feat(platform-wallet): multi-output shielded transfers + output-aware fee predictor - #4312

Open

bfoss765 wants to merge 26 commits into

feat/shielded-two-note-invites

Commits on Aug 6, 2026

feat(shielded): multi-output transfers + output-aware fee predictor

bfoss765
and
claude
committed
738dd7c
fix(shielded): review-gate round — action-limit gate, strict-change note selection, FFI panic guard, JNI allocation bound
bfoss765
committed
6e59784

Commits on Aug 12, 2026

fix(dpp): enforce the transition-size-derived action ceiling in the shielded pre-proving gate
bfoss765
committed
d3ecd62
fix(wallet-ffi): panic-guard every shielded block_on_worker export; clamp the multi-transfer recipient ceiling to the effective action limit
bfoss765
committed
0281480
fix(dpp): price transition-specific envelopes into the pre-proving action ceiling

bfoss765
and
claude
committed
1e46088

Commits on Aug 19, 2026

fix(platform-wallet): don't attribute a restored multi-recipient transfer to one recipient
bfoss765
committed
a5a7ee3
merge: bring v4.2-dev into feat/shielded-two-note-invites
bfoss765
committed
e9373ce
fix(platform-wallet): classify wallet-owned recipients consistently in live activity

bfoss765
and
claude
committed
409a0f6
fix(dpp): price only the asset-lock proof delta above the baseline envelope

bfoss765
and
claude
committed
eea6c35
fix(dpp): reject zero-valued recipient outputs at the Rust builder boundary

bfoss765
and
claude
committed
35d6408
test(platform-wallet-ffi): do not replace the process-global panic hook

bfoss765
and
claude
committed
9ea7bd1
chore(dpp): align serialized_envelope_bytes with PlatformSerialize's bincode config

bfoss765
and
claude
committed
99caf12

Commits on Aug 20, 2026

test(platform-wallet): bind live/restored parity tests to the production transfer_multi classifier

bfoss765
and
claude
committed
40d725a

Commits on Aug 21, 2026

fix(platform-wallet): checked addition for the strict-change selection requirement

bfoss765
and
claude
committed
200e694
fix(platform-wallet): release note reservations when proving panics before broadcast

bfoss765
and
claude
committed
43ed450
fix(unified-sdk-jni): abort a shielded spend when the memo string cannot be read

bfoss765
and
claude
committed
41c16fd

Commits on Aug 24, 2026

Merge origin/v4.2-dev into feat/shielded-two-note-invites

bfoss765
and
claude
committed
6245ad8
fix(platform-wallet): release note reservations on pre-broadcast panics in every spend path

bfoss765
and
claude
committed
39d5c46
test(platform-wallet): derive the input-selection regression seed from the versioned reserve

bfoss765
and
claude
committed
f3c0dfc

Commits on Aug 25, 2026

Merge origin/v4.2-dev into feat/shielded-two-note-invites (reconcile #4470 active-version fees + #4472 shield-to-recipient)

bfoss765
and
claude
committed
c16ac9d

Commits on Aug 26, 2026

Commits on Aug 27, 2026

refactor(platform-wallet,dpp): index multi-output address errors; crate-private envelope serializer

bfoss765
and
claude
committed
886c9cd

Commits on Aug 28, 2026

refactor(platform-wallet): price note-selection fees from the shared bundle-layout rule

bfoss765
and
claude
committed
e74db97
refactor(dpp): make PER_KEY_SIGNATURE_ALLOWANCE_BYTES crate-private

bfoss765
and
claude
committed
75435f6

Commits on Aug 30, 2026

refactor(dpp): crate-scope the shielded wire-size calibration surface

bfoss765
and
claude
committed
da932f9