Comment by lcrz

I agree. If you look at the Swift version of the library, it will generate and prepend the nonce for you automatically (if you use the right overloaded method). It will also strip it and use it during decryption.

My guess is they wanted to maintain compatibility with NaCl.