@orbinum/sdk 0.5.0 → 0.7.0

package/dist/index.d.mts

@@ -3,8 +3,8 @@ import { PolkadotClient, TxFinalizedPayload, PolkadotSigner, TxOptions } from 'p
 export { PolkadotSigner, getSs58AddressInfo } from 'polkadot-api';
 import { getDynamicBuilder } from '@polkadot-api/metadata-builders';
 import { getExtrinsicDecoder } from '@polkadot-api/tx-utils';
-import { ArtifactProvider, ProofResult, DisclosureProofOutput } from '@orbinum/proof-generator';
-export { ArtifactProvider, CircuitType, DisclosureMask as DisclosureFlags, DisclosureProofOutput, ProofResult, WebArtifactProvider, generateDisclosureProof } from '@orbinum/proof-generator';
+import { ArtifactProvider, ProofResult } from '@orbinum/proof-generator';
+export { ArtifactProvider, CircuitType, ProofResult, WebArtifactProvider } from '@orbinum/proof-generator';
 export { AccountId, Blake2256, Keccak256, Storage, u128, u64 } from '@polkadot-api/substrate-bindings';
 export { base58 } from '@scure/base';
 export { getPolkadotSigner } from 'polkadot-api/signer';
@@ -159,12 +159,12 @@ declare class SubstrateClient {
      * const result = await tx.signAndSubmit(signer);
      * ```
      */
-    get unsafe(): polkadot_api.UnsafeApi<unknown>;
+    get unsafe(): polkadot_api.TypedApi<polkadot_api.ChainDefinition, false>;
     /**
      * Wraps pre-built SCALE call bytes (from protocol-core TransactionBuilder)
      * into a PAPI UnsafeTransaction that can be signed and submitted.
      */
-    txFromCallData(callData: Uint8Array): Promise<polkadot_api.UnsafeTransaction<any, string, string, any, Record<string, {
+    txFromCallData(callData: Uint8Array): Promise<polkadot_api.Transaction<any, Record<string, {
         value: any;
         additionalSigned: any;
     } | {
@@ -496,6 +496,8 @@ interface ShieldedCommitment {
     leafIndex: number;
     /** Asset ID as decimal string (e.g. "0"). */
     assetId: string;
+    /** Origin of the commitment: direct shield, output of private transfer, or change from unshield. */
+    source: 'shield' | 'transfer' | 'unshield';
     /** SS58 or 0x-prefixed depositor address, null if not tracked. */
     sender: string | null;
     /** 0x-prefixed encrypted memo hex, null if not present. */
@@ -617,11 +619,56 @@ interface IndexerStats {
         merkleRoot: string | null;
         treeSize: number | null;
     };
+    relayers: {
+        active: number;
+    };
     zkVerifier: {
         total: number;
         successful: number;
     };
 }
+/** A registered relayer stored by the indexer. */
+interface Relayer {
+    evmAddress: string;
+    account: string;
+    active: boolean;
+    registeredAtBlock: number;
+    unregisteredAtBlock: number | null;
+    timestampMs: number | null;
+}
+/** A relay fee accumulation or consumption event stored by the indexer. */
+interface RelayFeeEvent {
+    id: number;
+    relayer: string;
+    assetId: string;
+    /** Amount as decimal string (bigint-safe). */
+    amount: string;
+    eventType: 'accumulated' | 'consumed';
+    blockNumber: number;
+    timestampMs: number | null;
+}
+/** Aggregated relay fee balance per asset for a given relayer. */
+interface RelayFeeSummaryEntry {
+    assetId: string;
+    /** Total accumulated (bigint string). */
+    accumulated: string;
+    /** Total consumed (bigint string). */
+    consumed: string;
+    /** pending = accumulated − consumed (bigint string). */
+    pending: string;
+}
+/** A registered asset stored by the indexer. */
+interface RegisteredAsset {
+    assetId: string;
+    name: string | null;
+    symbol: string | null;
+    decimals: number | null;
+    contractAddress: string | null;
+    /** Whether the asset is verified by the protocol. */
+    verified: boolean;
+    registeredAtBlock: number;
+    timestampMs: number | null;
+}
 /**
  * A single shielded activity event tied to an address.
  * The `kind` discriminant identifies whether it is a shield (commitment),
@@ -771,6 +818,30 @@ declare class IndexerClient {
         page?: number;
         limit?: number;
     }): Promise<PaginatedResult<ShieldedAddressEvent>>;
+    /** Returns a paginated list of relayers. Filter by active status with `active`. */
+    getRelayers(params?: {
+        page?: number;
+        limit?: number;
+        active?: boolean;
+    }): Promise<PaginatedResult<Relayer>>;
+    /** Returns a single relayer by EVM address, or null if not found. */
+    getRelayer(evmAddress: string): Promise<Relayer | null>;
+    /** Returns a paginated list of relay fee events. */
+    getRelayFees(params?: {
+        page?: number;
+        limit?: number;
+        relayer?: string;
+        type?: 'accumulated' | 'consumed';
+    }): Promise<PaginatedResult<RelayFeeEvent>>;
+    /** Returns aggregated relay fee balances per asset for a given relayer account. */
+    getRelayFeesSummary(relayer: string): Promise<RelayFeeSummaryEntry[]>;
+    /** Returns a paginated list of assets registered via register_asset. */
+    getRegisteredAssets(params?: {
+        page?: number;
+        limit?: number;
+    }): Promise<PaginatedResult<RegisteredAsset>>;
+    /** Returns a single registered asset by its ID, or null if not found. */
+    getRegisteredAsset(assetId: string): Promise<RegisteredAsset | null>;
     /** Returns aggregated indexer statistics. */
     getStats(): Promise<IndexerStats>;
     /** Returns true if the indexer health endpoint responds OK. */
@@ -961,7 +1032,7 @@ type ShieldBatchParams = {
  * Parameters for shieldedPool.claimShieldedFees —
  * claims accrued relay fees into the shielded pool.
  *
- * The relayer must supply a ZK disclosure proof that binds the commitment to the
+ * The relayer must supply a ZK value proof that binds the commitment to the
  * exact amount and asset_id, preventing fee inflation attacks.
  */
 type ClaimShieldedFeesParams = {
@@ -979,355 +1050,6 @@ type ClaimShieldedFeesParams = {
     encryptedMemo: Uint8Array;
 };
 
-/**
- * TypeScript types for pallet-shielded-pool extrinsics and supporting structures.
- *
- * Conventions:
- *   - Fixed/bounded byte arrays  → `number[]`  (SCALE-compatible)
- *   - Balances (u128)            → `bigint`
- *   - AccountId                  → `string`    (SS58 or 0x-prefixed 64-char hex)
- *   - Block numbers              → `number`
- *   - Optional fields            → `T | null`
- */
-/**
- * 32-byte SCALE-encoded value (commitment, nullifier, Merkle root, etc.).
- * Stored as little-endian Poseidon field elements on-chain.
- */
-type Bytes32 = number[];
-/**
- * 176-byte encrypted memo (ChaCha20-Poly1305 ECDH).
- * Layout: nonce(12) || ciphertext(132) || tag(16) || ephPk(32) = 176 bytes.
- */
-type Bytes176 = number[];
-/**
- * Disclosure public signals — exactly 256 bytes (ECDH Baby Jubjub layout):
- *   commitment[0..32] | auditor_pk_x[32..64] | auditor_pk_y[64..96]
- *   | epk_x[96..128] | epk_y[128..160] | enc_value[160..192]
- *   | enc_asset_id[192..224] | enc_owner_hash[224..256]
- */
-type DisclosurePublicSignals = number[];
-/**
- * ECDH-encrypted note fields stored on-chain after a successful disclosure.
- * Maps to `EncryptedDisclosureSignals` in Rust.
- */
-type EncryptedDisclosureSignals = {
-    /** Ephemeral public key x-coordinate (Baby Jubjub), 32 bytes LE. */
-    epkX: number[];
-    /** Ephemeral public key y-coordinate (Baby Jubjub), 32 bytes LE. */
-    epkY: number[];
-    /** Encrypted note value (field element LE). 0 if not disclosed. */
-    encValue: number[];
-    /** Encrypted asset ID (field element LE). 0 if not disclosed. */
-    encAssetId: number[];
-    /** Encrypted Poseidon(owner_pubkey) (field element LE). 0 if not disclosed. */
-    encOwnerHash: number[];
-};
-/**
- * Bitmap of which note fields the auditor requires to be disclosed.
- * Maps to `DisclosureFieldMask` in Rust.
- */
-type DisclosureFieldMask = {
-    /** Must disclose the note value (amount in planck). */
-    value: boolean;
-    /** Must disclose the asset ID. */
-    assetId: boolean;
-    /** Must disclose Poseidon(owner_pubkey). */
-    owner: boolean;
-};
-/**
- * A single auditor entry in an audit policy.
- * Maps to `Auditor<AccountId>` in Rust.
- */
-type Auditor = {
-    /** SS58 or 0x-prefixed AccountId of the authorized auditor. */
-    account: string;
-};
-/**
- * A condition that must be satisfied before disclosure is permitted.
- * Maps to `DisclosureCondition` in Rust. Max 10 conditions per policy.
- * Evaluation is OR — a single satisfied condition is enough.
- */
-type DisclosureCondition = {
-    type: 'Always';
-} | {
-    type: 'TimeDelay';
-    afterBlock: number;
-} | {
-    type: 'AmountThreshold';
-    minAmount: bigint;
-};
-/**
- * A single entry in a batch disclosure proof submission.
- * Maps to `BatchDisclosureSubmission<AccountId>` in Rust.
- */
-type BatchDisclosureSubmission = {
-    /** 32-byte commitment (LE). */
-    commitment: Bytes32;
-    /** Groth16 proof bytes — max 256 bytes. */
-    proof: number[];
-    /** 76-byte public signals: commitment(32) | value(8) | asset_id(4) | owner_hash(32). */
-    publicSignals: DisclosurePublicSignals;
-    /** Optional auditor AccountId. Null = voluntary disclosure. */
-    auditor: string | null;
-};
-/**
- * A single shield operation for use in `shield_batch`.
- */
-type ShieldOperation = {
-    assetId: number;
-    amount: bigint;
-    /** 32-byte Poseidon commitment (LE). */
-    commitment: Bytes32;
-    /** Encrypted memo bytes — exactly 104 bytes. */
-    encryptedMemo: number[];
-};
-/**
- * Call index 0 — `shield` (Signed origin)
- * Deposits a public token amount into the shielded pool.
- */
-type ShieldArgs = {
-    assetId: number;
-    amount: bigint;
-    /** 32-byte Poseidon commitment (LE). */
-    commitment: Bytes32;
-    /** Encrypted memo — exactly 104 bytes. */
-    encryptedMemo: number[];
-};
-/**
- * Call index 12 — `shield_batch` (Signed origin)
- * Deposits multiple notes in a single extrinsic — max 20 operations.
- */
-type ShieldBatchArgs = {
-    operations: ShieldOperation[];
-};
-/** Input note consumed by a private transfer (SCALE wire format). */
-type RawTransferInput = {
-    /** 32-byte Poseidon nullifier (LE). */
-    nullifier: Bytes32;
-    /** 32-byte Poseidon commitment (LE). */
-    commitment: Bytes32;
-};
-/** Output note created by a private transfer (SCALE wire format). */
-type RawTransferOutput = {
-    /** 32-byte Poseidon commitment (LE). */
-    commitment: Bytes32;
-    /** Encrypted memo — exactly 104 bytes. */
-    memo: number[];
-};
-/**
- * Call index 1 — `private_transfer` (Unsigned/gasless origin)
- * Transfers value between notes without revealing sender, recipient or amount.
- * Fee is embedded in the ZK proof: input_sum == output_sum + fee.
- * The fee is paid to the block author (validator) by the pallet runtime.
- */
-type PrivateTransferArgs = {
-    /** Groth16 proof bytes — max 512 bytes. */
-    proof: number[];
-    /** 32-byte Merkle root (LE). */
-    merkleRoot: Bytes32;
-    nullifiers: RawTransferInput[];
-    outputs: RawTransferOutput[];
-    encryptedMemos: number[][];
-    /** Asset ID being transferred (public input of the proof). */
-    assetId: number;
-    /** Gasless fee in planck. Paid to the block author (validator). */
-    fee: bigint;
-};
-/**
- * Call index 2 — `unshield` (Unsigned/gasless origin)
- * Withdraws a note from the pool to a public account.
- * Fee is embedded in the ZK proof: note_value == amount + fee + changeValue.
- */
-type UnshieldArgs = {
-    /** Groth16 proof bytes — max 512 bytes. */
-    proof: number[];
-    /** 32-byte Merkle root (LE). */
-    merkleRoot: Bytes32;
-    /** 32-byte nullifier of the spent note (LE). */
-    nullifier: Bytes32;
-    assetId: number;
-    /** Net amount recipient receives (planck). */
-    amount: bigint;
-    /** SS58 or 0x-prefixed AccountId of the recipient. */
-    recipient: string;
-    /** Gasless fee in planck. */
-    fee: bigint;
-    /**
-     * 32-byte change note commitment (LE). All zeros for total unshield.
-     * Must equal NoteCommitment(changeValue, assetId, changeOwnerPk, changeBlinding)
-     * when changeValue > 0 — enforced by the ZK circuit.
-     */
-    changeCommitment: Bytes32;
-    /**
-     * Encrypted memo for the change note (176 bytes, empty for total unshield).
-     * Enables note recovery via blockchain scan for partial unshield.
-     */
-    changeEncryptedMemo?: Bytes176;
-};
-/**
- * Call index 4 — `set_audit_policy` (Signed origin)
- * Registers or replaces the caller's audit policy for selective disclosure.
- */
-type SetAuditPolicyArgs = {
-    /** Up to 10 authorized auditors. */
-    auditors: Auditor[];
-    /** Up to 10 disclosure conditions. */
-    conditions: DisclosureCondition[];
-    /** Minimum blocks between disclosures to the same auditor. Null = no limit. */
-    maxFrequency: number | null;
-    /** Block after which the policy expires. Null = no expiry. */
-    validUntil: number | null;
-};
-/**
- * Call index 5 — `request_disclosure` (Signed origin)
- * Auditor requests selective disclosure from a target account for a specific commitment.
- */
-type RequestDisclosureArgs = {
-    /** AccountId of the disclosure target. */
-    target: string;
-    /** 32-byte commitment the auditor wants disclosed (LE). */
-    commitment: number[];
-    /** Which note fields must be revealed. */
-    requiredFields: DisclosureFieldMask;
-    /** Human-readable request reason — max 256 bytes UTF-8. */
-    reason: string;
-    /** Auditor's Baby Jubjub public key x-coordinate (32 bytes LE). */
-    auditorBjjPkX: number[];
-    /** Auditor's Baby Jubjub public key y-coordinate (32 bytes LE). */
-    auditorBjjPkY: number[];
-};
-/**
- * Call index 6 — `disclose` (Signed origin)
- * Submit a Groth16 disclosure proof for a commitment.
- */
-type DiscloseArgs = {
-    /** 32-byte note commitment to disclose (LE). */
-    commitment: Bytes32;
-    /** Groth16 proof bytes — max 128 bytes. */
-    proofBytes: number[];
-    /**
-     * 256-byte public signals (ECDH Baby Jubjub layout):
-     *   commitment[0..32] | auditor_pk_x[32..64] | auditor_pk_y[64..96]
-     *   | epk_x[96..128] | epk_y[128..160] | enc_value[160..192]
-     *   | enc_asset_id[192..224] | enc_owner_hash[224..256]
-     * Use `buildDisclosurePublicSignals()` to construct this.
-     */
-    publicSignals: DisclosurePublicSignals;
-    /** Auditor AccountId — required (must match the DisclosureRequest). */
-    auditor: string;
-};
-/**
- * Call index 7 — `reject_disclosure` (Signed origin)
- * Disclosure target rejects a pending request from an auditor for a specific commitment.
- */
-type RejectDisclosureArgs = {
-    /** AccountId of the auditor whose request is rejected. */
-    auditor: string;
-    /** 32-byte commitment of the request being rejected (LE). */
-    commitment: number[];
-    /** Rejection reason — max 256 bytes UTF-8. */
-    reason: string;
-};
-/**
- * Call index 13 — `batch_submit_disclosure_proofs` (Signed origin)
- * Submit up to 10 disclosure proofs in one extrinsic.
- */
-type BatchSubmitDisclosureProofsArgs = {
-    submissions: BatchDisclosureSubmission[];
-};
-/**
- * Call index 9 — `register_asset` (Root origin)
- * Registers a new asset in the shielded pool registry.
- */
-type RegisterAssetArgs = {
-    /** Asset name — max 64 bytes UTF-8. */
-    name: string;
-    /** Asset ticker symbol, e.g. "USDT" — max 16 bytes UTF-8. */
-    symbol: string;
-    /** Token decimal precision (e.g. 18 for ORB, 6 for USDT). */
-    decimals: number;
-    /** 20-byte EVM contract address for ERC-20 assets. Null = native asset. */
-    contractAddress: number[] | null;
-};
-/**
- * Call index 10 — `verify_asset` (Root origin)
- * Marks a registered asset as verified, enabling shielding.
- */
-type VerifyAssetArgs = {
-    assetId: number;
-};
-/**
- * Call index 11 — `unverify_asset` (Root origin)
- * Removes the verified status from an asset, disabling new shield operations.
- */
-type UnverifyAssetArgs = {
-    assetId: number;
-};
-/**
- * Call index 14 — `prune_expired_request` (Signed origin)
- * Cleans up a disclosure request that has passed its expiration block.
- */
-type PruneExpiredRequestArgs = {
-    /** AccountId of the disclosure target. */
-    target: string;
-    /** AccountId of the auditor. */
-    auditor: string;
-    /** 32-byte commitment of the expired request (LE). */
-    commitment: number[];
-};
-/**
- * Call index 15 — `revoke_disclosure_record` (Signed origin)
- * Allows the note owner to revoke a previously submitted disclosure record.
- */
-type RevokeDisclosureRecordArgs = {
-    /** 32-byte commitment whose disclosure record should be revoked (LE). */
-    commitment: Bytes32;
-};
-/** All pallet-shielded-pool calls as a discriminated union. */
-type ShieldedPoolCall = {
-    type: 'shield';
-    args: ShieldArgs;
-} | {
-    type: 'shieldBatch';
-    args: ShieldBatchArgs;
-} | {
-    type: 'privateTransfer';
-    args: PrivateTransferArgs;
-} | {
-    type: 'unshield';
-    args: UnshieldArgs;
-} | {
-    type: 'setAuditPolicy';
-    args: SetAuditPolicyArgs;
-} | {
-    type: 'requestDisclosure';
-    args: RequestDisclosureArgs;
-} | {
-    type: 'disclose';
-    args: DiscloseArgs;
-} | {
-    type: 'rejectDisclosure';
-    args: RejectDisclosureArgs;
-} | {
-    type: 'batchSubmitDisclosureProofs';
-    args: BatchSubmitDisclosureProofsArgs;
-} | {
-    type: 'registerAsset';
-    args: RegisterAssetArgs;
-} | {
-    type: 'verifyAsset';
-    args: VerifyAssetArgs;
-} | {
-    type: 'unverifyAsset';
-    args: UnverifyAssetArgs;
-} | {
-    type: 'pruneExpiredRequest';
-    args: PruneExpiredRequestArgs;
-} | {
-    type: 'revokeDisclosureRecord';
-    args: RevokeDisclosureRecordArgs;
-};
-
 /**
  * High-level module for Orbinum shielded-pool operations.
  *
@@ -1370,43 +1092,11 @@ declare class ShieldedPoolModule {
     /**
      * Claims accrued relay fees into the shielded pool.
      * This is a SIGNED transaction — the relayer must sign it with their wallet.
-     * Before calling this, generate a ZK disclosure proof with generateFeeClaimProof().
+     * Before calling this, generate a ZK value proof with generateFeeClaimProof() (not yet implemented).
      *
      * Extrinsic: shieldedPool.claim_shielded_fees(commitment, amount, asset_id, memo, proof, public_signals)
      */
     claimShieldedFees(params: ClaimShieldedFeesParams, signer: PolkadotSigner, txOptions?: UnsafeTxOptions): Promise<TxResult>;
-    /**
-     * Requests a selective disclosure from a target account for a specific commitment.
-     * The auditor's Baby Jubjub public key is included so the note owner knows
-     * which key to encrypt to when generating the proof.
-     * Extrinsic: shieldedPool.request_disclosure(target, commitment, required_fields,
-     *                                             reason, auditor_bjj_pk_x, auditor_bjj_pk_y)
-     */
-    requestDisclosure(params: RequestDisclosureArgs, signer: PolkadotSigner, txOptions?: UnsafeTxOptions): Promise<TxResult>;
-    /**
-     * Submits a Groth16 ZK disclosure proof for a note commitment.
-     * The proof reveals the selected fields (value, asset_id, owner_hash) on-chain.
-     * Use generateDisclosureProof() + buildDisclosurePublicSignals() before calling this.
-     * Extrinsic: shieldedPool.disclose(commitment, proof_bytes, public_signals, auditor)
-     */
-    disclose(params: DiscloseArgs, signer: PolkadotSigner, txOptions?: UnsafeTxOptions): Promise<TxResult>;
-    /**
-     * Rejects a pending disclosure request from an auditor for a specific commitment.
-     * Extrinsic: shieldedPool.reject_disclosure(auditor, commitment, reason)
-     */
-    rejectDisclosure(params: RejectDisclosureArgs, signer: PolkadotSigner, txOptions?: UnsafeTxOptions): Promise<TxResult>;
-    /**
-     * Cleans up a disclosure request that has passed its expiration block.
-     * Permissionless — any account can prune expired requests.
-     * Extrinsic: shieldedPool.prune_expired_request(target, auditor, commitment)
-     */
-    pruneExpiredRequest(params: PruneExpiredRequestArgs, signer: PolkadotSigner, txOptions?: UnsafeTxOptions): Promise<TxResult>;
-    /**
-     * Revokes a previously submitted voluntary disclosure record.
-     * Only applies to self-disclosures (auditor = None). Auditor-requested records are permanent.
-     * Extrinsic: shieldedPool.revoke_disclosure_record(commitment)
-     */
-    revokeDisclosureRecord(params: RevokeDisclosureRecordArgs, signer: PolkadotSigner, txOptions?: UnsafeTxOptions): Promise<TxResult>;
 }
 
 /**
@@ -1656,6 +1346,20 @@ declare class AccountMappingModule {
     dispatchAsLinkedAccount(params: DispatchAsLinkedParams, signer: PolkadotSigner): Promise<TxResult>;
 }
 
+/**
+ * Typed client for general chain state queries under the `chain_*` namespace.
+ */
+declare class ChainModule {
+    private readonly substrate;
+    constructor(substrate: SubstrateClient);
+    /**
+     * Returns `true` if the given SS58 account is an active Aura validator.
+     *
+     * Reads `pallet_aura::Authorities` directly from storage at the best known block.
+     */
+    isValidator(ss58Address: string): Promise<boolean>;
+}
+
 type RpcV2MerkleProof = {
     path: string[];
     leafIndex: number;
@@ -1811,70 +1515,6 @@ interface KnownPrecompileInfo {
     /** Map from 4-byte hex selector (no 0x prefix) to function signature. */
     functions: Record<string, string>;
 }
-/**
- * Parameters for `requestDisclosure`.
- *
- * The EVM caller of this transaction is treated as the **auditor** on-chain.
- */
-type RequestDisclosureParams = {
-    /** AccountId32 of the note owner (target), as a 0x-prefixed 64-hex-char string. */
-    target: string;
-    /** Note commitment, as a 0x-prefixed 64-hex-char string. */
-    commitment: string;
-    /** Whether to request disclosure of the note value. */
-    disclosedValue: boolean;
-    /** Whether to request disclosure of the asset ID. */
-    disclosedAssetId: boolean;
-    /** Whether to request disclosure of the note owner hash. */
-    disclosedOwner: boolean;
-    /** Human-readable reason (UTF-8, max 256 bytes). */
-    reason: string;
-    /** Auditor's Baby Jubjub public key X coordinate (32 bytes). */
-    auditorBjjPkX: Uint8Array;
-    /** Auditor's Baby Jubjub public key Y coordinate (32 bytes). */
-    auditorBjjPkY: Uint8Array;
-};
-/**
- * Parameters for `disclose`.
- *
- * The EVM caller of this transaction is treated as the **note owner** on-chain.
- */
-type DiscloseParams = {
-    /** Note commitment, as a 0x-prefixed 64-hex-char string. */
-    commitment: string;
-    /** 128-byte serialised Groth16 proof. */
-    proofBytes: Uint8Array;
-    /** 256-byte ECDH-encrypted disclosure signals from the circuit. */
-    publicSignals: Uint8Array;
-    /** AccountId32 of the auditor, as a 0x-prefixed 64-hex-char string. */
-    auditor: string;
-};
-/**
- * Parameters for `rejectDisclosure`.
- *
- * The EVM caller of this transaction is treated as the **target** (note owner) on-chain.
- */
-type RejectDisclosureParams = {
-    /** AccountId32 of the auditor who sent the request, as a 0x-prefixed 64-hex-char string. */
-    auditor: string;
-    /** Note commitment, as a 0x-prefixed 64-hex-char string. */
-    commitment: string;
-    /** Human-readable rejection reason (UTF-8, max 256 bytes). */
-    reason: string;
-};
-/**
- * Parameters for `pruneExpiredRequest`.
- *
- * Permissionless: any EVM caller can prune an expired disclosure request.
- */
-type PruneExpiredRequestParams = {
-    /** AccountId32 of the note owner, as a 0x-prefixed 64-hex-char string. */
-    target: string;
-    /** AccountId32 of the auditor, as a 0x-prefixed 64-hex-char string. */
-    auditor: string;
-    /** Note commitment, as a 0x-prefixed 64-hex-char string. */
-    commitment: string;
-};
 
 /**
  * Bindings for the `ShieldedPoolPrecompile` at address `0x...0801`.
@@ -1960,66 +1600,41 @@ declare class ShieldedPoolPrecompile {
     estimateUnshieldGas(params: UnshieldParams, from: string): Promise<bigint>;
     /**
      * Returns the ABI-encoded calldata for
-     * `requestDisclosure(bytes32,bytes32,bool,bool,bool,bytes,bytes32,bytes32)`.
-     *
-     * The **EVM caller** of the resulting transaction is treated as the **auditor**
-     * on-chain. No explicit auditor argument is needed.
-     */
-    buildRequestDisclosureCalldata(params: RequestDisclosureParams): string;
-    /**
-     * Requests selective disclosure of a specific commitment.
-     *
-     * The EVM caller is recorded as the auditor on-chain. The note owner can
-     * respond with `disclose()` or reject with `rejectDisclosure()`.
-     *
-     * Extrinsic: `shieldedPool.requestDisclosure(target, commitment, requiredFields, reason, bjjPkX, bjjPkY)`
-     */
-    requestDisclosure(params: RequestDisclosureParams, signer: EvmSigner): Promise<string>;
-    /**
-     * Returns the ABI-encoded calldata for `disclose(bytes32,bytes,bytes,bytes32)`.
-     *
-     * The **EVM caller** is treated as the **note owner** on-chain.
-     * `params.proofBytes` must be exactly 128 bytes; `params.publicSignals` exactly 256 bytes.
-     */
-    buildDiscloseCalldata(params: DiscloseParams): string;
-    /**
-     * Submits a selective disclosure proof for a commitment.
+     * `claimShieldedFees(bytes32,uint256,uint32,bytes,bytes,bytes)`.
      *
-     * The EVM caller is treated as the note owner on-chain. The Groth16 proof is
-     * verified by the runtime; on success the encrypted signals are stored for
-     * the auditor to decrypt off-chain.
+     * ABI layout (params after selector):
+     * - `commitment`    — bytes32 (fixed)
+     * - `amount`        — uint256 (fixed)
+     * - `asset_id`      — uint32  (fixed, right-aligned)
+     * - `memo`          — bytes   (dynamic)
+     * - `proof`         — bytes   (dynamic, 128 bytes Groth16)
+     * - `publicSignals` — bytes   (dynamic, 76 bytes)
      *
-     * Extrinsic: `shieldedPool.disclose(commitment, proofBytes, publicSignals, auditor)`
+     * The validator identity is derived from `msg.sender` in the precompile —
+     * do NOT include it in the calldata.
      */
-    disclose(params: DiscloseParams, signer: EvmSigner): Promise<string>;
+    buildClaimShieldedFeesCalldata(params: ClaimShieldedFeesParams): string;
     /**
-     * Returns the ABI-encoded calldata for `rejectDisclosure(bytes32,bytes32,bytes)`.
+     * Claims accumulated relay fees as a private shielded note.
      *
-     * The **EVM caller** is treated as the **target** (note owner) on-chain.
-     */
-    buildRejectDisclosureCalldata(params: RejectDisclosureParams): string;
-    /**
-     * Rejects a pending disclosure request.
+     * This extrinsic is for **validators/relayers** who have accrued fees in
+     * `pallet-relayer` and want to receive them privately inside the shielded pool
+     * instead of as a public balance credit.
      *
-     * The EVM caller is treated as the note owner (target) on-chain.
+     * The ZK `value_proof` binds `commitment` to `(amount, assetId, ownerPk, blinding)`
+     * so the runtime can verify the note encodes exactly the claimed fee amount,
+     * preventing a malicious relayer from inflating the withdrawal.
      *
-     * Extrinsic: `shieldedPool.rejectDisclosure(auditor, commitment, reason)`
-     */
-    rejectDisclosure(params: RejectDisclosureParams, signer: EvmSigner): Promise<string>;
-    /**
-     * Returns the ABI-encoded calldata for `pruneExpiredRequest(bytes32,bytes32,bytes32)`.
+     * The `msg.sender` EVM address is used as the validator identity; it must match
+     * the address that has pending relay fees in `pallet-relayer`.
      *
-     * Permissionless: any EVM caller can prune an expired request.
+     * Extrinsic: `shieldedPool.claim_shielded_fees(commitment, amount, assetId, memo, proof, publicSignals)`
      */
-    buildPruneExpiredRequestCalldata(params: PruneExpiredRequestParams): string;
+    claimShieldedFees(params: ClaimShieldedFeesParams, signer: EvmSigner): Promise<string>;
     /**
-     * Removes an expired disclosure request from storage.
-     *
-     * Permissionless: any EVM account can call this once `expires_at` has passed.
-     *
-     * Extrinsic: `shieldedPool.pruneExpiredRequest(target, auditor, commitment)`
+     * Estimates the EVM gas for a `claimShieldedFees` call.
      */
-    pruneExpiredRequest(params: PruneExpiredRequestParams, signer: EvmSigner): Promise<string>;
+    estimateClaimShieldedFeesGas(params: ClaimShieldedFeesParams, from: string): Promise<bigint>;
 }
 
 /**
@@ -2295,6 +1910,8 @@ declare class OrbinumClient {
     readonly accountMapping: AccountMappingModule;
     /** Typed access to `privacy_*` custom RPC endpoints. */
     readonly privacy: PrivacyModule;
+    /** Typed access to general chain state via `chain_*` custom RPC endpoints. */
+    readonly chain: ChainModule;
     /** Typed access to `zkVerifier_*` custom RPC endpoints. */
     readonly zkVerifier: ZkVerifierModule;
     /** Typed access to `relayer_*` RPC endpoints (registry lookup and pending fee queries). */
@@ -2654,6 +2271,71 @@ declare function tryDecryptNoteVerbose(commitment: ScanCommitment, viewingSecret
     reason?: string;
 };
 
+/**
+ * NoteDisclosure
+ *
+ * Utilities for creating and decoding single-note disclosure keys.
+ * A disclosure key is a compact, shareable string encoding the plaintext
+ * preimage of one specific note commitment. Anyone with the key can verify
+ * the note's value and asset — without gaining any spending capability.
+ *
+ * Format: "orbdisc:<base64url(JSON)>"
+ *
+ * Revealed by the key:
+ *   - value, assetId, ownerPk (BJJ Ax — not linked to EVM address), blinding
+ *   - commitment (cryptographically verified via Poseidon4)
+ *
+ * NOT revealed by the key:
+ *   - spendingKey, nullifier, viewingSecretKey
+ *   - any other note belonging to the same user
+ *
+ * Security: the commitment verification in decodeNoteDisclosureKey is a
+ * cryptographic proof-of-knowledge of the preimage. A forged key (mismatched
+ * preimage) will fail verification and return null.
+ */
+
+/**
+ * Decoded and cryptographically verified contents of a note disclosure key.
+ *
+ * The `commitment` field is guaranteed to equal Poseidon4(value, assetId, ownerPk, blinding)
+ * — this is verified by decodeNoteDisclosureKey before returning.
+ */
+interface NoteDisclosure {
+    /** Poseidon4(value, assetId, ownerPk, blinding) — matches the on-chain commitment. */
+    commitment: bigint;
+    /** Note value in the smallest unit (e.g. attoORB). */
+    value: bigint;
+    /** Asset ID as registered in the shielded pool. */
+    assetId: bigint;
+    /** BabyJubJub Ax coordinate of the note owner (not directly linkable to an EVM address). */
+    ownerPk: bigint;
+    /** Random blinding scalar chosen at note creation. */
+    blinding: bigint;
+}
+/**
+ * Encodes a single ZkNote's plaintext preimage into a shareable disclosure key.
+ *
+ * The key does NOT include the spendingKey or nullifier. It is safe to share
+ * with any party that should be able to verify the note's value and asset
+ * without being able to spend it.
+ *
+ * @param note  A fully populated ZkNote (as returned by the vault / rescan).
+ * @returns     A "orbdisc:…" string suitable for copy-paste or QR encoding.
+ */
+declare function createNoteDisclosureKey(note: ZkNote): string;
+/**
+ * Decodes and cryptographically verifies a note disclosure key.
+ *
+ * Verification: recomputes Poseidon4(value, assetId, ownerPk, blinding) and
+ * asserts it equals the embedded commitment. This ensures the preimage is
+ * consistent and cannot be tampered with.
+ *
+ * @param key  A "orbdisc:…" string produced by createNoteDisclosureKey.
+ * @returns    The verified NoteDisclosure, or null if the key is malformed,
+ *             has an unknown version, or fails Poseidon4 verification.
+ */
+declare function decodeNoteDisclosureKey(key: string): NoteDisclosure | null;
+
 /** A single input note for a private transfer. */
 interface TransferInputNote {
     nullifier: bigint;
@@ -2721,95 +2403,6 @@ declare function selectNotes(notes: ZkNote[], needed: bigint): [ZkNote, ZkNote |
  */
 declare function buildDummyTransferInput(assetId: bigint): TransferInputNote;
 
-/**
- * Selective disclosure helpers for the Orbinum shielded pool (ECDH Baby Jubjub protocol).
- *
- * ## Public signals layout (256 bytes on-chain)
- * ```
- *  [0..32]   commitment      — Poseidon4(value, asset_id, owner_pk, blinding) LE
- *  [32..64]  auditor_pk_x   — Baby Jubjub pk_A.x LE
- *  [64..96]  auditor_pk_y   — Baby Jubjub pk_A.y LE
- *  [96..128] epk_x          — r·G x-coordinate LE
- *  [128..160] epk_y         — r·G y-coordinate LE
- *  [160..192] enc_value     — masked_value + k0
- *  [192..224] enc_asset_id  — masked_asset_id + k1
- *  [224..256] enc_owner_hash — masked_owner_hash + k2
- * ```
- *
- * The runtime verifies the Groth16 proof against the ciphertext.
- * It never decrypts. Decryption is off-chain with the auditor's BJJ sk.
- */
-
-/**
- * Derives a Baby Jubjub keypair deterministically from a Substrate signing key.
- *
- * ```
- * bjj_sk = Poseidon(substrate_signing_key)   // one-way; does not expose the substrate key
- * bjj_pk = bjj_sk · G                         // Baby Jubjub base point
- * ```
- *
- * The `bjj_pk` is registered in `DisclosureRequest` on-chain so the note owner
- * knows which key to encrypt to.
- *
- * @param substrateSigningKey - Raw 32-byte Substrate signing key (sr25519 or ed25519).
- * @returns `{ sk, pkX, pkY }` — Baby Jubjub secret scalar and public key coordinates.
- */
-declare function deriveBabyJubjubKeypair(substrateSigningKey: Uint8Array): {
-    sk: bigint;
-    pkX: bigint;
-    pkY: bigint;
-};
-/**
- * Packs the 8 public signals into the 256-byte buffer for the `disclose` extrinsic.
- *
- * Layout:
- * ```
- *  [0..32]   commitment      — 32-byte LE (0x-hex string)
- *  [32..64]  auditor_pk_x   — 32-byte LE bigint
- *  [64..96]  auditor_pk_y   — 32-byte LE bigint
- *  [96..128] epk_x          — from proofOutput.encryptedData.epkX
- *  [128..160] epk_y         — from proofOutput.encryptedData.epkY
- *  [160..192] enc_value     — from proofOutput.encryptedData.encValue
- *  [192..224] enc_asset_id  — from proofOutput.encryptedData.encAssetId
- *  [224..256] enc_owner_hash — from proofOutput.encryptedData.encOwnerHash
- * ```
- *
- * @param commitment   - 0x-prefixed 32-byte hex commitment.
- * @param auditorPkX   - Auditor's Baby Jubjub pk x-coordinate (bigint LE).
- * @param auditorPkY   - Auditor's Baby Jubjub pk y-coordinate (bigint LE).
- * @param proofOutput  - Output of `generateDisclosureProof`.
- * @returns `number[]` — 256 bytes, SCALE-compatible.
- */
-declare function buildDisclosurePublicSignals(commitment: string, auditorPkX: bigint, auditorPkY: bigint, proofOutput: DisclosureProofOutput): number[];
-/**
- * Decrypts encrypted disclosure signals using the auditor's Baby Jubjub secret key.
- *
- * ```
- * shared = sk_A · epk              (ECDH — Baby Jubjub scalar mult)
- * k_i = Poseidon(shared.x, shared.y, i)
- * plaintext_i = (enc_i - k_i + BN254_R) % BN254_R
- * ```
- *
- * Only the intended auditor (holder of `auditorBjjSk`) can decrypt.
- * This runs entirely off-chain — the runtime never sees or derives `sk`.
- *
- * @param auditorBjjSk - Auditor's Baby Jubjub secret scalar (from `deriveBabyJubjubKeypair`).
- * @param enc          - Encrypted signals from `DisclosureRecord.signals` (as bigints).
- * @returns `{ value, assetId, ownerHash }` — decrypted field elements.
- *   If a field was not disclosed, its ciphertext is `k_i` and the plaintext decrypts to `0`.
- */
-declare function decryptDisclosureSignals(auditorBjjSk: bigint, enc: {
-    epkX: bigint;
-    epkY: bigint;
-    encValue: bigint;
-    encAssetId: bigint;
-    encOwnerHash: bigint;
-}): {
-    value: bigint;
-    assetId: bigint;
-    ownerHash: bigint;
-};
-
 /**
  * BN254 (alt_bn128) scalar field prime.
  *
@@ -3262,7 +2855,7 @@ interface FeeClaimProofOutput {
     publicSignals: number[];
 }
 /**
- * Generate a Groth16 fee-claim proof using the disclosure circuit.
+ * Generate a Groth16 fee-claim proof using the value_proof circuit.
  *
  * The resulting proof convinces the pallet that:
  *   1. The caller knows (amount, assetId, ownerPubkey, blinding) such that
@@ -3274,12 +2867,6 @@ interface FeeClaimProofOutput {
  * @param options.provider - Override the artifact provider (default: CDN).
  * @param options.verbose  - Log proof generation steps to console.
  */
-/**
- * @deprecated Tech debt — `fees.rs` uses the OLD 76-byte plaintext disclosure layout,
- * but the disclosure circuit now uses ECDH encryption (256-byte layout).
- * This function compiles but the resulting proof WILL BE REJECTED by the pallet.
- * See `frame/shielded-pool/src/operations/fees.rs` comment for resolution options A/B/C.
- */
 declare function generateFeeClaimProof(inputs: FeeClaimProofInputs, options?: {
     provider?: ArtifactProvider;
     verbose?: boolean;
@@ -3412,72 +2999,6 @@ type MerkleRootUpdatedEvent = {
     /** Total number of leaves after the update. */
     treeSize: number;
 };
-/**
- * Emitted by `set_audit_policy()` when an account sets or updates its audit policy.
- * Rust variant: `AuditPolicySet { account, version }`
- */
-type AuditPolicySetEvent = {
-    /** SS58 AccountId of the policy owner. */
-    account: string;
-    /** Policy version number (monotonically increasing). */
-    version: number;
-};
-/**
- * Emitted by `disclose()` when a note is disclosed.
- * Rust variant: `Disclosed { who, commitment, auditor }`
- */
-type DisclosedEvent = {
-    /** SS58 AccountId of the discloser. */
-    who: string;
-    /** 0x-prefixed 32-byte commitment of the disclosed note. */
-    commitment: string;
-    /** SS58 AccountId of the auditor, or null for voluntary disclosure. */
-    auditor: string | null;
-};
-/**
- * Emitted by `request_disclosure()` when an auditor requests a note disclosure.
- * Rust variant: `DisclosureRequested { target, auditor, reason }`
- */
-type DisclosureRequestedEvent = {
-    /** SS58 AccountId of the note owner (disclosure target). */
-    target: string;
-    /** SS58 AccountId of the requesting auditor. */
-    auditor: string;
-    /** Reason string (max 256 bytes, UTF-8). */
-    reason: string;
-};
-/**
- * Emitted by `reject_disclosure()` when a note owner rejects a disclosure request.
- * Rust variant: `DisclosureRejected { target, auditor, reason }`
- */
-type DisclosureRejectedEvent = {
-    /** SS58 AccountId of the note owner. */
-    target: string;
-    /** SS58 AccountId of the auditor whose request was rejected. */
-    auditor: string;
-    /** Rejection reason string (max 256 bytes, UTF-8). */
-    reason: string;
-};
-/**
- * Emitted when a pending disclosure request expires (on_finalize pruning).
- * Rust variant: `DisclosureRequestExpired { target, auditor }`
- */
-type DisclosureRequestExpiredEvent = {
-    /** SS58 AccountId of the note owner. */
-    target: string;
-    /** SS58 AccountId of the auditor. */
-    auditor: string;
-};
-/**
- * Emitted by `revoke_disclosure_record()` when an account revokes a previous disclosure.
- * Rust variant: `DisclosureRecordRevoked { who, commitment }`
- */
-type DisclosureRecordRevokedEvent = {
-    /** SS58 AccountId of the note owner. */
-    who: string;
-    /** 0x-prefixed 32-byte commitment of the revoked note. */
-    commitment: string;
-};
 /**
  * Emitted by `register_asset()` when a new asset is registered in the pool.
  * Rust variant: `AssetRegistered { asset_id }`
@@ -3515,24 +3036,6 @@ type ShieldedPoolEvent = {
 } | {
     type: 'MerkleRootUpdated';
     data: MerkleRootUpdatedEvent;
-} | {
-    type: 'AuditPolicySet';
-    data: AuditPolicySetEvent;
-} | {
-    type: 'Disclosed';
-    data: DisclosedEvent;
-} | {
-    type: 'DisclosureRequested';
-    data: DisclosureRequestedEvent;
-} | {
-    type: 'DisclosureRejected';
-    data: DisclosureRejectedEvent;
-} | {
-    type: 'DisclosureRequestExpired';
-    data: DisclosureRequestExpiredEvent;
-} | {
-    type: 'DisclosureRecordRevoked';
-    data: DisclosureRecordRevokedEvent;
 } | {
     type: 'AssetRegistered';
     data: AssetRegisteredEvent;
@@ -3563,14 +3066,14 @@ type CircuitId = (typeof CircuitId)[keyof typeof CircuitId];
  * |--------------|-------|---------------------------------|
  * | Transfer     | 1     | 2-in-2-out private transfer     |
  * | Unshield     | 2     | Withdrawal from the pool        |
- * | Disclosure   | 3     | Selective disclosure            |
- * | PrivateLink  | 4     | Private chain-link proof        |
+ * | ValueProof   | 4     | Note value binding (fee-claim)  |
+ * | PrivateLink  | 5     | Private chain-link proof        |
  */
 declare const CircuitId: {
     readonly Transfer: 1;
     readonly Unshield: 2;
-    readonly Disclosure: 3;
-    readonly PrivateLink: 4;
+    readonly ValueProof: 4;
+    readonly PrivateLink: 5;
 };
 /**
  * A single verification key registration entry used in batch operations.
@@ -3625,7 +3128,7 @@ type VerifyProofArgs = {
      * Number and meaning of inputs depends on the circuit:
      * - Transfer:    [merkle_root, nullifier_0, nullifier_1, commitment_0, commitment_1]
      * - Unshield:    [merkle_root, nullifier, amount_fe, recipient_hash, asset_id_fe]
-     * - Disclosure:  [commitment, revealed_value_fe, revealed_asset_id_fe, owner_hash]
+     * - ValueProof:  [commitment, value, asset_id, owner_hash]
      * - PrivateLink: [commitment, call_hash_fe]
      */
     publicInputs: number[][];
@@ -4195,6 +3698,172 @@ type AccountMappingEvent = {
     data: PrivateLinkDispatchExecutedEvent;
 };
 
+/**
+ * TypeScript types for pallet-shielded-pool extrinsics and supporting structures.
+ *
+ * Conventions:
+ *   - Fixed/bounded byte arrays  → `number[]`  (SCALE-compatible)
+ *   - Balances (u128)            → `bigint`
+ *   - AccountId                  → `string`    (SS58 or 0x-prefixed 64-char hex)
+ *   - Block numbers              → `number`
+ *   - Optional fields            → `T | null`
+ */
+/**
+ * 32-byte SCALE-encoded value (commitment, nullifier, Merkle root, etc.).
+ * Stored as little-endian Poseidon field elements on-chain.
+ */
+type Bytes32 = number[];
+/**
+ * 176-byte encrypted memo (ChaCha20-Poly1305 ECDH).
+ * Layout: nonce(12) || ciphertext(132) || tag(16) || ephPk(32) = 176 bytes.
+ */
+type Bytes176 = number[];
+/**
+ * A single shield operation for use in `shield_batch`.
+ */
+type ShieldOperation = {
+    assetId: number;
+    amount: bigint;
+    /** 32-byte Poseidon commitment (LE). */
+    commitment: Bytes32;
+    /** Encrypted memo bytes — exactly 104 bytes. */
+    encryptedMemo: number[];
+};
+/**
+ * Call index 0 — `shield` (Signed origin)
+ * Deposits a public token amount into the shielded pool.
+ */
+type ShieldArgs = {
+    assetId: number;
+    amount: bigint;
+    /** 32-byte Poseidon commitment (LE). */
+    commitment: Bytes32;
+    /** Encrypted memo — exactly 104 bytes. */
+    encryptedMemo: number[];
+};
+/**
+ * Call index 12 — `shield_batch` (Signed origin)
+ * Deposits multiple notes in a single extrinsic — max 20 operations.
+ */
+type ShieldBatchArgs = {
+    operations: ShieldOperation[];
+};
+/** Input note consumed by a private transfer (SCALE wire format). */
+type RawTransferInput = {
+    /** 32-byte Poseidon nullifier (LE). */
+    nullifier: Bytes32;
+    /** 32-byte Poseidon commitment (LE). */
+    commitment: Bytes32;
+};
+/** Output note created by a private transfer (SCALE wire format). */
+type RawTransferOutput = {
+    /** 32-byte Poseidon commitment (LE). */
+    commitment: Bytes32;
+    /** Encrypted memo — exactly 104 bytes. */
+    memo: number[];
+};
+/**
+ * Call index 1 — `private_transfer` (Unsigned/gasless origin)
+ * Transfers value between notes without revealing sender, recipient or amount.
+ * Fee is embedded in the ZK proof: input_sum == output_sum + fee.
+ * The fee is paid to the block author (validator) by the pallet runtime.
+ */
+type PrivateTransferArgs = {
+    /** Groth16 proof bytes — max 512 bytes. */
+    proof: number[];
+    /** 32-byte Merkle root (LE). */
+    merkleRoot: Bytes32;
+    nullifiers: RawTransferInput[];
+    outputs: RawTransferOutput[];
+    encryptedMemos: number[][];
+    /** Asset ID being transferred (public input of the proof). */
+    assetId: number;
+    /** Gasless fee in planck. Paid to the block author (validator). */
+    fee: bigint;
+};
+/**
+ * Call index 2 — `unshield` (Unsigned/gasless origin)
+ * Withdraws a note from the pool to a public account.
+ * Fee is embedded in the ZK proof: note_value == amount + fee + changeValue.
+ */
+type UnshieldArgs = {
+    /** Groth16 proof bytes — max 512 bytes. */
+    proof: number[];
+    /** 32-byte Merkle root (LE). */
+    merkleRoot: Bytes32;
+    /** 32-byte nullifier of the spent note (LE). */
+    nullifier: Bytes32;
+    assetId: number;
+    /** Net amount recipient receives (planck). */
+    amount: bigint;
+    /** SS58 or 0x-prefixed AccountId of the recipient. */
+    recipient: string;
+    /** Gasless fee in planck. */
+    fee: bigint;
+    /**
+     * 32-byte change note commitment (LE). All zeros for total unshield.
+     * Must equal NoteCommitment(changeValue, assetId, changeOwnerPk, changeBlinding)
+     * when changeValue > 0 — enforced by the ZK circuit.
+     */
+    changeCommitment: Bytes32;
+    /**
+     * Encrypted memo for the change note (176 bytes, empty for total unshield).
+     * Enables note recovery via blockchain scan for partial unshield.
+     */
+    changeEncryptedMemo?: Bytes176;
+};
+/**
+ * Call index 9 — `register_asset` (Root origin)
+ * Registers a new asset in the shielded pool registry.
+ */
+type RegisterAssetArgs = {
+    /** Asset name — max 64 bytes UTF-8. */
+    name: string;
+    /** Asset ticker symbol, e.g. "USDT" — max 16 bytes UTF-8. */
+    symbol: string;
+    /** Token decimal precision (e.g. 18 for ORB, 6 for USDT). */
+    decimals: number;
+    /** 20-byte EVM contract address for ERC-20 assets. Null = native asset. */
+    contractAddress: number[] | null;
+};
+/**
+ * Call index 10 — `verify_asset` (Root origin)
+ * Marks a registered asset as verified, enabling shielding.
+ */
+type VerifyAssetArgs = {
+    assetId: number;
+};
+/**
+ * Call index 11 — `unverify_asset` (Root origin)
+ * Removes the verified status from an asset, disabling new shield operations.
+ */
+type UnverifyAssetArgs = {
+    assetId: number;
+};
+/** All pallet-shielded-pool calls as a discriminated union. */
+type ShieldedPoolCall = {
+    type: 'shield';
+    args: ShieldArgs;
+} | {
+    type: 'shieldBatch';
+    args: ShieldBatchArgs;
+} | {
+    type: 'privateTransfer';
+    args: PrivateTransferArgs;
+} | {
+    type: 'unshield';
+    args: UnshieldArgs;
+} | {
+    type: 'registerAsset';
+    args: RegisterAssetArgs;
+} | {
+    type: 'verifyAsset';
+    args: VerifyAssetArgs;
+} | {
+    type: 'unverifyAsset';
+    args: UnverifyAssetArgs;
+};
+
 /**
  * Options for {@link formatBalance}.
  */
@@ -4497,30 +4166,6 @@ interface DecodedUnshieldArgs {
     amount: string;
     recipient: string;
 }
-interface DecodedRequestDisclosureArgs {
-    target: string;
-    commitment: string;
-    required_fields: {
-        value: boolean;
-        asset_id: boolean;
-        owner: boolean;
-    };
-    reason: string;
-    auditor_bjj_pk_x: string;
-    auditor_bjj_pk_y: string;
-}
-interface DecodedRejectDisclosureArgs {
-    auditor: string;
-    commitment: string;
-    reason: string;
-}
-interface DecodedSubmitDisclosureArgs {
-    commitment: string;
-    proof_bytes: string;
-    /** 256-byte ECDH public signals (hex). */
-    public_signals: string;
-    auditor: string;
-}
 interface DecodedTransferArgs {
     dest: string;
     value: string;
@@ -4621,35 +4266,6 @@ interface MerkleRootUpdatedData {
     new_root: string;
     size: number;
 }
-interface DisclosureRequestedData {
-    target: string;
-    auditor: string;
-    commitment: string;
-    required_fields: {
-        value: boolean;
-        asset_id: boolean;
-        owner: boolean;
-    };
-    auditor_bjj_pk_x: string;
-    auditor_bjj_pk_y: string;
-}
-interface DisclosureRejectedData {
-    target: string;
-    auditor: string;
-    commitment: string;
-    reason: string;
-}
-interface DisclosureSubmittedData {
-    who: string;
-    commitment: string;
-    proof_size: number;
-    auditor: string;
-}
-interface DisclosureVerifiedData {
-    who: string;
-    commitment: string;
-    verified: boolean;
-}
 interface TransferEventData {
     from: string;
     to: string;
@@ -4720,4 +4336,4 @@ interface ExtrinsicFailedData {
     dispatch_info: DispatchInfo;
 }
 
-export { type AccountListing, type AccountMappedData, type AccountMappedEvent, type AccountMappingCall, type AccountMappingEvent, AccountMappingModule, AccountMappingPrecompile, type AccountMetadata, type AccountUnmappedEvent, type ActiveVersionSetEvent, type AddChainLinkArgs, type AddChainLinkParams, type AddSupportedChainArgs, type AliasFullIdentity, type AliasInfo, type AliasListedForSaleEvent, type AliasOnSaleData, type AliasRegisteredData, type AliasRegisteredEvent, type AliasReleasedEvent, type AliasSaleCancelledEvent, type AliasSoldData, type AliasSoldEvent, type AliasTransferredData, type AliasTransferredEvent, type AssetRegisteredEvent, type AssetUnverifiedEvent, type AssetVerifiedEvent, type AuditPolicySetEvent, type Auditor, BABYJUB_SUBORDER, BN254_R, type BatchRegisterVerificationKeysArgs, type BatchVerificationKeysRegisteredEvent, type BlockInfo, type BuyAliasArgs, type Bytes32, type ChainInfo, type ChainLink, type ChainLinkAddedEvent, type ChainLinkRemovedEvent, CircuitId, CircuitId as CircuitIdType, type ClaimShieldedFeesParams, type ClientProviderConfig, type CommitmentsInsertedEvent, type CommitmentsInsertedEventData, type ConnectionStatus, CryptoPrecompiles, type DecodedAddChainLinkArgs, type DecodedBatchArgs, type DecodedDispatchAsPrivateLinkArgs, type DecodedEthereumTransactArgs, type DecodedEvmCallArgs, type DecodedPrecompile, type DecodedPrivateTransferArgs, type DecodedPutAliasForSaleArgs, type DecodedRegisterAliasArgs, type DecodedRejectDisclosureArgs, type DecodedRemarkArgs, type DecodedRequestDisclosureArgs, type DecodedRevealPrivateLinkArgs, type DecodedSetAccountMetadataArgs, type DecodedShieldArgs, type DecodedShieldBatchArgs, type DecodedShieldBatchOperation, type DecodedSubmitDisclosureArgs, type DecodedSudoArgs, type DecodedTransferAllArgs, type DecodedTransferArgs, type DecodedTransferKeepAliveArgs, type DecodedUnshieldArgs, type DecryptedMemo, type DiscloseArgs, type DiscloseParams, type DisclosedEvent, type DisclosureCondition, type DisclosureFieldMask, type DisclosurePublicSignals, type DisclosureRecordRevokedEvent, type DisclosureRejectedData, type DisclosureRejectedEvent, type DisclosureRequestExpiredEvent, type DisclosureRequestedData, type DisclosureRequestedEvent, type DisclosureSubmittedData, type DisclosureVerifiedData, type DispatchAsLinkedAccountArgs, type DispatchAsLinkedParams, type DispatchAsPrivateLinkArgs, type DispatchError, type DispatchInfo, type DynamicBuilder, ENCRYPTED_MEMO_SIZE, type EncryptedDisclosureSignals, EncryptedMemo, type EncryptedNoteRecord, type EndowedEventData, type EthereumExecutedData, type EventData, type EventPhase, type EventRecord, type EvmAddressInfo, type EvmBlock, EvmClient, type EvmExecutedData, type EvmExitReason, EvmExplorer, type EvmLog, type EvmSigner, type EvmTransaction, type EvmTxRequest, type EvmTxSummary, type ExtrinsicDecoder, type ExtrinsicFailedData, type ExtrinsicSuccessData, type FeeClaimProofInputs, type FormatOptions, type IndexedBlock, type IndexedEvmTx, type IndexedExtrinsic, IndexerClient, type IndexerClientConfig, type IndexerStats, KNOWN_PRECOMPILES, type KnownPrecompileInfo, type ListingInfo, type MerkleRoot, type MerkleRootUpdatedData, type MerkleRootUpdatedEvent, type MerkleTreeInfo, type MetadataUpdatedEvent, NoteBuilder, type NoteInput, type NoteStatusUpdate, type NullifierStatusResult, type NullifiersSpentEvent, type NullifiersSpentEventData, OrbinumClient, type OrbinumClientConfig, OrbinumClientProvider, PRECOMPILE_ADDR, type PaginatedResult, PrivacyKeyManager, type PrivacyMerkleProof, PrivacyModule, type PrivateChainLinkAddedEvent, type PrivateChainLinkRemovedEvent, type PrivateChainLinkRevealedEvent, type PrivateLink, type PrivateLinkDispatchExecutedEvent, type PrivateTransferArgs, type PrivateTransferInput, type PrivateTransferOutput, type PrivateTransferParams, type PrivateTransferProofInputs, type PrivateTransferTimestamp, type ProofVerificationFailedEvent, type ProofVerifiedEvent, type ProxyCallExecutedEvent, type PruneExpiredRequestArgs, type PruneExpiredRequestParams, type PutAliasOnSaleArgs, type PutOnSaleParams, type RawBlock, type RawBlockHeader, type RawTransferInput, type RawTransferOutput, type RegisterAliasArgs, type RegisterAssetArgs, type RegisterPrivateLinkArgs, type RegisterVerificationKeyArgs, type RejectDisclosureArgs, type RejectDisclosureParams, type RelayerInfo, RelayerStatusModule, type RemoveChainLinkArgs, type RemovePrivateLinkArgs, type RemoveSupportedChainArgs, type RemoveVerificationKeyArgs, type RequestDisclosureArgs, type RequestDisclosureParams, type ReservedEventData, type ResolvedAlias, type RevealPrivateLinkArgs, type RevokeDisclosureRecordArgs, type RpcV2MerkleProof, type RpcV2NullifierStatus, type RpcV2PoolAssetBalance, type RpcV2PoolStats, SLIP0044_NAMESPACE, type ScanCommitment, type SetAccountMetadataArgs, type SetActiveVersionArgs, type SetMetadataParams, type ShieldArgs, type ShieldBatchArgs, type ShieldBatchItem, type ShieldBatchParams, type ShieldOperation, type ShieldParams, type ShieldedAddressEvent, type ShieldedCommitment, type ShieldedEvent, type ShieldedEventData, type ShieldedPoolCall, type ShieldedPoolEvent, ShieldedPoolModule, ShieldedPoolPrecompile, SignatureScheme, type SpentNullifier, type StatusChangeEvent, type StatusListener, type StealthScanHint, SubstrateClient, type SupportedChain, type SupportedChainAddedEvent, type SupportedChainRemovedEvent, type SystemHealth, type TokenInfo, type TokenTransfer, type TransferAliasArgs, type TransferEventData, type TransferInputNote, type TransferOutputNote, type TxResult, type UnsafeTxOptions, type Unshield, type UnshieldArgs, type UnshieldParams, type UnshieldProofInputs, type UnshieldedEvent, type UnshieldedEventData, type UnverifyAssetArgs, VaultLockedError, type VerificationKeyRegisteredEvent, type VerificationKeyRemovedEvent, type VerifyAssetArgs, type VerifyProofArgs, type VkEntry, type ZkNote, type ZkVerifierCall, type ZkVerifierCircuitVersionInfo, type ZkVerifierEvent, type ZkVerifierHistoricalVersion, ZkVerifierModule, type ZkVerifierVersionStats, type ZkVerifierVkHash, accountIdHexToSs58, addressToAccountIdHex, applyNoteStatus, bigintTo32Be, bigintTo32Le, bigintTo32LeArr, buildDisclosurePublicSignals, buildDummyTransferInput, bytesToBigintLE, computeNullifier, computePathIndices, decodePrecompileCalldata, decryptDisclosureSignals, decryptJson, decryptNoteRecord, deriveBabyJubjubKeypair, deriveMasterKeyBytes, deriveOwnerPk, deriveSpendingKeyFromSignature, deriveSpendingKeyMessage, deriveStealthOwnerPk, deriveStealthSk, deriveVaultKey, deriveViewingPublicKey, deriveViewingSecretKey, encryptJson, encryptNote, ensureHexPrefix, evmAddressToAccountId, evmToImplicitSubstrate, evmToMappedAccountHex, evmToSubstrate, formatBalance, formatORB, fromBase64, fromHex, generateFeeClaimProof, generateTransferProof, generateUnshieldProof, getPrecompileLabel, hexToBigint, hexToNumber, implicitSubstrateToEvm, isEvmAddress, isImplicitEvmAccount, isSs58, isSubstrateAddress, isUnifiedAddress, leHexToBigint, mapExtrinsicArgs, mapZkEventData, normalizeEvmAddress, randomBlinding, recoverOwnerPkPoint, selectNotes, shortHash, substrateSs58ToAccountIdHex, substrateToEvm, toBase64, toHex, toTxResult, truncateMiddle, tryDecryptNote, tryDecryptNoteVerbose, vaultReplacer, vaultReviver };
+export { type AccountListing, type AccountMappedData, type AccountMappedEvent, type AccountMappingCall, type AccountMappingEvent, AccountMappingModule, AccountMappingPrecompile, type AccountMetadata, type AccountUnmappedEvent, type ActiveVersionSetEvent, type AddChainLinkArgs, type AddChainLinkParams, type AddSupportedChainArgs, type AliasFullIdentity, type AliasInfo, type AliasListedForSaleEvent, type AliasOnSaleData, type AliasRegisteredData, type AliasRegisteredEvent, type AliasReleasedEvent, type AliasSaleCancelledEvent, type AliasSoldData, type AliasSoldEvent, type AliasTransferredData, type AliasTransferredEvent, type AssetRegisteredEvent, type AssetUnverifiedEvent, type AssetVerifiedEvent, BABYJUB_SUBORDER, BN254_R, type BatchRegisterVerificationKeysArgs, type BatchVerificationKeysRegisteredEvent, type BlockInfo, type BuyAliasArgs, type Bytes32, type ChainInfo, type ChainLink, type ChainLinkAddedEvent, type ChainLinkRemovedEvent, CircuitId, CircuitId as CircuitIdType, type ClaimShieldedFeesParams, type ClientProviderConfig, type CommitmentsInsertedEvent, type CommitmentsInsertedEventData, type ConnectionStatus, CryptoPrecompiles, type DecodedAddChainLinkArgs, type DecodedBatchArgs, type DecodedDispatchAsPrivateLinkArgs, type DecodedEthereumTransactArgs, type DecodedEvmCallArgs, type DecodedPrecompile, type DecodedPrivateTransferArgs, type DecodedPutAliasForSaleArgs, type DecodedRegisterAliasArgs, type DecodedRemarkArgs, type DecodedRevealPrivateLinkArgs, type DecodedSetAccountMetadataArgs, type DecodedShieldArgs, type DecodedShieldBatchArgs, type DecodedShieldBatchOperation, type DecodedSudoArgs, type DecodedTransferAllArgs, type DecodedTransferArgs, type DecodedTransferKeepAliveArgs, type DecodedUnshieldArgs, type DecryptedMemo, type DispatchAsLinkedAccountArgs, type DispatchAsLinkedParams, type DispatchAsPrivateLinkArgs, type DispatchError, type DispatchInfo, type DynamicBuilder, ENCRYPTED_MEMO_SIZE, EncryptedMemo, type EncryptedNoteRecord, type EndowedEventData, type EthereumExecutedData, type EventData, type EventPhase, type EventRecord, type EvmAddressInfo, type EvmBlock, EvmClient, type EvmExecutedData, type EvmExitReason, EvmExplorer, type EvmLog, type EvmSigner, type EvmTransaction, type EvmTxRequest, type EvmTxSummary, type ExtrinsicDecoder, type ExtrinsicFailedData, type ExtrinsicSuccessData, type FeeClaimProofInputs, type FormatOptions, type IndexedBlock, type IndexedEvmTx, type IndexedExtrinsic, IndexerClient, type IndexerClientConfig, type IndexerStats, KNOWN_PRECOMPILES, type KnownPrecompileInfo, type ListingInfo, type MerkleRoot, type MerkleRootUpdatedData, type MerkleRootUpdatedEvent, type MerkleTreeInfo, type MetadataUpdatedEvent, NoteBuilder, type NoteDisclosure, type NoteInput, type NoteStatusUpdate, type NullifierStatusResult, type NullifiersSpentEvent, type NullifiersSpentEventData, OrbinumClient, type OrbinumClientConfig, OrbinumClientProvider, PRECOMPILE_ADDR, type PaginatedResult, PrivacyKeyManager, type PrivacyMerkleProof, PrivacyModule, type PrivateChainLinkAddedEvent, type PrivateChainLinkRemovedEvent, type PrivateChainLinkRevealedEvent, type PrivateLink, type PrivateLinkDispatchExecutedEvent, type PrivateTransferArgs, type PrivateTransferInput, type PrivateTransferOutput, type PrivateTransferParams, type PrivateTransferProofInputs, type PrivateTransferTimestamp, type ProofVerificationFailedEvent, type ProofVerifiedEvent, type ProxyCallExecutedEvent, type PutAliasOnSaleArgs, type PutOnSaleParams, type RawBlock, type RawBlockHeader, type RawTransferInput, type RawTransferOutput, type RegisterAliasArgs, type RegisterAssetArgs, type RegisterPrivateLinkArgs, type RegisterVerificationKeyArgs, type RegisteredAsset, type RelayFeeEvent, type RelayFeeSummaryEntry, type Relayer, type RelayerInfo, RelayerStatusModule, type RemoveChainLinkArgs, type RemovePrivateLinkArgs, type RemoveSupportedChainArgs, type RemoveVerificationKeyArgs, type ReservedEventData, type ResolvedAlias, type RevealPrivateLinkArgs, type RpcV2MerkleProof, type RpcV2NullifierStatus, type RpcV2PoolAssetBalance, type RpcV2PoolStats, SLIP0044_NAMESPACE, type ScanCommitment, type SetAccountMetadataArgs, type SetActiveVersionArgs, type SetMetadataParams, type ShieldArgs, type ShieldBatchArgs, type ShieldBatchItem, type ShieldBatchParams, type ShieldOperation, type ShieldParams, type ShieldedAddressEvent, type ShieldedCommitment, type ShieldedEvent, type ShieldedEventData, type ShieldedPoolCall, type ShieldedPoolEvent, ShieldedPoolModule, ShieldedPoolPrecompile, SignatureScheme, type SpentNullifier, type StatusChangeEvent, type StatusListener, type StealthScanHint, SubstrateClient, type SupportedChain, type SupportedChainAddedEvent, type SupportedChainRemovedEvent, type SystemHealth, type TokenInfo, type TokenTransfer, type TransferAliasArgs, type TransferEventData, type TransferInputNote, type TransferOutputNote, type TxResult, type UnsafeTxOptions, type Unshield, type UnshieldArgs, type UnshieldParams, type UnshieldProofInputs, type UnshieldedEvent, type UnshieldedEventData, type UnverifyAssetArgs, VaultLockedError, type VerificationKeyRegisteredEvent, type VerificationKeyRemovedEvent, type VerifyAssetArgs, type VerifyProofArgs, type VkEntry, type ZkNote, type ZkVerifierCall, type ZkVerifierCircuitVersionInfo, type ZkVerifierEvent, type ZkVerifierHistoricalVersion, ZkVerifierModule, type ZkVerifierVersionStats, type ZkVerifierVkHash, accountIdHexToSs58, addressToAccountIdHex, applyNoteStatus, bigintTo32Be, bigintTo32Le, bigintTo32LeArr, buildDummyTransferInput, bytesToBigintLE, computeNullifier, computePathIndices, createNoteDisclosureKey, decodeNoteDisclosureKey, decodePrecompileCalldata, decryptJson, decryptNoteRecord, deriveMasterKeyBytes, deriveOwnerPk, deriveSpendingKeyFromSignature, deriveSpendingKeyMessage, deriveStealthOwnerPk, deriveStealthSk, deriveVaultKey, deriveViewingPublicKey, deriveViewingSecretKey, encryptJson, encryptNote, ensureHexPrefix, evmAddressToAccountId, evmToImplicitSubstrate, evmToMappedAccountHex, evmToSubstrate, formatBalance, formatORB, fromBase64, fromHex, generateFeeClaimProof, generateTransferProof, generateUnshieldProof, getPrecompileLabel, hexToBigint, hexToNumber, implicitSubstrateToEvm, isEvmAddress, isImplicitEvmAccount, isSs58, isSubstrateAddress, isUnifiedAddress, leHexToBigint, mapExtrinsicArgs, mapZkEventData, normalizeEvmAddress, randomBlinding, recoverOwnerPkPoint, selectNotes, shortHash, substrateSs58ToAccountIdHex, substrateToEvm, toBase64, toHex, toTxResult, truncateMiddle, tryDecryptNote, tryDecryptNoteVerbose, vaultReplacer, vaultReviver };