@worldcoin/idkit-core 4.0.1-dev.eebacb1 → 4.0.1

package/dist/index.cjs

@@ -7,54 +7,43 @@ var __export = (target, all2) => {
     __defProp(target, name, { get: all2[name], enumerable: true });
 };
 
-// src/types/bridge.ts
-var AppErrorCodes = /* @__PURE__ */ ((AppErrorCodes2) => {
-  AppErrorCodes2["ConnectionFailed"] = "connection_failed";
-  AppErrorCodes2["VerificationRejected"] = "verification_rejected";
-  AppErrorCodes2["MaxVerificationsReached"] = "max_verifications_reached";
-  AppErrorCodes2["CredentialUnavailable"] = "credential_unavailable";
-  AppErrorCodes2["MalformedRequest"] = "malformed_request";
-  AppErrorCodes2["InvalidNetwork"] = "invalid_network";
-  AppErrorCodes2["InclusionProofFailed"] = "inclusion_proof_failed";
-  AppErrorCodes2["InclusionProofPending"] = "inclusion_proof_pending";
-  AppErrorCodes2["UnexpectedResponse"] = "unexpected_response";
-  AppErrorCodes2["FailedByHostApp"] = "failed_by_host_app";
-  AppErrorCodes2["GenericError"] = "generic_error";
-  return AppErrorCodes2;
-})(AppErrorCodes || {});
-var VerificationState = /* @__PURE__ */ ((VerificationState2) => {
-  VerificationState2["PreparingClient"] = "loading_widget";
-  VerificationState2["WaitingForConnection"] = "awaiting_connection";
-  VerificationState2["WaitingForApp"] = "awaiting_app";
-  VerificationState2["Confirmed"] = "confirmed";
-  VerificationState2["Failed"] = "failed";
-  return VerificationState2;
-})(VerificationState || {});
-var ResponseStatus = /* @__PURE__ */ ((ResponseStatus2) => {
-  ResponseStatus2["Retrieved"] = "retrieved";
-  ResponseStatus2["Completed"] = "completed";
-  ResponseStatus2["Initialized"] = "initialized";
-  return ResponseStatus2;
-})(ResponseStatus || {});
+// src/types/result.ts
+var IDKitErrorCodes = /* @__PURE__ */ ((IDKitErrorCodes2) => {
+  IDKitErrorCodes2["UserRejected"] = "user_rejected";
+  IDKitErrorCodes2["VerificationRejected"] = "verification_rejected";
+  IDKitErrorCodes2["CredentialUnavailable"] = "credential_unavailable";
+  IDKitErrorCodes2["MalformedRequest"] = "malformed_request";
+  IDKitErrorCodes2["InvalidNetwork"] = "invalid_network";
+  IDKitErrorCodes2["InclusionProofPending"] = "inclusion_proof_pending";
+  IDKitErrorCodes2["InclusionProofFailed"] = "inclusion_proof_failed";
+  IDKitErrorCodes2["UnexpectedResponse"] = "unexpected_response";
+  IDKitErrorCodes2["ConnectionFailed"] = "connection_failed";
+  IDKitErrorCodes2["MaxVerificationsReached"] = "max_verifications_reached";
+  IDKitErrorCodes2["FailedByHostApp"] = "failed_by_host_app";
+  IDKitErrorCodes2["GenericError"] = "generic_error";
+  IDKitErrorCodes2["Timeout"] = "timeout";
+  IDKitErrorCodes2["Cancelled"] = "cancelled";
+  return IDKitErrorCodes2;
+})(IDKitErrorCodes || {});
 
 // wasm/idkit_wasm.js
 var idkit_wasm_exports = {};
 __export(idkit_wasm_exports, {
   BridgeEncryption: () => BridgeEncryption,
   CredentialRequestWasm: () => CredentialRequestWasm,
+  IDKitBuilder: () => IDKitBuilder,
   IDKitProof: () => IDKitProof,
   IDKitRequest: () => IDKitRequest,
-  IDKitRequestBuilderWasm: () => IDKitRequestBuilderWasm,
   RpContextWasm: () => RpContextWasm,
   RpSignature: () => RpSignature,
   base64Decode: () => base64Decode,
   base64Encode: () => base64Encode,
+  createSession: () => createSession,
   default: () => idkit_wasm_default,
   hashSignal: () => hashSignal,
-  hashSignalBytes: () => hashSignalBytes,
   initSync: () => initSync,
   init_wasm: () => init_wasm,
-  orbLegacy: () => orbLegacy,
+  proveSession: () => proveSession,
   request: () => request,
   signRequest: () => signRequest
 });
@@ -251,54 +240,12 @@ function makeMutClosure(arg0, arg1, dtor, f) {
   CLOSURE_DTORS.register(real, state, state);
   return real;
 }
-function hashSignal(signal) {
-  let deferred2_0;
-  let deferred2_1;
-  try {
-    const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-    const ptr0 = passStringToWasm0(signal, wasm.__wbindgen_export, wasm.__wbindgen_export2);
-    const len0 = WASM_VECTOR_LEN;
-    wasm.hashSignal(retptr, ptr0, len0);
-    var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
-    var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
-    deferred2_0 = r0;
-    deferred2_1 = r1;
-    return getStringFromWasm0(r0, r1);
-  } finally {
-    wasm.__wbindgen_add_to_stack_pointer(16);
-    wasm.__wbindgen_export4(deferred2_0, deferred2_1, 1);
-  }
-}
-function passArray8ToWasm0(arg, malloc) {
-  const ptr = malloc(arg.length * 1, 1) >>> 0;
-  getUint8ArrayMemory0().set(arg, ptr / 1);
-  WASM_VECTOR_LEN = arg.length;
-  return ptr;
-}
-function hashSignalBytes(bytes) {
-  let deferred2_0;
-  let deferred2_1;
-  try {
-    const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-    const ptr0 = passArray8ToWasm0(bytes, wasm.__wbindgen_export);
-    const len0 = WASM_VECTOR_LEN;
-    wasm.hashSignal(retptr, ptr0, len0);
-    var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
-    var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
-    deferred2_0 = r0;
-    deferred2_1 = r1;
-    return getStringFromWasm0(r0, r1);
-  } finally {
-    wasm.__wbindgen_add_to_stack_pointer(16);
-    wasm.__wbindgen_export4(deferred2_0, deferred2_1, 1);
-  }
-}
 function _assertClass(instance, klass) {
   if (!(instance instanceof klass)) {
     throw new Error(`expected instance of ${klass.name}`);
   }
 }
-function request(app_id, action, rp_context, action_description, bridge_url) {
+function request(app_id, action, rp_context, action_description, bridge_url, allow_legacy_proofs, override_connect_base_url, environment) {
   const ptr0 = passStringToWasm0(app_id, wasm.__wbindgen_export, wasm.__wbindgen_export2);
   const len0 = WASM_VECTOR_LEN;
   const ptr1 = passStringToWasm0(action, wasm.__wbindgen_export, wasm.__wbindgen_export2);
@@ -309,28 +256,75 @@ function request(app_id, action, rp_context, action_description, bridge_url) {
   var len3 = WASM_VECTOR_LEN;
   var ptr4 = isLikeNone(bridge_url) ? 0 : passStringToWasm0(bridge_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
   var len4 = WASM_VECTOR_LEN;
-  const ret = wasm.idkitrequestbuilderwasm_new(ptr0, len0, ptr1, len1, ptr2, ptr3, len3, ptr4, len4);
-  return IDKitRequestBuilderWasm.__wrap(ret);
+  var ptr5 = isLikeNone(override_connect_base_url) ? 0 : passStringToWasm0(override_connect_base_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  var len5 = WASM_VECTOR_LEN;
+  var ptr6 = isLikeNone(environment) ? 0 : passStringToWasm0(environment, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  var len6 = WASM_VECTOR_LEN;
+  const ret = wasm.idkitbuilder_new(ptr0, len0, ptr1, len1, ptr2, ptr3, len3, ptr4, len4, allow_legacy_proofs, ptr5, len5, ptr6, len6);
+  return IDKitBuilder.__wrap(ret);
 }
-function orbLegacy(signal) {
+function init_wasm() {
+  wasm.init_wasm();
+}
+function base64Decode(data) {
   try {
     const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-    var ptr0 = isLikeNone(signal) ? 0 : passStringToWasm0(signal, wasm.__wbindgen_export, wasm.__wbindgen_export2);
-    var len0 = WASM_VECTOR_LEN;
-    wasm.orbLegacy(retptr, ptr0, len0);
+    const ptr0 = passStringToWasm0(data, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    const len0 = WASM_VECTOR_LEN;
+    wasm.base64Decode(retptr, ptr0, len0);
     var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
     var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
     var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
-    if (r2) {
-      throw takeObject(r1);
+    var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+    if (r3) {
+      throw takeObject(r2);
     }
-    return takeObject(r0);
+    var v2 = getArrayU8FromWasm0(r0, r1).slice();
+    wasm.__wbindgen_export4(r0, r1 * 1, 1);
+    return v2;
   } finally {
     wasm.__wbindgen_add_to_stack_pointer(16);
   }
 }
-function init_wasm() {
-  wasm.init_wasm();
+function proveSession(session_id, app_id, rp_context, action_description, bridge_url, override_connect_base_url, environment) {
+  const ptr0 = passStringToWasm0(session_id, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  const len0 = WASM_VECTOR_LEN;
+  const ptr1 = passStringToWasm0(app_id, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  const len1 = WASM_VECTOR_LEN;
+  _assertClass(rp_context, RpContextWasm);
+  var ptr2 = rp_context.__destroy_into_raw();
+  var ptr3 = isLikeNone(action_description) ? 0 : passStringToWasm0(action_description, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  var len3 = WASM_VECTOR_LEN;
+  var ptr4 = isLikeNone(bridge_url) ? 0 : passStringToWasm0(bridge_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  var len4 = WASM_VECTOR_LEN;
+  var ptr5 = isLikeNone(override_connect_base_url) ? 0 : passStringToWasm0(override_connect_base_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  var len5 = WASM_VECTOR_LEN;
+  var ptr6 = isLikeNone(environment) ? 0 : passStringToWasm0(environment, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  var len6 = WASM_VECTOR_LEN;
+  const ret = wasm.idkitbuilder_forProveSession(ptr0, len0, ptr1, len1, ptr2, ptr3, len3, ptr4, len4, ptr5, len5, ptr6, len6);
+  return IDKitBuilder.__wrap(ret);
+}
+function createSession(app_id, rp_context, action_description, bridge_url, override_connect_base_url, environment) {
+  const ptr0 = passStringToWasm0(app_id, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  const len0 = WASM_VECTOR_LEN;
+  _assertClass(rp_context, RpContextWasm);
+  var ptr1 = rp_context.__destroy_into_raw();
+  var ptr2 = isLikeNone(action_description) ? 0 : passStringToWasm0(action_description, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  var len2 = WASM_VECTOR_LEN;
+  var ptr3 = isLikeNone(bridge_url) ? 0 : passStringToWasm0(bridge_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  var len3 = WASM_VECTOR_LEN;
+  var ptr4 = isLikeNone(override_connect_base_url) ? 0 : passStringToWasm0(override_connect_base_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  var len4 = WASM_VECTOR_LEN;
+  var ptr5 = isLikeNone(environment) ? 0 : passStringToWasm0(environment, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+  var len5 = WASM_VECTOR_LEN;
+  const ret = wasm.createSession(ptr0, len0, ptr1, ptr2, len2, ptr3, len3, ptr4, len4, ptr5, len5);
+  return IDKitBuilder.__wrap(ret);
+}
+function passArray8ToWasm0(arg, malloc) {
+  const ptr = malloc(arg.length * 1, 1) >>> 0;
+  getUint8ArrayMemory0().set(arg, ptr / 1);
+  WASM_VECTOR_LEN = arg.length;
+  return ptr;
 }
 function base64Encode(data) {
   let deferred2_0;
@@ -350,24 +344,29 @@ function base64Encode(data) {
     wasm.__wbindgen_export4(deferred2_0, deferred2_1, 1);
   }
 }
-function base64Decode(data) {
+function hashSignal(signal) {
+  let deferred2_0;
+  let deferred2_1;
   try {
     const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-    const ptr0 = passStringToWasm0(data, wasm.__wbindgen_export, wasm.__wbindgen_export2);
-    const len0 = WASM_VECTOR_LEN;
-    wasm.base64Decode(retptr, ptr0, len0);
+    wasm.hashSignal(retptr, addHeapObject(signal));
     var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
     var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
     var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
     var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+    var ptr1 = r0;
+    var len1 = r1;
     if (r3) {
+      ptr1 = 0;
+      len1 = 0;
       throw takeObject(r2);
     }
-    var v2 = getArrayU8FromWasm0(r0, r1).slice();
-    wasm.__wbindgen_export4(r0, r1 * 1, 1);
-    return v2;
+    deferred2_0 = ptr1;
+    deferred2_1 = len1;
+    return getStringFromWasm0(ptr1, len1);
   } finally {
     wasm.__wbindgen_add_to_stack_pointer(16);
+    wasm.__wbindgen_export4(deferred2_0, deferred2_1, 1);
   }
 }
 function signRequest(action, signing_key_hex, ttl_seconds) {
@@ -389,14 +388,14 @@ function signRequest(action, signing_key_hex, ttl_seconds) {
     wasm.__wbindgen_add_to_stack_pointer(16);
   }
 }
-function __wasm_bindgen_func_elem_510(arg0, arg1) {
-  wasm.__wasm_bindgen_func_elem_510(arg0, arg1);
+function __wasm_bindgen_func_elem_960(arg0, arg1, arg2) {
+  wasm.__wasm_bindgen_func_elem_960(arg0, arg1, addHeapObject(arg2));
 }
-function __wasm_bindgen_func_elem_873(arg0, arg1, arg2) {
-  wasm.__wasm_bindgen_func_elem_873(arg0, arg1, addHeapObject(arg2));
+function __wasm_bindgen_func_elem_597(arg0, arg1) {
+  wasm.__wasm_bindgen_func_elem_597(arg0, arg1);
 }
-function __wasm_bindgen_func_elem_1238(arg0, arg1, arg2, arg3) {
-  wasm.__wasm_bindgen_func_elem_1238(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
+function __wasm_bindgen_func_elem_1343(arg0, arg1, arg2, arg3) {
+  wasm.__wasm_bindgen_func_elem_1343(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
 }
 var __wbindgen_enum_RequestCache = ["default", "no-store", "reload", "no-cache", "force-cache", "only-if-cached"];
 var __wbindgen_enum_RequestCredentials = ["omit", "same-origin", "include"];
@@ -575,7 +574,7 @@ var CredentialRequestWasm = class _CredentialRequestWasm {
     wasm.__wbg_credentialrequestwasm_free(ptr, 0);
   }
   /**
-   * Creates a new request item with ABI-encoded bytes for the signal
+   * Creates a new request item with raw bytes for the signal
    *
    * # Errors
    *
@@ -657,6 +656,34 @@ var CredentialRequestWasm = class _CredentialRequestWasm {
       wasm.__wbindgen_add_to_stack_pointer(16);
     }
   }
+  /**
+   * Creates a new request item with expiration minimum timestamp
+   *
+   * # Errors
+   *
+   * Returns an error if the credential type is invalid
+   * @param {any} credential_type
+   * @param {string | null | undefined} signal
+   * @param {bigint} expires_at_min
+   * @returns {CredentialRequestWasm}
+   */
+  static withExpiresAtMin(credential_type, signal, expires_at_min) {
+    try {
+      const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+      var ptr0 = isLikeNone(signal) ? 0 : passStringToWasm0(signal, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+      var len0 = WASM_VECTOR_LEN;
+      wasm.credentialrequestwasm_withExpiresAtMin(retptr, addHeapObject(credential_type), ptr0, len0, expires_at_min);
+      var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+      var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+      var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+      if (r2) {
+        throw takeObject(r1);
+      }
+      return _CredentialRequestWasm.__wrap(r0);
+    } finally {
+      wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+  }
   /**
    * Creates a new request item
    *
@@ -714,6 +741,135 @@ var CredentialRequestWasm = class _CredentialRequestWasm {
   }
 };
 if (Symbol.dispose) CredentialRequestWasm.prototype[Symbol.dispose] = CredentialRequestWasm.prototype.free;
+var IDKitBuilderFinalization = typeof FinalizationRegistry === "undefined" ? { register: () => {
+}, unregister: () => {
+} } : new FinalizationRegistry((ptr) => wasm.__wbg_idkitbuilder_free(ptr >>> 0, 1));
+var IDKitBuilder = class _IDKitBuilder {
+  static __wrap(ptr) {
+    ptr = ptr >>> 0;
+    const obj = Object.create(_IDKitBuilder.prototype);
+    obj.__wbg_ptr = ptr;
+    IDKitBuilderFinalization.register(obj, obj.__wbg_ptr, obj);
+    return obj;
+  }
+  __destroy_into_raw() {
+    const ptr = this.__wbg_ptr;
+    this.__wbg_ptr = 0;
+    IDKitBuilderFinalization.unregister(this);
+    return ptr;
+  }
+  free() {
+    const ptr = this.__destroy_into_raw();
+    wasm.__wbg_idkitbuilder_free(ptr, 0);
+  }
+  /**
+   * Creates a `BridgeConnection` with the given constraints
+   * @param {any} constraints_json
+   * @returns {Promise<any>}
+   */
+  constraints(constraints_json) {
+    const ptr = this.__destroy_into_raw();
+    const ret = wasm.idkitbuilder_constraints(ptr, addHeapObject(constraints_json));
+    return takeObject(ret);
+  }
+  /**
+   * Creates a new builder for proving an existing session
+   * @param {string} session_id
+   * @param {string} app_id
+   * @param {RpContextWasm} rp_context
+   * @param {string | null} [action_description]
+   * @param {string | null} [bridge_url]
+   * @param {string | null} [override_connect_base_url]
+   * @param {string | null} [environment]
+   * @returns {IDKitBuilder}
+   */
+  static forProveSession(session_id, app_id, rp_context, action_description, bridge_url, override_connect_base_url, environment) {
+    const ptr0 = passStringToWasm0(session_id, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(app_id, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    const len1 = WASM_VECTOR_LEN;
+    _assertClass(rp_context, RpContextWasm);
+    var ptr2 = rp_context.__destroy_into_raw();
+    var ptr3 = isLikeNone(action_description) ? 0 : passStringToWasm0(action_description, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len3 = WASM_VECTOR_LEN;
+    var ptr4 = isLikeNone(bridge_url) ? 0 : passStringToWasm0(bridge_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len4 = WASM_VECTOR_LEN;
+    var ptr5 = isLikeNone(override_connect_base_url) ? 0 : passStringToWasm0(override_connect_base_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len5 = WASM_VECTOR_LEN;
+    var ptr6 = isLikeNone(environment) ? 0 : passStringToWasm0(environment, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len6 = WASM_VECTOR_LEN;
+    const ret = wasm.idkitbuilder_forProveSession(ptr0, len0, ptr1, len1, ptr2, ptr3, len3, ptr4, len4, ptr5, len5, ptr6, len6);
+    return _IDKitBuilder.__wrap(ret);
+  }
+  /**
+   * Creates a new builder for creating a new session
+   * @param {string} app_id
+   * @param {RpContextWasm} rp_context
+   * @param {string | null} [action_description]
+   * @param {string | null} [bridge_url]
+   * @param {string | null} [override_connect_base_url]
+   * @param {string | null} [environment]
+   * @returns {IDKitBuilder}
+   */
+  static forCreateSession(app_id, rp_context, action_description, bridge_url, override_connect_base_url, environment) {
+    const ptr0 = passStringToWasm0(app_id, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    const len0 = WASM_VECTOR_LEN;
+    _assertClass(rp_context, RpContextWasm);
+    var ptr1 = rp_context.__destroy_into_raw();
+    var ptr2 = isLikeNone(action_description) ? 0 : passStringToWasm0(action_description, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len2 = WASM_VECTOR_LEN;
+    var ptr3 = isLikeNone(bridge_url) ? 0 : passStringToWasm0(bridge_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len3 = WASM_VECTOR_LEN;
+    var ptr4 = isLikeNone(override_connect_base_url) ? 0 : passStringToWasm0(override_connect_base_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len4 = WASM_VECTOR_LEN;
+    var ptr5 = isLikeNone(environment) ? 0 : passStringToWasm0(environment, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len5 = WASM_VECTOR_LEN;
+    const ret = wasm.createSession(ptr0, len0, ptr1, ptr2, len2, ptr3, len3, ptr4, len4, ptr5, len5);
+    return _IDKitBuilder.__wrap(ret);
+  }
+  /**
+   * Creates a new builder for uniqueness requests
+   * @param {string} app_id
+   * @param {string} action
+   * @param {RpContextWasm} rp_context
+   * @param {string | null | undefined} action_description
+   * @param {string | null | undefined} bridge_url
+   * @param {boolean} allow_legacy_proofs
+   * @param {string | null} [override_connect_base_url]
+   * @param {string | null} [environment]
+   */
+  constructor(app_id, action, rp_context, action_description, bridge_url, allow_legacy_proofs, override_connect_base_url, environment) {
+    const ptr0 = passStringToWasm0(app_id, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(action, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    const len1 = WASM_VECTOR_LEN;
+    _assertClass(rp_context, RpContextWasm);
+    var ptr2 = rp_context.__destroy_into_raw();
+    var ptr3 = isLikeNone(action_description) ? 0 : passStringToWasm0(action_description, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len3 = WASM_VECTOR_LEN;
+    var ptr4 = isLikeNone(bridge_url) ? 0 : passStringToWasm0(bridge_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len4 = WASM_VECTOR_LEN;
+    var ptr5 = isLikeNone(override_connect_base_url) ? 0 : passStringToWasm0(override_connect_base_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len5 = WASM_VECTOR_LEN;
+    var ptr6 = isLikeNone(environment) ? 0 : passStringToWasm0(environment, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    var len6 = WASM_VECTOR_LEN;
+    const ret = wasm.idkitbuilder_new(ptr0, len0, ptr1, len1, ptr2, ptr3, len3, ptr4, len4, allow_legacy_proofs, ptr5, len5, ptr6, len6);
+    this.__wbg_ptr = ret >>> 0;
+    IDKitBuilderFinalization.register(this, this.__wbg_ptr, this);
+    return this;
+  }
+  /**
+   * Creates a `BridgeConnection` from a preset (works for all request types)
+   * @param {any} preset_json
+   * @returns {Promise<any>}
+   */
+  preset(preset_json) {
+    const ptr = this.__destroy_into_raw();
+    const ret = wasm.idkitbuilder_preset(ptr, addHeapObject(preset_json));
+    return takeObject(ret);
+  }
+};
+if (Symbol.dispose) IDKitBuilder.prototype[Symbol.dispose] = IDKitBuilder.prototype.free;
 var IDKitProofFinalization = typeof FinalizationRegistry === "undefined" ? { register: () => {
 }, unregister: () => {
 } } : new FinalizationRegistry((ptr) => wasm.__wbg_idkitproof_free(ptr >>> 0, 1));
@@ -729,7 +885,7 @@ var IDKitProof = class {
     wasm.__wbg_idkitproof_free(ptr, 0);
   }
   /**
-   * Creates a new proof
+   * Creates a new legacy proof (protocol v1 / World ID v3)
    *
    * # Errors
    *
@@ -896,98 +1052,6 @@ var IDKitRequest = class _IDKitRequest {
   }
 };
 if (Symbol.dispose) IDKitRequest.prototype[Symbol.dispose] = IDKitRequest.prototype.free;
-var IDKitRequestBuilderWasmFinalization = typeof FinalizationRegistry === "undefined" ? { register: () => {
-}, unregister: () => {
-} } : new FinalizationRegistry((ptr) => wasm.__wbg_idkitrequestbuilderwasm_free(ptr >>> 0, 1));
-var IDKitRequestBuilderWasm = class _IDKitRequestBuilderWasm {
-  static __wrap(ptr) {
-    ptr = ptr >>> 0;
-    const obj = Object.create(_IDKitRequestBuilderWasm.prototype);
-    obj.__wbg_ptr = ptr;
-    IDKitRequestBuilderWasmFinalization.register(obj, obj.__wbg_ptr, obj);
-    return obj;
-  }
-  __destroy_into_raw() {
-    const ptr = this.__wbg_ptr;
-    this.__wbg_ptr = 0;
-    IDKitRequestBuilderWasmFinalization.unregister(this);
-    return ptr;
-  }
-  free() {
-    const ptr = this.__destroy_into_raw();
-    wasm.__wbg_idkitrequestbuilderwasm_free(ptr, 0);
-  }
-  /**
-   * Creates an `IDKit` request with the given constraints
-   *
-   * # Arguments
-   * * `constraints_json` - Constraint tree as JSON (`CredentialRequest` or `{any: []}` or `{all: []}`)
-   *
-   * # Errors
-   *
-   * Returns an error if the request cannot be created
-   * @param {any} constraints_json
-   * @returns {Promise<any>}
-   */
-  constraints(constraints_json) {
-    const ptr = this.__destroy_into_raw();
-    const ret = wasm.idkitrequestbuilderwasm_constraints(ptr, addHeapObject(constraints_json));
-    return takeObject(ret);
-  }
-  /**
-   * Creates a new `IDKitRequestBuilder`
-   *
-   * # Arguments
-   * * `app_id` - Application ID from the Developer Portal
-   * * `action` - Action identifier
-   * * `rp_context` - RP context for building protocol-level `ProofRequest`
-   * * `action_description` - Optional action description shown to users
-   * * `bridge_url` - Optional bridge URL (defaults to production)
-   * @param {string} app_id
-   * @param {string} action
-   * @param {RpContextWasm} rp_context
-   * @param {string | null} [action_description]
-   * @param {string | null} [bridge_url]
-   */
-  constructor(app_id, action, rp_context, action_description, bridge_url) {
-    const ptr0 = passStringToWasm0(app_id, wasm.__wbindgen_export, wasm.__wbindgen_export2);
-    const len0 = WASM_VECTOR_LEN;
-    const ptr1 = passStringToWasm0(action, wasm.__wbindgen_export, wasm.__wbindgen_export2);
-    const len1 = WASM_VECTOR_LEN;
-    _assertClass(rp_context, RpContextWasm);
-    var ptr2 = rp_context.__destroy_into_raw();
-    var ptr3 = isLikeNone(action_description) ? 0 : passStringToWasm0(action_description, wasm.__wbindgen_export, wasm.__wbindgen_export2);
-    var len3 = WASM_VECTOR_LEN;
-    var ptr4 = isLikeNone(bridge_url) ? 0 : passStringToWasm0(bridge_url, wasm.__wbindgen_export, wasm.__wbindgen_export2);
-    var len4 = WASM_VECTOR_LEN;
-    const ret = wasm.idkitrequestbuilderwasm_new(ptr0, len0, ptr1, len1, ptr2, ptr3, len3, ptr4, len4);
-    this.__wbg_ptr = ret >>> 0;
-    IDKitRequestBuilderWasmFinalization.register(this, this.__wbg_ptr, this);
-    return this;
-  }
-  /**
-   * Creates an `IDKit` request from a preset
-   *
-   * Presets provide a simplified way to create requests with predefined
-   * credential configurations. The preset is converted to both World ID 4.0
-   * constraints and World ID 3.0 legacy fields for backward compatibility.
-   *
-   * # Arguments
-   * * `preset_json` - Preset object from `orbLegacy()`
-   *
-   * # Errors
-   *
-   * Returns an error if the request cannot be created
-   * @param {any} preset_json
-   * @returns {Promise<any>}
-   */
-  preset(preset_json) {
-    const ptr = this.__destroy_into_raw();
-    const ret = wasm.idkitrequestbuilderwasm_preset(ptr, addHeapObject(preset_json));
-    return takeObject(ret);
-  }
-};
-if (Symbol.dispose) IDKitRequestBuilderWasm.prototype[Symbol.dispose] = IDKitRequestBuilderWasm.prototype.free;
 var RpContextWasmFinalization = typeof FinalizationRegistry === "undefined" ? { register: () => {
 }, unregister: () => {
 } } : new FinalizationRegistry((ptr) => wasm.__wbg_rpcontextwasm_free(ptr >>> 0, 1));
@@ -1343,10 +1407,6 @@ function __wbg_get_imports() {
       return addHeapObject(ret);
     }, arguments);
   };
-  imports.wbg.__wbg_get_with_ref_key_1dc361bd10053bfe = function(arg0, arg1) {
-    const ret = getObject(arg0)[getObject(arg1)];
-    return addHeapObject(ret);
-  };
   imports.wbg.__wbg_has_787fafc980c3ccdb = function() {
     return handleError(function(arg0, arg1) {
       const ret = Reflect.has(getObject(arg0), getObject(arg1));
@@ -1442,7 +1502,7 @@ function __wbg_get_imports() {
         const a = state0.a;
         state0.a = 0;
         try {
-          return __wasm_bindgen_func_elem_1238(a, state0.b, arg02, arg12);
+          return __wasm_bindgen_func_elem_1343(a, state0.b, arg02, arg12);
         } finally {
           state0.a = a;
         }
@@ -1651,10 +1711,6 @@ function __wbg_get_imports() {
     const ret = getObject(arg0).versions;
     return addHeapObject(ret);
   };
-  imports.wbg.__wbindgen_cast_20b7882efa3c21d9 = function(arg0, arg1) {
-    const ret = makeMutClosure(arg0, arg1, wasm.__wasm_bindgen_func_elem_872, __wasm_bindgen_func_elem_873);
-    return addHeapObject(ret);
-  };
   imports.wbg.__wbindgen_cast_2241b6af4c4b2941 = function(arg0, arg1) {
     const ret = getStringFromWasm0(arg0, arg1);
     return addHeapObject(ret);
@@ -1663,12 +1719,16 @@ function __wbg_get_imports() {
     const ret = BigInt.asUintN(64, arg0);
     return addHeapObject(ret);
   };
+  imports.wbg.__wbindgen_cast_91c43ecf1f8dafb8 = function(arg0, arg1) {
+    const ret = makeMutClosure(arg0, arg1, wasm.__wasm_bindgen_func_elem_596, __wasm_bindgen_func_elem_597);
+    return addHeapObject(ret);
+  };
   imports.wbg.__wbindgen_cast_9ae0607507abb057 = function(arg0) {
     const ret = arg0;
     return addHeapObject(ret);
   };
-  imports.wbg.__wbindgen_cast_c84362f2a853c6d7 = function(arg0, arg1) {
-    const ret = makeMutClosure(arg0, arg1, wasm.__wasm_bindgen_func_elem_509, __wasm_bindgen_func_elem_510);
+  imports.wbg.__wbindgen_cast_ab10518eebecf9a3 = function(arg0, arg1) {
+    const ret = makeMutClosure(arg0, arg1, wasm.__wasm_bindgen_func_elem_959, __wasm_bindgen_func_elem_960);
     return addHeapObject(ret);
   };
   imports.wbg.__wbindgen_cast_cb9088102bce6b30 = function(arg0, arg1) {
@@ -1793,24 +1853,26 @@ var IDKitRequestImpl = class {
   async pollOnce() {
     return await this.wasmRequest.pollForStatus();
   }
-  async pollForUpdates(options) {
+  async pollUntilCompletion(options) {
     const pollInterval = options?.pollInterval ?? 1e3;
     const timeout = options?.timeout ?? 3e5;
     const startTime = Date.now();
     while (true) {
       if (options?.signal?.aborted) {
-        throw new Error("Verification cancelled");
+        return { success: false, error: "cancelled" /* Cancelled */ };
       }
       if (Date.now() - startTime > timeout) {
-        throw new Error(`Timeout waiting for proof after ${timeout}ms`);
+        return { success: false, error: "timeout" /* Timeout */ };
       }
       const status = await this.pollOnce();
-      if (status.type === "confirmed" && status.proof) {
-        return status.proof;
+      if (status.type === "confirmed" && status.result) {
+        return { success: true, result: status.result };
       }
       if (status.type === "failed") {
-        const errorCode = status.error ?? "generic_error" /* GenericError */;
-        throw new Error(`Verification failed: ${errorCode}`);
+        return {
+          success: false,
+          error: status.error ?? "generic_error" /* GenericError */
+        };
       }
       await new Promise((resolve) => setTimeout(resolve, pollInterval));
     }
@@ -1820,7 +1882,8 @@ function CredentialRequest(credential_type, options) {
   return {
     type: credential_type,
     signal: options?.signal,
-    genesis_issued_at_min: options?.genesis_issued_at_min
+    genesis_issued_at_min: options?.genesis_issued_at_min,
+    expires_at_min: options?.expires_at_min
   };
 }
 function any(...nodes) {
@@ -1829,12 +1892,18 @@ function any(...nodes) {
 function all(...nodes) {
   return { all: nodes };
 }
-function orbLegacy2(opts = {}) {
-  return { type: "OrbLegacy", data: { signal: opts.signal } };
+function orbLegacy(opts = {}) {
+  return { type: "OrbLegacy", signal: opts.signal };
 }
-var IDKitRequestBuilder = class {
-  constructor(config) {
-    this.config = config;
+function secureDocumentLegacy(opts = {}) {
+  return { type: "SecureDocumentLegacy", signal: opts.signal };
+}
+function documentLegacy(opts = {}) {
+  return { type: "DocumentLegacy", signal: opts.signal };
+}
+var IDKitBuilder2 = class {
+  constructor(wasmBuilder) {
+    this.wasmBuilder = wasmBuilder;
   }
   /**
    * Creates an IDKit request with the given constraints
@@ -1844,64 +1913,36 @@ var IDKitRequestBuilder = class {
    *
    * @example
    * ```typescript
-   * const request = await IDKit.request({ app_id, action, rp_context })
-   *   .constraints(any(CredentialRequest('orb'), CredentialRequest('face')))
+   * const builder = await IDKit.request({ app_id, action, rp_context });
+   * const request = await builder.constraints(any(CredentialRequest('orb'), CredentialRequest('face')));
    * ```
    */
-  async constraints(constraints) {
-    await initIDKit();
-    const rpContext = new idkit_wasm_exports.RpContextWasm(
-      this.config.rp_context.rp_id,
-      this.config.rp_context.nonce,
-      BigInt(this.config.rp_context.created_at),
-      BigInt(this.config.rp_context.expires_at),
-      this.config.rp_context.signature
-    );
-    const wasmBuilder = idkit_wasm_exports.request(
-      this.config.app_id,
-      String(this.config.action),
-      rpContext,
-      this.config.action_description ?? null,
-      this.config.bridge_url ?? null
-    );
-    const wasmRequest = await wasmBuilder.constraints(
-      constraints
-    );
-    return new IDKitRequestImpl(wasmRequest);
-  }
+  //TODO: re-enable once this is supported and World ID 4.0 is rolled out live
+  // async constraints(constraints: ConstraintNode): Promise<IDKitRequest> {
+  //   await initIDKit();
+  //   const wasmRequest = (await this.wasmBuilder.constraints(
+  //     constraints,
+  //   )) as unknown as WasmModule.IDKitRequest;
+  //   return new IDKitRequestImpl(wasmRequest);
+  // }
   /**
-   * Creates an IDKit request from a preset
+   * Creates an IDKit request from a preset (works for all request types)
    *
    * Presets provide a simplified way to create requests with predefined
-   * credential configurations. The preset is converted to both World ID 4.0
-   * constraints and World ID 3.0 legacy fields for backward compatibility.
+   * credential configurations.
    *
    * @param preset - A preset object from orbLegacy()
    * @returns A new IDKitRequest instance
    *
    * @example
    * ```typescript
-   * const request = await IDKit.request({ app_id, action, rp_context })
-   *   .preset(orbLegacy({ signal: 'user-123' }))
+   * const builder = await IDKit.request({ app_id, action, rp_context });
+   * const request = await builder.preset(orbLegacy({ signal: 'user-123' }));
    * ```
    */
   async preset(preset) {
     await initIDKit();
-    const rpContext = new idkit_wasm_exports.RpContextWasm(
-      this.config.rp_context.rp_id,
-      this.config.rp_context.nonce,
-      BigInt(this.config.rp_context.created_at),
-      BigInt(this.config.rp_context.expires_at),
-      this.config.rp_context.signature
-    );
-    const wasmBuilder = idkit_wasm_exports.request(
-      this.config.app_id,
-      String(this.config.action),
-      rpContext,
-      this.config.action_description ?? null,
-      this.config.bridge_url ?? null
-    );
-    const wasmRequest = await wasmBuilder.preset(
+    const wasmRequest = await this.wasmBuilder.preset(
       preset
     );
     return new IDKitRequestImpl(wasmRequest);
@@ -1917,7 +1958,81 @@ function createRequest(config) {
   if (!config.rp_context) {
     throw new Error("rp_context is required");
   }
-  return new IDKitRequestBuilder(config);
+  if (typeof config.allow_legacy_proofs !== "boolean") {
+    throw new Error(
+      "allow_legacy_proofs is required. Set to true to accept v3 proofs during migration, or false to only accept v4 proofs."
+    );
+  }
+  const rpContext = new idkit_wasm_exports.RpContextWasm(
+    config.rp_context.rp_id,
+    config.rp_context.nonce,
+    BigInt(config.rp_context.created_at),
+    BigInt(config.rp_context.expires_at),
+    config.rp_context.signature
+  );
+  const wasmBuilder = idkit_wasm_exports.request(
+    config.app_id,
+    String(config.action),
+    rpContext,
+    config.action_description ?? null,
+    config.bridge_url ?? null,
+    config.allow_legacy_proofs,
+    config.override_connect_base_url ?? null,
+    config.environment ?? null
+  );
+  return new IDKitBuilder2(wasmBuilder);
+}
+function createSession2(config) {
+  if (!config.app_id) {
+    throw new Error("app_id is required");
+  }
+  if (!config.rp_context) {
+    throw new Error("rp_context is required");
+  }
+  const rpContext = new idkit_wasm_exports.RpContextWasm(
+    config.rp_context.rp_id,
+    config.rp_context.nonce,
+    BigInt(config.rp_context.created_at),
+    BigInt(config.rp_context.expires_at),
+    config.rp_context.signature
+  );
+  const wasmBuilder = idkit_wasm_exports.createSession(
+    config.app_id,
+    rpContext,
+    config.action_description ?? null,
+    config.bridge_url ?? null,
+    config.override_connect_base_url ?? null,
+    config.environment ?? null
+  );
+  return new IDKitBuilder2(wasmBuilder);
+}
+function proveSession2(sessionId, config) {
+  if (!sessionId) {
+    throw new Error("session_id is required");
+  }
+  if (!config.app_id) {
+    throw new Error("app_id is required");
+  }
+  if (!config.rp_context) {
+    throw new Error("rp_context is required");
+  }
+  const rpContext = new idkit_wasm_exports.RpContextWasm(
+    config.rp_context.rp_id,
+    config.rp_context.nonce,
+    BigInt(config.rp_context.created_at),
+    BigInt(config.rp_context.expires_at),
+    config.rp_context.signature
+  );
+  const wasmBuilder = idkit_wasm_exports.proveSession(
+    sessionId,
+    config.app_id,
+    rpContext,
+    config.action_description ?? null,
+    config.bridge_url ?? null,
+    config.override_connect_base_url ?? null,
+    config.environment ?? null
+  );
+  return new IDKitBuilder2(wasmBuilder);
 }
 var IDKit = {
   /** Initialize WASM for browser environments */
@@ -1926,6 +2041,10 @@ var IDKit = {
   initServer: initIDKitServer,
   /** Create a new verification request */
   request: createRequest,
+  /** Create a new session (no action, no existing session_id) */
+  createSession: createSession2,
+  /** Prove an existing session (no action, has session_id) */
+  proveSession: proveSession2,
   /** Create a CredentialRequest for a credential type */
   CredentialRequest,
   /** Create an OR constraint - at least one child must be satisfied */
@@ -1933,7 +2052,11 @@ var IDKit = {
   /** Create an AND constraint - all children must be satisfied */
   all,
   /** Create an OrbLegacy preset for World ID 3.0 legacy support */
-  orbLegacy: orbLegacy2
+  orbLegacy,
+  /** Create a SecureDocumentLegacy preset for World ID 3.0 legacy support */
+  secureDocumentLegacy,
+  /** Create a DocumentLegacy preset for World ID 3.0 legacy support */
+  documentLegacy
 };
 
 // src/lib/platform.ts
@@ -1970,17 +2093,21 @@ function signRequest2(action, signingKeyHex, ttlSeconds) {
   return idkit_wasm_exports.signRequest(action, signingKeyHex, ttlBigInt);
 }
 
-exports.AppErrorCodes = AppErrorCodes;
+// src/lib/hashing.ts
+function hashSignal2(signal) {
+  return idkit_wasm_exports.hashSignal(signal);
+}
+
 exports.CredentialRequest = CredentialRequest;
 exports.IDKit = IDKit;
-exports.ResponseStatus = ResponseStatus;
-exports.VerificationState = VerificationState;
+exports.IDKitErrorCodes = IDKitErrorCodes;
 exports.all = all;
 exports.any = any;
+exports.documentLegacy = documentLegacy;
+exports.hashSignal = hashSignal2;
 exports.isNode = isNode;
 exports.isReactNative = isReactNative;
 exports.isWeb = isWeb;
-exports.orbLegacy = orbLegacy2;
+exports.orbLegacy = orbLegacy;
+exports.secureDocumentLegacy = secureDocumentLegacy;
 exports.signRequest = signRequest2;
-//# sourceMappingURL=index.cjs.map
-//# sourceMappingURL=index.cjs.map