working on discord plugin

wip
Duolingo streak plugin (#215 )
2026-01-22 13:38:07 -05:00 · 2026-01-21 09:58:15 +01:00 · 2026-01-21 09:58:15 +01:00 · 2026-01-21 09:57:51 +01:00 · 2026-01-21 09:56:15 +01:00 · 2026-01-21 09:56:15 +01:00
41 changed files with 1669 additions and 2050 deletions
--- a/.github/workflows/demo.yml
+++ b/.github/workflows/demo.yml
@@ -20,9 +20,26 @@ env:
    should_publish: ${{ github.ref == 'refs/heads/main' || (startsWith(github.ref, 'refs/tags/v') && contains(github.ref, '.')) || github.ref == 'refs/heads/staging' }}

 jobs:
+    test_verifier:
+        name: test verifier server
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout repository
+              uses: actions/checkout@v4
+
+            - name: Setup Rust toolchain
+              uses: actions-rust-lang/setup-rust-toolchain@v1
+              with:
+                  toolchain: stable
+
+            - name: Run verifier tests
+              working-directory: packages/verifier
+              run: cargo test
+
    build_and_publish_demo_verifier_server:
        name: build and publish demo verifier server image
        runs-on: ubuntu-latest
+        needs: test_verifier
        permissions:
            contents: read
            packages: write
@@ -86,5 +103,5 @@ jobs:
                  tags: ${{ steps.meta-verifier-webapp.outputs.tags }}
                  labels: ${{ steps.meta-verifier-webapp.outputs.labels }}
                  build-args: |
-                      VERIFIER_HOST=demo-staging.tlsnotary.org
-                      SSL=true
+                      VITE_VERIFIER_HOST=demo-staging.tlsnotary.org
+                      VITE_SSL=true
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -591,37 +591,32 @@ logger.setLevel(LogLevel.WARN);
 Docker-based demo environment for testing plugins:

 **Files:**
- `twitter.js`, `swissbank.js` - Example plugin files
+- `src/plugins/*.plugin.ts` - Plugin source files (TypeScript)
+- `public/plugins/*.js` - Built plugin files (generated by `build-plugins.js`)
 - `docker-compose.yml` - Docker services configuration
 - `nginx.conf` - Reverse proxy configuration
- `start.sh` - Setup script with URL templating

 **Docker Services:**
 1. `verifier` - TLSNotary verifier server (port 7047)
 2. `demo-static` - nginx serving static plugin files
 3. `nginx` - Reverse proxy (port 80)

-**Environment Variables:**
- `VERIFIER_HOST` - Verifier server host (default: `localhost:7047`)
- `SSL` - Use https/wss protocols (default: `false`)
+**Environment Variables (via `.env` files or Docker build args):**
+- `VITE_VERIFIER_HOST` - Verifier server host (default: `localhost:7047`)
+- `VITE_SSL` - Use https/wss protocols (default: `false`)

 **Usage:**
 ```bash
-# Local development
-./start.sh
+# Local development with npm
+npm run demo

-# Production with SSL
-VERIFIER_HOST=verifier.tlsnotary.org SSL=true ./start.sh
+# Docker (detached mode)
+npm run docker:up

-# Docker detached mode
-./start.sh -d
+# Docker with custom verifier
+VITE_VERIFIER_HOST=verifier.example.com VITE_SSL=true docker compose up --build
 ```

-The `start.sh` script:
-1. Processes plugin files, replacing `verifierUrl` and `proxyUrl` placeholders
-2. Copies processed files to `generated/` directory
-3. Starts Docker Compose services
-
 ## Important Implementation Notes

 ### Plugin API Changes
--- a/README.md
+++ b/README.md
@@ -58,8 +58,7 @@ tlsn-extension/
 │   │
 │   ├── demo/                # Demo server with Docker setup
 │   │   ├── *.js                  # Example plugin files
-│   │   ├── docker-compose.yml    # Docker services configuration
-│   │   └── start.sh              # Setup script with configurable URLs
+│   │   └── docker-compose.yml    # Docker services configuration
 │   │
 │   ├── tutorial/            # Tutorial examples
 │   │   └── *.js                  # Tutorial plugin files
@@ -116,10 +115,9 @@ Rust-based HTTP/WebSocket server for TLSNotary verification:
 #### 5. **demo** - Demo Server
 Docker-based demo environment with:
 - Pre-configured example plugins (Twitter, SwissBank)
+- React + Vite frontend with environment-based configuration
 - Docker Compose setup with verifier and nginx
- Configurable verifier URLs via environment variables
- Plugin file generator (`generate.sh`) with SSL support
- Docker startup script (`start.sh`)
+- Configurable verifier URLs via `.env` files or Docker build args

 #### 6. **tlsn-wasm-pkg** - TLSN WebAssembly Package
 Pre-built WebAssembly binaries for TLSNotary functionality in the browser.
@@ -495,25 +493,19 @@ npm run demo

 ### Environment Variables

-Configure the demo for different environments:
+The demo uses `.env` files for configuration:
+- `.env` - Local development defaults (`localhost:7047`)
+- `.env.production` - Production settings (`verifier.tlsnotary.org`, SSL enabled)
+
+For Docker deployments, override via environment variables:
 ```bash
 # Local development (default)
-cd packages/demo
-./generate.sh && ./start.sh
+npm run docker:up

-# Production with SSL
-cd packages/demo
-VERIFIER_HOST=verifier.tlsnotary.org SSL=true ./generate.sh
-./start.sh
-
-# Docker detached mode
-./generate.sh && ./start.sh -d
+# Production with custom verifier
+VITE_VERIFIER_HOST=verifier.example.com VITE_SSL=true docker compose up --build
 ```

-The demo uses two scripts:
- **`generate.sh`** - Generates plugin files with configured verifier URLs (use environment variables here)
- **`start.sh`** - Starts Docker Compose services (assumes `generated/` directory exists)
-
 ### Tutorial

 ```bash
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
  "name": "tlsn-monorepo",
-  "version": "0.1.0",
+  "version": "0.1.0-alpha.14",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "tlsn-monorepo",
-      "version": "0.1.0",
+      "version": "0.1.0-alpha.14",
      "license": "MIT",
      "workspaces": [
        "packages/*"
@@ -64,7 +64,6 @@
      "version": "7.28.4",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@babel/code-frame": "^7.27.1",
        "@babel/generator": "^7.28.3",
@@ -580,7 +579,6 @@
      "version": "7.27.1",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@babel/helper-plugin-utils": "^7.27.1"
      },
@@ -1323,7 +1321,6 @@
      "version": "7.27.1",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@babel/helper-annotate-as-pure": "^7.27.1",
        "@babel/helper-module-imports": "^7.27.1",
@@ -1884,7 +1881,6 @@
    "node_modules/@codemirror/view": {
      "version": "6.38.6",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@codemirror/state": "^6.5.0",
        "crelt": "^1.0.6",
@@ -1994,7 +1990,6 @@
        }
      ],
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": "^14 || ^16 || >=18"
      },
@@ -2016,7 +2011,6 @@
        }
      ],
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": "^14 || ^16 || >=18"
      }
@@ -2093,7 +2087,6 @@
      "version": "6.1.2",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "cssesc": "^3.0.0",
        "util-deprecate": "^1.0.2"
@@ -2415,7 +2408,6 @@
      "version": "6.1.2",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "cssesc": "^3.0.0",
        "util-deprecate": "^1.0.2"
@@ -3907,6 +3899,7 @@
      "hasInstallScript": true,
      "license": "MIT",
      "optional": true,
+      "peer": true,
      "dependencies": {
        "detect-libc": "^1.0.3",
        "is-glob": "^4.0.3",
@@ -3948,6 +3941,7 @@
      "os": [
        "android"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -3966,6 +3960,7 @@
      "os": [
        "darwin"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -3986,6 +3981,7 @@
      "os": [
        "darwin"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4006,6 +4002,7 @@
      "os": [
        "freebsd"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4026,6 +4023,7 @@
      "os": [
        "linux"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4046,6 +4044,7 @@
      "os": [
        "linux"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4066,6 +4065,7 @@
      "os": [
        "linux"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4086,6 +4086,7 @@
      "os": [
        "linux"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4106,6 +4107,7 @@
      "os": [
        "linux"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4126,6 +4128,7 @@
      "os": [
        "linux"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4146,6 +4149,7 @@
      "os": [
        "win32"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4166,6 +4170,7 @@
      "os": [
        "win32"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4186,6 +4191,7 @@
      "os": [
        "win32"
      ],
+      "peer": true,
      "engines": {
        "node": ">= 10.0.0"
      },
@@ -4637,7 +4643,6 @@
      "version": "8.13.0",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "fast-deep-equal": "^3.1.3",
        "json-schema-traverse": "^1.0.0",
@@ -5270,7 +5275,6 @@
      "version": "5.62.0",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@eslint-community/regexpp": "^4.4.0",
        "@typescript-eslint/scope-manager": "5.62.0",
@@ -5333,7 +5337,6 @@
      "version": "5.62.0",
      "dev": true,
      "license": "BSD-2-Clause",
-      "peer": true,
      "dependencies": {
        "@typescript-eslint/scope-manager": "5.62.0",
        "@typescript-eslint/types": "5.62.0",
@@ -5646,7 +5649,6 @@
      "version": "3.2.4",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@testing-library/dom": "^10.4.0",
        "@testing-library/user-event": "^14.6.1",
@@ -6212,7 +6214,6 @@
      "version": "8.15.0",
      "devOptional": true,
      "license": "MIT",
-      "peer": true,
      "bin": {
        "acorn": "bin/acorn"
      },
@@ -6243,7 +6244,6 @@
      "version": "6.12.6",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "fast-deep-equal": "^3.1.1",
        "fast-json-stable-stringify": "^2.0.0",
@@ -7067,7 +7067,6 @@
        }
      ],
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "baseline-browser-mapping": "^2.8.3",
        "caniuse-lite": "^1.0.30001741",
@@ -7825,7 +7824,6 @@
      "version": "6.1.2",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "cssesc": "^3.0.0",
        "util-deprecate": "^1.0.2"
@@ -8205,6 +8203,7 @@
      "version": "1.0.3",
      "license": "Apache-2.0",
      "optional": true,
+      "peer": true,
      "bin": {
        "detect-libc": "bin/detect-libc.js"
      },
@@ -8662,7 +8661,6 @@
      "version": "8.57.1",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@eslint-community/eslint-utils": "^4.2.0",
        "@eslint-community/regexpp": "^4.6.1",
@@ -11634,7 +11632,8 @@
    "node_modules/node-addon-api": {
      "version": "7.1.1",
      "license": "MIT",
-      "optional": true
+      "optional": true,
+      "peer": true
    },
    "node_modules/node-forge": {
      "version": "1.3.3",
@@ -12390,7 +12389,6 @@
        }
      ],
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "nanoid": "^3.3.11",
        "picocolors": "^1.1.1",
@@ -13151,7 +13149,6 @@
      "version": "6.1.2",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "cssesc": "^3.0.0",
        "util-deprecate": "^1.0.2"
@@ -13429,7 +13426,6 @@
      "version": "3.6.2",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "bin": {
        "prettier": "bin/prettier.cjs"
      },
@@ -13714,7 +13710,6 @@
    "node_modules/react": {
      "version": "18.3.1",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "loose-envify": "^1.1.0"
      },
@@ -13725,7 +13720,6 @@
    "node_modules/react-dom": {
      "version": "18.3.1",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "loose-envify": "^1.1.0",
        "scheduler": "^0.23.2"
@@ -13783,7 +13777,6 @@
      "version": "0.14.2",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": ">=0.10.0"
      }
@@ -13877,7 +13870,6 @@
    "node_modules/redux": {
      "version": "4.2.1",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@babel/runtime": "^7.9.2"
      }
@@ -14123,7 +14115,6 @@
    "node_modules/rollup": {
      "version": "4.52.3",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@types/estree": "1.0.8"
      },
@@ -14267,7 +14258,6 @@
      "version": "1.93.2",
      "devOptional": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "chokidar": "^4.0.0",
        "immutable": "^5.0.2",
@@ -14346,7 +14336,6 @@
    "node_modules/schema-utils/node_modules/ajv": {
      "version": "8.17.1",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "fast-deep-equal": "^3.1.3",
        "fast-uri": "^3.0.1",
@@ -15636,7 +15625,6 @@
    "node_modules/tinyglobby/node_modules/picomatch": {
      "version": "4.0.3",
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": ">=12"
      },
@@ -15668,20 +15656,6 @@
        "node": ">=14.0.0"
      }
    },
-    "node_modules/tlsn-js": {
-      "version": "0.1.0-alpha.12.0",
-      "license": "ISC",
-      "dependencies": {
-        "tlsn-wasm": "0.1.0-alpha.12"
-      },
-      "engines": {
-        "node": ">= 16.20.2"
-      }
-    },
-    "node_modules/tlsn-js/node_modules/tlsn-wasm": {
-      "version": "0.1.0-alpha.12",
-      "license": "MIT OR Apache-2.0"
-    },
    "node_modules/tlsn-wasm": {
      "resolved": "packages/tlsn-wasm-pkg",
      "link": true
@@ -15794,8 +15768,7 @@
    },
    "node_modules/tslib": {
      "version": "2.8.1",
-      "license": "0BSD",
-      "peer": true
+      "license": "0BSD"
    },
    "node_modules/tsutils": {
      "version": "3.21.0",
@@ -15831,7 +15804,6 @@
      "version": "3.13.1",
      "dev": true,
      "license": "(MIT OR CC0-1.0)",
-      "peer": true,
      "engines": {
        "node": ">=14.16"
      },
@@ -15926,7 +15898,6 @@
      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
      "devOptional": true,
      "license": "Apache-2.0",
-      "peer": true,
      "bin": {
        "tsc": "bin/tsc",
        "tsserver": "bin/tsserver"
@@ -16155,7 +16126,6 @@
      "resolved": "https://registry.npmjs.org/vite/-/vite-7.3.0.tgz",
      "integrity": "sha512-dZwN5L1VlUBewiP6H9s2+B3e3Jg96D0vzN+Ry73sOefebhYr9f94wwkMNN/9ouoU8pV1BqA1d1zGk8928cx0rg==",
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "esbuild": "^0.27.0",
        "fdir": "^6.5.0",
@@ -16291,7 +16261,6 @@
    "node_modules/vite/node_modules/picomatch": {
      "version": "4.0.3",
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": ">=12"
      },
@@ -16303,7 +16272,6 @@
      "version": "3.2.4",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@types/chai": "^5.2.2",
        "@vitest/expect": "3.2.4",
@@ -16461,7 +16429,6 @@
      "version": "5.102.0",
      "devOptional": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@types/eslint-scope": "^3.7.7",
        "@types/estree": "^1.0.8",
@@ -16509,7 +16476,6 @@
      "version": "4.10.0",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@discoveryjs/json-ext": "^0.5.0",
        "@webpack-cli/configtest": "^1.2.0",
@@ -16772,7 +16738,6 @@
      "version": "3.3.3",
      "devOptional": true,
      "license": "MIT",
-      "peer": true,
      "engines": {
        "node": ">=10.13.0"
      }
@@ -17343,7 +17308,6 @@
      "integrity": "sha512-E4t7DJ9pESL6E3I8nFjPa4xGUd3PmiWDLsDztS2qXSJWfHtbQnwAWylaBvSNY48I3vr8PTqIZlyK8TE3V3CA4Q==",
      "dev": true,
      "license": "MIT",
-      "peer": true,
      "dependencies": {
        "@vitest/expect": "4.0.16",
        "@vitest/mocker": "4.0.16",
@@ -17434,7 +17398,7 @@
      }
    },
    "packages/extension": {
-      "version": "0.1.0",
+      "version": "0.1.0.1400",
      "license": "MIT",
      "dependencies": {
        "@codemirror/lang-javascript": "^6.2.4",
@@ -17464,7 +17428,6 @@
        "redux-thunk": "^2.4.2",
        "stream-browserify": "^3.0.0",
        "tailwindcss": "^3.3.3",
-        "tlsn-js": "^0.1.0-alpha.12.0",
        "tlsn-wasm": "./lib/tlsn-wasm-pkg/",
        "util": "^0.12.5"
      },
@@ -17531,10 +17494,13 @@
    },
    "packages/extension/lib/tlsn-wasm-pkg": {
      "name": "tlsn-wasm",
-      "version": "0.1.0-alpha.13",
-      "extraneous": true,
+      "version": "0.1.0-alpha.14",
      "license": "MIT OR Apache-2.0"
    },
+    "packages/extension/node_modules/tlsn-wasm": {
+      "resolved": "packages/extension/lib/tlsn-wasm-pkg",
+      "link": true
+    },
    "packages/plugin-sdk": {
      "name": "@tlsn/plugin-sdk",
      "version": "0.1.0",
@@ -17573,7 +17539,7 @@
    },
    "packages/tlsn-wasm-pkg": {
      "name": "tlsn-wasm",
-      "version": "0.1.0-alpha.13",
+      "version": "0.1.0-alpha.14",
      "license": "MIT OR Apache-2.0"
    }
  }
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "tlsn-monorepo",
-  "version": "0.1.0-alpha.13",
+  "version": "0.1.0-alpha.14",
  "private": true,
  "description": "TLSN Extension monorepo with plugin SDK",
  "license": "MIT",
@@ -22,11 +22,11 @@
    "test": "npm run test --workspaces --if-present",
    "serve:test": "npm run serve:test --workspace=extension",
    "clean": "rm -rf packages/*/node_modules packages/*/dist packages/*/build node_modules",
-    "build:wasm": "sh packages/tlsn-wasm/build.sh v0.1.0-alpha.13 --no-logging",
+    "build:wasm": "sh packages/tlsn-wasm/build.sh v0.1.0-alpha.14 --no-logging",
    "demo": "npm run dev --workspace=@tlsnotary/demo",
    "tutorial": "serve -l 8080 packages/tutorial",
-    "docker:up": "cd packages/demo && ./start.sh -d",
-    "docker:down": "cd packages/demo && docker-compose down"
+    "docker:up": "cd packages/demo && docker compose up --build -d",
+    "docker:down": "cd packages/demo && docker compose down"
  },
  "devDependencies": {
    "typescript": "^5.5.4",
--- a/packages/demo/.env
+++ b/packages/demo/.env
@@ -1,4 +1,3 @@
 # Verifier Configuration
 VITE_VERIFIER_HOST=localhost:7047
-VITE_VERIFIER_PROTOCOL=http
-VITE_PROXY_PROTOCOL=ws
+VITE_SSL=false
--- a/packages/demo/.env.production
+++ b/packages/demo/.env.production
@@ -1,4 +1,3 @@
 # Production environment variables
 VITE_VERIFIER_HOST=verifier.tlsnotary.org
-VITE_VERIFIER_PROTOCOL=https
-VITE_PROXY_PROTOCOL=wss
+VITE_SSL=true
--- a/packages/demo/.gitignore
+++ b/packages/demo/.gitignore
@@ -1,3 +1,4 @@
 *.wasm
 dist/
-public/plugins/
+public/plugins/
+generated/
--- a/packages/demo/Dockerfile
+++ b/packages/demo/Dockerfile
@@ -2,8 +2,8 @@
 FROM node:20-alpine AS builder

 # Accept build arguments with defaults
-ARG VITE_VERIFIER_URL=http://localhost:7047
-ARG VITE_PROXY_URL=ws://localhost:7047/proxy?token=
+ARG VITE_VERIFIER_HOST=localhost:7047
+ARG VITE_SSL=false

 WORKDIR /app

@@ -15,8 +15,8 @@ RUN npm install
 COPY . .

 # Build with environment variables
-ENV VITE_VERIFIER_URL=${VITE_VERIFIER_URL}
-ENV VITE_PROXY_URL=${VITE_PROXY_URL}
+ENV VITE_VERIFIER_HOST=${VITE_VERIFIER_HOST}
+ENV VITE_SSL=${VITE_SSL}
 RUN npm run build

 # Runtime stage
--- a/packages/demo/README.md
+++ b/packages/demo/README.md
@@ -75,30 +75,26 @@ Run the demo with `npm run demo` from the repository root, or run it with docker

 #### Manual Docker Setup

-If you want to run the scripts manually:
+If you want to run Docker manually:

 ```bash
 cd packages/demo
-npm run build  # Build the React app first
-./generate.sh && ./start.sh
+docker compose up --build
 ```

-The demo uses two scripts:
- **`generate.sh`** - Generates plugin files with configured verifier URLs
- **`start.sh`** - Starts Docker Compose services
-
 #### Environment Variables

-Configure for different environments:
+The demo uses `.env` files for configuration:
+- `.env` - Local development defaults (`localhost:7047`)
+- `.env.production` - Production settings (`verifier.tlsnotary.org`, SSL enabled)
+
+For Docker deployments, override via environment variables:
 ```bash
 # Local development (default)
-npm run build
-./generate.sh && ./start.sh
+docker compose up --build

-# Production with SSL
-npm run build
-VERIFIER_HOST=verifier.tlsnotary.org SSL=true ./generate.sh
-./start.sh
+# Production with custom verifier
+VITE_VERIFIER_HOST=verifier.example.com VITE_SSL=true docker compose up --build
 ```

 You can now open the demo by opening http://localhost:8080 in your browser with the TLSNotary extension
--- a/packages/demo/build-plugins.js
+++ b/packages/demo/build-plugins.js
@@ -5,7 +5,14 @@ import fs from 'fs';

 const __dirname = path.dirname(fileURLToPath(import.meta.url));

-const plugins = ['twitter', 'swissbank', 'spotify'];
+const plugins = ['twitter', 'swissbank', 'spotify', 'duolingo', 'discord_dm', 'discord_profile'];
+
+// Build URLs from environment variables (matching config.ts pattern)
+const VERIFIER_HOST = process.env.VITE_VERIFIER_HOST || 'localhost:7047';
+const SSL = process.env.VITE_SSL === 'true';
+
+const VERIFIER_URL = `${SSL ? 'https' : 'http'}://${VERIFIER_HOST}`;
+const PROXY_URL = `${SSL ? 'wss' : 'ws'}://${VERIFIER_HOST}/proxy?token=`;

 // Build each plugin separately as plain ES module
 for (const plugin of plugins) {
@@ -28,12 +35,8 @@ for (const plugin of plugins) {
            },
        },
        define: {
-            VITE_VERIFIER_URL: JSON.stringify(
-                process.env.VITE_VERIFIER_URL || 'http://localhost:7047'
-            ),
-            VITE_PROXY_URL: JSON.stringify(
-                process.env.VITE_PROXY_URL || 'ws://localhost:7047/proxy?token='
-            ),
+            VITE_VERIFIER_URL: JSON.stringify(VERIFIER_URL),
+            VITE_PROXY_URL: JSON.stringify(PROXY_URL),
        },
    });
    console.log(`✓ Built ${plugin}.js`);
--- a/packages/demo/docker-compose.yml
+++ b/packages/demo/docker-compose.yml
@@ -15,8 +15,8 @@ services:
    build:
      context: .
      args:
-        VERIFIER_HOST: ${VERIFIER_HOST:-localhost:7047}
-        SSL: ${SSL:-false}
+        VITE_VERIFIER_HOST: ${VITE_VERIFIER_HOST:-localhost:7047}
+        VITE_SSL: ${VITE_SSL:-false}
    restart: unless-stopped

  nginx:
--- a/packages/demo/generate.sh
+++ b/packages/demo/generate.sh
@@ -1,105 +0,0 @@
-#!/bin/sh
-#
-# Demo Plugin File Generator
-#
-# This script generates plugin files with configurable verifier URLs.
-# Used both locally and in CI/CD pipelines.
-#
-# Environment Variables:
-#   VERIFIER_HOST - Verifier server host (default: localhost:7047)
-#   SSL           - Use https/wss if true (default: false)
-#
-# Usage:
-#   ./generate.sh                                    # Local development
-#   VERIFIER_HOST=verifier.tlsnotary.org SSL=true ./generate.sh  # Production
-
-set -e
-
-cd "$(dirname "$0")"
-
-# Configuration with defaults
-VERIFIER_HOST="${VERIFIER_HOST:-localhost:7047}"
-SSL="${SSL:-false}"
-
-# Determine protocol based on SSL setting
-if [ "$SSL" = "true" ]; then
-    HTTP_PROTOCOL="https"
-    WS_PROTOCOL="wss"
-else
-    HTTP_PROTOCOL="http"
-    WS_PROTOCOL="ws"
-fi
-
-VERIFIER_URL="${HTTP_PROTOCOL}://${VERIFIER_HOST}"
-PROXY_URL_BASE="${WS_PROTOCOL}://${VERIFIER_HOST}/proxy?token="
-
-echo "========================================"
-echo "TLSNotary Demo Plugin Generator"
-echo "========================================"
-echo "Verifier Host: $VERIFIER_HOST"
-echo "SSL Enabled:   $SSL"
-echo "Verifier URL:  $VERIFIER_URL"
-echo "Proxy URL:     ${PROXY_URL_BASE}<host>"
-echo "========================================"
-
-# Create generated directory for processed files
-mkdir -p generated
-
-# Function to process a plugin file
-process_plugin() {
-    local input_file="$1"
-    local output_file="generated/$(basename "$input_file")"
-
-    echo "Processing: $input_file -> $output_file"
-
-    # Replace verifierUrl and proxyUrl patterns
-    sed -E \
-        -e "s|verifierUrl: '[^']*'|verifierUrl: '${VERIFIER_URL}'|g" \
-        -e "s|verifierUrl: \"[^\"]*\"|verifierUrl: \"${VERIFIER_URL}\"|g" \
-        -e "s|proxyUrl: 'ws://[^/]+/proxy\?token=([^']+)'|proxyUrl: '${PROXY_URL_BASE}\1'|g" \
-        -e "s|proxyUrl: 'wss://[^/]+/proxy\?token=([^']+)'|proxyUrl: '${PROXY_URL_BASE}\1'|g" \
-        -e "s|proxyUrl: \"ws://[^/]+/proxy\?token=([^\"]+)\"|proxyUrl: \"${PROXY_URL_BASE}\1\"|g" \
-        -e "s|proxyUrl: \"wss://[^/]+/proxy\?token=([^\"]+)\"|proxyUrl: \"${PROXY_URL_BASE}\1\"|g" \
-        "$input_file" > "$output_file"
-}
-
-# Function to process index.html
-process_index_html() {
-    local input_file="$1"
-    local output_file="generated/$(basename "$input_file")"
-
-    echo "Processing: $input_file -> $output_file"
-
-    # Replace hardcoded health check URL with configured verifier URL
-    sed -E \
-        -e "s|http://localhost:7047/health|${VERIFIER_URL}/health|g" \
-        "$input_file" > "$output_file"
-}
-
-# Process index.html
-echo ""
-echo "Processing index.html..."
-process_index_html "index.html"
-
-# Copy other static files
-echo ""
-echo "Copying other static files..."
-cp favicon.ico generated/ 2>/dev/null || true
-
-# Process plugin files
-echo ""
-echo "Processing plugin files..."
-for plugin_file in *.js; do
-    if [ -f "$plugin_file" ]; then
-        process_plugin "$plugin_file"
-    fi
-done
-
-echo ""
-echo "Generated files:"
-ls -la generated/
-
-echo ""
-echo "========================================"
-echo "Generation complete!"
-echo "========================================"
--- a/packages/demo/index.html.backup
+++ b/packages/demo/index.html.backup
@@ -1,510 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-
-<head>
-  <meta charset="UTF-8" />
-  <title>TLSNotary Plugin test page</title>
-  <style>
-    .result {
-      background: #e8f5e8;
-      border: 2px solid #28a745;
-      border-radius: 8px;
-      padding: 16px;
-      margin: 20px 0;
-      font-size: 18px;
-      display: inline-block;
-    }
-
-    .debug {
-      background: #f8f9fa;
-      border: 1px solid #dee2e6;
-      border-radius: 4px;
-      padding: 12px;
-      margin: 20px 0;
-      font-family: 'Courier New', monospace;
-      font-size: 12px;
-      white-space: pre-wrap;
-      max-height: 400px;
-      overflow-y: auto;
-    }
-
-    .plugin-buttons {
-      margin: 20px 0;
-    }
-
-    .plugin-buttons button {
-      margin-right: 10px;
-      padding: 10px 20px;
-      font-size: 16px;
-    }
-
-    .check-item {
-      margin: 10px 0;
-      padding: 10px;
-      border-radius: 4px;
-      border: 1px solid #ddd;
-    }
-
-    .check-item.checking {
-      background: #f0f8ff;
-      border-color: #007bff;
-    }
-
-    .check-item.success {
-      background: #f0f8f0;
-      border-color: #28a745;
-    }
-
-    .check-item.error {
-      background: #fff0f0;
-      border-color: #dc3545;
-    }
-
-    .status {
-      font-weight: bold;
-      margin-left: 10px;
-    }
-
-    .status.checking {
-      color: #007bff;
-    }
-
-    .status.success {
-      color: #28a745;
-    }
-
-    .status.error {
-      color: #dc3545;
-    }
-
-    .warning-box {
-      background: #fff3cd;
-      border: 2px solid #ffc107;
-      border-radius: 8px;
-      padding: 16px;
-      margin: 20px 0;
-    }
-
-    .warning-box h3 {
-      margin-top: 0;
-      color: #856404;
-    }
-
-    .console-section {
-      margin: 20px 0;
-      border: 1px solid #dee2e6;
-      border-radius: 8px;
-      background: #1e1e1e;
-      overflow: hidden;
-    }
-
-    .console-header {
-      background: #2d2d2d;
-      color: #fff;
-      padding: 10px 15px;
-      display: flex;
-      justify-content: space-between;
-      align-items: center;
-      border-bottom: 1px solid #3d3d3d;
-    }
-
-    .console-title {
-      font-weight: 600;
-      font-size: 14px;
-    }
-
-    .console-output {
-      max-height: 300px;
-      overflow-y: auto;
-      padding: 10px;
-      font-family: 'Courier New', monospace;
-      font-size: 12px;
-      color: #d4d4d4;
-    }
-
-    .console-entry {
-      margin: 4px 0;
-      line-height: 1.5;
-      white-space: pre-wrap;
-      word-break: break-word;
-    }
-
-    .console-entry.info {
-      color: #4fc3f7;
-    }
-
-    .console-entry.success {
-      color: #4caf50;
-    }
-
-    .console-entry.error {
-      color: #f44336;
-    }
-
-    .console-entry.warning {
-      color: #ff9800;
-    }
-
-    .console-timestamp {
-      color: #888;
-      margin-right: 8px;
-    }
-
-    .console-message {
-      color: inherit;
-    }
-
-    .btn-console {
-      background: #007bff;
-      color: white;
-      border: none;
-      padding: 5px 12px;
-      border-radius: 4px;
-      cursor: pointer;
-      font-size: 12px;
-    }
-
-    .btn-console:hover {
-      background: #0056b3;
-    }
-  </style>
-</head>
-
-<body>
-  <h1>TLSNotary Plugin Demo</h1>
-  <p>
-    This page demonstrates TLSNotary plugins. Choose a plugin to test below.
-  </p>
-
-  <!-- Browser compatibility warning -->
-  <div id="browser-warning" class="warning-box" style="display: none;">
-    <h3>⚠️ Browser Compatibility</h3>
-    <p><strong>Unsupported Browser Detected</strong></p>
-    <p>TLSNotary extension requires a Chrome-based browser (Chrome, Edge, Brave, etc.).</p>
-    <p>Please switch to a supported browser to continue.</p>
-  </div>
-
-  <!-- System checks -->
-  <div>
-    <strong>System Checks:</strong>
-    <div id="check-browser" class="check-item checking">
-      🌐 Browser: <span class="status checking">Checking...</span>
-    </div>
-    <div id="check-extension" class="check-item checking">
-      🔌 Extension: <span class="status checking">Checking...</span>
-    </div>
-    <div id="check-verifier" class="check-item checking">
-      ✅ Verifier: <span class="status checking">Checking...</span>
-      <div id="verifier-instructions" style="display: none; margin-top: 10px; font-size: 14px;">
-        <p>Start the verifier server:</p>
-        <code>cd packages/verifier; cargo run --release</code>
-        <button onclick="checkVerifier()" style="margin-left: 10px; padding: 5px 10px;">Check Again</button>
-      </div>
-    </div>
-  </div>
-
-  <div style="margin-top: 20px;">
-    <strong>Steps:</strong>
-    <ol>
-      <li>Click one of the plugin "Run" buttons below.</li>
-      <li>The plugin will open a new browser window with the target website.</li>
-      <li>Log in to the website if you are not already logged in.</li>
-      <li>A TLSNotary overlay will appear in the bottom right corner.</li>
-      <li>Click the <strong>Prove</strong> button in the overlay to start the proving process.</li>
-      <li>After successful proving, you can close the browser window and the results will appear on this page.</li>
-    </ol>
-  </div>
-  <div class="plugin-buttons" id="buttonContainer"></div>
-
-  <!-- Console Section -->
-  <div class="console-section">
-    <div class="console-header">
-      <div class="console-title">Console Output</div>
-      <div style="display: flex; gap: 10px;">
-        <button class="btn-console" onclick="openExtensionLogs()" style="background: #6c757d;">View Extension
-          Logs</button>
-        <button class="btn-console" onclick="clearConsole()">Clear</button>
-      </div>
-    </div>
-    <div class="console-output" id="consoleOutput">
-      <div class="console-entry info">
-        <span class="console-timestamp">[INFO]</span>
-        <span class="console-message">💡 TLSNotary proving logs will appear here in real-time. You can also view them in
-          the extension console by clicking "View Extension Logs" above.</span>
-      </div>
-    </div>
-  </div>
-
-  <script>
-    console.log('Testing TLSNotary plugins...');
-
-    let allChecksPass = false;
-
-    // Console functionality
-    function addConsoleEntry(message, type = 'info') {
-      const consoleOutput = document.getElementById('consoleOutput');
-      const timestamp = new Date().toLocaleTimeString();
-
-      const entry = document.createElement('div');
-      entry.className = `console-entry ${type}`;
-
-      const timestampSpan = document.createElement('span');
-      timestampSpan.className = 'console-timestamp';
-      timestampSpan.textContent = `[${timestamp}]`;
-
-      const messageSpan = document.createElement('span');
-      messageSpan.className = 'console-message';
-      messageSpan.textContent = message;
-
-      entry.appendChild(timestampSpan);
-      entry.appendChild(messageSpan);
-      consoleOutput.appendChild(entry);
-
-      // Auto-scroll to bottom
-      consoleOutput.scrollTop = consoleOutput.scrollHeight;
-    }
-
-    function clearConsole() {
-      const consoleOutput = document.getElementById('consoleOutput');
-      consoleOutput.innerHTML = '';
-      addConsoleEntry('Console cleared', 'info');
-      // Re-add the tip
-      const tipEntry = document.createElement('div');
-      tipEntry.className = 'console-entry info';
-      tipEntry.innerHTML = '<span class="console-timestamp">[INFO]</span><span class="console-message">💡 TLSNotary proving logs will appear here in real-time.</span>';
-      consoleOutput.insertBefore(tipEntry, consoleOutput.firstChild);
-    }
-
-    function openExtensionLogs() {
-      // Open extensions page
-      window.open('chrome://extensions/', '_blank');
-      addConsoleEntry('Opening chrome://extensions/ - Find TLSNotary extension → click "service worker" → find "offscreen.html" → click "inspect"', 'info');
-    }
-
-    // Listen for logs from offscreen document
-    window.addEventListener('message', (event) => {
-      if (event.origin !== window.location.origin) return;
-
-      if (event.data?.type === 'TLSN_OFFSCREEN_LOG') {
-        addConsoleEntry(event.data.message, event.data.level);
-      }
-    });
-
-    // Initialize console with welcome message
-    window.addEventListener('load', () => {
-      addConsoleEntry('TLSNotary Plugin Demo initialized', 'success');
-    });
-
-    // Check browser compatibility
-    function checkBrowserCompatibility() {
-      const isChrome = /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor);
-      const isEdge = /Edg/.test(navigator.userAgent);
-      const isBrave = navigator.brave && typeof navigator.brave.isBrave === 'function';
-      const isChromium = /Chromium/.test(navigator.userAgent);
-
-      const isChromeBasedBrowser = isChrome || isEdge || isBrave || isChromium;
-
-      const checkDiv = document.getElementById('check-browser');
-      const warningDiv = document.getElementById('browser-warning');
-      const statusSpan = checkDiv.querySelector('.status');
-
-      if (isChromeBasedBrowser) {
-        checkDiv.className = 'check-item success';
-        statusSpan.className = 'status success';
-        statusSpan.textContent = '✅ Chrome-based browser detected';
-        return true;
-      } else {
-        checkDiv.className = 'check-item error';
-        statusSpan.className = 'status error';
-        statusSpan.textContent = '❌ Unsupported browser';
-        warningDiv.style.display = 'block';
-        return false;
-      }
-    }
-
-    // Check extension
-    async function checkExtension() {
-      const checkDiv = document.getElementById('check-extension');
-      const statusSpan = checkDiv.querySelector('.status');
-
-      // Wait a bit for tlsn to load if page just loaded
-      await new Promise(resolve => setTimeout(resolve, 1000));
-
-      if (typeof window.tlsn !== 'undefined') {
-        checkDiv.className = 'check-item success';
-        statusSpan.className = 'status success';
-        statusSpan.textContent = '✅ Extension installed';
-        return true;
-      } else {
-        checkDiv.className = 'check-item error';
-        statusSpan.className = 'status error';
-        statusSpan.innerHTML = '❌ Extension not found - <a href="chrome://extensions/" target="_blank">Install extension</a>';
-        return false;
-      }
-    }
-
-    // Check verifier server
-    async function checkVerifier() {
-      const checkDiv = document.getElementById('check-verifier');
-      const statusSpan = checkDiv.querySelector('.status');
-      const instructions = document.getElementById('verifier-instructions');
-
-      statusSpan.textContent = 'Checking...';
-      statusSpan.className = 'status checking';
-      checkDiv.className = 'check-item checking';
-
-      try {
-        const response = await fetch('http://localhost:7047/health');
-        if (response.ok && await response.text() === 'ok') {
-          checkDiv.className = 'check-item success';
-          statusSpan.className = 'status success';
-          statusSpan.textContent = '✅ Verifier running';
-          instructions.style.display = 'none';
-          return true;
-        } else {
-          throw new Error('Unexpected response');
-        }
-      } catch (error) {
-        checkDiv.className = 'check-item error';
-        statusSpan.className = 'status error';
-        statusSpan.textContent = '❌ Verifier not running';
-        instructions.style.display = 'block';
-        return false;
-      }
-    }
-
-    // Run all checks
-    async function runAllChecks() {
-      const browserOk = checkBrowserCompatibility();
-      if (!browserOk) {
-        allChecksPass = false;
-        return;
-      }
-
-      const extensionOk = await checkExtension();
-      const verifierOk = await checkVerifier();
-
-      allChecksPass = extensionOk && verifierOk;
-
-      updateButtonState();
-    }
-
-    // Update button state based on checks
-    function updateButtonState() {
-      const container = document.getElementById('buttonContainer');
-      const buttons = container.querySelectorAll('button');
-
-      buttons.forEach(button => {
-        button.disabled = !allChecksPass;
-        if (!allChecksPass) {
-          button.title = 'Please complete all system checks first';
-        } else {
-          button.title = '';
-        }
-      });
-    }
-
-    const plugins = {
-      twitter: {
-        name: 'Twitter profile Plugin',
-        file: 'twitter.js',
-        parseResult: (json) => {
-          return json.results[json.results.length - 1].value;
-        }
-      },
-      swissbank: {
-        name: 'Swiss Bank Plugin',
-        file: 'swissbank.js',
-        parseResult: (json) => {
-          return json.results[json.results.length - 1].value;
-        }
-      },
-      spotify: {
-        name: 'Spotify Plugin',
-        file: 'spotify.js',
-        parseResult: (json) => {
-          return json.results[json.results.length - 1].value;
-        }
-      }
-    };
-
-    async function runPlugin(pluginKey) {
-      const plugin = plugins[pluginKey];
-      const button = document.getElementById(`${pluginKey}Button`);
-
-      try {
-        addConsoleEntry(`🎬 Starting ${plugin.name} plugin...`, 'info');
-        console.log(`Running ${plugin.name} plugin...`);
-        button.disabled = true;
-        button.textContent = 'Running...';
-
-        const startTime = performance.now();
-        const pluginCode = await fetch(plugin.file).then(r => r.text());
-
-        addConsoleEntry('🔧 Executing plugin code...', 'info');
-        const result = await window.tlsn.execCode(pluginCode);
-        const executionTime = (performance.now() - startTime).toFixed(2);
-
-        const json = JSON.parse(result);
-
-        // Create result div
-        const resultDiv = document.createElement('div');
-        resultDiv.className = 'result';
-        resultDiv.innerHTML = plugin.parseResult(json);
-        document.body.appendChild(resultDiv);
-
-        // Create header
-        const header = document.createElement('h3');
-        header.textContent = `${plugin.name} Results:`;
-        document.body.appendChild(header);
-
-        // Create debug div
-        const debugDiv = document.createElement('div');
-        debugDiv.className = 'debug';
-        debugDiv.textContent = JSON.stringify(json.results, null, 2);
-        document.body.appendChild(debugDiv);
-
-        addConsoleEntry(`✅ ${plugin.name} completed successfully in ${executionTime}ms`, 'success');
-
-        // Remove the button after successful execution
-        button.remove();
-      } catch (err) {
-        console.error(err);
-
-        // Create error div
-        const errorDiv = document.createElement('pre');
-        errorDiv.style.color = 'red';
-        errorDiv.textContent = err.message;
-        document.body.appendChild(errorDiv);
-
-        button.textContent = `Run ${plugin.name}`;
-        button.disabled = false;
-      }
-    }
-
-    window.addEventListener('tlsn_loaded', () => {
-      console.log('TLSNotary client loaded, showing plugin buttons...');
-      const container = document.getElementById('buttonContainer');
-
-      Object.entries(plugins).forEach(([key, plugin]) => {
-        const button = document.createElement('button');
-        button.id = `${key}Button`;
-        button.textContent = `Run ${plugin.name}`;
-        button.onclick = () => runPlugin(key);
-        container.appendChild(button);
-      });
-
-      // Update button states after creating them
-      updateButtonState();
-    });
-
-    // Run checks on page load
-    window.addEventListener('load', () => {
-      setTimeout(() => {
-        runAllChecks();
-      }, 500);
-    });
-  </script>
-</body>
-
-</html>
--- a/packages/demo/src/App.css
+++ b/packages/demo/src/App.css
@@ -1225,4 +1225,34 @@ body {
 .resource-desc {
    color: rgba(255, 255, 255, 0.7);
    font-size: 0.875rem;
+}
+
+/* App Footer */
+.app-footer {
+    display: flex;
+    justify-content: center;
+    align-items: center;
+    gap: var(--spacing-lg);
+    padding: var(--spacing-xl) 0;
+    margin-top: var(--spacing-xl);
+    color: rgba(255, 255, 255, 0.7);
+    font-size: 0.875rem;
+}
+
+.footer-link {
+    color: rgba(255, 255, 255, 0.9);
+    text-decoration: none;
+    font-weight: 500;
+    transition: color 0.2s ease;
+}
+
+.footer-link:hover {
+    color: white;
+    text-decoration: underline;
+}
+
+.footer-version {
+    color: rgba(255, 255, 255, 0.6);
+    font-family: 'SF Mono', 'Monaco', 'Cascadia Code', monospace;
+    font-size: 0.8125rem;
 }
--- a/packages/demo/src/App.tsx
+++ b/packages/demo/src/App.tsx
@@ -280,6 +280,20 @@ export function App() {
                    onOpenExtensionLogs={handleOpenExtensionLogs}
                />
            </CollapsibleSection>
+
+            <footer className="app-footer">
+                <a
+                    href="https://github.com/tlsnotary/tlsn-extension/tree/main/packages/demo"
+                    target="_blank"
+                    rel="noopener noreferrer"
+                    className="footer-link"
+                >
+                    View source on GitHub
+                </a>
+                <span className="footer-version">v{__GIT_COMMIT_HASH__}</span>
+            </footer>
        </div>
    );
 }
+
+declare const __GIT_COMMIT_HASH__: string;
--- a/packages/demo/src/config.ts
+++ b/packages/demo/src/config.ts
@@ -2,10 +2,9 @@
 // Reads from Vite's import.meta.env (populated from .env files)

 const VERIFIER_HOST = (import.meta as any).env.VITE_VERIFIER_HOST || 'localhost:7047';
-const VERIFIER_PROTOCOL = (import.meta as any).env.VITE_VERIFIER_PROTOCOL || 'http';
-const PROXY_PROTOCOL = (import.meta as any).env.VITE_PROXY_PROTOCOL || 'ws';
+const SSL = (import.meta as any).env.VITE_SSL === 'true';

 export const config = {
-    verifierUrl: `${VERIFIER_PROTOCOL}://${VERIFIER_HOST}`,
-    getProxyUrl: (host: string) => `${PROXY_PROTOCOL}://${VERIFIER_HOST}/proxy?token=${host}`,
+    verifierUrl: `${SSL ? 'https' : 'http'}://${VERIFIER_HOST}`,
+    getProxyUrl: (host: string) => `${SSL ? 'wss' : 'ws'}://${VERIFIER_HOST}/proxy?token=${host}`,
 };
--- a/packages/demo/src/plugins.ts
+++ b/packages/demo/src/plugins.ts
@@ -28,4 +28,31 @@ export const plugins: Record<string, Plugin> = {
            return json.results[json.results.length - 1].value;
        },
    },
+    duolingo: {
+        name: 'Duolingo',
+        description: 'Prove your Duolingo language learning progress and achievements',
+        logo: '🦉',
+        file: '/plugins/duolingo.js',
+        parseResult: (json) => {
+            return json.results[json.results.length - 1].value;
+        },
+    },
+    // discord_dm: {
+    //     name: 'Discord DM',
+    //     description: 'Prove your Discord direct messages',
+    //     logo: '💬',
+    //     file: '/plugins/discord_dm.js',
+    //     parseResult: (json) => {
+    //         return json.results[json.results.length - 1].value;
+    //     },
+    // },
+    discord_profile: {
+        name: 'Discord Profile',
+        description: 'Prove your Discord profile information',
+        logo: '💬',
+        file: '/plugins/discord_profile.js',
+        parseResult: (json) => {
+            return json.results[json.results.length - 1].value;
+        },
+    },
 };
--- a/packages/demo/src/plugins/discord_dm.plugin.ts
+++ b/packages/demo/src/plugins/discord_dm.plugin.ts
@@ -0,0 +1,342 @@
+/// <reference types="@tlsn/plugin-sdk/src/globals" />
+
+// @ts-ignore - These will be replaced at build time by Vite's define option
+const VERIFIER_URL = VITE_VERIFIER_URL;
+// @ts-ignore
+const PROXY_URL_BASE = VITE_PROXY_URL;
+
+const api = 'discord.com';
+const ui = 'https://discord.com/channels/@me';
+
+const config = {
+    name: 'Discord DM Plugin',
+    description: 'This plugin will prove your Discord direct messages.',
+    requests: [
+        {
+            method: 'GET',
+            host: 'discord.com',
+            pathname: '/api/v9/users/@me/channels',
+            verifierUrl: VERIFIER_URL,
+        },
+        {
+            method: 'GET',
+            host: 'discord.com',
+            pathname: '/api/v9/channels/*/messages',
+            verifierUrl: VERIFIER_URL,
+        },
+    ],
+    urls: [
+        'https://discord.com/*',
+    ],
+};
+
+function getRelevantHeaderValues() {
+    const [header] = useHeaders(headers => {
+        return headers.filter(header =>
+            header.url.includes(`https://${api}/api/v9/users/@me`) ||
+            header.url.includes(`https://${api}/api/v9/channels`)
+        );
+    });
+
+    const authorization = header?.requestHeaders.find(header => header.name === 'authorization')?.value;
+
+    return { authorization };
+}
+
+async function fetchDMs() {
+    const { authorization } = getRelevantHeaderValues();
+
+    if (!authorization) return [];
+
+    try {
+        const headers = {
+            authorization: authorization,
+            Host: api,
+            'Accept-Encoding': 'identity',
+            Connection: 'close',
+        };
+
+        const response = await fetch(`https://${api}/api/v9/users/@me/channels`, {
+            method: 'GET',
+            headers: headers,
+        });
+
+        const channels = await response.json();
+
+        // Filter only DM channels (type 1)
+        return channels.filter((channel: any) => channel.type === 1).map((channel: any) => ({
+            id: channel.id,
+            name: channel.recipients?.[0]?.username || 'Unknown User',
+            avatar: channel.recipients?.[0]?.avatar,
+        }));
+    } catch (error) {
+        console.error('Error fetching DMs:', error);
+        return [];
+    }
+}
+
+async function onClick() {
+    const isRequestPending = useState('isRequestPending', false);
+    const selectedDMId = useState('selectedDMId', '');
+
+    if (isRequestPending || !selectedDMId) return;
+
+    setState('isRequestPending', true);
+
+    const { authorization } = getRelevantHeaderValues();
+
+    const headers = {
+        authorization: authorization,
+        Host: api,
+        'Accept-Encoding': 'identity',
+        Connection: 'close',
+    };
+
+    const resp = await prove(
+        {
+            url: `https://${api}/api/v9/channels/${selectedDMId}/messages?limit=50`,
+            method: 'GET',
+            headers: headers,
+        },
+        {
+            verifierUrl: VERIFIER_URL,
+            proxyUrl: PROXY_URL_BASE + api,
+            maxRecvData: 8000,
+            maxSentData: 2000,
+            handlers: [
+                { type: 'SENT', part: 'START_LINE', action: 'REVEAL' },
+                { type: 'RECV', part: 'BODY', action: 'REVEAL', params: { type: 'json', path: '[*].content' } },
+                { type: 'RECV', part: 'BODY', action: 'REVEAL', params: { type: 'json', path: '[*].author.username' } },
+                { type: 'RECV', part: 'BODY', action: 'REVEAL', params: { type: 'json', path: '[*].timestamp' } },
+            ]
+        }
+    );
+
+    setState('isRequestPending', false);
+    done(JSON.stringify(resp));
+}
+
+function selectDM(dmId: string) {
+    setState('selectedDMId', dmId);
+}
+
+function expandUI() {
+    setState('isMinimized', false);
+}
+
+function minimizeUI() {
+    setState('isMinimized', true);
+}
+
+function main() {
+    const { authorization } = getRelevantHeaderValues();
+    const header_has_necessary_values = !!authorization;
+
+    const isMinimized = useState('isMinimized', false);
+    const isRequestPending = useState('isRequestPending', false);
+    const selectedDMId = useState('selectedDMId', '');
+    const dmList = useState('dmList', []);
+
+    useEffect(() => {
+        openWindow(ui);
+    }, []);
+
+    useEffect(() => {
+        if (header_has_necessary_values && dmList.length === 0) {
+            fetchDMs().then(dms => setState('dmList', dms));
+        }
+    }, [header_has_necessary_values]);
+
+    if (isMinimized) {
+        return div({
+            style: {
+                position: 'fixed',
+                bottom: '20px',
+                right: '20px',
+                width: '60px',
+                height: '60px',
+                borderRadius: '50%',
+                backgroundColor: '#5865F2',
+                boxShadow: '0 4px 8px rgba(0,0,0,0.3)',
+                zIndex: '999999',
+                display: 'flex',
+                alignItems: 'center',
+                justifyContent: 'center',
+                cursor: 'pointer',
+                transition: 'all 0.3s ease',
+                fontSize: '24px',
+                color: 'white',
+            },
+            onclick: 'expandUI',
+        }, ['💬']);
+    }
+
+    return div({
+        style: {
+            position: 'fixed',
+            bottom: '0',
+            right: '8px',
+            width: '320px',
+            borderRadius: '8px 8px 0 0',
+            backgroundColor: 'white',
+            boxShadow: '0 -2px 10px rgba(0,0,0,0.1)',
+            zIndex: '999999',
+            fontSize: '14px',
+            fontFamily: '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif',
+            overflow: 'hidden',
+        },
+    }, [
+        div({
+            style: {
+                background: 'linear-gradient(135deg, #5865F2 0%, #4752C4 100%)',
+                padding: '12px 16px',
+                display: 'flex',
+                justifyContent: 'space-between',
+                alignItems: 'center',
+                color: 'white',
+            }
+        }, [
+            div({
+                style: {
+                    fontWeight: '600',
+                    fontSize: '16px',
+                }
+            }, ['Discord DM Proof']),
+            button({
+                style: {
+                    background: 'transparent',
+                    border: 'none',
+                    color: 'white',
+                    fontSize: '20px',
+                    cursor: 'pointer',
+                    padding: '0',
+                    width: '24px',
+                    height: '24px',
+                    display: 'flex',
+                    alignItems: 'center',
+                    justifyContent: 'center',
+                },
+                onclick: 'minimizeUI',
+            }, ['−'])
+        ]),
+
+        div({
+            style: {
+                padding: '20px',
+                backgroundColor: '#f8f9fa',
+            }
+        }, [
+            // Step 1: Login Status
+            div({
+                style: {
+                    marginBottom: '16px',
+                    padding: '12px',
+                    borderRadius: '6px',
+                    backgroundColor: header_has_necessary_values ? '#d4edda' : '#f8d7da',
+                    color: header_has_necessary_values ? '#155724' : '#721c24',
+                    border: `1px solid ${header_has_necessary_values ? '#c3e6cb' : '#f5c6cb'}`,
+                    fontWeight: '500',
+                },
+            }, [
+                header_has_necessary_values ? '✓ Discord token detected' : '⚠ No Discord token detected'
+            ]),
+
+            // Step 2: DM Selection
+            header_has_necessary_values && dmList.length > 0 ? (
+                div({
+                    style: {
+                        marginBottom: '16px',
+                    }
+                }, [
+                    div({
+                        style: {
+                            marginBottom: '8px',
+                            fontWeight: '600',
+                            color: '#333',
+                        }
+                    }, ['Select a DM:']),
+                    div({
+                        style: {
+                            maxHeight: '200px',
+                            overflowY: 'auto',
+                            border: '1px solid #ddd',
+                            borderRadius: '6px',
+                            backgroundColor: 'white',
+                        }
+                    }, dmList.map((dm: any) =>
+                        div({
+                            style: {
+                                padding: '10px 12px',
+                                cursor: 'pointer',
+                                borderBottom: '1px solid #f0f0f0',
+                                backgroundColor: selectedDMId === dm.id ? '#e3f2fd' : 'transparent',
+                                transition: 'background-color 0.2s',
+                            },
+                            onclick: () => selectDM(dm.id),
+                        }, [
+                            div({
+                                style: {
+                                    fontWeight: selectedDMId === dm.id ? '600' : '400',
+                                    color: '#333',
+                                }
+                            }, [dm.name])
+                        ])
+                    ))
+                ])
+            ) : null,
+
+            // Step 3: Notarize Button
+            header_has_necessary_values && selectedDMId ? (
+                button({
+                    style: {
+                        width: '100%',
+                        padding: '12px 24px',
+                        borderRadius: '6px',
+                        border: 'none',
+                        background: 'linear-gradient(135deg, #5865F2 0%, #4752C4 100%)',
+                        color: 'white',
+                        fontWeight: '600',
+                        fontSize: '15px',
+                        cursor: isRequestPending ? 'not-allowed' : 'pointer',
+                        transition: 'all 0.2s ease',
+                        boxShadow: '0 2px 4px rgba(0,0,0,0.1)',
+                        opacity: isRequestPending ? 0.5 : 1,
+                    },
+                    onclick: 'onClick',
+                }, [isRequestPending ? 'Generating Proof...' : 'Generate Proof'])
+            ) : header_has_necessary_values && dmList.length === 0 ? (
+                div({
+                    style: {
+                        textAlign: 'center',
+                        color: '#666',
+                        padding: '12px',
+                        backgroundColor: '#fff3cd',
+                        borderRadius: '6px',
+                        border: '1px solid #ffeaa7',
+                    }
+                }, ['Loading DMs...'])
+            ) : !header_has_necessary_values ? (
+                div({
+                    style: {
+                        textAlign: 'center',
+                        color: '#666',
+                        padding: '12px',
+                        backgroundColor: '#fff3cd',
+                        borderRadius: '6px',
+                        border: '1px solid #ffeaa7',
+                    }
+                }, ['Please login to Discord to continue'])
+            ) : null
+        ])
+    ]);
+}
+
+export default {
+    main,
+    onClick,
+    expandUI,
+    minimizeUI,
+    fetchDMs,
+    selectDM,
+    config,
+};
--- a/packages/demo/src/plugins/discord_profile.plugin.ts
+++ b/packages/demo/src/plugins/discord_profile.plugin.ts
@@ -1,24 +1,40 @@
+/// <reference types="@tlsn/plugin-sdk/src/globals" />
+
+// @ts-ignore - These will be replaced at build time by Vite's define option
+const VERIFIER_URL = VITE_VERIFIER_URL;
+// @ts-ignore
+const PROXY_URL_BASE = VITE_PROXY_URL;
+const api = 'discord.com';
+const ui = `https://${api}/channels/@me`;
+
 const config = {
-    name: 'Swiss Bank Prover',
-    description: 'This plugin will prove your Swiss Bank account balance.',
+    name: 'Discord Profile Plugin',
+    description: 'This plugin will prove your Discord username and ID.',
    requests: [
        {
            method: 'GET',
-            host: 'swissbank.tlsnotary.org',
-            pathname: '/balances',
-            verifierUrl: 'http://localhost:7047',
+            host: api,
+            pathname: '/api/v9/users/@me',
+            verifierUrl: VERIFIER_URL,
        },
    ],
    urls: [
-        'https://swissbank.tlsnotary.org/*',
+        `https://${api}/*`,
    ],
 };

-const host = 'swissbank.tlsnotary.org';
-const ui_path = '/account';
-const path = '/balances';
-const url = `https://${host}${path}`;
+function getRelevantHeaderValues() {
+    const [header] = useHeaders(headers => {
+        // console.log('All captured headers:', headers);
+        // Find the first header that contains an 'authorization' request header, regardless of URL
+        return [headers.find(h =>
+            h.requestHeaders.some(rh => rh.name === 'Authorization')
+        )];
+    });

+    const authorization = header?.requestHeaders.find(h => h.name === 'Authorization')?.value;
+    return { authorization };
+}

 async function onClick() {
    const isRequestPending = useState('isRequestPending', false);
@@ -26,52 +42,35 @@ async function onClick() {
    if (isRequestPending) return;

    setState('isRequestPending', true);
-    const [header] = useHeaders(headers => {
-        console.log('Intercepted headers:', headers);
-        return headers.filter(header => header.url.includes(`https://${host}`));
-    });
+
+    const { authorization } = getRelevantHeaderValues();

    const headers = {
-        'cookie': header.requestHeaders.find(header => header.name === 'Cookie')?.value,
-        Host: host,
+        authorization: authorization,
+        Host: api,
        'Accept-Encoding': 'identity',
        Connection: 'close',
    };

    const resp = await prove(
        {
-            url: url,
+            url: `https://${api}/api/v9/users/@me`,
            method: 'GET',
            headers: headers,
        },
        {
-            // Verifier URL: The notary server that verifies the TLS connection
-            verifierUrl: 'http://localhost:7047',
-            proxyUrl: 'ws://localhost:7047/proxy?token=swissbank.tlsnotary.org',
-            // proxyUrl: 'ws://localhost:55688',
-            maxRecvData: 460, // Maximum bytes to receive from server (response size limit)
-            maxSentData: 180,// Maximum bytes to send to server (request size limit)
-
-            // -----------------------------------------------------------------------
-            // HANDLERS
-            // -----------------------------------------------------------------------
-            // These handlers specify which parts of the TLS transcript to reveal
-            // in the proof. Unrevealed data is redacted for privacy.
+            verifierUrl: VERIFIER_URL,
+            proxyUrl: PROXY_URL_BASE + api,
+            maxRecvData: 2000,
+            maxSentData: 1000,
            handlers: [
-                { type: 'SENT', part: 'START_LINE', action: 'REVEAL', },
-                { type: 'RECV', part: 'START_LINE', action: 'REVEAL', },
-                { type: 'RECV', part: 'BODY', action: 'REVEAL', params: { type: 'json', path: 'account_id' }, },
-                { type: 'RECV', part: 'BODY', action: 'REVEAL', params: { type: 'json', path: 'accounts.CHF' }, },
-                // { type: 'RECV', part: 'ALL', action: 'REVEAL', params: { type: 'regex', regex: '"CHF"\s*:\s*"[^"]+"' }, },
-                // { type: 'RECV', part: 'ALL', action: 'REVEAL', params: { type: 'regex', regex: '"CHF"\s*:' }, },
-                // { type: 'RECV', part: 'ALL', action: 'REVEAL', params: { type: 'regex', regex: '"275_000_000"' }, },
+                { type: 'SENT', part: 'START_LINE', action: 'REVEAL' },
+                { type: 'RECV', part: 'BODY', action: 'REVEAL', params: { type: 'json', path: 'username' } },
+                { type: 'RECV', part: 'BODY', action: 'REVEAL', params: { type: 'json', path: 'id' } },
            ]
-
        }
    );

-    // Step 4: Complete plugin execution and return the proof result
-    // done() signals that the plugin has finished and passes the result back
    done(JSON.stringify(resp));
 }

@@ -82,23 +81,21 @@ function expandUI() {
 function minimizeUI() {
    setState('isMinimized', true);
 }
+
 function main() {
-    const [header] = useHeaders(
-        headers => headers
-            .filter(header => header.url.includes(`https://${host}${ui_path}`))
-    );
+    const { authorization } = getRelevantHeaderValues();

+    console.log('🚀🚀🚀🚀🚀🚀🚀 Authorization Header:', authorization);
+
+    const header_has_necessary_values = !!authorization;

-    const hasNecessaryHeader = header?.requestHeaders.some(h => h.name === 'Cookie');
    const isMinimized = useState('isMinimized', false);
    const isRequestPending = useState('isRequestPending', false);

-    // Run once on plugin load
    useEffect(() => {
-        openWindow(`https://${host}${ui_path}`);
+        openWindow(ui);
    }, []);

-    // If minimized, show floating action button
    if (isMinimized) {
        return div({
            style: {
@@ -108,7 +105,7 @@ function main() {
                width: '60px',
                height: '60px',
                borderRadius: '50%',
-                backgroundColor: '#4CAF50',
+                backgroundColor: '#5865F2',
                boxShadow: '0 4px 8px rgba(0,0,0,0.3)',
                zIndex: '999999',
                display: 'flex',
@@ -120,17 +117,15 @@ function main() {
                color: 'white',
            },
            onclick: 'expandUI',
-        }, ['🔐']);
+        }, ['💬']);
    }

-    // Render the plugin UI overlay
-    // This creates a fixed-position widget in the bottom-right corner
    return div({
        style: {
            position: 'fixed',
            bottom: '0',
            right: '8px',
-            width: '280px',
+            width: '320px',
            borderRadius: '8px 8px 0 0',
            backgroundColor: 'white',
            boxShadow: '0 -2px 10px rgba(0,0,0,0.1)',
@@ -140,10 +135,9 @@ function main() {
            overflow: 'hidden',
        },
    }, [
-        // Header with minimize button
        div({
            style: {
-                background: 'linear-gradient(135deg, #667eea 0%, #764ba2 100%)',
+                background: 'linear-gradient(135deg, #5865F2 0%, #4752C4 100%)',
                padding: '12px 16px',
                display: 'flex',
                justifyContent: 'space-between',
@@ -156,7 +150,7 @@ function main() {
                    fontWeight: '600',
                    fontSize: '16px',
                }
-            }, ['Swiss Bank Prover']),
+            }, ['Discord Profile Proof']),
            button({
                style: {
                    background: 'transparent',
@@ -175,51 +169,45 @@ function main() {
            }, ['−'])
        ]),

-        // Content area
        div({
            style: {
                padding: '20px',
                backgroundColor: '#f8f9fa',
            }
        }, [
-            // Status indicator showing whether cookie is detected
            div({
                style: {
                    marginBottom: '16px',
                    padding: '12px',
                    borderRadius: '6px',
-                    backgroundColor: header ? '#d4edda' : '#f8d7da',
-                    color: header ? '#155724' : '#721c24',
-                    border: `1px solid ${header ? '#c3e6cb' : '#f5c6cb'}`,
+                    backgroundColor: header_has_necessary_values ? '#d4edda' : '#f8d7da',
+                    color: header_has_necessary_values ? '#155724' : '#721c24',
+                    border: `1px solid ${header_has_necessary_values ? '#c3e6cb' : '#f5c6cb'}`,
                    fontWeight: '500',
                },
            }, [
-                hasNecessaryHeader ? '✓ Cookie detected' : '⚠ No Cookie detected'
+                header_has_necessary_values ? '✓ Discord token detected' : '⚠ Please login to Discord'
            ]),

-            // Conditional UI based on whether we have intercepted the headers
-            hasNecessaryHeader ? (
-                // Show prove button when not pending
+            header_has_necessary_values ? (
                button({
                    style: {
                        width: '100%',
                        padding: '12px 24px',
                        borderRadius: '6px',
                        border: 'none',
-                        background: 'linear-gradient(135deg, #667eea 0%, #764ba2 100%)',
+                        background: 'linear-gradient(135deg, #5865F2 0%, #4752C4 100%)',
                        color: 'white',
                        fontWeight: '600',
                        fontSize: '15px',
-                        cursor: 'pointer',
+                        cursor: isRequestPending ? 'not-allowed' : 'pointer',
                        transition: 'all 0.2s ease',
                        boxShadow: '0 2px 4px rgba(0,0,0,0.1)',
                        opacity: isRequestPending ? 0.5 : 1,
-                        cursor: isRequestPending ? 'not-allowed' : 'pointer',
                    },
                    onclick: 'onClick',
                }, [isRequestPending ? 'Generating Proof...' : 'Generate Proof'])
            ) : (
-                // Show login message
                div({
                    style: {
                        textAlign: 'center',
@@ -229,7 +217,7 @@ function main() {
                        borderRadius: '6px',
                        border: '1px solid #ffeaa7',
                    }
-                }, ['Please login to continue'])
+                }, ['Please login to Discord to continue'])
            )
        ])
    ]);
@@ -241,4 +229,4 @@ export default {
    expandUI,
    minimizeUI,
    config,
-};
+};
--- a/packages/demo/src/plugins/duolingo.plugin.ts
+++ b/packages/demo/src/plugins/duolingo.plugin.ts
@@ -1,12 +1,41 @@
+/// <reference types="@tlsn/plugin-sdk/src/globals" />
+
+// @ts-ignore - These will be replaced at build time by Vite's define option
+const VERIFIER_URL = VITE_VERIFIER_URL;
+// @ts-ignore
+const PROXY_URL_BASE = VITE_PROXY_URL;
+
+const api = 'www.duolingo.com';
+const ui = 'https://www.duolingo.com/';
+
 const config = {
-    name: 'Spotify Top Artist',
-    description: 'This plugin will prove your top artist on Spotify.',
+    name: 'Duolingo Plugin',
+    description: 'This plugin will prove your email and current streak on Duolingo.',
+    requests: [
+        {
+            method: 'GET',
+            host: 'www.duolingo.com',
+            pathname: '/2023-05-23/users/*',
+            verifierUrl: VERIFIER_URL,
+        },
+    ],
+    urls: [
+        'https://www.duolingo.com/*',
+    ],
 };

-const api = 'api.spotify.com';
-const ui = 'https://developer.spotify.com/';
-const top_artist_path = '/v1/me/top/artists?time_range=medium_term&limit=1';
+function getRelevantHeaderValues() {
+    const [header] = useHeaders(headers => {
+        return headers.filter(header => header.url.includes(`https://${api}/2023-05-23/users`));
+    });

+    const authorization = header?.requestHeaders.find(header => header.name === 'Authorization')?.value;
+
+    const traceId = header?.requestHeaders.find(header => header.name === 'X-Amzn-Trace-Id')?.value;
+    const user_id = traceId?.split('=')[1];
+
+    return { authorization, user_id };
+}

 async function onClick() {
    const isRequestPending = useState('isRequestPending', false);
@@ -15,41 +44,29 @@ async function onClick() {

    setState('isRequestPending', true);

-    const [header] = useHeaders(headers => {
-        return headers.filter(header => header.url.includes(`https://${api}`));
-    });
-
-    // console.log('Intercepted Spotify API request header:', header);
+    const { authorization, user_id } = getRelevantHeaderValues();

    const headers = {
-        authorization: header.requestHeaders.find(header => header.name === 'Authorization')?.value,
+        authorization: authorization,
        Host: api,
        'Accept-Encoding': 'identity',
        Connection: 'close',
    };

    const resp = await prove(
-        // -------------------------------------------------------------------------
        {
-            url: `https://${api}${top_artist_path}`,  // Target API endpoint
-            method: 'GET',                                        // HTTP method
-            headers: headers,                                     // Authentication headers
+            url: `https://${api}/2023-05-23/users/${user_id}?fields=longestStreak,username`,
+            method: 'GET',
+            headers: headers,
        },
        {
-            verifierUrl: 'http://localhost:7047',
-            proxyUrl: 'ws://localhost:7047/proxy?token=api.spotify.com',
+            verifierUrl: VERIFIER_URL,
+            proxyUrl: PROXY_URL_BASE + api,
            maxRecvData: 2400,
-            maxSentData: 600,
+            maxSentData: 1200,
            handlers: [
                { type: 'SENT', part: 'START_LINE', action: 'REVEAL', },
-                { type: 'RECV', part: 'START_LINE', action: 'REVEAL', },
-                {
-                    type: 'RECV', part: 'HEADERS', action: 'REVEAL', params: { key: 'date', },
-                },
-                {
-                    type: 'RECV', part: 'BODY', action: 'REVEAL', params: { type: 'json', path: 'items[0].name', },
-                    // type: 'RECV', part: 'BODY', action: 'REVEAL', params: { type: 'json', path: 'items[0].external_urls.spotify', },
-                },
+                { type: 'RECV', part: 'BODY', action: 'REVEAL', params: { type: 'json', path: 'longestStreak', }, },
            ]
        }
    );
@@ -65,8 +82,8 @@ function minimizeUI() {
 }

 function main() {
-    const [header] = useHeaders(headers => headers.filter(h => h.url.includes(`https://${api}`)));
-    // const [header] = useHeaders(headers => { return headers.filter(headers => headers.url.includes('https://api.spotify.com')) });
+    const { authorization, user_id } = getRelevantHeaderValues();
+    const header_has_necessary_values = authorization && user_id;

    const isMinimized = useState('isMinimized', false);
    const isRequestPending = useState('isRequestPending', false);
@@ -84,7 +101,7 @@ function main() {
                width: '60px',
                height: '60px',
                borderRadius: '50%',
-                backgroundColor: '#1DB954',
+                backgroundColor: '#58CC02',
                boxShadow: '0 4px 8px rgba(0,0,0,0.3)',
                zIndex: '999999',
                display: 'flex',
@@ -96,7 +113,7 @@ function main() {
                color: 'white',
            },
            onclick: 'expandUI',
-        }, ['🎵']);
+        }, ['🦉']);
    }

    return div({
@@ -116,7 +133,7 @@ function main() {
    }, [
        div({
            style: {
-                background: 'linear-gradient(135deg, #1DB954 0%, #1AA34A 100%)',
+                background: 'linear-gradient(135deg, #58CC02 0%, #4CAF00 100%)',
                padding: '12px 16px',
                display: 'flex',
                justifyContent: 'space-between',
@@ -129,7 +146,7 @@ function main() {
                    fontWeight: '600',
                    fontSize: '16px',
                }
-            }, ['Spotify Top Artist']),
+            }, ['Duolingo Streak']),
            button({
                style: {
                    background: 'transparent',
@@ -159,38 +176,34 @@ function main() {
                    marginBottom: '16px',
                    padding: '12px',
                    borderRadius: '6px',
-                    backgroundColor: header ? '#d4edda' : '#f8d7da',
-                    color: header ? '#155724' : '#721c24',
-                    border: `1px solid ${header ? '#c3e6cb' : '#f5c6cb'}`,
+                    backgroundColor: header_has_necessary_values ? '#d4edda' : '#f8d7da',
+                    color: header_has_necessary_values ? '#155724' : '#721c24',
+                    border: `1px solid ${header_has_necessary_values ? '#c3e6cb' : '#f5c6cb'}`,
                    fontWeight: '500',
                },
            }, [
-                header ? '✓ Api token detected' : '⚠ No API token detected'
+                header_has_necessary_values ? '✓ Api token detected' : '⚠ No API token detected'
            ]),

-            // Conditional UI based on whether we have intercepted the headers
-            header ? (
-                // Show prove button when not pending
+            header_has_necessary_values ? (
                button({
                    style: {
                        width: '100%',
                        padding: '12px 24px',
                        borderRadius: '6px',
                        border: 'none',
-                        background: 'linear-gradient(135deg, #1DB954 0%, #1AA34A 100%)',
+                        background: 'linear-gradient(135deg, #58CC02 0%, #4CAF00 100%)',
                        color: 'white',
                        fontWeight: '600',
                        fontSize: '15px',
-                        cursor: 'pointer',
+                        cursor: isRequestPending ? 'not-allowed' : 'pointer',
                        transition: 'all 0.2s ease',
                        boxShadow: '0 2px 4px rgba(0,0,0,0.1)',
                        opacity: isRequestPending ? 0.5 : 1,
-                        cursor: isRequestPending ? 'not-allowed' : 'pointer',
                    },
                    onclick: 'onClick',
                }, [isRequestPending ? 'Generating Proof...' : 'Generate Proof'])
            ) : (
-                // Show login message
                div({
                    style: {
                        textAlign: 'center',
@@ -200,7 +213,7 @@ function main() {
                        borderRadius: '6px',
                        border: '1px solid #ffeaa7',
                    }
-                }, ['Please login to Spotify to continue'])
+                }, ['Please login to Duolingo to continue'])
            )
        ])
    ]);
--- a/packages/demo/src/utils.ts
+++ b/packages/demo/src/utils.ts
@@ -1,3 +1,5 @@
+import { config } from './config';
+
 export function checkBrowserCompatibility(): boolean {
    const isChrome = /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor);
    const isEdge = /Edg/.test(navigator.userAgent);
@@ -15,7 +17,7 @@ export async function checkExtension(): Promise<boolean> {

 export async function checkVerifier(): Promise<boolean> {
    try {
-        const response = await fetch('http://localhost:7047/health');
+        const response = await fetch(`${config.verifierUrl}/health`);
        if (response.ok && (await response.text()) === 'ok') {
            return true;
        }
--- a/packages/demo/start.sh
+++ b/packages/demo/start.sh
@@ -1,31 +0,0 @@
-#!/bin/sh
-#
-# Demo Server Startup Script
-#
-# This script starts the verifier server and demo file server via Docker.
-# Note: Run generate.sh first to create plugin files in the generated/ directory.
-#
-# Usage:
-#   ./generate.sh && ./start.sh                      # Generate and start
-#   ./start.sh                                       # Start only (assumes generated/ exists)
-#   ./start.sh -d                                    # Start in detached mode
-
-set -e
-
-cd "$(dirname "$0")"
-
-# Check if generated directory exists
-if [ ! -d "generated" ]; then
-    echo "ERROR: generated/ directory not found!"
-    echo "Please run ./generate.sh first to create plugin files."
-    exit 1
-fi
-
-echo "========================================"
-echo "TLSNotary Demo Server"
-echo "========================================"
-echo "Starting Docker services..."
-echo "========================================"
-
-# Start docker compose
-docker compose up --build "$@"
--- a/packages/demo/twitter.js
+++ b/packages/demo/twitter.js
@@ -1,361 +0,0 @@
-// =============================================================================
-// PLUGIN CONFIGURATION
-// =============================================================================
-/**
- * The config object defines plugin metadata displayed to users.
- * This information appears in the plugin selection UI.
- */
-const config = {
-    name: 'X Profile Prover',
-    description: 'This plugin will prove your X.com profile.',
-    requests: [
-        {
-            method: 'GET',
-            host: 'api.x.com',
-            pathname: '/1.1/account/settings.json',
-            verifierUrl: 'http://localhost:7047',
-        },
-    ],
-    urls: [
-        'https://x.com/*',
-    ],
-};
-
-// =============================================================================
-// PROOF GENERATION CALLBACK
-// =============================================================================
-/**
- * This function is triggered when the user clicks the "Prove" button.
- * It extracts authentication headers from intercepted requests and generates
- * a TLSNotary proof using the unified prove() API.
- *
- * Flow:
- * 1. Get the intercepted X.com API request headers
- * 2. Extract authentication headers (Cookie, CSRF token, OAuth token, etc.)
- * 3. Call prove() with the request configuration and reveal handlers
- * 4. prove() internally:
- *    - Creates a prover connection to the verifier
- *    - Sends the HTTP request through the TLS prover
- *    - Captures the TLS transcript (sent/received bytes)
- *    - Parses the transcript with byte-level range tracking
- *    - Applies selective reveal handlers to show only specified data
- *    - Generates and returns the cryptographic proof
- * 5. Return the proof result to the caller via done()
- */
-async function onClick() {
-    const isRequestPending = useState('isRequestPending', false);
-
-    if (isRequestPending) return;
-
-    setState('isRequestPending', true);
-
-    // Step 1: Get the intercepted header from the X.com API request
-    // useHeaders() provides access to all intercepted HTTP request headers
-    // We filter for the specific X.com API endpoint we want to prove
-    const [header] = useHeaders(headers => {
-        return headers.filter(header => header.url.includes('https://api.x.com/1.1/account/settings.json'));
-    });
-
-    // Step 2: Extract authentication headers from the intercepted request
-    // These headers are required to authenticate with the X.com API
-    const headers = {
-        // Cookie: Session authentication token
-        'cookie': header.requestHeaders.find(header => header.name === 'Cookie')?.value,
-
-        // X-CSRF-Token: Cross-Site Request Forgery protection token
-        'x-csrf-token': header.requestHeaders.find(header => header.name === 'x-csrf-token')?.value,
-
-        // X-Client-Transaction-ID: Request tracking identifier
-        'x-client-transaction-id': header.requestHeaders.find(header => header.name === 'x-client-transaction-id')?.value,
-
-        // Host: Target server hostname
-        Host: 'api.x.com',
-
-        // Authorization: OAuth bearer token for API authentication
-        authorization: header.requestHeaders.find(header => header.name === 'authorization')?.value,
-
-        // Accept-Encoding: Must be 'identity' for TLSNotary (no compression)
-        // TLSNotary requires uncompressed data to verify byte-for-byte
-        'Accept-Encoding': 'identity',
-
-        // Connection: Use 'close' to complete the connection after one request
-        Connection: 'close',
-    };
-
-    // Step 3: Generate TLS proof using the unified prove() API
-    // This single function handles the entire proof generation pipeline
-    const resp = await prove(
-        // -------------------------------------------------------------------------
-        // REQUEST OPTIONS
-        // -------------------------------------------------------------------------
-        // Defines the HTTP request to be proven
-        {
-            url: 'https://api.x.com/1.1/account/settings.json',  // Target API endpoint
-            method: 'GET',                                        // HTTP method
-            headers: headers,                                     // Authentication headers
-        },
-
-        // -------------------------------------------------------------------------
-        // PROVER OPTIONS
-        // -------------------------------------------------------------------------
-        // Configures the TLS proof generation process
-        {
-            // Verifier URL: The notary server that verifies the TLS connection
-            // Must be running locally or accessible at this address
-            verifierUrl: 'http://localhost:7047',
-
-            // Proxy URL: WebSocket proxy that relays TLS data to the target server
-            // The token parameter specifies which server to connect to
-            proxyUrl: 'ws://localhost:7047/proxy?token=api.x.com',
-
-            // Maximum bytes to receive from server (response size limit)
-            maxRecvData: 4000,
-
-            // Maximum bytes to send to server (request size limit)
-            maxSentData: 2000,
-
-            // -----------------------------------------------------------------------
-            // HANDLERS
-            // -----------------------------------------------------------------------
-            // These handlers specify which parts of the TLS transcript to reveal
-            // in the proof. Unrevealed data is redacted for privacy.
-            handlers: [
-                // Reveal the request start line (GET /path HTTP/1.1)
-                // This proves the HTTP method and path were sent
-                {
-                    type: 'SENT',           // Direction: data sent to server
-                    part: 'START_LINE',     // Part: HTTP request line
-                    action: 'REVEAL',       // Action: include as plaintext in proof
-                },
-
-                // Reveal the response start line (HTTP/1.1 200 OK)
-                // This proves the server responded with status code 200
-                {
-                    type: 'RECV',           // Direction: data received from server
-                    part: 'START_LINE',     // Part: HTTP response line
-                    action: 'REVEAL',       // Action: include as plaintext in proof
-                },
-
-                // Reveal the 'date' header from the response
-                // This proves when the server generated the response
-                {
-                    type: 'RECV',           // Direction: data received from server
-                    part: 'HEADERS',        // Part: HTTP headers
-                    action: 'REVEAL',       // Action: include as plaintext in proof
-                    params: {
-                        key: 'date',          // Specific header to reveal
-                    },
-                },
-
-                // Reveal the 'screen_name' field from the JSON response body
-                // This proves the X.com username without revealing other profile data
-                {
-                    type: 'RECV',           // Direction: data received from server
-                    part: 'BODY',           // Part: HTTP response body
-                    action: 'REVEAL',       // Action: include as plaintext in proof
-                    params: {
-                        type: 'json',         // Body format: JSON
-                        path: 'screen_name',  // JSON field to reveal (top-level only)
-                    },
-                },
-            ]
-        }
-    );
-
-    // Step 4: Complete plugin execution and return the proof result
-    // done() signals that the plugin has finished and passes the result back
-    done(JSON.stringify(resp));
-}
-
-function expandUI() {
-    setState('isMinimized', false);
-}
-
-function minimizeUI() {
-    setState('isMinimized', true);
-}
-
-// =============================================================================
-// MAIN UI FUNCTION
-// =============================================================================
-/**
- * The main() function is called reactively whenever plugin state changes.
- * It returns a DOM structure that is rendered as the plugin UI.
- *
- * React-like Hooks Used:
- * - useHeaders(): Subscribes to intercepted HTTP request headers
- * - useEffect(): Runs side effects when dependencies change
- *
- * UI Flow:
- * 1. Check if X.com API request headers have been intercepted
- * 2. If not intercepted yet: Show "Please login" message
- * 3. If intercepted: Show "Profile detected" with a "Prove" button
- * 4. On first render: Open X.com in a new window to trigger login
- */
-function main() {
-    // Subscribe to intercepted headers for the X.com API endpoint
-    // This will reactively update whenever new headers matching the filter arrive
-    const [header] = useHeaders(headers => headers.filter(header => header.url.includes('https://api.x.com/1.1/account/settings.json')));
-    const isMinimized = useState('isMinimized', false);
-    const isRequestPending = useState('isRequestPending', false);
-
-    // Run once on plugin load: Open X.com in a new window
-    // The empty dependency array [] means this runs only once
-    // The opened window's requests will be intercepted by the plugin
-    useEffect(() => {
-        openWindow('https://x.com');
-    }, []);
-
-    // If minimized, show floating action button
-    if (isMinimized) {
-        return div({
-            style: {
-                position: 'fixed',
-                bottom: '20px',
-                right: '20px',
-                width: '60px',
-                height: '60px',
-                borderRadius: '50%',
-                backgroundColor: '#4CAF50',
-                boxShadow: '0 4px 8px rgba(0,0,0,0.3)',
-                zIndex: '999999',
-                display: 'flex',
-                alignItems: 'center',
-                justifyContent: 'center',
-                cursor: 'pointer',
-                transition: 'all 0.3s ease',
-                fontSize: '24px',
-                color: 'white',
-            },
-            onclick: 'expandUI',
-        }, ['🔐']);
-    }
-
-    // Render the plugin UI overlay
-    // This creates a fixed-position widget in the bottom-right corner
-    return div({
-        style: {
-            position: 'fixed',
-            bottom: '0',
-            right: '8px',
-            width: '280px',
-            borderRadius: '8px 8px 0 0',
-            backgroundColor: 'white',
-            boxShadow: '0 -2px 10px rgba(0,0,0,0.1)',
-            zIndex: '999999',
-            fontSize: '14px',
-            fontFamily: '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif',
-            overflow: 'hidden',
-        },
-    }, [
-        // Header with minimize button
-        div({
-            style: {
-                background: 'linear-gradient(135deg, #667eea 0%, #764ba2 100%)',
-                padding: '12px 16px',
-                display: 'flex',
-                justifyContent: 'space-between',
-                alignItems: 'center',
-                color: 'white',
-            }
-        }, [
-            div({
-                style: {
-                    fontWeight: '600',
-                    fontSize: '16px',
-                }
-            }, ['X Profile Prover']),
-            button({
-                style: {
-                    background: 'transparent',
-                    border: 'none',
-                    color: 'white',
-                    fontSize: '20px',
-                    cursor: 'pointer',
-                    padding: '0',
-                    width: '24px',
-                    height: '24px',
-                    display: 'flex',
-                    alignItems: 'center',
-                    justifyContent: 'center',
-                },
-                onclick: 'minimizeUI',
-            }, ['−'])
-        ]),
-
-        // Content area
-        div({
-            style: {
-                padding: '20px',
-                backgroundColor: '#f8f9fa',
-            }
-        }, [
-            // Status indicator showing whether profile is detected
-            div({
-                style: {
-                    marginBottom: '16px',
-                    padding: '12px',
-                    borderRadius: '6px',
-                    backgroundColor: header ? '#d4edda' : '#f8d7da',
-                    color: header ? '#155724' : '#721c24',
-                    border: `1px solid ${header ? '#c3e6cb' : '#f5c6cb'}`,
-                    fontWeight: '500',
-                },
-            }, [
-                header ? '✓ Profile detected' : '⚠ No profile detected'
-            ]),
-
-            // Conditional UI based on whether we have intercepted the headers
-            header ? (
-                // Show prove button when not pending
-                button({
-                    style: {
-                        width: '100%',
-                        padding: '12px 24px',
-                        borderRadius: '6px',
-                        border: 'none',
-                        background: 'linear-gradient(135deg, #667eea 0%, #764ba2 100%)',
-                        color: 'white',
-                        fontWeight: '600',
-                        fontSize: '15px',
-                        cursor: 'pointer',
-                        transition: 'all 0.2s ease',
-                        boxShadow: '0 2px 4px rgba(0,0,0,0.1)',
-                        opacity: isRequestPending ? 0.5 : 1,
-                        cursor: isRequestPending ? 'not-allowed' : 'pointer',
-                    },
-                    onclick: 'onClick',
-                }, [isRequestPending ? 'Generating Proof...' : 'Generate Proof'])
-            ) : (
-                // Show login message
-                div({
-                    style: {
-                        textAlign: 'center',
-                        color: '#666',
-                        padding: '12px',
-                        backgroundColor: '#fff3cd',
-                        borderRadius: '6px',
-                        border: '1px solid #ffeaa7',
-                    }
-                }, ['Please login to x.com to continue'])
-            )
-        ])
-    ]);
-}
-
-// =============================================================================
-// PLUGIN EXPORTS
-// =============================================================================
-/**
- * All plugins must export an object with these properties:
- * - main: The reactive UI rendering function
- * - onClick: Click handler callback for buttons
- * - config: Plugin metadata
- */
-export default {
-    main,
-    onClick,
-    expandUI,
-    minimizeUI,
-    config,
-};
--- a/packages/demo/vite.config.ts
+++ b/packages/demo/vite.config.ts
@@ -1,7 +1,20 @@
 import { defineConfig } from 'vite';
 import react from '@vitejs/plugin-react';
+import { execSync } from 'child_process';
+
+// Get git commit hash at build time
+const getGitCommitHash = () => {
+    try {
+        return execSync('git rev-parse --short HEAD').toString().trim();
+    } catch {
+        return 'unknown';
+    }
+};

 export default defineConfig({
+    define: {
+        __GIT_COMMIT_HASH__: JSON.stringify(getGitCommitHash()),
+    },
    plugins: [react()],
    build: {
        outDir: 'dist',
@@ -10,5 +23,8 @@ export default defineConfig({
    server: {
        port: 3000,
        open: true,
+        headers: {
+            'Cache-Control': 'no-store',
+        },
    },
 });
--- a/packages/extension/package.json
+++ b/packages/extension/package.json
@@ -1,6 +1,6 @@
 {
  "name": "extension",
-  "version": "0.1.0.1300",
+  "version": "0.1.0.1400",
  "license": "MIT",
  "repository": {
    "type": "git",
@@ -47,7 +47,6 @@
    "redux-thunk": "^2.4.2",
    "stream-browserify": "^3.0.0",
    "tailwindcss": "^3.3.3",
-    "tlsn-js": "^0.1.0-alpha.12.0",
    "tlsn-wasm": "./lib/tlsn-wasm-pkg/",
    "util": "^0.12.5"
  },
@@ -111,4 +110,4 @@
    "webpack-ext-reloader": "^1.1.12",
    "zip-webpack-plugin": "^4.0.1"
  }
-}
+}
--- a/packages/extension/src/manifest.json
+++ b/packages/extension/src/manifest.json
@@ -1,6 +1,6 @@
 {
  "manifest_version": 3,
-  "version": "0.1.0.13",
+  "version": "0.1.0.1400",
  "name": "TLSNotary",
  "description": "A Chrome extension for TLSNotary",
  "options_page": "options.html",
@@ -15,18 +15,38 @@
  },
  "content_scripts": [
    {
-      "matches": ["http://*/*", "https://*/*", "<all_urls>"],
-      "js": ["contentScript.bundle.js"],
-      "css": ["content.styles.css"]
+      "matches": [
+        "http://*/*",
+        "https://*/*",
+        "<all_urls>"
+      ],
+      "js": [
+        "contentScript.bundle.js"
+      ],
+      "css": [
+        "content.styles.css"
+      ]
    }
  ],
  "web_accessible_resources": [
    {
-      "resources": ["content.styles.css", "icon-128.png", "icon-34.png", "content.bundle.js", "*.wasm"],
-      "matches": ["http://*/*", "https://*/*", "<all_urls>"]
+      "resources": [
+        "content.styles.css",
+        "icon-128.png",
+        "icon-34.png",
+        "content.bundle.js",
+        "*.wasm"
+      ],
+      "matches": [
+        "http://*/*",
+        "https://*/*",
+        "<all_urls>"
+      ]
    }
  ],
-  "host_permissions": ["<all_urls>"],
+  "host_permissions": [
+    "<all_urls>"
+  ],
  "permissions": [
    "offscreen",
    "webRequest",
--- a/packages/extension/src/offscreen/SessionManager.ts
+++ b/packages/extension/src/offscreen/SessionManager.ts
@@ -1,6 +1,6 @@
 import Host, { Parser } from '@tlsn/plugin-sdk/src';
 import { ProveManager } from './ProveManager';
-import { Method } from 'tlsn-js';
+import type { Method } from '../../../tlsn-wasm-pkg/tlsn_wasm';
 import { DomJson, Handler, PluginConfig } from '@tlsn/plugin-sdk/src/types';
 import { processHandlers } from './rangeExtractor';
 import { logger } from '@tlsn/common';
--- a/packages/plugin-sdk/src/index.ts
+++ b/packages/plugin-sdk/src/index.ts
@@ -158,7 +158,7 @@ function makeUseHeaders(

    // Validate that filterFn returned an array
    if (result === undefined) {
-      throw new Error(`useHeaders: filter function returned undefined. expect an erray`);
+      throw new Error(`useHeaders: filter function returned undefined. expect an array`);
    }
    if (!Array.isArray(result)) {
      throw new Error(`useHeaders: filter function must return an array, got ${typeof result}. `);
--- a/packages/tlsn-wasm-pkg/package.json
+++ b/packages/tlsn-wasm-pkg/package.json
@@ -2,7 +2,7 @@
  "name": "tlsn-wasm",
  "type": "module",
  "description": "A core WebAssembly package for TLSNotary.",
-  "version": "0.1.0-alpha.13",
+  "version": "0.1.0-alpha.14",
  "license": "MIT OR Apache-2.0",
  "repository": {
    "type": "git",
--- a/packages/tlsn-wasm-pkg/tlsn_wasm.d.ts
+++ b/packages/tlsn-wasm-pkg/tlsn_wasm.d.ts
@@ -1,19 +1,8 @@
 /* tslint:disable */
 /* eslint-disable */
-/**
- * Initializes the module.
- */
-export function initialize(logging_config: LoggingConfig | null | undefined, thread_count: number): Promise<void>;
-/**
- * Starts the thread spawner on a dedicated worker thread.
- */
-export function startSpawner(): Promise<any>;
-export function web_spawn_start_worker(worker: number): void;
-export function web_spawn_recover_spawner(spawner: number): Spawner;
-export interface CrateLogFilter {
-    level: LoggingLevel;
-    name: string;
-}
+export type LoggingLevel = "Trace" | "Debug" | "Info" | "Warn" | "Error";
+
+export type SpanEvent = "New" | "Close" | "Active";

 export interface LoggingConfig {
    level: LoggingLevel | undefined;
@@ -21,15 +10,43 @@ export interface LoggingConfig {
    span_events: SpanEvent[] | undefined;
 }

-export type SpanEvent = "New" | "Close" | "Active";
+export interface CrateLogFilter {
+    level: LoggingLevel;
+    name: string;
+}

-export type LoggingLevel = "Trace" | "Debug" | "Info" | "Warn" | "Error";
+export type Body = JsonValue;

-export type NetworkSetting = "Bandwidth" | "Latency";
+export type Method = "GET" | "POST" | "PUT" | "DELETE";

-export interface Commit {
-    sent: { start: number; end: number }[];
-    recv: { start: number; end: number }[];
+export interface HttpRequest {
+    uri: string;
+    method: Method;
+    headers: Map<string, number[]>;
+    body: Body | undefined;
+}
+
+export interface HttpResponse {
+    status: number;
+    headers: [string, number[]][];
+}
+
+export type TlsVersion = "V1_2" | "V1_3";
+
+export interface TranscriptLength {
+    sent: number;
+    recv: number;
+}
+
+export interface ConnectionInfo {
+    time: number;
+    version: TlsVersion;
+    transcript_length: TranscriptLength;
+}
+
+export interface Transcript {
+    sent: number[];
+    recv: number[];
 }

 export interface PartialTranscript {
@@ -39,52 +56,25 @@ export interface PartialTranscript {
    recv_authed: { start: number; end: number }[];
 }

-export interface HttpResponse {
-    status: number;
-    headers: [string, number[]][];
+export interface Commit {
+    sent: { start: number; end: number }[];
+    recv: { start: number; end: number }[];
 }

-export type Body = JsonValue;
-
-export interface VerifierOutput {
-    server_name: string | undefined;
-    connection_info: ConnectionInfo;
-    transcript: PartialTranscript | undefined;
-}
-
-export interface ConnectionInfo {
-    time: number;
-    version: TlsVersion;
-    transcript_length: TranscriptLength;
-}
-
-export interface TranscriptLength {
-    sent: number;
-    recv: number;
-}
-
-export type TlsVersion = "V1_2" | "V1_3";
-
-export interface HttpRequest {
-    uri: string;
-    method: Method;
-    headers: Map<string, number[]>;
-    body: Body | undefined;
-}
-
-export type Method = "GET" | "POST" | "PUT" | "DELETE";
-
 export interface Reveal {
    sent: { start: number; end: number }[];
    recv: { start: number; end: number }[];
    server_identity: boolean;
 }

-export interface Transcript {
-    sent: number[];
-    recv: number[];
+export interface VerifierOutput {
+    server_name: string | undefined;
+    connection_info: ConnectionInfo;
+    transcript: PartialTranscript | undefined;
 }

+export type NetworkSetting = "Bandwidth" | "Latency";
+
 export interface ProverConfig {
    server_name: string;
    max_sent_data: number;
@@ -104,18 +94,14 @@ export interface VerifierConfig {
    max_recv_records_online: number | undefined;
 }

+
 export class Prover {
  free(): void;
  [Symbol.dispose](): void;
-  /**
-   * Returns the transcript.
-   */
-  transcript(): Transcript;
  /**
   * Send the HTTP request to the server.
   */
  send_request(ws_proxy_url: string, request: HttpRequest): Promise<HttpResponse>;
-  constructor(config: ProverConfig);
  /**
   * Set up the prover.
   *
@@ -127,10 +113,13 @@ export class Prover {
   * Reveals data to the verifier and finalizes the protocol.
   */
  reveal(reveal: Reveal): Promise<void>;
+  /**
+   * Returns the transcript.
+   */
+  transcript(): Transcript;
+  constructor(config: ProverConfig);
 }
-/**
- * Global spawner which spawns closures into web workers.
- */
+
 export class Spawner {
  private constructor();
  free(): void;
@@ -141,10 +130,10 @@ export class Spawner {
  run(url: string): Promise<void>;
  intoRaw(): number;
 }
+
 export class Verifier {
  free(): void;
  [Symbol.dispose](): void;
-  constructor(config: VerifierConfig);
  /**
   * Verifies the connection and finalizes the protocol.
   */
@@ -153,13 +142,29 @@ export class Verifier {
   * Connect to the prover.
   */
  connect(prover_url: string): Promise<void>;
+  constructor(config: VerifierConfig);
 }
+
 export class WorkerData {
  private constructor();
  free(): void;
  [Symbol.dispose](): void;
 }

+/**
+ * Initializes the module.
+ */
+export function initialize(logging_config: LoggingConfig | null | undefined, thread_count: number): Promise<void>;
+
+/**
+ * Starts the thread spawner on a dedicated worker thread.
+ */
+export function startSpawner(): Promise<any>;
+
+export function web_spawn_recover_spawner(spawner: number): Spawner;
+
+export function web_spawn_start_worker(worker: number): void;
+
 export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;

 export interface InitOutput {
@@ -182,12 +187,12 @@ export interface InitOutput {
  readonly web_spawn_recover_spawner: (a: number) => number;
  readonly web_spawn_start_worker: (a: number) => void;
  readonly ring_core_0_17_14__bn_mul_mont: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-  readonly wasm_bindgen__convert__closures_____invoke__h1221e6fae8f79e66: (a: number, b: number, c: any) => void;
-  readonly wasm_bindgen__closure__destroy__h77926bfd4964395c: (a: number, b: number) => void;
-  readonly wasm_bindgen__convert__closures_____invoke__ha226a7154e96c3a6: (a: number, b: number) => void;
-  readonly wasm_bindgen__closure__destroy__h667d3f209ba8d8c8: (a: number, b: number) => void;
-  readonly wasm_bindgen__convert__closures_____invoke__h0a1439cca01ee997: (a: number, b: number, c: any) => void;
-  readonly wasm_bindgen__convert__closures_____invoke__he1146594190fdf85: (a: number, b: number, c: any, d: any) => void;
+  readonly wasm_bindgen_d93ce3c58293cca3___convert__closures_____invoke______: (a: number, b: number) => void;
+  readonly wasm_bindgen_d93ce3c58293cca3___closure__destroy___dyn_core_a1e22386a1c4876a___ops__function__FnMut__web_sys_8bc8039b94004458___features__gen_CloseEvent__CloseEvent____Output_______: (a: number, b: number) => void;
+  readonly wasm_bindgen_d93ce3c58293cca3___convert__closures_____invoke___web_sys_8bc8039b94004458___features__gen_CloseEvent__CloseEvent_____: (a: number, b: number, c: any) => void;
+  readonly wasm_bindgen_d93ce3c58293cca3___convert__closures_____invoke___wasm_bindgen_d93ce3c58293cca3___JsValue_____: (a: number, b: number, c: any) => void;
+  readonly wasm_bindgen_d93ce3c58293cca3___closure__destroy___dyn_core_a1e22386a1c4876a___ops__function__FnMut__wasm_bindgen_d93ce3c58293cca3___JsValue____Output_______: (a: number, b: number) => void;
+  readonly wasm_bindgen_d93ce3c58293cca3___convert__closures_____invoke___wasm_bindgen_d93ce3c58293cca3___JsValue__wasm_bindgen_d93ce3c58293cca3___JsValue_____: (a: number, b: number, c: any, d: any) => void;
  readonly memory: WebAssembly.Memory;
  readonly __wbindgen_malloc: (a: number, b: number) => number;
  readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
@@ -201,6 +206,7 @@ export interface InitOutput {
 }

 export type SyncInitInput = BufferSource | WebAssembly.Module;
+
 /**
 * Instantiates the given `module`, which can either be bytes or
 * a precompiled `WebAssembly.Module`.
--- a/packages/tlsn-wasm-pkg/tlsn_wasm.js
+++ b/packages/tlsn-wasm-pkg/tlsn_wasm.js
--- a/packages/tlsn-wasm-pkg/tlsn_wasm_bg.wasm
+++ b/packages/tlsn-wasm-pkg/tlsn_wasm_bg.wasm
--- a/packages/tlsn-wasm-pkg/tlsn_wasm_bg.wasm.d.ts
+++ b/packages/tlsn-wasm-pkg/tlsn_wasm_bg.wasm.d.ts
@@ -19,12 +19,12 @@ export const startSpawner: () => any;
 export const web_spawn_recover_spawner: (a: number) => number;
 export const web_spawn_start_worker: (a: number) => void;
 export const ring_core_0_17_14__bn_mul_mont: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-export const wasm_bindgen__convert__closures_____invoke__h1221e6fae8f79e66: (a: number, b: number, c: any) => void;
-export const wasm_bindgen__closure__destroy__h77926bfd4964395c: (a: number, b: number) => void;
-export const wasm_bindgen__convert__closures_____invoke__ha226a7154e96c3a6: (a: number, b: number) => void;
-export const wasm_bindgen__closure__destroy__h667d3f209ba8d8c8: (a: number, b: number) => void;
-export const wasm_bindgen__convert__closures_____invoke__h0a1439cca01ee997: (a: number, b: number, c: any) => void;
-export const wasm_bindgen__convert__closures_____invoke__he1146594190fdf85: (a: number, b: number, c: any, d: any) => void;
+export const wasm_bindgen_d93ce3c58293cca3___convert__closures_____invoke______: (a: number, b: number) => void;
+export const wasm_bindgen_d93ce3c58293cca3___closure__destroy___dyn_core_a1e22386a1c4876a___ops__function__FnMut__web_sys_8bc8039b94004458___features__gen_CloseEvent__CloseEvent____Output_______: (a: number, b: number) => void;
+export const wasm_bindgen_d93ce3c58293cca3___convert__closures_____invoke___web_sys_8bc8039b94004458___features__gen_CloseEvent__CloseEvent_____: (a: number, b: number, c: any) => void;
+export const wasm_bindgen_d93ce3c58293cca3___convert__closures_____invoke___wasm_bindgen_d93ce3c58293cca3___JsValue_____: (a: number, b: number, c: any) => void;
+export const wasm_bindgen_d93ce3c58293cca3___closure__destroy___dyn_core_a1e22386a1c4876a___ops__function__FnMut__wasm_bindgen_d93ce3c58293cca3___JsValue____Output_______: (a: number, b: number) => void;
+export const wasm_bindgen_d93ce3c58293cca3___convert__closures_____invoke___wasm_bindgen_d93ce3c58293cca3___JsValue__wasm_bindgen_d93ce3c58293cca3___JsValue_____: (a: number, b: number, c: any, d: any) => void;
 export const memory: WebAssembly.Memory;
 export const __wbindgen_malloc: (a: number, b: number) => number;
 export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
--- a/packages/tlsn-wasm/build.sh
+++ b/packages/tlsn-wasm/build.sh
@@ -33,10 +33,10 @@ fi
 git checkout "${VERSION}" --force
 git reset --hard

+cd crates/wasm
 # Apply no-logging modification if requested
 if [ "$NO_LOGGING" = "--no-logging" ]; then
    echo "Applying no-logging configuration..."
-    cd crates/wasm
    
    # Add it to the wasm32 target section (after the section header)
    sed -i.bak '/^\[target\.\x27cfg(target_arch = "wasm32")\x27\.dependencies\]$/a\
@@ -45,11 +45,8 @@ tracing = { workspace = true, features = ["release_max_level_off"] }' Cargo.toml
    
    # Clean up backup file
    rm Cargo.toml.bak
-    
-    cd ../..
 fi

-cd crates/wasm
 cargo update
 ./build.sh
 cd ../../
--- a/packages/verifier/Cargo.lock
+++ b/packages/verifier/Cargo.lock
--- a/packages/verifier/Cargo.toml
+++ b/packages/verifier/Cargo.toml
@@ -5,7 +5,7 @@ edition = "2021"

 [dependencies]
 # TLSNotary dependency
-tlsn = { git = "https://github.com/tlsnotary/tlsn.git", tag = "v0.1.0-alpha.13" }
+tlsn = { git = "https://github.com/tlsnotary/tlsn.git", tag = "v0.1.0-alpha.14", features = ["mozilla-certs"] }

 # HTTP server framework
 axum = { version = "0.7", features = ["ws"] }
@@ -46,7 +46,7 @@ eyre = "0.6"
 tokio-util = { version = "0.7", features = ["compat"] }
 uuid = { version = "1.0", features = ["v4", "serde"] }
 regex = "1.12.2"
-rangeset = "0.2.0"
+rangeset = "0.4.0"

 [dev-dependencies]
 tokio-tungstenite = { version = "0.24", features = ["native-tls"] }
--- a/packages/verifier/README.md
+++ b/packages/verifier/README.md
@@ -13,7 +13,7 @@ A Rust-based HTTP server with WebSocket support for TLSNotary verification opera

 ## Dependencies

- **tlsn**: v0.1.0-alpha.13 from GitHub - TLSNotary verification library
+- **tlsn**: v0.1.0-alpha.14 from GitHub - TLSNotary verification library
 - **axum**: Modern web framework with WebSocket support
 - **tokio**: Async runtime with full features
 - **tokio-util**: Async utilities for stream compatibility
--- a/packages/verifier/src/main.rs
+++ b/packages/verifier/src/main.rs
@@ -12,7 +12,7 @@ use axum::{
    Router,
 };
 use axum_websocket::{WebSocket, WebSocketUpgrade};
-use rangeset::RangeSet;
+use rangeset::prelude::RangeSet;
 use serde::{Deserialize, Serialize};
 use std::collections::HashMap;
 use std::net::SocketAddr;
@@ -59,6 +59,7 @@ async fn main() {
    // Build router with routes
    let app = Router::new()
        .route("/health", get(health_handler))
+        .route("/info", get(info_handler))
        .route("/session", get(session_ws_handler))
        .route("/verifier", get(verifier_ws_handler))
        .route("/proxy", get(proxy_ws_handler))
@@ -75,6 +76,7 @@ async fn main() {

    info!("Server listening on http://{}", addr);
    info!("Health endpoint: http://{}/health", addr);
+    info!("Info endpoint: http://{}/info", addr);
    info!("Session WebSocket endpoint: ws://{}/session", addr);
    info!(
        "Verifier WebSocket endpoint: ws://{}/verifier?sessionId=<id>",
@@ -352,6 +354,28 @@ async fn health_handler() -> impl IntoResponse {
    "ok"
 }

+/// Info response structure
+#[derive(Debug, Serialize)]
+struct InfoResponse {
+    /// Package version from Cargo.toml
+    version: &'static str,
+    /// Git commit hash (from GIT_HASH env var, set by CI)
+    git_hash: String,
+    /// TLSNotary library version
+    tlsn_version: &'static str,
+}
+
+/// Info endpoint handler - returns server information as JSON
+pub(crate) async fn info_handler() -> impl IntoResponse {
+    let git_hash = std::env::var("GIT_HASH").unwrap_or_else(|_| "dev".to_string());
+
+    axum::Json(InfoResponse {
+        version: env!("CARGO_PKG_VERSION"),
+        git_hash,
+        tlsn_version: "0.1.0-alpha.14",
+    })
+}
+
 // WebSocket session handler for extension
 pub(crate) async fn session_ws_handler(
    ws: WebSocketUpgrade,
@@ -892,13 +916,13 @@ async fn run_verifier_task(
                "[{}] Sent data length: {} bytes (authed: {} bytes)",
                session_id,
                sent_bytes.len(),
-                transcript.sent_authed().iter().sum::<usize>(),
+                transcript.sent_authed().len(),
            );
            info!(
                "[{}] Received data length: {} bytes (authed: {} bytes)",
                session_id,
                recv_bytes.len(),
-                transcript.received_authed().iter().sum::<usize>()
+                transcript.received_authed().len()
            );

            // Wait for RevealConfig to be available (with polling and timeout)
--- a/packages/verifier/src/tests/integration_test.rs
+++ b/packages/verifier/src/tests/integration_test.rs
@@ -28,9 +28,11 @@ use tracing::info;
 use ws_stream_tungstenite::WsStream;

 use tlsn::{
-    config::ProtocolConfig,
-    connection::ServerName,
-    prover::{ProveConfig, Prover, ProverConfig},
+    config::{
+        prove::ProveConfig, prover::ProverConfig, tls::TlsClientConfig, tls_commit::TlsCommitConfig,
+    },
+    prover::Prover,
+    Session,
 };

 // ============================================================================
@@ -156,11 +158,11 @@ async fn webhook_handler(
 // ============================================================================

 async fn start_verifier_server(webhook_port: u16, verifier_port: u16) -> JoinHandle<()> {
-    // Create config with webhook for swapi.dev
+    // Create config with webhook for raw.githubusercontent.com
    let config_yaml = format!(
        r#"
 webhooks:
-  "swapi.dev":
+  "raw.githubusercontent.com":
    url: "http://127.0.0.1:{}"
    headers: {{}}
 "#,
@@ -176,14 +178,9 @@ webhooks:

    let app = Router::new()
        .route("/health", axum::routing::get(|| async { "ok" }))
-        .route(
-            "/session",
-            axum::routing::get(crate::session_ws_handler),
-        )
-        .route(
-            "/verifier",
-            axum::routing::get(crate::verifier_ws_handler),
-        )
+        .route("/info", axum::routing::get(crate::info_handler))
+        .route("/session", axum::routing::get(crate::session_ws_handler))
+        .route("/verifier", axum::routing::get(crate::verifier_ws_handler))
        .route("/proxy", axum::routing::get(crate::proxy_ws_handler))
        .layer(CorsLayer::permissive())
        .with_state(app_state);
@@ -385,15 +382,23 @@ async fn connect_wss(

 /// Helper function that performs MPC-TLS and HTTP request with a given proxy stream
 async fn run_prover_with_stream<S>(
-    prover: tlsn::prover::Prover<tlsn::prover::state::Setup>,
+    prover: Prover,
+    tls_commit_config: TlsCommitConfig,
+    tls_client_config: TlsClientConfig,
    proxy_stream: S,
 ) -> Result<(Vec<u8>, Vec<u8>), Box<dyn std::error::Error + Send + Sync>>
 where
    S: AsyncRead + AsyncWrite + Send + Unpin + 'static,
 {
-    // 5. Pass proxy connection into the prover for TLS
+    // 5. Start the TLS commitment protocol
+    let prover = prover
+        .commit(tls_commit_config)
+        .await
+        .map_err(|e| format!("Commitment failed: {}", e))?;
+
+    // 6. Pass proxy connection into the prover for TLS
    let (mpc_tls_connection, prover_fut) = prover
-        .connect(proxy_stream)
+        .connect(tls_client_config, proxy_stream)
        .await
        .map_err(|e| format!("TLS connect failed: {}", e))?;

@@ -405,18 +410,19 @@ where
    // Spawn the prover task
    let prover_task = tokio::spawn(prover_fut);

-    // 6. HTTP handshake
-    let (mut request_sender, connection) = hyper::client::conn::http1::handshake(mpc_tls_connection)
-        .await
-        .map_err(|e| format!("HTTP handshake failed: {}", e))?;
+    // 7. HTTP handshake
+    let (mut request_sender, connection) =
+        hyper::client::conn::http1::handshake(mpc_tls_connection)
+            .await
+            .map_err(|e| format!("HTTP handshake failed: {}", e))?;

    tokio::spawn(connection);

-    // 7. Send HTTP GET request
-    info!("[Prover] Sending GET /api/films/1/");
+    // 8. Send HTTP GET request
+    info!("[Prover] Sending GET /tlsnotary/tlsn/refs/heads/main/crates/server-fixture/server/src/data/1kb.json");
    let request = Request::builder()
-        .uri("/api/films/1/")
-        .header("Host", "swapi.dev")
+        .uri("/tlsnotary/tlsn/refs/heads/main/crates/server-fixture/server/src/data/1kb.json")
+        .header("Host", "raw.githubusercontent.com")
        .header("Accept", "application/json")
        .header("Connection", "close")
        .method("GET")
@@ -431,7 +437,7 @@ where
    info!("[Prover] Response status: {}", response.status());
    assert_eq!(response.status(), StatusCode::OK);

-    // 8. Wait for prover task to complete
+    // 9. Wait for prover task to complete
    let mut prover = prover_task
        .await
        .map_err(|e| format!("Prover task panicked: {}", e))?
@@ -446,24 +452,26 @@ where
        recv.len()
    );

-    // 9. Build reveal configuration (reveal everything)
-    let mut builder = ProveConfig::builder(prover.transcript());
-    builder.server_identity();
-    builder
+    // 10. Build proof configuration (reveal everything including server identity)
+    let mut prove_config = ProveConfig::builder(prover.transcript());
+    prove_config.server_identity();
+    prove_config
        .reveal_sent(&(0..sent.len()))
        .map_err(|e| format!("reveal_sent failed: {}", e))?;
-    builder
+    prove_config
        .reveal_recv(&(0..recv.len()))
        .map_err(|e| format!("reveal_recv failed: {}", e))?;
+    let prove_config = prove_config
+        .build()
+        .map_err(|e| format!("build proof failed: {}", e))?;

-    let config = builder.build().unwrap();
-
-    // 10. Send proof to verifier
+    // 11. Send proof to verifier
    info!("[Prover] Sending proof to verifier");
    prover
-        .prove(&config)
+        .prove(&prove_config)
        .await
        .map_err(|e| format!("prove failed: {}", e))?;
+
    prover
        .close()
        .await
@@ -491,50 +499,134 @@ async fn run_prover(
    // WsStream implements tokio::io::AsyncRead/AsyncWrite when inner implements futures_io traits
    let verifier_stream = WsStream::new(verifier_ws);

-    // 2. Create prover config
-    let prover_config = ProverConfig::builder()
-        .server_name(ServerName::Dns("swapi.dev".try_into().unwrap()))
-        .protocol_config(
-            ProtocolConfig::builder()
-                .max_sent_data(max_sent_data)
-                .max_recv_data(max_recv_data)
-                .build()
-                .unwrap(),
-        )
+    // 2. Create session with verifier stream
+    let session = Session::new(verifier_stream);
+    let (driver, mut handle) = session.split();
+
+    // Spawn the session driver in the background
+    let driver_task = tokio::spawn(driver);
+
+    // 3. Create TLS commit config for MPC protocol
+    use tlsn::config::tls_commit::{mpc::MpcTlsConfig, TlsCommitProtocolConfig};
+    let mpc_config = MpcTlsConfig::builder()
+        .max_sent_data(max_sent_data)
+        .max_recv_data(max_recv_data)
        .build()
-        .unwrap();
+        .map_err(|e| format!("Failed to build MPC TLS config: {}", e))?;
+
+    let tls_commit_config = TlsCommitConfig::builder()
+        .protocol(TlsCommitProtocolConfig::Mpc(mpc_config))
+        .build()
+        .map_err(|e| format!("Failed to build TLS commit config: {}", e))?;
+
+    // 4. Create prover config
+    let prover_config = ProverConfig::builder()
+        .build()
+        .map_err(|e| format!("Failed to build prover config: {}", e))?;

    info!("[Prover] Setting up MPC-TLS with verifier");

-    // 3. Create prover and perform setup with verifier
-    // tlsn expects futures_io traits, so we don't need compat() - WsStream already provides them
-    let prover = Prover::new(prover_config)
-        .setup(verifier_stream)
-        .await
-        .map_err(|e| format!("Prover setup failed: {}", e))?;
+    // 5. Create prover via handle
+    let prover = handle
+        .new_prover(prover_config)
+        .map_err(|e| format!("Failed to create prover: {}", e))?;
+
+    // 6. Create TLS client config with server name and root certs
+    use tlsn::{connection::ServerName, webpki::RootCertStore};
+    let tls_client_config = TlsClientConfig::builder()
+        .server_name(ServerName::Dns(
+            "raw.githubusercontent.com".try_into().unwrap(),
+        ))
+        .root_store(RootCertStore::mozilla())
+        .build()
+        .map_err(|e| format!("Failed to build TLS client config: {}", e))?;

    info!("[Prover] Connecting to proxy at {}", proxy_url);

-    // 4. Connect to proxy WebSocket (ws:// or wss://)
-    if proxy_url.starts_with("wss://") {
+    // 7. Connect to proxy WebSocket (ws:// or wss://) and run prover
+    let result = if proxy_url.starts_with("wss://") {
        let proxy_ws = connect_wss(&proxy_url).await?;
        info!("[Prover] Connected to proxy (wss)");
        let proxy_stream = WsStream::new(proxy_ws);
-        run_prover_with_stream(prover, proxy_stream).await
+        run_prover_with_stream(prover, tls_commit_config, tls_client_config, proxy_stream).await
    } else {
        let proxy_ws = connect_ws(&proxy_url).await?;
        info!("[Prover] Connected to proxy (ws)");
        let proxy_stream = WsStream::new(proxy_ws);
-        run_prover_with_stream(prover, proxy_stream).await
-    }
+        run_prover_with_stream(prover, tls_commit_config, tls_client_config, proxy_stream).await
+    };
+
+    // 8. Close the session handle
+    handle.close();
+
+    // 9. Wait for the driver to complete
+    driver_task
+        .await
+        .map_err(|e| format!("Driver task failed: {}", e))?
+        .map_err(|e| format!("Session driver error: {}", e))?;
+
+    result
 }

 // ============================================================================
-// Integration Test
+// Integration Tests
 // ============================================================================

+/// Test the /health endpoint
 #[tokio::test]
-async fn test_webhook_integration_with_swapi() {
+async fn health() {
+    let _ = tracing_subscriber::fmt()
+        .with_max_level(tracing::Level::INFO)
+        .try_init();
+
+    let verifier_handle = start_verifier_server(WEBHOOK_PORT + 1, VERIFIER_PORT + 1).await;
+    tokio::time::sleep(Duration::from_millis(100)).await;
+
+    let client = reqwest::Client::new();
+    let resp = client
+        .get(format!("http://127.0.0.1:{}/health", VERIFIER_PORT + 1))
+        .send()
+        .await
+        .expect("Failed to send request");
+
+    assert_eq!(resp.status(), StatusCode::OK);
+    assert_eq!(resp.text().await.unwrap(), "ok");
+
+    verifier_handle.abort();
+}
+
+/// Test the /info endpoint returns expected JSON structure
+#[tokio::test]
+async fn info() {
+    let _ = tracing_subscriber::fmt()
+        .with_max_level(tracing::Level::INFO)
+        .try_init();
+
+    let verifier_handle = start_verifier_server(WEBHOOK_PORT + 2, VERIFIER_PORT + 2).await;
+    tokio::time::sleep(Duration::from_millis(100)).await;
+
+    let client = reqwest::Client::new();
+    let resp = client
+        .get(format!("http://127.0.0.1:{}/info", VERIFIER_PORT + 2))
+        .send()
+        .await
+        .expect("Failed to send request");
+
+    assert_eq!(resp.status(), StatusCode::OK);
+
+    let info: Value = resp.json().await.expect("Failed to parse JSON");
+
+    // Verify required fields exist
+    info.get("version").expect("Missing version field");
+    info.get("git_hash").expect("Missing git_hash field");
+    info.get("tlsn_version")
+        .expect("Missing tlsn_version field");
+
+    verifier_handle.abort();
+}
+
+#[tokio::test]
+async fn test_webhook_integration_with_github() {
    // Initialize tracing for debugging
    let _ = tracing_subscriber::fmt()
        .with_max_level(tracing::Level::INFO)
@@ -573,7 +665,10 @@ async fn test_webhook_integration_with_swapi() {
        "ws://127.0.0.1:{}/verifier?sessionId={}",
        VERIFIER_PORT, session_id
    );
-    let proxy_url = format!("ws://127.0.0.1:{}/proxy?token=swapi.dev", VERIFIER_PORT);
+    let proxy_url = format!(
+        "ws://127.0.0.1:{}/proxy?token=raw.githubusercontent.com",
+        VERIFIER_PORT
+    );

    let prover_handle = tokio::spawn(async move {
        run_prover(verifier_ws_url, proxy_url, MAX_SENT_DATA, MAX_RECV_DATA).await
@@ -628,11 +723,11 @@ async fn test_webhook_integration_with_swapi() {
    // 8. Verify results contain expected data
    assert!(!results.is_empty(), "Should have handler results");

-    // Check that response contains Star Wars data
+    // Check that response contains expected JSON data
    let recv_str = String::from_utf8_lossy(&recv_transcript);
    assert!(
-        recv_str.contains("A New Hope") || recv_str.contains("Star Wars"),
-        "Response should contain Star Wars film data: {}",
+        recv_str.contains("software engineer") || recv_str.contains("Anytown"),
+        "Response should contain expected JSON data: {}",
        &recv_str[..recv_str.len().min(500)]
    );

@@ -651,8 +746,8 @@ async fn test_webhook_integration_with_swapi() {

    // Verify webhook payload structure
    assert_eq!(
-        payload["server_name"], "swapi.dev",
-        "server_name should be swapi.dev"
+        payload["server_name"], "raw.githubusercontent.com",
+        "server_name should be raw.githubusercontent.com"
    );
    assert!(payload["results"].is_array(), "results should be an array");
    assert!(
@@ -691,8 +786,8 @@ async fn test_webhook_integration_with_swapi() {
    // Verify transcript contains expected content
    let webhook_recv = payload["transcript"]["recv"].as_str().unwrap();
    assert!(
-        webhook_recv.contains("A New Hope") || webhook_recv.contains("title"),
-        "Webhook transcript should contain Star Wars film data"
+        webhook_recv.contains("software engineer") || webhook_recv.contains("Anytown"),
+        "Webhook transcript should contain expected JSON data"
    );

    info!("All assertions passed!");
--- a/packages/verifier/src/verifier.rs
+++ b/packages/verifier/src/verifier.rs
@@ -1,9 +1,11 @@
 use eyre::eyre;
 use tlsn::{
-    config::ProtocolConfigValidator,
+    config::{tls_commit::TlsCommitProtocolConfig, verifier::VerifierConfig},
    connection::{DnsName, ServerName},
    transcript::PartialTranscript,
-    verifier::{Verifier, VerifierConfig, VerifierOutput, VerifyConfig},
+    verifier::VerifierOutput,
+    webpki::RootCertStore,
+    Session,
 };
 use tokio::io::{AsyncRead, AsyncWrite};
 use tokio_util::compat::TokioAsyncReadCompatExt;
@@ -23,31 +25,103 @@ pub async fn verifier<T: AsyncWrite + AsyncRead + Send + Unpin + 'static>(
        max_sent_data, max_recv_data
    );

-    let config_validator = ProtocolConfigValidator::builder()
-        .max_sent_data(max_sent_data)
-        .max_recv_data(max_recv_data)
-        .build()
-        .unwrap();
+    // Create a session with the prover
+    let session = Session::new(socket.compat());
+    let (driver, mut handle) = session.split();

+    // Spawn the session driver to run in the background
+    let driver_task = tokio::spawn(driver);
+
+    // Create verifier config with Mozilla root certificates for TLS verification
    let verifier_config = VerifierConfig::builder()
-        .protocol_config_validator(config_validator)
+        .root_store(RootCertStore::mozilla())
        .build()
-        .unwrap();
+        .map_err(|e| eyre!("Failed to build verifier config: {}", e))?;

-    info!("verifier_config: {:?}", verifier_config);
-    let verifier = Verifier::new(verifier_config);
+    let verifier = handle
+        .new_verifier(verifier_config)
+        .map_err(|e| eyre!("Failed to create verifier: {}", e))?;

-    info!("Starting verification");
+    info!("Starting TLS commitment protocol");

-    let VerifierOutput {
-        server_name,
-        transcript,
-        ..
-    } = verifier
-        .verify(socket.compat(), &VerifyConfig::default())
+    // Run the commitment protocol
+    let verifier = verifier
+        .commit()
+        .await
+        .map_err(|e| eyre!("Commitment failed: {}", e))?;
+
+    // Check the proposed configuration
+    let request = verifier.request();
+    let TlsCommitProtocolConfig::Mpc(mpc_config) = request.protocol() else {
+        return Err(eyre!("Only MPC protocol is supported"));
+    };
+
+    // Validate the proposed configuration
+    if mpc_config.max_sent_data() > max_sent_data {
+        return Err(eyre!(
+            "Prover requested max_sent_data {} exceeds limit {}",
+            mpc_config.max_sent_data(),
+            max_sent_data
+        ));
+    }
+    if mpc_config.max_recv_data() > max_recv_data {
+        return Err(eyre!(
+            "Prover requested max_recv_data {} exceeds limit {}",
+            mpc_config.max_recv_data(),
+            max_recv_data
+        ));
+    }
+
+    info!(
+        "Accepting TLS commitment with max_sent={}, max_recv={}",
+        mpc_config.max_sent_data(),
+        mpc_config.max_recv_data()
+    );
+
+    // Accept and run the commitment protocol
+    let verifier = verifier
+        .accept()
+        .await
+        .map_err(|e| eyre!("Accept failed: {}", e))?
+        .run()
+        .await
+        .map_err(|e| eyre!("Run failed: {}", e))?;
+
+    info!("TLS connection complete, starting verification");
+
+    // Verify the proof
+    let verifier = verifier
+        .verify()
        .await
        .map_err(|e| eyre!("Verification failed: {}", e))?;

+    let (
+        VerifierOutput {
+            server_name,
+            transcript,
+            ..
+        },
+        verifier,
+    ) = verifier
+        .accept()
+        .await
+        .map_err(|e| eyre!("Accept verification failed: {}", e))?;
+
+    // Close the verifier
+    verifier
+        .close()
+        .await
+        .map_err(|e| eyre!("Failed to close verifier: {}", e))?;
+
+    // Close the session handle
+    handle.close();
+
+    // Wait for the driver to complete
+    driver_task
+        .await
+        .map_err(|e| eyre!("Driver task failed: {}", e))?
+        .map_err(|e| eyre!("Session driver error: {}", e))?;
+
    info!("verify() returned successfully - prover sent all data");

    let server_name =
Author	SHA1	Message	Date
Hendrik Eeckhaut	571631d78c	working on discord plugin	2026-01-21 09:58:15 +01:00
Hendrik Eeckhaut	99a466db02	wip	2026-01-21 09:58:15 +01:00
Hendrik Eeckhaut	2b72884192	Duolingo streak plugin (#215 )	2026-01-21 09:57:51 +01:00
Hendrik Eeckhaut	9b22e2af37	feat: add /info endpoint to verifier (#226 )	2026-01-21 09:56:15 +01:00
Hendrik Eeckhaut	bbe6e23d5f	fix: fix tests for alpha.14 + make sure the tests run in CI	2026-01-21 09:56:15 +01:00
Hendrik Eeckhaut	af9148ee4a	fix: removed old tlsn-js dependency (#224 )	2026-01-20 09:39:36 +01:00
Hendrik Eeckhaut	6331f03940	feat(demo): show git hash in footer (#222 )	2026-01-20 16:36:35 +08:00
tsukino	3b4554cd2a	chore: update lock file and extension version (#223 )	2026-01-20 16:29:22 +08:00
Hendrik Eeckhaut	367479fd77	feat: tlsn updated to 0.14 (#221 ) * tlsn updated to 0.14 * package lock * package lock	2026-01-19 17:24:32 +08:00
Hendrik Eeckhaut	d42db516c7	build: fix demo plugins build (#220 )	2026-01-14 16:55:22 +01:00
Hendrik Eeckhaut	1b776929d8	Demo fix (#219 ) build: Corrected verifier host + build cleanup (demo)	2026-01-14 14:30:52 +01:00