@kaspacom/kcc20-tx-builder 0.6.1 → 0.6.2

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.6.2
+
+- Reuse authenticated profile scripts during native holder consolidation, including the independent Argent implementation.
+- Use each authenticated token profile's consolidation input limit: eight for platform KCC20 and three for Argent. Keep transaction mass and signature checks. Wrapped orderbook limits are unchanged.
+- Native consolidation planning now requires `tokenProfileId` from authenticated token readiness; unknown profiles fail before signing. The engine independently authenticates source scripts and does not trust requested limits.
+
+
 ## 0.6.0
 
 - Remove manual token profile review and funded proof flags from runtime capability checks.

package/dist/cjs/engine.js

@@ -6206,8 +6206,16 @@ function createKcc20PsktBuilderEngine(options) {
         const holderUtxos = Array.isArray(params.activeHolderUtxos)
             ? params.activeHolderUtxos
             : [];
-        if (holderUtxos.length < 2 || holderUtxos.length > 3) {
-            throw new Error("between two and three KCC20 holder UTXOs are required");
+        if (holderUtxos.length < 2) {
+            throw new Error("at least two KCC20 holder UTXOs are required");
+        }
+        const maximumProfileInputs = Math.max(0, ...tokenProfiles.profiles.map((p) => p.maxTokenInputs));
+        if (holderUtxos.length > maximumProfileInputs) {
+            throw new Error(`consolidation exceeds the token profile input bound (${maximumProfileInputs})`);
+        }
+        const sourceOutpoints = holderUtxos.map((u) => `${(0, sale_common_js_1.requireHex32)(u.txidHex, "holder txid")}:${parseVout(u.vout, "holder vout")}`);
+        if (new Set(sourceOutpoints).size !== holderUtxos.length) {
+            throw new Error("consolidation requires distinct holder outpoints");
         }
         const covenantId = (0, sale_common_js_1.requireHex32)(params.activeHolderNativeCovenantId || params.covenantId, "canonical covenant id");
         const appCanonicalTokenId = (0, sale_common_js_1.requireHex32)(params.appCanonicalCovenantId || params.covenantId || covenantId, "app canonical token id");
@@ -6231,7 +6239,7 @@ function createKcc20PsktBuilderEngine(options) {
         }
         const profile = resolvedArtifacts[0].profile;
         if (holderUtxos.length > profile.maxTokenInputs) {
-            throw new Error("consolidation exceeds the token profile input bound");
+            throw new Error(`consolidation exceeds the token profile input bound (${profile.maxTokenInputs})`);
         }
         const artifact = resolvedArtifacts[0].artifact;
         for (const peerState of states.slice(1)) {
@@ -6247,7 +6255,8 @@ function createKcc20PsktBuilderEngine(options) {
             const txid = (0, sale_common_js_1.requireHex32)(utxo.txidHex, `holder ${index} txid`);
             const vout = parseVout(utxo.vout, `holder ${index} vout`);
             const address = requireKaspaAddress(utxo.address);
-            const script = (0, sale_common_js_1.buildNativeKcc20ScriptForState)(artifact.script, states[index]);
+            // Resolution already authenticated this profile's complete state layout.
+            const script = resolvedArtifacts[index].script;
             assertScriptAddress(kw, script, address, network, `holder ${index} UTXO address`);
             return { txid, vout, address, script };
         });