Class ShieldedController

Rebuilds the note commitment tree from the full on-chain note set and witnesses the given recovered notes against it, producing the spendable notes and the shared anchor required by spend transitions (shieldedTransfer, unshield, shieldedWithdrawal, identityCreateFromShieldedPool).

Pass the complete note set from getShieldedEncryptedNotes as notes (the commitment tree leaves) and the notes you want to spend from recoverNotes as recovered. This keeps the whole spend flow inside the SDK — no need to construct a commitment tree yourself.

Helper function for building and proving shielded (Orchard) transitions. It may be used to create any of 7 shielded transition actions:

1. shield - transparent platform addresses -> pool (deposit)
2. shieldFromAssetLock - asset lock -> pool (deposit)
3. shieldedWithdrawal - pool -> core L1 (spend)
4. unshield - pool -> platform identity balance (spend)
5. shieldedTransfer - pool -> pool (spend)
6. shieldedTransferMulti - pool -> pool, several recipients, each with its own memo (spend)
7. identityCreateFromShieldedPool - pool -> new identity (spend)

Spends require a {SpendableNoteWASM} witnessed against an on-chain anchor.

Retrieves the most recent anchor (note commitment tree root) of the shielded pool.

Retrieves the set of valid anchors (note commitment tree roots) currently accepted by the shielded pool.

Retrieves a batch of shielded encrypted notes from the shielded pool, starting from the given note index.

Returns an array of encrypted notes, each containing the nullifier, note commitment (cmx), encrypted note payload and value commitment (cvNet).

Retrieves the total count of notes (leaves) in the shielded notes commitment tree. Useful as a denominator for shielded sync progress.

Checks the spent status of the given nullifiers in the shielded pool.

Returns an array of statuses, each containing the nullifier and whether it has already been spent.

Retrieves the total balance currently held in the shielded pool.

Set bindings instance of builder Needed for custom builder load, because ShieldedBuilderWASM inits very slow on old hardware

Recovers the notes owned by a wallet from a set of shielded encrypted notes (as returned by getShieldedEncryptedNotes) by trial-decrypting each with the viewing key derived from the seed (ZIP-32 m/32'/coinType'/account'). Only notes addressed to the wallet are returned, each with its global leaf position (index) in the commitment tree.