@kronsdk/kron-sdk 0.5.0 → 0.6.1

package/README.md

@@ -4,16 +4,18 @@
 — a bonding-curve launchpad + AMM DEX — from any JS/TS environment.** Browser or Node. No custody, ever:
 this package only *builds* transactions; a wallet (yours, or your user's) signs them.
 
-> **Status: v0.5.0, testnet (TN10).** Read paths and the covenant builders are proven byte-identical to
+> **Status: v0.6.1, testnet (TN10).** Read paths and the covenant builders are proven byte-identical to
 > KRON's own production code (see "Verification" below). Wallet signing is a documented interface plus a
 > generic reference implementation — see [`docs/WALLETS.md`](docs/WALLETS.md) for the contract and how to
 > adapt it to a specific wallet's injected provider.
 >
-> **⚠️ Upgrade from < 0.5.0.** Every earlier release built **version-0** transactions, which cannot carry
+> **⚠️ Upgrade from < 0.6.0.** Every earlier release built **version-0** transactions, which cannot carry
 > the covenant bindings Kaspa's covenant layer (KIP-20) requires on output — every assembled spend was
-> rejected on-chain with `script ran, but verification failed`. Fixed in 0.5.0: `assembleNativeTx` now
-> builds v1 transactions with bindings + compute budgets attached. See the [CHANGELOG](CHANGELOG.md) for
-> the migration note if you assembled transactions by hand instead of via `spend.assembleNativeTx`.
+> rejected on-chain with `script ran, but verification failed`. 0.5.0 fixed `assembleNativeTx` (v1 txs +
+> compute budgets) and the kcc20 builders; 0.6.0 finishes the job for the curve, pool/LP, and vesting
+> builders (buy/sell/graduate, swap, add/removeLiquidity, bindLp, claim) — they now attach the required
+> `CovOutput.binding` automatically. See the [CHANGELOG](CHANGELOG.md) for the migration notes if you
+> assembled transactions by hand instead of via `spend.assembleNativeTx`.
 
 ## Why this exists
 
@@ -40,12 +42,12 @@ ESM only (`"type": "module"`) in v1 — see [Design notes](#design-notes) for wh
 
 ```bash
 npm install @kronsdk/kron-sdk@latest      # newest
-npm install @kronsdk/kron-sdk@0.5.0       # or pin an exact version for reproducible builds
+npm install @kronsdk/kron-sdk@0.6.1       # or pin an exact version for reproducible builds
 ```
 
-The package follows semver. **0.5.0 is a required upgrade for anyone using `spend.assembleNativeTx`** — see
-the warning above. The token-list client (`client.RegistryClient.tokenlist()`) and on-chain verifier
-(`verify.verifyTokenListEntry`) landed in **0.2.0** — see [Discover & verify tokens](#discover--verify-tokens-token-list).
+The package follows semver. **0.6.0 is a required upgrade for anyone building curve/pool/LP/vesting
+transactions** — see the warning above. The token-list client (`client.RegistryClient.tokenlist()`) and
+on-chain verifier (`verify.verifyTokenListEntry`) landed in **0.2.0** — see [Discover & verify tokens](#discover--verify-tokens-token-list).
 
 ## Quickstart — quote a curve buy (Node)
 
@@ -117,6 +119,13 @@ verifier can't re-derive the covenant script from params (this package has no co
 covenant-id-on-genesis check is the achievable, sufficient anti-spoof proof. Full schema:
 [`docs/INTEGRATION.md`](docs/INTEGRATION.md).
 
+`extensions.templateVersion` (0.6.1+) is the token's **covenant version pin** `{ schema, silverc }` —
+KRON pins each token to the covenant source set it was deployed under (template pinning), so future
+covenant upgrades can't strand deployed tokens. An auditor recompiling the covenant from
+`extensions.curveParams` must compile **that** version's sources (archived at
+`covenants/versions/<schema[0..12]>/` in the kron repo), not the newest ones. `null` = pre-pinning legacy
+entry. The on-chain verifier above is version-independent and needs none of this.
+
 ## What's in the box
 
 ```

package/dist/index.d.ts

@@ -814,14 +814,23 @@ type VestUtxo = {
  * Partial claim: release `release` (0 < release < remaining) to the creator's presence, re-lock the rest under
  * V. inputs [vesting(0), lockedToken(1)]; outputs [vesting cont(0), relock(1, A/V-owned), recipient(2, A/creator)].
  * The flow must set tx.lockTime = current DAA score (consensus blocks the tx until then; the covenant reads it).
+ *
+ * Pass `opts.tokenCovid` (the vested token's covenant id, hex — `covenantId` from the indexer) so the relock +
+ * recipient outputs carry the KIP-20 covenant binding the chain requires; without it the assembled tx fails
+ * on-chain. The vesting-continuation output is always bound to `vestingCovid` (already a required param).
  */
 declare function buildVestingClaim(k: K, vestTpl: VestingTemplate, tokenTpl: Kcc20Template, vestingUtxo: VestUtxo, lockedToken: VestUtxo, vestingCovid: Uint8Array, creatorPubkey: Uint8Array, claimed: bigint, release: bigint, opts?: {
     tokenDust?: bigint;
+    tokenCovid?: string;
 }): CovenantSpend;
 /** Final claim: once fully vested, pay ALL remaining to the creator and continue V with claimed=total (husk).
- *  inputs [vesting(0), lockedToken(1)]; outputs [vesting cont(0), recipient(1, A/creator)]. */
+ *  inputs [vesting(0), lockedToken(1)]; outputs [vesting cont(0), recipient(1, A/creator)].
+ *
+ *  Pass `opts.tokenCovid` (the vested token's covenant id, hex) so the recipient output carries the KIP-20
+ *  covenant binding the chain requires; without it the assembled tx fails on-chain. */
 declare function buildVestingClaimFinal(k: K, vestTpl: VestingTemplate, tokenTpl: Kcc20Template, vestingUtxo: VestUtxo, lockedToken: VestUtxo, vestingCovid: Uint8Array, creatorPubkey: Uint8Array, claimed: bigint, opts?: {
     tokenDust?: bigint;
+    tokenCovid?: string;
 }): CovenantSpend;
 
 declare const vestingTx_VEST_SELECTOR: typeof VEST_SELECTOR;
@@ -1084,6 +1093,25 @@ type CpCurveParamsRecord = {
     poolLockedShares?: number;
     vestingCovid?: string;
 };
+/** Covenant version pin (template pinning, KRON ROADMAP 3.5) — stamped by the registry SERVER at
+ *  registration, never client-set. `schema` = blake2b-256 over the covenant `.sil` source set the token was
+ *  deployed under (the sources live at `covenants/versions/<schema[0..12]>/` in the kron repo); `silverc` =
+ *  the pinned compiler commit. A consumer re-deriving the token's covenant templates/addresses from
+ *  `curveParams` MUST compile the PINNED source set — compiling newer sources yields different bytes and
+ *  wrong addresses. Absent/null = a pre-pinning legacy record (current sources at the time). */
+type TemplateVersionRecord = {
+    schema: string;
+    silverc?: string | null;
+};
+/** Optional dev-allocation vesting record (curve_cp.initVested + vesting.sil) — schedule in tx.locktime units. */
+type CpVestingRecord = {
+    vestingCovid: string;
+    total: number;
+    startScore: number;
+    durationScore: number;
+    genesisTxid: string;
+    outIndex: number;
+};
 type RegistryToken = {
     tick: string;
     name: string;
@@ -1100,12 +1128,19 @@ type RegistryToken = {
     };
     cp: {
         curveParams: CpCurveParamsRecord;
+        templateVersion?: TemplateVersionRecord | null;
         tokenCovid?: string;
         curveCovid?: string;
         poolCovid?: string;
         genesisTxid?: string;
+        initialInventory?: number;
+        devAmount?: number;
+        vesting?: CpVestingRecord | null;
     };
+    creatorPubkey?: string;
+    graduated?: boolean;
     chainVerified?: boolean;
+    createdAt?: string;
 };
 /** One entry of the public token list (GET /api/registry/tokenlist). tokenlists.org-shaped: the EVM-core
  *  fields (network/covenantId/symbol/name/decimals/logoURI) plus a KRON `extensions` block. `covenantId`
@@ -1126,6 +1161,9 @@ type TokenListEntry = {
         creator: string | null;
         creatorPubkey: string | null;
         curveParams: CpCurveParamsRecord | null;
+        /** Covenant version pin — with `curveParams`, what a covenant-aware auditor needs to re-derive the
+         *  curve P2SH (compile the PINNED source set, not the newest). Null = pre-pinning legacy entry. */
+        templateVersion: TemplateVersionRecord | null;
         graduated: boolean;
         chainVerified: boolean;
     };

package/dist/index.js

@@ -578,6 +578,9 @@ function buildAddLiquidity(k, tpl, tokenTpl, utxo, lpInventory, poolCovid, lpDep
   if (lpDepositToken.state.amount !== q.dToken) throw new Error("LP deposit token UTXO must equal dToken exactly (split first)");
   const dust = opts.tokenDust ?? 1000n;
   const { kasReserve, tokenReserve, tokenCovid, lpCovid } = utxo.state;
+  const poolCovidHex = hexOf(poolCovid);
+  const tokenCovidHex = hexOf(tokenCovid);
+  const lpCovidHex = hexOf(lpCovid);
   const poolTokenOut = covenantIdOwned(poolCovid, q.newToken, false);
   const poolLpOut = covenantIdOwned(poolCovid, lpInventory.amount - q.dShares, false);
   const lpSharesOut = addressPresenceOwned(lpPubkey, q.dShares);
@@ -597,17 +600,20 @@ function buildAddLiquidity(k, tpl, tokenTpl, utxo, lpInventory, poolCovid, lpDep
     { transactionId: lpInventory.transactionId, index: lpInventory.index, value: lpInventory.value, scriptPublicKey: kcc20Spk(k, poolLpInvRedeem), signatureScript: transferSigScript(k, poolLpInvRedeem, lStates, lWitnesses), redeem: poolLpInvRedeem, role: "poolLpInventory" }
   ];
   const outputs = [
-    { value: q.newKas * SCALE, scriptPublicKey: poolCpSpk(k, newRedeem), role: "pool" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolTokenOut)), role: "poolToken" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolLpOut)), role: "poolLpInventory" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, lpSharesOut)), role: "lpShares" }
+    { value: q.newKas * SCALE, scriptPublicKey: poolCpSpk(k, newRedeem), role: "pool", binding: { covid: poolCovidHex, authorizingInput: 0 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolTokenOut)), role: "poolToken", binding: { covid: tokenCovidHex, authorizingInput: 2 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolLpOut)), role: "poolLpInventory", binding: { covid: lpCovidHex, authorizingInput: 3 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, lpSharesOut)), role: "lpShares", binding: { covid: lpCovidHex, authorizingInput: 3 } }
   ];
-  return { kind: "addLiquidity", inputs, outputs, economics: { dKas: q.dKas, dToken: q.dToken, dShares: q.dShares, newShares: q.newShares }, covids: { poolCovid: hexOf(poolCovid), tokenCovid: hexOf(tokenCovid) } };
+  return { kind: "addLiquidity", inputs, outputs, economics: { dKas: q.dKas, dToken: q.dToken, dShares: q.dShares, newShares: q.newShares }, covids: { poolCovid: poolCovidHex, tokenCovid: tokenCovidHex } };
 }
 function buildRemoveLiquidity(k, tpl, tokenTpl, utxo, lpShares, poolCovid, lpPubkey, q, presenceWitnessIdx, opts = {}) {
   if (lpShares.state.amount !== q.dShares) throw new Error("LP shares UTXO must equal dShares exactly (split first)");
   const dust = opts.tokenDust ?? 1000n;
   const { kasReserve, tokenReserve, tokenCovid, lpCovid } = utxo.state;
+  const poolCovidHex = hexOf(poolCovid);
+  const tokenCovidHex = hexOf(tokenCovid);
+  const lpCovidHex = hexOf(lpCovid);
   const poolTokenOut = covenantIdOwned(poolCovid, q.newToken, false);
   const lpTokenOut = addressPresenceOwned(lpPubkey, q.dToken);
   const poolLpOut = covenantIdOwned(poolCovid, q.dShares, false);
@@ -625,12 +631,12 @@ function buildRemoveLiquidity(k, tpl, tokenTpl, utxo, lpShares, poolCovid, lpPub
     { transactionId: lpShares.transactionId, index: lpShares.index, value: lpShares.value, scriptPublicKey: kcc20Spk(k, lpSharesRedeem), signatureScript: transferSigScript(k, lpSharesRedeem, lStates, lWitnesses), redeem: lpSharesRedeem, role: "lpShares" }
   ];
   const outputs = [
-    { value: q.newKas * SCALE, scriptPublicKey: poolCpSpk(k, newRedeem), role: "pool" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolTokenOut)), role: "poolToken" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, lpTokenOut)), role: "lpToken" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolLpOut)), role: "poolLpInventory" }
+    { value: q.newKas * SCALE, scriptPublicKey: poolCpSpk(k, newRedeem), role: "pool", binding: { covid: poolCovidHex, authorizingInput: 0 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolTokenOut)), role: "poolToken", binding: { covid: tokenCovidHex, authorizingInput: 1 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, lpTokenOut)), role: "lpToken", binding: { covid: tokenCovidHex, authorizingInput: 1 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolLpOut)), role: "poolLpInventory", binding: { covid: lpCovidHex, authorizingInput: 2 } }
   ];
-  return { kind: "removeLiquidity", inputs, outputs, economics: { dShares: q.dShares, dKas: q.dKas, dToken: q.dToken, newShares: q.newShares }, covids: { poolCovid: hexOf(poolCovid), tokenCovid: hexOf(tokenCovid) } };
+  return { kind: "removeLiquidity", inputs, outputs, economics: { dShares: q.dShares, dKas: q.dKas, dToken: q.dToken, newShares: q.newShares }, covids: { poolCovid: poolCovidHex, tokenCovid: tokenCovidHex } };
 }
 function buildBindLp(k, tpl, tokenTpl, utxo, poolCovid, lockedShares, opts = {}) {
   if (utxo.state.lpCovid.length !== 32 || !utxo.state.lpCovid.every((b2) => b2 === 0)) throw new Error("pool lpCovid is already bound \u2014 bindLp is one-time");
@@ -658,12 +664,13 @@ function buildBindLp(k, tpl, tokenTpl, utxo, poolCovid, lockedShares, opts = {})
   const inputs = [
     { transactionId: utxo.transactionId, index: utxo.index, value: poolValue, scriptPublicKey: poolCpSpk(k, curRedeem), signatureScript: bindSig, redeem: curRedeem, role: "pool" }
   ];
+  const poolCovidHex = hexOf(poolCovid);
   const outputs = [
-    { value: poolValue, scriptPublicKey: poolCpSpk(k, boundRedeem), role: "pool" },
-    { value: dust, scriptPublicKey: floorSpk, role: "lpFloor" },
-    { value: dust, scriptPublicKey: invSpk, role: "lpInventory" }
+    { value: poolValue, scriptPublicKey: poolCpSpk(k, boundRedeem), role: "pool", binding: { covid: poolCovidHex, authorizingInput: 0 } },
+    { value: dust, scriptPublicKey: floorSpk, role: "lpFloor", binding: { covid: lpCovidHex, authorizingInput: 0 } },
+    { value: dust, scriptPublicKey: invSpk, role: "lpInventory", binding: { covid: lpCovidHex, authorizingInput: 0 } }
   ];
-  return { kind: "bindLp", inputs, outputs, economics: { lockedShares, inventoryAmount }, covids: { poolCovid: hexOf(poolCovid), tokenCovid: hexOf(tokenCovid) }, lpCovidHex, lpInventoryAmount: inventoryAmount };
+  return { kind: "bindLp", inputs, outputs, economics: { lockedShares, inventoryAmount }, covids: { poolCovid: poolCovidHex, tokenCovid: hexOf(tokenCovid) }, lpCovidHex, lpInventoryAmount: inventoryAmount };
 }
 
 // src/native/curveCpTx.ts
@@ -721,6 +728,8 @@ function buildCpBuy(k, tpl, tokenTpl, utxo, inventory, curveCovid, buyerPubkey,
   if (tokenOut <= 0n || tokenOut >= inventory.amount) throw new Error("invalid tokenOut");
   if (inventory.amount !== utxo.state.tokenReserve) throw new Error("inventory.amount must equal the curve's committed tokenReserve");
   const dust = opts.tokenDust ?? 1000n;
+  const curveCovidHex = hexOf2(curveCovid);
+  const tokenCovidHex = hexOf2(utxo.state.tokenCovid);
   const newKas = utxo.realKas + kasIn;
   if (newKas > MAX_KAS) throw new Error("buy exceeds the curve max raise (9,000,000 TKAS)");
   const newToken = inventory.amount - tokenOut;
@@ -746,13 +755,13 @@ function buildCpBuy(k, tpl, tokenTpl, utxo, inventory, curveCovid, buyerPubkey,
     })
   ];
   const outputs = [
-    { value: newKas, scriptPublicKey: cpSpk(k, newCurveRedeem), role: "curve" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, invOutRedeem), role: "inventory" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, buyerRedeem), role: "recipient" },
+    { value: newKas, scriptPublicKey: cpSpk(k, newCurveRedeem), role: "curve", binding: { covid: curveCovidHex, authorizingInput: 0 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, invOutRedeem), role: "inventory", binding: { covid: tokenCovidHex, authorizingInput: 1 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, buyerRedeem), role: "recipient", binding: { covid: tokenCovidHex, authorizingInput: 1 } },
     { value: padFee3(creatorFee), scriptPublicKey: p2pkSpk(k, tpl.params.creatorFeeOwner), role: "creatorFee" },
     { value: padFee3(platformFee), scriptPublicKey: p2pkSpk(k, tpl.params.platformFeeOwner), role: "platformFee" }
   ];
-  return { kind: "buy", inputs, outputs, economics: { kasIn, tokenOut, creatorFee, platformFee, newRealKas: newKas, newTokenReserve: newToken, merged: mergeSum }, covids: { tokenCovid: hexOf2(utxo.state.tokenCovid) } };
+  return { kind: "buy", inputs, outputs, economics: { kasIn, tokenOut, creatorFee, platformFee, newRealKas: newKas, newTokenReserve: newToken, merged: mergeSum }, covids: { tokenCovid: tokenCovidHex } };
 }
 function buildCpSell(k, tpl, tokenTpl, utxo, sellerTokens, inventory, curveCovid, traderPubkey, tokenIn, kasOut, presenceWitnessIdx, opts = {}) {
   if (utxo.state.graduated) throw new Error("curve has graduated \u2014 sells are locked");
@@ -761,6 +770,8 @@ function buildCpSell(k, tpl, tokenTpl, utxo, sellerTokens, inventory, curveCovid
   if (kasOut <= 0n || kasOut % SCALE2 !== 0n || kasOut > utxo.realKas) throw new Error("invalid kasOut");
   if (inventory.amount !== utxo.state.tokenReserve) throw new Error("inventory.amount must equal the curve's committed tokenReserve");
   const dust = opts.tokenDust ?? 1000n;
+  const curveCovidHex = hexOf2(curveCovid);
+  const tokenCovidHex = hexOf2(utxo.state.tokenCovid);
   const sellerIn = sellerTokens.reduce((s, t) => s + t.state.amount, 0n);
   const change = sellerIn - tokenIn;
   if (change < 0n) throw new Error("seller inputs are less than the sell amount");
@@ -785,13 +796,13 @@ function buildCpSell(k, tpl, tokenTpl, utxo, sellerTokens, inventory, curveCovid
     })
   ];
   const outputs = [
-    { value: utxo.realKas - kasOut, scriptPublicKey: cpSpk(k, newCurveRedeem), role: "curve" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, invOutRedeem), role: "inventory" },
+    { value: utxo.realKas - kasOut, scriptPublicKey: cpSpk(k, newCurveRedeem), role: "curve", binding: { covid: curveCovidHex, authorizingInput: 0 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, invOutRedeem), role: "inventory", binding: { covid: tokenCovidHex, authorizingInput: 1 } },
     { value: padFee3(creatorFee), scriptPublicKey: p2pkSpk(k, tpl.params.creatorFeeOwner), role: "creatorFee" },
     { value: padFee3(platformFee), scriptPublicKey: p2pkSpk(k, tpl.params.platformFeeOwner), role: "platformFee" }
   ];
-  if (hasChange) outputs.push({ value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, traderChangeOut)), role: "seller" });
-  return { kind: "sell", inputs, outputs, economics: { tokenIn, kasOut, change, creatorFee, platformFee, newRealKas: utxo.realKas - kasOut, newTokenReserve: newToken }, covids: { tokenCovid: hexOf2(utxo.state.tokenCovid) } };
+  if (hasChange) outputs.push({ value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, traderChangeOut)), role: "seller", binding: { covid: tokenCovidHex, authorizingInput: 1 } });
+  return { kind: "sell", inputs, outputs, economics: { tokenIn, kasOut, change, creatorFee, platformFee, newRealKas: utxo.realKas - kasOut, newTokenReserve: newToken }, covids: { tokenCovid: tokenCovidHex } };
 }
 function buildCpGraduate(k, tpl, tokenTpl, poolTemplate, utxo, inventory, curveCovid, poolLockedShares, opts = {}) {
   if (utxo.state.graduated) throw new Error("already graduated");
@@ -822,10 +833,12 @@ function buildCpGraduate(k, tpl, tokenTpl, poolTemplate, utxo, inventory, curveC
     { transactionId: utxo.transactionId, index: utxo.index, value: utxo.realKas, scriptPublicKey: cpSpk(k, curRedeem), signatureScript: graduateSigV2(k, curRedeem, poolState, poolTokens), redeem: curRedeem, role: "curve" },
     { transactionId: inventory.transactionId, index: inventory.index, value: inventory.value, scriptPublicKey: kcc20Spk(k, invRedeem), signatureScript: transferSigScript(k, invRedeem, [poolTokens], [0]), redeem: invRedeem, role: "inventory" }
   ];
+  const curveCovidHex = hexOf2(curveCovid);
+  const tokenCovidHex = hexOf2(A);
   const outputs = [
-    { value: lockedValue, scriptPublicKey: cpSpk(k, lockedRedeem), role: "curve" },
-    { value: poolKas, scriptPublicKey: poolSpkV, role: "pool" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, poolTokenRedeem), role: "poolToken" },
+    { value: lockedValue, scriptPublicKey: cpSpk(k, lockedRedeem), role: "curve", binding: { covid: curveCovidHex, authorizingInput: 0 } },
+    { value: poolKas, scriptPublicKey: poolSpkV, role: "pool", binding: { covid: poolCovidHex, authorizingInput: 0 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, poolTokenRedeem), role: "poolToken", binding: { covid: tokenCovidHex, authorizingInput: 1 } },
     { value: padFee3(gradFee), scriptPublicKey: p2pkSpk(k, tpl.params.platformFeeOwner), role: "gradFee" }
   ];
   return { kind: "graduate", inputs, outputs, economics: { poolKas, gradFee, leftover, poolLockedShares }, covids: { tokenCovid: hexOf2(A), poolCovid: poolCovidHex } };
@@ -909,6 +922,8 @@ function v3SwapSellSig(k, redeem, kasOutUnits, poolTokenOut, traderChangeOut) {
 function buildPoolV3SwapKasForToken(k, tpl, tokenTpl, params, utxo, poolCovid, traderPubkey, q, mergeTokens = [], presenceWitnessIdx = 0, opts = {}) {
   const dust = opts.tokenDust ?? 1000n;
   const { kasReserve, tokenReserve, tokenCovid, totalShares, lpCovid } = utxo.state;
+  const poolCovidHex = hexOf3(poolCovid);
+  const tokenCovidHex = hexOf3(tokenCovid);
   const mergeSum = mergeTokens.reduce((s, t) => s + t.state.amount, 0n);
   const poolTokenOut = covenantIdOwned(poolCovid, q.newToken, false);
   const traderTokenOut = addressPresenceOwned(traderPubkey, q.tokenOut + mergeSum);
@@ -926,18 +941,20 @@ function buildPoolV3SwapKasForToken(k, tpl, tokenTpl, params, utxo, poolCovid, t
     })
   ];
   const outputs = [
-    { value: q.newKas * SCALE, scriptPublicKey: poolCpV3Spk(k, newRedeem), role: "pool" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolTokenOut)), role: "poolToken" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, traderTokenOut)), role: "trader" },
+    { value: q.newKas * SCALE, scriptPublicKey: poolCpV3Spk(k, newRedeem), role: "pool", binding: { covid: poolCovidHex, authorizingInput: 0 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolTokenOut)), role: "poolToken", binding: { covid: tokenCovidHex, authorizingInput: 1 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, traderTokenOut)), role: "trader", binding: { covid: tokenCovidHex, authorizingInput: 1 } },
     { value: q.creatorOut, scriptPublicKey: p2pkSpk2(k, params.creatorFeeOwner), role: "creatorFee" },
     { value: q.platformOut, scriptPublicKey: p2pkSpk2(k, params.platformFeeOwner), role: "platformFee" }
   ];
-  return { kind: "swapKasForToken", inputs, outputs, economics: { kasIn: q.kasIn, tokenOut: q.tokenOut }, covids: { poolCovid: hexOf3(poolCovid), tokenCovid: hexOf3(tokenCovid) } };
+  return { kind: "swapKasForToken", inputs, outputs, economics: { kasIn: q.kasIn, tokenOut: q.tokenOut }, covids: { poolCovid: poolCovidHex, tokenCovid: tokenCovidHex } };
 }
 function buildPoolV3SwapTokenForKas(k, tpl, tokenTpl, params, utxo, poolCovid, traderPubkey, traderTokens, q, presenceWitnessIdx, opts = {}) {
   if (traderTokens.length < 1) throw new Error("need at least one trader token");
   const dust = opts.tokenDust ?? 1000n;
   const { kasReserve, tokenReserve, tokenCovid, totalShares, lpCovid } = utxo.state;
+  const poolCovidHex = hexOf3(poolCovid);
+  const tokenCovidHex = hexOf3(tokenCovid);
   const traderIn = traderTokens.reduce((s, t) => s + t.state.amount, 0n);
   const change = traderIn - q.tokenIn;
   if (change < 0n) throw new Error("trader inputs are less than the sell amount");
@@ -958,13 +975,13 @@ function buildPoolV3SwapTokenForKas(k, tpl, tokenTpl, params, utxo, poolCovid, t
     })
   ];
   const outputs = [
-    { value: q.newKas * SCALE, scriptPublicKey: poolCpV3Spk(k, newRedeem), role: "pool" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolTokenOut)), role: "poolToken" },
+    { value: q.newKas * SCALE, scriptPublicKey: poolCpV3Spk(k, newRedeem), role: "pool", binding: { covid: poolCovidHex, authorizingInput: 0 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, poolTokenOut)), role: "poolToken", binding: { covid: tokenCovidHex, authorizingInput: 1 } },
     { value: q.creatorOut, scriptPublicKey: p2pkSpk2(k, params.creatorFeeOwner), role: "creatorFee" },
     { value: q.platformOut, scriptPublicKey: p2pkSpk2(k, params.platformFeeOwner), role: "platformFee" }
   ];
-  if (hasChange) outputs.push({ value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, traderChangeOut)), role: "trader" });
-  return { kind: "swapTokenForKas", inputs, outputs, economics: { kasOut: q.kasOut, tokenIn: q.tokenIn }, covids: { poolCovid: hexOf3(poolCovid), tokenCovid: hexOf3(tokenCovid) } };
+  if (hasChange) outputs.push({ value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, traderChangeOut)), role: "trader", binding: { covid: tokenCovidHex, authorizingInput: 1 } });
+  return { kind: "swapTokenForKas", inputs, outputs, economics: { kasOut: q.kasOut, tokenIn: q.tokenIn }, covids: { poolCovid: poolCovidHex, tokenCovid: tokenCovidHex } };
 }
 
 // src/native/vestingTx.ts
@@ -979,6 +996,7 @@ __export(vestingTx_exports, {
   vestingSpkForState: () => vestingSpkForState
 });
 var VEST_SELECTOR = { claim: 0, claimFinal: 1 };
+var hexOf4 = (u8) => Array.from(u8, (b) => b.toString(16).padStart(2, "0")).join("");
 function vestedAmount(total, startScore, durationScore, daaScore) {
   if (daaScore <= startScore) return 0n;
   const elapsed = BigInt(daaScore - startScore);
@@ -1004,6 +1022,8 @@ function buildVestingClaim(k, vestTpl, tokenTpl, vestingUtxo, lockedToken, vesti
   const remaining = total - claimed;
   if (release <= 0n || release >= remaining) throw new Error("partial claim must be > 0 and < remaining (use claimFinal to drain)");
   const dust = opts.tokenDust ?? 1000n;
+  const vestingCovidHex = hexOf4(vestingCovid);
+  const tokenBinding = opts.tokenCovid ? { covid: opts.tokenCovid, authorizingInput: 1 } : void 0;
   const newClaimed = claimed + release, newRemaining = remaining - release;
   const curRedeem = materializeVestingScript(vestTpl, claimed);
   const newRedeem = materializeVestingScript(vestTpl, newClaimed);
@@ -1020,20 +1040,22 @@ function buildVestingClaim(k, vestTpl, tokenTpl, vestingUtxo, lockedToken, vesti
     { transactionId: lockedToken.transactionId, index: lockedToken.index, value: lockedToken.value, scriptPublicKey: kcc20Spk(k, lockedRedeem), signatureScript: transferSigScript(k, lockedRedeem, [relockState, recipientState], [0]), redeem: lockedRedeem, role: "lockedToken" }
   ];
   const outputs = [
-    { value: vestingUtxo.value, scriptPublicKey: vestingSpk(k, newRedeem), role: "vesting" },
+    { value: vestingUtxo.value, scriptPublicKey: vestingSpk(k, newRedeem), role: "vesting", binding: { covid: vestingCovidHex, authorizingInput: 0 } },
     // V continuation (claimed bumped)
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, relockState)), role: "relock" },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, relockState)), role: "relock", binding: tokenBinding },
     // re-locked (A, V-owned)
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, recipientState)), role: "recipient" }
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, recipientState)), role: "recipient", binding: tokenBinding }
     // to creator (A, presence)
   ];
-  return { kind: "claim", inputs, outputs, economics: { release, newClaimed } };
+  return { kind: "claim", inputs, outputs, economics: { release, newClaimed }, covids: opts.tokenCovid ? { tokenCovid: opts.tokenCovid } : {} };
 }
 function buildVestingClaimFinal(k, vestTpl, tokenTpl, vestingUtxo, lockedToken, vestingCovid, creatorPubkey, claimed, opts = {}) {
   const total = BigInt(vestTpl.params.total);
   if (claimed < 0n || claimed >= total) throw new Error("nothing left to claim");
   const remaining = total - claimed;
   const dust = opts.tokenDust ?? 1000n;
+  const vestingCovidHex = hexOf4(vestingCovid);
+  const tokenBinding = opts.tokenCovid ? { covid: opts.tokenCovid, authorizingInput: 1 } : void 0;
   const curRedeem = materializeVestingScript(vestTpl, claimed);
   const newRedeem = materializeVestingScript(vestTpl, total);
   const lockedState = covenantIdOwned(vestingCovid, remaining, false);
@@ -1047,10 +1069,10 @@ function buildVestingClaimFinal(k, vestTpl, tokenTpl, vestingUtxo, lockedToken,
     { transactionId: lockedToken.transactionId, index: lockedToken.index, value: lockedToken.value, scriptPublicKey: kcc20Spk(k, lockedRedeem), signatureScript: transferSigScript(k, lockedRedeem, [recipientState], [0]), redeem: lockedRedeem, role: "lockedToken" }
   ];
   const outputs = [
-    { value: vestingUtxo.value, scriptPublicKey: vestingSpk(k, newRedeem), role: "vesting" },
-    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, recipientState)), role: "recipient" }
+    { value: vestingUtxo.value, scriptPublicKey: vestingSpk(k, newRedeem), role: "vesting", binding: { covid: vestingCovidHex, authorizingInput: 0 } },
+    { value: dust, scriptPublicKey: kcc20Spk(k, materializeKcc20Script(tokenTpl, recipientState)), role: "recipient", binding: tokenBinding }
   ];
-  return { kind: "claimFinal", inputs, outputs, economics: { release: remaining } };
+  return { kind: "claimFinal", inputs, outputs, economics: { release: remaining }, covids: opts.tokenCovid ? { tokenCovid: opts.tokenCovid } : {} };
 }
 
 // src/wallet/index.ts