@smartledger/bsv 5.3.1 → 5.4.1

package/build/webpack.base.js

@@ -86,6 +86,16 @@ function bundlePolyfills (config) {
   config.module.rules = (config.module.rules || []).concat([
     { test: /secrets\.js-grempe/, parser: { amd: false } }
   ])
+  // crypto-browserify drags in the whole `elliptic` library via browserify-sign
+  // + create-ecdh (for crypto.createSign/createVerify/createECDH) — APIs bsv
+  // never calls (its EC crypto is @noble). Stub them so `elliptic` is not bundled
+  // (~140KB/bundle). randomBytes/createHash/createHmac (the Shamir CSPRNG and
+  // hashing) are unaffected.
+  config.resolve = config.resolve || {}
+  config.resolve.alias = Object.assign(
+    { 'browserify-sign': false, 'create-ecdh': false },
+    config.resolve.alias
+  )
   return merge(config, FULL_FALLBACK, [
     new webpack.ProvidePlugin({ Buffer: ['buffer', 'Buffer'], process: 'process/browser' })
   ])

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@5.3.1/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@5.4.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@5.3.1/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@5.4.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@5.3.1/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@5.4.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.3.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@5.3.1/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.3.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.3.1/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@5.3.1/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@5.3.1/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@5.3.1/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@5.3.1/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@5.3.1/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@5.3.1/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@5.3.1/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.4.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@5.4.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.4.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.4.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@5.4.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@5.4.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@5.4.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@5.4.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@5.4.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@5.4.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@5.4.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@5.3.1/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@5.4.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.3.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@5.3.1/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@5.3.1/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@5.3.1/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@5.3.1/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@5.3.1/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@5.3.1/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@5.3.1/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.3.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.3.1/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@5.3.1/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.4.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@5.4.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@5.4.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@5.4.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@5.4.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@5.4.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@5.4.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@5.4.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.4.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.4.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@5.4.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@5.3.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@5.4.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/ltp/index.js

@@ -63,16 +63,11 @@ LTP.prototype.createRightToken = function(rightData, privateKey, options) {
       }
     }
     
-    // Add cryptographic proof
+    // Add cryptographic proof. Sign via the right-token signer (which sets
+    // proof.jws + tokenHash); the older LTPProof.createSignature entrypoint no
+    // longer exists (proof.js exposes prepareSignatureProof).
     if (options.addProof !== false) {
-      var proofResult = LTPProof.createSignature(token, privateKey, {
-        purpose: 'assertionMethod'
-      })
-      
-      if (proofResult.success) {
-        token.proof = proofResult.proof
-        token.tokenHash = proofResult.tokenHash
-      }
+      token = LTPRight._signToken(token, privateKey)
     }
     
     // Anchor to blockchain if requested
@@ -128,7 +123,7 @@ LTP.prototype.validateClaim = function(claimData, schemaType) {
  * @returns {Object} Selective disclosure proof
  */
 LTP.prototype.createSelectiveDisclosure = function(token, revealedFields, nonce) {
-  return LTPProof.createSelectiveDisclosure(token, revealedFields, nonce)
+  return LTPProof.prepareSelectiveDisclosure(token, revealedFields, nonce)
 }
 
 /**
@@ -144,8 +139,12 @@ LTP.prototype.verifyToken = function(token, publicKey) {
       error: 'No proof found in token'
     }
   }
-  
-  return LTPProof.verifySignature(token, publicKey)
+
+  // Instance-created tokens (right/transfer/obligation) are signed by
+  // RightToken._signToken (detached ES256K JWS + tokenHash), so verification
+  // goes through the matching RightToken.verifyToken rather than the
+  // proofValue-based LTPProof path.
+  return LTPRight.verifyToken(token, publicKey)
 }
 
 /**
@@ -164,7 +163,7 @@ LTP.prototype.transferRight = function(token, newOwner, ownerKey, options) {
   options = options || {}
   
   try {
-    // Verify current ownership
+    // Verify current ownership against the owner's key before transferring.
     var verification = this.verifyToken(token, ownerKey.toPublicKey().toString())
     if (!verification.valid) {
       return {
@@ -172,23 +171,21 @@ LTP.prototype.transferRight = function(token, newOwner, ownerKey, options) {
         error: 'Invalid token or ownership proof'
       }
     }
-    
-    // Create transfer
-    var transferResult = LTPRight.transfer(token, newOwner, ownerKey, options)
-    
+
+    // Build and sign the transferred token. prepareRightTokenTransfer signs
+    // the new token with the current owner's key, so no separate proof step
+    // is needed.
+    var transferResult = LTPRight.prepareRightTokenTransfer(token, newOwner, ownerKey, options)
+    if (!transferResult.success) {
+      return {
+        success: false,
+        error: transferResult.error
+      }
+    }
+
     var transferredToken = transferResult.newToken
     var transferProof = transferResult.transferProof
-    
-    // Add new proof with new owner
-    var proofResult = LTPProof.createSignature(transferredToken, ownerKey, {
-      purpose: 'authentication'
-    })
-    
-    if (proofResult.success) {
-      transferredToken.proof = proofResult.proof
-      transferredToken.tokenHash = proofResult.tokenHash
-    }
-    
+
     // Anchor transfer if requested
     if (options.anchor) {
       var anchorResult = LTPAnchor.anchorToken(transferredToken, options.anchor)
@@ -243,29 +240,20 @@ LTP.prototype.createObligation = function(rightToken, obligationData, privateKey
   $.checkArgument(privateKey instanceof PrivateKey, 'Invalid private key')
   
   try {
-    // Create obligation token
-    var obligation = LTPRight.createObligation(rightToken, obligationData.obligor, obligationData, privateKey)
-    
-    if (!obligation) {
+    // Build and sign the correlative obligation token. prepareObligationToken
+    // signs inline via _signToken, so no separate proof step is needed.
+    var obligationResult = LTPRight.prepareObligationToken(rightToken, obligationData.obligor, obligationData, privateKey)
+
+    if (!obligationResult.success) {
       return {
         success: false,
-        error: 'Failed to create obligation'
+        error: obligationResult.error
       }
     }
-    
-    // Add proof
-    var proofResult = LTPProof.createSignature(obligation, privateKey, {
-      purpose: 'assertionMethod'
-    })
-    
-    if (proofResult.success) {
-      obligation.proof = proofResult.proof
-      obligation.tokenHash = proofResult.tokenHash
-    }
-    
+
     return {
       success: true,
-      obligation: obligation,
+      obligation: obligationResult.obligationToken,
       rightTokenId: rightToken.id
     }
     
@@ -360,7 +348,7 @@ LTP.prototype.getRegistryStats = function() {
  * @returns {Object} Legal validity proof
  */
 LTP.prototype.createLegalValidityProof = function(token, jurisdiction, nonce) {
-  return LTPProof.createLegalValidityProof(token, jurisdiction, nonce)
+  return LTPProof.prepareLegalValidityProof(token, jurisdiction, nonce)
 }
 
 /**

package/lib/ltp/right.js

@@ -3,6 +3,7 @@
 var bsv = require('../../')
 var Hash = bsv.crypto.Hash
 var ECDSA = bsv.crypto.ECDSA
+var Signature = bsv.crypto.Signature
 var PrivateKey = bsv.PrivateKey
 var $ = bsv.util.preconditions
 var _ = require('../util/_')
@@ -40,7 +41,60 @@ var RightTypes = {
  * Legal Right Token
  */
 var RightToken = {
-  
+
+  /**
+   * Build an (unsigned) legal right token structure. Callers that need a signed
+   * token use prepareRightToken (signs inline) or add their own proof afterward
+   * (e.g. LTP#createRightToken via LTPProof).
+   * @param {String} type - Right type (from RightTypes)
+   * @param {String} issuerDID - Issuer DID
+   * @param {String} subjectDID - Subject DID
+   * @param {Object} claim - Legal claim object
+   * @param {PrivateKey} [issuerPrivateKey] - unused here; accepted for signature parity
+   * @param {Object} options - Additional options
+   * @returns {Object} Unsigned legal right token
+   */
+  create: function(type, issuerDID, subjectDID, claim, issuerPrivateKey, options) {
+    options = options || {}
+
+    $.checkArgument(typeof type === 'string', 'Right type must be string')
+    $.checkArgument(typeof issuerDID === 'string', 'Issuer DID must be string')
+    $.checkArgument(typeof subjectDID === 'string', 'Subject DID must be string')
+    $.checkArgument(claim && typeof claim === 'object', 'Claim must be object')
+
+    var validTypes = Object.values(RightTypes)
+    $.checkArgument(validTypes.includes(type), 'Invalid right type: ' + type)
+
+    var rightToken = {
+      '@context': [
+        'https://www.w3.org/2018/credentials/v1',
+        'https://smartledger.technology/contexts/ltp/v1'
+      ],
+      id: 'urn:uuid:' + this._generateUUID(),
+      type: ['VerifiableCredential', 'LegalRightToken', type],
+      issuer: issuerDID,
+      issuanceDate: new Date().toISOString(),
+      credentialSubject: {
+        id: subjectDID,
+        rightType: type,
+        claim: claim,
+        jurisdiction: options.jurisdiction || 'US',
+        purpose: options.purpose || 'legal_right',
+        validFrom: options.validFrom || new Date().toISOString(),
+        validUntil: options.validUntil || null,
+        transferable: options.transferable !== false,
+        revocable: options.revocable !== false
+      }
+    }
+
+    // Add metadata
+    if (options.metadata) {
+      rightToken.credentialSubject.metadata = options.metadata
+    }
+
+    return rightToken
+  },
+
   /**
    * Prepare legal right token for external processing
    * @param {String} type - Right type (from RightTypes)
@@ -65,33 +119,8 @@ var RightToken = {
     $.checkArgument(validTypes.includes(type), 'Invalid right type: ' + type)
     
     try {
-      var rightToken = {
-        '@context': [
-          'https://www.w3.org/2018/credentials/v1',
-          'https://smartledger.technology/contexts/ltp/v1'
-        ],
-        id: 'urn:uuid:' + this._generateUUID(),
-        type: ['VerifiableCredential', 'LegalRightToken', type],
-        issuer: issuerDID,
-        issuanceDate: new Date().toISOString(),
-        credentialSubject: {
-          id: subjectDID,
-          rightType: type,
-          claim: claim,
-          jurisdiction: options.jurisdiction || 'US',
-          purpose: options.purpose || 'legal_right',
-          validFrom: options.validFrom || new Date().toISOString(),
-          validUntil: options.validUntil || null,
-          transferable: options.transferable !== false,
-          revocable: options.revocable !== false
-        }
-      }
-      
-      // Add metadata
-      if (options.metadata) {
-        rightToken.credentialSubject.metadata = options.metadata
-      }
-      
+      var rightToken = this.create(type, issuerDID, subjectDID, claim, issuerPrivateKey, options)
+
       // Sign the token
       var signedToken = this._signToken(rightToken, issuerPrivateKey)
       
@@ -540,6 +569,72 @@ var RightToken = {
   getRightTypes: function() {
     return RightTypes
   },
+
+  /**
+   * Verify a token signed by _signToken against a public key.
+   *
+   * Tokens produced here carry a detached ES256K JWS in proof.jws plus the
+   * canonical tokenHash. Verification recomputes the canonical hash (catching
+   * tampering of any field), confirms it matches the stored tokenHash, then
+   * checks the ECDSA signature embedded in the JWS against the supplied public
+   * key. This is the verification counterpart to _signToken and works for
+   * right, transfer and obligation tokens alike — all are signed the same way.
+   *
+   * @param {Object} token - Token with a proof.jws produced by _signToken
+   * @param {String|PublicKey} publicKey - Expected signer's public key
+   * @returns {Object} { valid, errors, tokenHash, verifiedAt }
+   */
+  verifyToken: function(token, publicKey) {
+    var errors = []
+    try {
+      $.checkArgument(token && typeof token === 'object', 'Invalid token')
+
+      if (!token.proof || !token.proof.jws) {
+        errors.push('Missing signature proof')
+        return { valid: false, errors: errors }
+      }
+
+      var pubKey = publicKey instanceof bsv.PublicKey
+        ? publicKey
+        : bsv.PublicKey.fromString(publicKey)
+
+      // Recompute the canonical hash and confirm integrity.
+      var canonicalToken = this._canonicalizeToken(token)
+      var tokenHash = Hash.sha256(Buffer.from(canonicalToken))
+
+      if (token.tokenHash && token.tokenHash !== tokenHash.toString('hex')) {
+        errors.push('Token hash mismatch')
+        return { valid: false, errors: errors }
+      }
+
+      // Extract the DER signature from the detached JWS (header..signature).
+      var parts = token.proof.jws.split('.')
+      if (parts.length !== 3 || !parts[2]) {
+        errors.push('Malformed JWS')
+        return { valid: false, errors: errors }
+      }
+      var signature = Signature.fromDER(Buffer.from(parts[2], 'base64url'))
+
+      var ecdsa = new ECDSA()
+      ecdsa.hashbuf = tokenHash
+      ecdsa.sig = signature
+      ecdsa.pubkey = pubKey
+
+      if (!ecdsa.verify().verified) {
+        errors.push('Signature verification failed')
+      }
+
+      return {
+        valid: errors.length === 0,
+        errors: errors,
+        tokenHash: tokenHash.toString('hex'),
+        verifiedAt: new Date().toISOString()
+      }
+    } catch (error) {
+      errors.push(error.message)
+      return { valid: false, errors: errors }
+    }
+  },
   
   /**
    * Sign a token with private key
@@ -577,19 +672,23 @@ var RightToken = {
   },
   
   /**
-   * Sign a token with private key
+   * Build a detached compact JWS (RFC 7797) for a token hash + ECDSA signature.
+   * The payload segment is intentionally empty (header..signature) because the
+   * signed content is the canonical token hash, carried separately as tokenHash.
    * @private
+   * @param {Buffer} hash - 32-byte canonical token hash
+   * @param {Signature} signature - ECDSA signature over the hash
+   * @returns {String} compact detached JWS
    */
-  _signToken: function(token, privateKey) {
+  _createJWS: function(hash, signature) {
     var header = {
       alg: 'ES256K',
       typ: 'JWT'
     }
-    
+
     var headerB64 = Buffer.from(JSON.stringify(header)).toString('base64url')
-    var payloadB64 = hash.toString('base64url')
     var signatureB64 = signature.toDER().toString('base64url')
-    
+
     return headerB64 + '..' + signatureB64
   },
   

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartledger/bsv",
-  "version": "5.3.1",
+  "version": "5.4.1",
   "description": "🚀 Complete Bitcoin SV development framework with legally-recognizable DID:web + W3C VC-JWT toolkit, Legal Token Protocol (LTP), Global Digital Attestation Framework (GDAF), StatusList2021 revocation, and 16 flexible loading options. Standards-based credentials with ES256/ES256K support, on-chain BSV anchoring, and comprehensive Bitcoin SV API. Perfect for legal tokens, verifiable credentials, DeFi, smart contracts, and secure Bitcoin applications.",
   "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
   "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",