@0xpolygonid/js-sdk 1.5.0 → 1.6.0

package/dist/node/cjs/circuits/atomic-query-v3.js

@@ -0,0 +1,275 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AtomicQueryV3PubSignals = exports.AtomicQueryV3Inputs = void 0;
+const js_iden3_core_1 = require("@iden3/js-iden3-core");
+const common_1 = require("./common");
+const models_1 = require("./models");
+const js_merkletree_1 = require("@iden3/js-merkletree");
+const utils_1 = require("../utils");
+const verifiable_1 = require("../verifiable");
+const zero = '0';
+/**
+ * AtomicQueryV3Inputs ZK private inputs for credentialAtomicQueryV3.circom
+ *
+ * @beta
+ * @class AtomicQueryV3Inputs
+ * @extends {BaseConfig}
+ */
+class AtomicQueryV3Inputs extends common_1.BaseConfig {
+    validate() {
+        if (!this.requestID) {
+            throw new Error(models_1.CircuitError.EmptyRequestID);
+        }
+        if (!this.claim.nonRevProof.proof) {
+            throw new Error(models_1.CircuitError.EmptyClaimNonRevProof);
+        }
+        if (!this.query.values) {
+            throw new Error(models_1.CircuitError.EmptyQueryValue);
+        }
+        if (!this.proofType) {
+            throw new Error(models_1.CircuitError.InvalidProofType);
+        }
+        if (this.proofType === verifiable_1.ProofType.BJJSignature) {
+            if (!this.claim.signatureProof?.issuerAuthIncProof.proof) {
+                throw new Error(models_1.CircuitError.EmptyIssuerAuthClaimProof);
+            }
+            if (!this.claim.signatureProof.issuerAuthNonRevProof.proof) {
+                throw new Error(models_1.CircuitError.EmptyIssuerAuthClaimNonRevProof);
+            }
+            if (!this.claim.signatureProof.signature) {
+                throw new Error(models_1.CircuitError.EmptyClaimSignature);
+            }
+        }
+        if (this.proofType === verifiable_1.ProofType.Iden3SparseMerkleTreeProof) {
+            if (!this.claim?.incProof?.proof) {
+                throw new Error(models_1.CircuitError.EmptyClaimProof);
+            }
+        }
+    }
+    fillMTPProofsWithZero(s) {
+        s.issuerClaimMtp = (0, common_1.prepareSiblingsStr)(new js_merkletree_1.Proof(), this.getMTLevel());
+        s.issuerClaimClaimsTreeRoot = js_merkletree_1.ZERO_HASH.bigInt().toString();
+        s.issuerClaimRevTreeRoot = js_merkletree_1.ZERO_HASH.bigInt().toString();
+        s.issuerClaimRootsTreeRoot = js_merkletree_1.ZERO_HASH.bigInt().toString();
+        s.issuerClaimIdenState = js_merkletree_1.ZERO_HASH.bigInt().toString();
+    }
+    fillSigProofWithZero(s) {
+        s.issuerClaimSignatureR8x = zero;
+        s.issuerClaimSignatureR8y = zero;
+        s.issuerClaimSignatureS = zero;
+        s.issuerAuthClaim = new js_iden3_core_1.Claim().marshalJson();
+        s.issuerAuthClaimMtp = (0, common_1.prepareSiblingsStr)(new js_merkletree_1.Proof(), this.getMTLevel());
+        s.issuerAuthClaimsTreeRoot = zero;
+        s.issuerAuthRevTreeRoot = zero;
+        s.issuerAuthRootsTreeRoot = zero;
+        s.issuerAuthClaimNonRevMtp = (0, common_1.prepareSiblingsStr)(new js_merkletree_1.Proof(), this.getMTLevel());
+        s.issuerAuthClaimNonRevMtpAuxHi = js_merkletree_1.ZERO_HASH.bigInt().toString();
+        s.issuerAuthClaimNonRevMtpAuxHv = js_merkletree_1.ZERO_HASH.bigInt().toString();
+        s.issuerAuthClaimNonRevMtpNoAux = zero;
+        s.issuerAuthState = zero;
+    }
+    // InputsMarshal returns Circom private inputs for credentialAtomicQueryV3.circom
+    inputsMarshal() {
+        this.validate();
+        if (this.query.valueProof) {
+            this.query.validate();
+            this.query.valueProof.validate();
+        }
+        let valueProof = this.query.valueProof;
+        if (!valueProof) {
+            valueProof = new models_1.ValueProof();
+            valueProof.path = 0n;
+            valueProof.value = 0n;
+            valueProof.mtp = new js_merkletree_1.Proof();
+        }
+        let treeState = this.claim.nonRevProof.treeState;
+        if (this.proofType === verifiable_1.ProofType.BJJSignature && this.skipClaimRevocationCheck) {
+            treeState = this.claim.signatureProof?.issuerAuthNonRevProof.treeState;
+        }
+        if (!treeState) {
+            throw new Error(models_1.CircuitError.EmptyTreeState);
+        }
+        const s = {
+            requestID: this.requestID.toString(),
+            userGenesisID: this.id.bigInt().toString(),
+            profileNonce: this.profileNonce.toString(),
+            claimSubjectProfileNonce: this.claimSubjectProfileNonce.toString(),
+            issuerID: this.claim.issuerID.bigInt().toString(),
+            issuerClaim: this.claim.claim.marshalJson(),
+            issuerClaimNonRevClaimsTreeRoot: treeState.claimsRoot.bigInt().toString(),
+            issuerClaimNonRevRevTreeRoot: treeState.revocationRoot.bigInt().toString(),
+            issuerClaimNonRevRootsTreeRoot: treeState.rootOfRoots.bigInt().toString(),
+            issuerClaimNonRevState: treeState.state.bigInt().toString(),
+            issuerClaimNonRevMtp: (0, common_1.prepareSiblingsStr)(this.claim.nonRevProof.proof, this.getMTLevel()),
+            claimSchema: this.claim.claim.getSchemaHash().bigInt().toString(),
+            claimPathMtp: (0, common_1.prepareSiblingsStr)(valueProof.mtp, this.getMTLevelsClaim()),
+            claimPathValue: valueProof.value.toString(),
+            operator: this.query.operator,
+            timestamp: this.currentTimeStamp,
+            // value in this path in merklized json-ld document
+            slotIndex: this.query.slotIndex,
+            isRevocationChecked: 1
+        };
+        if (this.skipClaimRevocationCheck) {
+            s.isRevocationChecked = 0;
+        }
+        if (this.proofType === verifiable_1.ProofType.BJJSignature) {
+            s.proofType = '1';
+            s.issuerClaimSignatureR8x = this.claim.signatureProof?.signature.R8[0].toString();
+            s.issuerClaimSignatureR8y = this.claim.signatureProof?.signature.R8[1].toString();
+            s.issuerClaimSignatureS = this.claim.signatureProof?.signature.S.toString();
+            s.issuerAuthClaim = this.claim.signatureProof?.issuerAuthClaim?.marshalJson();
+            s.issuerAuthClaimMtp = (0, common_1.prepareSiblingsStr)(this.claim.signatureProof?.issuerAuthIncProof.proof, this.getMTLevel());
+            s.issuerAuthClaimsTreeRoot = treeState.claimsRoot.bigInt().toString();
+            s.issuerAuthRevTreeRoot = treeState.revocationRoot.bigInt().toString();
+            s.issuerAuthRootsTreeRoot = treeState.rootOfRoots.bigInt().toString();
+            s.issuerAuthClaimNonRevMtp = (0, common_1.prepareSiblingsStr)(this.claim.signatureProof?.issuerAuthNonRevProof.proof, this.getMTLevel());
+            const nodeAuxIssuerAuthNonRev = (0, common_1.getNodeAuxValue)(this.claim.signatureProof?.issuerAuthNonRevProof.proof);
+            s.issuerAuthClaimNonRevMtpAuxHi = nodeAuxIssuerAuthNonRev.key.bigInt().toString();
+            s.issuerAuthClaimNonRevMtpAuxHv = nodeAuxIssuerAuthNonRev.value.bigInt().toString();
+            s.issuerAuthClaimNonRevMtpNoAux = nodeAuxIssuerAuthNonRev.noAux;
+            s.issuerAuthState = this.claim.signatureProof?.issuerAuthIncProof.treeState?.state
+                .bigInt()
+                .toString();
+            this.fillMTPProofsWithZero(s);
+        }
+        else if (this.proofType === verifiable_1.ProofType.Iden3SparseMerkleTreeProof) {
+            s.proofType = '2';
+            const incProofTreeState = this.claim.incProof?.treeState;
+            if (!incProofTreeState) {
+                throw new Error(models_1.CircuitError.EmptyTreeState);
+            }
+            s.issuerClaimMtp = (0, common_1.prepareSiblingsStr)(this.claim.incProof?.proof, this.getMTLevel());
+            s.issuerClaimClaimsTreeRoot = incProofTreeState.claimsRoot.bigInt().toString();
+            s.issuerClaimRevTreeRoot = incProofTreeState.revocationRoot.bigInt().toString();
+            s.issuerClaimRootsTreeRoot = incProofTreeState.rootOfRoots.bigInt().toString();
+            s.issuerClaimIdenState = incProofTreeState.state.bigInt().toString();
+            this.fillSigProofWithZero(s);
+        }
+        const nodeAuxNonRev = (0, common_1.getNodeAuxValue)(this.claim.nonRevProof.proof);
+        s.issuerClaimNonRevMtpAuxHi = nodeAuxNonRev.key.bigInt().toString();
+        s.issuerClaimNonRevMtpAuxHv = nodeAuxNonRev.value.bigInt().toString();
+        s.issuerClaimNonRevMtpNoAux = nodeAuxNonRev.noAux;
+        s.claimPathNotExists = (0, common_1.existenceToInt)(valueProof.mtp.existence);
+        const nodAuxJSONLD = (0, common_1.getNodeAuxValue)(valueProof.mtp);
+        s.claimPathMtpNoAux = nodAuxJSONLD.noAux;
+        s.claimPathMtpAuxHi = nodAuxJSONLD.key.bigInt().toString();
+        s.claimPathMtpAuxHv = nodAuxJSONLD.value.bigInt().toString();
+        s.claimPathKey = valueProof.path.toString();
+        const values = (0, common_1.prepareCircuitArrayValues)(this.query.values, this.getValueArrSize());
+        s.value = (0, common_1.bigIntArrayToStringArray)(values);
+        s.linkNonce = this.linkNonce.toString();
+        s.verifierID = this.verifierID?.bigInt().toString() ?? '0';
+        s.nullifierSessionID = this.nullifierSessionID.toString();
+        return utils_1.byteEncoder.encode(JSON.stringify(s));
+    }
+}
+exports.AtomicQueryV3Inputs = AtomicQueryV3Inputs;
+/**
+ * @beta
+ * AtomicQueryV3PubSignals public inputs
+ */
+class AtomicQueryV3PubSignals extends common_1.BaseConfig {
+    constructor() {
+        super(...arguments);
+        this.value = [];
+    }
+    // PubSignalsUnmarshal unmarshal credentialAtomicQueryV3.circom public signals
+    pubSignalsUnmarshal(data) {
+        // expected order:
+        // merklized
+        // userID
+        // issuerState
+        // linkID
+        // nullifier
+        // operatorOutput
+        // proofType
+        // requestID
+        // issuerID
+        // isRevocationChecked
+        // issuerClaimNonRevState
+        // timestamp
+        // claimSchema
+        // claimPathNotExists
+        // claimPathKey
+        // slotIndex
+        // operator
+        // value
+        // verifierID
+        // nullifierSessionID
+        // 19 is a number of fields in AtomicQueryV3PubSignals before values, values is last element in the proof and
+        // it is length could be different base on the circuit configuration. The length could be modified by set value
+        // in ValueArraySize
+        const fieldLength = 19;
+        const sVals = JSON.parse(utils_1.byteDecoder.decode(data));
+        if (sVals.length !== fieldLength + this.getValueArrSize()) {
+            throw new Error(`invalid number of Output values expected ${fieldLength + this.getValueArrSize()} got ${sVals.length}`);
+        }
+        let fieldIdx = 0;
+        // -- merklized
+        this.merklized = parseInt(sVals[fieldIdx]);
+        fieldIdx++;
+        //  - userID
+        this.userID = js_iden3_core_1.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+        fieldIdx++;
+        // - issuerState
+        this.issuerState = js_merkletree_1.Hash.fromString(sVals[fieldIdx]);
+        fieldIdx++;
+        // - linkID
+        this.linkID = BigInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // - nullifier
+        this.nullifier = BigInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // - operatorOutput
+        this.operatorOutput = BigInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // - proofType
+        this.proofType = parseInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // - requestID
+        this.requestID = BigInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // - issuerID
+        this.issuerID = js_iden3_core_1.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+        fieldIdx++;
+        // - isRevocationChecked
+        this.isRevocationChecked = parseInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // - issuerClaimNonRevState
+        this.issuerClaimNonRevState = js_merkletree_1.Hash.fromString(sVals[fieldIdx]);
+        fieldIdx++;
+        //  - timestamp
+        this.timestamp = parseInt(sVals[fieldIdx]);
+        fieldIdx++;
+        //  - claimSchema
+        this.claimSchema = js_iden3_core_1.SchemaHash.newSchemaHashFromInt(BigInt(sVals[fieldIdx]));
+        fieldIdx++;
+        // - ClaimPathNotExists
+        this.claimPathNotExists = parseInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // - ClaimPathKey
+        this.claimPathKey = BigInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // - slotIndex
+        this.slotIndex = parseInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // - operator
+        this.operator = parseInt(sVals[fieldIdx]);
+        fieldIdx++;
+        //  - values
+        for (let index = 0; index < this.getValueArrSize(); index++) {
+            this.value.push(BigInt(sVals[fieldIdx]));
+            fieldIdx++;
+        }
+        // - verifierID
+        if (sVals[fieldIdx] !== '0') {
+            this.verifierID = js_iden3_core_1.Id.fromBigInt(BigInt(sVals[fieldIdx]));
+        }
+        fieldIdx++;
+        // - nullifierSessionID
+        this.nullifierSessionID = BigInt(sVals[fieldIdx]);
+        return this;
+    }
+}
+exports.AtomicQueryV3PubSignals = AtomicQueryV3PubSignals;

package/dist/node/cjs/circuits/common.js

@@ -1,12 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getProperties = exports.existenceToInt = exports.getNodeAuxValue = exports.bigIntArrayToStringArray = exports.prepareCircuitArrayValues = exports.prepareSiblingsStr = exports.buildTreeState = exports.strMTHex = exports.BaseConfig = exports.ErrorEmptyIssuerAuthClaimNonRevProof = exports.ErrorEmptyIssuerAuthClaimProof = exports.ErrorUserStateInRelayClaimProof = exports.ErrorEmptyClaimNonRevProof = exports.ErrorEmptyClaimProof = exports.ErrorEmptyClaimSignature = exports.ErrorEmptyChallengeSignature = exports.ErrorEmptyAuthClaimNonRevProof = exports.ErrorEmptyAuthClaimProof = exports.defaultMTLevelsClaimsMerklization = exports.defaultMTLevelsOnChain = exports.defaultValueArraySize = exports.defaultMTLevels = void 0;
+exports.getProperties = exports.existenceToInt = exports.getNodeAuxValue = exports.bigIntArrayToStringArray = exports.prepareCircuitArrayValues = exports.prepareSiblingsStr = exports.buildTreeState = exports.strMTHex = exports.BaseConfig = exports.ErrorEmptyIssuerAuthClaimNonRevProof = exports.ErrorEmptyIssuerAuthClaimProof = exports.ErrorUserStateInRelayClaimProof = exports.ErrorEmptyClaimNonRevProof = exports.ErrorEmptyClaimProof = exports.ErrorEmptyClaimSignature = exports.ErrorEmptyChallengeSignature = exports.ErrorEmptyAuthClaimNonRevProof = exports.ErrorEmptyAuthClaimProof = exports.defaultMTLevelsClaim = exports.defaultMTLevelsOnChain = exports.defaultValueArraySize = exports.defaultMTLevels = void 0;
 const js_crypto_1 = require("@iden3/js-crypto");
 const js_merkletree_1 = require("@iden3/js-merkletree");
 exports.defaultMTLevels = 40; // max MT levels, default value for identity circuits
 exports.defaultValueArraySize = 64; // max value array size, default value for identity circuits
 exports.defaultMTLevelsOnChain = 64; // max MT levels on chain, default value for identity circuits
-exports.defaultMTLevelsClaimsMerklization = 32; // max MT levels of JSON-LD merklization on claim
+exports.defaultMTLevelsClaim = 32; // max MT levels of JSON-LD merklization on claim
 exports.ErrorEmptyAuthClaimProof = 'empty auth claim mtp proof';
 exports.ErrorEmptyAuthClaimNonRevProof = 'empty auth claim non-revocation mtp proof';
 exports.ErrorEmptyChallengeSignature = 'empty challenge signature';
@@ -32,14 +32,12 @@ class BaseConfig {
         return this.mtLevel ? this.mtLevel : exports.defaultMTLevels;
     }
     /**
-     *  getMTLevel max circuit MT levels
+     *  GetMTLevelsClaim max jsonld Claim levels
      *
      * @returns number
      */
-    getMTLevelsClaimMerklization() {
-        return this.mtLevelClaimsMerklization
-            ? this.mtLevelClaimsMerklization
-            : exports.defaultMTLevelsClaimsMerklization;
+    getMTLevelsClaim() {
+        return this.mtLevelClaim ? this.mtLevelClaim : exports.defaultMTLevelsClaim;
     }
     /**
      * GetValueArrSize return size of circuits value array size

package/dist/node/cjs/circuits/comparer.js

@@ -1,6 +1,21 @@
 "use strict";
+/**
+ * Represents the XSD namespace and its corresponding data types.
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.factoryComparer = exports.Vector = exports.Scalar = exports.QueryOperators = exports.Operators = void 0;
+exports.factoryComparer = exports.Vector = exports.Scalar = exports.isValidOperation = exports.availableTypesOperators = exports.QueryOperators = exports.Operators = exports.XSDNS = void 0;
+var XSDNS;
+(function (XSDNS) {
+    XSDNS["Boolean"] = "http://www.w3.org/2001/XMLSchema#boolean";
+    XSDNS["Integer"] = "http://www.w3.org/2001/XMLSchema#integer";
+    XSDNS["NonNegativeInteger"] = "http://www.w3.org/2001/XMLSchema#nonNegativeInteger";
+    XSDNS["NonPositiveInteger"] = "http://www.w3.org/2001/XMLSchema#nonPositiveInteger";
+    XSDNS["NegativeInteger"] = "http://www.w3.org/2001/XMLSchema#negativeInteger";
+    XSDNS["PositiveInteger"] = "http://www.w3.org/2001/XMLSchema#positiveInteger";
+    XSDNS["DateTime"] = "http://www.w3.org/2001/XMLSchema#dateTime";
+    XSDNS["Double"] = "http://www.w3.org/2001/XMLSchema#double";
+    XSDNS["String"] = "http://www.w3.org/2001/XMLSchema#string";
+})(XSDNS = exports.XSDNS || (exports.XSDNS = {}));
 /**
  * List of available operators.
  *
@@ -15,6 +30,11 @@ var Operators;
     Operators[Operators["IN"] = 4] = "IN";
     Operators[Operators["NIN"] = 5] = "NIN";
     Operators[Operators["NE"] = 6] = "NE";
+    Operators[Operators["LTE"] = 7] = "LTE";
+    Operators[Operators["GTE"] = 8] = "GTE";
+    Operators[Operators["BETWEEN"] = 9] = "BETWEEN";
+    Operators[Operators["SD"] = 16] = "SD";
+    Operators[Operators["NULLIFY"] = 17] = "NULLIFY";
 })(Operators = exports.Operators || (exports.Operators = {}));
 /** QueryOperators represents operators for atomic circuits */
 exports.QueryOperators = {
@@ -24,8 +44,43 @@ exports.QueryOperators = {
     $gt: Operators.GT,
     $in: Operators.IN,
     $nin: Operators.NIN,
-    $ne: Operators.NE
+    $ne: Operators.NE,
+    $lte: Operators.LTE,
+    $gte: Operators.GTE,
+    $between: Operators.BETWEEN,
+    $sd: Operators.SD,
+    $nullify: Operators.NULLIFY
+};
+const allOperations = Object.values(exports.QueryOperators);
+exports.availableTypesOperators = new Map([
+    [XSDNS.Boolean, [exports.QueryOperators.$eq, exports.QueryOperators.$ne]],
+    [XSDNS.Integer, allOperations],
+    [XSDNS.NonNegativeInteger, allOperations],
+    [XSDNS.PositiveInteger, allOperations],
+    [XSDNS.Double, [exports.QueryOperators.$eq, exports.QueryOperators.$ne, exports.QueryOperators.$in, exports.QueryOperators.$nin]],
+    [XSDNS.String, [exports.QueryOperators.$eq, exports.QueryOperators.$ne, exports.QueryOperators.$in, exports.QueryOperators.$nin]],
+    [XSDNS.DateTime, allOperations]
+]);
+/**
+ * Checks if the given operation is valid for the specified datatype.
+ * @param datatype - The datatype to check the operation for.
+ * @param op - The operation to check.
+ * @returns True if the operation is valid, false otherwise.
+ */
+const isValidOperation = (datatype, op) => {
+    if (op === Operators.NOOP) {
+        return true;
+    }
+    if (!exports.availableTypesOperators.has(datatype)) {
+        return false;
+    }
+    const ops = exports.availableTypesOperators.get(datatype);
+    if (!ops) {
+        return false;
+    }
+    return ops.includes(op);
 };
+exports.isValidOperation = isValidOperation;
 /**
  * Scalar is used to compare two scalar value.
  *

package/dist/node/cjs/circuits/index.js

@@ -20,6 +20,10 @@ __exportStar(require("./comparer"), exports);
 __exportStar(require("./atomic-query-mtp-v2"), exports);
 __exportStar(require("./atomic-query-mtp-v2-on-chain"), exports);
 __exportStar(require("./atomic-query-sig-v2"), exports);
+__exportStar(require("./atomic-query-v3"), exports);
+__exportStar(require("./atomic-query-v3-on-chain"), exports);
 __exportStar(require("./atomic-query-sig-v2-on-chain"), exports);
 __exportStar(require("./auth-v2"), exports);
 __exportStar(require("./state-transition"), exports);
+__exportStar(require("./linked-nullifier"), exports);
+__exportStar(require("./linked-multi-query"), exports);

package/dist/node/cjs/circuits/linked-multi-query.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LinkedMultiQueryPubSignals = exports.LinkedMultiQueryInputs = void 0;
+const utils_1 = require("../utils");
+const common_1 = require("./common");
+/**
+ * LinkedMultiQuery circuit representation
+ * Inputs and public signals declaration, marshalling and parsing
+ *
+ * @beta
+ * @class LinkedMultiQueryInputs
+ */
+class LinkedMultiQueryInputs extends common_1.BaseConfig {
+    // InputsMarshal returns Circom private inputs for linkedMultiQueryInputs.circom
+    inputsMarshal() {
+        const enabled = [];
+        const claimPathNotExists = [];
+        const claimPathMtp = [];
+        const claimPathMtpNoAux = [];
+        const claimPathMtpAuxHi = [];
+        const claimPathMtpAuxHv = [];
+        const claimPathKey = [];
+        const claimPathValue = [];
+        const slotIndex = [];
+        const operator = [];
+        const value = [];
+        for (let i = 0; i < this.queryLength; i++) {
+            if (!this.query) {
+                enabled.push(0);
+                claimPathNotExists.push(0);
+                claimPathMtp.push([]);
+                claimPathMtpNoAux.push('0');
+                claimPathMtpAuxHi.push('0');
+                claimPathMtpAuxHv.push('0');
+                claimPathKey.push('0');
+                claimPathValue.push('0');
+                slotIndex.push(0);
+                operator.push(0);
+                const valuesArr = (0, common_1.prepareCircuitArrayValues)([], this.getValueArrSize());
+                value.push((0, common_1.bigIntArrayToStringArray)(valuesArr));
+                continue;
+            }
+            enabled.push(1);
+            const valueProof = this.query[i].valueProof;
+            claimPathNotExists.push((0, common_1.existenceToInt)(valueProof.mtp.existence));
+            claimPathMtp.push((0, common_1.prepareSiblingsStr)(valueProof.mtp, this.getMTLevelsClaim()));
+            const nodAuxJSONLD = (0, common_1.getNodeAuxValue)(valueProof.mtp);
+            claimPathMtpNoAux.push(nodAuxJSONLD.noAux);
+            claimPathMtpAuxHi.push(nodAuxJSONLD.key.bigInt().toString());
+            claimPathMtpAuxHv.push(nodAuxJSONLD.value.bigInt().toString());
+            claimPathKey.push(valueProof.path.toString());
+            claimPathValue.push(valueProof.value.toString());
+            slotIndex.push(this.query[i].slotIndex);
+            operator.push(this.query[i].operator);
+            const valuesArr = (0, common_1.prepareCircuitArrayValues)(this.query[i].values, this.getValueArrSize());
+            value.push((0, common_1.bigIntArrayToStringArray)(valuesArr));
+        }
+        const s = {
+            linkNonce: this.linkNonce.toString(),
+            issuerClaim: this.claim.marshalJson(),
+            enabled,
+            claimSchema: this.claim.getSchemaHash().bigInt().toString(),
+            claimPathNotExists,
+            claimPathMtp,
+            claimPathMtpNoAux,
+            claimPathMtpAuxHi,
+            claimPathMtpAuxHv,
+            claimPathKey,
+            claimPathValue,
+            slotIndex,
+            operator,
+            value
+        };
+        return utils_1.byteEncoder.encode(JSON.stringify(s));
+    }
+}
+exports.LinkedMultiQueryInputs = LinkedMultiQueryInputs;
+// LinkedMultiQueryPubSignals linkedMultiQuery.circom public signals
+/**
+ * public signals
+ *
+ * @beta
+ * @class LinkedMultiQueryPubSignals
+ */
+class LinkedMultiQueryPubSignals {
+    /**
+     * PubSignalsUnmarshal unmarshal linkedMultiQuery.circom public inputs to LinkedMultiQueryPubSignals
+     *
+     * @beta
+     * @param {Uint8Array} data
+     * @returns LinkedMultiQueryPubSignals
+     */
+    pubSignalsUnmarshal(data, queryLength) {
+        const len = queryLength * 3 + 2;
+        const sVals = JSON.parse(utils_1.byteDecoder.decode(data));
+        if (sVals.length !== len) {
+            throw new Error(`invalid number of Output values expected ${len} got ${sVals.length}`);
+        }
+        let fieldIdx = 0;
+        // -- linkID
+        this.linkID = BigInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // -- merklized
+        this.merklized = parseInt(sVals[fieldIdx]);
+        fieldIdx++;
+        // - operatorOutput
+        this.operatorOutput = [];
+        for (let i = 0; i < queryLength; i++) {
+            this.operatorOutput.push(BigInt(sVals[fieldIdx]));
+            fieldIdx++;
+        }
+        // - circuitQueryHash
+        this.circuitQueryHash = [];
+        for (let i = 0; i < queryLength; i++) {
+            this.circuitQueryHash.push(BigInt(sVals[fieldIdx]));
+            fieldIdx++;
+        }
+        // - enabled
+        this.enabled = [];
+        for (let i = 0; i < queryLength; i++) {
+            const enabledNum = parseInt(sVals[fieldIdx]);
+            this.enabled.push(enabledNum === 1);
+            fieldIdx++;
+        }
+        return this;
+    }
+}
+exports.LinkedMultiQueryPubSignals = LinkedMultiQueryPubSignals;

package/dist/node/cjs/circuits/linked-nullifier.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LinkedNullifierPubSignals = exports.LinkedNullifierInputs = void 0;
+const js_iden3_core_1 = require("@iden3/js-iden3-core");
+const utils_1 = require("../utils");
+/**
+ * LinkedNullifier circuit representation
+ * Inputs and public signals declaration, marshalling and parsing
+ *
+ * @beta
+ * @class LinkedNullifierInputs
+ */
+class LinkedNullifierInputs {
+    // InputsMarshal returns Circom private inputs for nullifier.circom
+    inputsMarshal() {
+        const s = {
+            linkNonce: this.linkNonce.toString(),
+            issuerClaim: this.issuerClaim.marshalJson(),
+            userGenesisID: this.id.bigInt().toString(),
+            claimSubjectProfileNonce: this.claimSubjectProfileNonce.toString(),
+            claimSchema: this.issuerClaim.getSchemaHash().bigInt().toString(),
+            verifierID: this.verifierID?.bigInt().toString() ?? '0',
+            nullifierSessionID: this.nullifierSessionID.toString()
+        };
+        return utils_1.byteEncoder.encode(JSON.stringify(s));
+    }
+}
+exports.LinkedNullifierInputs = LinkedNullifierInputs;
+// LinkedNullifierPubSignals nullifier.circom public signals
+/**
+ * public signals
+ *
+ * @beta
+ * @class LinkedNullifierPubSignals
+ */
+class LinkedNullifierPubSignals {
+    /**
+     * PubSignalsUnmarshal unmarshal nullifier.circom public inputs to LinkedNullifierPubSignals
+     *
+     * @beta
+     * @param {Uint8Array} data
+     * @returns LinkedNullifierPubSignals
+     */
+    pubSignalsUnmarshal(data) {
+        const len = 4;
+        const sVals = JSON.parse(utils_1.byteDecoder.decode(data));
+        if (sVals.length !== len) {
+            throw new Error(`invalid number of Output values expected ${len} got ${sVals.length}`);
+        }
+        this.nullifier = BigInt(sVals[0]);
+        this.linkID = BigInt(sVals[1]);
+        this.verifierID = js_iden3_core_1.Id.fromBigInt(BigInt(sVals[2]));
+        this.nullifierSessionID = BigInt(sVals[3]);
+        return this;
+    }
+}
+exports.LinkedNullifierPubSignals = LinkedNullifierPubSignals;

package/dist/node/cjs/circuits/models.js

@@ -15,7 +15,9 @@ class Query {
      *
      */
     validate() {
-        if (this.operator !== comparer_1.QueryOperators.$noop && this.values?.some((v) => typeof v !== 'bigint'))
+        if (this.operator !== comparer_1.QueryOperators.$noop &&
+            this.operator !== comparer_1.QueryOperators.$sd &&
+            this.values?.some((v) => typeof v !== 'bigint'))
             throw new Error(CircuitError.EmptyQueryValue);
     }
 }
@@ -39,6 +41,26 @@ var CircuitId;
     CircuitId["AtomicQuerySigV2"] = "credentialAtomicQuerySigV2";
     // AtomicQuerySigOnChain is a type for credentialAtomicQuerySigOnChain.circom
     CircuitId["AtomicQuerySigV2OnChain"] = "credentialAtomicQuerySigV2OnChain";
+    /**
+     * @beta
+     */
+    // AtomicQueryV3CircuitID is a type for credentialAtomicQueryV3.circom
+    CircuitId["AtomicQueryV3"] = "credentialAtomicQueryV3-beta.0";
+    /**
+     * @beta
+     */
+    // AtomicQueryV3OnChainCircuitID is a type for credentialAtomicQueryV3OnChain.circom
+    CircuitId["AtomicQueryV3OnChain"] = "credentialAtomicQueryV3OnChain-beta.0";
+    /**
+     * @beta
+     */
+    // LinkedNullifier is a type for linkedNullifier.circom
+    CircuitId["LinkedNullifier"] = "linkedNullifier-beta.0";
+    /**
+     * @beta
+     */
+    // LinkedMultiQuery is a type for linkedMultiQuery.circom
+    CircuitId["LinkedMultiQuery10"] = "linkedMultiQuery10-beta.0";
 })(CircuitId = exports.CircuitId || (exports.CircuitId = {}));
 /**
  * Claim structure for circuit inputs
@@ -73,7 +95,9 @@ var CircuitError;
     CircuitError["EmptyId"] = "empty Id";
     CircuitError["EmptyChallenge"] = "empty challenge";
     CircuitError["EmptyGISTProof"] = "empty GIST merkle tree proof";
+    CircuitError["EmptyTreeState"] = "empty tree state";
     CircuitError["EmptyRequestID"] = "empty request ID";
+    CircuitError["InvalidProofType"] = "invalid proof type";
 })(CircuitError = exports.CircuitError || (exports.CircuitError = {}));
 /**
  * ValueProof represents a Merkle Proof for a value stored as MT

package/dist/node/cjs/credentials/credential-wallet.js

@@ -30,6 +30,7 @@ const uuid = __importStar(require("uuid"));
 const resolver_1 = require("./status/resolver");
 const sparse_merkle_tree_1 = require("./status/sparse-merkle-tree");
 const agent_revocation_1 = require("./status/agent-revocation");
+const utils_1 = require("./utils");
 // ErrAllClaimsRevoked all claims are revoked.
 const ErrAllClaimsRevoked = 'all claims are revoked';
 /**
@@ -125,16 +126,7 @@ class CredentialWallet {
             ? mtpProof.issuerData.state
             : sigProof?.issuerData.state;
         const issuerDID = js_iden3_core_1.DID.parse(cred.issuer);
-        let userDID;
-        if (!cred.credentialSubject.id) {
-            userDID = issuerDID;
-        }
-        else {
-            if (typeof cred.credentialSubject.id !== 'string') {
-                throw new Error('credential status `id` is not a string');
-            }
-            userDID = js_iden3_core_1.DID.parse(cred.credentialSubject.id);
-        }
+        const userDID = (0, utils_1.getUserDIDFromCredential)(issuerDID, cred);
         const opts = {
             issuerGenesisState: stateInfo,
             issuerDID,

package/dist/node/cjs/credentials/index.js

@@ -22,3 +22,4 @@ __exportStar(require("./status/agent-revocation"), exports);
 __exportStar(require("./status/utils"), exports);
 __exportStar(require("./credential-wallet"), exports);
 __exportStar(require("./rhs"), exports);
+__exportStar(require("./utils"), exports);