feat(sdk)!: key limits, DIP-14 sub-feature derivation and decode-any-kind for DashPay Connect

packages/kotlin-sdk/sdk/src/main/kotlin/org/dashfoundation/dashsdk/ffi/IdentityNative.kt

@@ -153,6 +153,31 @@ internal object IdentityNative {
         keyIndex: Int,
     ): Array<ByteArray>
 
+    /**
+     * DashPay Connect key derivation at the DIP-13 sub-feature paths
+     * `m/9'/coin'/5'/<subFeature>'/0'/identityId'/leaf'[/purpose']`
+     * (dashpay/dips#191). Bridges `dash_sdk_derive_connect_key_with_resolver`,
+     * a pure resolver-keyed derive like the slot derives above.
+     *
+     * @param subFeature 6 (session authentication; [leaf] is the request
+     *   id) or 7 (app encryption; [leaf] is the bound contract's id).
+     * @param identityId the identity's 32-byte id (a DIP-14 hardened child).
+     * @param leaf the 32-byte leaf (a DIP-14 hardened child).
+     * @param purpose 0 with sub-feature 6 (no purpose level), or the half
+     *   of an encryption pair with sub-feature 7: 1 ENCRYPTION,
+     *   2 DECRYPTION. Any other combination throws.
+     * @return `[privateKey(32), publicKey(33)]`.
+     */
+    external fun deriveConnectKeyWithResolver(
+        networkOrd: Int,
+        walletId: ByteArray,
+        resolverHandle: Long,
+        subFeature: Int,
+        identityId: ByteArray,
+        leaf: ByteArray,
+        purpose: Int,
+    ): Array<ByteArray>
+
     /**
      * Register a new identity funded from the wallet's Core balance. The
      * single FFI entry point the registration coordinator's body invokes.

packages/kotlin-sdk/sdk/src/main/kotlin/org/dashfoundation/dashsdk/ffi/TransactionsNative.kt

@@ -17,6 +17,17 @@ package org.dashfoundation.dashsdk.ffi
  */
 internal object TransactionsNative {
 
+    /**
+     * Decode any DPP state transition (a `dash-st:` payload or a DashPay
+     * Connect `sign` request) into the packed big-endian blob documented
+     * in `rs-unified-sdk-jni/src/parse_state_transition.rs`, decoded by
+     * [org.dashfoundation.dashsdk.identity.StateTransitionParser.parseBlob].
+     * Bridges `platform_wallet_parse_state_transition`. Accepts tagged and
+     * Yappr's tagless framing; never signs or broadcasts. Throws
+     * [DashSDKException] on undecodable bytes.
+     */
+    external fun parseStateTransition(transitionBytes: ByteArray): ByteArray
+
     /**
      * Add public keys and/or disable existing key ids on an identity,
      * signing the resulting `IdentityUpdateTransition` via [signerHandle]