@smartledger/bsv 6.1.2 → 6.2.1

package/CHANGELOG.md

@@ -7,6 +7,62 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [6.2.1] - 2026-07-15
+
+Bundle hygiene. No runtime/API change.
+
+### Changed
+
+- **Bundles no longer embed the full `package.json`.** `bsv.version` and
+  `SmartContract.version` now read a generated `version.js` (a one-line
+  `module.exports = '<version>'`) instead of `require('./package.json')`, so the
+  browser bundles no longer carry ~4 KB of dev metadata (devDependencies,
+  scripts, keywords). The full and smart-contract bundles shrink accordingly
+  (e.g. `bsv.min.js` −5.8 KB) with byte-identical, reproducible output.
+
+### Added
+
+- `scripts/sync-version.js` regenerates `version.js` from `package.json.version`
+  on every `npm version` bump; `test/build/version_sync.js` gates the two from
+  drifting.
+
+## [6.2.0] - 2026-07-14
+
+Build modernization: the browser bundles are now built with **esbuild** (webpack
+removed). No runtime/API change; the bundles are functionally equivalent (and two are
+fixed — see below).
+
+### Security / docs (audit-readiness)
+
+- **Test-backed threat model** (`docs/THREAT_MODEL.md`): states each security property, its
+  trust assumptions, and the adversarial test that enforces it (fail-closed verification,
+  covenant/marketplace enforcement, credential C1–C4 binding, revocation-bypass closure, SPV
+  inclusion, Shamir non-leak, type honesty). `test/security/threat_model_coverage.js` asserts
+  every test the model cites exists, so it can't drift. Honest "known limitations" section
+  (unaudited inherited core, the residual `ECDSA.verify()` footgun, no difficulty-retarget
+  validation, provenance pending).
+- **`SECURITY.md` refreshed** to 6.x — corrected the stale supported-versions table (was 4.x),
+  documented the 6.0.0 fail-open hardening + the residual `verify()` trap, updated build tooling
+  and disclosure history.
+
+### Build — webpack → esbuild (cutover complete)
+
+- **All 16 browser bundles are now built with esbuild** (`build/esbuild.js`; `npm run
+  build-all`). The 16 webpack configs + `webpack.base.js` are removed. One config-driven
+  builder replicates the two webpack polyfill modes (`full` browserify shims so the browser
+  Shamir CSPRNG works; `stub` externalised built-ins) and externalises the bsv root to the
+  global `bsv` for the feature bundles. Every bundle is UMD (browser global **and**
+  `require()`/AMD). The build needs **no `--openssl-legacy-provider`** and is **byte-identical
+  across Node 20 and 22** (the bundle-parity gate stays reliable).
+- Validated: **20/20 Chrome browser-smoke** on `bsv.min.js`, plus an isolated per-bundle load
+  smoke asserting all 16 shipped bundles load and expose an API.
+- **Fixed: `bsv-covenant.min.js` / `bsv-smartcontract.min.js` shrank from ~900 KB to
+  ~30–290 KB.** The old webpack `externals` key never matched the real `require('../..')`, so
+  those two wrongly embedded the whole library (yet still referenced the global, so they were
+  broken standalone). They are now correctly externalised — load `bsv.min.js` first, as
+  intended. All other bundles are functionally equivalent (bytes differ: esbuild vs webpack
+  minification).
+
 ## [6.1.2] - 2026-07-13
 
 First release published tokenlessly via **npm OIDC Trusted Publishing** with automatic

package/README.md

@@ -186,42 +186,42 @@ console.log('Status:', status) // 'revoked'
 ### **Core Modules**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv.min.js** | 1149KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@6.1.2/bsv.min.js` |
-| **bsv.bundle.js** | 1149KB | Everything in one file | `unpkg.com/@smartledger/bsv@6.1.2/bsv.bundle.js` |
+| **bsv.min.js** | 1149KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@6.2.1/bsv.min.js` |
+| **bsv.bundle.js** | 1149KB | Everything in one file | `unpkg.com/@smartledger/bsv@6.2.1/bsv.bundle.js` |
 
 ### **W3C Verifiable Credentials**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **🟢 bsv-didweb.min.js** | 315KB | **DID:web generation** | `unpkg.com/@smartledger/bsv@6.1.2/bsv-didweb.min.js` |
-| **🟢 bsv-vcjwt.min.js** | 315KB | **VC-JWT issue/verify** | `unpkg.com/@smartledger/bsv@6.1.2/bsv-vcjwt.min.js` |
-| **🟢 bsv-statuslist.min.js** | 415KB | **StatusList2021 revocation** | `unpkg.com/@smartledger/bsv@6.1.2/bsv-statuslist.min.js` |
-| **🟢 bsv-anchor.min.js** | 314KB | **BSV anchoring (hash-only)** | `unpkg.com/@smartledger/bsv@6.1.2/bsv-anchor.min.js` |
+| **🟢 bsv-didweb.min.js** | 315KB | **DID:web generation** | `unpkg.com/@smartledger/bsv@6.2.1/bsv-didweb.min.js` |
+| **🟢 bsv-vcjwt.min.js** | 315KB | **VC-JWT issue/verify** | `unpkg.com/@smartledger/bsv@6.2.1/bsv-vcjwt.min.js` |
+| **🟢 bsv-statuslist.min.js** | 415KB | **StatusList2021 revocation** | `unpkg.com/@smartledger/bsv@6.2.1/bsv-statuslist.min.js` |
+| **🟢 bsv-anchor.min.js** | 314KB | **BSV anchoring (hash-only)** | `unpkg.com/@smartledger/bsv@6.2.1/bsv-anchor.min.js` |
 
 ### **Smart Contract & Development**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-smartcontract.min.js** | 873KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@6.1.2/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 873KB | Covenant operations | `unpkg.com/@smartledger/bsv@6.1.2/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 30KB | Custom script tools | `unpkg.com/@smartledger/bsv@6.1.2/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 30KB | Security enhancements | `unpkg.com/@smartledger/bsv@6.1.2/bsv-security.min.js` |
+| **bsv-smartcontract.min.js** | 873KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@6.2.1/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 873KB | Covenant operations | `unpkg.com/@smartledger/bsv@6.2.1/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 30KB | Custom script tools | `unpkg.com/@smartledger/bsv@6.2.1/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 30KB | Security enhancements | `unpkg.com/@smartledger/bsv@6.2.1/bsv-security.min.js` |
 
 ### **Legal & Compliance**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-ltp.min.js** | 1149KB | Legal Token Protocol | `unpkg.com/@smartledger/bsv@6.1.2/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1149KB | Digital Identity & Attestation | `unpkg.com/@smartledger/bsv@6.1.2/bsv-gdaf.min.js` |
+| **bsv-ltp.min.js** | 1149KB | Legal Token Protocol | `unpkg.com/@smartledger/bsv@6.2.1/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1149KB | Digital Identity & Attestation | `unpkg.com/@smartledger/bsv@6.2.1/bsv-gdaf.min.js` |
 
 ### **Advanced Cryptography**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-shamir.min.js** | 353KB | Threshold Cryptography | `unpkg.com/@smartledger/bsv@6.1.2/bsv-shamir.min.js` |
+| **bsv-shamir.min.js** | 353KB | Threshold Cryptography | `unpkg.com/@smartledger/bsv@6.2.1/bsv-shamir.min.js` |
 
 ### **Utilities**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-ecies.min.js** | 79KB | Encryption | `unpkg.com/@smartledger/bsv@6.1.2/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 30KB | Message signing | `unpkg.com/@smartledger/bsv@6.1.2/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 592KB | HD wallets | `unpkg.com/@smartledger/bsv@6.1.2/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 79KB | Encryption | `unpkg.com/@smartledger/bsv@6.2.1/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 30KB | Message signing | `unpkg.com/@smartledger/bsv@6.2.1/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 592KB | HD wallets | `unpkg.com/@smartledger/bsv@6.2.1/bsv-mnemonic.min.js` |
 
 ## ⚡ **2-Minute Quick Start**
 
@@ -232,7 +232,7 @@ Get started with Bitcoin SV development in under 2 minutes:
 npm install @smartledger/bsv
 
 # Or include in HTML
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv.min.js"></script>
 ```
 
 > **🔒 v5.0.0 (production hardening — has breaking changes):** Shamir secret
@@ -332,8 +332,8 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🔧 **Basic Development** (~1.2MB total)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-script-helper.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const utxos = new bsv.SmartContract.UTXOGenerator().createRealUTXOs(2, 100000);
@@ -342,9 +342,9 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🔒 **Smart Contract Development** (~2.8MB total — each bundle re-embeds core BSV)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().verify().build();
@@ -354,9 +354,9 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🆕 **Legal & Identity Development** (~3.4MB total — each bundle re-embeds core BSV)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -370,9 +370,9 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🆕 **Security & Cryptography** (~1.5MB total)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -384,7 +384,7 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🎯 **Everything Bundle** (~1.1MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);           // Shamir Secret Sharing
@@ -494,8 +494,8 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 1. **Minimal Setup** - Core + Script Helper (~1.2MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-script-helper.min.js"></script>
 <script>
   const tx = new bsv.Transaction();
   const sig = bsvScriptHelper.createSignature(tx, privateKey, 0, script, satoshis);
@@ -504,9 +504,9 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 2. **DeFi Development** - Core + Covenants + Debug (~2.8MB — each bundle re-embeds core BSV)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = new bsvCovenant.CovenantInterface();
   const debugInfo = SmartContract.interpretScript(script);
@@ -516,8 +516,8 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 3. **Security First** - Core + Enhanced Security (~1.2MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv-security.min.js"></script>
 <script>
   const verified = bsvSecurity.SmartVerify.verify(signature, hash, publicKey);
   const enhanced = bsvSecurity.EllipticFixed.createSignature(privateKey, hash);
@@ -526,7 +526,7 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 4. **Everything Bundle** - One File Solution (~1.1MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@6.1.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.2.1/bsv.bundle.js"></script>
 <script>
   // Everything available under bsv namespace
   const keys = bsv.SmartLedgerBundle.generateKeys();
@@ -834,7 +834,7 @@ const timelockScript = helper.createTimelockScript(
 
 See the **[16 Loading Options](#-16-loading-options---choose-your-approach)**
 table near the top for the full list of bundles with current sizes and
-canonical `unpkg.com/@smartledger/bsv@6.1.2/...` URLs.
+canonical `unpkg.com/@smartledger/bsv@6.2.1/...` URLs.
 
 ## 🔐 Security
 

package/SECURITY.md

@@ -5,15 +5,19 @@ Thank you for helping keep `@smartledger/bsv` and its users safe.
 ## Supported Versions
 
 Security fixes are applied to the latest major release line. Earlier releases
-are not patched; please upgrade. **Versions ≤ 3.4.5 contain three known,
-exploitable vulnerabilities in the GDAF credential verification path (see
-CHANGELOG `## [4.0.0]`); upgrade to 4.x is strongly recommended.**
+are not patched; please upgrade. **Versions < 6.0.0 contain four CRITICAL
+fail-open signature/verification bugs and a revocation-bypass (fixed in 6.0.0 —
+see CHANGELOG `## [6.0.0]`); upgrading to the latest 6.x is strongly recommended.**
+Requires **Node.js ≥ 20.19** (the audited crypto dependency `@noble/curves@2` is
+ESM-only).
 
 | Version | Supported          |
 | ------- | ------------------ |
-| 4.x     | :white_check_mark: |
-| 3.4.x   | :x: (contains known credential-verification vulnerabilities; upgrade to 4.x) |
-| < 3.4   | :x:                |
+| 6.x     | :white_check_mark: |
+| < 6.0   | :x: (fail-open verification + revocation-bypass; upgrade to 6.x) |
+
+The security model and the adversarial tests that enforce it are documented in
+[`docs/THREAT_MODEL.md`](./docs/THREAT_MODEL.md).
 
 ## Reporting a Vulnerability
 
@@ -58,8 +62,9 @@ to remain anonymous.
 
 ## Out of Scope
 
-- Vulnerabilities in development-only dependencies (`webpack 4`, `standard 12`,
-  `mocha`, `nyc`, `crypto-browserify`, etc.). These never reach installers — the
+- Vulnerabilities in development-only dependencies (`webpack 5`, `esbuild`,
+  `standard 12`, `mocha`, `nyc`, `crypto-browserify`, etc.). These never reach
+  installers — the
   published tarball ships no `node_modules` and none are listed under
   `dependencies`. The remaining `npm audit` findings (currently 17, all
   dev-only) are either upstream-blocked — `mocha`/`nyc` are already at their
@@ -84,16 +89,38 @@ explicitly. The default `transaction.verify()` / `signature.verify()` /
 `Message().verify()` paths use BSV's own pure-JS ECDSA in
 `lib/crypto/ecdsa.js` and are **not** routed through `SmartVerify`.
 
-See the [Security section of the README](./README.md#-security) for the full
-"what's in the box" table and usage examples for the opt-in helpers. A
-planned 3.5.0 will offer an opt-in flag to route the default verify path
-through `SmartVerify` so the protection is on by default for new users.
+**6.0.0 hardening.** Four CRITICAL fail-open bugs — code that read a truthy
+return value (an ECDSA *instance*, a stub `{verified:true}`) as if it meant
+"valid" — were fixed and locked down:
+
+- `ECDSA.prototype.verifyBool()` is the safe boolean verify; every security-
+  critical call site now reads `.verified` / uses `verifyBool()` and **fails
+  closed** (returns `false` or throws, never a chainable object).
+- `test/security/fail_closed_contracts.js` **mechanically enforces** this — it
+  feeds each verify path a forged input and asserts rejection as a strict boolean
+  or a throw. The CI suite is a merge gate.
+
+**Known residual footgun (mitigated).** `ECDSA.prototype.verify()` still returns
+the *instance* (truthy) with the result on `.verified` — a landmine if read as a
+boolean. It is retained for back-compat, typed to make misuse a compile error
+(`verify(): this` vs `verifyBool(): boolean` in `bsv.d.ts`), and pinned by a
+test; it is slated for **removal in the next major**. Prefer `verifyBool()`.
+
+See [`docs/THREAT_MODEL.md`](./docs/THREAT_MODEL.md) for the full property-by-
+property security model and the tests that enforce each claim, and the
+[Security section of the README](./README.md#-security) for the opt-in helpers.
 
 ## Disclosure History
 
 Significant security-relevant changes are documented in
 [`CHANGELOG.md`](./CHANGELOG.md). Recent entries of note:
 
+- **6.0.0** — fixed four CRITICAL fail-open verification bugs (the `ECDSA.verify()`
+  returns-the-instance trap at three call sites plus a `//TODO` stub), a StatusList2021
+  revocation bypass (unverified list bitstring), an ownership-forgery in
+  `prepareRightTokenTransfer`, and covenant defects (inverted `OP_SPLIT`/`OP_DROP`;
+  non-enforcing "covenants" that reduced to P2PK now throw). Each fix ships an
+  adversarial regression asserting the *bad* input is rejected.
 - **3.4.2 / 3.4.3** — corrected documentation overclaims about which
   hardening is on by default vs. opt-in.
 - **3.4.1** — `Transaction.shuffleOutputs()` now draws entropy from