feat(kotlin-sdk): one-time Orchard key shielded-invite API (inviter + claim) - #4313

Open

bfoss765 wants to merge 46 commits into

port/v4.1/shielded-invites

Commits on Aug 6, 2026

feat(kotlin-sdk): upstream one-time Orchard key shielded-invite API from b2 line

bfoss765
and
claude
committed
4f41cdc
feat(kotlin-sdk): add shielded-invite claim side (identity_create_from_one_time_key), reconciled to base identity API

bfoss765
and
claude
committed
aea6505
fix(shielded-invites): FFI RNG panic-safety + zeroize one-time spend key

bfoss765
and
claude
committed
9508ee0
fix(shielded-invites): zeroize the one-time bearer spending key end-to-end (#4204)

bfoss765
and
claude
committed
c327743
fix(shielded-invites): use wait_for_affected_state for the Type-20 claim (#4204)

bfoss765
and
claude
committed
fa6e919
feat(platform-wallet): idempotent one-time-key claim recovery + anchored-note DAO queries (#4204)

bfoss765
and
claude
committed
fd44569
docs(kotlin-sdk): clarify which PR accepted the KPIE emulator residual

bfoss765
and
claude
committed
3746677
fix(shielded-invites): bind claim recovery to evidence the claim created the identity (#4204)
bfoss765
committed
15ff5d2
fix(kotlin-sdk,ffi): CodeRabbit review round — cancellation, key hygiene, message hygiene (#4204)
bfoss765
committed
ed9e925
fix(platform-wallet-ffi)!: move ErrorShieldedInviteAlreadyClaimed 32 -> 37 and mirror it (#4204)

bfoss765
and
claude
committed
a38e5e8
fix(shielded-invites): review-gate round — post-build id reconcile, applied-fallback verdict, terminal code at the FFI, Swift mirror, Orchard secret scrubbing (#4204)

bfoss765
and
claude
committed
5c31cf2
fix(platform-wallet): drop this PR's duplicate optional `rand` dependency

bfoss765
and
claude
committed
a5f4cd8
style(shielded-invites): rustfmt keys.rs ScrubOnDrop wrapping (#4204)

bfoss765
and
claude
committed
0d818e4
fix(platform-wallet): declare rand + log as PR-owned deps (survives base merge) (#4204)

bfoss765
and
claude
committed
4390cd7
fix(platform-wallet): drop the unused log dependency

QuantumExplorer
and
claude
committed
f0b84ee
fix(platform-wallet): durable pending-claim record + tri-state nullifier status for one-time claims

QuantumExplorer
and
claude
committed
c6f4aa7

Commits on Aug 12, 2026

Commits on Aug 13, 2026

style(platform-wallet): factor the claim-guard registry row into type aliases
bfoss765
committed
67758ab
fix(platform-wallet): bind a resumed one-time claim to its stored transition

bfoss765
and
claude
committed
847f0a1
fix(platform-wallet): fence one-time claims against purge at the SQLite boundary

bfoss765
and
claude
committed
41cf07a
docs(platform-wallet): correct the rollback note on a refused claim admission

bfoss765
and
claude
committed
dd73cdb

Commits on Aug 16, 2026

fix(platform-wallet): renew a one-time claim's lease while it is in flight
bfoss765
committed
6931c74

Commits on Aug 17, 2026

fix(platform-wallet): propagate admission-token entropy failures

bfoss765
and
claude
committed
59a00ac
fix(platform-wallet): budget the foreign-key claim scan per attempt (#4306)

bfoss765
and
claude
committed
78e5969

Commits on Aug 19, 2026

Commits on Aug 23, 2026

Merge origin/v4.2-dev into port/v4.1/shielded-invites

bfoss765
and
claude
committed
d1d707f

Commits on Aug 25, 2026

Merge origin/v4.2-dev into port/v4.1/shielded-invites

bfoss765
and
claude
committed
7d9376a

Commits on Aug 26, 2026

fix(platform-wallet): finish shielded removals, gate chargeable claim steps, retain claim recovery records

bfoss765
and
claude
committed
da708c4
Merge origin/v4.2-dev into port/v4.1/shielded-invites

bfoss765
and
claude
committed
347d587
fix(unified-sdk-jni): pass the field name to read_recipient43 at the drain call site

bfoss765
and
claude
committed
400c403

Commits on Aug 27, 2026

fix(platform-wallet): persist deferred purges, fence claims behind wallet removal, panic-guard the claim export

bfoss765
and
claude
committed
9000c1e

Commits on Aug 28, 2026

Merge branch 'v4.2-dev' into port/v4.1/shielded-invites
bfoss765
committed
2120ba4
fix(shielded): dedicated code 48 for the ambiguous one-time-claim panic outcome

bfoss765
and
claude
committed
4cefee1
fix(platform-wallet): bound foreign-scan checkpoint memory, share cached notes on load

bfoss765
and
claude
committed
8bdd047

Commits on Aug 30, 2026

fix(platform-wallet): advance the foreign-scan checkpoint under bounded retention

bfoss765
and
claude
committed
0164909
style(platform-wallet): rustfmt the bounded-retention cache test

bfoss765
and
claude
committed
b13c17c