Grarco/draft

.changelog/unreleased/SDK/2399-async-light-sdk.md

@@ -0,0 +1,2 @@
+- Both the `reading` and `writing` modules of the light SDK can now be used from
+  within an async runtime. ([\#2399](https://github.com/anoma/namada/pull/2399))

.changelog/unreleased/bug-fixes/2401-tx-host-env.md

@@ -0,0 +1,2 @@
+- Fixed possible panics in transaction host environment functions.
+  ([\#2401](https://github.com/anoma/namada/pull/2401))

.changelog/unreleased/bug-fixes/2408-fix-burn-function.md

@@ -0,0 +1,2 @@
+- Fix the token burn function.
+  ([\#2408](https://github.com/anoma/namada/pull/2408))

.changelog/unreleased/bug-fixes/2424-change-shielded-rewards.md

@@ -0,0 +1,2 @@
+- Fix the MASP VP to enable changes to the shielded set max reward rate for a
+  token. ([\#2424](https://github.com/anoma/namada/pull/2424))

.changelog/unreleased/bug-fixes/2428-fix-shielded-actions.md

@@ -0,0 +1,2 @@
+- Validates changes to the balance key in masp vp.
+  ([\#2428](https://github.com/anoma/namada/pull/2428))

.changelog/unreleased/features/2417-wallet-zip32-0.30.1.md

@@ -0,0 +1,2 @@
+- Implemented ZIP32 functionality for shielded pool keys.
+  ([\#2417](https://github.com/anoma/namada/pull/2417))

.changelog/unreleased/improvements/2355-new-storage-write.md

@@ -0,0 +1,2 @@
+- Skip writing some MASP and IBC storage keys to merkle tree and DB diffs.
+  ([\#2355](https://github.com/anoma/namada/pull/2355))

.changelog/unreleased/improvements/2419-protocol-tx-allowlist.md

@@ -0,0 +1,3 @@
+- Added tx WASM code allowlist at protocol level and VP WASM code allowlist in
+  the host environment functions.
+  ([\#2419](https://github.com/anoma/namada/pull/2419))

.changelog/unreleased/improvements/2427-masp-test-vectors-rebased.md

@@ -0,0 +1,2 @@
+- The test vector generator now supports generating MASP transactions.
+  ([\#2427](https://github.com/anoma/namada/pull/2427))

.changelog/unreleased/testing/2406-masp-unconverted-test.md

@@ -0,0 +1,2 @@
+- Added an integration test to verify that unconverted asset types can be spent
+  in the MASP. ([\#2406](https://github.com/anoma/namada/pull/2406))

.github/workflows/scripts/e2e.json

@@ -15,6 +15,7 @@
     "e2e::ledger_tests::proposal_offline": 21,
     "e2e::ledger_tests::pgf_governance_proposal": 320,
     "e2e::ledger_tests::proposal_submission": 200,
+    "e2e::ledger_tests::proposal_change_shielded_reward": 200,
     "e2e::ledger_tests::run_ledger": 5,
     "e2e::ledger_tests::run_ledger_load_state_and_reset": 23,
     "e2e::ledger_tests::test_namada_shuts_down_if_tendermint_dies": 2,

Cargo.toml

@@ -67,8 +67,10 @@ base58 = "0.2.0"
 base64 = "0.13.0"
 bech32 = "0.8.0"
 bimap = {version = "0.6.2", features = ["serde"]}
+bitflags = "2.4.2"
 bit-set = "0.5.2"
 blake2b-rs = "0.2.0"
+bls12_381 = "0.8"
 byte-unit = "4.0.13"
 byteorder = "1.4.2"
 borsh = {version = "1.2.0", features = ["unstable__schema", "derive"]}
@@ -105,6 +107,7 @@ ibc-testkit = {version = "0.48.1", default-features = false}
 ics23 = "0.11.0"
 index-set = { git = "https://github.com/heliaxdev/index-set", tag = "v0.8.1", features = ["serialize-borsh", "serialize-serde"] }
 itertools = "0.10.0"
+jubjub = "0.10"
 k256 = { version = "0.13.0", default-features = false, features = ["ecdsa", "pkcs8", "precomputed-tables", "serde", "std"]}
 lazy_static = "1.4.0"
 ledger-namada-rs = { git = "https://github.com/Zondax/ledger-namada", tag = "v0.0.12" }

Makefile

@@ -169,6 +169,7 @@ test-e2e:
 	-Z unstable-options \
 	-- \
 	--test-threads=1 \
+	--nocapture \
 	-Z unstable-options --report-time
 
 # Run integration tests with pre-built MASP proofs

crates/apps/src/lib/cli.rs

@@ -2975,8 +2975,10 @@ pub mod args {
         arg("validator");
     pub const HALT_ACTION: ArgFlag = flag("halt");
     pub const HASH_LIST: Arg<String> = arg("hash-list");
-    pub const HD_WALLET_DERIVATION_PATH: ArgDefault<String> =
+    pub const HD_DERIVATION_PATH: ArgDefault<String> =
         arg_default("hd-path", DefaultFn(|| "default".to_string()));
+    pub const HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH: ArgFlag =
+        flag("allow-non-compliant");
     pub const HISTORIC: ArgFlag = flag("historic");
     pub const IBC_TRANSFER_MEMO_PATH: ArgOpt<PathBuf> = arg_opt("memo-path");
     pub const INPUT_OPT: ArgOpt<PathBuf> = arg_opt("input");
@@ -6196,7 +6198,9 @@ pub mod args {
             let alias_force = ALIAS_FORCE.parse(matches);
             let unsafe_dont_encrypt = UNSAFE_DONT_ENCRYPT.parse(matches);
             let use_device = USE_DEVICE.parse(matches);
-            let derivation_path = HD_WALLET_DERIVATION_PATH.parse(matches);
+            let derivation_path = HD_DERIVATION_PATH.parse(matches);
+            let allow_non_compliant =
+                HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.parse(matches);
             Self {
                 scheme,
                 shielded,
@@ -6205,6 +6209,7 @@ pub mod args {
                 unsafe_dont_encrypt,
                 use_device,
                 derivation_path,
+                allow_non_compliant,
             }
         }
 
@@ -6234,14 +6239,29 @@ pub mod args {
                 "Derive an address and public key from the seed stored on the \
                  connected hardware wallet.",
             ))
-            .arg(HD_WALLET_DERIVATION_PATH.def().help(
+            .arg(HD_DERIVATION_PATH.def().help(
                 "HD key derivation path. Use keyword `default` to refer to a \
-                 scheme default path:\n- m/44'/60'/0'/0/0 for secp256k1 \
-                 scheme\n- m/44'/877'/0'/0'/0' for ed25519 scheme.\nFor \
-                 ed25519, all path indices will be promoted to hardened \
-                 indexes. If none is specified, the scheme default path is \
-                 used.",
+                 scheme default path:\n- m/44'/60'/0'/0/0 for the transparent \
+                 secp256k1 scheme\n- m/44'/877'/0'/0'/0' for the transparent \
+                 ed25519 scheme\n- m/32'/877'/0' for the shielded \
+                 setting\nFor ed25519 scheme, all path indices will be \
+                 promoted to hardened indexes. If none is specified, the \
+                 scheme default path is used.",
             ))
+            .arg(HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.def().help(
+                "Allow non-compliant HD derivation path. The compliant \
+                 derivation path schemes include:\n- \
+                 m/44'/60'/account'/change/address_index for the transparent \
+                 secp256k1 scheme\n- \
+                 m/44'/877'/account'/change'/address_index' for the \
+                 transparent ed25519 scheme\n- m/32'/877'/account' and\n- \
+                 m/32'/877'/account'/address_index for the shielded setting",
+            ))
+            .group(
+                ArgGroup::new("requires_group")
+                    .args([HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.name])
+                    .requires(HD_DERIVATION_PATH.name),
+            )
         }
     }
 
@@ -6253,7 +6273,9 @@ pub mod args {
             let alias = ALIAS.parse(matches);
             let alias_force = ALIAS_FORCE.parse(matches);
             let unsafe_dont_encrypt = UNSAFE_DONT_ENCRYPT.parse(matches);
-            let derivation_path = HD_WALLET_DERIVATION_PATH.parse(matches);
+            let derivation_path = HD_DERIVATION_PATH.parse(matches);
+            let allow_non_compliant =
+                HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.parse(matches);
             Self {
                 scheme,
                 shielded,
@@ -6262,6 +6284,7 @@ pub mod args {
                 alias_force,
                 unsafe_dont_encrypt,
                 derivation_path,
+                allow_non_compliant,
             }
         }
 
@@ -6280,7 +6303,7 @@ pub mod args {
             .arg(
                 RAW_KEY_GEN
                     .def()
-                    .conflicts_with(HD_WALLET_DERIVATION_PATH.name)
+                    .conflicts_with(HD_DERIVATION_PATH.name)
                     .help(
                         "Generate a random non-HD secret / spending key. No \
                          mnemonic code is generated.",
@@ -6294,14 +6317,29 @@ pub mod args {
                 "UNSAFE: Do not encrypt the keypair. Do not use this for keys \
                  used in a live network.",
             ))
-            .arg(HD_WALLET_DERIVATION_PATH.def().help(
+            .arg(HD_DERIVATION_PATH.def().help(
                 "HD key derivation path. Use keyword `default` to refer to a \
-                 scheme default path:\n- m/44'/60'/0'/0/0 for secp256k1 \
-                 scheme\n- m/44'/877'/0'/0'/0' for ed25519 scheme.\nFor \
-                 ed25519, all path indices will be promoted to hardened \
-                 indexes. If none is specified, the scheme default path is \
-                 used.",
+                 scheme default path:\n- m/44'/60'/0'/0/0 for the transparent \
+                 secp256k1 scheme\n- m/44'/877'/0'/0'/0' for the transparent \
+                 ed25519 scheme\n- m/32'/877'/0' for the shielded \
+                 setting\nFor ed25519 scheme, all path indices will be \
+                 promoted to hardened indexes. If none is specified, the \
+                 scheme default path is used.",
             ))
+            .arg(HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.def().help(
+                "Allow non-compliant HD derivation path. The compliant \
+                 derivation path schemes include:\n- \
+                 m/44'/60'/account'/change/address_index for the transparent \
+                 secp256k1 scheme\n- \
+                 m/44'/877'/account'/change'/address_index' for the \
+                 transparent ed25519 scheme\n- m/32'/877'/account' and\n- \
+                 m/32'/877'/account'/address_index for the shielded setting",
+            ))
+            .group(
+                ArgGroup::new("requires_group")
+                    .args([HD_ALLOW_NON_COMPLIANT_DERIVATION_PATH.name])
+                    .requires(HD_DERIVATION_PATH.name),
+            )
         }
     }