@orbinum/sdk 0.8.0 → 0.8.1

package/dist/index.d.mts

@@ -844,18 +844,35 @@ declare class IndexerClient {
      * For the current Orbinum testnet/mainnet scale this is the recommended approach.
      */
     getAllSpentNullifiers(): Promise<Set<string>>;
+    /** Server-enforced max items per by-nullifiers / by-commitments request. */
+    private static readonly TRANSFER_LOOKUP_CHUNK;
+    /**
+     * Chunked fetch for the transfer timestamp lookups. The reader silently
+     * truncates each request to 50 items, so larger inputs MUST be split or
+     * results are silently lost. Responses are merged per extrinsic
+     * (`blockNumber:extrinsicIndex`), concatenating the matched arrays, and
+     * sorted by block descending.
+     *
+     * Privacy note: these lookups send the wallet's own note identifiers to
+     * the indexer — a bounded, documented linkage tradeoff for timestamp
+     * recovery. They are NEVER used for spent-STATUS checks (PIR-A: status
+     * comes from the anonymous full-set `/shielded/nullifiers/all` download).
+     */
+    private fetchTransfersChunked;
     /**
      * Returns temporal metadata for private transfers that spent any of the given nullifiers.
      * Only blockNumber, extrinsicIndex, timestampMs, and hash are returned — no cross-link
      * between inputs and outputs to prevent graph reconstruction.
-     * Accepts up to 50 nullifiers (0x-prefixed hex).
+     * Inputs of any size are transparently chunked into requests of 50 (the server cap)
+     * and merged per extrinsic.
      */
     getTransfersByNullifiers(nullifiers: string[]): Promise<PrivateTransferTimestamp[]>;
     /**
      * Returns temporal metadata for private transfers that produced any of the given commitments.
      * Only blockNumber, extrinsicIndex, timestampMs, and hash are returned — no cross-link
      * between outputs and inputs to prevent graph reconstruction.
-     * Accepts up to 50 commitments (0x-prefixed hex).
+     * Inputs of any size are transparently chunked into requests of 50 (the server cap)
+     * and merged per extrinsic.
      */
     getTransfersByCommitments(commitments: string[]): Promise<PrivateTransferTimestamp[]>;
     /** Returns a paginated list of unshield events. */

package/dist/index.d.ts

@@ -844,18 +844,35 @@ declare class IndexerClient {
      * For the current Orbinum testnet/mainnet scale this is the recommended approach.
      */
     getAllSpentNullifiers(): Promise<Set<string>>;
+    /** Server-enforced max items per by-nullifiers / by-commitments request. */
+    private static readonly TRANSFER_LOOKUP_CHUNK;
+    /**
+     * Chunked fetch for the transfer timestamp lookups. The reader silently
+     * truncates each request to 50 items, so larger inputs MUST be split or
+     * results are silently lost. Responses are merged per extrinsic
+     * (`blockNumber:extrinsicIndex`), concatenating the matched arrays, and
+     * sorted by block descending.
+     *
+     * Privacy note: these lookups send the wallet's own note identifiers to
+     * the indexer — a bounded, documented linkage tradeoff for timestamp
+     * recovery. They are NEVER used for spent-STATUS checks (PIR-A: status
+     * comes from the anonymous full-set `/shielded/nullifiers/all` download).
+     */
+    private fetchTransfersChunked;
     /**
      * Returns temporal metadata for private transfers that spent any of the given nullifiers.
      * Only blockNumber, extrinsicIndex, timestampMs, and hash are returned — no cross-link
      * between inputs and outputs to prevent graph reconstruction.
-     * Accepts up to 50 nullifiers (0x-prefixed hex).
+     * Inputs of any size are transparently chunked into requests of 50 (the server cap)
+     * and merged per extrinsic.
      */
     getTransfersByNullifiers(nullifiers: string[]): Promise<PrivateTransferTimestamp[]>;
     /**
      * Returns temporal metadata for private transfers that produced any of the given commitments.
      * Only blockNumber, extrinsicIndex, timestampMs, and hash are returned — no cross-link
      * between outputs and inputs to prevent graph reconstruction.
-     * Accepts up to 50 commitments (0x-prefixed hex).
+     * Inputs of any size are transparently chunked into requests of 50 (the server cap)
+     * and merged per extrinsic.
      */
     getTransfersByCommitments(commitments: string[]): Promise<PrivateTransferTimestamp[]>;
     /** Returns a paginated list of unshield events. */

package/dist/index.js

@@ -1147,7 +1147,7 @@ var EvmExplorer = class _EvmExplorer {
 };
 
 // src/indexer/IndexerClient.ts
-var IndexerClient = class {
+var IndexerClient = class _IndexerClient {
   baseUrl;
   timeoutMs;
   constructor(config) {
@@ -1247,37 +1247,82 @@ var IndexerClient = class {
     return new Set(res.data.map((h) => h.toLowerCase()));
   }
   // ─── Private transfers ─────────────────────────────────────────────────────
+  /** Server-enforced max items per by-nullifiers / by-commitments request. */
+  static TRANSFER_LOOKUP_CHUNK = 50;
+  /**
+   * Chunked fetch for the transfer timestamp lookups. The reader silently
+   * truncates each request to 50 items, so larger inputs MUST be split or
+   * results are silently lost. Responses are merged per extrinsic
+   * (`blockNumber:extrinsicIndex`), concatenating the matched arrays, and
+   * sorted by block descending.
+   *
+   * Privacy note: these lookups send the wallet's own note identifiers to
+   * the indexer — a bounded, documented linkage tradeoff for timestamp
+   * recovery. They are NEVER used for spent-STATUS checks (PIR-A: status
+   * comes from the anonymous full-set `/shielded/nullifiers/all` download).
+   */
+  async fetchTransfersChunked(path, param, items, matchedField) {
+    if (items.length === 0) return [];
+    const normalized = items.map((i) => i.toLowerCase());
+    const chunks = [];
+    for (let i = 0; i < normalized.length; i += _IndexerClient.TRANSFER_LOOKUP_CHUNK) {
+      chunks.push(normalized.slice(i, i + _IndexerClient.TRANSFER_LOOKUP_CHUNK));
+    }
+    const responses = await Promise.all(
+      chunks.map((chunk) => {
+        const qs = this.buildQuery({ [param]: chunk.join(",") });
+        return this.get(
+          `${path}${qs}`
+        );
+      })
+    );
+    const byExtrinsic = /* @__PURE__ */ new Map();
+    for (const res of responses) {
+      for (const transfer of res.data) {
+        const key = `${transfer.blockNumber}:${transfer.extrinsicIndex ?? "null"}`;
+        const existing = byExtrinsic.get(key);
+        if (!existing) {
+          byExtrinsic.set(key, transfer);
+          continue;
+        }
+        const merged = /* @__PURE__ */ new Set([
+          ...existing[matchedField] ?? [],
+          ...transfer[matchedField] ?? []
+        ]);
+        existing[matchedField] = [...merged];
+      }
+    }
+    return [...byExtrinsic.values()].sort((a, b) => b.blockNumber - a.blockNumber);
+  }
   /**
    * Returns temporal metadata for private transfers that spent any of the given nullifiers.
    * Only blockNumber, extrinsicIndex, timestampMs, and hash are returned — no cross-link
    * between inputs and outputs to prevent graph reconstruction.
-   * Accepts up to 50 nullifiers (0x-prefixed hex).
+   * Inputs of any size are transparently chunked into requests of 50 (the server cap)
+   * and merged per extrinsic.
    */
   async getTransfersByNullifiers(nullifiers) {
-    if (nullifiers.length === 0) return [];
-    const qs = this.buildQuery({
-      nullifiers: nullifiers.map((n) => n.toLowerCase()).join(",")
-    });
-    const res = await this.get(
-      `/shielded/transfers/by-nullifiers${qs}`
+    return this.fetchTransfersChunked(
+      "/shielded/transfers/by-nullifiers",
+      "nullifiers",
+      nullifiers,
+      "matchedNullifiers"
     );
-    return res.data;
   }
   /**
    * Returns temporal metadata for private transfers that produced any of the given commitments.
    * Only blockNumber, extrinsicIndex, timestampMs, and hash are returned — no cross-link
    * between outputs and inputs to prevent graph reconstruction.
-   * Accepts up to 50 commitments (0x-prefixed hex).
+   * Inputs of any size are transparently chunked into requests of 50 (the server cap)
+   * and merged per extrinsic.
    */
   async getTransfersByCommitments(commitments) {
-    if (commitments.length === 0) return [];
-    const qs = this.buildQuery({
-      commitments: commitments.map((c) => c.toLowerCase()).join(",")
-    });
-    const res = await this.get(
-      `/shielded/transfers/by-commitments${qs}`
+    return this.fetchTransfersChunked(
+      "/shielded/transfers/by-commitments",
+      "commitments",
+      commitments,
+      "matchedCommitments"
     );
-    return res.data;
   }
   // ─── Unshields ─────────────────────────────────────────────────────────────
   /** Returns a paginated list of unshield events. */

package/dist/index.mjs

@@ -1020,7 +1020,7 @@ var EvmExplorer = class _EvmExplorer {
 };
 
 // src/indexer/IndexerClient.ts
-var IndexerClient = class {
+var IndexerClient = class _IndexerClient {
   baseUrl;
   timeoutMs;
   constructor(config) {
@@ -1120,37 +1120,82 @@ var IndexerClient = class {
     return new Set(res.data.map((h) => h.toLowerCase()));
   }
   // ─── Private transfers ─────────────────────────────────────────────────────
+  /** Server-enforced max items per by-nullifiers / by-commitments request. */
+  static TRANSFER_LOOKUP_CHUNK = 50;
+  /**
+   * Chunked fetch for the transfer timestamp lookups. The reader silently
+   * truncates each request to 50 items, so larger inputs MUST be split or
+   * results are silently lost. Responses are merged per extrinsic
+   * (`blockNumber:extrinsicIndex`), concatenating the matched arrays, and
+   * sorted by block descending.
+   *
+   * Privacy note: these lookups send the wallet's own note identifiers to
+   * the indexer — a bounded, documented linkage tradeoff for timestamp
+   * recovery. They are NEVER used for spent-STATUS checks (PIR-A: status
+   * comes from the anonymous full-set `/shielded/nullifiers/all` download).
+   */
+  async fetchTransfersChunked(path, param, items, matchedField) {
+    if (items.length === 0) return [];
+    const normalized = items.map((i) => i.toLowerCase());
+    const chunks = [];
+    for (let i = 0; i < normalized.length; i += _IndexerClient.TRANSFER_LOOKUP_CHUNK) {
+      chunks.push(normalized.slice(i, i + _IndexerClient.TRANSFER_LOOKUP_CHUNK));
+    }
+    const responses = await Promise.all(
+      chunks.map((chunk) => {
+        const qs = this.buildQuery({ [param]: chunk.join(",") });
+        return this.get(
+          `${path}${qs}`
+        );
+      })
+    );
+    const byExtrinsic = /* @__PURE__ */ new Map();
+    for (const res of responses) {
+      for (const transfer of res.data) {
+        const key = `${transfer.blockNumber}:${transfer.extrinsicIndex ?? "null"}`;
+        const existing = byExtrinsic.get(key);
+        if (!existing) {
+          byExtrinsic.set(key, transfer);
+          continue;
+        }
+        const merged = /* @__PURE__ */ new Set([
+          ...existing[matchedField] ?? [],
+          ...transfer[matchedField] ?? []
+        ]);
+        existing[matchedField] = [...merged];
+      }
+    }
+    return [...byExtrinsic.values()].sort((a, b) => b.blockNumber - a.blockNumber);
+  }
   /**
    * Returns temporal metadata for private transfers that spent any of the given nullifiers.
    * Only blockNumber, extrinsicIndex, timestampMs, and hash are returned — no cross-link
    * between inputs and outputs to prevent graph reconstruction.
-   * Accepts up to 50 nullifiers (0x-prefixed hex).
+   * Inputs of any size are transparently chunked into requests of 50 (the server cap)
+   * and merged per extrinsic.
    */
   async getTransfersByNullifiers(nullifiers) {
-    if (nullifiers.length === 0) return [];
-    const qs = this.buildQuery({
-      nullifiers: nullifiers.map((n) => n.toLowerCase()).join(",")
-    });
-    const res = await this.get(
-      `/shielded/transfers/by-nullifiers${qs}`
+    return this.fetchTransfersChunked(
+      "/shielded/transfers/by-nullifiers",
+      "nullifiers",
+      nullifiers,
+      "matchedNullifiers"
     );
-    return res.data;
   }
   /**
    * Returns temporal metadata for private transfers that produced any of the given commitments.
    * Only blockNumber, extrinsicIndex, timestampMs, and hash are returned — no cross-link
    * between outputs and inputs to prevent graph reconstruction.
-   * Accepts up to 50 commitments (0x-prefixed hex).
+   * Inputs of any size are transparently chunked into requests of 50 (the server cap)
+   * and merged per extrinsic.
    */
   async getTransfersByCommitments(commitments) {
-    if (commitments.length === 0) return [];
-    const qs = this.buildQuery({
-      commitments: commitments.map((c) => c.toLowerCase()).join(",")
-    });
-    const res = await this.get(
-      `/shielded/transfers/by-commitments${qs}`
+    return this.fetchTransfersChunked(
+      "/shielded/transfers/by-commitments",
+      "commitments",
+      commitments,
+      "matchedCommitments"
     );
-    return res.data;
   }
   // ─── Unshields ─────────────────────────────────────────────────────────────
   /** Returns a paginated list of unshield events. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orbinum/sdk",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Official TypeScript SDK for Orbinum.",
   "author": "Orbinum",
   "license": "MIT",