@0xpolygonid/js-sdk 1.33.0 → 1.33.3

package/dist/node/cjs/index.cjs

@@ -144,9 +144,16 @@ __export(index_exports, {
   RefreshServiceType: () => RefreshServiceType,
   RevocationStatusHandler: () => RevocationStatusHandler,
   SDK_EVENTS: () => SDK_EVENTS,
+  SOLANA_CHAIN_REF: () => SOLANA_CHAIN_REF,
   Scalar: () => Scalar,
   SearchError: () => SearchError,
   Sec256k1Provider: () => Sec256k1Provider,
+  SolanaNativePaymentRequest: () => SolanaNativePaymentRequest,
+  SolanaNativePaymentSchema: () => SolanaNativePaymentSchema,
+  SolanaPaymentInstruction: () => SolanaPaymentInstruction,
+  SolanaPaymentInstructionSchema: () => SolanaPaymentInstructionSchema,
+  SolanaSplPaymentRequest: () => SolanaSplPaymentRequest,
+  SolanaSplPaymentSchema: () => SolanaSplPaymentSchema,
   StandardJSONCredentialsQueryFilter: () => StandardJSONCredentialsQueryFilter,
   StateTransitionInputs: () => StateTransitionInputs,
   StateTransitionPubSignals: () => StateTransitionPubSignals,
@@ -170,7 +177,9 @@ __export(index_exports, {
   bigIntCompare: () => bigIntCompare,
   buildAccept: () => buildAccept,
   buildDIDFromEthPubKey: () => buildDIDFromEthPubKey,
+  buildEvmPayment: () => buildEvmPayment,
   buildFieldPath: () => buildFieldPath,
+  buildSolanaPayment: () => buildSolanaPayment,
   buildTreeState: () => buildTreeState,
   buildVerifierId: () => buildVerifierId,
   byteDecoder: () => byteDecoder,
@@ -268,6 +277,7 @@ __export(index_exports, {
   resolveDidDocument: () => resolveDidDocument,
   resolvePath: () => resolvePath,
   resolveVerificationMethods: () => resolveVerificationMethods,
+  serializeSolanaPaymentInstruction: () => serializeSolanaPaymentInstruction,
   strMTHex: () => strMTHex,
   stringByPath: () => stringByPath,
   subjectPositionIndex: () => subjectPositionIndex,
@@ -289,6 +299,7 @@ __export(index_exports, {
   verifyExpiresTime: () => verifyExpiresTime,
   verifyFieldValueInclusionNativeExistsSupport: () => verifyFieldValueInclusionNativeExistsSupport,
   verifyFieldValueInclusionV2: () => verifyFieldValueInclusionV2,
+  verifyIden3SolanaPaymentRequest: () => verifyIden3SolanaPaymentRequest,
   witnessBuilder: () => witnessBuilder
 });
 module.exports = __toCommonJS(index_exports);
@@ -380,8 +391,8 @@ var KMS = class {
 };
 
 // src/kms/key-providers/bjj-provider.ts
-var import_js_crypto3 = require("@iden3/js-crypto");
-var import_js_iden3_core2 = require("@iden3/js-iden3-core");
+var import_js_crypto6 = require("@iden3/js-crypto");
+var import_js_iden3_core8 = require("@iden3/js-iden3-core");
 
 // src/kms/store/abstract-key-store.ts
 var AbstractPrivateKeyStore = class {
@@ -775,629 +786,370 @@ var bigIntCompare = (a, b) => {
   return 0;
 };
 
-// src/kms/key-providers/bjj-provider.ts
-var BjjProvider = class {
-  /**
-   * key type that is handled by BJJ Provider
-   * @type {KmsKeyType}
-   */
-  keyType;
-  keyStore;
-  /**
-   * Creates an instance of BjjProvider.
-   * @param {KmsKeyType} keyType - kms key type
-   * @param {AbstractPrivateKeyStore} keyStore - key store for kms
-   */
-  constructor(keyType, keyStore) {
-    if (keyType !== "BJJ" /* BabyJubJub */) {
-      throw new Error("Key type must be BabyJubJub");
-    }
-    this.keyType = keyType;
-    this.keyStore = keyStore;
-  }
-  /**
-   * get all keys
-   * @returns list of keys
-   */
-  async list() {
-    const allKeysFromKeyStore = await this.keyStore.list();
-    return allKeysFromKeyStore.filter((key) => key.alias.startsWith(this.keyType));
+// src/utils/payments/solana.ts
+var import_borsh = require("borsh");
+var import_ed25519 = require("@noble/curves/ed25519");
+
+// src/verifiable/proof.ts
+var import_js_merkletree2 = require("@iden3/js-merkletree");
+
+// src/verifiable/constants.ts
+var VerifiableConstants = Object.freeze({
+  ERRORS: {
+    FiELD_IS_EMPTY: "fieldPath is empty",
+    CONTEXT_TYPE_IS_EMPTY: "ctxType is empty",
+    // ErrStateNotFound issuer state is genesis state.
+    IDENTITY_DOES_NOT_EXIST: "Identity does not exist",
+    IDENTITY_DOES_NOT_EXIST_CUSTOM_ERROR: "IdentityDoesNotExist",
+    NO_AUTH_CRED_FOUND: "no auth credentials found",
+    STATE_DOES_NOT_EXIST: "State does not exist",
+    STATE_DOES_NOT_EXIST_CUSTOM_ERROR: "StateDoesNotExist",
+    ROOT_DOES_NOT_EXIST: "Root does not exist",
+    ROOT_DOES_NOT_EXIST_CUSTOM_ERROR: "RootDoesNotExist",
+    // identity wallet
+    ID_WALLET_NO_CREDENTIAL_SATISFIED_QUERY: "no credential satisfied query",
+    ID_WALLET_SIGNER_IS_REQUIRED: "Ethereum signer is required to create Ethereum identities in order to transit state",
+    ID_WALLET_PROVER_IS_REQUIRED: "prover is required to generate proofs for non ethereum identities",
+    ID_WALLET_CORE_CLAIM_REQUIRED_IN_SIG_PROOF: "credential must have coreClaim representation in the signature proof",
+    ID_WALLET_CORE_CLAIM_REQUIRED_IN_ANY_PROOF: "credential must have coreClaim representation in proofs",
+    ID_WALLET_CORE_CLAIM_MISMATCH: "core claim representations is set in both proofs but they are not equal",
+    ID_WALLET_CORE_CLAIM_IS_NOT_SET: "core claim is not set in credential proofs",
+    ID_WALLET_PROFILE_OR_IDENTITY_NOT_FOUND: "profile or identity not found",
+    ID_WALLET_PROFILE_ALREADY_EXISTS: "profile with given nonce or verifier already exists",
+    ID_WALLET_PROFILE_ALREADY_EXISTS_VERIFIER_TAGS: "profile with given verifier and tags already exists",
+    ID_WALLET_ISSUER_AUTH_BJJ_CRED_MUST_HAVE_ANY_PROOF: "issuer auth credential must have proof",
+    ID_WALLET_ISSUER_AUTH_BJJ_CRED_MUST_HAVE_MTP_PROOF: "mtp is required for auth bjj key to issue new credentials",
+    // proof service
+    PROOF_SERVICE_NO_CREDENTIAL_FOR_IDENTITY_OR_PROFILE: "no credentials belong to did or its profiles",
+    PROOF_SERVICE_NO_CREDENTIAL_FOR_QUERY: "credential not found for query",
+    PROOF_SERVICE_PROFILE_GENESIS_DID_MISMATCH: "subject and auth profiles are not derived from the same did",
+    PROOF_SERVICE_NO_QUERIES_IN_ZKP_REQUEST: "no queries in zkp request",
+    // credential wallet
+    CREDENTIAL_WALLET_ALL_CREDENTIALS_ARE_REVOKED: "all claims are revoked"
+  },
+  CREDENTIAL_TYPE: {
+    // VerifiableCredential is a W3C verifiable credential type
+    W3C_VERIFIABLE_CREDENTIAL: "VerifiableCredential",
+    W3C_VERIFIABLE_PRESENTATION: "VerifiablePresentation"
+  },
+  CREDENTIAL_SUBJECT_PATH: "https://www.w3.org/2018/credentials#credentialSubject",
+  JSONLD_SCHEMA: {
+    // JSONLDSchemaIden3Credential is a schema for context with Iden3Credential type
+    IDEN3_CREDENTIAL: "https://schema.iden3.io/core/jsonld/iden3proofs.jsonld",
+    // JSONLDSchemaIden3DisplayMethod is a schema for context with Iden3BasicDisplayMethodV1 type
+    IDEN3_DISPLAY_METHOD: "https://schema.iden3.io/core/jsonld/displayMethod.jsonld",
+    // JSONLDSchemaW3CCredential2018 is a schema for context with VerifiableCredential type
+    W3C_CREDENTIAL_2018: "https://www.w3.org/2018/credentials/v1",
+    W3C_VC_DOCUMENT_2018: `{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","VerifiableCredential":{"@id":"https://www.w3.org/2018/credentials#VerifiableCredential","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","cred":"https://www.w3.org/2018/credentials#","sec":"https://w3id.org/security#","xsd":"http://www.w3.org/2001/XMLSchema#","credentialSchema":{"@id":"cred:credentialSchema","@type":"@id","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","cred":"https://www.w3.org/2018/credentials#","JsonSchemaValidator2018":"cred:JsonSchemaValidator2018"}},"credentialStatus":{"@id":"cred:credentialStatus","@type":"@id"},"credentialSubject":{"@id":"cred:credentialSubject","@type":"@id"},"evidence":{"@id":"cred:evidence","@type":"@id"},"expirationDate":{"@id":"cred:expirationDate","@type":"xsd:dateTime"},"holder":{"@id":"cred:holder","@type":"@id"},"issued":{"@id":"cred:issued","@type":"xsd:dateTime"},"issuer":{"@id":"cred:issuer","@type":"@id"},"issuanceDate":{"@id":"cred:issuanceDate","@type":"xsd:dateTime"},"proof":{"@id":"sec:proof","@type":"@id","@container":"@graph"},"refreshService":{"@id":"cred:refreshService","@type":"@id","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","cred":"https://www.w3.org/2018/credentials#","ManualRefreshService2018":"cred:ManualRefreshService2018"}},"termsOfUse":{"@id":"cred:termsOfUse","@type":"@id"},"validFrom":{"@id":"cred:validFrom","@type":"xsd:dateTime"},"validUntil":{"@id":"cred:validUntil","@type":"xsd:dateTime"}}},"VerifiablePresentation":{"@id":"https://www.w3.org/2018/credentials#VerifiablePresentation","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","cred":"https://www.w3.org/2018/credentials#","sec":"https://w3id.org/security#","holder":{"@id":"cred:holder","@type":"@id"},"proof":{"@id":"sec:proof","@type":"@id","@container":"@graph"},"verifiableCredential":{"@id":"cred:verifiableCredential","@type":"@id","@container":"@graph"}}},"EcdsaSecp256k1Signature2019":{"@id":"https://w3id.org/security#EcdsaSecp256k1Signature2019","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","xsd":"http://www.w3.org/2001/XMLSchema#","challenge":"sec:challenge","created":{"@id":"http://purl.org/dc/terms/created","@type":"xsd:dateTime"},"domain":"sec:domain","expires":{"@id":"sec:expiration","@type":"xsd:dateTime"},"jws":"sec:jws","nonce":"sec:nonce","proofPurpose":{"@id":"sec:proofPurpose","@type":"@vocab","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","assertionMethod":{"@id":"sec:assertionMethod","@type":"@id","@container":"@set"},"authentication":{"@id":"sec:authenticationMethod","@type":"@id","@container":"@set"}}},"proofValue":"sec:proofValue","verificationMethod":{"@id":"sec:verificationMethod","@type":"@id"}}},"EcdsaSecp256r1Signature2019":{"@id":"https://w3id.org/security#EcdsaSecp256r1Signature2019","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","xsd":"http://www.w3.org/2001/XMLSchema#","challenge":"sec:challenge","created":{"@id":"http://purl.org/dc/terms/created","@type":"xsd:dateTime"},"domain":"sec:domain","expires":{"@id":"sec:expiration","@type":"xsd:dateTime"},"jws":"sec:jws","nonce":"sec:nonce","proofPurpose":{"@id":"sec:proofPurpose","@type":"@vocab","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","assertionMethod":{"@id":"sec:assertionMethod","@type":"@id","@container":"@set"},"authentication":{"@id":"sec:authenticationMethod","@type":"@id","@container":"@set"}}},"proofValue":"sec:proofValue","verificationMethod":{"@id":"sec:verificationMethod","@type":"@id"}}},"Ed25519Signature2018":{"@id":"https://w3id.org/security#Ed25519Signature2018","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","xsd":"http://www.w3.org/2001/XMLSchema#","challenge":"sec:challenge","created":{"@id":"http://purl.org/dc/terms/created","@type":"xsd:dateTime"},"domain":"sec:domain","expires":{"@id":"sec:expiration","@type":"xsd:dateTime"},"jws":"sec:jws","nonce":"sec:nonce","proofPurpose":{"@id":"sec:proofPurpose","@type":"@vocab","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","assertionMethod":{"@id":"sec:assertionMethod","@type":"@id","@container":"@set"},"authentication":{"@id":"sec:authenticationMethod","@type":"@id","@container":"@set"}}},"proofValue":"sec:proofValue","verificationMethod":{"@id":"sec:verificationMethod","@type":"@id"}}},"RsaSignature2018":{"@id":"https://w3id.org/security#RsaSignature2018","@context":{"@version":1.1,"@protected":true,"challenge":"sec:challenge","created":{"@id":"http://purl.org/dc/terms/created","@type":"xsd:dateTime"},"domain":"sec:domain","expires":{"@id":"sec:expiration","@type":"xsd:dateTime"},"jws":"sec:jws","nonce":"sec:nonce","proofPurpose":{"@id":"sec:proofPurpose","@type":"@vocab","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","assertionMethod":{"@id":"sec:assertionMethod","@type":"@id","@container":"@set"},"authentication":{"@id":"sec:authenticationMethod","@type":"@id","@container":"@set"}}},"proofValue":"sec:proofValue","verificationMethod":{"@id":"sec:verificationMethod","@type":"@id"}}},"proof":{"@id":"https://w3id.org/security#proof","@type":"@id","@container":"@graph"}}}`,
+    IDEN3_PROOFS_DEFINITION_DOCUMENT: `{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","Iden3SparseMerkleTreeProof":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#Iden3SparseMerkleTreeProof","@context":{"@version":1.1,"@protected":true,"@propagate":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","@vocab":"https://schema.iden3.io/core/vocab/Iden3SparseMerkleTreeProof.md#","xsd":"http://www.w3.org/2001/XMLSchema#","mtp":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#SparseMerkleTreeProof","@type":"SparseMerkleTreeProof"},"coreClaim":{"@id":"coreClaim","@type":"xsd:string"},"issuerData":{"@id":"issuerData","@context":{"@version":1.1,"state":{"@id":"state","@context":{"txId":{"@id":"txId","@type":"xsd:string"},"blockTimestamp":{"@id":"blockTimestamp","@type":"xsd:integer"},"blockNumber":{"@id":"blockNumber","@type":"xsd:integer"},"rootOfRoots":{"@id":"rootOfRoots","@type":"xsd:string"},"claimsTreeRoot":{"@id":"claimsTreeRoot","@type":"xsd:string"},"revocationTreeRoot":{"@id":"revocationTreeRoot","@type":"xsd:string"},"authCoreClaim":{"@id":"authCoreClaim","@type":"xsd:string"},"value":{"@id":"value","@type":"xsd:string"}}}}}}},"SparseMerkleTreeProof":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#SparseMerkleTreeProof","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","smt-proof-vocab":"https://schema.iden3.io/core/vocab/SparseMerkleTreeProof.md#","xsd":"http://www.w3.org/2001/XMLSchema#","existence":{"@id":"smt-proof-vocab:existence","@type":"xsd:boolean"},"revocationNonce":{"@id":"smt-proof-vocab:revocationNonce","@type":"xsd:number"},"siblings":{"@id":"smt-proof-vocab:siblings","@container":"@list"},"nodeAux":"@nest","hIndex":{"@id":"smt-proof-vocab:hIndex","@nest":"nodeAux","@type":"xsd:string"},"hValue":{"@id":"smt-proof-vocab:hValue","@nest":"nodeAux","@type":"xsd:string"}}},"BJJSignature2021":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#BJJSignature2021","@context":{"@version":1.1,"@protected":true,"id":"@id","@vocab":"https://schema.iden3.io/core/vocab/BJJSignature2021.md#","@propagate":true,"type":"@type","xsd":"http://www.w3.org/2001/XMLSchema#","coreClaim":{"@id":"coreClaim","@type":"xsd:string"},"issuerData":{"@id":"issuerData","@context":{"@version":1.1,"authCoreClaim":{"@id":"authCoreClaim","@type":"xsd:string"},"mtp":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#SparseMerkleTreeProof","@type":"SparseMerkleTreeProof"},"revocationStatus":{"@id":"revocationStatus","@type":"@id"},"state":{"@id":"state","@context":{"@version":1.1,"rootOfRoots":{"@id":"rootOfRoots","@type":"xsd:string"},"claimsTreeRoot":{"@id":"claimsTreeRoot","@type":"xsd:string"},"revocationTreeRoot":{"@id":"revocationTreeRoot","@type":"xsd:string"},"value":{"@id":"value","@type":"xsd:string"}}}}},"signature":{"@id":"signature","@type":"https://w3id.org/security#multibase"},"domain":"https://w3id.org/security#domain","creator":{"@id":"creator","@type":"http://www.w3.org/2001/XMLSchema#string"},"challenge":"https://w3id.org/security#challenge","created":{"@id":"created","@type":"http://www.w3.org/2001/XMLSchema#dateTime"},"expires":{"@id":"https://w3id.org/security#expiration","@type":"http://www.w3.org/2001/XMLSchema#dateTime"},"nonce":"https://w3id.org/security#nonce","proofPurpose":{"@id":"https://w3id.org/security#proofPurpose","@type":"@vocab","@context":{"@protected":true,"id":"@id","type":"@type","assertionMethod":{"@id":"https://w3id.org/security#assertionMethod","@type":"@id","@container":"@set"},"authentication":{"@id":"https://w3id.org/security#authenticationMethod","@type":"@id","@container":"@set"},"capabilityInvocation":{"@id":"https://w3id.org/security#capabilityInvocationMethod","@type":"@id","@container":"@set"},"capabilityDelegation":{"@id":"https://w3id.org/security#capabilityDelegationMethod","@type":"@id","@container":"@set"},"keyAgreement":{"@id":"https://w3id.org/security#keyAgreementMethod","@type":"@id","@container":"@set"}}},"proofValue":{"@id":"https://w3id.org/security#proofValue","@type":"https://w3id.org/security#multibase"},"verificationMethod":{"@id":"https://w3id.org/security#verificationMethod","@type":"@id"}}},"Iden3ReverseSparseMerkleTreeProof":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#Iden3ReverseSparseMerkleTreeProof","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","iden3-reverse-sparse-merkle-tree-proof-vocab":"https://schema.iden3.io/core/vocab/Iden3ReverseSparseMerkleTreeProof.md#","xsd":"http://www.w3.org/2001/XMLSchema#","revocationNonce":{"@id":"iden3-reverse-sparse-merkle-tree-proof-vocab:revocationNonce","@type":"xsd:integer"},"statusIssuer":{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type"},"@id":"iden3-reverse-sparse-merkle-tree-proof-vocab:statusIssuer"}}},"Iden3commRevocationStatusV1.0":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#Iden3commRevocationStatusV1.0","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","iden3-comm-revocation-statusV1.0-vocab":"https://schema.iden3.io/core/vocab/Iden3commRevocationStatusV1.0.md#","xsd":"http://www.w3.org/2001/XMLSchema#","revocationNonce":{"@id":"iden3-comm-revocation-statusV1.0-vocab:revocationNonce","@type":"xsd:integer"},"statusIssuer":{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type"},"@id":"iden3-comm-revocation-statusV1.0-vocab:statusIssuer"}}},"Iden3OnchainSparseMerkleTreeProof2023":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#Iden3OnchainSparseMerkleTreeProof2023","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","iden3-onchain-sparse-merkle-tree-proof-2023-vocab":"https://schema.iden3.io/core/vocab/Iden3OnchainSparseMerkleTreeProof2023.md#","xsd":"http://www.w3.org/2001/XMLSchema#","revocationNonce":{"@id":"iden3-onchain-sparse-merkle-tree-proof-2023-vocab:revocationNonce","@type":"xsd:integer"},"statusIssuer":{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type"},"@id":"iden3-onchain-sparse-merkle-tree-proof-2023-vocab:statusIssuer"}}},"JsonSchema2023":"https://www.w3.org/ns/credentials#JsonSchema2023","Iden3RefreshService2023":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#Iden3RefreshService2023"}}`,
+    IDEN3_DISPLAY_METHOD_DEFINITION_DOCUMENT: `{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","displayMethod":{"@id":"https://schema.iden3.io/core/vocab/displayMethod.md#displayMethod","@type":"@id","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","Iden3BasicDisplayMethodV1":"https://schema.iden3.io/core/vocab/displayMethod.md#Iden3BasicDisplayMethodV1"}}}}`
+  },
+  // JsonSchema2023 JSON schema for verification of Iden3Credential
+  JSON_SCHEMA_VALIDATOR: "JsonSchema2023",
+  SERVICE_TYPE: {
+    // Iden3CommServiceType is service type for iden3comm protocol
+    IDEN3_COMM: "iden3-communication",
+    // PushNotificationServiceType is service type for delivering push notifications to identity
+    PUSH_NOTIFICATION: "push-notification"
+  },
+  AUTH: {
+    AUTH_BJJ_CREDENTIAL_HASH: "013fd3f623559d850fb5b02ff012d0e2",
+    AUTH_BJJ_CREDENTIAL_SCHEMA_JSON_URL: "https://schema.iden3.io/core/json/auth.json",
+    AUTH_BJJ_CREDENTIAL_SCHEMA_JSONLD_URL: "https://schema.iden3.io/core/jsonld/auth.jsonld",
+    AUTH_BJJ_CREDENTIAL_TYPE: "AuthBJJCredential",
+    AUTH_BJJ_CREDENTIAL_SCHEMA_JSON: `{"$schema":"http://json-schema.org/draft-07/schema#","$metadata":{"uris":{"jsonLdContext":"https://schema.iden3.io/core/jsonld/auth.jsonld","jsonSchema":"https://schema.iden3.io/core/json/auth.json"},"serialization":{"indexDataSlotA":"x","indexDataSlotB":"y"}},"type":"object","required":["@context","id","type","issuanceDate","credentialSubject","credentialSchema","credentialStatus","issuer"],"properties":{"@context":{"type":["string","array","object"]},"id":{"type":"string"},"type":{"type":["string","array"],"items":{"type":"string"}},"issuer":{"type":["string","object"],"format":"uri","required":["id"],"properties":{"id":{"type":"string","format":"uri"}}},"issuanceDate":{"type":"string","format":"date-time"},"expirationDate":{"type":"string","format":"date-time"},"credentialSchema":{"type":"object","required":["id","type"],"properties":{"id":{"type":"string","format":"uri"},"type":{"type":"string"}}},"credentialSubject":{"type":"object","required":["x","y"],"properties":{"id":{"title":"Credential Subject ID","type":"string","format":"uri"},"x":{"type":"string"},"y":{"type":"string"}}}}}`,
+    AUTH_BJJ_CREDENTIAL_SCHEMA_JSONLD: `{"@context":[{"@version":1.1,"@protected":true,"id":"@id","type":"@type","AuthBJJCredential":{"@id":"https://schema.iden3.io/core/jsonld/auth.jsonld#AuthBJJCredential","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","iden3_serialization":"iden3:v1:slotIndexA=x&slotIndexB=y","xsd":"http://www.w3.org/2001/XMLSchema#","auth-vocab":"https://schema.iden3.io/core/vocab/auth.md#","x":{"@id":"auth-vocab:x","@type":"xsd:positiveInteger"},"y":{"@id":"auth-vocab:y","@type":"xsd:positiveInteger"}}},"Iden3StateInfo2023":{"@id":"https://schema.iden3.io/core/jsonld/auth.jsonld#Iden3StateInfo2023","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","xsd":"http://www.w3.org/2001/XMLSchema#","@vocab":"https://schema.iden3.io/core/vocab/state-info.md#","@propagate":true,"stateContractAddress":{"@id":"stateContractAddress","@type":"xsd:string"},"published":{"@id":"published","@type":"xsd:boolean"},"info":{"@id":"info","@type":"@id","@context":{"@protected":true,"id":{"@id":"id","@type":"xsd:string"},"state":{"@id":"state","@type":"xsd:string"},"replacedByState":{"@id":"replacedByState","@type":"xsd:string"},"createdAtTimestamp":{"@id":"createdAtTimestamp","@type":"xsd:string"},"replacedAtTimestamp":{"@id":"replacedAtTimestamp","@type":"xsd:string"},"createdAtBlock":{"@id":"createdAtBlock","@type":"xsd:string"},"replacedAtBlock":{"@id":"replacedAtBlock","@type":"xsd:string"}}},"global":{"@id":"global","@type":"@id","@context":{"@protected":true,"sec":"https://w3id.org/security#","root":{"@id":"root","@type":"xsd:string"},"replacedByRoot":{"@id":"replacedByRoot","@type":"xsd:string"},"createdAtTimestamp":{"@id":"createdAtTimestamp","@type":"xsd:string"},"replacedAtTimestamp":{"@id":"replacedAtTimestamp","@type":"xsd:string"},"createdAtBlock":{"@id":"createdAtBlock","@type":"xsd:string"},"replacedAtBlock":{"@id":"replacedAtBlock","@type":"xsd:string"},"proof":{"@id":"sec:proof","@type":"@id","@container":"@graph"}}}}}}]}`
   }
+});
+var ProofType = /* @__PURE__ */ ((ProofType2) => {
+  ProofType2["BJJSignature"] = "BJJSignature2021";
+  ProofType2["Iden3SparseMerkleTreeProof"] = "Iden3SparseMerkleTreeProof";
+  return ProofType2;
+})(ProofType || {});
+var CredentialStatusType = /* @__PURE__ */ ((CredentialStatusType2) => {
+  CredentialStatusType2["SparseMerkleTreeProof"] = "SparseMerkleTreeProof";
+  CredentialStatusType2["Iden3ReverseSparseMerkleTreeProof"] = "Iden3ReverseSparseMerkleTreeProof";
+  CredentialStatusType2["Iden3commRevocationStatusV1"] = "Iden3commRevocationStatusV1.0";
+  CredentialStatusType2["Iden3OnchainSparseMerkleTreeProof2023"] = "Iden3OnchainSparseMerkleTreeProof2023";
+  return CredentialStatusType2;
+})(CredentialStatusType || {});
+var ProofPurpose = /* @__PURE__ */ ((ProofPurpose2) => {
+  ProofPurpose2["Authentication"] = "Authentication";
+  return ProofPurpose2;
+})(ProofPurpose || {});
+var MerklizedRootPosition = /* @__PURE__ */ ((MerklizedRootPosition4) => {
+  MerklizedRootPosition4["Index"] = "index";
+  MerklizedRootPosition4["Value"] = "value";
+  MerklizedRootPosition4["None"] = "";
+  return MerklizedRootPosition4;
+})(MerklizedRootPosition || {});
+var SubjectPosition = /* @__PURE__ */ ((SubjectPosition2) => {
+  SubjectPosition2["None"] = "";
+  SubjectPosition2["Index"] = "index";
+  SubjectPosition2["Value"] = "value";
+  return SubjectPosition2;
+})(SubjectPosition || {});
+var RefreshServiceType = /* @__PURE__ */ ((RefreshServiceType2) => {
+  RefreshServiceType2["Iden3RefreshService2023"] = "Iden3RefreshService2023";
+  return RefreshServiceType2;
+})(RefreshServiceType || {});
+var PaymentRequestDataType = /* @__PURE__ */ ((PaymentRequestDataType2) => {
+  PaymentRequestDataType2["Iden3PaymentRequestCryptoV1"] = "Iden3PaymentRequestCryptoV1";
+  PaymentRequestDataType2["Iden3PaymentRailsRequestV1"] = "Iden3PaymentRailsRequestV1";
+  PaymentRequestDataType2["Iden3PaymentRailsERC20RequestV1"] = "Iden3PaymentRailsERC20RequestV1";
+  PaymentRequestDataType2["Iden3PaymentRailsSolanaRequestV1"] = "Iden3PaymentRailsSolanaRequestV1";
+  PaymentRequestDataType2["Iden3PaymentRailsSolanaSPLRequestV1"] = "Iden3PaymentRailsSolanaSPLRequestV1";
+  return PaymentRequestDataType2;
+})(PaymentRequestDataType || {});
+var PaymentType = /* @__PURE__ */ ((PaymentType2) => {
+  PaymentType2["Iden3PaymentCryptoV1"] = "Iden3PaymentCryptoV1";
+  PaymentType2["Iden3PaymentRailsV1"] = "Iden3PaymentRailsV1";
+  PaymentType2["Iden3PaymentRailsERC20V1"] = "Iden3PaymentRailsERC20V1";
+  PaymentType2["Iden3PaymentRailsSolanaV1"] = "Iden3PaymentRailsSolanaV1";
+  PaymentType2["Iden3PaymentRailsSolanaSPLV1"] = "Iden3PaymentRailsSolanaSPLV1";
+  return PaymentType2;
+})(PaymentType || {});
+var SupportedPaymentProofType = /* @__PURE__ */ ((SupportedPaymentProofType2) => {
+  SupportedPaymentProofType2["EthereumEip712Signature2021"] = "EthereumEip712Signature2021";
+  SupportedPaymentProofType2["SolanaEd25519Signature2025"] = "SolanaEd25519Signature2025";
+  return SupportedPaymentProofType2;
+})(SupportedPaymentProofType || {});
+var SupportedCurrencies = /* @__PURE__ */ ((SupportedCurrencies2) => {
+  SupportedCurrencies2["ETH"] = "ETH";
+  SupportedCurrencies2["ETH_WEI"] = "ETHWEI";
+  SupportedCurrencies2["ETH_GWEI"] = "ETHGWEI";
+  SupportedCurrencies2["MATIC"] = "MATIC";
+  SupportedCurrencies2["POL"] = "POL";
+  return SupportedCurrencies2;
+})(SupportedCurrencies || {});
+var PaymentFeatures = /* @__PURE__ */ ((PaymentFeatures2) => {
+  PaymentFeatures2["EIP_2612"] = "EIP-2612";
+  return PaymentFeatures2;
+})(PaymentFeatures || {});
+var DisplayMethodType = /* @__PURE__ */ ((DisplayMethodType2) => {
+  DisplayMethodType2["Iden3BasicDisplayMethodV1"] = "Iden3BasicDisplayMethodV1";
+  return DisplayMethodType2;
+})(DisplayMethodType || {});
+var DEFAULT_CACHE_MAX_SIZE = 1e4;
+var SOLANA_CHAIN_REF = Object.freeze({
+  DEVNET: "EtWTRABZaYq6iMfeYKouRu166VU2xqa1",
+  TESTNET: "4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z",
+  MAINNET: "5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"
+});
+
+// src/verifiable/proof.ts
+var import_js_crypto3 = require("@iden3/js-crypto");
+var import_js_iden3_core2 = require("@iden3/js-iden3-core");
+var Iden3SparseMerkleTreeProof = class _Iden3SparseMerkleTreeProof {
+  type;
+  issuerData;
+  mtp;
+  coreClaim;
   /**
-   * generates a baby jub jub key from a seed phrase
-   * @param {Uint8Array} seed - byte array seed
-   * @returns kms key identifier
+   * Creates an instance of Iden3SparseMerkleTreeProof.
+   * @param {object} obj
    */
-  async newPrivateKeyFromSeed(seed) {
-    const newKey = new Uint8Array(32);
-    newKey.set(Uint8Array.from(seed), 0);
-    newKey.fill(seed.length, 32, 0);
-    const privateKey = new import_js_crypto3.PrivateKey(seed);
-    const publicKey = privateKey.public();
-    const kmsId = {
-      type: this.keyType,
-      id: keyPath(this.keyType, publicKey.hex())
-    };
-    await this.keyStore.importKey({ alias: kmsId.id, key: privateKey.hex() });
-    return kmsId;
+  constructor(obj) {
+    this.coreClaim = obj.coreClaim;
+    this.issuerData = obj.issuerData;
+    this.type = "Iden3SparseMerkleTreeProof" /* Iden3SparseMerkleTreeProof */;
+    this.mtp = obj.mtp;
   }
   /**
-   * Gets public key by kmsKeyId
    *
-   * @param {KmsKeyId} keyId - key identifier
-   */
-  async publicKey(keyId) {
-    const privateKey = await this.privateKey(keyId);
-    return privateKey.public().hex();
-  }
-  /**
-   * signs prepared payload of size,
-   * with a key id
    *
-   * @param {KmsKeyId} keyId  - key identifier
-   * @param {Uint8Array} data - data to sign (32 bytes)
-   * @returns Uint8Array signature
+   * @returns `json object in serialized presentation`
    */
-  async sign(keyId, data) {
-    if (data.length != 32) {
-      throw new Error("data to sign is too large");
-    }
-    const i = import_js_iden3_core2.BytesHelper.bytesToInt(data);
-    if (!(0, import_js_iden3_core2.checkBigIntInField)(i)) {
-      throw new Error("data to sign is too large");
-    }
-    const privateKey = await this.privateKey(keyId);
-    const signature = privateKey.signPoseidon(i);
-    return signature.compress();
-  }
-  async privateKey(keyId) {
-    const privateKeyHex = await this.keyStore.get({ alias: keyId.id });
-    return new import_js_crypto3.PrivateKey(import_js_crypto3.Hex.decodeString(privateKeyHex));
-  }
-  async verify(message, signatureHex, keyId) {
-    const publicKey = await this.publicKey(keyId);
-    return import_js_crypto3.PublicKey.newFromCompressed(hexToBytes(publicKey)).verifyPoseidon(
-      import_js_iden3_core2.BytesHelper.bytesToInt(message),
-      import_js_crypto3.Signature.newFromCompressed(hexToBytes(signatureHex))
-    );
+  toJSON() {
+    const issuerId = this.issuerData.id;
+    return {
+      issuerData: {
+        id: issuerId.string(),
+        state: {
+          ...this.issuerData.state,
+          rootOfRoots: this.issuerData.state.rootOfRoots.hex(),
+          claimsTreeRoot: this.issuerData.state.claimsTreeRoot.hex(),
+          revocationTreeRoot: this.issuerData.state.revocationTreeRoot.hex(),
+          value: this.issuerData.state.value.hex()
+        }
+      },
+      type: this.type,
+      coreClaim: this.coreClaim.hex(),
+      mtp: this.mtp.toJSON()
+    };
   }
-};
-
-// src/kms/key-providers/ed25519-provider.ts
-var import_ed25519 = require("@noble/curves/ed25519");
-var Ed25519Provider = class {
-  /**
-   * Creates an instance of Ed25519Provider.
-   * @param {KmsKeyType} keyType - kms key type
-   * @param {AbstractPrivateKeyStore} keyStore - key store for kms
-   */
-  constructor(keyType, _keyStore) {
-    this.keyType = keyType;
-    this._keyStore = _keyStore;
-  }
-  /**
-   * get all keys
-   * @returns list of keys
-   */
-  async list() {
-    const allKeysFromKeyStore = await this._keyStore.list();
-    return allKeysFromKeyStore.filter((key) => key.alias.startsWith(this.keyType));
-  }
-  /**
-   * generates a ed25519 key from a seed phrase
-   * @param {Uint8Array} seed - byte array seed
-   * @returns {Promise<KmsKeyId>} kms key identifier
-   */
-  async newPrivateKeyFromSeed(seed) {
-    if (seed.length !== 32) {
-      throw new Error("Seed should be 32 bytes");
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  static fromJSON(obj) {
+    let mtp;
+    if (obj?.mtp?.notEmpties && obj?.mtp?.depth && obj?.mtp?.siblings) {
+      const ne = obj?.mtp?.notEmpties;
+      const notEmpties = ne instanceof Uint8Array ? ne : new Uint8Array(Object.values(ne));
+      const siblingsHashes = obj?.mtp?.siblings.map(
+        (h) => import_js_merkletree2.Hash.fromString(JSON.stringify(h))
+      );
+      const allSiblings = import_js_merkletree2.Proof.buildAllSiblings(obj?.mtp?.depth, notEmpties, siblingsHashes);
+      let nodeAux = obj.mtp.nodeAux || obj.mtp.node_aux;
+      if (nodeAux) {
+        nodeAux = {
+          key: import_js_merkletree2.Hash.fromString(JSON.stringify(nodeAux.key)),
+          value: import_js_merkletree2.Hash.fromString(JSON.stringify(nodeAux.value))
+        };
+      }
+      mtp = new import_js_merkletree2.Proof({ existence: obj?.mtp.existence, nodeAux, siblings: allSiblings });
+    } else {
+      mtp = import_js_merkletree2.Proof.fromJSON(obj.mtp);
     }
-    const publicKey = import_ed25519.ed25519.getPublicKey(seed);
-    const kmsId = {
-      type: this.keyType,
-      id: keyPath(this.keyType, bytesToHex(publicKey))
-    };
-    await this._keyStore.importKey({
-      alias: kmsId.id,
-      key: bytesToHex(seed)
+    return new _Iden3SparseMerkleTreeProof({
+      coreClaim: new import_js_iden3_core2.Claim().fromHex(obj.coreClaim),
+      mtp,
+      issuerData: {
+        id: import_js_iden3_core2.DID.parse(obj.issuerData.id),
+        state: {
+          ...obj.issuerData.state,
+          rootOfRoots: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.rootOfRoots),
+          claimsTreeRoot: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.claimsTreeRoot),
+          revocationTreeRoot: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.revocationTreeRoot),
+          value: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.value)
+        }
+      }
     });
-    return kmsId;
-  }
-  /**
-   * Gets public key by kmsKeyId
-   * @param {KmsKeyId} keyId - key identifier
-   * @returns {Promise<string>} Public key as a hex string
-   */
-  async publicKey(keyId) {
-    const privateKeyHex = await this.privateKey(keyId);
-    const publicKey = import_ed25519.ed25519.getPublicKey(privateKeyHex);
-    return bytesToHex(publicKey);
   }
-  /**
-   * signs prepared payload of size,
-   * with a key id
-   * @param {KmsKeyId} keyId  - key identifier
-   * @param {Uint8Array} digest - data to sign (32 bytes)
-   * @returns {Promise<Uint8Array>} signature
-   */
-  async sign(keyId, digest) {
-    const privateKeyHex = await this.privateKey(keyId);
-    return import_ed25519.ed25519.sign(digest, privateKeyHex);
+};
+var BJJSignatureProof2021 = class _BJJSignatureProof2021 {
+  type;
+  issuerData;
+  signature;
+  coreClaim;
+  constructor(obj) {
+    this.type = "BJJSignature2021" /* BJJSignature */;
+    this.issuerData = obj.issuerData;
+    this.coreClaim = obj.coreClaim;
+    this.signature = obj.signature;
   }
   /**
-   * Verifies a signature for the given message and key identifier.
-   * @param digest - The message to verify the signature against.
-   * @param signatureHex - The signature to verify, as a hexadecimal string.
-   * @param keyId - The key identifier to use for verification.
-   * @returns A Promise that resolves to a boolean indicating whether the signature is valid.
+   * toJSON is a method to serialize BJJSignatureProof2021 to json
+   *
+   * @returns `json object in serialized presentation`
    */
-  async verify(digest, signatureHex, keyId) {
-    const publicKeyHex = await this.publicKey(keyId);
-    return import_ed25519.ed25519.verify(signatureHex, digest, publicKeyHex);
+  toJSON() {
+    return {
+      issuerData: {
+        id: this.issuerData.id.string(),
+        state: {
+          ...this.issuerData.state,
+          rootOfRoots: this.issuerData.state.rootOfRoots.hex(),
+          claimsTreeRoot: this.issuerData.state.claimsTreeRoot.hex(),
+          revocationTreeRoot: this.issuerData.state.revocationTreeRoot.hex(),
+          value: this.issuerData.state.value.hex()
+        },
+        mtp: this.issuerData.mtp.toJSON(),
+        authCoreClaim: this.issuerData.authCoreClaim.hex(),
+        credentialStatus: this.issuerData.credentialStatus
+      },
+      type: this.type,
+      coreClaim: this.coreClaim.hex(),
+      signature: import_js_crypto3.Hex.encodeString(this.signature.compress())
+    };
   }
   /**
-   * Retrieves the private key for a given keyId from the key store.
-   * @param {KmsKeyId} keyId - The identifier of the key to retrieve.
-   * @returns {Promise<string>} The private key associated with the keyId.
+   * fromJSON is a method to deserialize BJJSignatureProof2021 from json
+   * @param obj
    */
-  async privateKey(keyId) {
-    return this._keyStore.get({ alias: keyId.id });
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  static fromJSON(obj) {
+    return new _BJJSignatureProof2021({
+      issuerData: {
+        id: import_js_iden3_core2.DID.parse(obj.issuerData.id),
+        mtp: import_js_merkletree2.Proof.fromJSON(obj.issuerData.mtp),
+        state: {
+          ...obj.issuerData.state,
+          rootOfRoots: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.rootOfRoots),
+          claimsTreeRoot: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.claimsTreeRoot),
+          revocationTreeRoot: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.revocationTreeRoot),
+          value: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.value)
+        },
+        credentialStatus: obj.issuerData.credentialStatus,
+        authCoreClaim: new import_js_iden3_core2.Claim().fromHex(obj.issuerData.authCoreClaim)
+      },
+      coreClaim: new import_js_iden3_core2.Claim().fromHex(obj.coreClaim),
+      signature: import_js_crypto3.Signature.newFromCompressed(
+        Uint8Array.from(import_js_crypto3.Hex.decodeString(obj.signature)).slice(0, 64)
+      )
+    });
   }
 };
 
-// src/kms/key-providers/secp256k1-provider.ts
-var import_secp256k1 = require("@noble/curves/secp256k1");
+// src/verifiable/credential.ts
+var import_js_iden3_core5 = require("@iden3/js-iden3-core");
+var import_js_merkletree3 = require("@iden3/js-merkletree");
+var import_js_jsonld_merklization2 = require("@iden3/js-jsonld-merklization");
+var import_js_crypto5 = require("@iden3/js-crypto");
+
+// src/credentials/utils.ts
+var import_js_iden3_core3 = require("@iden3/js-iden3-core");
 var import_js_crypto4 = require("@iden3/js-crypto");
-var import_did_jwt = require("did-jwt");
-var Sec256k1Provider = class {
-  /**
-   * key type that is handled by BJJ Provider
-   * @type {KmsKeyType}
-   */
-  keyType;
-  _keyStore;
-  /**
-   * Creates an instance of BjjProvider.
-   * @param {KmsKeyType} keyType - kms key type
-   * @param {AbstractPrivateKeyStore} keyStore - key store for kms
-   */
-  constructor(keyType, keyStore) {
-    if (keyType !== "Secp256k1" /* Secp256k1 */) {
-      throw new Error("Key type must be Secp256k1");
-    }
-    this.keyType = keyType;
-    this._keyStore = keyStore;
-  }
-  /**
-   * get all keys
-   * @returns list of keys
-   */
-  async list() {
-    const allKeysFromKeyStore = await this._keyStore.list();
-    return allKeysFromKeyStore.filter((key) => key.alias.startsWith(this.keyType));
-  }
-  /**
-   * generates a baby jub jub key from a seed phrase
-   * @param {Uint8Array} seed - byte array seed
-   * @returns kms key identifier
-   */
-  async newPrivateKeyFromSeed(seed) {
-    if (seed.length !== 32) {
-      throw new Error("Seed should be 32 bytes");
-    }
-    const publicKey = import_secp256k1.secp256k1.getPublicKey(seed);
-    const kmsId = {
-      type: this.keyType,
-      id: keyPath(this.keyType, bytesToHex(publicKey))
-    };
-    await this._keyStore.importKey({
-      alias: kmsId.id,
-      key: bytesToHex(seed).padStart(64, "0")
-    });
-    return kmsId;
-  }
-  /**
-   * Gets public key by kmsKeyId
-   *
-   * @param {KmsKeyId} keyId - key identifier
-   */
-  async publicKey(keyId) {
-    const privateKeyHex = await this.privateKey(keyId);
-    const publicKey = import_secp256k1.secp256k1.getPublicKey(privateKeyHex, false);
-    return bytesToHex(publicKey);
-  }
-  /**
-   * Signs the given data using the private key associated with the specified key identifier.
-   * @param keyId - The key identifier to use for signing.
-   * @param data - The data to sign.
-   * @param opts - Signing options, such as the algorithm to use.
-   * @returns A Promise that resolves to the signature as a Uint8Array.
-   */
-  async sign(keyId, data, opts = { alg: "ES256K" }) {
-    const privateKeyHex = await this.privateKey(keyId);
-    const signatureBase64 = await (0, import_did_jwt.ES256KSigner)(
-      (0, import_did_jwt.hexToBytes)(privateKeyHex),
-      opts.alg === "ES256K-R"
-    )(data);
-    if (typeof signatureBase64 !== "string") {
-      throw new Error("signatureBase64 must be a string");
-    }
-    return base64UrlToBytes(signatureBase64);
+var getUserDIDFromCredential = (issuerDID, credential) => {
+  if (!credential.credentialSubject.id) {
+    return issuerDID;
   }
-  /**
-   * Verifies a signature for the given message and key identifier.
-   * @param message - The message to verify the signature against.
-   * @param signatureHex - The signature to verify, as a hexadecimal string.
-   * @param keyId - The key identifier to use for verification.
-   * @returns A Promise that resolves to a boolean indicating whether the signature is valid.
-   */
-  async verify(message, signatureHex, keyId) {
-    const publicKeyHex = await this.publicKey(keyId);
-    return import_secp256k1.secp256k1.verify(signatureHex, (0, import_js_crypto4.sha256)(message), publicKeyHex);
+  if (typeof credential.credentialSubject.id !== "string") {
+    throw new Error("credential subject `id` is not a string");
   }
-  async privateKey(keyId) {
-    return this._keyStore.get({ alias: keyId.id });
+  return import_js_iden3_core3.DID.parse(credential.credentialSubject.id);
+};
+var getKMSIdByAuthCredential = (credential) => {
+  if (!credential.type.includes("AuthBJJCredential")) {
+    throw new Error("can't sign with not AuthBJJCredential credential");
   }
+  const x = credential.credentialSubject["x"];
+  const y = credential.credentialSubject["y"];
+  const pb = new import_js_crypto4.PublicKey([BigInt(x), BigInt(y)]);
+  const kp = keyPath("BJJ" /* BabyJubJub */, pb.hex());
+  return { type: "BJJ" /* BabyJubJub */, id: kp };
 };
 
-// src/identity/identity-wallet.ts
-var import_js_iden3_core40 = require("@iden3/js-iden3-core");
-var import_js_crypto12 = require("@iden3/js-crypto");
-var import_js_merkletree29 = require("@iden3/js-merkletree");
-
-// src/identity/common.ts
-var import_js_iden3_core7 = require("@iden3/js-iden3-core");
-
-// src/verifiable/proof.ts
-var import_js_merkletree2 = require("@iden3/js-merkletree");
-
-// src/verifiable/constants.ts
-var VerifiableConstants = Object.freeze({
-  ERRORS: {
-    FiELD_IS_EMPTY: "fieldPath is empty",
-    CONTEXT_TYPE_IS_EMPTY: "ctxType is empty",
-    // ErrStateNotFound issuer state is genesis state.
-    IDENTITY_DOES_NOT_EXIST: "Identity does not exist",
-    IDENTITY_DOES_NOT_EXIST_CUSTOM_ERROR: "IdentityDoesNotExist",
-    NO_AUTH_CRED_FOUND: "no auth credentials found",
-    STATE_DOES_NOT_EXIST: "State does not exist",
-    STATE_DOES_NOT_EXIST_CUSTOM_ERROR: "StateDoesNotExist",
-    ROOT_DOES_NOT_EXIST: "Root does not exist",
-    ROOT_DOES_NOT_EXIST_CUSTOM_ERROR: "RootDoesNotExist",
-    // identity wallet
-    ID_WALLET_NO_CREDENTIAL_SATISFIED_QUERY: "no credential satisfied query",
-    ID_WALLET_SIGNER_IS_REQUIRED: "Ethereum signer is required to create Ethereum identities in order to transit state",
-    ID_WALLET_PROVER_IS_REQUIRED: "prover is required to generate proofs for non ethereum identities",
-    ID_WALLET_CORE_CLAIM_REQUIRED_IN_SIG_PROOF: "credential must have coreClaim representation in the signature proof",
-    ID_WALLET_CORE_CLAIM_REQUIRED_IN_ANY_PROOF: "credential must have coreClaim representation in proofs",
-    ID_WALLET_CORE_CLAIM_MISMATCH: "core claim representations is set in both proofs but they are not equal",
-    ID_WALLET_CORE_CLAIM_IS_NOT_SET: "core claim is not set in credential proofs",
-    ID_WALLET_PROFILE_OR_IDENTITY_NOT_FOUND: "profile or identity not found",
-    ID_WALLET_PROFILE_ALREADY_EXISTS: "profile with given nonce or verifier already exists",
-    ID_WALLET_PROFILE_ALREADY_EXISTS_VERIFIER_TAGS: "profile with given verifier and tags already exists",
-    ID_WALLET_ISSUER_AUTH_BJJ_CRED_MUST_HAVE_ANY_PROOF: "issuer auth credential must have proof",
-    ID_WALLET_ISSUER_AUTH_BJJ_CRED_MUST_HAVE_MTP_PROOF: "mtp is required for auth bjj key to issue new credentials",
-    // proof service
-    PROOF_SERVICE_NO_CREDENTIAL_FOR_IDENTITY_OR_PROFILE: "no credentials belong to did or its profiles",
-    PROOF_SERVICE_NO_CREDENTIAL_FOR_QUERY: "credential not found for query",
-    PROOF_SERVICE_PROFILE_GENESIS_DID_MISMATCH: "subject and auth profiles are not derived from the same did",
-    PROOF_SERVICE_NO_QUERIES_IN_ZKP_REQUEST: "no queries in zkp request",
-    // credential wallet
-    CREDENTIAL_WALLET_ALL_CREDENTIALS_ARE_REVOKED: "all claims are revoked"
-  },
-  CREDENTIAL_TYPE: {
-    // VerifiableCredential is a W3C verifiable credential type
-    W3C_VERIFIABLE_CREDENTIAL: "VerifiableCredential",
-    W3C_VERIFIABLE_PRESENTATION: "VerifiablePresentation"
-  },
-  CREDENTIAL_SUBJECT_PATH: "https://www.w3.org/2018/credentials#credentialSubject",
-  JSONLD_SCHEMA: {
-    // JSONLDSchemaIden3Credential is a schema for context with Iden3Credential type
-    IDEN3_CREDENTIAL: "https://schema.iden3.io/core/jsonld/iden3proofs.jsonld",
-    // JSONLDSchemaIden3DisplayMethod is a schema for context with Iden3BasicDisplayMethodV1 type
-    IDEN3_DISPLAY_METHOD: "https://schema.iden3.io/core/jsonld/displayMethod.jsonld",
-    // JSONLDSchemaW3CCredential2018 is a schema for context with VerifiableCredential type
-    W3C_CREDENTIAL_2018: "https://www.w3.org/2018/credentials/v1",
-    W3C_VC_DOCUMENT_2018: `{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","VerifiableCredential":{"@id":"https://www.w3.org/2018/credentials#VerifiableCredential","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","cred":"https://www.w3.org/2018/credentials#","sec":"https://w3id.org/security#","xsd":"http://www.w3.org/2001/XMLSchema#","credentialSchema":{"@id":"cred:credentialSchema","@type":"@id","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","cred":"https://www.w3.org/2018/credentials#","JsonSchemaValidator2018":"cred:JsonSchemaValidator2018"}},"credentialStatus":{"@id":"cred:credentialStatus","@type":"@id"},"credentialSubject":{"@id":"cred:credentialSubject","@type":"@id"},"evidence":{"@id":"cred:evidence","@type":"@id"},"expirationDate":{"@id":"cred:expirationDate","@type":"xsd:dateTime"},"holder":{"@id":"cred:holder","@type":"@id"},"issued":{"@id":"cred:issued","@type":"xsd:dateTime"},"issuer":{"@id":"cred:issuer","@type":"@id"},"issuanceDate":{"@id":"cred:issuanceDate","@type":"xsd:dateTime"},"proof":{"@id":"sec:proof","@type":"@id","@container":"@graph"},"refreshService":{"@id":"cred:refreshService","@type":"@id","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","cred":"https://www.w3.org/2018/credentials#","ManualRefreshService2018":"cred:ManualRefreshService2018"}},"termsOfUse":{"@id":"cred:termsOfUse","@type":"@id"},"validFrom":{"@id":"cred:validFrom","@type":"xsd:dateTime"},"validUntil":{"@id":"cred:validUntil","@type":"xsd:dateTime"}}},"VerifiablePresentation":{"@id":"https://www.w3.org/2018/credentials#VerifiablePresentation","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","cred":"https://www.w3.org/2018/credentials#","sec":"https://w3id.org/security#","holder":{"@id":"cred:holder","@type":"@id"},"proof":{"@id":"sec:proof","@type":"@id","@container":"@graph"},"verifiableCredential":{"@id":"cred:verifiableCredential","@type":"@id","@container":"@graph"}}},"EcdsaSecp256k1Signature2019":{"@id":"https://w3id.org/security#EcdsaSecp256k1Signature2019","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","xsd":"http://www.w3.org/2001/XMLSchema#","challenge":"sec:challenge","created":{"@id":"http://purl.org/dc/terms/created","@type":"xsd:dateTime"},"domain":"sec:domain","expires":{"@id":"sec:expiration","@type":"xsd:dateTime"},"jws":"sec:jws","nonce":"sec:nonce","proofPurpose":{"@id":"sec:proofPurpose","@type":"@vocab","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","assertionMethod":{"@id":"sec:assertionMethod","@type":"@id","@container":"@set"},"authentication":{"@id":"sec:authenticationMethod","@type":"@id","@container":"@set"}}},"proofValue":"sec:proofValue","verificationMethod":{"@id":"sec:verificationMethod","@type":"@id"}}},"EcdsaSecp256r1Signature2019":{"@id":"https://w3id.org/security#EcdsaSecp256r1Signature2019","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","xsd":"http://www.w3.org/2001/XMLSchema#","challenge":"sec:challenge","created":{"@id":"http://purl.org/dc/terms/created","@type":"xsd:dateTime"},"domain":"sec:domain","expires":{"@id":"sec:expiration","@type":"xsd:dateTime"},"jws":"sec:jws","nonce":"sec:nonce","proofPurpose":{"@id":"sec:proofPurpose","@type":"@vocab","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","assertionMethod":{"@id":"sec:assertionMethod","@type":"@id","@container":"@set"},"authentication":{"@id":"sec:authenticationMethod","@type":"@id","@container":"@set"}}},"proofValue":"sec:proofValue","verificationMethod":{"@id":"sec:verificationMethod","@type":"@id"}}},"Ed25519Signature2018":{"@id":"https://w3id.org/security#Ed25519Signature2018","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","xsd":"http://www.w3.org/2001/XMLSchema#","challenge":"sec:challenge","created":{"@id":"http://purl.org/dc/terms/created","@type":"xsd:dateTime"},"domain":"sec:domain","expires":{"@id":"sec:expiration","@type":"xsd:dateTime"},"jws":"sec:jws","nonce":"sec:nonce","proofPurpose":{"@id":"sec:proofPurpose","@type":"@vocab","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","assertionMethod":{"@id":"sec:assertionMethod","@type":"@id","@container":"@set"},"authentication":{"@id":"sec:authenticationMethod","@type":"@id","@container":"@set"}}},"proofValue":"sec:proofValue","verificationMethod":{"@id":"sec:verificationMethod","@type":"@id"}}},"RsaSignature2018":{"@id":"https://w3id.org/security#RsaSignature2018","@context":{"@version":1.1,"@protected":true,"challenge":"sec:challenge","created":{"@id":"http://purl.org/dc/terms/created","@type":"xsd:dateTime"},"domain":"sec:domain","expires":{"@id":"sec:expiration","@type":"xsd:dateTime"},"jws":"sec:jws","nonce":"sec:nonce","proofPurpose":{"@id":"sec:proofPurpose","@type":"@vocab","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","assertionMethod":{"@id":"sec:assertionMethod","@type":"@id","@container":"@set"},"authentication":{"@id":"sec:authenticationMethod","@type":"@id","@container":"@set"}}},"proofValue":"sec:proofValue","verificationMethod":{"@id":"sec:verificationMethod","@type":"@id"}}},"proof":{"@id":"https://w3id.org/security#proof","@type":"@id","@container":"@graph"}}}`,
-    IDEN3_PROOFS_DEFINITION_DOCUMENT: `{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","Iden3SparseMerkleTreeProof":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#Iden3SparseMerkleTreeProof","@context":{"@version":1.1,"@protected":true,"@propagate":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","@vocab":"https://schema.iden3.io/core/vocab/Iden3SparseMerkleTreeProof.md#","xsd":"http://www.w3.org/2001/XMLSchema#","mtp":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#SparseMerkleTreeProof","@type":"SparseMerkleTreeProof"},"coreClaim":{"@id":"coreClaim","@type":"xsd:string"},"issuerData":{"@id":"issuerData","@context":{"@version":1.1,"state":{"@id":"state","@context":{"txId":{"@id":"txId","@type":"xsd:string"},"blockTimestamp":{"@id":"blockTimestamp","@type":"xsd:integer"},"blockNumber":{"@id":"blockNumber","@type":"xsd:integer"},"rootOfRoots":{"@id":"rootOfRoots","@type":"xsd:string"},"claimsTreeRoot":{"@id":"claimsTreeRoot","@type":"xsd:string"},"revocationTreeRoot":{"@id":"revocationTreeRoot","@type":"xsd:string"},"authCoreClaim":{"@id":"authCoreClaim","@type":"xsd:string"},"value":{"@id":"value","@type":"xsd:string"}}}}}}},"SparseMerkleTreeProof":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#SparseMerkleTreeProof","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","sec":"https://w3id.org/security#","smt-proof-vocab":"https://schema.iden3.io/core/vocab/SparseMerkleTreeProof.md#","xsd":"http://www.w3.org/2001/XMLSchema#","existence":{"@id":"smt-proof-vocab:existence","@type":"xsd:boolean"},"revocationNonce":{"@id":"smt-proof-vocab:revocationNonce","@type":"xsd:number"},"siblings":{"@id":"smt-proof-vocab:siblings","@container":"@list"},"nodeAux":"@nest","hIndex":{"@id":"smt-proof-vocab:hIndex","@nest":"nodeAux","@type":"xsd:string"},"hValue":{"@id":"smt-proof-vocab:hValue","@nest":"nodeAux","@type":"xsd:string"}}},"BJJSignature2021":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#BJJSignature2021","@context":{"@version":1.1,"@protected":true,"id":"@id","@vocab":"https://schema.iden3.io/core/vocab/BJJSignature2021.md#","@propagate":true,"type":"@type","xsd":"http://www.w3.org/2001/XMLSchema#","coreClaim":{"@id":"coreClaim","@type":"xsd:string"},"issuerData":{"@id":"issuerData","@context":{"@version":1.1,"authCoreClaim":{"@id":"authCoreClaim","@type":"xsd:string"},"mtp":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#SparseMerkleTreeProof","@type":"SparseMerkleTreeProof"},"revocationStatus":{"@id":"revocationStatus","@type":"@id"},"state":{"@id":"state","@context":{"@version":1.1,"rootOfRoots":{"@id":"rootOfRoots","@type":"xsd:string"},"claimsTreeRoot":{"@id":"claimsTreeRoot","@type":"xsd:string"},"revocationTreeRoot":{"@id":"revocationTreeRoot","@type":"xsd:string"},"value":{"@id":"value","@type":"xsd:string"}}}}},"signature":{"@id":"signature","@type":"https://w3id.org/security#multibase"},"domain":"https://w3id.org/security#domain","creator":{"@id":"creator","@type":"http://www.w3.org/2001/XMLSchema#string"},"challenge":"https://w3id.org/security#challenge","created":{"@id":"created","@type":"http://www.w3.org/2001/XMLSchema#dateTime"},"expires":{"@id":"https://w3id.org/security#expiration","@type":"http://www.w3.org/2001/XMLSchema#dateTime"},"nonce":"https://w3id.org/security#nonce","proofPurpose":{"@id":"https://w3id.org/security#proofPurpose","@type":"@vocab","@context":{"@protected":true,"id":"@id","type":"@type","assertionMethod":{"@id":"https://w3id.org/security#assertionMethod","@type":"@id","@container":"@set"},"authentication":{"@id":"https://w3id.org/security#authenticationMethod","@type":"@id","@container":"@set"},"capabilityInvocation":{"@id":"https://w3id.org/security#capabilityInvocationMethod","@type":"@id","@container":"@set"},"capabilityDelegation":{"@id":"https://w3id.org/security#capabilityDelegationMethod","@type":"@id","@container":"@set"},"keyAgreement":{"@id":"https://w3id.org/security#keyAgreementMethod","@type":"@id","@container":"@set"}}},"proofValue":{"@id":"https://w3id.org/security#proofValue","@type":"https://w3id.org/security#multibase"},"verificationMethod":{"@id":"https://w3id.org/security#verificationMethod","@type":"@id"}}},"Iden3ReverseSparseMerkleTreeProof":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#Iden3ReverseSparseMerkleTreeProof","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","iden3-reverse-sparse-merkle-tree-proof-vocab":"https://schema.iden3.io/core/vocab/Iden3ReverseSparseMerkleTreeProof.md#","xsd":"http://www.w3.org/2001/XMLSchema#","revocationNonce":{"@id":"iden3-reverse-sparse-merkle-tree-proof-vocab:revocationNonce","@type":"xsd:integer"},"statusIssuer":{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type"},"@id":"iden3-reverse-sparse-merkle-tree-proof-vocab:statusIssuer"}}},"Iden3commRevocationStatusV1.0":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#Iden3commRevocationStatusV1.0","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","iden3-comm-revocation-statusV1.0-vocab":"https://schema.iden3.io/core/vocab/Iden3commRevocationStatusV1.0.md#","xsd":"http://www.w3.org/2001/XMLSchema#","revocationNonce":{"@id":"iden3-comm-revocation-statusV1.0-vocab:revocationNonce","@type":"xsd:integer"},"statusIssuer":{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type"},"@id":"iden3-comm-revocation-statusV1.0-vocab:statusIssuer"}}},"Iden3OnchainSparseMerkleTreeProof2023":{"@id":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#Iden3OnchainSparseMerkleTreeProof2023","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","iden3-onchain-sparse-merkle-tree-proof-2023-vocab":"https://schema.iden3.io/core/vocab/Iden3OnchainSparseMerkleTreeProof2023.md#","xsd":"http://www.w3.org/2001/XMLSchema#","revocationNonce":{"@id":"iden3-onchain-sparse-merkle-tree-proof-2023-vocab:revocationNonce","@type":"xsd:integer"},"statusIssuer":{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type"},"@id":"iden3-onchain-sparse-merkle-tree-proof-2023-vocab:statusIssuer"}}},"JsonSchema2023":"https://www.w3.org/ns/credentials#JsonSchema2023","Iden3RefreshService2023":"https://schema.iden3.io/core/jsonld/iden3proofs.jsonld#Iden3RefreshService2023"}}`,
-    IDEN3_DISPLAY_METHOD_DEFINITION_DOCUMENT: `{"@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","displayMethod":{"@id":"https://schema.iden3.io/core/vocab/displayMethod.md#displayMethod","@type":"@id","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","Iden3BasicDisplayMethodV1":"https://schema.iden3.io/core/vocab/displayMethod.md#Iden3BasicDisplayMethodV1"}}}}`
-  },
-  // JsonSchema2023 JSON schema for verification of Iden3Credential
-  JSON_SCHEMA_VALIDATOR: "JsonSchema2023",
-  SERVICE_TYPE: {
-    // Iden3CommServiceType is service type for iden3comm protocol
-    IDEN3_COMM: "iden3-communication",
-    // PushNotificationServiceType is service type for delivering push notifications to identity
-    PUSH_NOTIFICATION: "push-notification"
-  },
-  AUTH: {
-    AUTH_BJJ_CREDENTIAL_HASH: "013fd3f623559d850fb5b02ff012d0e2",
-    AUTH_BJJ_CREDENTIAL_SCHEMA_JSON_URL: "https://schema.iden3.io/core/json/auth.json",
-    AUTH_BJJ_CREDENTIAL_SCHEMA_JSONLD_URL: "https://schema.iden3.io/core/jsonld/auth.jsonld",
-    AUTH_BJJ_CREDENTIAL_TYPE: "AuthBJJCredential",
-    AUTH_BJJ_CREDENTIAL_SCHEMA_JSON: `{"$schema":"http://json-schema.org/draft-07/schema#","$metadata":{"uris":{"jsonLdContext":"https://schema.iden3.io/core/jsonld/auth.jsonld","jsonSchema":"https://schema.iden3.io/core/json/auth.json"},"serialization":{"indexDataSlotA":"x","indexDataSlotB":"y"}},"type":"object","required":["@context","id","type","issuanceDate","credentialSubject","credentialSchema","credentialStatus","issuer"],"properties":{"@context":{"type":["string","array","object"]},"id":{"type":"string"},"type":{"type":["string","array"],"items":{"type":"string"}},"issuer":{"type":["string","object"],"format":"uri","required":["id"],"properties":{"id":{"type":"string","format":"uri"}}},"issuanceDate":{"type":"string","format":"date-time"},"expirationDate":{"type":"string","format":"date-time"},"credentialSchema":{"type":"object","required":["id","type"],"properties":{"id":{"type":"string","format":"uri"},"type":{"type":"string"}}},"credentialSubject":{"type":"object","required":["x","y"],"properties":{"id":{"title":"Credential Subject ID","type":"string","format":"uri"},"x":{"type":"string"},"y":{"type":"string"}}}}}`,
-    AUTH_BJJ_CREDENTIAL_SCHEMA_JSONLD: `{"@context":[{"@version":1.1,"@protected":true,"id":"@id","type":"@type","AuthBJJCredential":{"@id":"https://schema.iden3.io/core/jsonld/auth.jsonld#AuthBJJCredential","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","iden3_serialization":"iden3:v1:slotIndexA=x&slotIndexB=y","xsd":"http://www.w3.org/2001/XMLSchema#","auth-vocab":"https://schema.iden3.io/core/vocab/auth.md#","x":{"@id":"auth-vocab:x","@type":"xsd:positiveInteger"},"y":{"@id":"auth-vocab:y","@type":"xsd:positiveInteger"}}},"Iden3StateInfo2023":{"@id":"https://schema.iden3.io/core/jsonld/auth.jsonld#Iden3StateInfo2023","@context":{"@version":1.1,"@protected":true,"id":"@id","type":"@type","xsd":"http://www.w3.org/2001/XMLSchema#","@vocab":"https://schema.iden3.io/core/vocab/state-info.md#","@propagate":true,"stateContractAddress":{"@id":"stateContractAddress","@type":"xsd:string"},"published":{"@id":"published","@type":"xsd:boolean"},"info":{"@id":"info","@type":"@id","@context":{"@protected":true,"id":{"@id":"id","@type":"xsd:string"},"state":{"@id":"state","@type":"xsd:string"},"replacedByState":{"@id":"replacedByState","@type":"xsd:string"},"createdAtTimestamp":{"@id":"createdAtTimestamp","@type":"xsd:string"},"replacedAtTimestamp":{"@id":"replacedAtTimestamp","@type":"xsd:string"},"createdAtBlock":{"@id":"createdAtBlock","@type":"xsd:string"},"replacedAtBlock":{"@id":"replacedAtBlock","@type":"xsd:string"}}},"global":{"@id":"global","@type":"@id","@context":{"@protected":true,"sec":"https://w3id.org/security#","root":{"@id":"root","@type":"xsd:string"},"replacedByRoot":{"@id":"replacedByRoot","@type":"xsd:string"},"createdAtTimestamp":{"@id":"createdAtTimestamp","@type":"xsd:string"},"replacedAtTimestamp":{"@id":"replacedAtTimestamp","@type":"xsd:string"},"createdAtBlock":{"@id":"createdAtBlock","@type":"xsd:string"},"replacedAtBlock":{"@id":"replacedAtBlock","@type":"xsd:string"},"proof":{"@id":"sec:proof","@type":"@id","@container":"@graph"}}}}}}]}`
-  }
-});
-var ProofType = /* @__PURE__ */ ((ProofType2) => {
-  ProofType2["BJJSignature"] = "BJJSignature2021";
-  ProofType2["Iden3SparseMerkleTreeProof"] = "Iden3SparseMerkleTreeProof";
-  return ProofType2;
-})(ProofType || {});
-var CredentialStatusType = /* @__PURE__ */ ((CredentialStatusType2) => {
-  CredentialStatusType2["SparseMerkleTreeProof"] = "SparseMerkleTreeProof";
-  CredentialStatusType2["Iden3ReverseSparseMerkleTreeProof"] = "Iden3ReverseSparseMerkleTreeProof";
-  CredentialStatusType2["Iden3commRevocationStatusV1"] = "Iden3commRevocationStatusV1.0";
-  CredentialStatusType2["Iden3OnchainSparseMerkleTreeProof2023"] = "Iden3OnchainSparseMerkleTreeProof2023";
-  return CredentialStatusType2;
-})(CredentialStatusType || {});
-var ProofPurpose = /* @__PURE__ */ ((ProofPurpose2) => {
-  ProofPurpose2["Authentication"] = "Authentication";
-  return ProofPurpose2;
-})(ProofPurpose || {});
-var MerklizedRootPosition = /* @__PURE__ */ ((MerklizedRootPosition4) => {
-  MerklizedRootPosition4["Index"] = "index";
-  MerklizedRootPosition4["Value"] = "value";
-  MerklizedRootPosition4["None"] = "";
-  return MerklizedRootPosition4;
-})(MerklizedRootPosition || {});
-var SubjectPosition = /* @__PURE__ */ ((SubjectPosition2) => {
-  SubjectPosition2["None"] = "";
-  SubjectPosition2["Index"] = "index";
-  SubjectPosition2["Value"] = "value";
-  return SubjectPosition2;
-})(SubjectPosition || {});
-var RefreshServiceType = /* @__PURE__ */ ((RefreshServiceType2) => {
-  RefreshServiceType2["Iden3RefreshService2023"] = "Iden3RefreshService2023";
-  return RefreshServiceType2;
-})(RefreshServiceType || {});
-var PaymentRequestDataType = /* @__PURE__ */ ((PaymentRequestDataType2) => {
-  PaymentRequestDataType2["Iden3PaymentRequestCryptoV1"] = "Iden3PaymentRequestCryptoV1";
-  PaymentRequestDataType2["Iden3PaymentRailsRequestV1"] = "Iden3PaymentRailsRequestV1";
-  PaymentRequestDataType2["Iden3PaymentRailsERC20RequestV1"] = "Iden3PaymentRailsERC20RequestV1";
-  return PaymentRequestDataType2;
-})(PaymentRequestDataType || {});
-var PaymentType = /* @__PURE__ */ ((PaymentType2) => {
-  PaymentType2["Iden3PaymentCryptoV1"] = "Iden3PaymentCryptoV1";
-  PaymentType2["Iden3PaymentRailsV1"] = "Iden3PaymentRailsV1";
-  PaymentType2["Iden3PaymentRailsERC20V1"] = "Iden3PaymentRailsERC20V1";
-  return PaymentType2;
-})(PaymentType || {});
-var SupportedPaymentProofType = /* @__PURE__ */ ((SupportedPaymentProofType2) => {
-  SupportedPaymentProofType2["EthereumEip712Signature2021"] = "EthereumEip712Signature2021";
-  return SupportedPaymentProofType2;
-})(SupportedPaymentProofType || {});
-var SupportedCurrencies = /* @__PURE__ */ ((SupportedCurrencies2) => {
-  SupportedCurrencies2["ETH"] = "ETH";
-  SupportedCurrencies2["ETH_WEI"] = "ETHWEI";
-  SupportedCurrencies2["ETH_GWEI"] = "ETHGWEI";
-  SupportedCurrencies2["MATIC"] = "MATIC";
-  SupportedCurrencies2["POL"] = "POL";
-  return SupportedCurrencies2;
-})(SupportedCurrencies || {});
-var PaymentFeatures = /* @__PURE__ */ ((PaymentFeatures2) => {
-  PaymentFeatures2["EIP_2612"] = "EIP-2612";
-  return PaymentFeatures2;
-})(PaymentFeatures || {});
-var DisplayMethodType = /* @__PURE__ */ ((DisplayMethodType2) => {
-  DisplayMethodType2["Iden3BasicDisplayMethodV1"] = "Iden3BasicDisplayMethodV1";
-  return DisplayMethodType2;
-})(DisplayMethodType || {});
-var DEFAULT_CACHE_MAX_SIZE = 1e4;
-
-// src/verifiable/proof.ts
-var import_js_crypto5 = require("@iden3/js-crypto");
-var import_js_iden3_core3 = require("@iden3/js-iden3-core");
-var Iden3SparseMerkleTreeProof = class _Iden3SparseMerkleTreeProof {
-  type;
-  issuerData;
-  mtp;
-  coreClaim;
-  /**
-   * Creates an instance of Iden3SparseMerkleTreeProof.
-   * @param {object} obj
-   */
-  constructor(obj) {
-    this.coreClaim = obj.coreClaim;
-    this.issuerData = obj.issuerData;
-    this.type = "Iden3SparseMerkleTreeProof" /* Iden3SparseMerkleTreeProof */;
-    this.mtp = obj.mtp;
+// src/verifiable/core-utils.ts
+var import_js_iden3_core4 = require("@iden3/js-iden3-core");
+var import_js_jsonld_merklization = require("@iden3/js-jsonld-merklization");
+var import_jsonld = __toESM(require("jsonld"), 1);
+var import_ethers2 = require("ethers");
+var credentialSubjectKey = "credentialSubject";
+var contextFullKey = "@context";
+var serializationFullKey = "iden3_serialization";
+var fieldPrefix = "iden3:v1:";
+var credentialSubjectFullKey = "https://www.w3.org/2018/credentials#credentialSubject";
+var verifiableCredentialFullKey = "https://www.w3.org/2018/credentials#VerifiableCredential";
+var typeFullKey = "@type";
+var getFieldSlotIndex = async (field, typeName, schemaBytes) => {
+  let ctxDoc = JSON.parse(byteDecoder.decode(schemaBytes));
+  ctxDoc = ctxDoc[contextFullKey];
+  if (ctxDoc === void 0) {
+    throw new Error("document has no @context");
   }
-  /**
-   *
-   *
-   * @returns `json object in serialized presentation`
-   */
-  toJSON() {
-    const issuerId = this.issuerData.id;
-    return {
-      issuerData: {
-        id: issuerId.string(),
-        state: {
-          ...this.issuerData.state,
-          rootOfRoots: this.issuerData.state.rootOfRoots.hex(),
-          claimsTreeRoot: this.issuerData.state.claimsTreeRoot.hex(),
-          revocationTreeRoot: this.issuerData.state.revocationTreeRoot.hex(),
-          value: this.issuerData.state.value.hex()
-        }
-      },
-      type: this.type,
-      coreClaim: this.coreClaim.hex(),
-      mtp: this.mtp.toJSON()
-    };
+  const ldCtx = await import_jsonld.default.processContext(
+    await import_jsonld.default.processContext(null, null, {}),
+    ctxDoc,
+    {}
+  );
+  const serAttr = await getSerializationAttrFromParsedContext(
+    ldCtx,
+    typeName
+  );
+  if (!serAttr) {
+    throw new Error("serialization attribute is not set");
   }
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  static fromJSON(obj) {
-    let mtp;
-    if (obj?.mtp?.notEmpties && obj?.mtp?.depth && obj?.mtp?.siblings) {
-      const ne = obj?.mtp?.notEmpties;
-      const notEmpties = ne instanceof Uint8Array ? ne : new Uint8Array(Object.values(ne));
-      const siblingsHashes = obj?.mtp?.siblings.map(
-        (h) => import_js_merkletree2.Hash.fromString(JSON.stringify(h))
-      );
-      const allSiblings = import_js_merkletree2.Proof.buildAllSiblings(obj?.mtp?.depth, notEmpties, siblingsHashes);
-      let nodeAux = obj.mtp.nodeAux || obj.mtp.node_aux;
-      if (nodeAux) {
-        nodeAux = {
-          key: import_js_merkletree2.Hash.fromString(JSON.stringify(nodeAux.key)),
-          value: import_js_merkletree2.Hash.fromString(JSON.stringify(nodeAux.value))
-        };
-      }
-      mtp = new import_js_merkletree2.Proof({ existence: obj?.mtp.existence, nodeAux, siblings: allSiblings });
-    } else {
-      mtp = import_js_merkletree2.Proof.fromJSON(obj.mtp);
-    }
-    return new _Iden3SparseMerkleTreeProof({
-      coreClaim: new import_js_iden3_core3.Claim().fromHex(obj.coreClaim),
-      mtp,
-      issuerData: {
-        id: import_js_iden3_core3.DID.parse(obj.issuerData.id),
-        state: {
-          ...obj.issuerData.state,
-          rootOfRoots: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.rootOfRoots),
-          claimsTreeRoot: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.claimsTreeRoot),
-          revocationTreeRoot: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.revocationTreeRoot),
-          value: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.value)
-        }
-      }
-    });
-  }
-};
-var BJJSignatureProof2021 = class _BJJSignatureProof2021 {
-  type;
-  issuerData;
-  signature;
-  coreClaim;
-  constructor(obj) {
-    this.type = "BJJSignature2021" /* BJJSignature */;
-    this.issuerData = obj.issuerData;
-    this.coreClaim = obj.coreClaim;
-    this.signature = obj.signature;
-  }
-  /**
-   * toJSON is a method to serialize BJJSignatureProof2021 to json
-   *
-   * @returns `json object in serialized presentation`
-   */
-  toJSON() {
-    return {
-      issuerData: {
-        id: this.issuerData.id.string(),
-        state: {
-          ...this.issuerData.state,
-          rootOfRoots: this.issuerData.state.rootOfRoots.hex(),
-          claimsTreeRoot: this.issuerData.state.claimsTreeRoot.hex(),
-          revocationTreeRoot: this.issuerData.state.revocationTreeRoot.hex(),
-          value: this.issuerData.state.value.hex()
-        },
-        mtp: this.issuerData.mtp.toJSON(),
-        authCoreClaim: this.issuerData.authCoreClaim.hex(),
-        credentialStatus: this.issuerData.credentialStatus
-      },
-      type: this.type,
-      coreClaim: this.coreClaim.hex(),
-      signature: import_js_crypto5.Hex.encodeString(this.signature.compress())
-    };
-  }
-  /**
-   * fromJSON is a method to deserialize BJJSignatureProof2021 from json
-   * @param obj
-   */
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  static fromJSON(obj) {
-    return new _BJJSignatureProof2021({
-      issuerData: {
-        id: import_js_iden3_core3.DID.parse(obj.issuerData.id),
-        mtp: import_js_merkletree2.Proof.fromJSON(obj.issuerData.mtp),
-        state: {
-          ...obj.issuerData.state,
-          rootOfRoots: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.rootOfRoots),
-          claimsTreeRoot: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.claimsTreeRoot),
-          revocationTreeRoot: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.revocationTreeRoot),
-          value: import_js_merkletree2.Hash.fromHex(obj.issuerData.state.value)
-        },
-        credentialStatus: obj.issuerData.credentialStatus,
-        authCoreClaim: new import_js_iden3_core3.Claim().fromHex(obj.issuerData.authCoreClaim)
-      },
-      coreClaim: new import_js_iden3_core3.Claim().fromHex(obj.coreClaim),
-      signature: import_js_crypto5.Signature.newFromCompressed(
-        Uint8Array.from(import_js_crypto5.Hex.decodeString(obj.signature)).slice(0, 64)
-      )
-    });
-  }
-};
-
-// src/verifiable/credential.ts
-var import_js_iden3_core6 = require("@iden3/js-iden3-core");
-var import_js_merkletree3 = require("@iden3/js-merkletree");
-var import_js_jsonld_merklization2 = require("@iden3/js-jsonld-merklization");
-var import_js_crypto7 = require("@iden3/js-crypto");
-
-// src/credentials/utils.ts
-var import_js_iden3_core4 = require("@iden3/js-iden3-core");
-var import_js_crypto6 = require("@iden3/js-crypto");
-var getUserDIDFromCredential = (issuerDID, credential) => {
-  if (!credential.credentialSubject.id) {
-    return issuerDID;
-  }
-  if (typeof credential.credentialSubject.id !== "string") {
-    throw new Error("credential subject `id` is not a string");
-  }
-  return import_js_iden3_core4.DID.parse(credential.credentialSubject.id);
-};
-var getKMSIdByAuthCredential = (credential) => {
-  if (!credential.type.includes("AuthBJJCredential")) {
-    throw new Error("can't sign with not AuthBJJCredential credential");
-  }
-  const x = credential.credentialSubject["x"];
-  const y = credential.credentialSubject["y"];
-  const pb = new import_js_crypto6.PublicKey([BigInt(x), BigInt(y)]);
-  const kp = keyPath("BJJ" /* BabyJubJub */, pb.hex());
-  return { type: "BJJ" /* BabyJubJub */, id: kp };
-};
-
-// src/verifiable/core-utils.ts
-var import_js_iden3_core5 = require("@iden3/js-iden3-core");
-var import_js_jsonld_merklization = require("@iden3/js-jsonld-merklization");
-var import_jsonld = __toESM(require("jsonld"), 1);
-var import_ethers2 = require("ethers");
-var credentialSubjectKey = "credentialSubject";
-var contextFullKey = "@context";
-var serializationFullKey = "iden3_serialization";
-var fieldPrefix = "iden3:v1:";
-var credentialSubjectFullKey = "https://www.w3.org/2018/credentials#credentialSubject";
-var verifiableCredentialFullKey = "https://www.w3.org/2018/credentials#VerifiableCredential";
-var typeFullKey = "@type";
-var getFieldSlotIndex = async (field, typeName, schemaBytes) => {
-  let ctxDoc = JSON.parse(byteDecoder.decode(schemaBytes));
-  ctxDoc = ctxDoc[contextFullKey];
-  if (ctxDoc === void 0) {
-    throw new Error("document has no @context");
-  }
-  const ldCtx = await import_jsonld.default.processContext(
-    await import_jsonld.default.processContext(null, null, {}),
-    ctxDoc,
-    {}
-  );
-  const serAttr = await getSerializationAttrFromParsedContext(
-    ldCtx,
-    typeName
-  );
-  if (!serAttr) {
-    throw new Error("serialization attribute is not set");
-  }
-  const sPaths = parseSerializationAttr(serAttr);
-  switch (field) {
-    case sPaths.indexAPath:
-      return 2;
-    case sPaths.indexBPath:
-      return 3;
-    case sPaths.valueAPath:
-      return 6;
-    case sPaths.valueBPath:
-      return 7;
-    default:
-      throw new Error(`field ${field} not specified in serialization info`);
+  const sPaths = parseSerializationAttr(serAttr);
+  switch (field) {
+    case sPaths.indexAPath:
+      return 2;
+    case sPaths.indexBPath:
+      return 3;
+    case sPaths.valueAPath:
+      return 6;
+    case sPaths.valueBPath:
+      return 7;
+    default:
+      throw new Error(`field ${field} not specified in serialization info`);
   }
 };
 var fillCoreClaimSlot = async (slotData, mz, path) => {
@@ -1409,7 +1161,7 @@ var fillCoreClaimSlot = async (slotData, mz, path) => {
     const p = await mz.resolveDocPath(path, mz.options);
     const entry = await mz.entry(p);
     const intVal = await entry.getValueMtEntry();
-    const bytesVal = import_js_iden3_core5.BytesHelper.intToBytes(intVal);
+    const bytesVal = import_js_iden3_core4.BytesHelper.intToBytes(intVal);
     slotData.set(bytesVal, 0);
   } catch (err) {
     if (err.toString().includes("entry not found")) {
@@ -1524,7 +1276,7 @@ var parseCoreClaimSlots = async (ldCtx, mz, credentialType) => {
 };
 var calculateCoreSchemaHash = (schemaId) => {
   const sHash = hexToBytes((0, import_ethers2.keccak256)(schemaId));
-  return new import_js_iden3_core5.SchemaHash(sHash.slice(sHash.length - 16, sHash.length));
+  return new import_js_iden3_core4.SchemaHash(sHash.slice(sHash.length - 16, sHash.length));
 };
 
 // src/verifiable/credential.ts
@@ -1606,8 +1358,8 @@ var W3CCredential = class _W3CCredential {
           id: request.revocationOpts.issuerState ? `${credentialStatus.id.replace(/\/$/, "")}/node?state=${request.revocationOpts.issuerState}` : `${credentialStatus.id.replace(/\/$/, "")}`
         };
       case "Iden3OnchainSparseMerkleTreeProof2023" /* Iden3OnchainSparseMerkleTreeProof2023 */: {
-        const issuerId = import_js_iden3_core6.DID.idFromDID(issuer);
-        const chainId = (0, import_js_iden3_core6.getChainId)(import_js_iden3_core6.DID.blockchainFromId(issuerId), import_js_iden3_core6.DID.networkIdFromId(issuerId));
+        const issuerId = import_js_iden3_core5.DID.idFromDID(issuer);
+        const chainId = (0, import_js_iden3_core5.getChainId)(import_js_iden3_core5.DID.blockchainFromId(issuerId), import_js_iden3_core5.DID.networkIdFromId(issuerId));
         const searchParams = [
           ["revocationNonce", request.revocationOpts.nonce?.toString() || ""],
           ["contractAddress", `${chainId}:${request.revocationOpts.id}`],
@@ -1735,12 +1487,12 @@ var W3CCredential = class _W3CCredential {
       opts.merklizedRootPosition = "index" /* Index */;
     }
     const schemaHash = calculateCoreSchemaHash(byteEncoder.encode(credentialType));
-    const claim = import_js_iden3_core6.Claim.newClaim(
+    const claim = import_js_iden3_core5.Claim.newClaim(
       schemaHash,
-      import_js_iden3_core6.ClaimOptions.withIndexDataBytes(slots.indexA, slots.indexB),
-      import_js_iden3_core6.ClaimOptions.withValueDataBytes(slots.valueA, slots.valueB),
-      import_js_iden3_core6.ClaimOptions.withRevocationNonce(BigInt(opts.revNonce)),
-      import_js_iden3_core6.ClaimOptions.withVersion(opts.version)
+      import_js_iden3_core5.ClaimOptions.withIndexDataBytes(slots.indexA, slots.indexB),
+      import_js_iden3_core5.ClaimOptions.withValueDataBytes(slots.valueA, slots.valueB),
+      import_js_iden3_core5.ClaimOptions.withRevocationNonce(BigInt(opts.revNonce)),
+      import_js_iden3_core5.ClaimOptions.withVersion(opts.version)
     );
     if (opts.updatable) {
       claim.setFlagUpdatable(opts.updatable);
@@ -1749,8 +1501,8 @@ var W3CCredential = class _W3CCredential {
       claim.setExpirationDate(new Date(this.expirationDate));
     }
     if (subjectId) {
-      const did = import_js_iden3_core6.DID.parse(subjectId.toString());
-      const id = import_js_iden3_core6.DID.idFromDID(did);
+      const did = import_js_iden3_core5.DID.parse(subjectId.toString());
+      const id = import_js_iden3_core5.DID.idFromDID(did);
       switch (opts.subjectPosition) {
         case "":
         case "index" /* Index */:
@@ -1851,26 +1603,26 @@ var W3CCredential = class _W3CCredential {
     let merklizedRootPosition = "";
     const merklizedPosition = coreClaim.getMerklizedPosition();
     switch (merklizedPosition) {
-      case import_js_iden3_core6.MerklizedRootPosition.None:
+      case import_js_iden3_core5.MerklizedRootPosition.None:
         merklizedRootPosition = "" /* None */;
         break;
-      case import_js_iden3_core6.MerklizedRootPosition.Index:
+      case import_js_iden3_core5.MerklizedRootPosition.Index:
         merklizedRootPosition = "index" /* Index */;
         break;
-      case import_js_iden3_core6.MerklizedRootPosition.Value:
+      case import_js_iden3_core5.MerklizedRootPosition.Value:
         merklizedRootPosition = "value" /* Value */;
         break;
     }
     let subjectPosition = "";
     const idPosition = coreClaim.getIdPosition();
     switch (idPosition) {
-      case import_js_iden3_core6.IdPosition.None:
+      case import_js_iden3_core5.IdPosition.None:
         subjectPosition = "" /* None */;
         break;
-      case import_js_iden3_core6.IdPosition.Index:
+      case import_js_iden3_core5.IdPosition.Index:
         subjectPosition = "index" /* Index */;
         break;
-      case import_js_iden3_core6.IdPosition.Value:
+      case import_js_iden3_core5.IdPosition.Value:
         subjectPosition = "value" /* Value */;
         break;
     }
@@ -1890,9 +1642,9 @@ var W3CCredential = class _W3CCredential {
   async verifyBJJSignatureProof(proof, coreClaim, resolverURL, userDID, credStatusResolverRegistry) {
     const authClaim = proof.issuerData.authCoreClaim;
     const rawSlotsInt = authClaim.rawSlotsAsInts();
-    const pubKey = new import_js_crypto7.PublicKey([rawSlotsInt[2], rawSlotsInt[3]]);
+    const pubKey = new import_js_crypto5.PublicKey([rawSlotsInt[2], rawSlotsInt[3]]);
     const { hi, hv } = coreClaim.hiHv();
-    const claimHash = import_js_crypto7.poseidon.hash([hi, hv]);
+    const claimHash = import_js_crypto5.poseidon.hash([hi, hv]);
     const bjjValid = pubKey.verifyPoseidon(claimHash, proof.signature);
     if (!bjjValid) {
       throw new Error("signature is not valid");
@@ -1976,7 +1728,7 @@ function extractProof(proof) {
     if (!p.coreClaim) {
       throw new Error(`coreClaim field is not defined in proof type ${defaultProofType}`);
     }
-    const coreClaim = p.coreClaim instanceof import_js_iden3_core6.Claim ? p.coreClaim : new import_js_iden3_core6.Claim().fromHex(p.coreClaim);
+    const coreClaim = p.coreClaim instanceof import_js_iden3_core5.Claim ? p.coreClaim : new import_js_iden3_core5.Claim().fromHex(p.coreClaim);
     return { claim: coreClaim, proofType: defaultProofType };
   }
   throw new Error("proof format is not supported");
@@ -1985,7 +1737,7 @@ function validateTreeState(treeState) {
   const ctrHash = treeState.claimsTreeRoot ? import_js_merkletree3.Hash.fromHex(treeState.claimsTreeRoot) : new import_js_merkletree3.Hash();
   const rtrHash = treeState.revocationTreeRoot ? import_js_merkletree3.Hash.fromHex(treeState.revocationTreeRoot) : new import_js_merkletree3.Hash();
   const rorHash = treeState.rootOfRoots ? import_js_merkletree3.Hash.fromHex(treeState.rootOfRoots) : new import_js_merkletree3.Hash();
-  const wantState = import_js_crypto7.poseidon.hash([ctrHash.bigInt(), rtrHash.bigInt(), rorHash.bigInt()]);
+  const wantState = import_js_crypto5.poseidon.hash([ctrHash.bigInt(), rtrHash.bigInt(), rorHash.bigInt()]);
   const stateHash = treeState.state ? import_js_merkletree3.Hash.fromHex(treeState.state) : new import_js_merkletree3.Hash();
   return wantState === stateHash.bigInt();
 }
@@ -2299,18 +2051,666 @@ var DIDDocumentJSONSchema = `{
       },
       "deprecated": true
     }
-  },
-  "required": [
-    "id"
-  ]
-}`;
+  },
+  "required": [
+    "id"
+  ]
+}`;
+
+// src/utils/payments/solana.ts
+var import_js_iden3_core6 = require("@iden3/js-iden3-core");
+var import_web3 = require("@solana/web3.js");
+var SolanaNativePaymentRequest = class {
+  version;
+  chainId;
+  verifyingContract;
+  recipient;
+  amount;
+  expirationDate;
+  nonce;
+  metadata;
+  constructor(fields) {
+    this.version = fields.version;
+    this.chainId = fields.chainId;
+    this.verifyingContract = fields.verifyingContract;
+    this.recipient = fields.recipient;
+    this.amount = fields.amount;
+    this.expirationDate = fields.expirationDate;
+    this.nonce = fields.nonce;
+    this.metadata = fields.metadata;
+  }
+};
+var SolanaSplPaymentRequest = class {
+  version;
+  chainId;
+  verifyingContract;
+  tokenAddress;
+  recipient;
+  amount;
+  expirationDate;
+  nonce;
+  metadata;
+  constructor(fields) {
+    this.version = fields.version;
+    this.chainId = fields.chainId;
+    this.verifyingContract = fields.verifyingContract;
+    this.tokenAddress = fields.tokenAddress;
+    this.recipient = fields.recipient;
+    this.amount = fields.amount;
+    this.expirationDate = fields.expirationDate;
+    this.nonce = fields.nonce;
+    this.metadata = fields.metadata;
+  }
+};
+var SolanaNativePaymentSchema = /* @__PURE__ */ new Map([
+  [
+    SolanaNativePaymentRequest,
+    {
+      kind: "struct",
+      fields: [
+        ["version", ["u8"]],
+        ["chainId", "u64"],
+        ["verifyingContract", ["u8", 32]],
+        ["recipient", ["u8", 32]],
+        ["amount", "u64"],
+        ["expirationDate", "u64"],
+        ["nonce", "u64"],
+        ["metadata", ["u8"]]
+      ]
+    }
+  ]
+]);
+var SolanaSplPaymentSchema = /* @__PURE__ */ new Map([
+  [
+    SolanaSplPaymentRequest,
+    {
+      kind: "struct",
+      fields: [
+        ["version", ["u8"]],
+        ["chainId", "u64"],
+        ["verifyingContract", ["u8", 32]],
+        ["tokenAddress", ["u8", 32]],
+        ["recipient", ["u8", 32]],
+        ["amount", "u64"],
+        ["expirationDate", "u64"],
+        ["nonce", "u64"],
+        ["metadata", ["u8"]]
+      ]
+    }
+  ]
+]);
+var SolanaPaymentInstruction = class {
+  recipient;
+  amount;
+  expiration_date;
+  nonce;
+  metadata;
+  signature;
+  constructor(fields) {
+    this.recipient = fields.recipient;
+    this.amount = fields.amount;
+    this.expiration_date = fields.expiration_date;
+    this.nonce = fields.nonce;
+    this.metadata = fields.metadata;
+    this.signature = fields.signature;
+  }
+};
+var SolanaPaymentInstructionSchema = /* @__PURE__ */ new Map([
+  [
+    SolanaPaymentInstruction,
+    {
+      kind: "struct",
+      fields: [
+        ["recipient", ["u8", 32]],
+        ["amount", "u64"],
+        ["expiration_date", "u64"],
+        ["nonce", "u64"],
+        ["metadata", ["u8"]],
+        ["signature", [64]]
+      ]
+    }
+  ]
+]);
+var buildSolanaPayment = async (solSigner, option, chainId, paymentRails, recipient, amount, expirationDate, nonce) => {
+  let serialized;
+  const proofVersion = option.type === "Iden3PaymentRailsSolanaRequestV1" /* Iden3PaymentRailsSolanaRequestV1 */ ? "SolanaEd25519NativeV1" : "SolanaEd25519SPLV1";
+  let chainRef = chainId;
+  switch (chainId) {
+    case "101":
+      chainRef = SOLANA_CHAIN_REF.DEVNET;
+      break;
+    case "102":
+      chainRef = SOLANA_CHAIN_REF.TESTNET;
+      break;
+    case "103":
+      chainRef = SOLANA_CHAIN_REF.MAINNET;
+      break;
+  }
+  if (option.type === "Iden3PaymentRailsSolanaRequestV1" /* Iden3PaymentRailsSolanaRequestV1 */) {
+    const request = new SolanaNativePaymentRequest({
+      version: byteEncoder.encode(proofVersion),
+      chainId: BigInt(chainId),
+      verifyingContract: new import_web3.PublicKey(paymentRails).toBytes(),
+      recipient: new import_web3.PublicKey(recipient).toBytes(),
+      amount: BigInt(amount),
+      expirationDate: BigInt((0, import_js_iden3_core6.getUnixTimestamp)(expirationDate)),
+      nonce,
+      metadata: byteEncoder.encode("0x")
+    });
+    serialized = (0, import_borsh.serialize)(SolanaNativePaymentSchema, request);
+  } else {
+    if (!option.contractAddress) {
+      throw new Error(`failed request. no contract address for ${option.type} payment type`);
+    }
+    const request = new SolanaSplPaymentRequest({
+      version: byteEncoder.encode(proofVersion),
+      chainId: BigInt(chainId),
+      verifyingContract: new import_web3.PublicKey(paymentRails).toBytes(),
+      tokenAddress: new import_web3.PublicKey(option.contractAddress).toBytes(),
+      recipient: new import_web3.PublicKey(recipient).toBytes(),
+      amount: BigInt(amount),
+      expirationDate: BigInt((0, import_js_iden3_core6.getUnixTimestamp)(expirationDate)),
+      nonce,
+      metadata: byteEncoder.encode("0x")
+    });
+    serialized = (0, import_borsh.serialize)(SolanaSplPaymentSchema, request);
+  }
+  const privateKey = solSigner.secretKey.slice(0, 32);
+  const signature = await import_ed25519.ed25519.sign(serialized, privateKey);
+  const proof = [
+    {
+      type: "SolanaEd25519Signature2025" /* SolanaEd25519Signature2025 */,
+      proofPurpose: "assertionMethod",
+      proofValue: Buffer.from(signature).toString("hex"),
+      created: (/* @__PURE__ */ new Date()).toISOString(),
+      verificationMethod: `did:pkh:solana:${chainRef}:${solSigner.publicKey.toBase58()}`,
+      domain: {
+        version: proofVersion,
+        chainId,
+        verifyingContract: paymentRails
+      }
+    }
+  ];
+  const d = {
+    type: "Iden3PaymentRailsSolanaRequestV1" /* Iden3PaymentRailsSolanaRequestV1 */,
+    "@context": [
+      `https://schema.iden3.io/core/jsonld/payment.jsonld#${option.type}`,
+      "https://schema.iden3.io/core/jsonld/solanaEd25519.jsonld"
+    ],
+    recipient,
+    amount: amount.toString(),
+    expirationDate: expirationDate.toISOString(),
+    nonce: nonce.toString(),
+    metadata: "0x",
+    proof
+  };
+  if (option.type === "Iden3PaymentRailsSolanaRequestV1" /* Iden3PaymentRailsSolanaRequestV1 */) {
+    return d;
+  }
+  return {
+    ...d,
+    type: option.type,
+    tokenAddress: option.contractAddress || "",
+    features: option.features || []
+  };
+};
+var serializeSolanaPaymentInstruction = (data) => {
+  let serialized;
+  const proof = Array.isArray(data.proof) ? data.proof[0] : data.proof;
+  const proofVersion = data.type === "Iden3PaymentRailsSolanaRequestV1" /* Iden3PaymentRailsSolanaRequestV1 */ ? "SolanaEd25519NativeV1" : "SolanaEd25519SPLV1";
+  if (data.type === "Iden3PaymentRailsSolanaRequestV1" /* Iden3PaymentRailsSolanaRequestV1 */) {
+    const request = new SolanaNativePaymentRequest({
+      version: byteEncoder.encode(proofVersion),
+      chainId: BigInt(proof.domain.chainId),
+      verifyingContract: new import_web3.PublicKey(proof.domain.verifyingContract).toBytes(),
+      recipient: new import_web3.PublicKey(data.recipient).toBytes(),
+      amount: BigInt(data.amount),
+      expirationDate: BigInt((0, import_js_iden3_core6.getUnixTimestamp)(new Date(data.expirationDate))),
+      nonce: BigInt(data.nonce),
+      metadata: byteEncoder.encode("0x")
+    });
+    serialized = (0, import_borsh.serialize)(SolanaNativePaymentSchema, request);
+  } else {
+    const request = new SolanaSplPaymentRequest({
+      version: byteEncoder.encode(proofVersion),
+      chainId: BigInt(proof.domain.chainId),
+      verifyingContract: new import_web3.PublicKey(proof.domain.verifyingContract).toBytes(),
+      tokenAddress: new import_web3.PublicKey(data.tokenAddress).toBytes(),
+      recipient: new import_web3.PublicKey(data.recipient).toBytes(),
+      amount: BigInt(data.amount),
+      expirationDate: BigInt((0, import_js_iden3_core6.getUnixTimestamp)(new Date(data.expirationDate))),
+      nonce: BigInt(data.nonce),
+      metadata: byteEncoder.encode("0x")
+    });
+    serialized = (0, import_borsh.serialize)(SolanaSplPaymentSchema, request);
+  }
+  return serialized;
+};
+var verifyIden3SolanaPaymentRequest = async (data, resolver) => {
+  const proof = Array.isArray(data.proof) ? data.proof[0] : data.proof;
+  let serialized;
+  if (data.type === "Iden3PaymentRailsSolanaRequestV1" /* Iden3PaymentRailsSolanaRequestV1 */) {
+    const request = new SolanaNativePaymentRequest({
+      version: byteEncoder.encode(proof.domain.version),
+      chainId: BigInt(proof.domain.chainId),
+      verifyingContract: new import_web3.PublicKey(proof.domain.verifyingContract).toBytes(),
+      recipient: new import_web3.PublicKey(data.recipient).toBytes(),
+      amount: BigInt(data.amount),
+      expirationDate: BigInt((0, import_js_iden3_core6.getUnixTimestamp)(new Date(data.expirationDate))),
+      nonce: BigInt(data.nonce),
+      metadata: byteEncoder.encode("0x")
+    });
+    serialized = (0, import_borsh.serialize)(SolanaNativePaymentSchema, request);
+  } else {
+    const request = new SolanaSplPaymentRequest({
+      version: byteEncoder.encode(proof.domain.version),
+      chainId: BigInt(proof.domain.chainId),
+      verifyingContract: new import_web3.PublicKey(proof.domain.verifyingContract).toBytes(),
+      tokenAddress: new import_web3.PublicKey(data.tokenAddress).toBytes(),
+      recipient: new import_web3.PublicKey(data.recipient).toBytes(),
+      amount: BigInt(data.amount),
+      expirationDate: BigInt((0, import_js_iden3_core6.getUnixTimestamp)(new Date(data.expirationDate))),
+      nonce: BigInt(data.nonce),
+      metadata: byteEncoder.encode("0x")
+    });
+    serialized = (0, import_borsh.serialize)(SolanaSplPaymentSchema, request);
+  }
+  const { didDocument } = await resolver.resolve(proof.verificationMethod);
+  let publicKeyMultibase;
+  if (didDocument?.verificationMethod) {
+    for (const verificationMethod of didDocument.verificationMethod) {
+      if (verificationMethod.type === "Ed25519VerificationKey2020") {
+        publicKeyMultibase = verificationMethod.publicKeyMultibase;
+      }
+    }
+  }
+  if (!publicKeyMultibase) {
+    throw new Error("No Ed25519VerificationKey2020 found in DID document");
+  }
+  return import_ed25519.ed25519.verify(proof.proofValue, serialized, new import_web3.PublicKey(publicKeyMultibase).toBytes());
+};
+
+// src/utils/payments/evm.ts
+var import_ethers3 = require("ethers");
+var import_js_iden3_core7 = require("@iden3/js-iden3-core");
+var buildEvmPayment = async (signer, option, chainId, paymentRails, recipient, amount, expirationDateRequired, nonce) => {
+  const typeUrl = `https://schema.iden3.io/core/json/${option.type}.json`;
+  const typesFetchResult = await fetch(typeUrl);
+  const types = await typesFetchResult.json();
+  delete types.EIP712Domain;
+  const paymentData = option.type === "Iden3PaymentRailsRequestV1" /* Iden3PaymentRailsRequestV1 */ ? {
+    recipient,
+    amount,
+    expirationDate: (0, import_js_iden3_core7.getUnixTimestamp)(expirationDateRequired),
+    nonce,
+    metadata: "0x"
+  } : {
+    tokenAddress: option.contractAddress,
+    recipient,
+    amount,
+    expirationDate: (0, import_js_iden3_core7.getUnixTimestamp)(expirationDateRequired),
+    nonce,
+    metadata: "0x"
+  };
+  const domain = {
+    name: "MCPayment",
+    version: "1.0.0",
+    chainId,
+    verifyingContract: paymentRails
+  };
+  const signature = await signer.signTypedData(domain, types, paymentData);
+  const proof = [
+    {
+      type: "EthereumEip712Signature2021" /* EthereumEip712Signature2021 */,
+      proofPurpose: "assertionMethod",
+      proofValue: signature,
+      verificationMethod: `did:pkh:eip155:${chainId}:${await signer.getAddress()}`,
+      created: (/* @__PURE__ */ new Date()).toISOString(),
+      eip712: {
+        types: typeUrl,
+        primaryType: "Iden3PaymentRailsRequestV1",
+        domain
+      }
+    }
+  ];
+  const d = {
+    type: "Iden3PaymentRailsRequestV1" /* Iden3PaymentRailsRequestV1 */,
+    "@context": [
+      `https://schema.iden3.io/core/jsonld/payment.jsonld#${option.type}`,
+      "https://w3id.org/security/suites/eip712sig-2021/v1"
+    ],
+    recipient,
+    amount: amount.toString(),
+    expirationDate: expirationDateRequired.toISOString(),
+    nonce: nonce.toString(),
+    metadata: "0x",
+    proof
+  };
+  if (option.type === "Iden3PaymentRailsRequestV1" /* Iden3PaymentRailsRequestV1 */) {
+    return d;
+  }
+  return {
+    ...d,
+    type: option.type,
+    tokenAddress: option.contractAddress || "",
+    features: option.features || []
+  };
+};
+async function verifyEIP712TypedData(data, resolver) {
+  const paymentData = data.type === "Iden3PaymentRailsRequestV1" /* Iden3PaymentRailsRequestV1 */ ? {
+    recipient: data.recipient,
+    amount: data.amount,
+    expirationDate: (0, import_js_iden3_core7.getUnixTimestamp)(new Date(data.expirationDate)),
+    nonce: data.nonce,
+    metadata: "0x"
+  } : {
+    tokenAddress: data.tokenAddress,
+    recipient: data.recipient,
+    amount: data.amount,
+    expirationDate: (0, import_js_iden3_core7.getUnixTimestamp)(new Date(data.expirationDate)),
+    nonce: data.nonce,
+    metadata: "0x"
+  };
+  const proof = Array.isArray(data.proof) ? data.proof[0] : data.proof;
+  const typesFetchResult = await fetch(proof.eip712.types);
+  const types = await typesFetchResult.json();
+  delete types.EIP712Domain;
+  const recovered = import_ethers3.ethers.verifyTypedData(
+    proof.eip712.domain,
+    types,
+    paymentData,
+    proof.proofValue
+  );
+  const { didDocument } = await resolver.resolve(proof.verificationMethod);
+  if (didDocument?.verificationMethod) {
+    for (const verificationMethod of didDocument.verificationMethod) {
+      if (verificationMethod.blockchainAccountId?.split(":").slice(-1)[0].toLowerCase() === recovered.toLowerCase()) {
+        return recovered;
+      }
+    }
+  } else {
+    throw new Error("failed request. issuer DIDDocument does not contain any verificationMethods");
+  }
+  throw new Error(`failed request. no matching verificationMethod`);
+}
+
+// src/kms/key-providers/bjj-provider.ts
+var BjjProvider = class {
+  /**
+   * key type that is handled by BJJ Provider
+   * @type {KmsKeyType}
+   */
+  keyType;
+  keyStore;
+  /**
+   * Creates an instance of BjjProvider.
+   * @param {KmsKeyType} keyType - kms key type
+   * @param {AbstractPrivateKeyStore} keyStore - key store for kms
+   */
+  constructor(keyType, keyStore) {
+    if (keyType !== "BJJ" /* BabyJubJub */) {
+      throw new Error("Key type must be BabyJubJub");
+    }
+    this.keyType = keyType;
+    this.keyStore = keyStore;
+  }
+  /**
+   * get all keys
+   * @returns list of keys
+   */
+  async list() {
+    const allKeysFromKeyStore = await this.keyStore.list();
+    return allKeysFromKeyStore.filter((key) => key.alias.startsWith(this.keyType));
+  }
+  /**
+   * generates a baby jub jub key from a seed phrase
+   * @param {Uint8Array} seed - byte array seed
+   * @returns kms key identifier
+   */
+  async newPrivateKeyFromSeed(seed) {
+    const newKey = new Uint8Array(32);
+    newKey.set(Uint8Array.from(seed), 0);
+    newKey.fill(seed.length, 32, 0);
+    const privateKey = new import_js_crypto6.PrivateKey(seed);
+    const publicKey = privateKey.public();
+    const kmsId = {
+      type: this.keyType,
+      id: keyPath(this.keyType, publicKey.hex())
+    };
+    await this.keyStore.importKey({ alias: kmsId.id, key: privateKey.hex() });
+    return kmsId;
+  }
+  /**
+   * Gets public key by kmsKeyId
+   *
+   * @param {KmsKeyId} keyId - key identifier
+   */
+  async publicKey(keyId) {
+    const privateKey = await this.privateKey(keyId);
+    return privateKey.public().hex();
+  }
+  /**
+   * signs prepared payload of size,
+   * with a key id
+   *
+   * @param {KmsKeyId} keyId  - key identifier
+   * @param {Uint8Array} data - data to sign (32 bytes)
+   * @returns Uint8Array signature
+   */
+  async sign(keyId, data) {
+    if (data.length != 32) {
+      throw new Error("data to sign is too large");
+    }
+    const i = import_js_iden3_core8.BytesHelper.bytesToInt(data);
+    if (!(0, import_js_iden3_core8.checkBigIntInField)(i)) {
+      throw new Error("data to sign is too large");
+    }
+    const privateKey = await this.privateKey(keyId);
+    const signature = privateKey.signPoseidon(i);
+    return signature.compress();
+  }
+  async privateKey(keyId) {
+    const privateKeyHex = await this.keyStore.get({ alias: keyId.id });
+    return new import_js_crypto6.PrivateKey(import_js_crypto6.Hex.decodeString(privateKeyHex));
+  }
+  async verify(message, signatureHex, keyId) {
+    const publicKey = await this.publicKey(keyId);
+    return import_js_crypto6.PublicKey.newFromCompressed(hexToBytes(publicKey)).verifyPoseidon(
+      import_js_iden3_core8.BytesHelper.bytesToInt(message),
+      import_js_crypto6.Signature.newFromCompressed(hexToBytes(signatureHex))
+    );
+  }
+};
+
+// src/kms/key-providers/ed25519-provider.ts
+var import_ed255192 = require("@noble/curves/ed25519");
+var Ed25519Provider = class {
+  /**
+   * Creates an instance of Ed25519Provider.
+   * @param {KmsKeyType} keyType - kms key type
+   * @param {AbstractPrivateKeyStore} keyStore - key store for kms
+   */
+  constructor(keyType, _keyStore) {
+    this.keyType = keyType;
+    this._keyStore = _keyStore;
+  }
+  /**
+   * get all keys
+   * @returns list of keys
+   */
+  async list() {
+    const allKeysFromKeyStore = await this._keyStore.list();
+    return allKeysFromKeyStore.filter((key) => key.alias.startsWith(this.keyType));
+  }
+  /**
+   * generates a ed25519 key from a seed phrase
+   * @param {Uint8Array} seed - byte array seed
+   * @returns {Promise<KmsKeyId>} kms key identifier
+   */
+  async newPrivateKeyFromSeed(seed) {
+    if (seed.length !== 32) {
+      throw new Error("Seed should be 32 bytes");
+    }
+    const publicKey = import_ed255192.ed25519.getPublicKey(seed);
+    const kmsId = {
+      type: this.keyType,
+      id: keyPath(this.keyType, bytesToHex(publicKey))
+    };
+    await this._keyStore.importKey({
+      alias: kmsId.id,
+      key: bytesToHex(seed)
+    });
+    return kmsId;
+  }
+  /**
+   * Gets public key by kmsKeyId
+   * @param {KmsKeyId} keyId - key identifier
+   * @returns {Promise<string>} Public key as a hex string
+   */
+  async publicKey(keyId) {
+    const privateKeyHex = await this.privateKey(keyId);
+    const publicKey = import_ed255192.ed25519.getPublicKey(privateKeyHex);
+    return bytesToHex(publicKey);
+  }
+  /**
+   * signs prepared payload of size,
+   * with a key id
+   * @param {KmsKeyId} keyId  - key identifier
+   * @param {Uint8Array} digest - data to sign (32 bytes)
+   * @returns {Promise<Uint8Array>} signature
+   */
+  async sign(keyId, digest) {
+    const privateKeyHex = await this.privateKey(keyId);
+    return import_ed255192.ed25519.sign(digest, privateKeyHex);
+  }
+  /**
+   * Verifies a signature for the given message and key identifier.
+   * @param digest - The message to verify the signature against.
+   * @param signatureHex - The signature to verify, as a hexadecimal string.
+   * @param keyId - The key identifier to use for verification.
+   * @returns A Promise that resolves to a boolean indicating whether the signature is valid.
+   */
+  async verify(digest, signatureHex, keyId) {
+    const publicKeyHex = await this.publicKey(keyId);
+    return import_ed255192.ed25519.verify(signatureHex, digest, publicKeyHex);
+  }
+  /**
+   * Retrieves the private key for a given keyId from the key store.
+   * @param {KmsKeyId} keyId - The identifier of the key to retrieve.
+   * @returns {Promise<string>} The private key associated with the keyId.
+   */
+  async privateKey(keyId) {
+    return this._keyStore.get({ alias: keyId.id });
+  }
+};
+
+// src/kms/key-providers/secp256k1-provider.ts
+var import_secp256k1 = require("@noble/curves/secp256k1");
+var import_js_crypto7 = require("@iden3/js-crypto");
+var import_did_jwt = require("did-jwt");
+var Sec256k1Provider = class {
+  /**
+   * key type that is handled by BJJ Provider
+   * @type {KmsKeyType}
+   */
+  keyType;
+  _keyStore;
+  /**
+   * Creates an instance of BjjProvider.
+   * @param {KmsKeyType} keyType - kms key type
+   * @param {AbstractPrivateKeyStore} keyStore - key store for kms
+   */
+  constructor(keyType, keyStore) {
+    if (keyType !== "Secp256k1" /* Secp256k1 */) {
+      throw new Error("Key type must be Secp256k1");
+    }
+    this.keyType = keyType;
+    this._keyStore = keyStore;
+  }
+  /**
+   * get all keys
+   * @returns list of keys
+   */
+  async list() {
+    const allKeysFromKeyStore = await this._keyStore.list();
+    return allKeysFromKeyStore.filter((key) => key.alias.startsWith(this.keyType));
+  }
+  /**
+   * generates a baby jub jub key from a seed phrase
+   * @param {Uint8Array} seed - byte array seed
+   * @returns kms key identifier
+   */
+  async newPrivateKeyFromSeed(seed) {
+    if (seed.length !== 32) {
+      throw new Error("Seed should be 32 bytes");
+    }
+    const publicKey = import_secp256k1.secp256k1.getPublicKey(seed);
+    const kmsId = {
+      type: this.keyType,
+      id: keyPath(this.keyType, bytesToHex(publicKey))
+    };
+    await this._keyStore.importKey({
+      alias: kmsId.id,
+      key: bytesToHex(seed).padStart(64, "0")
+    });
+    return kmsId;
+  }
+  /**
+   * Gets public key by kmsKeyId
+   *
+   * @param {KmsKeyId} keyId - key identifier
+   */
+  async publicKey(keyId) {
+    const privateKeyHex = await this.privateKey(keyId);
+    const publicKey = import_secp256k1.secp256k1.getPublicKey(privateKeyHex, false);
+    return bytesToHex(publicKey);
+  }
+  /**
+   * Signs the given data using the private key associated with the specified key identifier.
+   * @param keyId - The key identifier to use for signing.
+   * @param data - The data to sign.
+   * @param opts - Signing options, such as the algorithm to use.
+   * @returns A Promise that resolves to the signature as a Uint8Array.
+   */
+  async sign(keyId, data, opts = { alg: "ES256K" }) {
+    const privateKeyHex = await this.privateKey(keyId);
+    const signatureBase64 = await (0, import_did_jwt.ES256KSigner)(
+      (0, import_did_jwt.hexToBytes)(privateKeyHex),
+      opts.alg === "ES256K-R"
+    )(data);
+    if (typeof signatureBase64 !== "string") {
+      throw new Error("signatureBase64 must be a string");
+    }
+    return base64UrlToBytes(signatureBase64);
+  }
+  /**
+   * Verifies a signature for the given message and key identifier.
+   * @param message - The message to verify the signature against.
+   * @param signatureHex - The signature to verify, as a hexadecimal string.
+   * @param keyId - The key identifier to use for verification.
+   * @returns A Promise that resolves to a boolean indicating whether the signature is valid.
+   */
+  async verify(message, signatureHex, keyId) {
+    const publicKeyHex = await this.publicKey(keyId);
+    return import_secp256k1.secp256k1.verify(signatureHex, (0, import_js_crypto7.sha256)(message), publicKeyHex);
+  }
+  async privateKey(keyId) {
+    return this._keyStore.get({ alias: keyId.id });
+  }
+};
+
+// src/identity/identity-wallet.ts
+var import_js_iden3_core42 = require("@iden3/js-iden3-core");
+var import_js_crypto12 = require("@iden3/js-crypto");
+var import_js_merkletree29 = require("@iden3/js-merkletree");
 
 // src/identity/common.ts
+var import_js_iden3_core9 = require("@iden3/js-iden3-core");
 var subjectPositionIndex = (idPosition) => {
   switch (idPosition) {
-    case import_js_iden3_core7.IdPosition.Index:
+    case import_js_iden3_core9.IdPosition.Index:
       return "index" /* Index */;
-    case import_js_iden3_core7.IdPosition.Value:
+    case import_js_iden3_core9.IdPosition.Value:
       return "value" /* Value */;
     default:
       return "" /* None */;
@@ -2318,21 +2718,21 @@ var subjectPositionIndex = (idPosition) => {
 };
 var defineMerklizedRootPosition = (metadata, position) => {
   if (!metadata?.serialization) {
-    return import_js_iden3_core7.MerklizedRootPosition.None;
+    return import_js_iden3_core9.MerklizedRootPosition.None;
   }
-  if (position != null && position !== import_js_iden3_core7.MerklizedRootPosition.None) {
+  if (position != null && position !== import_js_iden3_core9.MerklizedRootPosition.None) {
     return position;
   }
-  return import_js_iden3_core7.MerklizedRootPosition.Index;
+  return import_js_iden3_core9.MerklizedRootPosition.Index;
 };
 var generateProfileDID = (did, profileNonce) => {
-  const id = import_js_iden3_core7.DID.idFromDID(did);
+  const id = import_js_iden3_core9.DID.idFromDID(did);
   profileNonce = profileNonce ?? 0;
   if (!isBigInt(profileNonce)) {
     throw new Error("profile must be number or decimal string");
   }
-  const profile = import_js_iden3_core7.Id.profileId(id, BigInt(profileNonce));
-  return import_js_iden3_core7.DID.parseFromId(profile);
+  const profile = import_js_iden3_core9.Id.profileId(id, BigInt(profileNonce));
+  return import_js_iden3_core9.DID.parseFromId(profile);
 };
 var isBigInt = (x) => {
   try {
@@ -2346,7 +2746,7 @@ var isBigInt = (x) => {
 var uuid14 = __toESM(require("uuid"), 1);
 
 // src/schema-processor/utils.ts
-var import_js_iden3_core8 = require("@iden3/js-iden3-core");
+var import_js_iden3_core10 = require("@iden3/js-iden3-core");
 var swapEndianness = (buf) => buf.reverse();
 function fieldToByteArray(field) {
   let bigIntField;
@@ -2357,13 +2757,13 @@ function fieldToByteArray(field) {
   } else {
     throw new Error("field type is not supported");
   }
-  return import_js_iden3_core8.BytesHelper.intToBytes(bigIntField);
+  return import_js_iden3_core10.BytesHelper.intToBytes(bigIntField);
 }
 function dataFillsSlot(slot, newData) {
-  return (0, import_js_iden3_core8.checkBigIntInField)(import_js_iden3_core8.BytesHelper.bytesToInt(Uint8Array.from([...slot, ...newData])));
+  return (0, import_js_iden3_core10.checkBigIntInField)(import_js_iden3_core10.BytesHelper.bytesToInt(Uint8Array.from([...slot, ...newData])));
 }
 function checkDataInField(data) {
-  return (0, import_js_iden3_core8.checkBigIntInField)(import_js_iden3_core8.BytesHelper.bytesToInt(data));
+  return (0, import_js_iden3_core10.checkBigIntInField)(import_js_iden3_core10.BytesHelper.bytesToInt(data));
 }
 var createSchemaHash = (schemaId) => {
   return calculateCoreSchemaHash(schemaId);
@@ -3110,7 +3510,7 @@ var ValueProof = class {
 };
 
 // src/circuits/atomic-query-mtp-v2.ts
-var import_js_iden3_core9 = require("@iden3/js-iden3-core");
+var import_js_iden3_core11 = require("@iden3/js-iden3-core");
 var import_js_merkletree6 = require("@iden3/js-merkletree");
 var AtomicQueryMTPV2Inputs = class extends BaseConfig {
   // auth
@@ -3223,11 +3623,11 @@ var AtomicQueryMTPV2PubSignals = class extends BaseConfig {
     let fieldIdx = 0;
     this.merklized = parseInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.userID = import_js_iden3_core9.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.userID = import_js_iden3_core11.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.requestID = BigInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.issuerID = import_js_iden3_core9.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.issuerID = import_js_iden3_core11.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.issuerClaimIdenState = import_js_merkletree6.Hash.fromString(sVals[fieldIdx]);
     fieldIdx++;
@@ -3237,7 +3637,7 @@ var AtomicQueryMTPV2PubSignals = class extends BaseConfig {
     fieldIdx++;
     this.timestamp = parseInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.claimSchema = import_js_iden3_core9.SchemaHash.newSchemaHashFromInt(BigInt(sVals[fieldIdx]));
+    this.claimSchema = import_js_iden3_core11.SchemaHash.newSchemaHashFromInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.claimPathNotExists = parseInt(sVals[fieldIdx]);
     fieldIdx++;
@@ -3256,7 +3656,7 @@ var AtomicQueryMTPV2PubSignals = class extends BaseConfig {
 };
 
 // src/circuits/atomic-query-mtp-v2-on-chain.ts
-var import_js_iden3_core10 = require("@iden3/js-iden3-core");
+var import_js_iden3_core12 = require("@iden3/js-iden3-core");
 var import_js_merkletree7 = require("@iden3/js-merkletree");
 var AtomicQueryMTPV2OnChainInputs = class extends BaseConfig {
   // auth
@@ -3401,7 +3801,7 @@ var AtomicQueryMTPV2OnChainPubSignals = class extends BaseConfig {
     let fieldIdx = 0;
     this.merklized = parseInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.userID = import_js_iden3_core10.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.userID = import_js_iden3_core12.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.circuitQueryHash = BigInt(sVals[fieldIdx]);
     fieldIdx++;
@@ -3411,7 +3811,7 @@ var AtomicQueryMTPV2OnChainPubSignals = class extends BaseConfig {
     fieldIdx++;
     this.gistRoot = import_js_merkletree7.Hash.fromString(sVals[fieldIdx]);
     fieldIdx++;
-    this.issuerID = import_js_iden3_core10.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.issuerID = import_js_iden3_core12.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.issuerClaimIdenState = import_js_merkletree7.Hash.fromString(sVals[fieldIdx]);
     fieldIdx++;
@@ -3436,7 +3836,7 @@ var AtomicQueryMTPV2OnChainPubSignals = class extends BaseConfig {
 };
 
 // src/circuits/atomic-query-sig-v2.ts
-var import_js_iden3_core11 = require("@iden3/js-iden3-core");
+var import_js_iden3_core13 = require("@iden3/js-iden3-core");
 var import_js_merkletree8 = require("@iden3/js-merkletree");
 var AtomicQuerySigV2Inputs = class extends BaseConfig {
   requestID;
@@ -3583,13 +3983,13 @@ var AtomicQuerySigV2PubSignals = class extends BaseConfig {
     let fieldIdx = 0;
     this.merklized = parseInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.userID = import_js_iden3_core11.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.userID = import_js_iden3_core13.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.issuerAuthState = import_js_merkletree8.Hash.fromString(sVals[fieldIdx]);
     fieldIdx++;
     this.requestID = BigInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.issuerID = import_js_iden3_core11.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.issuerID = import_js_iden3_core13.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.isRevocationChecked = parseInt(sVals[fieldIdx]);
     fieldIdx++;
@@ -3597,7 +3997,7 @@ var AtomicQuerySigV2PubSignals = class extends BaseConfig {
     fieldIdx++;
     this.timestamp = parseInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.claimSchema = import_js_iden3_core11.SchemaHash.newSchemaHashFromInt(BigInt(sVals[fieldIdx]));
+    this.claimSchema = import_js_iden3_core13.SchemaHash.newSchemaHashFromInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.claimPathNotExists = parseInt(sVals[fieldIdx]);
     fieldIdx++;
@@ -3616,7 +4016,7 @@ var AtomicQuerySigV2PubSignals = class extends BaseConfig {
 };
 
 // src/circuits/atomic-query-v3.ts
-var import_js_iden3_core12 = require("@iden3/js-iden3-core");
+var import_js_iden3_core14 = require("@iden3/js-iden3-core");
 var import_js_merkletree9 = require("@iden3/js-merkletree");
 var zero = "0";
 var AtomicQueryV3Inputs = class extends BaseConfig {
@@ -3674,7 +4074,7 @@ var AtomicQueryV3Inputs = class extends BaseConfig {
     s.issuerClaimSignatureR8x = zero;
     s.issuerClaimSignatureR8y = zero;
     s.issuerClaimSignatureS = zero;
-    s.issuerAuthClaim = new import_js_iden3_core12.Claim().marshalJson();
+    s.issuerAuthClaim = new import_js_iden3_core14.Claim().marshalJson();
     s.issuerAuthClaimMtp = prepareSiblingsStr(new import_js_merkletree9.Proof(), this.getMTLevel());
     s.issuerAuthClaimsTreeRoot = zero;
     s.issuerAuthRevTreeRoot = zero;
@@ -3821,7 +4221,7 @@ var AtomicQueryV3PubSignals = class extends BaseConfig {
     let fieldIdx = 0;
     this.merklized = parseInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.userID = import_js_iden3_core12.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.userID = import_js_iden3_core14.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.issuerState = import_js_merkletree9.Hash.fromString(sVals[fieldIdx]);
     fieldIdx++;
@@ -3835,7 +4235,7 @@ var AtomicQueryV3PubSignals = class extends BaseConfig {
     fieldIdx++;
     this.requestID = BigInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.issuerID = import_js_iden3_core12.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.issuerID = import_js_iden3_core14.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.isRevocationChecked = parseInt(sVals[fieldIdx]);
     fieldIdx++;
@@ -3843,7 +4243,7 @@ var AtomicQueryV3PubSignals = class extends BaseConfig {
     fieldIdx++;
     this.timestamp = parseInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.claimSchema = import_js_iden3_core12.SchemaHash.newSchemaHashFromInt(BigInt(sVals[fieldIdx]));
+    this.claimSchema = import_js_iden3_core14.SchemaHash.newSchemaHashFromInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.claimPathKey = BigInt(sVals[fieldIdx]);
     fieldIdx++;
@@ -3858,7 +4258,7 @@ var AtomicQueryV3PubSignals = class extends BaseConfig {
     this.valueArraySize = parseInt(sVals[fieldIdx]);
     fieldIdx++;
     if (sVals[fieldIdx] !== "0") {
-      this.verifierID = import_js_iden3_core12.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+      this.verifierID = import_js_iden3_core14.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     }
     fieldIdx++;
     this.nullifierSessionID = BigInt(sVals[fieldIdx]);
@@ -3867,7 +4267,7 @@ var AtomicQueryV3PubSignals = class extends BaseConfig {
 };
 
 // src/circuits/atomic-query-v3-on-chain.ts
-var import_js_iden3_core13 = require("@iden3/js-iden3-core");
+var import_js_iden3_core15 = require("@iden3/js-iden3-core");
 var import_js_merkletree10 = require("@iden3/js-merkletree");
 var zero2 = "0";
 var AtomicQueryV3OnChainInputs = class extends BaseConfig {
@@ -3951,7 +4351,7 @@ var AtomicQueryV3OnChainInputs = class extends BaseConfig {
     s.issuerClaimSignatureR8x = zero2;
     s.issuerClaimSignatureR8y = zero2;
     s.issuerClaimSignatureS = zero2;
-    s.issuerAuthClaim = new import_js_iden3_core13.Claim().marshalJson();
+    s.issuerAuthClaim = new import_js_iden3_core15.Claim().marshalJson();
     s.issuerAuthClaimMtp = prepareSiblingsStr(new import_js_merkletree10.Proof(), this.getMTLevel());
     s.issuerAuthClaimsTreeRoot = zero2;
     s.issuerAuthRevTreeRoot = zero2;
@@ -3963,7 +4363,7 @@ var AtomicQueryV3OnChainInputs = class extends BaseConfig {
     s.issuerAuthState = zero2;
   }
   fillAuthWithZero(s) {
-    s.authClaim = new import_js_iden3_core13.Claim().marshalJson();
+    s.authClaim = new import_js_iden3_core15.Claim().marshalJson();
     s.userClaimsTreeRoot = import_js_merkletree10.ZERO_HASH.bigInt().toString();
     s.userRevTreeRoot = import_js_merkletree10.ZERO_HASH.bigInt().toString();
     s.userRootsTreeRoot = import_js_merkletree10.ZERO_HASH.bigInt().toString();
@@ -4134,7 +4534,7 @@ var AtomicQueryV3OnChainPubSignals = class extends BaseConfig {
   pubSignalsUnmarshal(data) {
     const sVals = JSON.parse(byteDecoder.decode(data));
     let fieldIdx = 0;
-    this.userID = import_js_iden3_core13.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.userID = import_js_iden3_core15.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.circuitQueryHash = BigInt(sVals[fieldIdx]);
     fieldIdx++;
@@ -4154,7 +4554,7 @@ var AtomicQueryV3OnChainPubSignals = class extends BaseConfig {
     fieldIdx++;
     this.gistRoot = import_js_merkletree10.Hash.fromString(sVals[fieldIdx]);
     fieldIdx++;
-    this.issuerID = import_js_iden3_core13.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.issuerID = import_js_iden3_core15.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.issuerClaimNonRevState = import_js_merkletree10.Hash.fromString(sVals[fieldIdx]);
     fieldIdx++;
@@ -4176,7 +4576,7 @@ var AtomicQueryV3OnChainPubSignals = class extends BaseConfig {
 };
 
 // src/circuits/atomic-query-sig-v2-on-chain.ts
-var import_js_iden3_core14 = require("@iden3/js-iden3-core");
+var import_js_iden3_core16 = require("@iden3/js-iden3-core");
 var import_js_merkletree11 = require("@iden3/js-merkletree");
 var AtomicQuerySigV2OnChainInputs = class extends BaseConfig {
   requestID;
@@ -4427,7 +4827,7 @@ var AtomicQuerySigV2OnChainPubSignals = class extends BaseConfig {
     let fieldIdx = 0;
     this.merklized = parseInt(sVals[fieldIdx]);
     fieldIdx++;
-    this.userID = import_js_iden3_core14.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.userID = import_js_iden3_core16.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.circuitQueryHash = BigInt(sVals[fieldIdx]);
     fieldIdx++;
@@ -4439,7 +4839,7 @@ var AtomicQuerySigV2OnChainPubSignals = class extends BaseConfig {
     fieldIdx++;
     this.gistRoot = import_js_merkletree11.Hash.fromString(sVals[fieldIdx]);
     fieldIdx++;
-    this.issuerID = import_js_iden3_core14.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+    this.issuerID = import_js_iden3_core16.Id.fromBigInt(BigInt(sVals[fieldIdx]));
     fieldIdx++;
     this.isRevocationChecked = parseInt(sVals[fieldIdx]);
     fieldIdx++;
@@ -4463,7 +4863,7 @@ var AtomicQuerySigV2OnChainPubSignals = class extends BaseConfig {
 
 // src/circuits/auth-v2.ts
 var import_js_merkletree12 = require("@iden3/js-merkletree");
-var import_js_iden3_core15 = require("@iden3/js-iden3-core");
+var import_js_iden3_core17 = require("@iden3/js-iden3-core");
 var AuthV2Inputs = class extends BaseConfig {
   genesisID;
   profileNonce;
@@ -4541,7 +4941,7 @@ var AuthV2PubSignals = class {
     if (sVals.length !== len) {
       throw new Error(`invalid number of Output values expected ${len} got ${sVals.length}`);
     }
-    this.userID = import_js_iden3_core15.Id.fromBigInt(BigInt(sVals[0]));
+    this.userID = import_js_iden3_core17.Id.fromBigInt(BigInt(sVals[0]));
     this.challenge = BigInt(sVals[1]);
     this.GISTRoot = import_js_merkletree12.Hash.fromString(sVals[2]);
     return this;
@@ -4555,7 +4955,7 @@ var AuthV2PubSignals = class {
 };
 
 // src/circuits/state-transition.ts
-var import_js_iden3_core16 = require("@iden3/js-iden3-core");
+var import_js_iden3_core18 = require("@iden3/js-iden3-core");
 var import_js_merkletree13 = require("@iden3/js-merkletree");
 var StateTransitionInputs = class extends BaseConfig {
   id;
@@ -4630,7 +5030,7 @@ var StateTransitionPubSignals = class {
         `invalid number of Output values expected ${fieldLength} got ${sVals.length}`
       );
     }
-    this.userId = import_js_iden3_core16.Id.fromBigInt(BigInt(sVals[0]));
+    this.userId = import_js_iden3_core18.Id.fromBigInt(BigInt(sVals[0]));
     this.oldUserState = import_js_merkletree13.Hash.fromString(sVals[1]);
     this.newUserState = import_js_merkletree13.Hash.fromString(sVals[2]);
     this.isOldStateGenesis = BigInt(sVals[3]) === BigInt(1);
@@ -4752,7 +5152,7 @@ var LinkedMultiQueryPubSignals = class {
 var State_default = [{ inputs: [], stateMutability: "nonpayable", type: "constructor" }, { anonymous: false, inputs: [{ indexed: false, internalType: "uint8", name: "version", type: "uint8" }], name: "Initialized", type: "event" }, { anonymous: false, inputs: [{ indexed: true, internalType: "address", name: "previousOwner", type: "address" }, { indexed: true, internalType: "address", name: "newOwner", type: "address" }], name: "OwnershipTransferStarted", type: "event" }, { anonymous: false, inputs: [{ indexed: true, internalType: "address", name: "previousOwner", type: "address" }, { indexed: true, internalType: "address", name: "newOwner", type: "address" }], name: "OwnershipTransferred", type: "event" }, { inputs: [], name: "VERSION", outputs: [{ internalType: "string", name: "", type: "string" }], stateMutability: "view", type: "function" }, { inputs: [], name: "acceptOwnership", outputs: [], stateMutability: "nonpayable", type: "function" }, { inputs: [], name: "getDefaultIdType", outputs: [{ internalType: "bytes2", name: "", type: "bytes2" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }], name: "getGISTProof", outputs: [{ components: [{ internalType: "uint256", name: "root", type: "uint256" }, { internalType: "bool", name: "existence", type: "bool" }, { internalType: "uint256[64]", name: "siblings", type: "uint256[64]" }, { internalType: "uint256", name: "index", type: "uint256" }, { internalType: "uint256", name: "value", type: "uint256" }, { internalType: "bool", name: "auxExistence", type: "bool" }, { internalType: "uint256", name: "auxIndex", type: "uint256" }, { internalType: "uint256", name: "auxValue", type: "uint256" }], internalType: "structIState.GistProof", name: "", type: "tuple" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "blockNumber", type: "uint256" }], name: "getGISTProofByBlock", outputs: [{ components: [{ internalType: "uint256", name: "root", type: "uint256" }, { internalType: "bool", name: "existence", type: "bool" }, { internalType: "uint256[64]", name: "siblings", type: "uint256[64]" }, { internalType: "uint256", name: "index", type: "uint256" }, { internalType: "uint256", name: "value", type: "uint256" }, { internalType: "bool", name: "auxExistence", type: "bool" }, { internalType: "uint256", name: "auxIndex", type: "uint256" }, { internalType: "uint256", name: "auxValue", type: "uint256" }], internalType: "structIState.GistProof", name: "", type: "tuple" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "root", type: "uint256" }], name: "getGISTProofByRoot", outputs: [{ components: [{ internalType: "uint256", name: "root", type: "uint256" }, { internalType: "bool", name: "existence", type: "bool" }, { internalType: "uint256[64]", name: "siblings", type: "uint256[64]" }, { internalType: "uint256", name: "index", type: "uint256" }, { internalType: "uint256", name: "value", type: "uint256" }, { internalType: "bool", name: "auxExistence", type: "bool" }, { internalType: "uint256", name: "auxIndex", type: "uint256" }, { internalType: "uint256", name: "auxValue", type: "uint256" }], internalType: "structIState.GistProof", name: "", type: "tuple" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "timestamp", type: "uint256" }], name: "getGISTProofByTime", outputs: [{ components: [{ internalType: "uint256", name: "root", type: "uint256" }, { internalType: "bool", name: "existence", type: "bool" }, { internalType: "uint256[64]", name: "siblings", type: "uint256[64]" }, { internalType: "uint256", name: "index", type: "uint256" }, { internalType: "uint256", name: "value", type: "uint256" }, { internalType: "bool", name: "auxExistence", type: "bool" }, { internalType: "uint256", name: "auxIndex", type: "uint256" }, { internalType: "uint256", name: "auxValue", type: "uint256" }], internalType: "structIState.GistProof", name: "", type: "tuple" }], stateMutability: "view", type: "function" }, { inputs: [], name: "getGISTRoot", outputs: [{ internalType: "uint256", name: "", type: "uint256" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "start", type: "uint256" }, { internalType: "uint256", name: "length", type: "uint256" }], name: "getGISTRootHistory", outputs: [{ components: [{ internalType: "uint256", name: "root", type: "uint256" }, { internalType: "uint256", name: "replacedByRoot", type: "uint256" }, { internalType: "uint256", name: "createdAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "replacedAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "createdAtBlock", type: "uint256" }, { internalType: "uint256", name: "replacedAtBlock", type: "uint256" }], internalType: "structIState.GistRootInfo[]", name: "", type: "tuple[]" }], stateMutability: "view", type: "function" }, { inputs: [], name: "getGISTRootHistoryLength", outputs: [{ internalType: "uint256", name: "", type: "uint256" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "root", type: "uint256" }], name: "getGISTRootInfo", outputs: [{ components: [{ internalType: "uint256", name: "root", type: "uint256" }, { internalType: "uint256", name: "replacedByRoot", type: "uint256" }, { internalType: "uint256", name: "createdAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "replacedAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "createdAtBlock", type: "uint256" }, { internalType: "uint256", name: "replacedAtBlock", type: "uint256" }], internalType: "structIState.GistRootInfo", name: "", type: "tuple" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "blockNumber", type: "uint256" }], name: "getGISTRootInfoByBlock", outputs: [{ components: [{ internalType: "uint256", name: "root", type: "uint256" }, { internalType: "uint256", name: "replacedByRoot", type: "uint256" }, { internalType: "uint256", name: "createdAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "replacedAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "createdAtBlock", type: "uint256" }, { internalType: "uint256", name: "replacedAtBlock", type: "uint256" }], internalType: "structIState.GistRootInfo", name: "", type: "tuple" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "timestamp", type: "uint256" }], name: "getGISTRootInfoByTime", outputs: [{ components: [{ internalType: "uint256", name: "root", type: "uint256" }, { internalType: "uint256", name: "replacedByRoot", type: "uint256" }, { internalType: "uint256", name: "createdAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "replacedAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "createdAtBlock", type: "uint256" }, { internalType: "uint256", name: "replacedAtBlock", type: "uint256" }], internalType: "structIState.GistRootInfo", name: "", type: "tuple" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }], name: "getStateInfoById", outputs: [{ components: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "state", type: "uint256" }, { internalType: "uint256", name: "replacedByState", type: "uint256" }, { internalType: "uint256", name: "createdAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "replacedAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "createdAtBlock", type: "uint256" }, { internalType: "uint256", name: "replacedAtBlock", type: "uint256" }], internalType: "structIState.StateInfo", name: "", type: "tuple" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "state", type: "uint256" }], name: "getStateInfoByIdAndState", outputs: [{ components: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "state", type: "uint256" }, { internalType: "uint256", name: "replacedByState", type: "uint256" }, { internalType: "uint256", name: "createdAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "replacedAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "createdAtBlock", type: "uint256" }, { internalType: "uint256", name: "replacedAtBlock", type: "uint256" }], internalType: "structIState.StateInfo", name: "", type: "tuple" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "startIndex", type: "uint256" }, { internalType: "uint256", name: "length", type: "uint256" }], name: "getStateInfoHistoryById", outputs: [{ components: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "state", type: "uint256" }, { internalType: "uint256", name: "replacedByState", type: "uint256" }, { internalType: "uint256", name: "createdAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "replacedAtTimestamp", type: "uint256" }, { internalType: "uint256", name: "createdAtBlock", type: "uint256" }, { internalType: "uint256", name: "replacedAtBlock", type: "uint256" }], internalType: "structIState.StateInfo[]", name: "", type: "tuple[]" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }], name: "getStateInfoHistoryLengthById", outputs: [{ internalType: "uint256", name: "", type: "uint256" }], stateMutability: "view", type: "function" }, { inputs: [], name: "getVerifier", outputs: [{ internalType: "address", name: "", type: "address" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }], name: "idExists", outputs: [{ internalType: "bool", name: "", type: "bool" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "contractIStateTransitionVerifier", name: "verifierContractAddr", type: "address" }, { internalType: "bytes2", name: "defaultIdType", type: "bytes2" }], name: "initialize", outputs: [], stateMutability: "nonpayable", type: "function" }, { inputs: [], name: "owner", outputs: [{ internalType: "address", name: "", type: "address" }], stateMutability: "view", type: "function" }, { inputs: [], name: "pendingOwner", outputs: [{ internalType: "address", name: "", type: "address" }], stateMutability: "view", type: "function" }, { inputs: [], name: "renounceOwnership", outputs: [], stateMutability: "nonpayable", type: "function" }, { inputs: [{ internalType: "bytes2", name: "defaultIdType", type: "bytes2" }], name: "setDefaultIdType", outputs: [], stateMutability: "nonpayable", type: "function" }, { inputs: [{ internalType: "address", name: "newVerifierAddr", type: "address" }], name: "setVerifier", outputs: [], stateMutability: "nonpayable", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "state", type: "uint256" }], name: "stateExists", outputs: [{ internalType: "bool", name: "", type: "bool" }], stateMutability: "view", type: "function" }, { inputs: [{ internalType: "address", name: "newOwner", type: "address" }], name: "transferOwnership", outputs: [], stateMutability: "nonpayable", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "oldState", type: "uint256" }, { internalType: "uint256", name: "newState", type: "uint256" }, { internalType: "bool", name: "isOldStateGenesis", type: "bool" }, { internalType: "uint256[2]", name: "a", type: "uint256[2]" }, { internalType: "uint256[2][2]", name: "b", type: "uint256[2][2]" }, { internalType: "uint256[2]", name: "c", type: "uint256[2]" }], name: "transitState", outputs: [], stateMutability: "nonpayable", type: "function" }, { inputs: [{ internalType: "uint256", name: "id", type: "uint256" }, { internalType: "uint256", name: "oldState", type: "uint256" }, { internalType: "uint256", name: "newState", type: "uint256" }, { internalType: "bool", name: "isOldStateGenesis", type: "bool" }, { internalType: "uint256", name: "methodId", type: "uint256" }, { internalType: "bytes", name: "methodParams", type: "bytes" }], name: "transitStateGeneric", outputs: [], stateMutability: "nonpayable", type: "function" }];
 
 // src/storage/blockchain/state.ts
-var import_js_iden3_core30 = require("@iden3/js-iden3-core");
+var import_js_iden3_core32 = require("@iden3/js-iden3-core");
 
 // src/blockchain/transaction-service.ts
 var TransactionService = class {
@@ -4801,9 +5201,9 @@ var TransactionService = class {
 };
 
 // src/storage/blockchain/common.ts
-var import_ethers3 = require("ethers");
+var import_ethers4 = require("ethers");
 var packZkpProof = (inputs, a, b, c) => {
-  return new import_ethers3.ethers.AbiCoder().encode(
+  return new import_ethers4.ethers.AbiCoder().encode(
     ["uint256[] inputs", "uint256[2]", "uint256[2][2]", "uint256[2]"],
     [inputs, a, b, c]
   );
@@ -5405,7 +5805,7 @@ var PackageManager = class {
 
 // src/iden3comm/packers/zkp.ts
 var import_js_jwz2 = require("@iden3/js-jwz");
-var import_js_iden3_core17 = require("@iden3/js-iden3-core");
+var import_js_iden3_core19 = require("@iden3/js-iden3-core");
 
 // src/iden3comm/constants.ts
 var constants_exports = {};
@@ -5822,9 +6222,9 @@ var verifySender = async (token, msg) => {
         const authSignals = new AuthV2PubSignals().pubSignalsUnmarshal(
           byteEncoder.encode(JSON.stringify(token.zkProof.pub_signals))
         );
-        const did = import_js_iden3_core17.DID.parseFromId(authSignals.userID);
+        const did = import_js_iden3_core19.DID.parseFromId(authSignals.userID);
         const msgHash = await token.getMessageHash();
-        const challenge = import_js_iden3_core17.BytesHelper.bytesToInt(msgHash.reverse());
+        const challenge = import_js_iden3_core19.BytesHelper.bytesToInt(msgHash.reverse());
         if (challenge !== authSignals.challenge) {
           throw new Error(ErrSenderNotUsedTokenCreation);
         }
@@ -6101,14 +6501,14 @@ var DiscoveryProtocolFeatureType = /* @__PURE__ */ ((DiscoveryProtocolFeatureTyp
 })(DiscoveryProtocolFeatureType || {});
 
 // src/iden3comm/handlers/auth.ts
-var import_js_iden3_core19 = require("@iden3/js-iden3-core");
+var import_js_iden3_core21 = require("@iden3/js-iden3-core");
 var import_js_jwz4 = require("@iden3/js-jwz");
 var uuid2 = __toESM(require("uuid"), 1);
 
 // src/iden3comm/handlers/common.ts
 var import_js_crypto9 = require("@iden3/js-crypto");
-var import_js_iden3_core18 = require("@iden3/js-iden3-core");
-var import_ethers4 = require("ethers");
+var import_js_iden3_core20 = require("@iden3/js-iden3-core");
+var import_ethers5 = require("ethers");
 var getGroupedQueries = (requestScope) => requestScope.reduce((acc, proofReq) => {
   const groupId = proofReq.query.groupId;
   if (!groupId) {
@@ -6275,8 +6675,8 @@ var calcChallengeAuthV2 = (senderAddress, zkpResponses) => {
     };
   });
   return BigInt(
-    import_ethers4.ethers.keccak256(
-      new import_ethers4.ethers.AbiCoder().encode(
+    import_ethers5.ethers.keccak256(
+      new import_ethers5.ethers.AbiCoder().encode(
         ["address", "(uint256 requestId,bytes proof,bytes metadata)[]"],
         [senderAddress, responses]
       )
@@ -6284,10 +6684,10 @@ var calcChallengeAuthV2 = (senderAddress, zkpResponses) => {
   ) & BigInt("0x0fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
 };
 var packMetadatas = (metas) => {
-  return new import_ethers4.ethers.AbiCoder().encode(["tuple(string key,bytes value)[]"], [metas]);
+  return new import_ethers5.ethers.AbiCoder().encode(["tuple(string key,bytes value)[]"], [metas]);
 };
 var verifyExpiresTime = (message) => {
-  if (message?.expires_time && message.expires_time < (0, import_js_iden3_core18.getUnixTimestamp)(/* @__PURE__ */ new Date())) {
+  if (message?.expires_time && message.expires_time < (0, import_js_iden3_core20.getUnixTimestamp)(/* @__PURE__ */ new Date())) {
     throw new Error("Message expired");
   }
 };
@@ -6405,8 +6805,8 @@ function createAuthorizationRequestWithMessage(reason, message, sender, callback
       callbackUrl,
       scope: opts?.scope ?? []
     },
-    created_time: (0, import_js_iden3_core19.getUnixTimestamp)(/* @__PURE__ */ new Date()),
-    expires_time: opts?.expires_time ? (0, import_js_iden3_core19.getUnixTimestamp)(opts.expires_time) : void 0,
+    created_time: (0, import_js_iden3_core21.getUnixTimestamp)(/* @__PURE__ */ new Date()),
+    expires_time: opts?.expires_time ? (0, import_js_iden3_core21.getUnixTimestamp)(opts.expires_time) : void 0,
     attachments: opts?.attachments
   };
   return request;
@@ -6461,7 +6861,7 @@ var AuthHandler = class extends AbstractMessageHandler {
     if (authRequest.type !== PROTOCOL_MESSAGE_TYPE.AUTHORIZATION_REQUEST_MESSAGE_TYPE) {
       throw new Error("Invalid message type for authorization request");
     }
-    const to = authRequest.to ? import_js_iden3_core19.DID.parse(authRequest.to) : ctx.senderDid;
+    const to = authRequest.to ? import_js_iden3_core21.DID.parse(authRequest.to) : ctx.senderDid;
     const guid = uuid2.v4();
     if (!authRequest.from) {
       throw new Error("auth request should contain from field");
@@ -6472,7 +6872,7 @@ var AuthHandler = class extends AbstractMessageHandler {
       responseType,
       authRequest.body.accept
     );
-    const from = import_js_iden3_core19.DID.parse(authRequest.from);
+    const from = import_js_iden3_core21.DID.parse(authRequest.from);
     const responseScope = await processZeroKnowledgeProofRequests(
       to,
       authRequest?.body.scope,
@@ -6560,7 +6960,7 @@ var AuthHandler = class extends AbstractMessageHandler {
         );
       }
       const params = proofRequest.params ?? {};
-      params.verifierDid = import_js_iden3_core19.DID.parse(request.from);
+      params.verifierDid = import_js_iden3_core21.DID.parse(request.from);
       const opts = [ctx.acceptedProofGenerationDelay, ctx.acceptedStateTransitionDelay].some(
         (delay) => delay !== void 0
       ) ? {
@@ -6653,7 +7053,7 @@ var AuthHandler = class extends AbstractMessageHandler {
 };
 
 // src/storage/blockchain/onchain-revocation.ts
-var import_ethers5 = require("ethers");
+var import_ethers6 = require("ethers");
 var import_js_merkletree16 = require("@iden3/js-merkletree");
 
 // src/storage/blockchain/abi/CredentialStatusResolver.json
@@ -6671,8 +7071,8 @@ var OnChainRevocationStorage = class _OnChainRevocationStorage {
   constructor(_config, contractAddress, _signer) {
     this._config = _config;
     this._signer = _signer;
-    this._provider = new import_ethers5.JsonRpcProvider(_config.url);
-    let contract = new import_ethers5.Contract(contractAddress, CredentialStatusResolver_default, this._provider);
+    this._provider = new import_ethers6.JsonRpcProvider(_config.url);
+    let contract = new import_ethers6.Contract(contractAddress, CredentialStatusResolver_default, this._provider);
     if (this._signer) {
       this._signer = this._signer.connect(this._provider);
       contract = contract.connect(this._signer);
@@ -6758,7 +7158,7 @@ var OnChainRevocationStorage = class _OnChainRevocationStorage {
 };
 
 // src/credentials/status/on-chain-revocation.ts
-var import_js_iden3_core20 = require("@iden3/js-iden3-core");
+var import_js_iden3_core22 = require("@iden3/js-iden3-core");
 var import_js_merkletree17 = require("@iden3/js-merkletree");
 
 // src/storage/blockchain/errors.ts
@@ -6823,7 +7223,7 @@ var OnChainResolver = class {
     if (revocationNonce !== credentialStatus.revocationNonce) {
       throw new Error("revocationNonce does not match");
     }
-    const issuerId = import_js_iden3_core20.DID.idFromDID(issuer);
+    const issuerId = import_js_iden3_core22.DID.idFromDID(issuer);
     let latestIssuerState;
     try {
       const latestStateInfo = await this._stateStorage.getLatestStateById(issuerId.bigInt());
@@ -6848,7 +7248,7 @@ var OnChainResolver = class {
       }
       latestIssuerState = stateBigInt;
     }
-    const id = import_js_iden3_core20.DID.idFromDID(issuer);
+    const id = import_js_iden3_core22.DID.idFromDID(issuer);
     const onChainCaller = this._getOnChainRevocationStorageForIssuer(chainId, contractAddress);
     const revocationStatus = await onChainCaller.getRevocationStatusByIdAndState(
       id.bigInt(),
@@ -6905,7 +7305,7 @@ var OnChainResolver = class {
 };
 
 // src/credentials/status/reverse-sparse-merkle-tree.ts
-var import_js_iden3_core21 = require("@iden3/js-iden3-core");
+var import_js_iden3_core23 = require("@iden3/js-iden3-core");
 var import_js_merkletree19 = require("@iden3/js-merkletree");
 
 // src/credentials/status/sparse-merkle-tree.ts
@@ -7031,7 +7431,7 @@ var RHSResolver = class {
    * @returns Promise<RevocationStatus>
    */
   async getStatus(credentialStatus, issuerDID, issuerData, genesisState) {
-    const issuerId = import_js_iden3_core21.DID.idFromDID(issuerDID);
+    const issuerId = import_js_iden3_core23.DID.idFromDID(issuerDID);
     let latestState;
     try {
       const latestStateInfo = await this._state.getLatestStateById(issuerId.bigInt());
@@ -7173,16 +7573,16 @@ var RHSResolver = class {
   }
 };
 function isIssuerGenesis(issuer, state) {
-  const did = import_js_iden3_core21.DID.parse(issuer);
-  const id = import_js_iden3_core21.DID.idFromDID(did);
-  const { method, blockchain, networkId } = import_js_iden3_core21.DID.decodePartsFromId(id);
-  const arr = import_js_iden3_core21.BytesHelper.hexToBytes(state);
-  const stateBigInt = import_js_iden3_core21.BytesHelper.bytesToInt(arr);
-  const type = (0, import_js_iden3_core21.buildDIDType)(method, blockchain, networkId);
-  return isGenesisStateId(import_js_iden3_core21.DID.idFromDID(did).bigInt(), stateBigInt, type);
+  const did = import_js_iden3_core23.DID.parse(issuer);
+  const id = import_js_iden3_core23.DID.idFromDID(did);
+  const { method, blockchain, networkId } = import_js_iden3_core23.DID.decodePartsFromId(id);
+  const arr = import_js_iden3_core23.BytesHelper.hexToBytes(state);
+  const stateBigInt = import_js_iden3_core23.BytesHelper.bytesToInt(arr);
+  const type = (0, import_js_iden3_core23.buildDIDType)(method, blockchain, networkId);
+  return isGenesisStateId(import_js_iden3_core23.DID.idFromDID(did).bigInt(), stateBigInt, type);
 }
 function isGenesisStateId(id, state, type) {
-  const idFromState = import_js_iden3_core21.Id.idGenesisFromIdenState(type, state);
+  const idFromState = import_js_iden3_core23.Id.idGenesisFromIdenState(type, state);
   return id.toString() === idFromState.bigInt().toString();
 }
 
@@ -7377,7 +7777,7 @@ var DidDocumentCredentialStatusResolver = class {
 };
 
 // src/credentials/credential-wallet.ts
-var import_js_iden3_core22 = require("@iden3/js-iden3-core");
+var import_js_iden3_core24 = require("@iden3/js-iden3-core");
 var uuid4 = __toESM(require("uuid"), 1);
 var CredentialWallet = class {
   /**
@@ -7439,7 +7839,7 @@ var CredentialWallet = class {
     const mtpProof = cred.getIden3SparseMerkleTreeProof();
     const sigProof = cred.getBJJSignature2021Proof();
     const stateInfo = mtpProof ? mtpProof.issuerData.state : sigProof?.issuerData.state;
-    const issuerDID = import_js_iden3_core22.DID.parse(cred.issuer);
+    const issuerDID = import_js_iden3_core24.DID.parse(cred.issuer);
     const userDID = getUserDIDFromCredential(issuerDID, cred);
     const opts = {
       issuerGenesisState: stateInfo,
@@ -7638,7 +8038,7 @@ async function buildNodesUp(siblings, node) {
 
 // src/iden3comm/handlers/fetch.ts
 var import_js_jwz5 = require("@iden3/js-jwz");
-var import_js_iden3_core23 = require("@iden3/js-iden3-core");
+var import_js_iden3_core25 = require("@iden3/js-iden3-core");
 var uuid5 = __toESM(require("uuid"), 1);
 var FetchHandler = class _FetchHandler extends AbstractMessageHandler {
   /**
@@ -7691,8 +8091,8 @@ var FetchHandler = class _FetchHandler extends AbstractMessageHandler {
     }
     const credentials = [];
     for (const credentialInfo of offerMessage.body.credentials) {
-      const issuerDID = import_js_iden3_core23.DID.parse(offerMessage.from);
-      const userDID = import_js_iden3_core23.DID.parse(offerMessage.to);
+      const issuerDID = import_js_iden3_core25.DID.parse(offerMessage.from);
+      const userDID = import_js_iden3_core25.DID.parse(offerMessage.to);
       const credential = await this.opts.onchainIssuer.getCredential(
         issuerDID,
         userDID,
@@ -7724,7 +8124,7 @@ var FetchHandler = class _FetchHandler extends AbstractMessageHandler {
       const packerOpts = ctx.mediaType === "application/iden3comm-signed-json" /* SignedMessage */ ? ctx.packerOptions : {
         provingMethodAlg: import_js_jwz5.proving.provingMethodGroth16AuthV2Instance.methodAlg
       };
-      const senderDID = import_js_iden3_core23.DID.parse(offerMessage.to);
+      const senderDID = import_js_iden3_core25.DID.parse(offerMessage.to);
       const token = byteDecoder.decode(
         await this._packerMgr.pack(ctx.mediaType, msgBytes, {
           senderDID,
@@ -7814,8 +8214,8 @@ var FetchHandler = class _FetchHandler extends AbstractMessageHandler {
     if (!msgRequest.from) {
       throw new Error("failed request. empty 'from' field");
     }
-    const issuerDID = import_js_iden3_core23.DID.parse(msgRequest.to);
-    const userDID = import_js_iden3_core23.DID.parse(msgRequest.from);
+    const issuerDID = import_js_iden3_core25.DID.parse(msgRequest.to);
+    const userDID = import_js_iden3_core25.DID.parse(msgRequest.from);
     const credId = msgRequest.body?.id;
     if (!credId) {
       throw new Error("invalid credential id in fetch request body");
@@ -7867,7 +8267,10 @@ var FetchHandler = class _FetchHandler extends AbstractMessageHandler {
     if (!issuanceMsg.body?.credential) {
       throw new Error("credential is missing in issuance response message");
     }
-    await this.opts.credentialWallet.save(W3CCredential.fromJSON(issuanceMsg.body.credential));
+    if (!(issuanceMsg.body.credential instanceof W3CCredential)) {
+      throw new Error("credential object is not properly unmarshaled");
+    }
+    await this.opts.credentialWallet.save(issuanceMsg.body.credential);
     return null;
   }
   /**
@@ -7882,6 +8285,7 @@ var FetchHandler = class _FetchHandler extends AbstractMessageHandler {
     if (!opts?.allowExpiredMessages) {
       verifyExpiresTime(issuanceMsg);
     }
+    issuanceMsg.body.credential = W3CCredential.fromJSON(issuanceMsg.body.credential);
     await this.handleIssuanceResponseMsg(issuanceMsg);
     return Uint8Array.from([]);
   }
@@ -7899,7 +8303,7 @@ var FetchHandler = class _FetchHandler extends AbstractMessageHandler {
 };
 
 // src/iden3comm/handlers/contract-request.ts
-var import_js_iden3_core24 = require("@iden3/js-iden3-core");
+var import_js_iden3_core26 = require("@iden3/js-iden3-core");
 var ContractRequestHandler = class extends AbstractMessageHandler {
   /**
    * Creates an instance of ContractRequestHandler.
@@ -7946,11 +8350,11 @@ var ContractRequestHandler = class extends AbstractMessageHandler {
       throw new Error("Can't sign transaction. Provide Signer in options.");
     }
     const { chain_id } = message.body.transaction_data;
-    const networkFlag = Object.keys(import_js_iden3_core24.ChainIds).find((key) => import_js_iden3_core24.ChainIds[key] === chain_id);
+    const networkFlag = Object.keys(import_js_iden3_core26.ChainIds).find((key) => import_js_iden3_core26.ChainIds[key] === chain_id);
     if (!networkFlag) {
       throw new Error(`Invalid chain id ${chain_id}`);
     }
-    const verifierDid = message.from ? import_js_iden3_core24.DID.parse(message.from) : void 0;
+    const verifierDid = message.from ? import_js_iden3_core26.DID.parse(message.from) : void 0;
     const { scope = [] } = message.body;
     const zkpResponses = await processZeroKnowledgeProofRequests(
       did,
@@ -7959,7 +8363,7 @@ var ContractRequestHandler = class extends AbstractMessageHandler {
       this._proofService,
       {
         ethSigner,
-        challenge: challenge ?? import_js_iden3_core24.BytesHelper.bytesToInt(hexToBytes(await ethSigner.getAddress())),
+        challenge: challenge ?? import_js_iden3_core26.BytesHelper.bytesToInt(hexToBytes(await ethSigner.getAddress())),
         supportedCircuits: this._supportedCircuits
       }
     );
@@ -7999,7 +8403,7 @@ var ContractRequestHandler = class extends AbstractMessageHandler {
           PROTOCOL_MESSAGE_TYPE.CONTRACT_INVOKE_REQUEST_MESSAGE_TYPE,
           message.body.accept
         );
-        const identifier = import_js_iden3_core24.DID.parse(message.to);
+        const identifier = import_js_iden3_core26.DID.parse(message.to);
         const { authProof } = await processProofAuth(identifier, this._proofService, {
           supportedCircuits: this._supportedCircuits,
           acceptProfile,
@@ -8070,7 +8474,7 @@ var ContractRequestHandler = class extends AbstractMessageHandler {
         transaction_data: request.body.transaction_data,
         scope: []
       },
-      created_time: (0, import_js_iden3_core24.getUnixTimestamp)(/* @__PURE__ */ new Date())
+      created_time: (0, import_js_iden3_core26.getUnixTimestamp)(/* @__PURE__ */ new Date())
     };
     for (const [txHash, zkpResponses] of txHashToZkpResponseMap) {
       for (const zkpResponse of zkpResponses.responses) {
@@ -8113,11 +8517,11 @@ var ContractRequestHandler = class extends AbstractMessageHandler {
       throw new Error("Can't sign transaction. Provide Signer in options.");
     }
     const { chain_id } = ciRequest.body.transaction_data;
-    const networkFlag = Object.keys(import_js_iden3_core24.ChainIds).find((key) => import_js_iden3_core24.ChainIds[key] === chain_id);
+    const networkFlag = Object.keys(import_js_iden3_core26.ChainIds).find((key) => import_js_iden3_core26.ChainIds[key] === chain_id);
     if (!networkFlag) {
       throw new Error(`Invalid chain id ${chain_id}`);
     }
-    const verifierDid = ciRequest.from ? import_js_iden3_core24.DID.parse(ciRequest.from) : void 0;
+    const verifierDid = ciRequest.from ? import_js_iden3_core26.DID.parse(ciRequest.from) : void 0;
     const zkpResponses = await processZeroKnowledgeProofRequests(
       did,
       ciRequest?.body?.scope,
@@ -8135,7 +8539,7 @@ var ContractRequestHandler = class extends AbstractMessageHandler {
 
 // src/iden3comm/handlers/refresh.ts
 var import_js_jwz6 = require("@iden3/js-jwz");
-var import_js_iden3_core25 = require("@iden3/js-iden3-core");
+var import_js_iden3_core27 = require("@iden3/js-iden3-core");
 var uuid6 = __toESM(require("uuid"), 1);
 var RefreshHandler = class {
   /**
@@ -8156,7 +8560,7 @@ var RefreshHandler = class {
     if (!otherIdentifier) {
       throw new Error("self credentials do not support refresh");
     }
-    const senderDID = import_js_iden3_core25.DID.parse(otherIdentifier);
+    const senderDID = import_js_iden3_core27.DID.parse(otherIdentifier);
     const zkpParams = {
       senderDID,
       provingMethodAlg: new import_js_jwz6.ProvingMethodAlg(
@@ -8201,7 +8605,7 @@ var RefreshHandler = class {
 };
 
 // src/iden3comm/handlers/revocation-status.ts
-var import_js_iden3_core26 = require("@iden3/js-iden3-core");
+var import_js_iden3_core28 = require("@iden3/js-iden3-core");
 var uuid7 = __toESM(require("uuid"), 1);
 var import_js_jwz7 = require("@iden3/js-jwz");
 var RevocationStatusHandler = class extends AbstractMessageHandler {
@@ -8243,7 +8647,7 @@ var RevocationStatusHandler = class extends AbstractMessageHandler {
     if (!rsRequest.body?.revocation_nonce) {
       throw new Error(`failed request. empty 'revocation_nonce' field`);
     }
-    const issuerDID = import_js_iden3_core26.DID.parse(rsRequest.to);
+    const issuerDID = import_js_iden3_core28.DID.parse(rsRequest.to);
     const mtpWithTreeState = await this._identityWallet.generateNonRevocationMtpWithNonce(
       issuerDID,
       BigInt(rsRequest.body.revocation_nonce),
@@ -8310,7 +8714,7 @@ var RevocationStatusHandler = class extends AbstractMessageHandler {
     if (!rsRequest.to) {
       throw new Error(`failed request. empty 'to' field`);
     }
-    const senderDID = import_js_iden3_core26.DID.parse(rsRequest.to);
+    const senderDID = import_js_iden3_core28.DID.parse(rsRequest.to);
     return this._packerMgr.pack(opts.mediaType, byteEncoder.encode(JSON.stringify(response)), {
       senderDID,
       ...packerOpts
@@ -8319,7 +8723,7 @@ var RevocationStatusHandler = class extends AbstractMessageHandler {
 };
 
 // src/iden3comm/handlers/credential-proposal.ts
-var import_js_iden3_core27 = require("@iden3/js-iden3-core");
+var import_js_iden3_core29 = require("@iden3/js-iden3-core");
 var uuid8 = __toESM(require("uuid"), 1);
 var import_js_jwz8 = require("@iden3/js-jwz");
 function createProposalRequest(sender, receiver, opts) {
@@ -8331,9 +8735,12 @@ function createProposalRequest(sender, receiver, opts) {
     to: receiver.string(),
     typ: "application/iden3comm-plain-json" /* PlainMessage */,
     type: PROTOCOL_MESSAGE_TYPE.PROPOSAL_REQUEST_MESSAGE_TYPE,
-    body: opts,
-    created_time: (0, import_js_iden3_core27.getUnixTimestamp)(/* @__PURE__ */ new Date()),
-    expires_time: opts?.expires_time ? (0, import_js_iden3_core27.getUnixTimestamp)(opts.expires_time) : void 0,
+    body: {
+      credentials: opts.credentials,
+      did_doc: opts.did_doc
+    },
+    created_time: (0, import_js_iden3_core29.getUnixTimestamp)(/* @__PURE__ */ new Date()),
+    expires_time: opts?.expires_time ? (0, import_js_iden3_core29.getUnixTimestamp)(opts.expires_time) : void 0,
     attachments: opts.attachments
   };
   return request;
@@ -8350,8 +8757,8 @@ function createProposal(sender, receiver, proposals, opts) {
     body: {
       proposals: proposals || []
     },
-    created_time: (0, import_js_iden3_core27.getUnixTimestamp)(/* @__PURE__ */ new Date()),
-    expires_time: opts?.expires_time ? (0, import_js_iden3_core27.getUnixTimestamp)(opts.expires_time) : void 0
+    created_time: (0, import_js_iden3_core29.getUnixTimestamp)(/* @__PURE__ */ new Date()),
+    expires_time: opts?.expires_time ? (0, import_js_iden3_core29.getUnixTimestamp)(opts.expires_time) : void 0
   };
   return request;
 }
@@ -8484,7 +8891,7 @@ var CredentialProposalHandler = class extends AbstractMessageHandler {
     if (!opts?.allowExpiredMessages) {
       verifyExpiresTime(proposalRequest);
     }
-    const senderDID = import_js_iden3_core27.DID.parse(proposalRequest.from);
+    const senderDID = import_js_iden3_core29.DID.parse(proposalRequest.from);
     const message = await this.handleProposalRequestMessage(proposalRequest);
     const response = byteEncoder.encode(JSON.stringify(message));
     const packerOpts = this._params.packerParams.mediaType === "application/iden3comm-signed-json" /* SignedMessage */ ? this._params.packerParams.packerOptions : {
@@ -8512,10 +8919,9 @@ var CredentialProposalHandler = class extends AbstractMessageHandler {
 };
 
 // src/iden3comm/handlers/payment.ts
-var import_js_iden3_core28 = require("@iden3/js-iden3-core");
+var import_js_iden3_core30 = require("@iden3/js-iden3-core");
 var uuid9 = __toESM(require("uuid"), 1);
 var import_js_jwz9 = require("@iden3/js-jwz");
-var import_ethers6 = require("ethers");
 function createPaymentRequest(sender, receiver, agent, payments, opts) {
   const uuidv4 = uuid9.v4();
   const request = {
@@ -8529,48 +8935,11 @@ function createPaymentRequest(sender, receiver, agent, payments, opts) {
       agent,
       payments
     },
-    created_time: (0, import_js_iden3_core28.getUnixTimestamp)(/* @__PURE__ */ new Date()),
-    expires_time: opts?.expires_time ? (0, import_js_iden3_core28.getUnixTimestamp)(opts.expires_time) : void 0
+    created_time: (0, import_js_iden3_core30.getUnixTimestamp)(/* @__PURE__ */ new Date()),
+    expires_time: opts?.expires_time ? (0, import_js_iden3_core30.getUnixTimestamp)(opts.expires_time) : void 0
   };
   return request;
 }
-async function verifyEIP712TypedData(data, resolver) {
-  const paymentData = data.type === "Iden3PaymentRailsRequestV1" /* Iden3PaymentRailsRequestV1 */ ? {
-    recipient: data.recipient,
-    amount: data.amount,
-    expirationDate: (0, import_js_iden3_core28.getUnixTimestamp)(new Date(data.expirationDate)),
-    nonce: data.nonce,
-    metadata: "0x"
-  } : {
-    tokenAddress: data.tokenAddress,
-    recipient: data.recipient,
-    amount: data.amount,
-    expirationDate: (0, import_js_iden3_core28.getUnixTimestamp)(new Date(data.expirationDate)),
-    nonce: data.nonce,
-    metadata: "0x"
-  };
-  const proof = Array.isArray(data.proof) ? data.proof[0] : data.proof;
-  const typesFetchResult = await fetch(proof.eip712.types);
-  const types = await typesFetchResult.json();
-  delete types.EIP712Domain;
-  const recovered = import_ethers6.ethers.verifyTypedData(
-    proof.eip712.domain,
-    types,
-    paymentData,
-    proof.proofValue
-  );
-  const { didDocument } = await resolver.resolve(proof.verificationMethod);
-  if (didDocument?.verificationMethod) {
-    for (const verificationMethod of didDocument.verificationMethod) {
-      if (verificationMethod.blockchainAccountId?.split(":").slice(-1)[0].toLowerCase() === recovered.toLowerCase()) {
-        return recovered;
-      }
-    }
-  } else {
-    throw new Error("failed request. issuer DIDDocument does not contain any verificationMethods");
-  }
-  throw new Error(`failed request. no matching verificationMethod`);
-}
 function createPayment(sender, receiver, payments, opts) {
   const uuidv4 = uuid9.v4();
   const request = {
@@ -8583,8 +8952,8 @@ function createPayment(sender, receiver, payments, opts) {
     body: {
       payments
     },
-    created_time: (0, import_js_iden3_core28.getUnixTimestamp)(/* @__PURE__ */ new Date()),
-    expires_time: opts?.expires_time ? (0, import_js_iden3_core28.getUnixTimestamp)(opts.expires_time) : void 0
+    created_time: (0, import_js_iden3_core30.getUnixTimestamp)(/* @__PURE__ */ new Date()),
+    expires_time: opts?.expires_time ? (0, import_js_iden3_core30.getUnixTimestamp)(opts.expires_time) : void 0
   };
   return request;
 }
@@ -8638,8 +9007,8 @@ var PaymentHandler = class extends AbstractMessageHandler {
     if (!ctx.paymentHandler) {
       throw new Error(`please provide payment handler in context`);
     }
-    const senderDID = import_js_iden3_core28.DID.parse(paymentRequest.to);
-    const receiverDID = import_js_iden3_core28.DID.parse(paymentRequest.from);
+    const senderDID = import_js_iden3_core30.DID.parse(paymentRequest.to);
+    const receiverDID = import_js_iden3_core30.DID.parse(paymentRequest.from);
     const payments = [];
     for (let i = 0; i < paymentRequest.body.payments.length; i++) {
       const { data } = paymentRequest.body.payments[i];
@@ -8669,6 +9038,22 @@ var PaymentHandler = class extends AbstractMessageHandler {
             )
           );
           break;
+        case "Iden3PaymentRailsSolanaRequestV1" /* Iden3PaymentRailsSolanaRequestV1 */:
+          payments.push(
+            await this.handleIden3PaymentRailsSolanaRequestV1(selectedPayment, ctx.paymentHandler)
+          );
+          break;
+        case "Iden3PaymentRailsSolanaSPLRequestV1" /* Iden3PaymentRailsSolanaSPLRequestV1 */:
+          payments.push(
+            await this.handleIden3PaymentRailsSolanaSPLRequestV1(
+              {
+                ...selectedPayment,
+                type: "Iden3PaymentRailsSolanaSPLRequestV1" /* Iden3PaymentRailsSolanaSPLRequestV1 */
+              },
+              ctx.paymentHandler
+            )
+          );
+          break;
       }
     }
     const paymentMessage = createPayment(senderDID, receiverDID, payments);
@@ -8708,7 +9093,7 @@ var PaymentHandler = class extends AbstractMessageHandler {
     if (!agentMessage) {
       return null;
     }
-    const senderDID = import_js_iden3_core28.DID.parse(paymentRequest.to);
+    const senderDID = import_js_iden3_core30.DID.parse(paymentRequest.to);
     return this.packMessage(agentMessage, senderDID);
   }
   /**
@@ -8747,7 +9132,7 @@ var PaymentHandler = class extends AbstractMessageHandler {
   /**
    * @inheritdoc IPaymentHandler#createPaymentRailsV1
    */
-  async createPaymentRailsV1(sender, receiver, agent, signer, payments) {
+  async createPaymentRailsV1(sender, receiver, agent, signer, payments, createOptions) {
     const paymentRequestInfo = [];
     for (let i = 0; i < payments.length; i++) {
       const { credentials, description } = payments[i];
@@ -8765,70 +9150,40 @@ var PaymentHandler = class extends AbstractMessageHandler {
         if (!option) {
           throw new Error(`failed request. no option for id ${optionId}`);
         }
-        if (option.type === "Iden3PaymentRailsERC20RequestV1" /* Iden3PaymentRailsERC20RequestV1 */ && !option.contractAddress) {
+        if ((option.type === "Iden3PaymentRailsERC20RequestV1" /* Iden3PaymentRailsERC20RequestV1 */ || option.type === "Iden3PaymentRailsSolanaSPLRequestV1" /* Iden3PaymentRailsSolanaSPLRequestV1 */) && !option.contractAddress) {
           throw new Error(`failed request. no token address for option id ${optionId}`);
         }
         const expirationDateRequired = expirationDate ?? new Date((/* @__PURE__ */ new Date()).setHours((/* @__PURE__ */ new Date()).getHours() + 1));
-        const typeUrl = `https://schema.iden3.io/core/json/${option.type}.json`;
-        const typesFetchResult = await fetch(typeUrl);
-        const types = await typesFetchResult.json();
-        delete types.EIP712Domain;
-        const paymentData = option.type === "Iden3PaymentRailsRequestV1" /* Iden3PaymentRailsRequestV1 */ ? {
-          recipient,
-          amount,
-          expirationDate: (0, import_js_iden3_core28.getUnixTimestamp)(expirationDateRequired),
-          nonce,
-          metadata: "0x"
-        } : {
-          tokenAddress: option.contractAddress,
-          recipient,
-          amount,
-          expirationDate: (0, import_js_iden3_core28.getUnixTimestamp)(expirationDateRequired),
-          nonce,
-          metadata: "0x"
-        };
-        const domain = {
-          name: "MCPayment",
-          version: "1.0.0",
-          chainId,
-          verifyingContract: paymentRails
-        };
-        const signature = await signer.signTypedData(domain, types, paymentData);
-        const proof = [
-          {
-            type: "EthereumEip712Signature2021" /* EthereumEip712Signature2021 */,
-            proofPurpose: "assertionMethod",
-            proofValue: signature,
-            verificationMethod: `did:pkh:eip155:${chainId}:${await signer.getAddress()}`,
-            created: (/* @__PURE__ */ new Date()).toISOString(),
-            eip712: {
-              types: typeUrl,
-              primaryType: "Iden3PaymentRailsRequestV1",
-              domain
-            }
-          }
-        ];
-        const d = {
-          type: "Iden3PaymentRailsRequestV1" /* Iden3PaymentRailsRequestV1 */,
-          "@context": [
-            `https://schema.iden3.io/core/jsonld/payment.jsonld#${option.type}`,
-            "https://w3id.org/security/suites/eip712sig-2021/v1"
-          ],
-          recipient,
-          amount: amount.toString(),
-          expirationDate: expirationDateRequired.toISOString(),
-          nonce: nonce.toString(),
-          metadata: "0x",
-          proof
-        };
-        dataArr.push(
-          option.type === "Iden3PaymentRailsRequestV1" /* Iden3PaymentRailsRequestV1 */ ? d : {
-            ...d,
-            type: option.type,
-            tokenAddress: option.contractAddress || "",
-            features: option.features || []
+        if (option.type === "Iden3PaymentRailsSolanaRequestV1" /* Iden3PaymentRailsSolanaRequestV1 */ || option.type === "Iden3PaymentRailsSolanaSPLRequestV1" /* Iden3PaymentRailsSolanaSPLRequestV1 */) {
+          if (!createOptions?.solSigner) {
+            throw new Error(
+              `please provide solana signer in context for ${option.type} payment type`
+            );
           }
-        );
+          const payment = await buildSolanaPayment(
+            createOptions.solSigner,
+            option,
+            chainId,
+            paymentRails,
+            recipient,
+            BigInt(amount),
+            expirationDateRequired,
+            nonce
+          );
+          dataArr.push(payment);
+        } else {
+          const payment = await buildEvmPayment(
+            signer,
+            option,
+            chainId,
+            paymentRails,
+            recipient,
+            BigInt(amount),
+            expirationDateRequired,
+            nonce
+          );
+          dataArr.push(payment);
+        }
       }
       paymentRequestInfo.push({
         data: dataArr,
@@ -8882,6 +9237,55 @@ var PaymentHandler = class extends AbstractMessageHandler {
       }
     };
   }
+  async handleIden3PaymentRailsSolanaRequestV1(data, paymentHandler) {
+    if (data.expirationDate && new Date(data.expirationDate) < /* @__PURE__ */ new Date()) {
+      throw new Error(`failed request. expired request`);
+    }
+    const isValid = await verifyIden3SolanaPaymentRequest(data, this._params.documentResolver);
+    if (!isValid) {
+      throw new Error(`failed request. invalid Solana payment request signature`);
+    }
+    const proof = Array.isArray(data.proof) ? data.proof[0] : data.proof;
+    const signer = proof.verificationMethod.split(":").slice(-1)[0];
+    if (this._params.allowedSigners && !this._params.allowedSigners.includes(signer)) {
+      throw new Error(`failed request. signer is not in the allowed signers list`);
+    }
+    const txId = await paymentHandler(data);
+    return {
+      nonce: data.nonce,
+      type: "Iden3PaymentRailsSolanaV1" /* Iden3PaymentRailsSolanaV1 */,
+      "@context": "https://schema.iden3.io/core/jsonld/payment.jsonld#Iden3PaymentRailsSolanaV1",
+      paymentData: {
+        txId,
+        chainId: proof.domain.chainId
+      }
+    };
+  }
+  async handleIden3PaymentRailsSolanaSPLRequestV1(data, paymentHandler) {
+    if (data.expirationDate && new Date(data.expirationDate) < /* @__PURE__ */ new Date()) {
+      throw new Error(`failed request. expired request`);
+    }
+    const isValid = await verifyIden3SolanaPaymentRequest(data, this._params.documentResolver);
+    if (!isValid) {
+      throw new Error(`failed request. invalid Solana payment request signature`);
+    }
+    const proof = Array.isArray(data.proof) ? data.proof[0] : data.proof;
+    const signer = proof.verificationMethod.split(":").slice(-1)[0];
+    if (this._params.allowedSigners && !this._params.allowedSigners.includes(signer)) {
+      throw new Error(`failed request. signer is not in the allowed signers list`);
+    }
+    const txId = await paymentHandler(data);
+    return {
+      nonce: data.nonce,
+      type: "Iden3PaymentRailsSolanaSPLV1" /* Iden3PaymentRailsSolanaSPLV1 */,
+      "@context": "https://schema.iden3.io/core/jsonld/payment.jsonld#Iden3PaymentRailsSolanaSPLV1",
+      paymentData: {
+        txId,
+        chainId: proof.domain.chainId,
+        tokenAddress: data.tokenAddress
+      }
+    };
+  }
   async handleIden3PaymentRailsERC20RequestV1(data, paymentHandler, approveHandler) {
     if (data.expirationDate && new Date(data.expirationDate) < /* @__PURE__ */ new Date()) {
       throw new Error(`failed request. expired request`);
@@ -8913,7 +9317,7 @@ var PaymentHandler = class extends AbstractMessageHandler {
 
 // src/iden3comm/handlers/discovery-protocol.ts
 var uuid10 = __toESM(require("uuid"), 1);
-var import_js_iden3_core29 = require("@iden3/js-iden3-core");
+var import_js_iden3_core31 = require("@iden3/js-iden3-core");
 function createDiscoveryFeatureQueryMessage(queries, opts) {
   const uuidv4 = uuid10.v4();
   return {
@@ -8926,7 +9330,7 @@ function createDiscoveryFeatureQueryMessage(queries, opts) {
     },
     from: opts?.from,
     to: opts?.to,
-    created_time: (0, import_js_iden3_core29.getUnixTimestamp)(/* @__PURE__ */ new Date()),
+    created_time: (0, import_js_iden3_core31.getUnixTimestamp)(/* @__PURE__ */ new Date()),
     expires_time: opts?.expires_time
   };
 }
@@ -8942,7 +9346,7 @@ function createDiscoveryFeatureDiscloseMessage(disclosures, opts) {
     },
     from: opts?.from,
     to: opts?.to,
-    created_time: (0, import_js_iden3_core29.getUnixTimestamp)(/* @__PURE__ */ new Date()),
+    created_time: (0, import_js_iden3_core31.getUnixTimestamp)(/* @__PURE__ */ new Date()),
     expires_time: opts?.expires_time
   };
 }
@@ -8995,7 +9399,7 @@ var DiscoveryProtocolHandler = class extends AbstractMessageHandler {
       createDiscoveryFeatureDiscloseMessage(disclosures, {
         to: message.from,
         from: message.to,
-        expires_time: opts?.disclosureExpiresDate ? (0, import_js_iden3_core29.getUnixTimestamp)(opts.disclosureExpiresDate) : void 0
+        expires_time: opts?.disclosureExpiresDate ? (0, import_js_iden3_core31.getUnixTimestamp)(opts.disclosureExpiresDate) : void 0
       })
     );
   }
@@ -9330,8 +9734,8 @@ var EthStateStorage = class {
     this._disableCache = true;
   }
   getStateContractAndProviderForId(id) {
-    const idTyped = import_js_iden3_core30.Id.fromBigInt(id);
-    const chainId = (0, import_js_iden3_core30.getChainId)(import_js_iden3_core30.DID.blockchainFromId(idTyped), import_js_iden3_core30.DID.networkIdFromId(idTyped));
+    const idTyped = import_js_iden3_core32.Id.fromBigInt(id);
+    const chainId = (0, import_js_iden3_core32.getChainId)(import_js_iden3_core32.DID.blockchainFromId(idTyped), import_js_iden3_core32.DID.networkIdFromId(idTyped));
     const config = this.networkByChainId(chainId);
     const provider = new import_ethers7.JsonRpcProvider(config.url);
     const stateContract = new import_ethers7.Contract(config.contractAddress, State_default, provider);
@@ -10155,7 +10559,7 @@ var ZkpVerifier_default = [
 
 // src/storage/blockchain/onchain-zkp-verifier.ts
 var import_universal_verifier_v2_abi = require("@iden3/universal-verifier-v2-abi");
-var import_js_iden3_core31 = require("@iden3/js-iden3-core");
+var import_js_iden3_core33 = require("@iden3/js-iden3-core");
 var import_js_merkletree23 = require("@iden3/js-merkletree");
 var maxGasLimit = 10000000n;
 var FunctionSignatures = /* @__PURE__ */ ((FunctionSignatures2) => {
@@ -10463,13 +10867,13 @@ var OnChainZKPVerifier = class _OnChainZKPVerifier {
       )
     ].reduce((acc, s) => {
       const info = JSON.parse(s);
-      const id = import_js_iden3_core31.Id.fromString(info.id);
-      const chainId = (0, import_js_iden3_core31.chainIDfromDID)(import_js_iden3_core31.DID.parseFromId(id));
+      const id = import_js_iden3_core33.Id.fromString(info.id);
+      const chainId = (0, import_js_iden3_core33.chainIDfromDID)(import_js_iden3_core33.DID.parseFromId(id));
       if (txDataChainId === chainId) {
         return acc;
       }
       const promise = this.resolveDidDocumentEip712MessageAndSignature(
-        import_js_iden3_core31.DID.parseFromId(import_js_iden3_core31.Id.fromString(info.id)),
+        import_js_iden3_core33.DID.parseFromId(import_js_iden3_core33.Id.fromString(info.id)),
         didResolverUrl,
         {
           [type]: import_js_merkletree23.Hash.fromString(info[type])
@@ -10619,21 +11023,21 @@ var OnChainZKPVerifier = class _OnChainZKPVerifier {
   }
 };
 var packEthIdentityProof = (did) => {
-  return `0x${bytesToHex(import_js_iden3_core31.BytesHelper.intToBytes(import_js_iden3_core31.DID.idFromDID(did).bigInt()))}`;
+  return `0x${bytesToHex(import_js_iden3_core33.BytesHelper.intToBytes(import_js_iden3_core33.DID.idFromDID(did).bigInt()))}`;
 };
 
 // src/storage/blockchain/onchain-issuer.ts
-var import_js_iden3_core34 = require("@iden3/js-iden3-core");
+var import_js_iden3_core36 = require("@iden3/js-iden3-core");
 var import_ethers10 = require("ethers");
 var import_onchain_non_merklized_issuer_base_abi2 = require("@iden3/onchain-non-merklized-issuer-base-abi");
 
 // src/storage/blockchain/onchain-issuer-adapter/non-merklized/version/v0.0.1/onchain-non-merklized-issuer-adapter.ts
-var import_js_iden3_core32 = require("@iden3/js-iden3-core");
+var import_js_iden3_core34 = require("@iden3/js-iden3-core");
 var import_onchain_non_merklized_issuer_base_abi = require("@iden3/onchain-non-merklized-issuer-base-abi");
 var import_js_jsonld_merklization5 = require("@iden3/js-jsonld-merklization");
 var import_js_merkletree24 = require("@iden3/js-merkletree");
 var import_ethers9 = require("ethers");
-var import_js_iden3_core33 = require("@iden3/js-iden3-core");
+var import_js_iden3_core35 = require("@iden3/js-iden3-core");
 var OnchainNonMerklizedIssuerAdapter = class {
   _contract;
   _contractAddress;
@@ -10653,7 +11057,7 @@ var OnchainNonMerklizedIssuerAdapter = class {
     }
     this._chainId = ethConnectionConfig.chainId;
     this._contractAddress = import_ethers9.ethers.getAddress(
-      import_ethers9.ethers.hexlify(import_js_iden3_core32.Id.ethAddressFromId(import_js_iden3_core32.DID.idFromDID(issuerDid)))
+      import_ethers9.ethers.hexlify(import_js_iden3_core34.Id.ethAddressFromId(import_js_iden3_core34.DID.idFromDID(issuerDid)))
     );
     this._contract = import_onchain_non_merklized_issuer_base_abi.NonMerklizedIssuerBase__factory.connect(
       this._contractAddress,
@@ -10721,7 +11125,7 @@ var OnchainNonMerklizedIssuerAdapter = class {
    * @param credentialSubjectFields Subject fields of the credential.
    */
   async convertOnChainInfoToW3CCredential(credentialData, coreClaimBigInts, credentialSubjectFields) {
-    const c = new import_js_iden3_core32.Claim().unMarshalJson(JSON.stringify(coreClaimBigInts.map((b) => b.toString())));
+    const c = new import_js_iden3_core34.Claim().unMarshalJson(JSON.stringify(coreClaimBigInts.map((b) => b.toString())));
     const credentialSubject = await this.convertCredentialSubject(
       c,
       credentialData.context,
@@ -10741,7 +11145,7 @@ var OnchainNonMerklizedIssuerAdapter = class {
         nonce: Number(c.getRevocationNonce()),
         type: "Iden3OnchainSparseMerkleTreeProof2023" /* Iden3OnchainSparseMerkleTreeProof2023 */
       },
-      issuanceDate: (0, import_js_iden3_core33.getDateFromUnixTimestamp)(Number(credentialData.issuanceDate)).getTime()
+      issuanceDate: (0, import_js_iden3_core35.getDateFromUnixTimestamp)(Number(credentialData.issuanceDate)).getTime()
     };
     const existenceProof = await this.existenceProof(c);
     const w3c = W3CCredential.fromCredentialRequest(this._issuerDid, credentialRequest);
@@ -10789,7 +11193,7 @@ var OnchainNonMerklizedIssuerAdapter = class {
         }
         case "http://www.w3.org/2001/XMLSchema#dateTime" /* DateTime */: {
           const timestamp = BigInt(f.rawValue);
-          const sourceTimestamp = (0, import_js_iden3_core33.getDateFromUnixTimestamp)(Number(timestamp)).toISOString();
+          const sourceTimestamp = (0, import_js_iden3_core35.getDateFromUnixTimestamp)(Number(timestamp)).toISOString();
           this.validateSourceValue(dataType, f.value, sourceTimestamp);
           credentialSubject[f.key] = sourceTimestamp;
           break;
@@ -10807,7 +11211,7 @@ var OnchainNonMerklizedIssuerAdapter = class {
     }
     credentialSubject["type"] = credentialType;
     const subjectId = coreClaim.getId();
-    const subjectDid = import_js_iden3_core32.DID.parseFromId(subjectId);
+    const subjectDid = import_js_iden3_core34.DID.parseFromId(subjectId);
     credentialSubject["id"] = subjectDid.string();
     return credentialSubject;
   }
@@ -10896,7 +11300,7 @@ var OnchainIssuer = class {
           merklizationOptions: this._onchainIssuerOptions?.merklizationOptions
         });
         await adapter.isInterfaceSupported();
-        const { credentialData, coreClaimBigInts, credentialSubjectFields } = await adapter.getCredential(import_js_iden3_core34.DID.idFromDID(userDID), credentialId);
+        const { credentialData, coreClaimBigInts, credentialSubjectFields } = await adapter.getCredential(import_js_iden3_core36.DID.idFromDID(userDID), credentialId);
         return await adapter.convertOnChainInfoToW3CCredential(
           credentialData,
           coreClaimBigInts,
@@ -10921,16 +11325,16 @@ var OnchainIssuer = class {
           merklizationOptions: this._onchainIssuerOptions?.merklizationOptions
         });
         await adapter.isInterfaceSupported();
-        return await adapter.getUserCredentialsIds(import_js_iden3_core34.DID.idFromDID(userDID));
+        return await adapter.getUserCredentialsIds(import_js_iden3_core36.DID.idFromDID(userDID));
       }
       default:
         throw new Error(`Unsupported adapter version ${response}`);
     }
   }
   getContractConnection(did) {
-    const issuerId = import_js_iden3_core34.DID.idFromDID(did);
-    const chainId = (0, import_js_iden3_core34.chainIDfromDID)(did);
-    const contractAddress = import_ethers10.ethers.getAddress(import_ethers10.ethers.hexlify(import_js_iden3_core34.Id.ethAddressFromId(issuerId)));
+    const issuerId = import_js_iden3_core36.DID.idFromDID(did);
+    const chainId = (0, import_js_iden3_core36.chainIDfromDID)(did);
+    const contractAddress = import_ethers10.ethers.getAddress(import_ethers10.ethers.hexlify(import_js_iden3_core36.Id.ethAddressFromId(issuerId)));
     const connection = this._ethConnectionConfig.find((c) => c.chainId === chainId);
     if (!connection) {
       throw new Error(`No connection found for chain ID ${chainId}`);
@@ -10945,7 +11349,7 @@ var OnchainIssuer = class {
 
 // src/storage/blockchain/did-resolver-readonly-storage.ts
 var import_js_merkletree25 = require("@iden3/js-merkletree");
-var import_js_iden3_core35 = require("@iden3/js-iden3-core");
+var import_js_iden3_core37 = require("@iden3/js-iden3-core");
 var import_ethers11 = require("ethers");
 var DidResolverStateReadonlyStorage = class {
   constructor(resolverUrl) {
@@ -10959,7 +11363,7 @@ var DidResolverStateReadonlyStorage = class {
   }
   async getGISTProof(id) {
     const { didDocument } = await resolveDidDocument(
-      import_js_iden3_core35.DID.parseFromId(import_js_iden3_core35.Id.fromBigInt(id)),
+      import_js_iden3_core37.DID.parseFromId(import_js_iden3_core37.Id.fromBigInt(id)),
       this.resolverUrl
     );
     const { global } = this.getIden3StateInfo2023(didDocument);
@@ -10983,7 +11387,7 @@ var DidResolverStateReadonlyStorage = class {
   }
   async getGISTRootInfo(root, userId) {
     const { didDocument } = await resolveDidDocument(
-      import_js_iden3_core35.DID.parseFromId(import_js_iden3_core35.Id.fromBigInt(userId)),
+      import_js_iden3_core37.DID.parseFromId(import_js_iden3_core37.Id.fromBigInt(userId)),
       this.resolverUrl,
       {
         gist: import_js_merkletree25.Hash.fromBigInt(root)
@@ -11007,7 +11411,7 @@ var DidResolverStateReadonlyStorage = class {
   async getStateInfo(id, state) {
     const opts = state ? { state: import_js_merkletree25.Hash.fromBigInt(state) } : void 0;
     const { didDocument } = await resolveDidDocument(
-      import_js_iden3_core35.DID.parseFromId(import_js_iden3_core35.Id.fromBigInt(id)),
+      import_js_iden3_core37.DID.parseFromId(import_js_iden3_core37.Id.fromBigInt(id)),
       this.resolverUrl,
       opts
     );
@@ -11896,7 +12300,7 @@ var FSCircuitStorage = class {
 };
 
 // src/proof/proof-service.ts
-var import_js_iden3_core39 = require("@iden3/js-iden3-core");
+var import_js_iden3_core41 = require("@iden3/js-iden3-core");
 
 // src/proof/common.ts
 var import_js_merkletree28 = require("@iden3/js-merkletree");
@@ -12393,7 +12797,7 @@ var NativeProver = class _NativeProver {
 var import_js_jsonld_merklization9 = require("@iden3/js-jsonld-merklization");
 
 // src/proof/provers/inputs-generator.ts
-var import_js_iden3_core36 = require("@iden3/js-iden3-core");
+var import_js_iden3_core38 = require("@iden3/js-iden3-core");
 var allOperations2 = Object.values(QueryOperators);
 var v2Operations = [
   0 /* NOOP */,
@@ -12455,7 +12859,7 @@ var InputGenerator = class {
     const smtProof = preparedCredential.credential.getIden3SparseMerkleTreeProof();
     const circuitClaim = new CircuitClaim();
     circuitClaim.claim = preparedCredential.credentialCoreClaim;
-    circuitClaim.issuerId = import_js_iden3_core36.DID.idFromDID(import_js_iden3_core36.DID.parse(preparedCredential.credential.issuer));
+    circuitClaim.issuerId = import_js_iden3_core38.DID.idFromDID(import_js_iden3_core38.DID.parse(preparedCredential.credential.issuer));
     if (smtProof) {
       circuitClaim.proof = smtProof.mtp;
       circuitClaim.treeState = {
@@ -12530,7 +12934,7 @@ var InputGenerator = class {
     const circuitClaimData = await this.newCircuitClaimData(preparedCredential);
     circuitClaimData.nonRevProof = toClaimNonRevStatus(preparedCredential.revStatus);
     const circuitInputs = new AtomicQueryMTPV2Inputs();
-    circuitInputs.id = import_js_iden3_core36.DID.idFromDID(identifier);
+    circuitInputs.id = import_js_iden3_core38.DID.idFromDID(identifier);
     circuitInputs.requestID = BigInt(proofReq.id);
     const query = circuitQueries[0];
     query.operator = this.transformV2QueryOperator(query.operator);
@@ -12541,7 +12945,7 @@ var InputGenerator = class {
       incProof: { proof: circuitClaimData.proof, treeState: circuitClaimData.treeState },
       nonRevProof: circuitClaimData.nonRevProof
     };
-    circuitInputs.currentTimeStamp = (0, import_js_iden3_core36.getUnixTimestamp)(/* @__PURE__ */ new Date());
+    circuitInputs.currentTimeStamp = (0, import_js_iden3_core38.getUnixTimestamp)(/* @__PURE__ */ new Date());
     circuitInputs.claimSubjectProfileNonce = BigInt(params.credentialSubjectProfileNonce);
     circuitInputs.profileNonce = BigInt(params.authProfileNonce);
     circuitInputs.skipClaimRevocationCheck = params.skipRevocation;
@@ -12563,8 +12967,8 @@ var InputGenerator = class {
     });
     circuitClaimData.nonRevProof = toClaimNonRevStatus(preparedCredential.revStatus);
     const circuitInputs = new AtomicQueryMTPV2OnChainInputs();
-    const id = import_js_iden3_core36.DID.idFromDID(identifier);
-    circuitInputs.id = import_js_iden3_core36.DID.idFromDID(identifier);
+    const id = import_js_iden3_core38.DID.idFromDID(identifier);
+    circuitInputs.id = import_js_iden3_core38.DID.idFromDID(identifier);
     circuitInputs.requestID = BigInt(proofReq.id);
     const stateProof = await this._stateStorage.getGISTProof(id.bigInt());
     const gistProof = toGISTProof(stateProof);
@@ -12597,7 +13001,7 @@ var InputGenerator = class {
       incProof: { proof: circuitClaimData.proof, treeState: circuitClaimData.treeState },
       nonRevProof: circuitClaimData.nonRevProof
     };
-    circuitInputs.currentTimeStamp = (0, import_js_iden3_core36.getUnixTimestamp)(/* @__PURE__ */ new Date());
+    circuitInputs.currentTimeStamp = (0, import_js_iden3_core38.getUnixTimestamp)(/* @__PURE__ */ new Date());
     circuitInputs.claimSubjectProfileNonce = BigInt(params.credentialSubjectProfileNonce);
     circuitInputs.profileNonce = BigInt(params.authProfileNonce);
     circuitInputs.skipClaimRevocationCheck = params.skipRevocation;
@@ -12614,7 +13018,7 @@ var InputGenerator = class {
     const circuitClaimData = await this.newCircuitClaimData(preparedCredential);
     circuitClaimData.nonRevProof = toClaimNonRevStatus(preparedCredential.revStatus);
     const circuitInputs = new AtomicQuerySigV2Inputs();
-    circuitInputs.id = import_js_iden3_core36.DID.idFromDID(identifier);
+    circuitInputs.id = import_js_iden3_core38.DID.idFromDID(identifier);
     circuitInputs.claim = {
       issuerID: circuitClaimData?.issuerId,
       signatureProof: circuitClaimData.signatureProof,
@@ -12628,7 +13032,7 @@ var InputGenerator = class {
     const query = circuitQueries[0];
     query.operator = this.transformV2QueryOperator(query.operator);
     circuitInputs.query = query;
-    circuitInputs.currentTimeStamp = (0, import_js_iden3_core36.getUnixTimestamp)(/* @__PURE__ */ new Date());
+    circuitInputs.currentTimeStamp = (0, import_js_iden3_core38.getUnixTimestamp)(/* @__PURE__ */ new Date());
     this.checkOperatorSupport(proofReq.circuitId, query.operator);
     return circuitInputs.inputsMarshal();
   };
@@ -12647,7 +13051,7 @@ var InputGenerator = class {
     });
     circuitClaimData.nonRevProof = toClaimNonRevStatus(preparedCredential.revStatus);
     const circuitInputs = new AtomicQuerySigV2OnChainInputs();
-    const id = import_js_iden3_core36.DID.idFromDID(identifier);
+    const id = import_js_iden3_core38.DID.idFromDID(identifier);
     circuitInputs.id = id;
     circuitInputs.claim = {
       issuerID: circuitClaimData.issuerId,
@@ -12661,7 +13065,7 @@ var InputGenerator = class {
     circuitInputs.skipClaimRevocationCheck = params.skipRevocation;
     const query = circuitQueries[0];
     circuitInputs.query = query;
-    circuitInputs.currentTimeStamp = (0, import_js_iden3_core36.getUnixTimestamp)(/* @__PURE__ */ new Date());
+    circuitInputs.currentTimeStamp = (0, import_js_iden3_core38.getUnixTimestamp)(/* @__PURE__ */ new Date());
     if (authClaimData.treeState) {
       circuitInputs.treeState = {
         state: authClaimData.treeState?.state,
@@ -12716,7 +13120,7 @@ var InputGenerator = class {
         break;
     }
     const circuitInputs = new AtomicQueryV3Inputs();
-    circuitInputs.id = import_js_iden3_core36.DID.idFromDID(identifier);
+    circuitInputs.id = import_js_iden3_core38.DID.idFromDID(identifier);
     circuitInputs.claim = {
       issuerID: circuitClaimData?.issuerId,
       signatureProof: circuitClaimData.signatureProof,
@@ -12731,10 +13135,10 @@ var InputGenerator = class {
     const query = circuitQueries[0];
     query.values = [16 /* SD */, 0 /* NOOP */].includes(query.operator) ? [] : query.values;
     circuitInputs.query = query;
-    circuitInputs.currentTimeStamp = (0, import_js_iden3_core36.getUnixTimestamp)(/* @__PURE__ */ new Date());
+    circuitInputs.currentTimeStamp = (0, import_js_iden3_core38.getUnixTimestamp)(/* @__PURE__ */ new Date());
     circuitInputs.proofType = proofType;
     circuitInputs.linkNonce = params.linkNonce ?? BigInt(0);
-    circuitInputs.verifierID = params.verifierDid ? import_js_iden3_core36.DID.idFromDID(params.verifierDid) : void 0;
+    circuitInputs.verifierID = params.verifierDid ? import_js_iden3_core38.DID.idFromDID(params.verifierDid) : void 0;
     circuitInputs.nullifierSessionID = proofReq.params?.nullifierSessionId ? BigInt(proofReq.params?.nullifierSessionId?.toString()) : BigInt(0);
     this.checkOperatorSupport(proofReq.circuitId, query.operator);
     return circuitInputs.inputsMarshal();
@@ -12746,7 +13150,7 @@ var InputGenerator = class {
     params,
     circuitQueries
   }) => {
-    const id = import_js_iden3_core36.DID.idFromDID(identifier);
+    const id = import_js_iden3_core38.DID.idFromDID(identifier);
     const circuitClaimData = await this.newCircuitClaimData(preparedCredential);
     circuitClaimData.nonRevProof = toClaimNonRevStatus(preparedCredential.revStatus);
     let proofType;
@@ -12768,7 +13172,7 @@ var InputGenerator = class {
         break;
     }
     const circuitInputs = new AtomicQueryV3OnChainInputs();
-    circuitInputs.id = import_js_iden3_core36.DID.idFromDID(identifier);
+    circuitInputs.id = import_js_iden3_core38.DID.idFromDID(identifier);
     circuitInputs.claim = {
       issuerID: circuitClaimData?.issuerId,
       signatureProof: circuitClaimData.signatureProof,
@@ -12783,10 +13187,10 @@ var InputGenerator = class {
     const query = circuitQueries[0];
     query.values = [16 /* SD */, 0 /* NOOP */].includes(query.operator) ? [] : query.values;
     circuitInputs.query = query;
-    circuitInputs.currentTimeStamp = (0, import_js_iden3_core36.getUnixTimestamp)(/* @__PURE__ */ new Date());
+    circuitInputs.currentTimeStamp = (0, import_js_iden3_core38.getUnixTimestamp)(/* @__PURE__ */ new Date());
     circuitInputs.proofType = proofType;
     circuitInputs.linkNonce = params.linkNonce ?? BigInt(0);
-    circuitInputs.verifierID = params.verifierDid ? import_js_iden3_core36.DID.idFromDID(params.verifierDid) : void 0;
+    circuitInputs.verifierID = params.verifierDid ? import_js_iden3_core38.DID.idFromDID(params.verifierDid) : void 0;
     circuitInputs.nullifierSessionID = proofReq.params?.nullifierSessionId ? BigInt(proofReq.params?.nullifierSessionId?.toString()) : BigInt(0);
     const isEthIdentity = isEthereumIdentity(identifier);
     circuitInputs.isBJJAuthEnabled = isEthIdentity ? 0 : 1;
@@ -12847,16 +13251,16 @@ var InputGenerator = class {
 };
 
 // src/proof/verifiers/pub-signals-verifier.ts
-var import_js_iden3_core38 = require("@iden3/js-iden3-core");
+var import_js_iden3_core40 = require("@iden3/js-iden3-core");
 var import_js_jsonld_merklization8 = require("@iden3/js-jsonld-merklization");
 
 // src/proof/verifiers/query.ts
-var import_js_iden3_core37 = require("@iden3/js-iden3-core");
+var import_js_iden3_core39 = require("@iden3/js-iden3-core");
 var import_js_jsonld_merklization7 = require("@iden3/js-jsonld-merklization");
 var import_ethers13 = require("ethers");
 var defaultProofGenerationDelayOpts = 24 * 60 * 60 * 1e3;
 async function checkQueryRequest(query, queriesMetadata, ldContext, outputs, circuitId, schemaLoader, opts) {
-  const userDID = import_js_iden3_core37.DID.parseFromId(outputs.issuerId);
+  const userDID = import_js_iden3_core39.DID.parseFromId(outputs.issuerId);
   const issuerAllowed = !query.allowedIssuers || query.allowedIssuers?.some((issuer) => issuer === "*" || issuer === userDID.string());
   if (!issuerAllowed) {
     throw new Error("issuer is not in allowed list");
@@ -12879,7 +13283,7 @@ async function checkQueryRequest(query, queriesMetadata, ldContext, outputs, cir
   if (opts?.acceptedProofGenerationDelay) {
     acceptedProofGenerationDelay = opts.acceptedProofGenerationDelay;
   }
-  const timeDiff = Date.now() - (0, import_js_iden3_core37.getDateFromUnixTimestamp)(Number(outputs.timestamp)).getTime();
+  const timeDiff = Date.now() - (0, import_js_iden3_core39.getDateFromUnixTimestamp)(Number(outputs.timestamp)).getTime();
   if (timeDiff > acceptedProofGenerationDelay) {
     throw new Error("generated proof is outdated");
   }
@@ -13345,7 +13749,7 @@ var PubSignalsVerifier = class {
       if (!verifierDIDParam) {
         throw new Error("verifierDid is required");
       }
-      const id = import_js_iden3_core38.DID.idFromDID(verifierDIDParam);
+      const id = import_js_iden3_core40.DID.idFromDID(verifierDIDParam);
       if (verifierID.bigInt() != id.bigInt()) {
         throw new Error("wrong verifier is used for nullification");
       }
@@ -13392,7 +13796,7 @@ var PubSignalsVerifier = class {
       acceptedStateTransitionDelay = opts.acceptedStateTransitionDelay;
     }
     if (!gist.latest) {
-      const timeDiff = Date.now() - (0, import_js_iden3_core38.getDateFromUnixTimestamp)(Number(gist.transitionTimestamp)).getTime();
+      const timeDiff = Date.now() - (0, import_js_iden3_core40.getDateFromUnixTimestamp)(Number(gist.transitionTimestamp)).getTime();
       if (timeDiff > acceptedStateTransitionDelay) {
         throw new Error("global state is outdated");
       }
@@ -13479,7 +13883,7 @@ var PubSignalsVerifier = class {
     return multiQueryPubSignals;
   };
   verifyIdOwnership = (sender, challenge) => {
-    const senderId = import_js_iden3_core38.DID.idFromDID(import_js_iden3_core38.DID.parse(sender));
+    const senderId = import_js_iden3_core40.DID.idFromDID(import_js_iden3_core40.DID.parse(sender));
     if (senderId.string() !== this.userId.string()) {
       throw new Error(
         `sender id is not used for proof creation, expected ${sender}, user from public signals: ${this.userId.string()}`
@@ -13544,7 +13948,7 @@ var PubSignalsVerifier = class {
   }
   async resolve(id, state) {
     const idBigInt = id.bigInt();
-    const did = import_js_iden3_core38.DID.parseFromId(id);
+    const did = import_js_iden3_core40.DID.parseFromId(id);
     const isGenesis = isGenesisState(did, state);
     let contractState;
     try {
@@ -13622,7 +14026,7 @@ var PubSignalsVerifier = class {
     );
     const acceptedStateTransitionDelay = opts?.acceptedStateTransitionDelay ?? constants_exports.DEFAULT_PROOF_VERIFY_DELAY;
     if (!issuerNonRevStateResolved.latest) {
-      const timeDiff = Date.now() - (0, import_js_iden3_core38.getDateFromUnixTimestamp)(Number(issuerNonRevStateResolved.transitionTimestamp)).getTime();
+      const timeDiff = Date.now() - (0, import_js_iden3_core40.getDateFromUnixTimestamp)(Number(issuerNonRevStateResolved.transitionTimestamp)).getTime();
       if (timeDiff > acceptedStateTransitionDelay) {
         throw new Error("issuer state is outdated");
       }
@@ -13711,7 +14115,7 @@ var ProofService = class {
       credentialCoreClaim,
       revStatus: credentialWithRevStatus.revStatus
     };
-    const subjectDID = import_js_iden3_core39.DID.parse(preparedCredential.credential.credentialSubject["id"]);
+    const subjectDID = import_js_iden3_core41.DID.parse(preparedCredential.credential.credentialSubject["id"]);
     const { nonce: credentialSubjectProfileNonce, genesisDID: subjectGenesisDID } = await this._identityWallet.getGenesisDIDMetadata(subjectDID);
     if (subjectGenesisDID.string() !== genesisDID.string()) {
       throw new Error(VerifiableConstants.ERRORS.PROOF_SERVICE_PROFILE_GENESIS_DID_MISMATCH);
@@ -13724,7 +14128,7 @@ var ProofService = class {
     }
     const mtPosition = preparedCredential.credentialCoreClaim.getMerklizedPosition();
     let mk;
-    if (mtPosition !== import_js_iden3_core39.MerklizedRootPosition.None) {
+    if (mtPosition !== import_js_iden3_core41.MerklizedRootPosition.None) {
       mk = await preparedCredential.credential.merklize(this._ldOptions);
     }
     const context = proofReq.query["context"];
@@ -13790,7 +14194,7 @@ var ProofService = class {
     switch (circuitId) {
       case "authV2" /* AuthV2 */:
         {
-          const challenge = opts.challenge ? import_js_iden3_core39.BytesHelper.intToBytes(opts.challenge).reverse() : new Uint8Array(32);
+          const challenge = opts.challenge ? import_js_iden3_core41.BytesHelper.intToBytes(opts.challenge).reverse() : new Uint8Array(32);
           zkProof = await this.generateAuthV2Proof(challenge, identifier);
         }
         return {
@@ -13873,10 +14277,10 @@ var ProofService = class {
       throw new Error("CircuitId is not supported");
     }
     const { nonce: authProfileNonce, genesisDID } = await this._identityWallet.getGenesisDIDMetadata(did);
-    const challenge = import_js_iden3_core39.BytesHelper.bytesToInt(hash.reverse());
+    const challenge = import_js_iden3_core41.BytesHelper.bytesToInt(hash.reverse());
     const authPrepared = await this._inputsGenerator.prepareAuthBJJCredential(genesisDID);
     const signature = await this._identityWallet.signChallenge(challenge, authPrepared.credential);
-    const id = import_js_iden3_core39.DID.idFromDID(genesisDID);
+    const id = import_js_iden3_core41.DID.idFromDID(genesisDID);
     const stateProof = await this._stateStorage.getGISTProof(id.bigInt());
     const gistProof = toGISTProof(stateProof);
     const authInputs = new AuthV2Inputs();
@@ -13916,7 +14320,7 @@ var ProofService = class {
       if (globalStateInfo.replacedAtTimestamp === 0n) {
         throw new Error(`state was replaced, but replaced time unknown`);
       }
-      const timeDiff = Date.now() - (0, import_js_iden3_core39.getDateFromUnixTimestamp)(Number(globalStateInfo.replacedAtTimestamp)).getTime();
+      const timeDiff = Date.now() - (0, import_js_iden3_core41.getDateFromUnixTimestamp)(Number(globalStateInfo.replacedAtTimestamp)).getTime();
       if (timeDiff > (opts?.acceptedStateTransitionDelay ?? constants_exports.DEFAULT_AUTH_VERIFY_DELAY)) {
         throw new Error("global state is outdated");
       }
@@ -13979,18 +14383,18 @@ var IdentityWallet = class {
     const keyId = await this._kms.createKeyFromSeed("BJJ" /* BabyJubJub */, seed);
     const pubKeyHex = await this._kms.publicKey(keyId);
     const pubKey = import_js_crypto12.PublicKey.newFromHex(pubKeyHex);
-    const schemaHash = import_js_iden3_core40.SchemaHash.authSchemaHash;
-    const authClaim = import_js_iden3_core40.Claim.newClaim(
+    const schemaHash = import_js_iden3_core42.SchemaHash.authSchemaHash;
+    const authClaim = import_js_iden3_core42.Claim.newClaim(
       schemaHash,
-      import_js_iden3_core40.ClaimOptions.withIndexDataInts(pubKey.p[0], pubKey.p[1]),
-      import_js_iden3_core40.ClaimOptions.withRevocationNonce(BigInt(0))
+      import_js_iden3_core42.ClaimOptions.withIndexDataInts(pubKey.p[0], pubKey.p[1]),
+      import_js_iden3_core42.ClaimOptions.withRevocationNonce(BigInt(0))
     );
     authClaim.setRevocationNonce(BigInt(revNonce));
     return { authClaim, pubKey };
   }
   async createAuthBJJCredential(did, pubKey, authClaim, currentState, revocationOpts) {
     const authData = authClaim.getExpirationDate();
-    const expiration = authData ? (0, import_js_iden3_core40.getUnixTimestamp)(authData) : 0;
+    const expiration = authData ? (0, import_js_iden3_core42.getUnixTimestamp)(authData) : 0;
     const request = {
       credentialSchema: VerifiableConstants.AUTH.AUTH_BJJ_CREDENTIAL_SCHEMA_JSON_URL,
       type: VerifiableConstants.AUTH.AUTH_BJJ_CREDENTIAL_TYPE,
@@ -14039,13 +14443,13 @@ var IdentityWallet = class {
     );
     const ctr = await claimsTree.root();
     const currentState = (0, import_js_merkletree29.hashElems)([ctr.bigInt(), import_js_merkletree29.ZERO_HASH.bigInt(), import_js_merkletree29.ZERO_HASH.bigInt()]);
-    const didType = (0, import_js_iden3_core40.buildDIDType)(
-      opts.method || import_js_iden3_core40.DidMethod.Iden3,
-      opts.blockchain || import_js_iden3_core40.Blockchain.Polygon,
-      opts.networkId || import_js_iden3_core40.NetworkId.Amoy
+    const didType = (0, import_js_iden3_core42.buildDIDType)(
+      opts.method || import_js_iden3_core42.DidMethod.Iden3,
+      opts.blockchain || import_js_iden3_core42.Blockchain.Polygon,
+      opts.networkId || import_js_iden3_core42.NetworkId.Amoy
     );
-    const identifier = import_js_iden3_core40.Id.idGenesisFromIdenState(didType, currentState.bigInt());
-    const did = import_js_iden3_core40.DID.parseFromId(identifier);
+    const identifier = import_js_iden3_core42.Id.idGenesisFromIdenState(didType, currentState.bigInt());
+    const did = import_js_iden3_core42.DID.parseFromId(identifier);
     await this._storage.mt.bindMerkleTreeToNewIdentifier(tmpIdentifier, did.string());
     const oldTreeState = {
       revocationRoot: import_js_merkletree29.ZERO_HASH,
@@ -14129,10 +14533,10 @@ var IdentityWallet = class {
       throw new Error(VerifiableConstants.ERRORS.ID_WALLET_SIGNER_IS_REQUIRED);
     }
     const currentState = import_js_merkletree29.ZERO_HASH;
-    const didType = (0, import_js_iden3_core40.buildDIDType)(
-      opts.method || import_js_iden3_core40.DidMethod.Iden3,
-      opts.blockchain || import_js_iden3_core40.Blockchain.Polygon,
-      opts.networkId || import_js_iden3_core40.NetworkId.Amoy
+    const didType = (0, import_js_iden3_core42.buildDIDType)(
+      opts.method || import_js_iden3_core42.DidMethod.Iden3,
+      opts.blockchain || import_js_iden3_core42.Blockchain.Polygon,
+      opts.networkId || import_js_iden3_core42.NetworkId.Amoy
     );
     const keyIdEth = await this._kms.createKeyFromSeed("Secp256k1" /* Secp256k1 */, opts.seed);
     const pubKeyHexEth = (await this._kms.publicKey(keyIdEth)).slice(2);
@@ -14162,13 +14566,13 @@ var IdentityWallet = class {
   async getGenesisDIDMetadata(did) {
     const identity = await this._storage.identity.getIdentity(did.string());
     if (identity) {
-      return { nonce: 0, genesisDID: import_js_iden3_core40.DID.parse(identity.did) };
+      return { nonce: 0, genesisDID: import_js_iden3_core42.DID.parse(identity.did) };
     }
     const profile = await this._storage.identity.getProfileById(did.string());
     if (!profile) {
       throw new Error(VerifiableConstants.ERRORS.ID_WALLET_PROFILE_OR_IDENTITY_NOT_FOUND);
     }
-    return { nonce: profile.nonce, genesisDID: import_js_iden3_core40.DID.parse(profile.genesisIdentifier) };
+    return { nonce: profile.nonce, genesisDID: import_js_iden3_core42.DID.parse(profile.genesisIdentifier) };
   }
   /** {@inheritDoc IIdentityWallet.createProfile} */
   async createProfile(did, nonce, verifier, tags) {
@@ -14312,13 +14716,13 @@ var IdentityWallet = class {
   async sign(message, credential) {
     const keyKMSId = getKMSIdByAuthCredential(credential);
     const payload = import_js_crypto12.poseidon.hashBytes(message);
-    const signature = await this._kms.sign(keyKMSId, import_js_iden3_core40.BytesHelper.intToBytes(payload));
+    const signature = await this._kms.sign(keyKMSId, import_js_iden3_core42.BytesHelper.intToBytes(payload));
     return import_js_crypto12.Signature.newFromCompressed(signature);
   }
   /** {@inheritDoc IIdentityWallet.signChallenge} */
   async signChallenge(challenge, credential) {
     const keyKMSId = getKMSIdByAuthCredential(credential);
-    const signature = await this._kms.sign(keyKMSId, import_js_iden3_core40.BytesHelper.intToBytes(challenge));
+    const signature = await this._kms.sign(keyKMSId, import_js_iden3_core42.BytesHelper.intToBytes(challenge));
     return import_js_crypto12.Signature.newFromCompressed(signature);
   }
   /** {@inheritDoc IIdentityWallet.issueCredential} */
@@ -14598,7 +15002,7 @@ var IdentityWallet = class {
       state: newTreeModel.state,
       rootOfRoots
     };
-    const userId = import_js_iden3_core40.DID.idFromDID(did);
+    const userId = import_js_iden3_core42.DID.idFromDID(did);
     let proof;
     const isEthIdentity = isEthereumIdentity(did);
     let txId;
@@ -14856,9 +15260,16 @@ var jsonLDMerklizer = __toESM(require("@iden3/js-jsonld-merklization"), 1);
   RefreshServiceType,
   RevocationStatusHandler,
   SDK_EVENTS,
+  SOLANA_CHAIN_REF,
   Scalar,
   SearchError,
   Sec256k1Provider,
+  SolanaNativePaymentRequest,
+  SolanaNativePaymentSchema,
+  SolanaPaymentInstruction,
+  SolanaPaymentInstructionSchema,
+  SolanaSplPaymentRequest,
+  SolanaSplPaymentSchema,
   StandardJSONCredentialsQueryFilter,
   StateTransitionInputs,
   StateTransitionPubSignals,
@@ -14882,7 +15293,9 @@ var jsonLDMerklizer = __toESM(require("@iden3/js-jsonld-merklization"), 1);
   bigIntCompare,
   buildAccept,
   buildDIDFromEthPubKey,
+  buildEvmPayment,
   buildFieldPath,
+  buildSolanaPayment,
   buildTreeState,
   buildVerifierId,
   byteDecoder,
@@ -14980,6 +15393,7 @@ var jsonLDMerklizer = __toESM(require("@iden3/js-jsonld-merklization"), 1);
   resolveDidDocument,
   resolvePath,
   resolveVerificationMethods,
+  serializeSolanaPaymentInstruction,
   strMTHex,
   stringByPath,
   subjectPositionIndex,
@@ -15001,6 +15415,7 @@ var jsonLDMerklizer = __toESM(require("@iden3/js-jsonld-merklization"), 1);
   verifyExpiresTime,
   verifyFieldValueInclusionNativeExistsSupport,
   verifyFieldValueInclusionV2,
+  verifyIden3SolanaPaymentRequest,
   witnessBuilder
 });
 //# sourceMappingURL=index.cjs.map