@taquito/sapling 24.3.0-beta.2 → 24.3.0-beta.3

package/SAPLING_PARAMS_PROVENANCE.md

@@ -0,0 +1,24 @@
+## Sapling Parameter Provenance
+
+The `saplingOutputParams.js` file in this package and the `saplingSpendParams.js` file in the sibling `@taquito/sapling-spend-params` package are vendored copies of the Sapling proving parameters distributed by the Zcash project.
+
+Source:
+- `https://download.z.cash/downloads/sapling-spend.params`
+- `https://download.z.cash/downloads/sapling-output.params`
+
+Verification data:
+- `sapling-spend.params`
+  - Size: `47,958,396` bytes
+  - SHA-256: `8e48ffd23abb3a5fd9c5589204f32d9c31285a04b78096ba40a79b75677efc13`
+- `sapling-output.params`
+  - Size: `3,592,860` bytes
+  - SHA-256: `2f0ebbcbb9bb0bcffe95a397e7eba89c29eb4dde6191c339db88570e3f3fb0e4`
+
+Why these files are vendored:
+- `@taquito/sapling` previously fetched them during `postinstall`, which made installs network-dependent.
+- Vendoring keeps published packages self-contained and makes builds reproducible.
+- These parameters are treated as fixed trusted setup artifacts, not routine updatable assets.
+
+Maintainer note:
+- `fetch-sapling-params.js` is retained only as a repo-maintenance helper to regenerate the vendored wrapper files from the exact raw parameter files above.
+- Any regeneration should be exceptional, manually reviewed, and accompanied by explicit provenance updates in this file.

package/dist/lib/sapling-keys/in-memory-proving-key.js

@@ -13,7 +13,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 var _InMemoryProvingKey_provingKey;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.InMemoryProvingKey = void 0;
-const sapling = require("@airgap/sapling-wasm");
+const sapling = require("@taquito/sapling-wasm");
 const helpers_1 = require("./helpers");
 /**
  * holds the proving key, create proof for spend descriptions

package/dist/lib/sapling-keys/in-memory-spending-key.js

@@ -14,7 +14,7 @@ var _InMemorySpendingKey_spendingKeyBuf, _InMemorySpendingKey_saplingViewingKey;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.InMemorySpendingKey = void 0;
 const in_memory_viewing_key_1 = require("./in-memory-viewing-key");
-const sapling = require("@airgap/sapling-wasm");
+const sapling = require("@taquito/sapling-wasm");
 const utils_1 = require("@taquito/utils");
 const bip39 = require("@scure/bip39");
 const helpers_1 = require("./helpers");

package/dist/lib/sapling-keys/in-memory-viewing-key.js

@@ -14,7 +14,7 @@ var _InMemoryViewingKey_fullViewingKey;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.InMemoryViewingKey = void 0;
 const utils_1 = require("@taquito/utils");
-const sapling = require("@airgap/sapling-wasm");
+const sapling = require("@taquito/sapling-wasm");
 const helpers_1 = require("./helpers");
 /**
  * Holds the viewing key

package/dist/lib/sapling-module-wrapper.js

@@ -1,20 +1,28 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SaplingWrapper = void 0;
-const sapling = require("@airgap/sapling-wasm");
-const random_1 = require("@stablelib/random");
+const sapling = require("@taquito/sapling-wasm");
 // eslint-disable-next-line @typescript-eslint/no-var-requires
 const saplingOutputParams = require('../saplingOutputParams');
 // eslint-disable-next-line @typescript-eslint/no-var-requires
-const saplingSpendParams = require('../saplingSpendParams');
+const saplingSpendParams = require('@taquito/sapling-spend-params');
 let cachedParams;
+const getRandomValueSource = () => {
+    const crypto = globalThis.crypto;
+    if (!crypto?.getRandomValues) {
+        throw new Error('Sapling randomness requires globalThis.crypto.getRandomValues');
+    }
+    return crypto;
+};
 class SaplingWrapper {
     async withProvingContext(action) {
         await this.initSaplingParameters();
         return sapling.withProvingContext(action);
     }
     getRandomBytes(length) {
-        return (0, random_1.randomBytes)(length);
+        const bytes = new Uint8Array(length);
+        getRandomValueSource().getRandomValues(bytes);
+        return bytes;
     }
     async randR() {
         return sapling.randR();

package/dist/lib/sapling-state/sapling-state.js

@@ -7,10 +7,11 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SaplingState = void 0;
 const errors_1 = require("../errors");
-const sapling_wasm_1 = require("@airgap/sapling-wasm");
+const sapling_wasm_1 = require("@taquito/sapling-wasm");
 const utils_1 = require("./utils");
 const utils_2 = require("@taquito/utils");
 const bignumber_js_1 = require("bignumber.js");
+const BigNumber = bignumber_js_1.default;
 /**
  * The SaplingState class's main purpose is to provide a Merkle path for the forger and the transaction builder, so that it may verify that the Sapling transaction is valid
  *
@@ -130,7 +131,7 @@ class SaplingState {
         }
         else {
             let nextPos, nextTree, otherTree;
-            const fullTree = new bignumber_js_1.default(2).pow(height - 1);
+            const fullTree = new BigNumber(2).pow(height - 1);
             if (position.lt(fullTree)) {
                 nextPos = position;
                 nextTree = tree[1];

package/dist/lib/sapling-tx-builder/sapling-transactions-builder.js

@@ -17,6 +17,7 @@ const blakejs_1 = require("blakejs");
 const nacl_1 = require("@stablelib/nacl");
 const constants_1 = require("../constants");
 const bignumber_js_1 = require("bignumber.js");
+const BigNumber = bignumber_js_1.default;
 const utils_1 = require("@taquito/utils");
 const helpers_1 = require("../sapling-tx-viewer/helpers");
 const sapling_state_1 = require("../sapling-state/sapling-state");
@@ -85,9 +86,9 @@ class SaplingTransactionBuilder {
             const outputs = [];
             const inputs = [];
             inputs.push(...(await this.prepareSaplingSpendDescription(saplingContext, chosenInputs.inputsToSpend)));
-            let sumAmountOutput = new bignumber_js_1.default(0);
+            let sumAmountOutput = new BigNumber(0);
             for (const i in saplingTransactionParams) {
-                sumAmountOutput = sumAmountOutput.plus(new bignumber_js_1.default(saplingTransactionParams[i].amount));
+                sumAmountOutput = sumAmountOutput.plus(new BigNumber(saplingTransactionParams[i].amount));
                 const [address] = (0, utils_1.b58DecodeAndCheckPrefix)(saplingTransactionParams[i].to, [
                     utils_1.PrefixV2.SaplingAddress,
                 ]);
@@ -111,7 +112,7 @@ class SaplingTransactionBuilder {
                     randomCommitmentTrapdoor: randomCommitmentTrapdoor,
                     outgoingViewingKey: outgoingViewingKey,
                 }, chosenInputs.sumSelectedInputs);
-                sumAmountOutput = sumAmountOutput.plus(new bignumber_js_1.default(payBackAmount));
+                sumAmountOutput = sumAmountOutput.plus(new BigNumber(payBackAmount));
                 outputs.push(payBackOutput);
             }
             const balance = this.calculateTransactionBalance(chosenInputs.sumSelectedInputs.toString(), sumAmountOutput.toString());
@@ -133,7 +134,7 @@ class SaplingTransactionBuilder {
     }
     // sum of values of inputs minus sums of values of output equals balance
     calculateTransactionBalance(inputTotal, outputTotal) {
-        return new bignumber_js_1.default(inputTotal).minus(new bignumber_js_1.default(outputTotal));
+        return new BigNumber(inputTotal).minus(new BigNumber(outputTotal));
     }
     async prepareSaplingOutputDescription(parametersOutputDescription) {
         const ephemeralPrivateKey = await __classPrivateFieldGet(this, _SaplingTransactionBuilder_saplingWrapper, "f").randR();
@@ -186,7 +187,7 @@ class SaplingTransactionBuilder {
         const saplingSpendDescriptions = [];
         for (let i = 0; i < inputsToSpend.length; i++) {
             const amount = (0, helpers_1.convertValueToBigNumber)(inputsToSpend[i].value).toString();
-            const witness = await __classPrivateFieldGet(this, _SaplingTransactionBuilder_saplingState, "f").getWitness(stateTree, new bignumber_js_1.default(inputsToSpend[i].position));
+            const witness = await __classPrivateFieldGet(this, _SaplingTransactionBuilder_saplingState, "f").getWitness(stateTree, new BigNumber(inputsToSpend[i].position));
             const unsignedSpendDescription = __classPrivateFieldGet(this, _SaplingTransactionBuilder_inMemoryProvingKey, "f")
                 ? await __classPrivateFieldGet(this, _SaplingTransactionBuilder_inMemoryProvingKey, "f").prepareSpendDescription({
                     saplingContext,

package/dist/lib/sapling-tx-viewer/sapling-transaction-viewer.js

@@ -13,8 +13,9 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 var _SaplingTransactionViewer_viewingKeyProvider, _SaplingTransactionViewer_readProvider, _SaplingTransactionViewer_saplingContractId;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SaplingTransactionViewer = void 0;
-const sapling = require("@airgap/sapling-wasm");
+const sapling = require("@taquito/sapling-wasm");
 const bignumber_js_1 = require("bignumber.js");
+const BigNumber = bignumber_js_1.default;
 const utils_1 = require("@taquito/utils");
 const blakejs_1 = require("blakejs");
 const nacl_1 = require("@stablelib/nacl");
@@ -44,7 +45,7 @@ class SaplingTransactionViewer {
      *
      */
     async getBalance() {
-        let balance = new bignumber_js_1.default(0);
+        let balance = new BigNumber(0);
         const { commitments_and_ciphertexts, nullifiers } = await this.getSaplingDiff();
         for (let i = 0; i < commitments_and_ciphertexts.length; i++) {
             const decrypted = await this.decryptCiphertextAsReceiver(commitments_and_ciphertexts[i]);

package/dist/lib/taquito-sapling.js

@@ -18,6 +18,7 @@ var _SaplingToolkit_inMemorySpendingKey, _SaplingToolkit_saplingId, _SaplingTool
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SaplingToolkit = exports.InMemoryProvingKey = exports.InMemorySpendingKey = exports.InMemoryViewingKey = exports.SaplingTransactionViewer = void 0;
 const bignumber_js_1 = require("bignumber.js");
+const BigNumber = bignumber_js_1.default;
 const taquito_1 = require("@taquito/taquito");
 const utils_1 = require("@taquito/utils");
 const errors_1 = require("./errors");
@@ -122,7 +123,7 @@ class SaplingToolkit {
         const { formatedParams, totalAmount } = this.formatTransactionParams([unshieldedTxParams], this.validateDestinationImplicitAddress);
         const boundData = await this.createBoundData(formatedParams[0].to);
         const root = await this.getRoot();
-        const chosenInputs = await this.selectInputsToSpend(new bignumber_js_1.default(formatedParams[0].amount));
+        const chosenInputs = await this.selectInputsToSpend(new BigNumber(formatedParams[0].amount));
         const { inputs, outputs, signature, balance } = await __classPrivateFieldGet(this, _SaplingToolkit_saplingTxBuilder, "f").createSaplingTx([], totalAmount, boundData, chosenInputs);
         const forgedSaplingTx = __classPrivateFieldGet(this, _SaplingToolkit_saplingForger, "f").forgeSaplingTransaction({
             inputs,
@@ -159,13 +160,13 @@ class SaplingToolkit {
     }
     formatTransactionParams(txParams, validateDestination) {
         const formatedParams = [];
-        let totalAmount = new bignumber_js_1.default(0);
+        let totalAmount = new BigNumber(0);
         txParams.forEach((param) => {
             validateDestination(param.to);
             const amountMutez = param.mutez
                 ? param.amount.toString()
                 : (0, utils_1.format)('tz', 'mutez', param.amount).toString();
-            totalAmount = totalAmount.plus(new bignumber_js_1.default(amountMutez));
+            totalAmount = totalAmount.plus(new BigNumber(amountMutez));
             const memo = param.memo ?? constants_1.DEFAULT_MEMO;
             if (memo.length > __classPrivateFieldGet(this, _SaplingToolkit_memoSize, "f")) {
                 throw new errors_1.InvalidMemo(memo, `expecting length to be less than ${__classPrivateFieldGet(this, _SaplingToolkit_memoSize, "f")}`);
@@ -220,7 +221,7 @@ class SaplingToolkit {
         const saplingTxViewer = await this.getSaplingTransactionViewer();
         const { incoming } = await saplingTxViewer.getIncomingAndOutgoingTransactionsRaw();
         const inputsToSpend = [];
-        let sumSelectedInputs = new bignumber_js_1.default(0);
+        let sumSelectedInputs = new BigNumber(0);
         incoming.forEach((input) => {
             if (!input.isSpent && sumSelectedInputs.isLessThan(amountMutez)) {
                 const txAmount = (0, helpers_1.convertValueToBigNumber)(input.value);
@@ -229,7 +230,7 @@ class SaplingToolkit {
                 inputsToSpend.push(rest);
             }
         });
-        if (sumSelectedInputs.isLessThan(new bignumber_js_1.default(amountMutez))) {
+        if (sumSelectedInputs.isLessThan(new BigNumber(amountMutez))) {
             throw new errors_1.InsufficientBalance(sumSelectedInputs.toString(), amountMutez.toString());
         }
         return { inputsToSpend, sumSelectedInputs };

package/dist/lib/types.js

@@ -1,2 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const bignumber_js_1 = require("bignumber.js");
+const BigNumber = bignumber_js_1.default;

package/dist/lib/version.js

@@ -3,6 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
 // IMPORTANT: THIS FILE IS AUTO GENERATED! DO NOT MANUALLY EDIT!
 exports.VERSION = {
-    "commitHash": "fb73f1546d3dff2fbba7741ca6006680212bef16",
-    "version": "24.3.0-beta.2"
+    "commitHash": "a312cd3f4fc0ab0fb3351bfffe6ad855772cb077",
+    "version": "24.3.0-beta.3"
 };

package/dist/taquito-sapling.es6.js

@@ -1,12 +1,11 @@
-import BigNumber from 'bignumber.js';
+import BigNumberJs from 'bignumber.js';
 import { MichelCodecPacker } from '@taquito/taquito';
 import { b58Encode, PrefixV2, bytesToString, toHexBuf, stringToBytes, hex2buf, mergebuf, hex2Bytes, num2PaddedHex, b58DecodeAndCheckPrefix, format, b58DecodePublicKeyHash, validateKeyHash, ValidationResult } from '@taquito/utils';
 import { ParameterValidationError, TaquitoError, InvalidKeyHashError, InvalidAddressError } from '@taquito/core';
-import * as sapling from '@airgap/sapling-wasm';
-import { merkleHash } from '@airgap/sapling-wasm';
+import * as sapling from '@taquito/sapling-wasm';
+import { merkleHash } from '@taquito/sapling-wasm';
 import blake from 'blakejs';
 import { openSecretBox, secretBox } from '@stablelib/nacl';
-import { randomBytes } from '@stablelib/random';
 import toBuffer from 'typedarray-to-buffer';
 
 /******************************************************************************
@@ -134,7 +133,7 @@ function readableFormat(saplingTransactionProperties) {
     };
 }
 function convertValueToBigNumber(value) {
-    return new BigNumber(Buffer.from(value).toString('hex'), 16);
+    return new BigNumberJs(Buffer.from(value).toString('hex'), 16);
 }
 function bufToUint8Array(buffer) {
     return new Uint8Array(buffer.buffer, buffer.byteOffset, buffer.byteLength / Uint8Array.BYTES_PER_ELEMENT);
@@ -227,7 +226,7 @@ class SaplingForger {
         const encodedMemo = Buffer.from(stringToBytes(txPlainText.memo).padEnd(txPlainText.memoSize, '0'), 'hex');
         return Buffer.concat([
             txPlainText.diversifier,
-            toHexBuf(new BigNumber(txPlainText.amount), 64),
+            toHexBuf(new BigNumberJs(txPlainText.amount), 64),
             txPlainText.randomCommitmentTrapdoor,
             toHexBuf(txPlainText.memoSize, 32),
             encodedMemo,
@@ -241,6 +240,7 @@ const DEFAULT_MEMO = '';
 const DEFAULT_BOUND_DATA = Buffer.from('', 'hex');
 
 var _SaplingTransactionViewer_viewingKeyProvider, _SaplingTransactionViewer_readProvider, _SaplingTransactionViewer_saplingContractId;
+const BigNumber$3 = BigNumberJs;
 /**
  * Allows to retrieve and decrypt sapling transactions using on a viewing key
  *
@@ -264,7 +264,7 @@ class SaplingTransactionViewer {
      *
      */
     async getBalance() {
-        let balance = new BigNumber(0);
+        let balance = new BigNumber$3(0);
         const { commitments_and_ciphertexts, nullifiers } = await this.getSaplingDiff();
         for (let i = 0; i < commitments_and_ciphertexts.length; i++) {
             const decrypted = await this.decryptCiphertextAsReceiver(commitments_and_ciphertexts[i]);
@@ -456,6 +456,7 @@ const changeEndianness = (hex) => {
  * https://github.com/airgap-it/airgap-coin-lib/blob/master/LICENSE.md
  *
  */
+const BigNumber$2 = BigNumberJs;
 /**
  * The SaplingState class's main purpose is to provide a Merkle path for the forger and the transaction builder, so that it may verify that the Sapling transaction is valid
  *
@@ -575,7 +576,7 @@ class SaplingState {
         }
         else {
             let nextPos, nextTree, otherTree;
-            const fullTree = new BigNumber(2).pow(height - 1);
+            const fullTree = new BigNumber$2(2).pow(height - 1);
             if (position.lt(fullTree)) {
                 nextPos = position;
                 nextTree = tree[1];
@@ -594,15 +595,24 @@ class SaplingState {
 // eslint-disable-next-line @typescript-eslint/no-var-requires
 const saplingOutputParams = require('../saplingOutputParams');
 // eslint-disable-next-line @typescript-eslint/no-var-requires
-const saplingSpendParams = require('../saplingSpendParams');
+const saplingSpendParams = require('@taquito/sapling-spend-params');
 let cachedParams;
+const getRandomValueSource = () => {
+    const crypto = globalThis.crypto;
+    if (!crypto?.getRandomValues) {
+        throw new Error('Sapling randomness requires globalThis.crypto.getRandomValues');
+    }
+    return crypto;
+};
 class SaplingWrapper {
     async withProvingContext(action) {
         await this.initSaplingParameters();
         return sapling.withProvingContext(action);
     }
     getRandomBytes(length) {
-        return randomBytes(length);
+        const bytes = new Uint8Array(length);
+        getRandomValueSource().getRandomValues(bytes);
+        return bytes;
     }
     async randR() {
         return sapling.randR();
@@ -645,6 +655,7 @@ class SaplingWrapper {
 }
 
 var _SaplingTransactionBuilder_inMemorySpendingKey, _SaplingTransactionBuilder_inMemoryProvingKey, _SaplingTransactionBuilder_saplingForger, _SaplingTransactionBuilder_contractAddress, _SaplingTransactionBuilder_saplingId, _SaplingTransactionBuilder_memoSize, _SaplingTransactionBuilder_readProvider, _SaplingTransactionBuilder_saplingWrapper, _SaplingTransactionBuilder_chainId, _SaplingTransactionBuilder_saplingState;
+const BigNumber$1 = BigNumberJs;
 class SaplingTransactionBuilder {
     constructor(keys, saplingForger, saplingContractDetails, readProvider, saplingWrapper = new SaplingWrapper()) {
         _SaplingTransactionBuilder_inMemorySpendingKey.set(this, void 0);
@@ -709,9 +720,9 @@ class SaplingTransactionBuilder {
             const outputs = [];
             const inputs = [];
             inputs.push(...(await this.prepareSaplingSpendDescription(saplingContext, chosenInputs.inputsToSpend)));
-            let sumAmountOutput = new BigNumber(0);
+            let sumAmountOutput = new BigNumber$1(0);
             for (const i in saplingTransactionParams) {
-                sumAmountOutput = sumAmountOutput.plus(new BigNumber(saplingTransactionParams[i].amount));
+                sumAmountOutput = sumAmountOutput.plus(new BigNumber$1(saplingTransactionParams[i].amount));
                 const [address] = b58DecodeAndCheckPrefix(saplingTransactionParams[i].to, [
                     PrefixV2.SaplingAddress,
                 ]);
@@ -735,7 +746,7 @@ class SaplingTransactionBuilder {
                     randomCommitmentTrapdoor: randomCommitmentTrapdoor,
                     outgoingViewingKey: outgoingViewingKey,
                 }, chosenInputs.sumSelectedInputs);
-                sumAmountOutput = sumAmountOutput.plus(new BigNumber(payBackAmount));
+                sumAmountOutput = sumAmountOutput.plus(new BigNumber$1(payBackAmount));
                 outputs.push(payBackOutput);
             }
             const balance = this.calculateTransactionBalance(chosenInputs.sumSelectedInputs.toString(), sumAmountOutput.toString());
@@ -757,7 +768,7 @@ class SaplingTransactionBuilder {
     }
     // sum of values of inputs minus sums of values of output equals balance
     calculateTransactionBalance(inputTotal, outputTotal) {
-        return new BigNumber(inputTotal).minus(new BigNumber(outputTotal));
+        return new BigNumber$1(inputTotal).minus(new BigNumber$1(outputTotal));
     }
     async prepareSaplingOutputDescription(parametersOutputDescription) {
         const ephemeralPrivateKey = await __classPrivateFieldGet(this, _SaplingTransactionBuilder_saplingWrapper, "f").randR();
@@ -810,7 +821,7 @@ class SaplingTransactionBuilder {
         const saplingSpendDescriptions = [];
         for (let i = 0; i < inputsToSpend.length; i++) {
             const amount = convertValueToBigNumber(inputsToSpend[i].value).toString();
-            const witness = await __classPrivateFieldGet(this, _SaplingTransactionBuilder_saplingState, "f").getWitness(stateTree, new BigNumber(inputsToSpend[i].position));
+            const witness = await __classPrivateFieldGet(this, _SaplingTransactionBuilder_saplingState, "f").getWitness(stateTree, new BigNumber$1(inputsToSpend[i].position));
             const unsignedSpendDescription = __classPrivateFieldGet(this, _SaplingTransactionBuilder_inMemoryProvingKey, "f")
                 ? await __classPrivateFieldGet(this, _SaplingTransactionBuilder_inMemoryProvingKey, "f").prepareSpendDescription({
                     saplingContext,
@@ -1825,6 +1836,7 @@ _InMemoryProvingKey_provingKey = new WeakMap();
  * @module @taquito/sapling
  */
 var _SaplingToolkit_inMemorySpendingKey, _SaplingToolkit_saplingId, _SaplingToolkit_contractAddress, _SaplingToolkit_memoSize, _SaplingToolkit_readProvider, _SaplingToolkit_packer, _SaplingToolkit_saplingForger, _SaplingToolkit_saplingTxBuilder, _SaplingToolkit_saplingTransactionViewer;
+const BigNumber = BigNumberJs;
 /**
  * Class that surfaces all of the sapling capability allowing to read from a sapling state and prepare transactions
  *