or whenever
+     * `CEDARLING_LOCK_TELEMETRY_INTERVAL` is set (even if the Lock server
+     * has no telemetry endpoint). `interval_secs` is fractional seconds,
+     * so sub-second intervals are reported exactly.
      *
      * # Example
      *
      * ```javascript
-     * cedarling.clear_data_ctx();
-     * console.log("All data entries cleared");
+     * const snapshot = cedarling.drainMetrics();
+     * console.log(`Requests: ${snapshot.operational_stats.get("authz.requests_total")}`);
      * ```
      */
-    clear_data_ctx(): void;
+    drainMetrics(): MetricsSnapshot;
     /**
      * Get trusted issuer identifiers that failed to load.
      *
+     * # Arguments
+     *
+     * None.
+     *
      * # Example
      *
      * ```javascript
-     * const ids = cedarling.failed_trusted_issuer_ids();
+     * const ids = cedarling.failedTrustedIssuerIds();
      * ```
      */
-    failed_trusted_issuer_ids(): Array<any>;
+    failedTrustedIssuerIds(): Array<any>;
     /**
      * Get a value from the data store by key.
      * Returns null if the key doesn't exist or the entry has expired.
@@ -343,16 +372,16 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * const value = cedarling.get_data_ctx("user:123");
+     * const value = cedarling.getDataCtx("user:123");
      * if (value !== null) {
      *     console.log(value.name); // "John"
      * }
      * ```
      */
-    get_data_ctx(key: string): any;
+    getDataCtx(key: string): any;
     /**
      * Get a data entry with full metadata by key.
-     * Returns null if the key doesn't exist or the entry has expired.
+     * Returns undefined if the key doesn't exist or the entry has expired.
      *
      * # Arguments
      *
@@ -361,56 +390,107 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * const entry = cedarling.get_data_entry_ctx("user:123");
-     * if (entry !== null) {
+     * const entry = cedarling.getDataEntryCtx("user:123");
+     * if (entry !== undefined) {
      *     console.log(entry.key); // "user:123"
-     *     console.log(entry.value); // { name: "John", age: 30 }
+     *     console.log(entry.value()); // { name: "John", age: 30 }
      *     console.log(entry.data_type); // "Record"
      *     console.log(entry.created_at); // "2024-01-01T12:00:00Z"
      *     console.log(entry.access_count); // 5
      * }
      * ```
      */
-    get_data_entry_ctx(key: string): DataEntry | undefined;
+    getDataEntryCtx(key: string): DataEntry | undefined;
     /**
-     * Get specific log entry.
-     * Returns `Map` with values or `null`.
+     * Returns one retained memory log by ID, or `null` when it is not retained.
+     *
+     * # Arguments
+     *
+     * * `id` - The retained log identifier.
+     *
+     * # Example
+     *
+     * ```javascript
+     * const log = cedarling.getLogById("request-id");
+     * ```
      */
-    get_log_by_id(id: string): any;
+    getLogById(id: string): any;
     /**
-     * Returns a list of all log ids.
-     * Returns `Array` of `String`
+     * Returns identifiers for all retained memory logs.
+     *
+     * # Arguments
+     *
+     * None.
+     *
+     * # Example
+     *
+     * ```javascript
+     * const ids = cedarling.getLogIds();
+     * ```
      */
-    get_log_ids(): Array<any>;
+    getLogIds(): Array<any>;
     /**
-     * Get logs by request_id.
-     * Return log entries that match the given request_id.
+     * Returns retained memory logs matching one request ID and indexed value.
+     *
+     * # Arguments
+     *
+     * * `requestId` - The request identifier to match.
+     * * `tag` - A log kind (`"System"`, `"Decision"`, or `"Metric"`) or a
+     *   system-log level such as `"DEBUG"`.
+     *
+     * # Example
+     *
+     * ```javascript
+     * const logs = cedarling.getLogsByRequestIdAndTag("request-id", "System");
+     * ```
      */
-    get_logs_by_request_id(request_id: string): any[];
+    getLogsByRequestIdAndTag(request_id: string, tag: string): any[];
     /**
-     * Get log by request_id and tag, like composite key `request_id` + `log_kind`.
-     * Tag can be `log_kind`, `log_level`.
-     * Return log entries that match the given request_id and tag.
+     * Returns retained memory logs for one request ID.
+     *
+     * # Arguments
+     *
+     * * `requestId` - The request identifier to match.
+     *
+     * # Example
+     *
+     * ```javascript
+     * const logs = cedarling.getLogsByRequestId("request-id");
+     * ```
      */
-    get_logs_by_request_id_and_tag(request_id: string, tag: string): any[];
+    getLogsByRequestId(request_id: string): any[];
     /**
-     * Get logs by tag, like `log_kind` or `log level`.
-     * Tag can be `log_kind`, `log_level`.
+     * Returns retained memory logs matching an indexed value.
+     *
+     * # Arguments
+     *
+     * * `tag` - A log kind (`"System"`, `"Decision"`, or `"Metric"`) or a
+     *   system-log level such as `"DEBUG"`.
+     *
+     * # Example
+     *
+     * ```javascript
+     * const logs = cedarling.getLogsByTag("System");
+     * ```
      */
-    get_logs_by_tag(tag: string): any[];
+    getLogsByTag(tag: string): any[];
     /**
      * Get statistics about the data store.
      *
+     * # Arguments
+     *
+     * None.
+     *
      * # Example
      *
      * ```javascript
-     * const stats = cedarling.get_stats_ctx();
+     * const stats = cedarling.getStatsCtx();
      * console.log(`Entries: ${stats.entry_count}/${stats.max_entries || 'unlimited'}`);
      * console.log(`Capacity: ${stats.capacity_usage_percent.toFixed(2)}%`);
      * console.log(`Total size: ${stats.total_size_bytes} bytes`);
      * ```
      */
-    get_stats_ctx(): DataStoreStats;
+    getStatsCtx(): DataStoreStats;
     /**
      * Check whether a trusted issuer was loaded by `iss` claim.
      *
@@ -421,10 +501,10 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * const ok = cedarling.is_trusted_issuer_loaded_by_iss("https://issuer.example.org");
+     * const ok = cedarling.isTrustedIssuerLoadedByIss("https://issuer.example.org");
      * ```
      */
-    is_trusted_issuer_loaded_by_iss(iss_claim: string): boolean;
+    isTrustedIssuerLoadedByIss(iss_claim: string): boolean;
     /**
      * Check whether a trusted issuer was loaded by issuer identifier.
      *
@@ -435,59 +515,128 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * const ok = cedarling.is_trusted_issuer_loaded_by_name("issuer_id");
+     * const ok = cedarling.isTrustedIssuerLoadedByName("issuer_id");
      * ```
      */
-    is_trusted_issuer_loaded_by_name(issuer_id: string): boolean;
+    isTrustedIssuerLoadedByName(issuer_id: string): boolean;
     /**
      * List all entries with their metadata.
      * Returns an array of DataEntry objects.
      *
+     * # Arguments
+     *
+     * None.
+     *
      * # Example
      *
      * ```javascript
-     * const entries = cedarling.list_data_ctx();
+     * const entries = cedarling.listDataCtx();
      * entries.forEach(entry => {
      *     console.log(`${entry.key}: ${entry.data_type} (accessed ${entry.access_count} times)`);
      * });
      * ```
      */
-    list_data_ctx(): Array<any>;
+    listDataCtx(): Array<any>;
     /**
      * Get trusted issuer identifiers loaded successfully.
      *
+     * # Arguments
+     *
+     * None.
+     *
      * # Example
      *
      * ```javascript
-     * const ids = cedarling.loaded_trusted_issuer_ids();
+     * const ids = cedarling.loadedTrustedIssuerIds();
      * ```
      */
-    loaded_trusted_issuer_ids(): Array<any>;
+    loadedTrustedIssuerIds(): Array<any>;
     /**
      * Get the number of trusted issuers loaded successfully.
      *
+     * # Arguments
+     *
+     * None.
+     *
+     * # Example
+     *
+     * ```javascript
+     * const loadedCount = cedarling.loadedTrustedIssuersCount();
+     * ```
+     */
+    loadedTrustedIssuersCount(): number;
+    /**
+     * Creates a new Cedarling application from a JavaScript `Map`.
+     *
+     * # Arguments
+     *
+     * * `config` - A `Map` of Cedarling bootstrap-property names and values.
+     *
      * # Example
      *
      * ```javascript
-     * const loadedCount = cedarling.loaded_trusted_issuers_count();
+     * await initWasm();
+     * const cedarling = await Cedarling.newFromMap(new Map([
+     *   ["CEDARLING_APPLICATION_NAME", "task-api"],
+     *   ["CEDARLING_POLICY_STORE_URI", "https://example.com/policy-store.cjar"],
+     *   ["CEDARLING_LOG_TYPE", "memory"],
+     *   ["CEDARLING_LOG_TTL", 120],
+     * ]));
      * ```
      */
-    loaded_trusted_issuers_count(): number;
+    static newFromMap(config: Map<any, any>): Promise<Cedarling>;
     /**
-     * Create a new instance of the Cedarling application.
-     * Assume that config is `Object`
+     * Creates a Cedarling application from bootstrap properties.
+     *
+     * # Arguments
+     *
+     * * `config` - A plain object of Cedarling bootstrap-property names and values.
+     *
+     * # Example
+     *
+     * ```javascript
+     * await initWasm();
+     * const cedarling = await Cedarling.new({
+     *   CEDARLING_APPLICATION_NAME: "task-api",
+     *   CEDARLING_POLICY_STORE_URI: "https://example.com/policy-store.cjar",
+     *   CEDARLING_LOG_TYPE: "memory",
+     *   CEDARLING_LOG_TTL: 120,
+     * });
+     * ```
      */
     static new(config: object): Promise<Cedarling>;
     /**
-     * Create a new instance of the Cedarling application.
-     * Assume that config is `Map`
+     * Get the ID of the currently published policy store, if it carries one.
+     *
+     * `undefined` means the store carries no ID. The value is an opaque,
+     * source-dependent string; it may change after a background refresh.
+     *
+     * # Arguments
+     *
+     * None.
+     *
+     * # Example
+     *
+     * ```javascript
+     * const id = cedarling.policyStoreId();
+     * ```
      */
-    static new_from_map(config: Map<any, any>): Promise<Cedarling>;
+    policyStoreId(): string | undefined;
     /**
-     * Get logs and remove them from the storage.
-     * Returns `Array` of `Map`
+     * Returns all retained memory logs and removes them from storage.
+     * Other log configurations return an empty array.
+     *
+     * # Arguments
+     *
+     * None.
+     *
+     * # Example
+     *
+     * ```javascript
+     * const logs = cedarling.popLogs();
+     * ```
      */
-    pop_logs(): Array<any>;
+    popLogs(): Array<any>;
     /**
      * Push a value into the data store with an optional TTL.
      * If the key already exists, the value will be replaced.
@@ -502,11 +651,11 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * cedarling.push_data_ctx("user:123", { name: "John", age: 30 }, 3600);
-     * cedarling.push_data_ctx("config", { setting: "value" }); // Uses default TTL
+     * cedarling.pushDataCtx("user:123", { name: "John", age: 30 }, 3600);
+     * cedarling.pushDataCtx("config", { setting: "value" }); // Uses default TTL
      * ```
      */
-    push_data_ctx(key: string, value: any, ttl_secs?: bigint | null): void;
+    pushDataCtx(key: string, value: any, ttl_secs?: bigint | null): void;
     /**
      * Remove a value from the data store by key.
      * Returns true if the key existed and was removed, false otherwise.
@@ -518,27 +667,41 @@ export class Cedarling {
      * # Example
      *
      * ```javascript
-     * const removed = cedarling.remove_data_ctx("user:123");
+     * const removed = cedarling.removeDataCtx("user:123");
      * if (removed) {
      *     console.log("Entry was successfully removed");
      * }
      * ```
      */
-    remove_data_ctx(key: string): boolean;
+    removeDataCtx(key: string): boolean;
     /**
-     * Closes the connections to the Lock Server and pushes all available logs.
+     * Closes Lock Server connections and pushes all available logs.
+     *
+     * # Arguments
+     *
+     * None.
+     *
+     * # Example
+     *
+     * ```javascript
+     * await cedarling.shutDown();
+     * ```
      */
-    shut_down(): Promise<void>;
+    shutDown(): Promise<void>;
     /**
      * Get the total number of trusted issuer entries discovered.
      *
+     * # Arguments
+     *
+     * None.
+     *
      * # Example
      *
      * ```javascript
-     * const total = cedarling.total_issuers();
+     * const total = cedarling.totalIssuers();
      * ```
      */
-    total_issuers(): number;
+    totalIssuers(): number;
 }
 
 /**
@@ -552,7 +715,7 @@ export class DataEntry {
     /**
      * Convert `DataEntry` to json string value
      */
-    json_string(): string;
+    jsonString(): string;
     /**
      * Get the value stored in this entry as a JavaScript object
      */
@@ -570,11 +733,11 @@ export class DataEntry {
      */
     data_type: string;
     /**
-     * Timestamp when this entry expires (RFC 3339 format), or null if no TTL
+     * Timestamp when this entry expires (RFC 3339 format). The getter returns undefined if no TTL.
      */
     get expires_at(): string | undefined;
     /**
-     * Timestamp when this entry expires (RFC 3339 format), or null if no TTL
+     * Timestamp when this entry expires (RFC 3339 format). The getter returns undefined if no TTL.
      */
     set expires_at(value: string | null | undefined);
     /**
@@ -594,7 +757,7 @@ export class DataStoreStats {
     /**
      * Convert `DataStoreStats` to json string value
      */
-    json_string(): string;
+    jsonString(): string;
     /**
      * Average size per entry in bytes (0 if no entries)
      */
@@ -657,7 +820,7 @@ export class Diagnostics {
     readonly reason: string[];
 }
 
-export class IntoUnderlyingByteSource {
+declare class IntoUnderlyingByteSource {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
@@ -667,8 +830,9 @@ export class IntoUnderlyingByteSource {
     readonly autoAllocateChunkSize: number;
     readonly type: ReadableStreamType;
 }
+export type { IntoUnderlyingByteSource };
 
-export class IntoUnderlyingSink {
+declare class IntoUnderlyingSink {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
@@ -676,14 +840,52 @@ export class IntoUnderlyingSink {
     close(): Promise<any>;
     write(chunk: any): Promise<any>;
 }
+export type { IntoUnderlyingSink };
 
-export class IntoUnderlyingSource {
+declare class IntoUnderlyingSource {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
     cancel(): void;
     pull(controller: ReadableStreamDefaultController): Promise<any>;
 }
+export type { IntoUnderlyingSource };
+
+/**
+ * A WASM wrapper for the Rust `cedarling::MetricsSnapshot` struct.
+ * Represents a snapshot of the collected telemetry metrics for the current
+ * interval. Destructive read: taking a snapshot resets the collected
+ * metrics, so use a single consumer.
+ */
+export class MetricsSnapshot {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Convert `MetricsSnapshot` to json string value.
+     *
+     * `policy_stats`, `error_counters` and `operational_stats` are converted
+     * from `Map` to plain objects so `JSON.stringify` emits their entries.
+     */
+    jsonString(): string;
+    /**
+     * Classified error counters keyed by error metric key.
+     */
+    error_counters: Map<any, any>;
+    /**
+     * Duration of the snapshot interval in fractional seconds.
+     * Exposed as `Number` (not `BigInt`) so plain JS arithmetic works.
+     */
+    interval_secs: number;
+    /**
+     * Operational counters and gauges (authorization, cache, JWT, data, lock).
+     */
+    operational_stats: Map<any, any>;
+    /**
+     * Per-policy evaluation counts (`policy_id`, `policy_id.allow`, `policy_id.deny`).
+     */
+    policy_stats: Map<any, any>;
+}
 
 /**
  * A WASM wrapper for the Rust `cedarling::MultiIssuerAuthorizeResult` struct.
@@ -696,7 +898,7 @@ export class MultiIssuerAuthorizeResult {
     /**
      * Convert `MultiIssuerAuthorizeResult` to json string value
      */
-    json_string(): string;
+    jsonString(): string;
     /**
      * Result of authorization
      * true means `ALLOW`
@@ -734,8 +936,24 @@ export class PolicyEvaluationError {
 }
 
 /**
- * Create a new instance of the Cedarling application.
- * This function can take as config parameter the eather `Map` other `Object`
+ * Creates a Cedarling application from bootstrap properties.
+ *
+ * # Arguments
+ *
+ * * `config` - A JavaScript `Map` or plain object of Cedarling
+ *   bootstrap-property names and values.
+ *
+ * # Example
+ *
+ * ```javascript
+ * await initWasm();
+ * const cedarling = await init({
+ *   CEDARLING_APPLICATION_NAME: "task-api",
+ *   CEDARLING_POLICY_STORE_URI: "https://example.com/policy-store.cjar",
+ *   CEDARLING_LOG_TYPE: "memory",
+ *   CEDARLING_LOG_TTL: 120,
+ * });
+ * ```
  */
 export function init(config: any): Promise<Cedarling>;
 
@@ -746,17 +964,27 @@ export function init(config: any): Promise<Cedarling>;
  * that was fetched with custom logic (e.g., with authentication headers).
  *
  * # Arguments
- * * `config` - Bootstrap configuration (Map or Object). Policy store config is ignored.
+ * * `config` - Bootstrap configuration (Map or Object) without a policy-store
+ *   source property. The archive bytes provide the policy store.
  * * `archive_bytes` - The .cjar archive bytes (Uint8Array)
  *
  * # Example
  * ```javascript
- * const response = await fetch(url, { headers: { Authorization: 'Bearer ...' } });
- * const bytes = new Uint8Array(await response.arrayBuffer());
- * const cedarling = await init_from_archive_bytes(config, bytes);
+ * await initWasm();
+ * const config = {
+ *   CEDARLING_APPLICATION_NAME: "task-api",
+ *   CEDARLING_LOG_TYPE: "memory",
+ *   CEDARLING_LOG_TTL: 120,
+ * };
+ * const response = await fetch("https://example.com/policy-store.cjar", {
+ *   headers: { Authorization: "Bearer <token>" },
+ * });
+ * if (!response.ok) throw new Error("Unable to fetch policy store");
+ * const archiveBytes = new Uint8Array(await response.arrayBuffer());
+ * const cedarling = await initFromArchiveBytes(config, archiveBytes);
  * ```
  */
-export function init_from_archive_bytes(config: any, archive_bytes: Uint8Array): Promise<Cedarling>;
+export function initFromArchiveBytes(config: any, archive_bytes: Uint8Array): Promise<Cedarling>;
 
 export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
 
@@ -765,8 +993,10 @@ export interface InitOutput {
     readonly __wbg_authorizeresult_free: (a: number, b: number) => void;
     readonly __wbg_authorizeresultresponse_free: (a: number, b: number) => void;
     readonly __wbg_batchauthorizemultiissuerresponse_free: (a: number, b: number) => void;
+    readonly __wbg_batchauthorizeunsignedresponse_free: (a: number, b: number) => void;
     readonly __wbg_batchitemerror_free: (a: number, b: number) => void;
     readonly __wbg_batchitemmultiissuerresult_free: (a: number, b: number) => void;
+    readonly __wbg_batchitemunsignedresult_free: (a: number, b: number) => void;
     readonly __wbg_cedarling_free: (a: number, b: number) => void;
     readonly __wbg_dataentry_free: (a: number, b: number) => void;
     readonly __wbg_datastorestats_free: (a: number, b: number) => void;
@@ -788,6 +1018,18 @@ export interface InitOutput {
     readonly __wbg_get_datastorestats_memory_alert_triggered: (a: number) => number;
     readonly __wbg_get_datastorestats_metrics_enabled: (a: number) => number;
     readonly __wbg_get_datastorestats_total_size_bytes: (a: number) => number;
+    readonly __wbg_get_metricssnapshot_error_counters: (a: number) => number;
+    readonly __wbg_get_metricssnapshot_interval_secs: (a: number) => number;
+    readonly __wbg_get_metricssnapshot_operational_stats: (a: number) => number;
+    readonly __wbg_get_metricssnapshot_policy_stats: (a: number) => number;
+    readonly __wbg_get_multiissuerauthorizeresult_decision: (a: number) => number;
+    readonly __wbg_get_multiissuerauthorizeresult_request_id: (a: number, b: number) => void;
+    readonly __wbg_get_multiissuerauthorizeresult_response: (a: number) => number;
+    readonly __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
+    readonly __wbg_intounderlyingsink_free: (a: number, b: number) => void;
+    readonly __wbg_intounderlyingsource_free: (a: number, b: number) => void;
+    readonly __wbg_metricssnapshot_free: (a: number, b: number) => void;
+    readonly __wbg_multiissuerauthorizeresult_free: (a: number, b: number) => void;
     readonly __wbg_policyevaluationerror_free: (a: number, b: number) => void;
     readonly __wbg_set_authorizeresult_decision: (a: number, b: number) => void;
     readonly __wbg_set_authorizeresult_request_id: (a: number, b: number, c: number) => void;
@@ -806,11 +1048,19 @@ export interface InitOutput {
     readonly __wbg_set_datastorestats_memory_alert_triggered: (a: number, b: number) => void;
     readonly __wbg_set_datastorestats_metrics_enabled: (a: number, b: number) => void;
     readonly __wbg_set_datastorestats_total_size_bytes: (a: number, b: number) => void;
-    readonly authorizeresult_json_string: (a: number, b: number) => void;
+    readonly __wbg_set_metricssnapshot_error_counters: (a: number, b: number) => void;
+    readonly __wbg_set_metricssnapshot_interval_secs: (a: number, b: number) => void;
+    readonly __wbg_set_metricssnapshot_operational_stats: (a: number, b: number) => void;
+    readonly __wbg_set_metricssnapshot_policy_stats: (a: number, b: number) => void;
+    readonly __wbg_set_multiissuerauthorizeresult_decision: (a: number, b: number) => void;
+    readonly __wbg_set_multiissuerauthorizeresult_request_id: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_multiissuerauthorizeresult_response: (a: number, b: number) => void;
+    readonly authorizeresult_jsonString: (a: number, b: number) => void;
     readonly authorizeresultresponse_decision: (a: number) => number;
     readonly authorizeresultresponse_diagnostics: (a: number) => number;
     readonly batchauthorizemultiissuerresponse_batch_id: (a: number, b: number) => void;
     readonly batchauthorizemultiissuerresponse_results: (a: number, b: number) => void;
+    readonly batchauthorizeunsignedresponse_batch_id: (a: number, b: number) => void;
     readonly batchauthorizeunsignedresponse_results: (a: number, b: number) => void;
     readonly batchitemerror_category: (a: number, b: number) => void;
     readonly batchitemerror_item_index: (a: number) => number;
@@ -818,48 +1068,55 @@ export interface InitOutput {
     readonly batchitemmultiissuerresult_error: (a: number) => number;
     readonly batchitemmultiissuerresult_is_ok: (a: number) => number;
     readonly batchitemmultiissuerresult_unwrap: (a: number, b: number) => void;
+    readonly batchitemunsignedresult_error: (a: number) => number;
+    readonly batchitemunsignedresult_is_ok: (a: number) => number;
     readonly batchitemunsignedresult_unwrap: (a: number, b: number) => void;
-    readonly cedarling_annotation_values: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-    readonly cedarling_annotations_by_policy: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_annotations_map: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_authorize_multi_issuer: (a: number, b: number, c: number) => number;
-    readonly cedarling_authorize_multi_issuer_batch: (a: number, b: number, c: number) => number;
-    readonly cedarling_authorize_unsigned: (a: number, b: number, c: number) => number;
-    readonly cedarling_authorize_unsigned_batch: (a: number, b: number, c: number) => number;
-    readonly cedarling_clear_data_ctx: (a: number, b: number) => void;
-    readonly cedarling_failed_trusted_issuer_ids: (a: number) => number;
-    readonly cedarling_get_data_ctx: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_get_data_entry_ctx: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_get_log_by_id: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_get_log_ids: (a: number) => number;
-    readonly cedarling_get_logs_by_request_id: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_get_logs_by_request_id_and_tag: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-    readonly cedarling_get_stats_ctx: (a: number, b: number) => void;
-    readonly cedarling_is_trusted_issuer_loaded_by_iss: (a: number, b: number, c: number) => number;
-    readonly cedarling_is_trusted_issuer_loaded_by_name: (a: number, b: number, c: number) => number;
-    readonly cedarling_list_data_ctx: (a: number, b: number) => void;
-    readonly cedarling_loaded_trusted_issuer_ids: (a: number) => number;
-    readonly cedarling_loaded_trusted_issuers_count: (a: number) => number;
+    readonly cedarling_annotationValues: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+    readonly cedarling_annotationsByPolicy: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_annotationsMap: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_authorizeMultiIssuer: (a: number, b: number, c: number) => number;
+    readonly cedarling_authorizeMultiIssuerBatch: (a: number, b: number, c: number) => number;
+    readonly cedarling_authorizeUnsigned: (a: number, b: number, c: number) => number;
+    readonly cedarling_authorizeUnsignedBatch: (a: number, b: number, c: number) => number;
+    readonly cedarling_clearDataCtx: (a: number, b: number) => void;
+    readonly cedarling_drainMetrics: (a: number, b: number) => void;
+    readonly cedarling_failedTrustedIssuerIds: (a: number) => number;
+    readonly cedarling_getDataCtx: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_getDataEntryCtx: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_getLogById: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_getLogIds: (a: number) => number;
+    readonly cedarling_getLogsByRequestId: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_getLogsByRequestIdAndTag: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+    readonly cedarling_getLogsByTag: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_getStatsCtx: (a: number, b: number) => void;
+    readonly cedarling_isTrustedIssuerLoadedByIss: (a: number, b: number, c: number) => number;
+    readonly cedarling_isTrustedIssuerLoadedByName: (a: number, b: number, c: number) => number;
+    readonly cedarling_listDataCtx: (a: number, b: number) => void;
+    readonly cedarling_loadedTrustedIssuerIds: (a: number) => number;
+    readonly cedarling_loadedTrustedIssuersCount: (a: number) => number;
     readonly cedarling_new: (a: number) => number;
-    readonly cedarling_new_from_map: (a: number) => number;
-    readonly cedarling_pop_logs: (a: number, b: number) => void;
-    readonly cedarling_push_data_ctx: (a: number, b: number, c: number, d: number, e: number, f: number, g: bigint) => void;
-    readonly cedarling_remove_data_ctx: (a: number, b: number, c: number, d: number) => void;
-    readonly cedarling_shut_down: (a: number) => number;
-    readonly cedarling_total_issuers: (a: number) => number;
-    readonly dataentry_json_string: (a: number, b: number) => void;
+    readonly cedarling_newFromMap: (a: number) => number;
+    readonly cedarling_policyStoreId: (a: number, b: number) => void;
+    readonly cedarling_popLogs: (a: number, b: number) => void;
+    readonly cedarling_pushDataCtx: (a: number, b: number, c: number, d: number, e: number, f: number, g: bigint) => void;
+    readonly cedarling_removeDataCtx: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_shutDown: (a: number) => number;
+    readonly cedarling_totalIssuers: (a: number) => number;
+    readonly dataentry_jsonString: (a: number, b: number) => void;
     readonly dataentry_value: (a: number, b: number) => void;
-    readonly datastorestats_json_string: (a: number, b: number) => void;
+    readonly datastorestats_jsonString: (a: number, b: number) => void;
     readonly diagnostics_errors: (a: number, b: number) => void;
     readonly diagnostics_reason: (a: number, b: number) => void;
     readonly init: (a: number) => number;
-    readonly init_from_archive_bytes: (a: number, b: number) => number;
-    readonly multiissuerauthorizeresult_json_string: (a: number, b: number) => void;
-    readonly policyevaluationerror_error: (a: number, b: number) => void;
-    readonly policyevaluationerror_id: (a: number, b: number) => void;
-    readonly __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
-    readonly __wbg_intounderlyingsink_free: (a: number, b: number) => void;
-    readonly __wbg_intounderlyingsource_free: (a: number, b: number) => void;
+    readonly rust_zstd_wasm_shim_calloc: (a: number, b: number) => number;
+    readonly rust_zstd_wasm_shim_free: (a: number) => void;
+    readonly rust_zstd_wasm_shim_malloc: (a: number) => number;
+    readonly rust_zstd_wasm_shim_memcmp: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_memcpy: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_memmove: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_memset: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_qsort: (a: number, b: number, c: number, d: number) => void;
+    readonly initFromArchiveBytes: (a: number, b: number) => number;
     readonly intounderlyingbytesource_autoAllocateChunkSize: (a: number) => number;
     readonly intounderlyingbytesource_cancel: (a: number) => void;
     readonly intounderlyingbytesource_pull: (a: number, b: number) => number;
@@ -870,31 +1127,14 @@ export interface InitOutput {
     readonly intounderlyingsink_write: (a: number, b: number) => number;
     readonly intounderlyingsource_cancel: (a: number) => void;
     readonly intounderlyingsource_pull: (a: number, b: number) => number;
-    readonly rust_zstd_wasm_shim_calloc: (a: number, b: number) => number;
-    readonly rust_zstd_wasm_shim_free: (a: number) => void;
-    readonly rust_zstd_wasm_shim_malloc: (a: number) => number;
-    readonly rust_zstd_wasm_shim_memcmp: (a: number, b: number, c: number) => number;
-    readonly rust_zstd_wasm_shim_memcpy: (a: number, b: number, c: number) => number;
-    readonly rust_zstd_wasm_shim_memmove: (a: number, b: number, c: number) => number;
-    readonly rust_zstd_wasm_shim_memset: (a: number, b: number, c: number) => number;
-    readonly rust_zstd_wasm_shim_qsort: (a: number, b: number, c: number, d: number) => void;
-    readonly __wbg_get_multiissuerauthorizeresult_decision: (a: number) => number;
-    readonly __wbg_set_multiissuerauthorizeresult_response: (a: number, b: number) => void;
-    readonly __wbg_set_multiissuerauthorizeresult_request_id: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_multiissuerauthorizeresult_decision: (a: number, b: number) => void;
-    readonly __wbg_get_multiissuerauthorizeresult_response: (a: number) => number;
-    readonly __wbg_get_multiissuerauthorizeresult_request_id: (a: number, b: number) => void;
-    readonly __wbg_multiissuerauthorizeresult_free: (a: number, b: number) => void;
-    readonly __wbg_batchitemunsignedresult_free: (a: number, b: number) => void;
-    readonly __wbg_batchauthorizeunsignedresponse_free: (a: number, b: number) => void;
-    readonly batchitemunsignedresult_is_ok: (a: number) => number;
-    readonly batchitemunsignedresult_error: (a: number) => number;
-    readonly batchauthorizeunsignedresponse_batch_id: (a: number, b: number) => void;
-    readonly cedarling_get_logs_by_tag: (a: number, b: number, c: number, d: number) => void;
-    readonly __wasm_bindgen_func_elem_8906: (a: number, b: number, c: number, d: number) => void;
-    readonly __wasm_bindgen_func_elem_8972: (a: number, b: number, c: number, d: number) => void;
-    readonly __wasm_bindgen_func_elem_12458: (a: number, b: number, c: number) => void;
-    readonly __wasm_bindgen_func_elem_8741: (a: number, b: number) => void;
+    readonly metricssnapshot_jsonString: (a: number, b: number) => void;
+    readonly multiissuerauthorizeresult_jsonString: (a: number, b: number) => void;
+    readonly policyevaluationerror_error: (a: number, b: number) => void;
+    readonly policyevaluationerror_id: (a: number, b: number) => void;
+    readonly __wasm_bindgen_func_elem_8937: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_8992: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_12497: (a: number, b: number, c: number) => void;
+    readonly __wasm_bindgen_func_elem_8771: (a: number, b: number) => void;
     readonly __wbindgen_export: (a: number, b: number) => number;
     readonly __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_export3: (a: number) => void;