@0xpolygonid/js-sdk 1.6.1 → 1.7.1

package/dist/node/cjs/circuits/comparer.js

@@ -53,12 +53,30 @@ exports.QueryOperators = {
 };
 const allOperations = Object.values(exports.QueryOperators);
 exports.availableTypesOperators = new Map([
-    [XSDNS.Boolean, [exports.QueryOperators.$eq, exports.QueryOperators.$ne]],
+    [XSDNS.Boolean, [exports.QueryOperators.$eq, exports.QueryOperators.$ne, exports.QueryOperators.$sd]],
     [XSDNS.Integer, allOperations],
     [XSDNS.NonNegativeInteger, allOperations],
     [XSDNS.PositiveInteger, allOperations],
-    [XSDNS.Double, [exports.QueryOperators.$eq, exports.QueryOperators.$ne, exports.QueryOperators.$in, exports.QueryOperators.$nin]],
-    [XSDNS.String, [exports.QueryOperators.$eq, exports.QueryOperators.$ne, exports.QueryOperators.$in, exports.QueryOperators.$nin]],
+    [
+        XSDNS.Double,
+        [
+            exports.QueryOperators.$eq,
+            exports.QueryOperators.$ne,
+            exports.QueryOperators.$in,
+            exports.QueryOperators.$nin,
+            exports.QueryOperators.$sd
+        ]
+    ],
+    [
+        XSDNS.String,
+        [
+            exports.QueryOperators.$eq,
+            exports.QueryOperators.$ne,
+            exports.QueryOperators.$in,
+            exports.QueryOperators.$nin,
+            exports.QueryOperators.$sd
+        ]
+    ],
     [XSDNS.DateTime, allOperations]
 ]);
 /**

package/dist/node/cjs/circuits/linked-multi-query.js

@@ -28,7 +28,7 @@ class LinkedMultiQueryInputs extends common_1.BaseConfig {
             if (!this.query[i]) {
                 enabled.push(0);
                 claimPathNotExists.push(0);
-                claimPathMtp.push([]);
+                claimPathMtp.push(new Array(this.getMTLevelsClaim()).fill('0'));
                 claimPathMtpNoAux.push('0');
                 claimPathMtpAuxHi.push('0');
                 claimPathMtpAuxHv.push('0');

package/dist/node/cjs/credentials/credential-wallet.js

@@ -76,6 +76,7 @@ class CredentialWallet {
             cr['@context'] = context;
             cr.type = credentialType;
             cr.expirationDate = expirationDate ? new Date(expirationDate * 1000).toISOString() : undefined;
+            cr.refreshService = request.refreshService;
             cr.issuanceDate = new Date().toISOString();
             cr.credentialSubject = credentialSubject;
             cr.issuer = issuer.string();
@@ -83,7 +84,7 @@ class CredentialWallet {
                 id: request.credentialSchema,
                 type: verifiable_1.VerifiableConstants.JSON_SCHEMA_VALIDATOR
             };
-            cr.credentialStatus = this.buildCredentialStatus(request);
+            cr.credentialStatus = this.buildCredentialStatus(request, issuer);
             return cr;
         };
         // if no credential status resolvers are provided
@@ -149,7 +150,7 @@ class CredentialWallet {
      * @param {CredentialRequest} request
      * @returns `CredentialStatus`
      */
-    buildCredentialStatus(request) {
+    buildCredentialStatus(request, issuer) {
         const credentialStatus = {
             id: request.revocationOpts.id,
             type: request.revocationOpts.type,
@@ -168,6 +169,23 @@ class CredentialWallet {
                         ? `${credentialStatus.id.replace(/\/$/, '')}/node?state=${request.revocationOpts.issuerState}`
                         : `${credentialStatus.id.replace(/\/$/, '')}`
                 };
+            case verifiable_1.CredentialStatusType.Iden3OnchainSparseMerkleTreeProof2023: {
+                const issuerId = js_iden3_core_1.DID.idFromDID(issuer);
+                const chainId = (0, js_iden3_core_1.getChainId)(js_iden3_core_1.DID.blockchainFromId(issuerId), js_iden3_core_1.DID.networkIdFromId(issuerId));
+                const searchParams = [
+                    ['revocationNonce', request.revocationOpts.nonce?.toString() || ''],
+                    ['contractAddress', `${chainId}:${request.revocationOpts.id}`],
+                    ['state', request.revocationOpts.issuerState || '']
+                ]
+                    .filter(([, value]) => Boolean(value))
+                    .map(([key, value]) => `${key}=${value}`)
+                    .join('&');
+                return {
+                    ...credentialStatus,
+                    // `[did]:[methodid]:[chain]:[network]:[id]/credentialStatus?(revocationNonce=value)&[contractAddress=[chainID]:[contractAddress]]&(state=issuerState)`
+                    id: `${issuer.string()}/credentialStatus?${searchParams}`
+                };
+            }
             default:
                 return credentialStatus;
         }

package/dist/node/cjs/credentials/index.js

@@ -19,6 +19,7 @@ __exportStar(require("./status/reverse-sparse-merkle-tree"), exports);
 __exportStar(require("./status/sparse-merkle-tree"), exports);
 __exportStar(require("./status/resolver"), exports);
 __exportStar(require("./status/agent-revocation"), exports);
+__exportStar(require("./status/credential-status-publisher"), exports);
 __exportStar(require("./status/utils"), exports);
 __exportStar(require("./credential-wallet"), exports);
 __exportStar(require("./rhs"), exports);

package/dist/node/cjs/credentials/rhs.js

@@ -1,16 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.pushHashesToRHS = void 0;
+exports.getNodesRepresentation = exports.pushHashesToRHS = void 0;
 const js_merkletree_1 = require("@iden3/js-merkletree");
 const js_merkletree_2 = require("@iden3/js-merkletree");
 const js_merkletree_3 = require("@iden3/js-merkletree");
 const reverse_sparse_merkle_tree_1 = require("./status/reverse-sparse-merkle-tree");
+const credential_status_publisher_1 = require("./status/credential-status-publisher");
+const verifiable_1 = require("../verifiable");
 /**
  * Pushes identity state information to a reverse hash service.
  *
  * A reverse hash service (RHS) is a centralized or decentralized service for storing publicly available data about identity.
  * Such data are identity state and state of revocation tree and roots tree root tree.
  *
+ * @deprecated Use `pushHashesToReverseHashService` instead.
  * @param {Hash} state - current state of identity
  * @param {TreesModel} trees - current trees of identity (claims, revocation, rootOfRoots )
  * @param {string} rhsUrl - URL of service
@@ -18,6 +21,24 @@ const reverse_sparse_merkle_tree_1 = require("./status/reverse-sparse-merkle-tre
  * @returns void
  */
 async function pushHashesToRHS(state, trees, rhsUrl, revokedNonces) {
+    const nodes = await getNodesRepresentation(revokedNonces, trees, state);
+    const publisher = new credential_status_publisher_1.Iden3SmtRhsCredentialStatusPublisher();
+    await publisher.publish({
+        nodes,
+        credentialStatusType: verifiable_1.CredentialStatusType.Iden3ReverseSparseMerkleTreeProof,
+        rhsUrl: rhsUrl
+    });
+}
+exports.pushHashesToRHS = pushHashesToRHS;
+/**
+ * Retrieves the representation of nodes for generating a proof.
+ *
+ * @param revokedNonces - An array of revoked nonces.
+ * @param trees - The TreesModel object containing the necessary trees.
+ * @param state - The hash of the state.
+ * @returns A Promise that resolves to an array of ProofNode objects.
+ */
+async function getNodesRepresentation(revokedNonces, trees, state) {
     const nb = new NodesBuilder();
     if (revokedNonces) {
         await addRevocationNode(nb, trees, revokedNonces);
@@ -31,17 +52,9 @@ async function pushHashesToRHS(state, trees, rhsUrl, revokedNonces) {
             await trees.rootsTree.root()
         ]));
     }
-    if (nb.nodes.length > 0) {
-        await saveNodes(nb.nodes, rhsUrl);
-    }
-}
-exports.pushHashesToRHS = pushHashesToRHS;
-async function saveNodes(nodes, nodeUrl) {
-    const nodesJSON = nodes.map((n) => n.toJSON());
-    const resp = await fetch(nodeUrl + '/node', { method: 'post', body: JSON.stringify(nodesJSON) });
-    const status = resp.status;
-    return status === 200;
+    return nb.nodes;
 }
+exports.getNodesRepresentation = getNodesRepresentation;
 async function addRoRNode(nb, trees) {
     const currentRootsTree = trees.rootsTree;
     const claimsTree = trees.claimsTree;
@@ -66,8 +79,8 @@ class NodesBuilder {
     }
     async addKey(tree, nodeKey) {
         const { value: nodeValue, siblings } = await tree.get(nodeKey);
-        const nodeKeyHash = (0, js_merkletree_1.newHashFromBigInt)(nodeKey);
-        const nodeValueHash = (0, js_merkletree_1.newHashFromBigInt)(nodeValue);
+        const nodeKeyHash = js_merkletree_1.Hash.fromBigInt(nodeKey);
+        const nodeValueHash = js_merkletree_1.Hash.fromBigInt(nodeValue);
         const node = new js_merkletree_1.NodeLeaf(nodeKeyHash, nodeValueHash);
         const newNodes = await buildNodesUp(siblings, node);
         for (const n of newNodes) {
@@ -97,7 +110,7 @@ async function buildNodesUp(siblings, node) {
         nodes[index] = new reverse_sparse_merkle_tree_1.ProofNode();
     }
     nodes[sl].hash = prevHash;
-    const hashOfOne = (0, js_merkletree_1.newHashFromBigInt)(BigInt(1));
+    const hashOfOne = js_merkletree_1.Hash.fromBigInt(BigInt(1));
     nodes[sl].children = [node.entry[0], node.entry[1], hashOfOne];
     const pathKey = node.entry[0];
     for (let i = sl - 1; i >= 0; i--) {
@@ -111,7 +124,7 @@ async function buildNodesUp(siblings, node) {
             nodes[i].children[0] = prevHash;
             nodes[i].children[1] = siblings[i];
         }
-        nodes[i].hash = await (0, js_merkletree_3.hashElems)([nodes[i].children[0].bigInt(), nodes[i].children[1].bigInt()]);
+        nodes[i].hash = (0, js_merkletree_3.hashElems)([nodes[i].children[0].bigInt(), nodes[i].children[1].bigInt()]);
         prevHash = nodes[i].hash;
     }
     return nodes;

package/dist/node/cjs/credentials/status/credential-status-publisher.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Iden3SmtRhsCredentialStatusPublisher = exports.Iden3OnchainSmtCredentialStatusPublisher = exports.CredentialStatusPublisherRegistry = void 0;
+const verifiable_1 = require("../../verifiable");
+/**
+ * Registry for managing credential status publishers.
+ */
+class CredentialStatusPublisherRegistry {
+    constructor() {
+        this._publishers = new Map();
+    }
+    /**
+     * Registers one or more credential status publishers for a given type.
+     * @param type - The credential status type.
+     * @param publisher - One or more credential status publishers.
+     */
+    register(type, ...publisher) {
+        const publishers = this._publishers.get(type) ?? [];
+        publishers.push(...publisher);
+        this._publishers.set(type, publishers);
+    }
+    /**
+     * Retrieves the credential status publishers for a given type.
+     * @param type - The credential status type.
+     * @returns An array of credential status publishers or undefined if none are registered for the given type.
+     */
+    get(type) {
+        return this._publishers.get(type);
+    }
+}
+exports.CredentialStatusPublisherRegistry = CredentialStatusPublisherRegistry;
+/**
+ * Implementation of the ICredentialStatusPublisher interface for publishing on-chain credential status.
+ */
+class Iden3OnchainSmtCredentialStatusPublisher {
+    constructor(_storage) {
+        this._storage = _storage;
+    }
+    /**
+     * Publishes the credential status to the blockchain.
+     * @param params - The parameters for publishing the credential status.
+     */
+    async publish(params) {
+        if (![verifiable_1.CredentialStatusType.Iden3OnchainSparseMerkleTreeProof2023].includes(params.credentialStatusType)) {
+            throw new Error(`On-chain publishing is not supported for credential status type ${params.credentialStatusType}`);
+        }
+        const nodesBigInts = params.nodes.map((n) => n.children.map((c) => c.bigInt()));
+        const txPromise = this._storage.saveNodes(nodesBigInts);
+        if (params.onChain?.txCallback) {
+            const cb = params.onChain?.txCallback;
+            txPromise.then((receipt) => cb(receipt));
+            return;
+        }
+        await txPromise;
+    }
+}
+exports.Iden3OnchainSmtCredentialStatusPublisher = Iden3OnchainSmtCredentialStatusPublisher;
+/**
+ * Implementation of the ICredentialStatusPublisher interface for publishing off-chain credential status.
+ */
+class Iden3SmtRhsCredentialStatusPublisher {
+    /**
+     * Publishes the credential status to a specified node URL.
+     * @param params - The parameters for publishing the credential status.
+     * @param params.nodes - The proof nodes to be published.
+     * @param params.rhsUrl - The URL of the node to publish the credential status to.
+     * @returns A promise that resolves when the credential status is successfully published.
+     * @throws An error if the publishing fails.
+     */
+    async publish(params) {
+        if (![verifiable_1.CredentialStatusType.Iden3ReverseSparseMerkleTreeProof].includes(params.credentialStatusType)) {
+            throw new Error(`On-chain publishing is not supported for credential status type ${params.credentialStatusType}`);
+        }
+        const nodesJSON = params.nodes.map((n) => n.toJSON());
+        const resp = await fetch(params.rhsUrl + '/node', {
+            method: 'post',
+            body: JSON.stringify(nodesJSON)
+        });
+        if (resp.status !== 200) {
+            throw new Error(`Failed to publish credential status. Status: ${resp.status}`);
+        }
+    }
+}
+exports.Iden3SmtRhsCredentialStatusPublisher = Iden3SmtRhsCredentialStatusPublisher;

package/dist/node/cjs/credentials/utils.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getUserDIDFromCredential = void 0;
+exports.getKMSIdByAuthCredential = exports.getUserDIDFromCredential = void 0;
 const js_iden3_core_1 = require("@iden3/js-iden3-core");
+const js_crypto_1 = require("@iden3/js-crypto");
+const kms_1 = require("../kms");
 /**
  * Retrieves the user DID from a given credential.
  * If the credential does not have a credentialSubject.id property, the issuer DID is returned.
@@ -21,3 +23,14 @@ const getUserDIDFromCredential = (issuerDID, credential) => {
     return js_iden3_core_1.DID.parse(credential.credentialSubject.id);
 };
 exports.getUserDIDFromCredential = getUserDIDFromCredential;
+const getKMSIdByAuthCredential = (credential) => {
+    if (!credential.type.includes('AuthBJJCredential')) {
+        throw new Error("can't sign with not AuthBJJCredential credential");
+    }
+    const x = credential.credentialSubject['x'];
+    const y = credential.credentialSubject['y'];
+    const pb = new js_crypto_1.PublicKey([BigInt(x), BigInt(y)]);
+    const kp = (0, kms_1.keyPath)(kms_1.KmsKeyType.BabyJubJub, pb.hex());
+    return { type: kms_1.KmsKeyType.BabyJubJub, id: kp };
+};
+exports.getKMSIdByAuthCredential = getKMSIdByAuthCredential;

package/dist/node/cjs/iden3comm/constants.js

@@ -18,6 +18,8 @@ exports.PROTOCOL_MESSAGE_TYPE = Object.freeze({
     CREDENTIAL_OFFER_MESSAGE_TYPE: IDEN3_PROTOCOL + 'credentials/1.0/offer',
     // CredentialIssuanceResponseMessageType is type for message with a credential issuance
     CREDENTIAL_ISSUANCE_RESPONSE_MESSAGE_TYPE: IDEN3_PROTOCOL + 'credentials/1.0/issuance-response',
+    // CredentialRefreshMessageType is type for message with a credential issuance
+    CREDENTIAL_REFRESH_MESSAGE_TYPE: IDEN3_PROTOCOL + 'credentials/1.0/refresh',
     // DeviceRegistrationRequestMessageType defines device registration request type of the communication protocol
     DEVICE_REGISTRATION_REQUEST_MESSAGE_TYPE: IDEN3_PROTOCOL + 'devices/1.0/registration',
     // MessageFetMessageFetchRequestMessageType defines message fetch request type of the communication protocol.

package/dist/node/cjs/iden3comm/handlers/fetch.js

@@ -42,7 +42,7 @@ const js_iden3_core_1 = require("@iden3/js-iden3-core");
  */
 class FetchHandler {
     /**
-     * Creates an instance of AuthHandler.
+     * Creates an instance of FetchHandler.
      * @param {IPackageManager} _packerMgr - package manager to unpack message envelope
      */
     constructor(_packerMgr) {
@@ -55,7 +55,7 @@ class FetchHandler {
      *     offer: Uint8Array; offer - raw offer message
      *     opts
      *   }) options how to fetch credential
-     * @returns `Promise<W3CCredential>`
+     * @returns `Promise<W3CCredential[]>`
      */
     async handleCredentialOffer(offer, opts) {
         if (!opts) {

package/dist/node/cjs/iden3comm/handlers/index.js

@@ -17,3 +17,4 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./auth"), exports);
 __exportStar(require("./fetch"), exports);
 __exportStar(require("./contract-request"), exports);
+__exportStar(require("./refresh"), exports);

package/dist/node/cjs/iden3comm/handlers/refresh.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RefreshHandler = void 0;
+const constants_1 = require("../constants");
+const constants_2 = require("../constants");
+const verifiable_1 = require("../../verifiable");
+const utils_1 = require("../../utils");
+const js_jwz_1 = require("@iden3/js-jwz");
+const js_iden3_core_1 = require("@iden3/js-iden3-core");
+const circuits_1 = require("../../circuits");
+const crypto_1 = require("crypto");
+/**
+ *
+ * Allows to refresh credential from refresh service and return refreshed credential
+ *
+ * @public
+
+ * @class RefreshHandler
+ * @implements implements RefreshHandler interface
+ */
+class RefreshHandler {
+    /**
+     * Creates an instance of RefreshHandler.
+     * @param {RefreshHandlerOptions} _options - refresh handler options
+     */
+    constructor(_options) {
+        this._options = _options;
+    }
+    async refreshCredential(credential, opts) {
+        if (!credential.refreshService) {
+            throw new Error('refreshService not specified for W3CCredential');
+        }
+        if (credential.refreshService.type !== verifiable_1.RefreshServiceType.Iden3RefreshService2023) {
+            throw new Error(`refresh service type ${credential.refreshService.type} is not supported`);
+        }
+        const otherIdentifier = credential.credentialSubject.id;
+        if (!otherIdentifier) {
+            throw new Error('self credentials do not support refresh');
+        }
+        const senderDID = js_iden3_core_1.DID.parse(otherIdentifier);
+        const zkpParams = {
+            senderDID,
+            provingMethodAlg: new js_jwz_1.ProvingMethodAlg(js_jwz_1.proving.provingMethodGroth16AuthV2Instance.methodAlg.alg, circuits_1.CircuitId.AuthV2)
+        };
+        const refreshMsg = {
+            id: (0, crypto_1.randomUUID)(),
+            typ: constants_1.MediaType.ZKPMessage,
+            type: constants_2.PROTOCOL_MESSAGE_TYPE.CREDENTIAL_REFRESH_MESSAGE_TYPE,
+            thid: (0, crypto_1.randomUUID)(),
+            body: {
+                id: otherIdentifier,
+                reason: opts?.reason ?? 'credential is expired'
+            },
+            from: otherIdentifier,
+            to: credential.issuer
+        };
+        const msgBytes = utils_1.byteEncoder.encode(JSON.stringify(refreshMsg));
+        const jwzToken = await this._options.packageManager.pack(constants_1.MediaType.ZKPMessage, msgBytes, zkpParams);
+        const resp = await fetch(credential.refreshService.id, {
+            method: 'post',
+            headers: {
+                'Content-Type': 'application/json'
+            },
+            body: jwzToken
+        });
+        if (resp.status !== 200) {
+            throw new Error(`could not refresh W3C credential, return status ${resp.status}`);
+        }
+        const respBody = await resp.json();
+        if (!respBody.body?.credential) {
+            throw new Error('no credential in CredentialIssuanceMessage response');
+        }
+        return verifiable_1.W3CCredential.fromJSON(respBody.body.credential);
+    }
+}
+exports.RefreshHandler = RefreshHandler;

package/dist/node/cjs/identity/identity-wallet.js

@@ -31,11 +31,11 @@ const js_merkletree_1 = require("@iden3/js-merkletree");
 const common_1 = require("./common");
 const uuid = __importStar(require("uuid"));
 const schema_processor_1 = require("../schema-processor");
-const mt_1 = require("../storage/entities/mt");
-const provider_helpers_1 = require("../kms/provider-helpers");
+const storage_1 = require("../storage");
 const verifiable_1 = require("../verifiable");
 const credentials_1 = require("../credentials");
 const utils_1 = require("../utils");
+const credential_status_publisher_1 = require("../credentials/status/credential-status-publisher");
 /**
  * @public
  * Wallet instance to manage the digital identity based on iden3 protocol
@@ -56,10 +56,19 @@ class IdentityWallet {
      * @param {ICredentialWallet} _credentialWallet - credential wallet instance to quickly access credential CRUD functionality
      * @public
      */
-    constructor(_kms, _storage, _credentialWallet) {
+    constructor(_kms, _storage, _credentialWallet, _opts) {
         this._kms = _kms;
         this._storage = _storage;
         this._credentialWallet = _credentialWallet;
+        this._opts = _opts;
+        if (!_opts?.credentialStatusPublisherRegistry) {
+            this._credentialStatusPublisherRegistry = new credential_status_publisher_1.CredentialStatusPublisherRegistry();
+            this._credentialStatusPublisherRegistry.register(verifiable_1.CredentialStatusType.Iden3ReverseSparseMerkleTreeProof, new credential_status_publisher_1.Iden3SmtRhsCredentialStatusPublisher());
+        }
+        else {
+            this._credentialStatusPublisherRegistry = this._opts
+                ?.credentialStatusPublisherRegistry;
+        }
     }
     /**
      * {@inheritDoc IIdentityWallet.createIdentity}
@@ -78,8 +87,8 @@ class IdentityWallet {
         const authClaim = js_iden3_core_1.Claim.newClaim(schemaHash, js_iden3_core_1.ClaimOptions.withIndexDataInts(pubKey.p[0], pubKey.p[1]), js_iden3_core_1.ClaimOptions.withRevocationNonce(BigInt(0)));
         const revNonce = opts.revocationOpts.nonce ?? 0;
         authClaim.setRevocationNonce(BigInt(revNonce));
-        await this._storage.mt.addToMerkleTree(tmpIdentifier, mt_1.MerkleTreeType.Claims, authClaim.hiHv().hi, authClaim.hiHv().hv);
-        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(tmpIdentifier, mt_1.MerkleTreeType.Claims);
+        await this._storage.mt.addToMerkleTree(tmpIdentifier, storage_1.MerkleTreeType.Claims, authClaim.hiHv().hi, authClaim.hiHv().hv);
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(tmpIdentifier, storage_1.MerkleTreeType.Claims);
         const currentState = (0, js_merkletree_1.hashElems)([
             (await claimsTree.root()).bigInt(),
             js_merkletree_1.ZERO_HASH.bigInt(),
@@ -133,9 +142,10 @@ class IdentityWallet {
             coreClaim: authClaim
         });
         credential.proof = [mtpProof];
-        if (opts.revocationOpts.type === verifiable_1.CredentialStatusType.Iden3ReverseSparseMerkleTreeProof) {
-            await this.publishStateToRHS(did, opts.revocationOpts.id);
-        }
+        await this.publishRevocationInfoByCredentialStatusType(did, opts.revocationOpts.type, {
+            rhsUrl: opts.revocationOpts.id,
+            onChain: opts.revocationOpts.onChain
+        });
         await this._storage.identity.saveIdentity({
             did: did.string(),
             state: currentState,
@@ -197,10 +207,11 @@ class IdentityWallet {
     }
     /** {@inheritDoc IIdentityWallet.getDIDTreeModel} */
     async getDIDTreeModel(did) {
-        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), mt_1.MerkleTreeType.Claims);
-        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), mt_1.MerkleTreeType.Revocations);
-        const rootsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), mt_1.MerkleTreeType.Roots);
-        const state = await (0, js_merkletree_1.hashElems)([
+        const didStr = did.string();
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(didStr, storage_1.MerkleTreeType.Claims);
+        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(didStr, storage_1.MerkleTreeType.Revocations);
+        const rootsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(didStr, storage_1.MerkleTreeType.Roots);
+        const state = (0, js_merkletree_1.hashElems)([
             (await claimsTree.root()).bigInt(),
             (await revocationTree.root()).bigInt(),
             (await rootsTree.root()).bigInt()
@@ -217,7 +228,7 @@ class IdentityWallet {
         const coreClaim = await this.getCoreClaimFromCredential(credential);
         // todo: Parser.parseClaim
         const treesModel = await this.getDIDTreeModel(did);
-        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), mt_1.MerkleTreeType.Claims);
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), storage_1.MerkleTreeType.Claims);
         const claimsRoot = await treesModel.claimsTree.root();
         const rootOfRoots = await treesModel.rootsTree.root();
         const revocationRoot = await treesModel.revocationTree.root();
@@ -237,7 +248,7 @@ class IdentityWallet {
         const coreClaim = await this.getCoreClaimFromCredential(credential);
         const revNonce = coreClaim.getRevocationNonce();
         const treesModel = await this.getDIDTreeModel(did);
-        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), mt_1.MerkleTreeType.Revocations);
+        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.string(), storage_1.MerkleTreeType.Revocations);
         const claimsRoot = await treesModel.claimsTree.root();
         const rootOfRoots = await treesModel.rootsTree.root();
         const revocationRoot = await treesModel.revocationTree.root();
@@ -254,14 +265,14 @@ class IdentityWallet {
     }
     /** {@inheritDoc IIdentityWallet.sign} */
     async sign(message, credential) {
-        const keyKMSId = this.getKMSIdByAuthCredential(credential);
+        const keyKMSId = (0, credentials_1.getKMSIdByAuthCredential)(credential);
         const payload = js_crypto_1.poseidon.hashBytes(message);
         const signature = await this._kms.sign(keyKMSId, js_iden3_core_1.BytesHelper.intToBytes(payload));
         return js_crypto_1.Signature.newFromCompressed(signature);
     }
     /** {@inheritDoc IIdentityWallet.signChallenge} */
     async signChallenge(challenge, credential) {
-        const keyKMSId = this.getKMSIdByAuthCredential(credential);
+        const keyKMSId = (0, credentials_1.getKMSIdByAuthCredential)(credential);
         const signature = await this._kms.sign(keyKMSId, js_iden3_core_1.BytesHelper.intToBytes(challenge));
         return js_crypto_1.Signature.newFromCompressed(signature);
     }
@@ -358,11 +369,11 @@ class IdentityWallet {
             if (!coreClaim) {
                 throw new Error('credential must have coreClaim representation in the signature proof');
             }
-            await this._storage.mt.addToMerkleTree(issuerDID.string(), mt_1.MerkleTreeType.Claims, coreClaim.hIndex(), coreClaim.hValue());
+            await this._storage.mt.addToMerkleTree(issuerDID.string(), storage_1.MerkleTreeType.Claims, coreClaim.hIndex(), coreClaim.hValue());
         }
         const newIssuerTreeState = await this.getDIDTreeModel(issuerDID);
         const claimTreeRoot = await newIssuerTreeState.claimsTree.root();
-        await this._storage.mt.addToMerkleTree(issuerDID.string(), mt_1.MerkleTreeType.Roots, claimTreeRoot.bigInt(), BigInt(0));
+        await this._storage.mt.addToMerkleTree(issuerDID.string(), storage_1.MerkleTreeType.Roots, claimTreeRoot.bigInt(), BigInt(0));
         const newIssuerTreeStateWithROR = await this.getDIDTreeModel(issuerDID);
         claimsRoot = await newIssuerTreeStateWithROR.claimsTree.root();
         rootOfRoots = await newIssuerTreeStateWithROR.rootsTree.root();
@@ -429,15 +440,35 @@ class IdentityWallet {
             rootsTree: treeState.rootsTree
         }, rhsURL, revokedNonces);
     }
-    getKMSIdByAuthCredential(credential) {
-        if (credential.type.indexOf('AuthBJJCredential') === -1) {
-            throw new Error("can't sign with not AuthBJJCredential credential");
+    /** {@inheritDoc IIdentityWallet.publishRevocationInfoByCredentialStatusType} */
+    async publishRevocationInfoByCredentialStatusType(issuerDID, credentialStatusType, opts) {
+        const rhsPublishers = this._credentialStatusPublisherRegistry.get(credentialStatusType);
+        if (!rhsPublishers) {
+            throw new Error(`there is no registered publisher to save  hash is not registered for ${credentialStatusType} is not registered`);
+        }
+        let nodes = [];
+        if (opts?.treeModel) {
+            nodes = await (0, credentials_1.getNodesRepresentation)(opts.revokedNonces, {
+                revocationTree: opts.treeModel.revocationTree,
+                claimsTree: opts.treeModel.claimsTree,
+                state: opts.treeModel.state,
+                rootsTree: opts.treeModel.rootsTree
+            }, opts.treeModel.state);
+        }
+        else {
+            const treeState = await this.getDIDTreeModel(issuerDID);
+            nodes = await (0, credentials_1.getNodesRepresentation)(opts?.revokedNonces, {
+                revocationTree: treeState.revocationTree,
+                claimsTree: treeState.claimsTree,
+                state: treeState.state,
+                rootsTree: treeState.rootsTree
+            }, treeState.state);
+        }
+        if (!nodes.length) {
+            return;
         }
-        const x = credential.credentialSubject['x'];
-        const y = credential.credentialSubject['y'];
-        const pb = new js_crypto_1.PublicKey([BigInt(x), BigInt(y)]);
-        const kp = (0, provider_helpers_1.keyPath)(kms_1.KmsKeyType.BabyJubJub, pb.hex());
-        return { type: kms_1.KmsKeyType.BabyJubJub, id: kp };
+        const rhsPublishersTask = rhsPublishers.map((publisher) => publisher.publish({ nodes, ...opts, credentialStatusType, issuerDID }));
+        await Promise.all(rhsPublishersTask);
     }
     async getCoreClaimFromCredential(credential) {
         const coreClaimFromSigProof = credential.getCoreClaimFromProof(verifiable_1.ProofType.BJJSignature);

package/dist/node/cjs/storage/blockchain/abi/CredentialStatusResolver.json

@@ -1 +1 @@
-[{ "inputs": [{ "internalType": "uint256", "name": "id", "type": "uint256" }, { "internalType": "uint64", "name": "nonce", "type": "uint64" }], "name": "getRevocationStatus", "outputs": [{ "components": [{ "components": [{ "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint256", "name": "claimsTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "revocationTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "rootOfRoots", "type": "uint256" }], "internalType": "structIOnchainCredentialStatusResolver.IdentityStateRoots", "name": "issuer", "type": "tuple" }, { "components": [{ "internalType": "uint256", "name": "root", "type": "uint256" }, { "internalType": "bool", "name": "existence", "type": "bool" }, { "internalType": "uint256[]", "name": "siblings", "type": "uint256[]" }, { "internalType": "uint256", "name": "index", "type": "uint256" }, { "internalType": "uint256", "name": "value", "type": "uint256" }, { "internalType": "bool", "name": "auxExistence", "type": "bool" }, { "internalType": "uint256", "name": "auxIndex", "type": "uint256" }, { "internalType": "uint256", "name": "auxValue", "type": "uint256" }], "internalType": "structIOnchainCredentialStatusResolver.Proof", "name": "mtp", "type": "tuple" }], "internalType": "structIOnchainCredentialStatusResolver.CredentialStatus", "name": "", "type": "tuple" }], "stateMutability": "view", "type": "function" }, { "inputs": [{ "internalType": "uint256", "name": "id", "type": "uint256" }, { "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint64", "name": "nonce", "type": "uint64" }], "name": "getRevocationStatusByIdAndState", "outputs": [{ "components": [{ "components": [{ "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint256", "name": "claimsTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "revocationTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "rootOfRoots", "type": "uint256" }], "internalType": "structIOnchainCredentialStatusResolver.IdentityStateRoots", "name": "issuer", "type": "tuple" }, { "components": [{ "internalType": "uint256", "name": "root", "type": "uint256" }, { "internalType": "bool", "name": "existence", "type": "bool" }, { "internalType": "uint256[]", "name": "siblings", "type": "uint256[]" }, { "internalType": "uint256", "name": "index", "type": "uint256" }, { "internalType": "uint256", "name": "value", "type": "uint256" }, { "internalType": "bool", "name": "auxExistence", "type": "bool" }, { "internalType": "uint256", "name": "auxIndex", "type": "uint256" }, { "internalType": "uint256", "name": "auxValue", "type": "uint256" }], "internalType": "structIOnchainCredentialStatusResolver.Proof", "name": "mtp", "type": "tuple" }], "internalType": "structIOnchainCredentialStatusResolver.CredentialStatus", "name": "", "type": "tuple" }], "stateMutability": "view", "type": "function" }]
+[{ "inputs": [], "name": "MAX_SMT_DEPTH", "outputs": [{ "internalType": "uint256", "name": "", "type": "uint256" }], "stateMutability": "view", "type": "function" }, { "inputs": [{ "internalType": "uint256", "name": "key", "type": "uint256" }], "name": "getNode", "outputs": [{ "internalType": "uint256[]", "name": "", "type": "uint256[]" }], "stateMutability": "view", "type": "function" }, { "inputs": [{ "internalType": "uint256", "name": "id", "type": "uint256" }, { "internalType": "uint64", "name": "nonce", "type": "uint64" }], "name": "getRevocationStatus", "outputs": [{ "components": [{ "components": [{ "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint256", "name": "claimsTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "revocationTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "rootOfRoots", "type": "uint256" }], "internalType": "struct IOnchainCredentialStatusResolver.IdentityStateRoots", "name": "issuer", "type": "tuple" }, { "components": [{ "internalType": "uint256", "name": "root", "type": "uint256" }, { "internalType": "bool", "name": "existence", "type": "bool" }, { "internalType": "uint256[]", "name": "siblings", "type": "uint256[]" }, { "internalType": "uint256", "name": "index", "type": "uint256" }, { "internalType": "uint256", "name": "value", "type": "uint256" }, { "internalType": "bool", "name": "auxExistence", "type": "bool" }, { "internalType": "uint256", "name": "auxIndex", "type": "uint256" }, { "internalType": "uint256", "name": "auxValue", "type": "uint256" }], "internalType": "struct IOnchainCredentialStatusResolver.Proof", "name": "mtp", "type": "tuple" }], "internalType": "struct IOnchainCredentialStatusResolver.CredentialStatus", "name": "", "type": "tuple" }], "stateMutability": "view", "type": "function" }, { "inputs": [{ "internalType": "uint256", "name": "id", "type": "uint256" }, { "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint64", "name": "nonce", "type": "uint64" }], "name": "getRevocationStatusByIdAndState", "outputs": [{ "components": [{ "components": [{ "internalType": "uint256", "name": "state", "type": "uint256" }, { "internalType": "uint256", "name": "claimsTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "revocationTreeRoot", "type": "uint256" }, { "internalType": "uint256", "name": "rootOfRoots", "type": "uint256" }], "internalType": "struct IOnchainCredentialStatusResolver.IdentityStateRoots", "name": "issuer", "type": "tuple" }, { "components": [{ "internalType": "uint256", "name": "root", "type": "uint256" }, { "internalType": "bool", "name": "existence", "type": "bool" }, { "internalType": "uint256[]", "name": "siblings", "type": "uint256[]" }, { "internalType": "uint256", "name": "index", "type": "uint256" }, { "internalType": "uint256", "name": "value", "type": "uint256" }, { "internalType": "bool", "name": "auxExistence", "type": "bool" }, { "internalType": "uint256", "name": "auxIndex", "type": "uint256" }, { "internalType": "uint256", "name": "auxValue", "type": "uint256" }], "internalType": "struct IOnchainCredentialStatusResolver.Proof", "name": "mtp", "type": "tuple" }], "internalType": "struct IOnchainCredentialStatusResolver.CredentialStatus", "name": "", "type": "tuple" }], "stateMutability": "view", "type": "function" }, { "inputs": [], "name": "owner", "outputs": [{ "internalType": "address", "name": "", "type": "address" }], "stateMutability": "view", "type": "function" }, { "inputs": [{ "internalType": "uint256[][]", "name": "nodes", "type": "uint256[][]" }], "name": "saveNodes", "outputs": [], "stateMutability": "nonpayable", "type": "function" }]

package/dist/node/cjs/storage/blockchain/index.js

@@ -16,3 +16,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./state"), exports);
 __exportStar(require("./onchain-zkp-verifier"), exports);
+__exportStar(require("./onchain-revocation"), exports);