@ledgerhq/zcash-utils 2.0.0 → 2.1.1

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @ledgerhq/zcash-utils
 
+## 2.1.1
+
+### Patch Changes
+
+- 152aa4d: Accept V6 transactions when recomputing the txid on broadcast. `broadcastTransaction` derived the txid behind a guard that admitted only V5, which dates from when V5 was the only post-ZIP-225 format and survived the V6 builder, the Ironwood finalize path, and the Ironwood PCZT parse without being revisited. Only a transparent t→t send stays on V5 — any shielded send carrying an Ironwood bundle finalizes to V6 — so every shielded send failed with `expected V5 transaction, got V6` _after_ the device had already signed, and before the transaction was ever submitted. Nothing was lost: the txid is computed before the transaction is handed to the server, so the failing path returned without broadcasting.
+
+  The guard now admits V5 and V6 and still rejects pre-ZIP-225 formats, whose wire layout differs. The txid derives from the stream for both versions: `Transaction::read` dispatches on the version header and forwards its consensus-branch argument only to the V4 reader, so a V6 txid is computed exactly as a V5 one is and still matches the operation hash the sync path records for the same transaction.
+
+  Also derive Ironwood completed-shard roots locally instead of calling `GetSubtreeRoots`. The deployed Zaino does not serve that RPC for the Ironwood pool — it rejects `ShieldedProtocol::Ironwood` as an invalid shielded protocol value — so Ironwood witness computation now streams the pool's cmx leaves over `GetBlockRange` and reduces each completed shard to its root with the same level-encoded Sinsemilla hash the server would have applied. The pure witness assembly is unchanged and still shared with Orchard.
+
+  The pool's first block is located by binary-searching the commitment-tree frontier on leaf count rather than on whether the server's tree-state field is a non-empty string, so the search does not depend on how a server represents an empty frontier. Two bounds are checked before any block is fetched: the pool must be small enough for local reduction to stay interactive, and the scan range must be plausible, so a misresolved activation height fails fast instead of streaming a large share of the chain through a request that carries no timeout. Collected leaf counts are reconciled against the frontier, so a disagreement surfaces as an error rather than a silently wrong witness, and a note position past the anchor's leaf count is rejected up front. Callers should move back to `GetSubtreeRoots` once the server serves it for Ironwood.
+
+## 2.1.0
+
+### Minor Changes
+
+- abe272e: Surface the Ironwood bundle from `parsePczt`.
+
 ## 2.0.0
 
 ### Major Changes

package/index.d.ts

@@ -560,6 +560,61 @@ export interface PcztOrchardBundle {
   /** Orchard commitment-tree anchor, 32 bytes. */
   anchor: Uint8Array
 }
+/**
+ * A single Ironwood action (NU6.3, V6 transactions only).
+ *
+ * The wire format mirrors an Orchard action with the PCZT v2
+ * `note_plaintext_version` byte appended; the fields are spelled out here
+ * rather than nested so the object maps 1:1 onto the signer's
+ * `PcztIronwoodAction`.
+ */
+export interface PcztIronwoodAction {
+  /** Value commitment, 32 bytes. */
+  cvNet: Uint8Array
+  /** Spend nullifier, 32 bytes. */
+  nullifier: Uint8Array
+  /** Randomized verification key, 32 bytes. */
+  rk: Uint8Array
+  /** Raw Orchard address of the spent note, 43 bytes. */
+  spendRecipient: Uint8Array
+  /** Spent-note value in zatoshis (decimal string to avoid f64 precision loss). */
+  spendValue: string
+  /** Spend rho, 32 bytes. */
+  spendRho: Uint8Array
+  /** Spend rseed, 32 bytes. */
+  spendRseed: Uint8Array
+  /** Spend-authorization randomizer, 32 bytes. */
+  alpha: Uint8Array
+  /** ZIP-32 derivation path of the signing key. */
+  signingPath: string
+  /** ZIP-32 seed fingerprint, 32 bytes. */
+  seedFingerprint: Uint8Array
+  /** Note commitment x-coordinate, 32 bytes. */
+  cmx: Uint8Array
+  /** Ephemeral key, 32 bytes. */
+  ephemeralKey: Uint8Array
+  encCiphertext: Uint8Array
+  outCiphertext: Uint8Array
+  /** Raw Orchard address of the output note, 43 bytes. */
+  recipient: Uint8Array
+  /** Output-note value in zatoshis (decimal string to avoid f64 precision loss). */
+  value: string
+  /** Output rseed, 32 bytes. */
+  rseed: Uint8Array
+  /** Value commitment randomness, 32 bytes. */
+  rcv: Uint8Array
+  /** Note-plaintext lead byte (`0x03` for Ironwood), required for PCZT v2. */
+  notePlaintextVersion: number
+}
+/** The Ironwood action bundle plus its trailer (V6 transactions only). */
+export interface PcztIronwoodBundle {
+  actions: Array<PcztIronwoodAction>
+  flags: number
+  /** Net value balance in zatoshis (signed decimal string, lossless for i128). */
+  valueBalance: string
+  /** Ironwood commitment-tree anchor, 32 bytes. */
+  anchor: Uint8Array
+}
 /** A fully structured PCZT ready for `DmkSignerZcash.signPcztTransaction`. */
 export interface PcztTransaction {
   global: PcztGlobal
@@ -567,6 +622,12 @@ export interface PcztTransaction {
   transparentOutputs: Array<PcztTransparentOutput>
   /** `null` when the transaction has no Orchard actions. */
   orchardBundle?: PcztOrchardBundle
+  /**
+   * `null` when the transaction has no Ironwood actions. Always `null` below
+   * transaction version 6 — the Ironwood pool is V6-only, and the signer
+   * rejects an Ironwood bundle on a V5 transaction.
+   */
+  ironwoodBundle?: PcztIronwoodBundle
 }
 /**
  * Parse canonical PCZT bytes (hex, as returned by `buildTransaction`) into the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ledgerhq/zcash-utils",
-  "version": "2.0.0",
+  "version": "2.1.1",
   "description": "Native Zcash key derivation and shielded sync — Node.js (NAPI)",
   "main": "index.js",
   "types": "index.d.ts",