@kaspacom/kcc20-tx-builder 0.5.0 → 0.6.1

package/dist/engine.js

@@ -1,7 +1,11 @@
 // @ts-nocheck
+import { planTokenOwnerWitness } from "./token-authorization.js";
 import { sha256 } from "@noble/hashes/sha256";
+import { authenticateTokenArtifact, authenticateTokenWrapper, validateTokenProfileRegistry, requireTokenCapability, resolveTokenProfilePriceScale, } from "./token-profiles.js";
+import { buildAuthenticatedKcc20TransferPayload } from "./transfer-payload.js";
+import { BUNDLED_TOKEN_PROFILES, BUNDLED_TOKEN_PROFILE_DIGEST, } from "./token-profiles.generated.js";
 import { DEFAULT_COMPUTE_BUDGET, DEFAULT_KCC20_FEE_BPS, DEFAULT_KCC20_MIN_PROTOCOL_FEE_SOMPI, DEFAULT_KCC20_PRICE_SCALE, DEFAULT_TOKEN_OUTPUT_SOMPI, KCC20_ORDERBOOK_EXPANDED_SWEEP_OUTPUT_SOMPI, KCC20_ORDERBOOK_MAX_SWEEP_BID_LEGS, KCC20_ORDERBOOK_MAX_EXPANDED_SWEEP_BID_LEGS, KCC20_PLATFORM_PROTOCOL_FEE_RECIPIENT, KCC20_ORDERBOOK_PROTOCOL_FEE_RECIPIENT, SUBNETWORK_ID_NATIVE, SOMPI_PER_TKAS, asciiToBytes32, buildKcc20FeeTicketScriptForState, buildNativeKcc20ScriptForState, buildKcc20WrapperScriptForState, buildKcc20OrderbookScriptForState, buildKcc20V3CreateBidSigScript, buildKcc20V3SellIntoBidSigScript, buildKcc20OrderbookFillBidFromSellerSweepSigScript, buildKcc20OrderbookFillAskSigScript, buildKcc20OrderbookFillBidSigScript, buildKcc20OrderbookSellIntoBidsSigScript, buildKcc20OrderbookSellIntoBids10SigScript, buildKcc20OrderbookCrossAskSigScript, buildKcc20OrderbookCrossAskLegacySigScript, buildKcc20OrderbookCrossBidSigScript, buildKcc20OrderbookCrossBidLegacySigScript, bytesToHex, calculateFeeSplit, findOutputIndex, hexToBytes, kcc20PsktBuilderError, mintPolicyName, normalizeSignature, p2pkScriptPubKey, p2shScriptHashHex, parseMintPolicy, requireHex32, selectFundingEntry, setVersionOneInputMassFields, stateToReceiptFields, utxoAmountSompi, ZERO_HASH, } from "./sale-common.js";
-import { buildKcc20BurnSigScript, buildKcc20MintByOwnerSigScript, buildKcc20MintPublicSigScript, buildKcc20ScriptForState, buildKcc20SetPublicMintActiveSigScript, buildKcc20TransferSigScript, dispatchTagFor, encodeKcc20StateRecordArrays, holderExtensionCommitment, mintExtensionCommitment, normalizeSilverScriptArtifact, ownerAuthorizationWitness, } from "./abi.js";
+import { buildKcc20BurnSigScript, buildKcc20MintByOwnerSigScript, buildKcc20MintPublicSigScript, buildKcc20ScriptForState, buildKcc20SetPublicMintActiveSigScript, buildKcc20TransferSigScript, dispatchTagFor, templateHash, encodeKcc20StateRecordArrays, holderExtensionCommitment, mintExtensionCommitment, normalizeSilverScriptArtifact, ownerAuthorizationWitness, } from "./abi.js";
 import { KCC20_BUILDER_KEYS } from "./operations.js";
 import { createKcc20SnapshotPsktBuilder } from "./snapshot-operation.js";
 import { splitKcc20MintSupply } from "./protocol.js";
@@ -102,6 +106,7 @@ export function createKcc20PsktBuilderEngine(options) {
     const WRAPPED_ARTIFACT_PATH = "KCC20Orderbook.placeholder.json";
     const FEE_TICKET_ARTIFACT_PATH = "KCC20FeeTicket.placeholder.json";
     const staticArtifactCache = new Map();
+    const tokenProfiles = validateTokenProfileRegistry(options.tokenProfileRegistry?.manifest ?? BUNDLED_TOKEN_PROFILES, options.tokenProfileRegistry?.sha256 ?? BUNDLED_TOKEN_PROFILE_DIGEST);
     function readStaticArtifact(path) {
         let cached = staticArtifactCache.get(path);
         if (!cached) {
@@ -114,7 +119,16 @@ export function createKcc20PsktBuilderEngine(options) {
                     ? (artifact.artifact ?? artifact)
                     : artifact;
                 const normalized = normalizeSilverScriptArtifact(artifactValue);
-                assertKcc20ArtifactScriptHash(path, normalized);
+                const profile = tokenProfiles.profiles.find((p) => p.artifactKey === path);
+                if (profile)
+                    authenticateTokenArtifact(profile, artifactValue);
+                else {
+                    const ownerProfile = tokenProfiles.profiles.find((p) => p.wrapper?.artifactKey === path);
+                    if (ownerProfile)
+                        authenticateTokenWrapper(ownerProfile, artifactValue);
+                    else
+                        assertKcc20ArtifactScriptHash(path, normalized);
+                }
                 return normalized;
             })
                 .catch((error) => {
@@ -132,15 +146,20 @@ export function createKcc20PsktBuilderEngine(options) {
         };
     }
     async function resolveKcc20ArtifactForState(state, address, network) {
-        const artifact = await readStaticArtifact(KCC20_ARTIFACT_PATH);
-        const script = buildKcc20ScriptForState(artifact, state);
-        const candidateAddress = kaspaWasm
-            .addressFromScriptPublicKey(kaspaWasm.payToScriptHashScript(script), network)
-            .toString();
-        if (candidateAddress !== address) {
-            throw new Error("KCC20 UTXO address does not match the current artifact");
+        for (const profile of tokenProfiles.profiles) {
+            const artifact = await readStaticArtifact(profile.artifactKey);
+            const script = buildKcc20ScriptForState(artifact, state);
+            const candidateAddress = kaspaWasm
+                .addressFromScriptPublicKey(kaspaWasm.payToScriptHashScript(script), network)
+                .toString();
+            if (candidateAddress !== address)
+                continue;
+            requireTokenCapability(profile, "transfer");
+            if (!profile.ownerSchemes.includes(Number(state.ownerScheme ?? state.identifierType)))
+                throw new Error("owner scheme is unsupported by this token profile");
+            return { version: profile.id, profile, artifact, script };
         }
-        return { version: "standard-native-v1", artifact, script };
+        throw new Error("KCC20 UTXO address does not match a bundled token profile");
     }
     function artifactEntrypointDispatchTag(artifact, entrypoint) {
         try {
@@ -175,13 +194,14 @@ export function createKcc20PsktBuilderEngine(options) {
             },
         ];
     }
-    async function readWrapperArtifacts() {
-        return [
-            {
-                artifact: await readStaticArtifact(WRAPPER_ARTIFACT_PATH),
+    async function readWrapperArtifacts(profile) {
+        if (!profile.wrapper)
+            return [];
+        return [{
+                artifact: await readStaticArtifact(profile.wrapper.artifactKey),
                 version: "standard-native-v1",
-            },
-        ];
+                tokenProfileId: profile.id,
+            }];
     }
     function wrappedArtifactSupportsEntrypoint(info, name) {
         return Array.isArray(info?.artifact?.abi)
@@ -541,7 +561,7 @@ export function createKcc20PsktBuilderEngine(options) {
         };
         const kw = kaspaWasm;
         const { CovenantBinding, Encoding, Hash, RpcClient, ScriptBuilder, Transaction, TransactionOutput, addressFromScriptPublicKey, payToAddressScript, payToScriptHashScript, } = kw;
-        const utilityScript = buildNativeKcc20ScriptForState(kcc20Artifact.script, utilityState);
+        const utilityScript = buildKcc20ScriptForState(kcc20Artifact, utilityState);
         const rootAddress = requireKaspaAddress(rootUtxo.address);
         const utilityAddress = requireKaspaAddress(utilityUtxo.address);
         const rootArtifactInfo = selectFeeTicketArtifactForState(feeTicketArtifacts, rootState, rootAddress, network, "active FeeTicket root UTXO address");
@@ -1659,10 +1679,7 @@ export function createKcc20PsktBuilderEngine(options) {
         const feeTicketId = requireHex32(params.feeTicketId || ZERO_HASH, "fee ticket id");
         const deployerOwner = requireHex32(params.deployerOwner || request.owner?.kcc20Owner, "deployer owner");
         const rootAmount = parseU64(params.wrappedRootAmount ?? "0", "wrappedRootAmount");
-        const priceScale = parsePositiveU64(params.priceScale ??
-            params.tokenDisplayScale ??
-            DEFAULT_KCC20_PRICE_SCALE, "priceScale");
-        assertWrapperArtifactPriceScale(priceScale);
+        const requestedPriceScale = params.priceScale ?? params.tokenDisplayScale;
         const network = request.network || env.KASPA_NETWORK || "testnet-10";
         const walletAddress = requireKaspaAddress(request.owner?.walletAddress);
         const rpcUrl = env.KASPA_WRPC_URL || DEFAULT_WRPC_URL;
@@ -1671,7 +1688,19 @@ export function createKcc20PsktBuilderEngine(options) {
             DEFAULT_DEPLOY_TKAS, "KCC20_WRAPPER_DEPLOY_OUTPUT_TKAS");
         const priorityFee = wrapperDeployPriorityFee(env.KCC20_WRAPPER_DEPLOY_PRIORITY_FEE_SOMPI);
         const computeBudget = parsePositiveNumber(env.KCC20_WRAPPER_DEPLOY_COMPUTE_BUDGET || 600, "computeBudget");
-        const wrapperArtifact = await readStaticArtifact(WRAPPER_ARTIFACT_PATH);
+        const evidence = params.tokenUtxo;
+        if (!evidence)
+            throw new Error("authenticated token output is required before wrapper deployment");
+        const sourceState = kcc20StateFromUtxo(evidence, request.owner);
+        const sourceProfile = await resolveKcc20ArtifactForState(sourceState, requireKaspaAddress(evidence.address), network);
+        requireTokenCapability(sourceProfile.profile, "wrap");
+        if (!sourceProfile.profile.wrapper)
+            throw new Error("token profile has no wrapper adapter");
+        const priceScale = resolveTokenProfilePriceScale(sourceProfile.profile, requestedPriceScale === undefined
+            ? undefined
+            : parsePositiveU64(requestedPriceScale, "priceScale"), DEFAULT_KCC20_PRICE_SCALE);
+        assertWrapperArtifactPriceScale(priceScale);
+        const wrapperArtifact = await readStaticArtifact(sourceProfile.profile.wrapper.artifactKey);
         const wrappedArtifacts = await readWrappedArtifacts();
         const wrappedArtifact = wrappedArtifacts[0].artifact;
         const wrapperState = {
@@ -1704,6 +1733,18 @@ export function createKcc20PsktBuilderEngine(options) {
         });
         await rpc.connect();
         try {
+            const evidenceUtxos = await getUtxosByAddresses(rpc, [evidence.address]);
+            const sourceEntry = findUtxoEntry(evidenceUtxos.entries, requireHex32(evidence.txidHex, "token evidence txid"), parseVout(evidence.vout, "token evidence vout"));
+            if (!sourceEntry)
+                throw new Error("token evidence is spent or unavailable");
+            requireMatchingCovenantId(sourceEntry, contractCanonicalTokenId, "wrapper token evidence");
+            const sourceSpk = sourceEntry.scriptPublicKey ??
+                sourceEntry.entry?.scriptPublicKey ??
+                sourceEntry.utxoEntry?.scriptPublicKey;
+            if (!sourceSpk ||
+                kw.addressFromScriptPublicKey(sourceSpk, network)?.toString() !==
+                    evidence.address)
+                throw new Error("token evidence script does not match RPC");
             const utxos = await getUtxosByAddresses(rpc, [walletAddress]);
             const fundingEntry = selectFundingEntry(utxos.entries, deploySompi * 2n + priorityFee + 10000000n);
             const fundingChangeOutputIndex = 2;
@@ -1784,6 +1825,9 @@ export function createKcc20PsktBuilderEngine(options) {
                 submitTransactionSupported: true,
                 metadata: {
                     builderKey: "kcc20wrapper.deploy-market",
+                    tokenProfileId: sourceProfile.profile.id,
+                    tokenProfileRegistryHash: options.tokenProfileRegistry?.sha256 ??
+                        BUNDLED_TOKEN_PROFILE_DIGEST,
                     contract: "KCC20Wrapper",
                     network,
                     walletAddress,
@@ -1863,10 +1907,7 @@ export function createKcc20PsktBuilderEngine(options) {
             DEFAULT_TOKEN_OUTPUT_SOMPI.toString(), "tokenOutputSompi");
         const priorityFee = parseU64(env.KCC20_WRAP_PRIORITY_FEE_SOMPI || DEFAULT_PRIORITY_FEE.toString(), "priorityFee");
         const computeBudget = parsePositiveNumber(env.KCC20_WRAP_COMPUTE_BUDGET || 700, "computeBudget");
-        const [wrapperArtifacts, wrappedArtifacts] = await Promise.all([
-            readWrapperArtifacts(),
-            readWrappedArtifacts(),
-        ]);
+        const wrappedArtifacts = await readWrappedArtifacts();
         const holderState = kcc20StateFromUtxo(holderUtxo, request.owner);
         if (holderState.identifierType !== 0) {
             throw new Error("wrap requires pubkey-owned KCC20 holder UTXO");
@@ -1881,6 +1922,8 @@ export function createKcc20PsktBuilderEngine(options) {
         }
         const kcc20ArtifactInfo = await resolveKcc20ArtifactForState(holderState, requireKaspaAddress(holderUtxo.address), network);
         const kcc20Artifact = kcc20ArtifactInfo.artifact;
+        requireTokenCapability(kcc20ArtifactInfo.profile, "wrap");
+        const wrapperArtifacts = await readWrapperArtifacts(kcc20ArtifactInfo.profile);
         const remaining = holderState.amount - tokenAmount;
         const priceScale = parsePositiveU64(wrapperUtxo.state?.priceScale ??
             wrapperUtxo.state?.tokenDisplayScale ??
@@ -1907,7 +1950,7 @@ export function createKcc20PsktBuilderEngine(options) {
         const { CovenantBinding, Encoding, Hash, RpcClient, ScriptBuilder, Transaction, TransactionOutput, payToAddressScript, payToScriptHashScript, } = kw;
         const wrapperArtifactInfo = selectWrapperArtifactForUtxo({
             kw,
-            artifacts: wrapperArtifacts,
+            artifacts: wrapperArtifacts.filter((info) => info.tokenProfileId === kcc20ArtifactInfo.profile.id),
             state: wrapperState,
             utxo: wrapperUtxo,
             network,
@@ -1920,7 +1963,7 @@ export function createKcc20PsktBuilderEngine(options) {
         const wrapperArtifact = wrapperArtifactInfo.artifact;
         const wrappedArtifact = wrappedArtifactInfo.artifact;
         const wrapperScript = wrapperArtifactInfo.script;
-        const holderScript = buildNativeKcc20ScriptForState(kcc20Artifact.script, holderState);
+        const holderScript = buildKcc20ScriptForState(kcc20Artifact, holderState);
         const wrapperAddress = requireKaspaAddress(wrapperUtxo.address);
         const holderAddress = requireKaspaAddress(holderUtxo.address);
         assertScriptAddress(kw, holderScript, holderAddress, network, "KCC20 holder UTXO address");
@@ -2133,10 +2176,7 @@ export function createKcc20PsktBuilderEngine(options) {
             DEFAULT_TOKEN_OUTPUT_SOMPI.toString(), "tokenOutputSompi");
         const priorityFee = parseU64(env.KCC20_UNWRAP_PRIORITY_FEE_SOMPI || DEFAULT_PRIORITY_FEE.toString(), "priorityFee");
         const computeBudget = parsePositiveNumber(env.KCC20_UNWRAP_COMPUTE_BUDGET || 700, "computeBudget");
-        const [wrapperArtifacts, wrappedArtifacts] = await Promise.all([
-            readWrapperArtifacts(),
-            readWrappedArtifacts(),
-        ]);
+        const wrappedArtifacts = await readWrappedArtifacts();
         const reserveState = kcc20StateFromUtxo(reserveUtxo, request.owner);
         if (reserveState.ownerScheme !== 4 || reserveState.isMintAuthority) {
             throw new Error("KCC20 reserve UTXO must be covenant-owned holder state");
@@ -2146,6 +2186,8 @@ export function createKcc20PsktBuilderEngine(options) {
         }
         const kcc20ArtifactInfo = await resolveKcc20ArtifactForState(reserveState, requireKaspaAddress(reserveUtxo.address), network);
         const kcc20Artifact = kcc20ArtifactInfo.artifact;
+        requireTokenCapability(kcc20ArtifactInfo.profile, "unwrap");
+        const wrapperArtifacts = await readWrapperArtifacts(kcc20ArtifactInfo.profile);
         const wrappedState = kcc20V3WrappedStateFromUtxo(wrappedUtxo, canonicalTokenId, request.owner);
         if (bytesToHex(wrappedState.ownerIdentifier) !== recipientOwner) {
             throw new Error("KCC20 orderbook holder UTXO is not owned by authenticated wallet");
@@ -2189,7 +2231,7 @@ export function createKcc20PsktBuilderEngine(options) {
         const { CovenantBinding, Encoding, Hash, RpcClient, ScriptBuilder, Transaction, TransactionOutput, payToAddressScript, payToScriptHashScript, } = kw;
         const wrapperArtifactInfo = selectWrapperArtifactForUtxo({
             kw,
-            artifacts: wrapperArtifacts,
+            artifacts: wrapperArtifacts.filter((info) => info.tokenProfileId === kcc20ArtifactInfo.profile.id),
             state: wrapperState,
             utxo: wrapperUtxo,
             network,
@@ -2211,7 +2253,7 @@ export function createKcc20PsktBuilderEngine(options) {
         const wrapperScript = wrapperArtifactInfo.script;
         const wrappedScript = wrappedArtifactInfo.script;
         const refundAware = wrappedArtifactRefundsHolderDeposits(wrappedArtifactInfo);
-        const reserveScript = buildNativeKcc20ScriptForState(kcc20Artifact.script, reserveState);
+        const reserveScript = buildKcc20ScriptForState(kcc20Artifact, reserveState);
         const wrapperAddress = wrapperArtifactInfo.address;
         const wrappedAddress = wrappedArtifactInfo.address;
         const reserveAddress = requireKaspaAddress(reserveUtxo.address);
@@ -5665,6 +5707,7 @@ export function createKcc20PsktBuilderEngine(options) {
             extensionCommitment: mintExtensionCommitment(extension),
         };
         const resolvedArtifact = await resolveKcc20ArtifactForState(inputState, minterAddress, network);
+        requireTokenCapability(resolvedArtifact.profile, "mint");
         const artifact = resolvedArtifact.artifact;
         const recipientState = {
             amount: mintAmount,
@@ -5902,6 +5945,11 @@ export function createKcc20PsktBuilderEngine(options) {
         if (requestedMinterUtxos.length === 0) {
             throw new Error("active KCC20 mint-authority UTXO is required");
         }
+        // The caller submits larger updates as sequential batches. Never truncate
+        // this array: every supplied authority must be represented in the result.
+        if (requestedMinterUtxos.length > 5) {
+            throw new Error("Public mint availability updates support at most 5 authorities per transaction");
+        }
         if (typeof params.active !== "boolean") {
             throw new Error("active must be a boolean");
         }
@@ -5954,6 +6002,7 @@ export function createKcc20PsktBuilderEngine(options) {
                 extensionCommitment: mintExtensionCommitment(nextExtension),
             };
             const resolvedArtifact = await resolveKcc20ArtifactForState(inputState, minterAddress, network);
+            requireTokenCapability(resolvedArtifact.profile, "mint");
             dispatchTagFor(resolvedArtifact.artifact, "set_public_mint_active");
             const minterTxid = requireHex32(activeMinterUtxo.txidHex, "minter txid");
             const minterVout = parseVout(activeMinterUtxo.vout, "minter vout");
@@ -6177,6 +6226,10 @@ export function createKcc20PsktBuilderEngine(options) {
         if (resolvedArtifacts.some((candidate) => candidate.version !== resolvedArtifacts[0].version)) {
             throw new Error("consolidation requires holder UTXOs from one artifact");
         }
+        const profile = resolvedArtifacts[0].profile;
+        if (holderUtxos.length > profile.maxTokenInputs) {
+            throw new Error("consolidation exceeds the token profile input bound");
+        }
         const artifact = resolvedArtifacts[0].artifact;
         for (const peerState of states.slice(1)) {
             assertKcc20MergeableStates(primaryState, peerState, owner);
@@ -6480,12 +6533,6 @@ export function createKcc20PsktBuilderEngine(options) {
         if (inputState.isMintAuthority || inputState.amount <= 0n) {
             throw new Error("KCC20 transfer requires a holder UTXO");
         }
-        if (inputState.ownerScheme !== 0) {
-            throw new Error("KCC20 transfer requires a Schnorr P2PK holder UTXO");
-        }
-        if (bytesToHex(inputState.ownerIdentifier) !== owner) {
-            throw new Error("KCC20 transfer requires wallet to own the active holder UTXO");
-        }
         if (transferAmount > inputState.amount) {
             throw new Error("tokenAmount exceeds active holder balance");
         }
@@ -6494,6 +6541,21 @@ export function createKcc20PsktBuilderEngine(options) {
         const tokenAddress = requireKaspaAddress(activeHolderUtxo.address);
         const resolvedArtifact = await resolveKcc20ArtifactForState(inputState, tokenAddress, network);
         const artifact = resolvedArtifact.artifact;
+        if (params.mode && params.mode !== "owner")
+            throw new Error("borrowed receive requires the explicit borrow transaction builder");
+        const authorization = planTokenOwnerWitness({
+            profile: resolvedArtifact.profile,
+            owner: bytesToHex(inputState.ownerIdentifier),
+            ownerScheme: inputState.ownerScheme,
+            publicKey: request.owner?.publicKey ?? request.owner?.kcc20Owner,
+            capabilities: options.walletSigningCapabilities ?? {
+                schnorr: true,
+                ecdsa: false,
+            },
+            role: "leader",
+        });
+        if (!resolvedArtifact.profile.ownerSchemes.includes(recipientOwnerScheme))
+            throw new Error("recipient owner scheme is unsupported by the token profile");
         const recipientState = {
             ...inputState,
             owner: hexToBytes(recipientOwner),
@@ -6525,8 +6587,11 @@ export function createKcc20PsktBuilderEngine(options) {
                 throw new Error(`active holder UTXO ${tokenTxid}:${tokenVout} not found`);
             }
             const rpcScript = tokenEntry.scriptPublicKey ??
-                tokenEntry.entry?.scriptPublicKey ?? tokenEntry.utxoEntry?.scriptPublicKey;
-            if (!rpcScript || kw.addressFromScriptPublicKey(rpcScript, network)?.toString() !== tokenAddress) {
+                tokenEntry.entry?.scriptPublicKey ??
+                tokenEntry.utxoEntry?.scriptPublicKey;
+            if (!rpcScript ||
+                kw.addressFromScriptPublicKey(rpcScript, network)?.toString() !==
+                    tokenAddress) {
                 throw new Error("active holder RPC script does not match rebuilt covenant state");
             }
             if (activeHolderUtxo.amountSompi != null &&
@@ -6535,7 +6600,7 @@ export function createKcc20PsktBuilderEngine(options) {
             }
             const spendCovenantId = params.activeHolderNativeCovenantId
                 ? requireMatchingCovenantId(tokenEntry, covenantId, "active holder")
-                : covenantIdFromUtxoEntry(tokenEntry) ?? covenantId;
+                : (covenantIdFromUtxoEntry(tokenEntry) ?? covenantId);
             let outputSompi = 0n;
             const recipientOutputIndex = 0;
             const outputs = [
@@ -6587,9 +6652,9 @@ export function createKcc20PsktBuilderEngine(options) {
                 outputs,
                 subnetworkId: SUBNETWORK_ID_NATIVE,
                 gas: 0n,
-                payload: buildTransferPayload({
+                payload: buildAuthenticatedKcc20TransferPayload({
                     covenantId: spendCovenantId,
-                    fromOwner: owner,
+                    fromOwnerIdentifier: bytesToHex(inputState.ownerIdentifier),
                     recipientOwner,
                     recipientOwnerScheme,
                     tokenAmount: transferAmount,
@@ -6602,9 +6667,10 @@ export function createKcc20PsktBuilderEngine(options) {
                     inputIndex: 0,
                     scriptHex: bytesToHex(tokenScript),
                     signType: 1,
+                    signatureAlgorithm: authorization.signatureAlgorithm,
                     signatureScript: {
                         mode: "ordered-args",
-                        args: kcc20TransferOrderedArgs(artifact, changeState ? [recipientState, changeState] : [recipientState]),
+                        args: kcc20TransferOrderedArgs(artifact, changeState ? [recipientState, changeState] : [recipientState], authorization.argument),
                     },
                 },
             ];
@@ -6620,6 +6686,9 @@ export function createKcc20PsktBuilderEngine(options) {
                 scripts,
                 submitTransactionSupported: true,
                 metadata: {
+                    tokenProfileId: resolvedArtifact.profile.id,
+                    tokenProfileRegistryHash: options.tokenProfileRegistry?.sha256 ??
+                        BUNDLED_TOKEN_PROFILE_DIGEST,
                     builderKey: "kcc20.transfer",
                     operation: "transfer-token",
                     action: "transfer",
@@ -7614,34 +7683,6 @@ export function createKcc20PsktBuilderEngine(options) {
             },
         }));
     }
-    function buildTransferPayload(fields) {
-        return new TextEncoder().encode(JSON.stringify({
-            tn12: {
-                v: 1,
-                tmpl: "KCC20",
-                op: "transfer",
-                args: [
-                    { name: "covenantId", type: "byte[32]", value: fields.covenantId },
-                    { name: "fromOwner", type: "byte[32]", value: fields.fromOwner },
-                    {
-                        name: "recipientOwner",
-                        type: "byte[32]",
-                        value: fields.recipientOwner,
-                    },
-                    {
-                        name: "recipientOwnerScheme",
-                        type: "u64",
-                        value: String(fields.recipientOwnerScheme),
-                    },
-                    {
-                        name: "tokenAmount",
-                        type: "u64",
-                        value: fields.tokenAmount.toString(),
-                    },
-                ],
-            },
-        }));
-    }
     function tokenOutput(kw, artifact, state, sompi, covenantId, authorizingInput) {
         return new kw.TransactionOutput(sompi, kw.payToScriptHashScript(buildKcc20ScriptForState(artifact, state)), new kw.CovenantBinding(authorizingInput, new kw.Hash(covenantId)));
     }
@@ -8937,18 +8978,29 @@ export function createKcc20PsktBuilderEngine(options) {
         values.push({ type: "signature" }, i64TemplateArg(active ? 1 : 0), i64TemplateArg(minterOutputIndex), dataTemplateArg(dispatchTagFor(artifact, "set_public_mint_active")));
         return values;
     }
-    function kcc20TransferOrderedArgs(artifact, nextStates) {
+    function profileForArtifact(artifact) {
+        const parts = templateParts(artifact);
+        const hash = bytesToHex(templateHash(parts.prefix, parts.suffix));
+        const profile = tokenProfiles.profiles.find((p) => p.templateHash === hash);
+        if (!profile)
+            throw new Error("token artifact has no bundled profile");
+        return profile;
+    }
+    function kcc20TransferOrderedArgs(artifact, nextStates, witness) {
+        const profile = profileForArtifact(artifact);
+        if (nextStates.length > profile.maxTokenOutputs)
+            throw new Error("transfer exceeds profile output bound");
         const fields = encodeKcc20StateRecordArrays(nextStates).map(dataTemplateArg);
         return [
             ...fields,
-            { type: "signature", prefixHex: "00" },
-            dataTemplateArg(dispatchTagFor(artifact, "transfer")),
+            witness ?? { type: "signature", prefixHex: "00" },
+            dataTemplateArg(dispatchTagFor(artifact, profileForArtifact(artifact).transferEntrypoint)),
         ];
     }
     function kcc20TransferDelegatorOrderedArgs(artifact) {
         return [
             { type: "signature" },
-            dataTemplateArg(dispatchTagFor(artifact, "transfer_delegator")),
+            dataTemplateArg(dispatchTagFor(artifact, profileForArtifact(artifact).delegatorEntrypoint)),
         ];
     }
     function kcc20BurnOrderedArgs(artifact, nextStates, burnAmount) {