@0xpolygonid/js-sdk 1.6.1 → 1.7.0

package/dist/node/cjs/circuits/comparer.js

@@ -53,12 +53,12 @@ exports.QueryOperators = {
 };
 const allOperations = Object.values(exports.QueryOperators);
 exports.availableTypesOperators = new Map([
-    [XSDNS.Boolean, [exports.QueryOperators.$eq, exports.QueryOperators.$ne]],
+    [XSDNS.Boolean, [exports.QueryOperators.$eq, exports.QueryOperators.$ne, exports.QueryOperators.$sd]],
     [XSDNS.Integer, allOperations],
     [XSDNS.NonNegativeInteger, allOperations],
     [XSDNS.PositiveInteger, allOperations],
-    [XSDNS.Double, [exports.QueryOperators.$eq, exports.QueryOperators.$ne, exports.QueryOperators.$in, exports.QueryOperators.$nin]],
-    [XSDNS.String, [exports.QueryOperators.$eq, exports.QueryOperators.$ne, exports.QueryOperators.$in, exports.QueryOperators.$nin]],
+    [XSDNS.Double, [exports.QueryOperators.$eq, exports.QueryOperators.$ne, exports.QueryOperators.$in, exports.QueryOperators.$nin, exports.QueryOperators.$sd]],
+    [XSDNS.String, [exports.QueryOperators.$eq, exports.QueryOperators.$ne, exports.QueryOperators.$in, exports.QueryOperators.$nin, exports.QueryOperators.$sd]],
     [XSDNS.DateTime, allOperations]
 ]);
 /**

package/dist/node/cjs/credentials/credential-wallet.js

@@ -83,7 +83,7 @@ class CredentialWallet {
                 id: request.credentialSchema,
                 type: verifiable_1.VerifiableConstants.JSON_SCHEMA_VALIDATOR
             };
-            cr.credentialStatus = this.buildCredentialStatus(request);
+            cr.credentialStatus = this.buildCredentialStatus(request, issuer);
             return cr;
         };
         // if no credential status resolvers are provided
@@ -149,7 +149,7 @@ class CredentialWallet {
      * @param {CredentialRequest} request
      * @returns `CredentialStatus`
      */
-    buildCredentialStatus(request) {
+    buildCredentialStatus(request, issuer) {
         const credentialStatus = {
             id: request.revocationOpts.id,
             type: request.revocationOpts.type,
@@ -168,6 +168,23 @@ class CredentialWallet {
                         ? `${credentialStatus.id.replace(/\/$/, '')}/node?state=${request.revocationOpts.issuerState}`
                         : `${credentialStatus.id.replace(/\/$/, '')}`
                 };
+            case verifiable_1.CredentialStatusType.Iden3OnchainSparseMerkleTreeProof2023: {
+                const issuerId = js_iden3_core_1.DID.idFromDID(issuer);
+                const chainId = (0, js_iden3_core_1.getChainId)(js_iden3_core_1.DID.blockchainFromId(issuerId), js_iden3_core_1.DID.networkIdFromId(issuerId));
+                const searchParams = [
+                    ['revocationNonce', request.revocationOpts.nonce?.toString() || ''],
+                    ['contractAddress', `${chainId}:${request.revocationOpts.id}`],
+                    ['state', request.revocationOpts.issuerState || '']
+                ]
+                    .filter(([, value]) => Boolean(value))
+                    .map(([key, value]) => `${key}=${value}`)
+                    .join('&');
+                return {
+                    ...credentialStatus,
+                    // `[did]:[methodid]:[chain]:[network]:[id]/credentialStatus?(revocationNonce=value)&[contractAddress=[chainID]:[contractAddress]]&(state=issuerState)`
+                    id: `${issuer.string()}/credentialStatus?${searchParams}`
+                };
+            }
             default:
                 return credentialStatus;
         }

package/dist/node/cjs/credentials/index.js

@@ -19,6 +19,7 @@ __exportStar(require("./status/reverse-sparse-merkle-tree"), exports);
 __exportStar(require("./status/sparse-merkle-tree"), exports);
 __exportStar(require("./status/resolver"), exports);
 __exportStar(require("./status/agent-revocation"), exports);
+__exportStar(require("./status/credential-status-publisher"), exports);
 __exportStar(require("./status/utils"), exports);
 __exportStar(require("./credential-wallet"), exports);
 __exportStar(require("./rhs"), exports);

package/dist/node/cjs/credentials/rhs.js

@@ -1,16 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.pushHashesToRHS = void 0;
+exports.getNodesRepresentation = exports.pushHashesToRHS = void 0;
 const js_merkletree_1 = require("@iden3/js-merkletree");
 const js_merkletree_2 = require("@iden3/js-merkletree");
 const js_merkletree_3 = require("@iden3/js-merkletree");
 const reverse_sparse_merkle_tree_1 = require("./status/reverse-sparse-merkle-tree");
+const credential_status_publisher_1 = require("./status/credential-status-publisher");
+const verifiable_1 = require("../verifiable");
 /**
  * Pushes identity state information to a reverse hash service.
  *
  * A reverse hash service (RHS) is a centralized or decentralized service for storing publicly available data about identity.
  * Such data are identity state and state of revocation tree and roots tree root tree.
  *
+ * @deprecated Use `pushHashesToReverseHashService` instead.
  * @param {Hash} state - current state of identity
  * @param {TreesModel} trees - current trees of identity (claims, revocation, rootOfRoots )
  * @param {string} rhsUrl - URL of service
@@ -18,6 +21,24 @@ const reverse_sparse_merkle_tree_1 = require("./status/reverse-sparse-merkle-tre
  * @returns void
  */
 async function pushHashesToRHS(state, trees, rhsUrl, revokedNonces) {
+    const nodes = await getNodesRepresentation(revokedNonces, trees, state);
+    const publisher = new credential_status_publisher_1.Iden3SmtRhsCredentialStatusPublisher();
+    await publisher.publish({
+        nodes,
+        credentialStatusType: verifiable_1.CredentialStatusType.Iden3ReverseSparseMerkleTreeProof,
+        rhsUrl: rhsUrl
+    });
+}
+exports.pushHashesToRHS = pushHashesToRHS;
+/**
+ * Retrieves the representation of nodes for generating a proof.
+ *
+ * @param revokedNonces - An array of revoked nonces.
+ * @param trees - The TreesModel object containing the necessary trees.
+ * @param state - The hash of the state.
+ * @returns A Promise that resolves to an array of ProofNode objects.
+ */
+async function getNodesRepresentation(revokedNonces, trees, state) {
     const nb = new NodesBuilder();
     if (revokedNonces) {
         await addRevocationNode(nb, trees, revokedNonces);
@@ -31,17 +52,9 @@ async function pushHashesToRHS(state, trees, rhsUrl, revokedNonces) {
             await trees.rootsTree.root()
         ]));
     }
-    if (nb.nodes.length > 0) {
-        await saveNodes(nb.nodes, rhsUrl);
-    }
-}
-exports.pushHashesToRHS = pushHashesToRHS;
-async function saveNodes(nodes, nodeUrl) {
-    const nodesJSON = nodes.map((n) => n.toJSON());
-    const resp = await fetch(nodeUrl + '/node', { method: 'post', body: JSON.stringify(nodesJSON) });
-    const status = resp.status;
-    return status === 200;
+    return nb.nodes;
 }
+exports.getNodesRepresentation = getNodesRepresentation;
 async function addRoRNode(nb, trees) {
     const currentRootsTree = trees.rootsTree;
     const claimsTree = trees.claimsTree;
@@ -66,8 +79,8 @@ class NodesBuilder {
     }
     async addKey(tree, nodeKey) {
         const { value: nodeValue, siblings } = await tree.get(nodeKey);
-        const nodeKeyHash = (0, js_merkletree_1.newHashFromBigInt)(nodeKey);
-        const nodeValueHash = (0, js_merkletree_1.newHashFromBigInt)(nodeValue);
+        const nodeKeyHash = js_merkletree_1.Hash.fromBigInt(nodeKey);
+        const nodeValueHash = js_merkletree_1.Hash.fromBigInt(nodeValue);
         const node = new js_merkletree_1.NodeLeaf(nodeKeyHash, nodeValueHash);
         const newNodes = await buildNodesUp(siblings, node);
         for (const n of newNodes) {
@@ -97,7 +110,7 @@ async function buildNodesUp(siblings, node) {
         nodes[index] = new reverse_sparse_merkle_tree_1.ProofNode();
     }
     nodes[sl].hash = prevHash;
-    const hashOfOne = (0, js_merkletree_1.newHashFromBigInt)(BigInt(1));
+    const hashOfOne = js_merkletree_1.Hash.fromBigInt(BigInt(1));
     nodes[sl].children = [node.entry[0], node.entry[1], hashOfOne];
     const pathKey = node.entry[0];
     for (let i = sl - 1; i >= 0; i--) {
@@ -111,7 +124,7 @@ async function buildNodesUp(siblings, node) {
             nodes[i].children[0] = prevHash;
             nodes[i].children[1] = siblings[i];
         }
-        nodes[i].hash = await (0, js_merkletree_3.hashElems)([nodes[i].children[0].bigInt(), nodes[i].children[1].bigInt()]);
+        nodes[i].hash = (0, js_merkletree_3.hashElems)([nodes[i].children[0].bigInt(), nodes[i].children[1].bigInt()]);
         prevHash = nodes[i].hash;
     }
     return nodes;

package/dist/node/cjs/credentials/status/credential-status-publisher.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Iden3SmtRhsCredentialStatusPublisher = exports.Iden3OnchainSmtCredentialStatusPublisher = exports.CredentialStatusPublisherRegistry = void 0;
+const verifiable_1 = require("../../verifiable");
+/**
+ * Registry for managing credential status publishers.
+ */
+class CredentialStatusPublisherRegistry {
+    constructor() {
+        this._publishers = new Map();
+    }
+    /**
+     * Registers one or more credential status publishers for a given type.
+     * @param type - The credential status type.
+     * @param publisher - One or more credential status publishers.
+     */
+    register(type, ...publisher) {
+        const publishers = this._publishers.get(type) ?? [];
+        publishers.push(...publisher);
+        this._publishers.set(type, publishers);
+    }
+    /**
+     * Retrieves the credential status publishers for a given type.
+     * @param type - The credential status type.
+     * @returns An array of credential status publishers or undefined if none are registered for the given type.
+     */
+    get(type) {
+        return this._publishers.get(type);
+    }
+}
+exports.CredentialStatusPublisherRegistry = CredentialStatusPublisherRegistry;
+/**
+ * Implementation of the ICredentialStatusPublisher interface for publishing on-chain credential status.
+ */
+class Iden3OnchainSmtCredentialStatusPublisher {
+    constructor(_storage) {
+        this._storage = _storage;
+    }
+    /**
+     * Publishes the credential status to the blockchain.
+     * @param params - The parameters for publishing the credential status.
+     */
+    async publish(params) {
+        if (![verifiable_1.CredentialStatusType.Iden3OnchainSparseMerkleTreeProof2023].includes(params.credentialStatusType)) {
+            throw new Error(`On-chain publishing is not supported for credential status type ${params.credentialStatusType}`);
+        }
+        const nodesBigInts = params.nodes.map((n) => n.children.map((c) => c.bigInt()));
+        const txPromise = this._storage.saveNodes(nodesBigInts);
+        if (params.onChain?.txCallback) {
+            const cb = params.onChain?.txCallback;
+            txPromise.then((receipt) => cb(receipt));
+            return;
+        }
+        await txPromise;
+    }
+}
+exports.Iden3OnchainSmtCredentialStatusPublisher = Iden3OnchainSmtCredentialStatusPublisher;
+/**
+ * Implementation of the ICredentialStatusPublisher interface for publishing off-chain credential status.
+ */
+class Iden3SmtRhsCredentialStatusPublisher {
+    /**
+     * Publishes the credential status to a specified node URL.
+     * @param params - The parameters for publishing the credential status.
+     * @param params.nodes - The proof nodes to be published.
+     * @param params.rhsUrl - The URL of the node to publish the credential status to.
+     * @returns A promise that resolves when the credential status is successfully published.
+     * @throws An error if the publishing fails.
+     */
+    async publish(params) {
+        if (![verifiable_1.CredentialStatusType.Iden3ReverseSparseMerkleTreeProof].includes(params.credentialStatusType)) {
+            throw new Error(`On-chain publishing is not supported for credential status type ${params.credentialStatusType}`);
+        }
+        const nodesJSON = params.nodes.map((n) => n.toJSON());
+        const resp = await fetch(params.rhsUrl + '/node', {
+            method: 'post',
+            body: JSON.stringify(nodesJSON)
+        });
+        if (resp.status !== 200) {
+            throw new Error(`Failed to publish credential status. Status: ${resp.status}`);
+        }
+    }
+}
+exports.Iden3SmtRhsCredentialStatusPublisher = Iden3SmtRhsCredentialStatusPublisher;

package/dist/node/cjs/credentials/utils.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getUserDIDFromCredential = void 0;
+exports.getKMSIdByAuthCredential = exports.getUserDIDFromCredential = void 0;
 const js_iden3_core_1 = require("@iden3/js-iden3-core");
+const js_crypto_1 = require("@iden3/js-crypto");
+const kms_1 = require("../kms");
 /**
  * Retrieves the user DID from a given credential.
  * If the credential does not have a credentialSubject.id property, the issuer DID is returned.
@@ -21,3 +23,14 @@ const getUserDIDFromCredential = (issuerDID, credential) => {
     return js_iden3_core_1.DID.parse(credential.credentialSubject.id);
 };
 exports.getUserDIDFromCredential = getUserDIDFromCredential;
+const getKMSIdByAuthCredential = (credential) => {
+    if (!credential.type.includes('AuthBJJCredential')) {
+        throw new Error("can't sign with not AuthBJJCredential credential");
+    }
+    const x = credential.credentialSubject['x'];
+    const y = credential.credentialSubject['y'];
+    const pb = new js_crypto_1.PublicKey([BigInt(x), BigInt(y)]);
+    const kp = (0, kms_1.keyPath)(kms_1.KmsKeyType.BabyJubJub, pb.hex());
+    return { type: kms_1.KmsKeyType.BabyJubJub, id: kp };
+};
+exports.getKMSIdByAuthCredential = getKMSIdByAuthCredential;

package/dist/node/cjs/identity/identity-wallet.js

@@ -31,11 +31,11 @@ const js_merkletree_1 = require("@iden3/js-merkletree");
 const common_1 = require("./common");
 const uuid = __importStar(require("uuid"));
 const schema_processor_1 = require("../schema-processor");
-const mt_1 = require("../storage/entities/mt");
-const provider_helpers_1 = require("../kms/provider-helpers");
+const storage_1 = require("../storage");
 const verifiable_1 = require("../verifiable");
 const credentials_1 = require("../credentials");
 const utils_1 = require("../utils");
+const credential_status_publisher_1 = require("../credentials/status/credential-status-publisher");
 /**
  * @public
  * Wallet instance to manage the digital identity based on iden3 protocol
@@ -56,10 +56,19 @@ class IdentityWallet {
      * @param {ICredentialWallet} _credentialWallet - credential wallet instance to quickly access credential CRUD functionality
      * @public
      */
-    constructor(_kms, _storage, _credentialWallet) {
+    constructor(_kms, _storage, _credentialWallet, _opts) {
         this._kms = _kms;
         this._storage = _storage;
         this._credentialWallet = _credentialWallet;
+        this._opts = _opts;
+        if (!_opts?.credentialStatusPublisherRegistry) {
+            this._credentialStatusPublisherRegistry = new credential_status_publisher_1.CredentialStatusPublisherRegistry();
+            this._credentialStatusPublisherRegistry.register(verifiable_1.CredentialStatusType.Iden3ReverseSparseMerkleTreeProof, new credential_status_publisher_1.Iden3SmtRhsCredentialStatusPublisher());
+        }
+        else {
+            this._credentialStatusPublisherRegistry = this._opts
+                ?.credentialStatusPublisherRegistry;
+        }
     }
     /**
      * {@inheritDoc IIdentityWallet.createIdentity}
@@ -78,8 +87,8 @@ class IdentityWallet {
         const authClaim = js_iden3_core_1.Claim.newClaim(schemaHash, js_iden3_core_1.ClaimOptions.withIndexDataInts(pubKey.p[0], pubKey.p[1]), js_iden3_core_1.ClaimOptions.withRevocationNonce(BigInt(0)));
         const revNonce = opts.revocationOpts.nonce ?? 0;
         authClaim.setRevocationNonce(BigInt(revNonce));
-        await this._storage.mt.addToMerkleTree(tmpIdentifier, mt_1.MerkleTreeType.Claims, authClaim.hiHv().hi, authClaim.hiHv().hv);
-        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(tmpIdentifier, mt_1.MerkleTreeType.Claims);
+        await this._storage.mt.addToMerkleTree(tmpIdentifier, storage_1.MerkleTreeType.Claims, authClaim.hiHv().hi, authClaim.hiHv().hv);
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(tmpIdentifier, storage_1.MerkleTreeType.Claims);
         const currentState = (0, js_merkletree_1.hashElems)([
             (await claimsTree.root()).bigInt(),
             js_merkletree_1.ZERO_HASH.bigInt(),
@@ -133,9 +142,10 @@ class IdentityWallet {
             coreClaim: authClaim
         });
         credential.proof = [mtpProof];
-        if (opts.revocationOpts.type === verifiable_1.CredentialStatusType.Iden3ReverseSparseMerkleTreeProof) {
-            await this.publishStateToRHS(did, opts.revocationOpts.id);
-        }
+        await this.publishRevocationInfoByCredentialStatusType(did, opts.revocationOpts.type, {
+            rhsUrl: opts.revocationOpts.id,
+            onChain: opts.revocationOpts.onChain
+        });
         await this._storage.identity.saveIdentity({
             did: did.string(),
             state: currentState,
@@ -197,10 +207,11 @@ class IdentityWallet {
     }
     /** {@inheritDoc IIdentityWallet.getDIDTreeModel} */
     async getDIDTreeModel(did) {
-        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), mt_1.MerkleTreeType.Claims);
-        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), mt_1.MerkleTreeType.Revocations);
-        const rootsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), mt_1.MerkleTreeType.Roots);
-        const state = await (0, js_merkletree_1.hashElems)([
+        const didStr = did.string();
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(didStr, storage_1.MerkleTreeType.Claims);
+        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(didStr, storage_1.MerkleTreeType.Revocations);
+        const rootsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(didStr, storage_1.MerkleTreeType.Roots);
+        const state = (0, js_merkletree_1.hashElems)([
             (await claimsTree.root()).bigInt(),
             (await revocationTree.root()).bigInt(),
             (await rootsTree.root()).bigInt()
@@ -217,7 +228,7 @@ class IdentityWallet {
         const coreClaim = await this.getCoreClaimFromCredential(credential);
         // todo: Parser.parseClaim
         const treesModel = await this.getDIDTreeModel(did);
-        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), mt_1.MerkleTreeType.Claims);
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), storage_1.MerkleTreeType.Claims);
         const claimsRoot = await treesModel.claimsTree.root();
         const rootOfRoots = await treesModel.rootsTree.root();
         const revocationRoot = await treesModel.revocationTree.root();
@@ -237,7 +248,7 @@ class IdentityWallet {
         const coreClaim = await this.getCoreClaimFromCredential(credential);
         const revNonce = coreClaim.getRevocationNonce();
         const treesModel = await this.getDIDTreeModel(did);
-        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), mt_1.MerkleTreeType.Revocations);
+        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), storage_1.MerkleTreeType.Revocations);
         const claimsRoot = await treesModel.claimsTree.root();
         const rootOfRoots = await treesModel.rootsTree.root();
         const revocationRoot = await treesModel.revocationTree.root();
@@ -254,14 +265,14 @@ class IdentityWallet {
     }
     /** {@inheritDoc IIdentityWallet.sign} */
     async sign(message, credential) {
-        const keyKMSId = this.getKMSIdByAuthCredential(credential);
+        const keyKMSId = (0, credentials_1.getKMSIdByAuthCredential)(credential);
         const payload = js_crypto_1.poseidon.hashBytes(message);
         const signature = await this._kms.sign(keyKMSId, js_iden3_core_1.BytesHelper.intToBytes(payload));
         return js_crypto_1.Signature.newFromCompressed(signature);
     }
     /** {@inheritDoc IIdentityWallet.signChallenge} */
     async signChallenge(challenge, credential) {
-        const keyKMSId = this.getKMSIdByAuthCredential(credential);
+        const keyKMSId = (0, credentials_1.getKMSIdByAuthCredential)(credential);
         const signature = await this._kms.sign(keyKMSId, js_iden3_core_1.BytesHelper.intToBytes(challenge));
         return js_crypto_1.Signature.newFromCompressed(signature);
     }
@@ -358,11 +369,11 @@ class IdentityWallet {
             if (!coreClaim) {
                 throw new Error('credential must have coreClaim representation in the signature proof');
             }
-            await this._storage.mt.addToMerkleTree(issuerDID.string(), mt_1.MerkleTreeType.Claims, coreClaim.hIndex(), coreClaim.hValue());
+            await this._storage.mt.addToMerkleTree(issuerDID.string(), storage_1.MerkleTreeType.Claims, coreClaim.hIndex(), coreClaim.hValue());
         }
         const newIssuerTreeState = await this.getDIDTreeModel(issuerDID);
         const claimTreeRoot = await newIssuerTreeState.claimsTree.root();
-        await this._storage.mt.addToMerkleTree(issuerDID.string(), mt_1.MerkleTreeType.Roots, claimTreeRoot.bigInt(), BigInt(0));
+        await this._storage.mt.addToMerkleTree(issuerDID.string(), storage_1.MerkleTreeType.Roots, claimTreeRoot.bigInt(), BigInt(0));
         const newIssuerTreeStateWithROR = await this.getDIDTreeModel(issuerDID);
         claimsRoot = await newIssuerTreeStateWithROR.claimsTree.root();
         rootOfRoots = await newIssuerTreeStateWithROR.rootsTree.root();
@@ -429,15 +440,35 @@ class IdentityWallet {
             rootsTree: treeState.rootsTree
         }, rhsURL, revokedNonces);
     }
-    getKMSIdByAuthCredential(credential) {
-        if (credential.type.indexOf('AuthBJJCredential') === -1) {
-            throw new Error("can't sign with not AuthBJJCredential credential");
+    /** {@inheritDoc IIdentityWallet.publishRevocationInfoByCredentialStatusType} */
+    async publishRevocationInfoByCredentialStatusType(issuerDID, credentialStatusType, opts) {
+        const rhsPublishers = this._credentialStatusPublisherRegistry.get(credentialStatusType);
+        if (!rhsPublishers) {
+            throw new Error(`there is no registered publisher to save  hash is not registered for ${credentialStatusType} is not registered`);
+        }
+        let nodes = [];
+        if (opts?.treeModel) {
+            nodes = await (0, credentials_1.getNodesRepresentation)(opts.revokedNonces, {
+                revocationTree: opts.treeModel.revocationTree,
+                claimsTree: opts.treeModel.claimsTree,
+                state: opts.treeModel.state,
+                rootsTree: opts.treeModel.rootsTree
+            }, opts.treeModel.state);
+        }
+        else {
+            const treeState = await this.getDIDTreeModel(issuerDID);
+            nodes = await (0, credentials_1.getNodesRepresentation)(opts?.revokedNonces, {
+                revocationTree: treeState.revocationTree,
+                claimsTree: treeState.claimsTree,
+                state: treeState.state,
+                rootsTree: treeState.rootsTree
+            }, treeState.state);
+        }
+        if (!nodes.length) {
+            return;
         }
-        const x = credential.credentialSubject['x'];
-        const y = credential.credentialSubject['y'];
-        const pb = new js_crypto_1.PublicKey([BigInt(x), BigInt(y)]);
-        const kp = (0, provider_helpers_1.keyPath)(kms_1.KmsKeyType.BabyJubJub, pb.hex());
-        return { type: kms_1.KmsKeyType.BabyJubJub, id: kp };
+        const rhsPublishersTask = rhsPublishers.map((publisher) => publisher.publish({ nodes, ...opts, credentialStatusType, issuerDID }));
+        await Promise.all(rhsPublishersTask);
     }
     async getCoreClaimFromCredential(credential) {
         const coreClaimFromSigProof = credential.getCoreClaimFromProof(verifiable_1.ProofType.BJJSignature);

package/dist/node/cjs/storage/blockchain/abi/CredentialStatusResolver.json

@@ -1 +1 @@
-[{ "inputs": [{ "internalType": "uint256", "name": "id", "type": "uint256" }, { "internalType": "uint64", "name": "nonce", "type": "uint64" }], "name": "getRevocationStatus", "outputs": [{ "components": [{ "components": [{ "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint256", "name": "claimsTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "revocationTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "rootOfRoots", "type": "uint256" }], "internalType": "structIOnchainCredentialStatusResolver.IdentityStateRoots", "name": "issuer", "type": "tuple" }, { "components": [{ "internalType": "uint256", "name": "root", "type": "uint256" }, { "internalType": "bool", "name": "existence", "type": "bool" }, { "internalType": "uint256[]", "name": "siblings", "type": "uint256[]" }, { "internalType": "uint256", "name": "index", "type": "uint256" }, { "internalType": "uint256", "name": "value", "type": "uint256" }, { "internalType": "bool", "name": "auxExistence", "type": "bool" }, { "internalType": "uint256", "name": "auxIndex", "type": "uint256" }, { "internalType": "uint256", "name": "auxValue", "type": "uint256" }], "internalType": "structIOnchainCredentialStatusResolver.Proof", "name": "mtp", "type": "tuple" }], "internalType": "structIOnchainCredentialStatusResolver.CredentialStatus", "name": "", "type": "tuple" }], "stateMutability": "view", "type": "function" }, { "inputs": [{ "internalType": "uint256", "name": "id", "type": "uint256" }, { "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint64", "name": "nonce", "type": "uint64" }], "name": "getRevocationStatusByIdAndState", "outputs": [{ "components": [{ "components": [{ "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint256", "name": "claimsTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "revocationTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "rootOfRoots", "type": "uint256" }], "internalType": "structIOnchainCredentialStatusResolver.IdentityStateRoots", "name": "issuer", "type": "tuple" }, { "components": [{ "internalType": "uint256", "name": "root", "type": "uint256" }, { "internalType": "bool", "name": "existence", "type": "bool" }, { "internalType": "uint256[]", "name": "siblings", "type": "uint256[]" }, { "internalType": "uint256", "name": "index", "type": "uint256" }, { "internalType": "uint256", "name": "value", "type": "uint256" }, { "internalType": "bool", "name": "auxExistence", "type": "bool" }, { "internalType": "uint256", "name": "auxIndex", "type": "uint256" }, { "internalType": "uint256", "name": "auxValue", "type": "uint256" }], "internalType": "structIOnchainCredentialStatusResolver.Proof", "name": "mtp", "type": "tuple" }], "internalType": "structIOnchainCredentialStatusResolver.CredentialStatus", "name": "", "type": "tuple" }], "stateMutability": "view", "type": "function" }]
+[{ "inputs": [], "name": "MAX_SMT_DEPTH", "outputs": [{ "internalType": "uint256", "name": "", "type": "uint256" }], "stateMutability": "view", "type": "function" }, { "inputs": [{ "internalType": "uint256", "name": "key", "type": "uint256" }], "name": "getNode", "outputs": [{ "internalType": "uint256[]", "name": "", "type": "uint256[]" }], "stateMutability": "view", "type": "function" }, { "inputs": [{ "internalType": "uint256", "name": "id", "type": "uint256" }, { "internalType": "uint64", "name": "nonce", "type": "uint64" }], "name": "getRevocationStatus", "outputs": [{ "components": [{ "components": [{ "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint256", "name": "claimsTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "revocationTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "rootOfRoots", "type": "uint256" }], "internalType": "struct IOnchainCredentialStatusResolver.IdentityStateRoots", "name": "issuer", "type": "tuple" }, { "components": [{ "internalType": "uint256", "name": "root", "type": "uint256" }, { "internalType": "bool", "name": "existence", "type": "bool" }, { "internalType": "uint256[]", "name": "siblings", "type": "uint256[]" }, { "internalType": "uint256", "name": "index", "type": "uint256" }, { "internalType": "uint256", "name": "value", "type": "uint256" }, { "internalType": "bool", "name": "auxExistence", "type": "bool" }, { "internalType": "uint256", "name": "auxIndex", "type": "uint256" }, { "internalType": "uint256", "name": "auxValue", "type": "uint256" }], "internalType": "struct IOnchainCredentialStatusResolver.Proof", "name": "mtp", "type": "tuple" }], "internalType": "struct IOnchainCredentialStatusResolver.CredentialStatus", "name": "", "type": "tuple" }], "stateMutability": "view", "type": "function" }, { "inputs": [{ "internalType": "uint256", "name": "id", "type": "uint256" }, { "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint64", "name": "nonce", "type": "uint64" }], "name": "getRevocationStatusByIdAndState", "outputs": [{ "components": [{ "components": [{ "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint256", "name": "claimsTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "revocationTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "rootOfRoots", "type": "uint256" }], "internalType": "struct IOnchainCredentialStatusResolver.IdentityStateRoots", "name": "issuer", "type": "tuple" }, { "components": [{ "internalType": "uint256", "name": "root", "type": "uint256" }, { "internalType": "bool", "name": "existence", "type": "bool" }, { "internalType": "uint256[]", "name": "siblings", "type": "uint256[]" }, { "internalType": "uint256", "name": "index", "type": "uint256" }, { "internalType": "uint256", "name": "value", "type": "uint256" }, { "internalType": "bool", "name": "auxExistence", "type": "bool" }, { "internalType": "uint256", "name": "auxIndex", "type": "uint256" }, { "internalType": "uint256", "name": "auxValue", "type": "uint256" }], "internalType": "struct IOnchainCredentialStatusResolver.Proof", "name": "mtp", "type": "tuple" }], "internalType": "struct IOnchainCredentialStatusResolver.CredentialStatus", "name": "", "type": "tuple" }], "stateMutability": "view", "type": "function" }, { "inputs": [], "name": "owner", "outputs": [{ "internalType": "address", "name": "", "type": "address" }], "stateMutability": "view", "type": "function" }, { "inputs": [{ "internalType": "uint256[][]", "name": "nodes", "type": "uint256[][]" }], "name": "saveNodes", "outputs": [], "stateMutability": "nonpayable", "type": "function" }]

package/dist/node/cjs/storage/blockchain/index.js

@@ -16,3 +16,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./state"), exports);
 __exportStar(require("./onchain-zkp-verifier"), exports);
+__exportStar(require("./onchain-revocation"), exports);

package/dist/node/cjs/storage/blockchain/onchain-revocation.js

@@ -22,9 +22,16 @@ class OnChainRevocationStorage {
      * @param {string} - onhcain contract address
      * @param {string} - rpc url to connect to the blockchain
      */
-    constructor(config, contractAddress) {
-        this.provider = new ethers_1.JsonRpcProvider(config.url);
-        this.onchainContract = new ethers_1.Contract(contractAddress, CredentialStatusResolver_json_1.default, this.provider);
+    constructor(_config, contractAddress, _signer) {
+        this._config = _config;
+        this._signer = _signer;
+        this._provider = new ethers_1.JsonRpcProvider(_config.url);
+        let contract = new ethers_1.Contract(contractAddress, CredentialStatusResolver_json_1.default, this._provider);
+        if (this._signer) {
+            this._signer = this._signer.connect(this._provider);
+            contract = contract.connect(this._signer);
+        }
+        this._contract = contract;
     }
     /**
      * Get revocation status by issuerId, issuerState and nonce from the onchain.
@@ -32,7 +39,7 @@ class OnChainRevocationStorage {
      * @returns Promise<RevocationStatus>
      */
     async getRevocationStatusByIdAndState(issuerID, state, nonce) {
-        const response = await this.onchainContract.getRevocationStatusByIdAndState(issuerID, state, nonce);
+        const response = await this._contract.getRevocationStatusByIdAndState(issuerID, state, nonce);
         const issuer = OnChainRevocationStorage.convertIssuerInfo(response.issuer);
         const mtp = OnChainRevocationStorage.convertSmtProofToProof(response.mtp);
         return {
@@ -46,7 +53,7 @@ class OnChainRevocationStorage {
      * @returns Promise<RevocationStatus>
      */
     async getRevocationStatus(issuerID, nonce) {
-        const response = await this.onchainContract.getRevocationStatus(issuerID, nonce);
+        const response = await this._contract.getRevocationStatus(issuerID, nonce);
         const issuer = OnChainRevocationStorage.convertIssuerInfo(response.issuer);
         const mtp = OnChainRevocationStorage.convertSmtProofToProof(response.mtp);
         return {
@@ -54,6 +61,39 @@ class OnChainRevocationStorage {
             mtp
         };
     }
+    async saveNodes(payload) {
+        if (!this._signer) {
+            throw new Error('No signer provided');
+        }
+        const feeData = await this._provider.getFeeData();
+        const maxFeePerGas = this._config.maxFeePerGas
+            ? BigInt(this._config.maxFeePerGas)
+            : feeData.maxFeePerGas;
+        const maxPriorityFeePerGas = this._config.maxPriorityFeePerGas
+            ? BigInt(this._config.maxPriorityFeePerGas)
+            : feeData.maxPriorityFeePerGas;
+        const gasLimit = await this._contract.saveNodes.estimateGas(payload);
+        const txData = await this._contract.saveNodes.populateTransaction(payload);
+        const request = {
+            to: txData.to,
+            data: txData.data,
+            gasLimit,
+            maxFeePerGas,
+            maxPriorityFeePerGas
+        };
+        const tx = await this._signer.sendTransaction(request);
+        return tx.wait().then((txReceipt) => {
+            if (!txReceipt) {
+                throw new Error(`transaction: ${tx.hash} failed to mine`);
+            }
+            const status = txReceipt.status;
+            const txnHash = txReceipt.hash;
+            if (!status) {
+                throw new Error(`transaction: ${txnHash} failed to mine`);
+            }
+            return txReceipt;
+        });
+    }
     static convertIssuerInfo(issuer) {
         const [state, claimsTreeRoot, revocationTreeRoot, rootOfRoots] = issuer.map((i) => js_merkletree_1.Hash.fromBigInt(i).hex());
         return {

package/dist/node/esm/circuits/comparer.js

@@ -50,12 +50,12 @@ export const QueryOperators = {
 };
 const allOperations = Object.values(QueryOperators);
 export const availableTypesOperators = new Map([
-    [XSDNS.Boolean, [QueryOperators.$eq, QueryOperators.$ne]],
+    [XSDNS.Boolean, [QueryOperators.$eq, QueryOperators.$ne, QueryOperators.$sd]],
     [XSDNS.Integer, allOperations],
     [XSDNS.NonNegativeInteger, allOperations],
     [XSDNS.PositiveInteger, allOperations],
-    [XSDNS.Double, [QueryOperators.$eq, QueryOperators.$ne, QueryOperators.$in, QueryOperators.$nin]],
-    [XSDNS.String, [QueryOperators.$eq, QueryOperators.$ne, QueryOperators.$in, QueryOperators.$nin]],
+    [XSDNS.Double, [QueryOperators.$eq, QueryOperators.$ne, QueryOperators.$in, QueryOperators.$nin, QueryOperators.$sd]],
+    [XSDNS.String, [QueryOperators.$eq, QueryOperators.$ne, QueryOperators.$in, QueryOperators.$nin, QueryOperators.$sd]],
     [XSDNS.DateTime, allOperations]
 ]);
 /**

package/dist/node/esm/credentials/credential-wallet.js

@@ -1,4 +1,4 @@
-import { DID } from '@iden3/js-iden3-core';
+import { DID, getChainId } from '@iden3/js-iden3-core';
 import { W3CCredential, VerifiableConstants, CredentialStatusType } from './../verifiable';
 import * as uuid from 'uuid';
 import { CredentialStatusResolverRegistry } from './status/resolver';
@@ -57,7 +57,7 @@ export class CredentialWallet {
                 id: request.credentialSchema,
                 type: VerifiableConstants.JSON_SCHEMA_VALIDATOR
             };
-            cr.credentialStatus = this.buildCredentialStatus(request);
+            cr.credentialStatus = this.buildCredentialStatus(request, issuer);
             return cr;
         };
         // if no credential status resolvers are provided
@@ -123,7 +123,7 @@ export class CredentialWallet {
      * @param {CredentialRequest} request
      * @returns `CredentialStatus`
      */
-    buildCredentialStatus(request) {
+    buildCredentialStatus(request, issuer) {
         const credentialStatus = {
             id: request.revocationOpts.id,
             type: request.revocationOpts.type,
@@ -142,6 +142,23 @@ export class CredentialWallet {
                         ? `${credentialStatus.id.replace(/\/$/, '')}/node?state=${request.revocationOpts.issuerState}`
                         : `${credentialStatus.id.replace(/\/$/, '')}`
                 };
+            case CredentialStatusType.Iden3OnchainSparseMerkleTreeProof2023: {
+                const issuerId = DID.idFromDID(issuer);
+                const chainId = getChainId(DID.blockchainFromId(issuerId), DID.networkIdFromId(issuerId));
+                const searchParams = [
+                    ['revocationNonce', request.revocationOpts.nonce?.toString() || ''],
+                    ['contractAddress', `${chainId}:${request.revocationOpts.id}`],
+                    ['state', request.revocationOpts.issuerState || '']
+                ]
+                    .filter(([, value]) => Boolean(value))
+                    .map(([key, value]) => `${key}=${value}`)
+                    .join('&');
+                return {
+                    ...credentialStatus,
+                    // `[did]:[methodid]:[chain]:[network]:[id]/credentialStatus?(revocationNonce=value)&[contractAddress=[chainID]:[contractAddress]]&(state=issuerState)`
+                    id: `${issuer.string()}/credentialStatus?${searchParams}`
+                };
+            }
             default:
                 return credentialStatus;
         }

package/dist/node/esm/credentials/index.js

@@ -3,6 +3,7 @@ export * from './status/reverse-sparse-merkle-tree';
 export * from './status/sparse-merkle-tree';
 export * from './status/resolver';
 export * from './status/agent-revocation';
+export * from './status/credential-status-publisher';
 export * from './status/utils';
 export * from './credential-wallet';
 export * from './rhs';