feat: expose integrity bundle in responses

js/examples/nextjs/app/api/verify-proof/route.ts

@@ -1,12 +1,13 @@
 import { NextResponse } from "next/server";
+import type { IDKitResult } from "@worldcoin/idkit";
 
 // export const runtime = "nodejs";
 
 export async function POST(request: Request): Promise<Response> {
   try {
     const body = (await request.json()) as {
       rp_id?: string;
-      devPortalPayload?: unknown;
+      devPortalPayload?: IDKitResult;
     };
 
     const baseUrl =

js/packages/core/src/index.ts

@@ -43,6 +43,8 @@ export type {
 export type {
   // Uniqueness proof response types
   IDKitResult,
+  IntegrityBundle,
+  IntegritySignatureFormat,
   ResponseItemV4,
   ResponseItemV3,
   // Session proof response types

js/packages/core/src/lib/wasm.ts

@@ -51,6 +51,8 @@ export type {
   IDKitResult,
   IDKitResultV3,
   IDKitResultV4,
+  IntegrityBundle,
+  IntegritySignatureFormat,
   // Session proof response types
   IDKitResultSession,
   ResponseItemSession,

js/packages/core/src/transports/native.test.ts

@@ -244,6 +244,76 @@ describe("native transport request lifecycle", () => {
     });
   });
 
+  it("preserves integrity_bundle from v2.1 native responses", async () => {
+    const integrityBundle = {
+      version: 1,
+      signature_format: "android_keystore",
+      timestamp: 1709901234,
+      signature: "304502210",
+      jwt: "eyJhbGciOiJFUzI1NiIs",
+    } as const;
+
+    const req = createNativeRequest({}, baseConfig, {}, "");
+    activeRequest = req;
+
+    const completionPromise = req.pollUntilCompletion({ timeout: 1000 });
+
+    miniKitHandlers["miniapp-verify-action"]?.({
+      status: "success",
+      proof_response: {
+        id: "req_abc123",
+        version: 1,
+        responses: [
+          {
+            identifier: "face",
+            proof: proofResponseProof,
+            nullifier: proofResponseNullifier("a"),
+            issuer_schema_id: 11,
+            expires_at_min: 0,
+          },
+        ],
+      },
+      integrity_bundle: integrityBundle,
+    });
+
+    const completion = await completionPromise;
+    expect(completion.success).toBe(true);
+    if (completion.success) {
+      expect(completion.result.integrity_bundle).toEqual(integrityBundle);
+    }
+  });
+
+  it("preserves integrity_bundle from legacy native responses", async () => {
+    const integrityBundle = {
+      version: 1,
+      signature_format: "apple_app_attest",
+      timestamp: 1709901234,
+      signature: "304502210",
+      jwt: "eyJhbGciOiJFUzI1NiIs",
+    } as const;
+
+    const req = createNativeRequest({}, baseConfig, {}, "");
+    activeRequest = req;
+
+    const completionPromise = req.pollUntilCompletion({ timeout: 1000 });
+
+    miniKitHandlers["miniapp-verify-action"]?.({
+      status: "success",
+      protocol_version: "3.0",
+      verification_level: "orb",
+      proof: "0x01",
+      merkle_root: "0x02",
+      nullifier_hash: "0x03",
+      integrity_bundle: integrityBundle,
+    });
+
+    const completion = await completionPromise;
+    expect(completion.success).toBe(true);
+    if (completion.success) {
+      expect(completion.result.integrity_bundle).toEqual(integrityBundle);
+    }
+  });
+
   it("prefers response signal_hash over signal hashes map", async () => {
     const signalHashes = { proof_of_human: hashSignal("from-constraints") };
 

js/packages/core/src/transports/native.ts

@@ -23,7 +23,7 @@ import type {
 } from "../request";
 import type { IDKitResult } from "../types/result";
 import { IDKitErrorCodes } from "../types/result";
-import type { IDKitResultV3 } from "../lib/wasm";
+import type { IDKitResultV3, IntegrityBundle } from "../lib/wasm";
 import { WasmModule } from "../lib/wasm";
 import { isDebug } from "../lib/debug";
 
@@ -374,6 +374,7 @@ function nativeResultToIDKitResult(
 ): IDKitResult {
   const p = payload as Record<string, any>;
   const rpNonce = config.rp_context?.nonce ?? "";
+  const integrity_bundle = normalizeIntegrityBundle(p);
 
   // V4 response wrapped in `proof_response` envelope.
   if ("proof_response" in p && p.proof_response != null) {
@@ -386,14 +387,17 @@ function nativeResultToIDKitResult(
         ),
       });
 
-    return WasmModule.proofResponseToIDKitResult(proof_response, {
+    const result = WasmModule.proofResponseToIDKitResult(proof_response, {
       nonce: rpNonce,
       action: config.action,
       action_description: config.action_description,
       environment: config.environment ?? "production",
       signal_hashes: signalHashes,
       identity_attested: p.identity_attested,
     }) as IDKitResult;
+
+    result.integrity_bundle = integrity_bundle;
+    return result;
   }
 
   // Protocol ProofResponse must be nested under `proof_response`.
@@ -426,6 +430,7 @@ function nativeResultToIDKitResult(
         nullifier: v.nullifier_hash,
       })),
       environment: config.environment ?? "production",
+      integrity_bundle,
     } satisfies IDKitResultV3;
   }
 
@@ -447,5 +452,17 @@ function nativeResultToIDKitResult(
       },
     ],
     environment: config.environment ?? "production",
+    integrity_bundle,
   } satisfies IDKitResultV3;
 }
+
+function normalizeIntegrityBundle(
+  payload: Record<string, any>,
+): IntegrityBundle | undefined {
+  const integrityBundle = payload.integrity_bundle;
+  if (integrityBundle == null || typeof integrityBundle !== "object") {
+    return undefined;
+  }
+
+  return integrityBundle as IntegrityBundle;
+}

js/packages/core/src/types/result.ts

@@ -10,6 +10,8 @@ export type {
   IDKitResult,
   ResponseItemV4,
   ResponseItemV3,
+  IntegrityBundle,
+  IntegritySignatureFormat,
   // Session proof response types
   ResponseItemSession,
   IDKitResultSession,

js/packages/react/src/index.ts

@@ -50,6 +50,8 @@ export type {
   Preset,
   ConstraintNode,
   IDKitResult,
+  IntegrityBundle,
+  IntegritySignatureFormat,
   IDKitResultSession,
   IDKitRequestConfig,
   IDKitSessionConfig,