@provablehq/sdk 0.10.2 → 0.10.3

package/dist/mainnet/browser.d.cts

@@ -0,0 +1,72 @@
+import "./polyfill/shared.js";
+import { Account } from "./account.js";
+import { AleoNetworkClient, ProgramImports } from "./network-client.js";
+import { BlockJSON, Header, Metadata } from "./models/blockJSON.js";
+import { CachedKeyPair, FunctionKeyPair } from "./models/keyPair.js";
+import { ConfirmedTransactionJSON } from "./models/confirmed_transaction.js";
+import { CryptoBoxPubKey } from "./models/cryptoBoxPubkey.js";
+import { DeploymentJSON, VerifyingKeys } from "./models/deployment/deploymentJSON.js";
+import { DeploymentObject } from "./models/deployment/deploymentObject.js";
+import { EncryptedProvingRequest } from "./models/encryptedProvingRequest.js";
+import { EncryptedRecord } from "./models/record-provider/encryptedRecord.js";
+import { ExecutionJSON, FeeExecutionJSON } from "./models/execution/executionJSON.js";
+import { ExecutionObject, FeeExecutionObject } from "./models/execution/executionObject.js";
+import { FinalizeJSON } from "./models/finalizeJSON.js";
+import { FunctionInput } from "./models/functionInput.js";
+import { FunctionObject } from "./models/functionObject.js";
+import { ImportedVerifyingKeys, ImportedPrograms } from "./models/imports.js";
+import { InputJSON } from "./models/input/inputJSON.js";
+import { InputObject } from "./models/input/inputObject.js";
+import { OutputJSON } from "./models/output/outputJSON.js";
+import { OutputObject } from "./models/output/outputObject.js";
+import { OwnedFilter } from "./models/record-scanner/ownedFilter.js";
+import { OwnedRecord } from "./models/record-provider/ownedRecord.js";
+import { OwnerJSON } from "./models/owner/ownerJSON.js";
+import { PlaintextArray } from "./models/plaintext/array.js";
+import { PlaintextLiteral } from "./models/plaintext/literal.js";
+import { PlaintextObject } from "./models/plaintext/plaintext.js";
+import { PlaintextStruct } from "./models/plaintext/struct.js";
+import { ProvingRequestJSON } from "./models/provingRequest.js";
+import { ProvingResponse, BroadcastResponse, BroadcastResult, ProvingResult, ProvingFailure, ProvingSuccess, ProveApiErrorBody, ProvingRequestError, isProvingResponse, isProveApiErrorBody } from "./models/provingResponse.js";
+import { RatificationJSON } from "./models/ratification.js";
+import { EncryptedRegistrationRequest } from "./models/record-scanner/encryptedRegistrationRequest.js";
+import { EncryptedRecordsResult, EncryptedRecordsSuccess } from "./models/record-scanner/encryptedRecordsResult.js";
+import { DecryptionNotEnabledError, RecordNotFoundError, RecordScannerErrorBody, RecordScannerFailure, RecordScannerRequestError, UUIDError, ViewKeyNotStoredError } from "./models/record-scanner/error.js";
+import { OwnedRecordsResult, OwnedRecordsSuccess } from "./models/record-scanner/ownedRecordsResult.js";
+import { OwnedRecordsResponseFilter } from "./models/record-scanner/ownedRecordsResponseFilter.js";
+import { RegisterResult, RegisterSuccess } from "./models/record-scanner/registrationResult.js";
+import { RegistrationRequest } from "./models/record-scanner/registrationRequest.js";
+import { RegistrationResponse } from "./models/record-scanner/registrationResponse.js";
+import { RevokeResult, RevokeSuccess, RevokeResponse } from "./models/record-scanner/revokeResult.js";
+import { RecordsFilter } from "./models/record-scanner/recordsFilter.js";
+import { RecordsResponseFilter } from "./models/record-scanner/recordsResponseFilter.js";
+import { SerialNumbersResult, SerialNumbersSuccess } from "./models/record-scanner/serialNumbersResult.js";
+import { StatusResponse } from "./models/record-scanner/statusResponse.js";
+import { StatusResult, StatusSuccess } from "./models/record-scanner/statusResult.js";
+import { TagsResult, TagsSuccess } from "./models/record-scanner/tagsResult.js";
+import { RecordSearchParams } from "./models/record-provider/recordSearchParams.js";
+import { SolutionsJSON, SolutionJSON, PartialSolutionJSON } from "./models/solution.js";
+import { TransactionJSON } from "./models/transaction/transactionJSON.js";
+import { TransactionObject } from "./models/transaction/transactionObject.js";
+import { TransitionJSON } from "./models/transition/transitionJSON.js";
+import { TransitionObject } from "./models/transition/transitionObject.js";
+import { FunctionKeyProvider, KeySearchParams } from "./keys/provider/interface.js";
+import { AleoKeyProvider, AleoKeyProviderParams, AleoKeyProviderInitParams } from "./keys/provider/memory.js";
+import { KeyFingerprint, KeyMetadata, KeyVerificationError, KeyVerifier, sha256Hex } from "./keys/verifier/interface.js";
+import { MemKeyVerifier } from "./keys/verifier/memory.js";
+import { BaseFunctionKeyLocator, InvalidLocatorError, InvalidLocatorReason, KeyLocator, KeyStore, KeyType, ProvingKeyLocator, TranslationKeyLocator, VerifyingKeyLocator, provingKeyLocator, verifyingKeyLocator, translationKeyLocator } from "./keys/keystore/interface.js";
+import { OfflineKeyProvider, OfflineSearchParams } from "./keys/provider/offline.js";
+import { BlockHeightSearch, NetworkRecordProvider, RecordProvider } from "./record-provider.js";
+import { RecordScanner, RecordScannerJWTData, RecordScannerOptions } from "./record-scanner.js";
+import { SealanceMerkleTree } from "./integrations/sealance/merkle-tree.js";
+declare function initializeWasm(): Promise<void>;
+export { ProgramManager, ProvingRequestOptions, ExecuteOptions, FeeAuthorizationOptions, AuthorizationOptions, VerificationOptions, BatchVerificationOptions, inputsToFields, verifyProof, verifyBatchProof } from "./program-manager.js";
+export { logAndThrow, TransportFunction } from "./utils.js";
+export { Address, Authorization, Boolean, BHP256, BHP512, BHP768, BHP1024, Ciphertext, ComputeKey, DynamicRecord, Execution as FunctionExecution, ExecutionRequest, ExecutionResponse, EncryptionToolkit, Field, GraphKey, Group, I8, I16, I32, I64, I128, OfflineQuery, Pedersen64, Pedersen128, Plaintext, Poseidon2, Poseidon4, Poseidon8, PrivateKey, PrivateKeyCiphertext, Program, ProgramManager as ProgramManagerBase, Proof, ProvingKey, ProvingRequest, RecordCiphertext, RecordPlaintext, Signature, Scalar, stringToField, Transaction, Transition, U8, U16, U32, U64, U128, Value, VerifyingKey, ViewKey, initThreadPool, getOrInitConsensusVersionTestHeights, snarkVerify, snarkVerifyBatch, verifyFunctionExecution, } from "./wasm.js";
+export { initializeWasm };
+export { Key, CREDITS_PROGRAM_KEYS, KEY_STORE, PRIVATE_TRANSFER, PRIVATE_TO_PUBLIC_TRANSFER, PRIVATE_TRANSFER_TYPES, PUBLIC_TRANSFER, PUBLIC_TRANSFER_AS_SIGNER, PUBLIC_TO_PRIVATE_TRANSFER, RECORD_DOMAIN, VALID_TRANSFER_TYPES, } from "./constants.js";
+export { Account, AleoKeyProvider, AleoKeyProviderParams, AleoKeyProviderInitParams, AleoNetworkClient, BlockJSON, BlockHeightSearch, BroadcastResponse, BroadcastResult, CachedKeyPair, ConfirmedTransactionJSON, CryptoBoxPubKey, DecryptionNotEnabledError, DeploymentJSON, DeploymentObject, EncryptedProvingRequest, EncryptedRecord, EncryptedRegistrationRequest, EncryptedRecordsResult, EncryptedRecordsSuccess, ExecutionJSON, ExecutionObject, FeeExecutionJSON, FeeExecutionObject, FinalizeJSON, FunctionInput, FunctionObject, FunctionKeyPair, FunctionKeyProvider, Header, isProvingResponse, isProveApiErrorBody, ImportedPrograms, ImportedVerifyingKeys, InputJSON, InputObject, InvalidLocatorError, InvalidLocatorReason, BaseFunctionKeyLocator, KeyFingerprint, KeyLocator, KeyMetadata, KeySearchParams, KeyStore, KeyType, KeyVerificationError, ProvingKeyLocator, provingKeyLocator, TranslationKeyLocator, translationKeyLocator, VerifyingKeyLocator, verifyingKeyLocator, KeyVerifier, MemKeyVerifier, Metadata, NetworkRecordProvider, OfflineKeyProvider, OfflineSearchParams, OutputJSON, OutputObject, OwnedFilter, OwnedRecord, OwnedRecordsResult, OwnedRecordsResponseFilter, OwnedRecordsSuccess, OwnerJSON, PartialSolutionJSON, PlaintextArray, PlaintextLiteral, PlaintextObject, PlaintextStruct, ProgramImports, ProveApiErrorBody, ProvingFailure, ProvingRequestError, ProvingRequestJSON, ProvingResult, ProvingSuccess, ProvingResponse, RatificationJSON, RecordsFilter, RecordsResponseFilter, RecordProvider, RecordScanner, RecordScannerErrorBody, RecordScannerFailure, RecordScannerJWTData, RecordScannerOptions, RecordNotFoundError, RecordScannerRequestError, ViewKeyNotStoredError, RecordSearchParams, RegisterResult, RegisterSuccess, RegistrationRequest, RegistrationResponse, RevokeResult, RevokeSuccess, RevokeResponse, SealanceMerkleTree, SerialNumbersResult, SerialNumbersSuccess, sha256Hex, SolutionJSON, SolutionsJSON, StatusResponse, StatusResult, StatusSuccess, TagsResult, TagsSuccess, TransactionJSON, TransactionObject, TransitionJSON, TransitionObject, UUIDError, VerifyingKeys, };
+export { KeyVerificationError as ChecksumMismatchError, KeyVerifier as FunctionKeyVerifier, } from "./keys/verifier/interface.js";
+export { encryptAuthorization, encryptProvingRequest, encryptViewKey, encryptRegistrationRequest, zeroizeBytes } from "./security.js";
+export { toField, toGroup, toViewKey, toSignature, toAddress, isViewKeyStrategy, isInputIdStrategy, isRecordViewKeyStrategy, buildExecutionRequestFromExternallySignedData, computeExternalSigningInputs, } from "./external-signing.js";
+export type { FieldLike, GroupLike, ViewKeyLike, SignatureLike, AddressLike, InputID, ExecutionRequestParams, RecordViewKeyStrategy, ViewKeyStrategy, InputIdStrategy, InputStrategy, ExternalSigningInput, ExternalSigningOptions, RequestSignInput, OutputFormat, FieldOutput, } from "./external-signing.js";

package/dist/mainnet/browser.d.ts

@@ -12,7 +12,7 @@ import { EncryptedRecord } from "./models/record-provider/encryptedRecord.js";
 import { ExecutionJSON, FeeExecutionJSON } from "./models/execution/executionJSON.js";
 import { ExecutionObject, FeeExecutionObject } from "./models/execution/executionObject.js";
 import { FinalizeJSON } from "./models/finalizeJSON.js";
-import { FunctionInput } from "./models/functionInput";
+import { FunctionInput } from "./models/functionInput.js";
 import { FunctionObject } from "./models/functionObject.js";
 import { ImportedVerifyingKeys, ImportedPrograms } from "./models/imports.js";
 import { InputJSON } from "./models/input/inputJSON.js";
@@ -61,7 +61,7 @@ import { RecordScanner, RecordScannerJWTData, RecordScannerOptions } from "./rec
 import { SealanceMerkleTree } from "./integrations/sealance/merkle-tree.js";
 declare function initializeWasm(): Promise<void>;
 export { ProgramManager, ProvingRequestOptions, ExecuteOptions, FeeAuthorizationOptions, AuthorizationOptions, VerificationOptions, BatchVerificationOptions, inputsToFields, verifyProof, verifyBatchProof } from "./program-manager.js";
-export { logAndThrow } from "./utils.js";
+export { logAndThrow, TransportFunction } from "./utils.js";
 export { Address, Authorization, Boolean, BHP256, BHP512, BHP768, BHP1024, Ciphertext, ComputeKey, DynamicRecord, Execution as FunctionExecution, ExecutionRequest, ExecutionResponse, EncryptionToolkit, Field, GraphKey, Group, I8, I16, I32, I64, I128, OfflineQuery, Pedersen64, Pedersen128, Plaintext, Poseidon2, Poseidon4, Poseidon8, PrivateKey, PrivateKeyCiphertext, Program, ProgramManager as ProgramManagerBase, Proof, ProvingKey, ProvingRequest, RecordCiphertext, RecordPlaintext, Signature, Scalar, stringToField, Transaction, Transition, U8, U16, U32, U64, U128, Value, VerifyingKey, ViewKey, initThreadPool, getOrInitConsensusVersionTestHeights, snarkVerify, snarkVerifyBatch, verifyFunctionExecution, } from "./wasm.js";
 export { initializeWasm };
 export { Key, CREDITS_PROGRAM_KEYS, KEY_STORE, PRIVATE_TRANSFER, PRIVATE_TO_PUBLIC_TRANSFER, PRIVATE_TRANSFER_TYPES, PUBLIC_TRANSFER, PUBLIC_TRANSFER_AS_SIGNER, PUBLIC_TO_PRIVATE_TRANSFER, RECORD_DOMAIN, VALID_TRANSFER_TYPES, } from "./constants.js";

package/dist/mainnet/browser.js

@@ -1,12 +1,11 @@
 import 'core-js/proposals/json-parse-with-source.js';
 import { ViewKey, ComputeKey, Address, PrivateKeyCiphertext, PrivateKey, RecordCiphertext, EncryptionToolkit, Group, Metadata, VerifyingKey, Program, Plaintext, Transaction, ProvingRequest, ProvingKey, RecordPlaintext, Field, Poseidon4, ProgramManager as ProgramManager$1, ExecutionRequest, stringToField, verifyFunctionExecution, Value, Proof, Signature } from '@provablehq/wasm/mainnet.js';
 export { Address, Authorization, BHP1024, BHP256, BHP512, BHP768, Boolean, Ciphertext, ComputeKey, DynamicRecord, EncryptionToolkit, ExecutionRequest, ExecutionResponse, Field, Execution as FunctionExecution, GraphKey, Group, I128, I16, I32, I64, I8, OfflineQuery, Pedersen128, Pedersen64, Plaintext, Poseidon2, Poseidon4, Poseidon8, PrivateKey, PrivateKeyCiphertext, Program, ProgramManager as ProgramManagerBase, Proof, ProvingKey, ProvingRequest, RecordCiphertext, RecordPlaintext, Scalar, Signature, Transaction, Transition, U128, U16, U32, U64, U8, Value, VerifyingKey, ViewKey, getOrInitConsensusVersionTestHeights, initThreadPool, snarkVerify, snarkVerifyBatch, stringToField, verifyFunctionExecution } from '@provablehq/wasm/mainnet.js';
-import sodium from 'libsodium-wrappers';
-import { bech32m } from '@scure/base';
+import { cryptoBoxSeal } from '@serenity-kit/noble-sodium';
+import { base64, bech32m } from '@scure/base';
 
-await sodium.ready;
 /**
- * Encrypt an authorization with a libsodium cryptobox public key.
+ * Encrypt an authorization with a cryptobox X25519 public key (libsodium-compatible wire format).
  *
  * @param {string} publicKey The cryptobox X25519 public key to encrypt with (encoded in RFC 4648 standard Base64).
  * @param {Authorization} authorization the authorization to encrypt.
@@ -14,14 +13,13 @@ await sodium.ready;
  * @returns {string} the encrypted authorization in RFC 4648 standard Base64.
  */
 function encryptAuthorization(publicKey, authorization) {
-    // Ready the cryptobox lib.
     return encryptMessage(publicKey, authorization.toBytesLe());
 }
 /**
- * Encrypt a ProvingRequest with a libsodium cryptobox public key.
+ * Encrypt a ProvingRequest with a cryptobox X25519 public key (libsodium-compatible wire format).
  *
  * @param {string} publicKey The cryptobox X25519 public key to encrypt with (encoded in RFC 4648 standard Base64).
- * @param {Authorization} provingRequest the ProvingRequest to encrypt.
+ * @param {ProvingRequest} provingRequest the ProvingRequest to encrypt.
  *
  * @returns {string} the encrypted ProvingRequest in RFC 4648 standard Base64.
  */
@@ -29,7 +27,7 @@ function encryptProvingRequest(publicKey, provingRequest) {
     return encryptMessage(publicKey, provingRequest.toBytesLe());
 }
 /**
- * Encrypt a view key with a libsodium cryptobox public key.
+ * Encrypt a view key with a cryptobox X25519 public key (libsodium-compatible wire format).
  *
  * @param {string} publicKey The cryptobox X25519 public key to encrypt with (encoded in RFC 4648 standard Base64).
  * @param {ViewKey} viewKey the view key to encrypt.
@@ -95,7 +93,17 @@ function zeroizeBytes(bytes) {
     bytes.fill(0);
 }
 /**
- * Encrypt arbitrary bytes with a libsodium cryptobox public key.
+ * Encrypt arbitrary bytes with a cryptobox public key using the libsodium
+ * `crypto_box_seal` wire format.
+ *
+ * The implementation is delegated to `@serenity-kit/noble-sodium`, which
+ * composes the primitive steps of `crypto_box_seal` — ephemeral X25519
+ * keypair, blake2b-24 nonce derivation over `epk || rpk`, HSalsa20 key
+ * derivation from the ECDH shared secret, and XSalsa20-Poly1305 AEAD — on
+ * top of the audited `@noble/*` primitives. Output is byte-identical to
+ * libsodium's `crypto_box_seal` for any given ephemeral key, so ciphertexts
+ * are decryptable by any libsodium-compatible backend (e.g. `sodiumoxide`,
+ * `libsodium-sys`) with no changes.
  *
  * @param {string} publicKey The cryptobox X25519 public key to encrypt with (encoded in RFC 4648 standard Base64).
  * @param {Uint8Array} message the bytes to encrypt.
@@ -103,8 +111,9 @@ function zeroizeBytes(bytes) {
  * @returns {string} the encrypted bytes in RFC 4648 standard Base64.
  */
 function encryptMessage(publicKey, message) {
-    const publicKeyBytes = sodium.from_base64(publicKey, sodium.base64_variants.ORIGINAL);
-    return sodium.to_base64(sodium.crypto_box_seal(message, publicKeyBytes), sodium.base64_variants.ORIGINAL);
+    const publicKeyBytes = base64.decode(publicKey);
+    const ciphertext = cryptoBoxSeal({ message, publicKey: publicKeyBytes });
+    return base64.encode(ciphertext);
 }
 
 /**
@@ -628,6 +637,8 @@ function logAndThrow(message) {
     console.error(message);
     throw new Error(message);
 }
+/** Default transport — wraps global fetch to avoid illegal-invocation errors in browsers. */
+const defaultTransport = (...args) => fetch(...args);
 function parseJSON(json) {
     function revive(key, value, context) {
         if (Number.isInteger(value)) {
@@ -639,16 +650,16 @@ function parseJSON(json) {
     }
     return JSON.parse(json, revive);
 }
-async function get(url, options) {
-    const response = await fetch(url, options);
+async function get(url, options, transport = defaultTransport) {
+    const response = await transport(url, options);
     if (!response.ok) {
         throw new Error(response.status + " could not get URL " + url);
     }
     return response;
 }
-async function post(url, options) {
+async function post(url, options, transport = defaultTransport) {
     options.method = "POST";
-    const response = await fetch(url, options);
+    const response = await transport(url, options);
     if (!response.ok) {
         const error = await response.text();
         let message = `${response.status} error received from ${url}`;
@@ -829,6 +840,7 @@ class AleoNetworkClient {
     ctx;
     verboseErrors;
     network;
+    transport;
     apiKey;
     consumerId;
     jwtData;
@@ -842,6 +854,7 @@ class AleoNetworkClient {
         this.network = "mainnet";
         this.ctx = {};
         this.verboseErrors = true;
+        this.transport = options?.transport ?? defaultTransport;
         if (options) {
             if (options.headers) {
                 this.headers = options.headers;
@@ -849,7 +862,7 @@ class AleoNetworkClient {
             else {
                 this.headers = {
                     // This is replaced by the actual version by a Rollup plugin
-                    "X-Aleo-SDK-Version": "0.10.2",
+                    "X-Aleo-SDK-Version": "0.10.3",
                     "X-Aleo-environment": environment(),
                 };
             }
@@ -865,7 +878,7 @@ class AleoNetworkClient {
         else {
             this.headers = {
                 // This is replaced by the actual version by a Rollup plugin
-                "X-Aleo-SDK-Version": "0.10.2",
+                "X-Aleo-SDK-Version": "0.10.3",
                 "X-Aleo-environment": environment(),
             };
         }
@@ -1012,7 +1025,7 @@ class AleoNetworkClient {
                         ...this.headers,
                         ...ctx,
                     },
-                });
+                }, this.transport);
                 return await response.text();
             });
         }
@@ -1028,7 +1041,7 @@ class AleoNetworkClient {
      * @returns The Response object from the POST request.
      */
     async _sendPost(url, options) {
-        return post(url, options);
+        return post(url, options, this.transport);
     }
     /**
      * Attempt to find records in the Aleo blockchain.
@@ -2229,7 +2242,7 @@ class AleoNetworkClient {
                 headers: Object.assign({}, { ...this.headers, "X-ALEO-METHOD": "submitSolution" }, {
                     "Content-Type": "application/json",
                 }),
-            }));
+            }, this.transport));
             try {
                 const text = await response.text();
                 return parseJSON(text);
@@ -2257,7 +2270,7 @@ class AleoNetworkClient {
             headers: {
                 'X-Provable-API-Key': apiKey
             }
-        });
+        }, this.transport);
         const authHeader = response.headers.get('authorization');
         if (!authHeader) {
             throw new Error('No authorization header in JWT refresh response');
@@ -2366,7 +2379,7 @@ class AleoNetworkClient {
                 const pubKeyResponse = await get(proverUri + "/pubkey", {
                     headers,
                     credentials: "include",
-                });
+                }, this.transport);
                 // Encrypt the provingRequest.
                 const pubkey = parseJSON(await pubKeyResponse.text());
                 const ciphertext = encryptProvingRequest(pubkey.public_key, ProvingRequest.fromString(provingRequestString));
@@ -2378,7 +2391,7 @@ class AleoNetworkClient {
                 // We're in node, attempt to set the cookie manually.
                 const cookie = isNode() ? pubKeyResponse.headers.get("set-cookie") : undefined;
                 // Send the encrypted proving request to the DPS service.
-                const res = await fetch(`${proverUri}/prove/encrypted`, {
+                const res = await this.transport(`${proverUri}/prove/encrypted`, {
                     method: "POST",
                     body: JSON.stringify(payload),
                     headers: {
@@ -2394,7 +2407,7 @@ class AleoNetworkClient {
             const proveEndpoint = proverUri.endsWith("/prove")
                 ? proverUri
                 : proverUri + "/prove";
-            const res = await fetch(proveEndpoint, {
+            const res = await this.transport(proveEndpoint, {
                 method: "POST",
                 body: provingRequestString,
                 headers,
@@ -2466,7 +2479,7 @@ class AleoNetworkClient {
                     return reject(new Error(`Transaction ${transactionId} did not appear after the timeout period of ${interval}ms - consider resubmitting the transaction`));
                 }
                 try {
-                    const res = await fetch(`${this.host}/transaction/confirmed/${transactionId}`, {
+                    const res = await this.transport(`${this.host}/transaction/confirmed/${transactionId}`, {
                         headers: {
                             ...this.headers,
                             "X-ALEO-METHOD": "waitForTransactionConfirmation",
@@ -2602,9 +2615,10 @@ class AleoKeyProvider {
     cache;
     cacheOption;
     keyUris;
+    transport;
     async fetchBytes(url = "/") {
         try {
-            const response = await get(url);
+            const response = await get(url, undefined, this.transport);
             const data = await response.arrayBuffer();
             return new Uint8Array(data);
         }
@@ -2612,10 +2626,11 @@ class AleoKeyProvider {
             throw new Error("Error fetching data." + error.message);
         }
     }
-    constructor() {
+    constructor(options) {
         this.keyUris = KEY_STORE;
         this.cache = new Map();
         this.cacheOption = false;
+        this.transport = options?.transport ?? defaultTransport;
     }
     async keyStore() {
         return undefined;
@@ -2985,7 +3000,7 @@ class AleoKeyProvider {
             default:
                 try {
                     /// Try to fetch the verifying key from the network as a string
-                    const response = await get(verifierUri);
+                    const response = await get(verifierUri, undefined, this.transport);
                     const text = await response.text();
                     return VerifyingKey.fromString(text);
                 }
@@ -4069,6 +4084,7 @@ class RecordScanner {
     viewKeys;
     autoReRegister;
     decryptEnabled;
+    transport;
     account;
     /**
      * @param {RecordScannerOptions} options Configuration for the record scanner.
@@ -4076,6 +4092,7 @@ class RecordScanner {
     constructor(options) {
         // Set the network by detecting which version of the SDK is being used.
         const network = "/mainnet";
+        this.transport = options.transport ?? defaultTransport;
         // If the user has configured a network in their uri, throw.
         if (options.url.endsWith("/mainnet") || options.url.endsWith("/testnet")) {
             throw new Error("The record scanning url should not include the specific network, this is automatically configured by the Provable SDK.");
@@ -4216,7 +4233,7 @@ class RecordScanner {
             headers: {
                 "X-Provable-API-Key": apiKey,
             },
-        });
+        }, this.transport);
         const authHeader = response.headers.get("authorization");
         if (!authHeader) {
             throw new Error("No authorization header in JWT refresh response");
@@ -4785,7 +4802,14 @@ class RecordScanner {
             if (this.apiKey) {
                 req.headers.set(this.apiKey.header, this.apiKey.value);
             }
-            const response = await fetch(req);
+            const body = req.body ? await req.text() : undefined;
+            const plainHeaders = {};
+            req.headers.forEach((value, key) => { plainHeaders[key] = value; });
+            const response = await this.transport(req.url, {
+                method: req.method,
+                headers: plainHeaders,
+                body,
+            });
             // Non-2xx: throw so callers can handleRequestError or re-register on 422 if autoReRegister is enabled.
             if (!response.ok) {
                 const text = await response.text();
@@ -5160,7 +5184,7 @@ class ProgramManager {
     constructor(host, keyProvider, recordProvider, networkClientOptions) {
         this.host = host ? host : "https://api.provable.com/v2";
         this.networkClient = new AleoNetworkClient(this.host, networkClientOptions);
-        this.keyProvider = keyProvider ? keyProvider : new AleoKeyProvider();
+        this.keyProvider = keyProvider ? keyProvider : new AleoKeyProvider({ transport: networkClientOptions?.transport });
         this.recordProvider = recordProvider;
     }
     /**