@smartledger/bsv 3.4.2 → 3.4.4

package/docs/COVENANT_DEVELOPMENT_RESOLVED.md

@@ -136,9 +136,9 @@ node custom_script_signature_test.js
 ## 📦 Installation
 
 ```bash
-npm install smartledger-bsv@3.1.1
+npm install smartledger-bsv@3.4.0
 # or
-npm install @smartledger/bsv@3.1.1
+npm install @smartledger/bsv@3.4.4
 ```
 
 ## ✅ Verification Results

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -15,17 +15,17 @@ Based on actual library analysis, SmartLedger-BSV provides **12 distinct modules
 
 | Module | File | Size | Purpose | Status in Docs |
 |--------|------|------|---------|----------------|
-| **bsv.min.js** | Core BSV + SmartContract | 449KB | Complete BSV development | ✅ Documented |
-| **bsv.bundle.js** | Everything in one | 885KB | All features included | ⚠️ Size wrong (764KB→885KB) |
+| **bsv.min.js** | Core BSV + SmartContract | 937KB | Complete BSV development | ✅ Documented |
+| **bsv.bundle.js** | Everything in one | 937KB | All features included | ✅ Documented |
 
 ### **Specialized Modules** 
 
 | Module | File | Size | Purpose | Status in Docs |
 |--------|------|------|---------|----------------|
-| **bsv-smartcontract.min.js** | SmartContract framework | 451KB | Covenant development | ✅ Documented |
-| **bsv-covenant.min.js** | Covenant interface | 32KB | Covenant operations | ✅ Documented |
-| **bsv-script-helper.min.js** | Custom script tools | 27KB | Script development | ✅ Documented |
-| **bsv-security.min.js** | Security enhancements | 290KB | Hardened crypto | ✅ Documented |
+| **bsv-smartcontract.min.js** | SmartContract framework | 937KB | Covenant development | ✅ Documented |
+| **bsv-covenant.min.js** | Covenant interface | 913KB | Covenant operations | ✅ Documented |
+| **bsv-script-helper.min.js** | Custom script tools | 26KB | Script development | ✅ Documented |
+| **bsv-security.min.js** | Security enhancements (opt-in helpers) | 26KB | `SmartVerify` / `EllipticFixed` | ✅ Documented |
 
 ### **Utility Modules**
 
@@ -33,15 +33,15 @@ Based on actual library analysis, SmartLedger-BSV provides **12 distinct modules
 |--------|------|------|---------|----------------|
 | **bsv-ecies.min.js** | ECIES encryption | 71KB | Message encryption | ✅ Documented |
 | **bsv-message.min.js** | Message signing | 26KB | Message operations | ✅ Documented |
-| **bsv-mnemonic.min.js** | HD wallet support | 670KB | Mnemonic operations | ✅ Documented |
+| **bsv-mnemonic.min.js** | HD wallet support | 681KB | Mnemonic operations | ✅ Documented |
 
 ### **🆕 Advanced Modules (Missing from Documentation!)**
 
 | Module | File | Size | Purpose | Status in Docs |
 |--------|------|------|---------|----------------|
-| **🔐 bsv-shamir.min.js** | Shamir Secret Sharing | 433KB | Threshold cryptography | ❌ **NOT DOCUMENTED** |
-| **🌐 bsv-gdaf.min.js** | Global Digital Attestation | 604KB | Verifiable credentials | ❌ **NOT DOCUMENTED** |
-| **⚖️ bsv-ltp.min.js** | Legal Token Protocol | 817KB | Legal compliance tokens | ❌ **NOT DOCUMENTED** |
+| **🔐 bsv-shamir.min.js** | Shamir Secret Sharing | 432KB | Threshold cryptography | ✅ Documented |
+| **🌐 bsv-gdaf.min.js** | Global Digital Attestation | 1184KB | Verifiable credentials | ✅ Documented |
+| **⚖️ bsv-ltp.min.js** | Legal Token Protocol | 1184KB | Legal compliance tokens | ✅ Documented |
 
 ---
 
@@ -49,32 +49,31 @@ Based on actual library analysis, SmartLedger-BSV provides **12 distinct modules
 
 ### **1. Missing Advanced Modules (40% of library undocumented!)**
 
-Three major modules totaling **1.82MB** of functionality are completely missing from documentation:
+Three advanced modules totaling **~2.7MB** of functionality:
 
-#### **🔐 Shamir Secret Sharing (433KB)**
+#### **🔐 Shamir Secret Sharing (432KB)**
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@3.3.4/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@3.4.4/bsv-shamir.min.js`
 
-#### **🌐 Global Digital Attestation Framework - GDAF (604KB)**  
+#### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@3.3.4/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@3.4.4/bsv-gdaf.min.js`
 
-#### **⚖️ Legal Token Protocol - LTP (817KB)**
+#### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@3.3.4/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@3.4.4/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
 | Module | Documented Size | Actual Size | Difference |
 |--------|----------------|-------------|------------|
-| `bsv.bundle.js` | 764KB | 885KB | +121KB (+16%) |
-| All others | Accurate | Accurate | ✅ Correct |
+| All bundles | Documented | Match disk | ✅ Resolved as of v3.4.4 |
 
 ---
 
@@ -82,41 +81,41 @@ Three major modules totaling **1.82MB** of functionality are completely missing
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 449KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js` |
-| **bsv.bundle.js** | 885KB | Everything in one file | `unpkg.com/@smartledger/bsv@3.3.4/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 451KB | Covenant development | `unpkg.com/@smartledger/bsv@3.3.4/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 32KB | Covenant operations | `unpkg.com/@smartledger/bsv@3.3.4/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 27KB | Custom script tools | `unpkg.com/@smartledger/bsv@3.3.4/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 290KB | Security enhancements | `unpkg.com/@smartledger/bsv@3.3.4/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@3.3.4/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@3.3.4/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 670KB | HD wallets | `unpkg.com/@smartledger/bsv@3.3.4/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 433KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@3.3.4/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 604KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@3.3.4/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 817KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@3.3.4/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@3.4.4/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@3.4.4/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@3.4.4/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@3.4.4/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@3.4.4/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@3.4.4/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@3.4.4/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@3.4.4/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@3.4.4/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@3.4.4/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@3.4.4/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
 ### **Complete Loading Strategy Examples**
 
-#### **1. Basic Development (476KB)**
+#### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-script-helper.min.js"></script>
 ```
 
-#### **2. Smart Contract Development (932KB)**
+#### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-smartcontract.min.js"></script>
 ```
 
-#### **3. 🆕 Legal & Compliance Development (1.7MB)**
+#### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -131,11 +130,11 @@ Three major modules totaling **1.82MB** of functionality are completely missing
 </script>
 ```
 
-#### **4. 🆕 Security & Cryptography (1.35MB)**
+#### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -145,9 +144,9 @@ Three major modules totaling **1.82MB** of functionality are completely missing
 </script>
 ```
 
-#### **5. Everything Bundle (885KB)**
+#### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -249,16 +248,20 @@ const obligationPrep = bsv.prepareObligationToken('PaymentObligation', issuerDID
 
 ## 📈 **Module Size Analysis**
 
-### **Total Library Capabilities**: 4.82MB across 12 modules
+### **Total Library Capabilities**: ~8.9MB across 16 standalone bundles
 
-| Category | Modules | Total Size | Percentage |
-|----------|---------|------------|------------|
-| **Core & Smart Contracts** | 4 modules | 1.39MB | 29% |
-| **🆕 Legal & Identity** | 2 modules | 1.42MB | 29% |
-| **Utilities** | 3 modules | 767KB | 16% |
-| **🆕 Advanced Crypto** | 1 module | 433KB | 9% |
-| **Security** | 1 module | 290KB | 6% |
-| **Everything Bundle** | 1 file | 885KB | 18% |
+Each standalone bundle is self-contained (it re-embeds core BSV at ~937KB),
+so the total is the sum of independently-loadable file sizes — not the
+working-set size if you load multiple.
+
+| Category | Modules | Total Size |
+|----------|---------|------------|
+| **Core / Smart Contracts** | bsv.min, bsv.bundle, bsv-smartcontract, bsv-covenant, bsv-script-helper | ~3.75MB |
+| **🆕 Credentials (3.4.x)** | bsv-didweb, bsv-vcjwt, bsv-statuslist, bsv-anchor | ~1.65MB |
+| **🆕 Legal & Identity** | bsv-ltp, bsv-gdaf | ~2.31MB |
+| **Utilities** | bsv-ecies, bsv-message, bsv-mnemonic | ~778KB |
+| **🆕 Advanced Crypto** | bsv-shamir | 432KB |
+| **Security** | bsv-security | 26KB |
 
 ### **Modular Loading Benefits**
 
@@ -276,7 +279,7 @@ const obligationPrep = bsv.prepareObligationToken('PaymentObligation', issuerDID
 **Files to Update:**
 - `README.md` - Add 3 new modules to loading options table
 - `README.md` - Add usage examples for Shamir, GDAF, LTP
-- `README.md` - Update file sizes (bundle.js: 764KB → 885KB)
+- ~~`README.md` - Update file sizes (bundle.js: 764KB → 885KB)~~ — resolved; bundle.js is now 937KB and accurate everywhere
 
 **New Sections Needed:**
 - Shamir Secret Sharing usage guide

package/docs/advanced/LEGAL_TOKEN_PROTOCOL.md

@@ -165,7 +165,7 @@ LTP is built on top of SmartLedger-BSV's modular architecture and integrates sea
 
 #### **Foundation Layer (Required)**
 - **Core BSV (`bsv.min.js`)**: Provides Bitcoin SV primitives (keys, transactions, addresses)
-- **Cryptographic Functions**: Uses hardened elliptic curve implementations for all signatures
+- **Cryptographic Functions**: Token signing uses BSV's standard ECDSA path (the same one used by Bitcoin transaction signing). For stricter verification of incoming tokens from untrusted sources, callers can route verification through `bsv.SmartVerify.smartVerify(...)` explicitly — it is not on by default. See [README › Security](../../README.md#-security).
 
 #### **Identity Layer (Recommended)**  
 - **GDAF Module (`bsv-gdaf.min.js`)**: Provides DID creation and Verifiable Credential standards
@@ -242,7 +242,7 @@ const propertyToken = bsv.createRightToken({
   type: 'PropertyTitle',              // LTP: Legal structure
   owner: ownerDID,                    // GDAF: Digital identity  
   jurisdiction: 'US-CA',              // LTP: Legal compliance
-  // Signed with hardened crypto     // Core: Enhanced security
+  // Signed with BSV's standard ECDSA // Core: Bitcoin SV signature
   // Can be covenant-protected       // SmartContract: Enforcement
   // Keys can use Shamir sharing     // Shamir: Distributed control
 });
@@ -301,7 +301,7 @@ const anchor = bsv.LTP.Anchor.prepareCommitment(rightToken);            // 6. Pr
 
 ## 🔐 Security & Trust Features
 
-- **🔒 Cryptographic Signatures** - All tokens signed with enhanced elliptic curves
+- **🔒 Cryptographic Signatures** - Tokens signed with BSV's standard secp256k1 ECDSA path. Opt-in `bsv.SmartVerify` available for stricter verification of incoming tokens.
 - **🎭 Selective Disclosure** - Privacy-preserving proof generation with zero-knowledge
 - **⚖️ Legal Validity Proofs** - Jurisdiction-specific compliance verification
 - **⛓️ Blockchain Anchoring** - Immutable commitment proofs on BSV blockchain

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@3.3.4/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@3.4.4/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -12,10 +12,10 @@ SmartLedger-BSV offers multiple installation methods to suit different developme
 npm install @smartledger/bsv
 
 # Install specific version
-npm install @smartledger/bsv@3.3.4
+npm install @smartledger/bsv@3.4.4
 
 # Install with exact version lock
-npm install --save-exact @smartledger/bsv@3.3.4
+npm install --save-exact @smartledger/bsv@3.4.4
 ```
 
 ### **Usage in Node.js**
@@ -45,20 +45,20 @@ const tx: Transaction = new Transaction();
 
 ### **CDN Links (Instant Setup)**
 
-#### **Core Library Only (449KB)**
+#### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
 </script>
 ```
 
-#### **Complete Bundle (885KB)**  
+#### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -69,22 +69,22 @@ Everything in one file:
 
 ### **Modular Loading (Choose What You Need)**
 
-#### **Smart Contract Development (932KB total)**
+#### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
 </script>
 ```
 
-#### **Legal & Identity Development (1.87MB total)**
+#### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -96,11 +96,11 @@ Everything in one file:
 </script>
 ```
 
-#### **Security & Cryptography (1.17MB total)**
+#### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 449KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js` |
-| **bsv.bundle.js** | 885KB | Everything in one file | `unpkg.com/@smartledger/bsv@3.3.4/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 451KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@3.3.4/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 817KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@3.3.4/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 604KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@3.3.4/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 433KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@3.3.4/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 290KB | Security enhancements | `unpkg.com/@smartledger/bsv@3.3.4/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 670KB | HD wallets | `unpkg.com/@smartledger/bsv@3.3.4/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@3.3.4/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 32KB | Covenant operations | `unpkg.com/@smartledger/bsv@3.3.4/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 27KB | Custom script tools | `unpkg.com/@smartledger/bsv@3.3.4/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@3.3.4/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@3.4.4/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@3.4.4/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@3.4.4/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@3.4.4/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@3.4.4/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@3.4.4/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@3.4.4/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@3.4.4/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@3.4.4/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@3.4.4/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@3.4.4/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -13,11 +13,11 @@ npm install @smartledger/bsv
 
 ### Browser CDN (Instant)
 ```html
-<!-- Core library (449KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
+<!-- Core library (937KB) -->
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
 
-<!-- Everything included (885KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.bundle.js"></script>
+<!-- Everything included (937KB) -->
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -126,28 +126,28 @@ const amount = preimage.getField('amount');
 SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
-<!-- Core BSV only (449KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
+<!-- Core BSV only (937KB) -->
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
 
-<!-- Smart contracts (873KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-smartcontract.min.js"></script>
+<!-- Smart contracts (937KB) -->
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-smartcontract.min.js"></script>
 
-<!-- Legal tokens (1.1MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-ltp.min.js"></script>
+<!-- Legal tokens (1.16MB) -->
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-ltp.min.js"></script>
 
-<!-- Digital identity (1.1MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-gdaf.min.js"></script>
+<!-- Digital identity (1.16MB) -->
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-gdaf.min.js"></script>
 
-<!-- Everything (885KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.bundle.js"></script>
+<!-- Everything (937KB) -->
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**
 
-### **Security First**
-- ✅ **Elliptic curve hardening** - Enhanced cryptographic security
-- ✅ **Production tested** - Battle-tested in real applications  
-- ✅ **Comprehensive validation** - Built-in error checking
+### **Security helpers (opt-in)**
+- ✅ **`bsv.SmartVerify` / `bsv.EllipticFixed`** - hardened verify with strict input validation and low-`s` canonicalization. Call explicitly; the default `signature.verify()` does **not** route through them. See [README › Security](../../README.md#-security).
+- ✅ **Pinned dependencies** - `elliptic@6.6.1` (upstream-patched), `bn.js@4.11.9`, `bs58@4.0.1`
+- ✅ **Comprehensive validation** - Built-in error checking and 534+ mocha tests
 
 ### **Developer Experience**  
 - ✅ **Zero breaking changes** - Drop-in replacement for bsv@1.5.6

package/docs/migration/FROM_BSV_1_5_6.md

@@ -2,7 +2,7 @@
 
 **Seamless upgrade path with zero breaking changes**
 
-SmartLedger-BSV is designed as a **100% backward-compatible** drop-in replacement for bsv@1.5.6. Your existing code will work unchanged while gaining access to enhanced security and powerful new features.
+SmartLedger-BSV is designed as a **100% backward-compatible** drop-in replacement for bsv@1.5.6. Your existing code will work unchanged while gaining access to optional hardening helpers and powerful new features.
 
 ## 🔄 **Instant Migration (30 seconds)**
 
@@ -73,13 +73,19 @@ const hdKey = bsv.HDPrivateKey.fromSeed(mnemonic.toSeed());
 
 ## 🚀 **What You Gain (No Code Changes Required)**
 
-### **Enhanced Security**
+### **Optional hardening helpers (opt-in)**
 ```javascript
-// Same API, enhanced security under the hood
-const privateKey = new bsv.PrivateKey();  // Now with hardened elliptic curves
-const signature = privateKey.sign(hash);   // Enhanced cryptographic operations
+// Standard API behaves identically to bsv@1.5.6
+const privateKey = new bsv.PrivateKey();
+const signature = privateKey.sign(hash);
+
+// Opt-in: stricter verification helpers that reject malformed signatures
+// (r=0, s=0, r>=n, s>=n) and canonicalize s to the low half. Call explicitly.
+const ok = bsv.SmartVerify.smartVerify(msgHashBuffer, derSigBuffer, publicKey);
 ```
 
+> **Note:** the standard `signature.verify()` / `transaction.verify()` / `Message().verify()` paths in this library use BSV's own pure-JS ECDSA and are **not** routed through `SmartVerify` or `EllipticFixed` by default. See the [Security section in the README](../../README.md#-security) for details on what's opt-in vs. on by default.
+
 ### **Improved Performance**  
 - ✅ **Optimized operations** - Faster transaction creation and signing
 - ✅ **Better memory usage** - Reduced memory footprint
@@ -153,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@3.3.4/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@3.4.4/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/gdaf-entry.js

@@ -1,2 +1 @@
-// GDAF module placeholder - will be implemented in future release
-module.exports = require('./lib/smart_contract');
+module.exports = require('./lib/gdaf')

package/index.js

@@ -2,17 +2,30 @@
 
 var bsv = module.exports
 
-// Initialize dependencies first to avoid circular dependency issues
+// Initialize dependencies first to avoid circular dependency issues.
+//
+// `bn.js`, `bs58`, and `elliptic` are declared runtime deps in
+// package.json. In Node they MUST be installed — silently swallowing
+// a require() failure here used to mask broken installs behind cryptic
+// downstream errors in lib/crypto/bn.js etc. We now let those throw in
+// Node so the failure points at the real cause (`npm install` is broken).
+// In a browser context the bundler is expected to inline these; if it
+// somehow didn't, we tolerate the absence rather than block the whole
+// library load.
 bsv.deps = bsv.deps || {}
-try {
+bsv.deps._ = require('./lib/util/_')
+bsv.deps.Buffer = (typeof Buffer !== 'undefined') ? Buffer : null
+
+if (typeof window === 'undefined') {
+  // Node — hard require; failure means broken install.
   bsv.deps.bnjs = require('bn.js')
   bsv.deps.bs58 = require('bs58')
-  bsv.deps.Buffer = (typeof Buffer !== 'undefined') ? Buffer : null
   bsv.deps.elliptic = require('elliptic')
-  bsv.deps._ = require('./lib/util/_')
-} catch (e) {
-  // Handle browser environment gracefully
-  console.warn('Some dependencies may not be available in browser environment:', e.message)
+} else {
+  // Browser — bundler-resolved; tolerate absence individually.
+  try { bsv.deps.bnjs = require('bn.js') } catch (e) { /* polyfilled by bundler */ }
+  try { bsv.deps.bs58 = require('bs58') } catch (e) { /* polyfilled by bundler */ }
+  try { bsv.deps.elliptic = require('elliptic') } catch (e) { /* polyfilled by bundler */ }
 }
 
 // module information

package/lib/smart_contract/covenant.js

@@ -26,6 +26,15 @@ try {
   fs = null
 }
 
+// Set BSV_DEBUG=1 (Node) or window.BSV_DEBUG = true (browser) to surface
+// informational warnings from this module. Matches the gating pattern
+// used by lib/browser-utxo-manager-es5.js since v3.4.1.
+var debug = function () {
+  var enabled = (typeof process !== 'undefined' && process.env && process.env.BSV_DEBUG) ||
+                (typeof window !== 'undefined' && window.BSV_DEBUG)
+  if (enabled) console.log.apply(console, arguments)
+}
+
 /**
  * Covenant Class - Advanced covenant management
  * @param {PrivateKey} privateKey - Private key for covenant operations
@@ -212,7 +221,7 @@ Covenant.prototype.validate = function(spendingTx, covenantUtxo) {
  */
 Covenant.prototype.save = function(covenantUtxo) {
   if (!fs) {
-    console.warn('File system operations not available in browser environment')
+    debug('File system operations not available in browser environment')
     return covenantUtxo
   }