@smartledger/bsv 7.1.0 → 7.2.0

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@7.1.0/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.2.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@7.1.0/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.2.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@7.1.0/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.2.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.1.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.1.0/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.1.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.1.0/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.1.0/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.1.0/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.1.0/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.1.0/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.1.0/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.1.0/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.1.0/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.2.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.2.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.2.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.2.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.2.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.2.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.2.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.2.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.2.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.2.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.2.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.1.0/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.2.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.1.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.1.0/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.1.0/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.1.0/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.1.0/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.1.0/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.1.0/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.1.0/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.1.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.1.0/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.1.0/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.2.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.2.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.2.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.2.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.2.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.2.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.2.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.2.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.2.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.2.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.2.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@7.1.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.2.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/ordinals/README.md

@@ -29,7 +29,8 @@ var script = Ord.buildInscription({
 })
 var output = Ord.createInscriptionOutput({ address: ownerAddress, contentType: 'image/png', content: pngBuffer })
 
-// Parse it back.
+// Parse it back. `lock` is the whole script minus the envelope: the 1Sat spec allows the
+// locking script to be prepended OR appended, and both are recovered.
 var insc = Ord.parseInscription(script)      // { contentType, content, contentText, lock }
 Ord.isInscription(script)                    // true
 
@@ -40,6 +41,28 @@ var outs = Ord.batchInscriptionOutputs([
 ])
 ```
 
+### Arguments are checked, because an inscription is permanent
+
+`content` may be any data — a string or a `Buffer` of arbitrary bytes, under any MIME
+type. What the builder will not do is guess, because every guess it used to make wrote
+something other than what the caller asked for onto a permanent record:
+
+| Call | Before | Now |
+| --- | --- | --- |
+| `content` omitted | built a valid-looking script inscribing **nothing** | throws, and names the field you passed instead (`data`, `body`, `payload`, …) |
+| `content: {…}` or a number | inscribed `[object Object]` / `"42"` | throws; encode it yourself (`JSON.stringify`, `Buffer.from`) |
+| `Buffer` content, no `contentType` | labelled it `text/plain` | throws — bytes carry no hint about what they are |
+| empty `lock` | emitted an **anyone-can-spend** ordinal | throws unless you pass `allowEmptyLock: true` |
+| both `lock` and `address` | silently used `lock` | throws — they name different owners |
+| `satoshis: 0` | built a 0-sat output carrying no ordinal | throws; must be a positive integer |
+
+Deliberate cases are still expressible: pass `content: ''` for an empty payload, and
+`allowEmptyLock: true` when you are appending the envelope to a lock you supply yourself
+(this is how the OrdLock listing carries its inline inscription).
+
+The default `contentType` of `text/plain` still applies to **string** content, which is
+the common case and is truthfully described by it.
+
 ## Marketplace: the OrdLock covenant
 
 A listing locks the 1-sat ordinal behind a script with two spend paths:

package/lib/ordinals/inscription.js

@@ -23,47 +23,118 @@ var ORD = Buffer.from('ord', 'utf8')
 function scriptClass () { return bsv.Script }
 function op () { return bsv.Opcode }
 
+/** Describe a rejected value for an error message, without dumping its contents. */
+function typeName (v) {
+  if (v === null) return 'null'
+  if (v === undefined) return 'undefined'
+  if (Array.isArray(v)) return 'an array'
+  var t = typeof v
+  return (t === 'object' ? 'an ' : 'a ') + t
+}
+
+/**
+ * Coerce a caller-supplied field to bytes.
+ *
+ * Only strings and Buffers are accepted. Everything else is rejected rather than run
+ * through `String(v)`: an inscription is permanent, and stringifying an object writes
+ * the literal text `[object Object]` to the chain, which is never what the caller meant.
+ */
+function toBuf (v, name) {
+  if (Buffer.isBuffer(v)) return v
+  if (typeof v === 'string') return Buffer.from(v, 'utf8')
+  throw new Error(name + ' must be a string or Buffer, got ' + typeName(v))
+}
+
+/** Fields callers reach for when they mean `content`; named back to them on error. */
+var CONTENT_ALIASES = ['data', 'body', 'payload', 'text', 'message']
+
 /** Resolve a base locking script from a Script, an Address, or an address string. */
 function resolveLock (params) {
   var Script = scriptClass()
-  if (params.lock) {
-    if (params.lock instanceof Script) return params.lock
-    if (Buffer.isBuffer(params.lock)) return Script.fromBuffer(params.lock)
-    if (typeof params.lock === 'string') return Script.fromHex(params.lock)
-    throw new Error('lock must be a Script, Buffer, or hex string')
+  var hasLock = params.lock != null
+  var hasAddress = params.address != null
+
+  // `lock` used to win silently. Two different owners in one call is a mistake worth
+  // surfacing, not resolving by precedence.
+  if (hasLock && hasAddress) {
+    throw new Error('buildInscription accepts `lock` or `address`, not both — they name ' +
+      'different owners and one would be silently ignored')
+  }
+
+  if (hasLock) {
+    var lock
+    if (params.lock instanceof Script) lock = params.lock
+    else if (Buffer.isBuffer(params.lock)) lock = Script.fromBuffer(params.lock)
+    else if (typeof params.lock === 'string') lock = Script.fromHex(params.lock)
+    else throw new Error('lock must be a Script, Buffer, or hex string, got ' + typeName(params.lock))
+
+    // An empty base lock leaves nothing but the inert envelope, and the envelope is
+    // skipped at execution — so whatever the spender pushes is the final stack and the
+    // ordinal is anyone-can-spend. Only a caller appending the envelope to a lock it
+    // supplies itself (as ordlock.js does) legitimately wants this.
+    if (!lock.chunks.length && !params.allowEmptyLock) {
+      throw new Error('lock is empty: the inscription would carry no locking script at ' +
+        'all and the ordinal would be spendable by anyone. Pass a real lock, or ' +
+        '{ allowEmptyLock: true } if you are appending this envelope to your own script')
+    }
+    return lock
   }
-  if (params.address) {
+
+  if (hasAddress) {
     var addr = (params.address instanceof bsv.Address)
       ? params.address
       : bsv.Address.fromString(String(params.address))
     return Script.buildPublicKeyHashOut(addr)
   }
-  throw new Error('buildInscription requires an address or a lock script')
-}
 
-function toBuf (v, enc) {
-  if (Buffer.isBuffer(v)) return v
-  if (v == null) return Buffer.alloc(0)
-  return Buffer.from(String(v), enc || 'utf8')
+  throw new Error('buildInscription requires an address or a lock script')
 }
 
 /**
  * Build a 1Sat Ordinals inscription locking script: a base lock followed by the
  * inert `OP_FALSE OP_IF ... OP_ENDIF` envelope carrying the content.
  *
+ * `content` is required. An inscription with no body is a well-formed script that
+ * inscribes nothing, so omitting it throws rather than silently producing one; pass an
+ * explicit `''` if an empty payload is genuinely what you want.
+ *
  * @param {object} params
- * @param {string|Buffer} params.contentType  e.g. 'text/plain', 'image/png'
- * @param {string|Buffer} params.content       the inscription body
- * @param {Script|Buffer|string} [params.lock] base locking script (overrides address)
- * @param {Address|string} [params.address]    P2PKH owner (used if no `lock`)
+ * @param {string|Buffer} params.content        the inscription body (required)
+ * @param {string|Buffer} [params.contentType]  e.g. 'text/plain', 'image/png'.
+ *   Defaults to 'text/plain' for string content; required for Buffer content, which
+ *   carries no hint about what it is.
+ * @param {Script|Buffer|string} [params.lock]  base locking script (mutually exclusive
+ *   with `address`)
+ * @param {Address|string} [params.address]     P2PKH owner (mutually exclusive with `lock`)
+ * @param {boolean} [params.allowEmptyLock]     permit an empty base lock; see resolveLock
  * @returns {Script} the full inscription locking script
  */
 function buildInscription (params) {
   params = params || {}
   var Opcode = op()
   var lock = resolveLock(params)
-  var contentType = toBuf(params.contentType || 'text/plain')
-  var content = toBuf(params.content)
+
+  if (params.content == null) {
+    var alias = CONTENT_ALIASES.filter(function (k) { return params[k] != null })[0]
+    throw new Error('buildInscription requires `content`' +
+      (alias ? ' — received `' + alias + '`, which is not read' : '') +
+      '. Omitting it would inscribe an empty payload; pass content: \'\' if that is intended')
+  }
+  var content = toBuf(params.content, 'content')
+
+  var contentType
+  if (params.contentType == null) {
+    // A Buffer is opaque — defaulting it to text/plain mislabels binary content on a
+    // permanent record, so make the caller declare it.
+    if (Buffer.isBuffer(params.content)) {
+      throw new Error('contentType is required when content is a Buffer (e.g. ' +
+        "'image/png', 'application/octet-stream') — it cannot be inferred from bytes")
+    }
+    contentType = Buffer.from('text/plain', 'utf8')
+  } else {
+    contentType = toBuf(params.contentType, 'contentType')
+    if (!contentType.length) throw new Error('contentType must not be empty')
+  }
 
   // Clone the base lock so we never mutate the caller's Script.
   var s = scriptClass().fromBuffer(lock.toBuffer())
@@ -84,6 +155,14 @@ function chunkIsOp (chunk, opcodenum) {
 
 /**
  * Parse a 1Sat Ordinals inscription out of a locking script.
+ *
+ * The 1Sat spec allows the locking script to be *prepended or appended* to the
+ * envelope ("A locking script (typically P2PKH) is then prepended/appended to the
+ * inscription script, optionally separated by OP_CODESEPARATOR"). `lock` is therefore
+ * the whole script minus the envelope, in script order — not merely what precedes it.
+ * A separating OP_CODESEPARATOR is kept, because it is genuinely part of the script
+ * that runs and affects the sighash.
+ *
  * @param {Script|Buffer|string} script
  * @returns {null|{ contentType: string, content: Buffer, contentText: string, lock: Script }}
  *   null if the script carries no inscription envelope.
@@ -108,16 +187,13 @@ function parseInscription (script) {
   }
   if (start === -1) return null
 
-  // Everything before the envelope is the base lock.
-  var lock = new Script()
-  for (var k = 0; k < start; k++) lock.chunks.push(chunks[k])
-
   // Walk fields after "ord" until OP_ENDIF: OP_1 => content-type, OP_0 => body.
   var contentType = Buffer.alloc(0)
   var content = Buffer.alloc(0)
+  var end = chunks.length // index of OP_ENDIF, or past the end if the envelope is unterminated
   for (var j = start + 3; j < chunks.length; j++) {
     var c = chunks[j]
-    if (chunkIsOp(c, Opcode.OP_ENDIF)) break
+    if (chunkIsOp(c, Opcode.OP_ENDIF)) { end = j; break }
     if (chunkIsOp(c, Opcode.OP_1) && chunks[j + 1] && chunks[j + 1].buf) {
       contentType = chunks[j + 1].buf; j++
     } else if (chunkIsOp(c, Opcode.OP_0) && chunks[j + 1] && chunks[j + 1].buf) {
@@ -125,6 +201,13 @@ function parseInscription (script) {
     }
   }
 
+  // The lock is everything outside the envelope. Taking only what precedes it dropped
+  // the lock entirely for the spec-legal appended form, reporting an owned ordinal as
+  // having no locking script at all.
+  var lock = new Script()
+  for (var k = 0; k < start; k++) lock.chunks.push(chunks[k])
+  for (var m = end + 1; m < chunks.length; m++) lock.chunks.push(chunks[m])
+
   return {
     contentType: contentType.toString('utf8'),
     content: content,
@@ -140,11 +223,18 @@ function isInscription (script) {
 
 /**
  * Build the 1-satoshi Transaction.Output carrying an inscription.
+ * @param {object} params           as buildInscription, plus:
+ * @param {number} [params.satoshis]  defaults to 1 (the 1Sat Ordinals convention)
  * @returns {Transaction.Output}
  */
 function createInscriptionOutput (params) {
   params = params || {}
   var satoshis = params.satoshis != null ? params.satoshis : 1
+  // Output rejects negatives and fractions, but 0 and the string '1' slipped through:
+  // a 0-sat output carries no ordinal at all.
+  if (typeof satoshis !== 'number' || !Number.isInteger(satoshis) || satoshis < 1) {
+    throw new Error('satoshis must be a positive integer (1 for a standard 1Sat ordinal)')
+  }
   return new bsv.Transaction.Output({
     script: buildInscription(params),
     satoshis: satoshis

package/lib/ordinals/ordlock.js

@@ -182,6 +182,7 @@ function buildOrdLock (params) {
   if (params.inscription) {
     var env = inscription.buildInscription({
       lock: new Script(), // envelope only; the covenant above is the real lock
+      allowEmptyLock: true, // ...which is why the empty-lock guard does not apply here
       contentType: params.inscription.contentType,
       content: params.inscription.content
     })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartledger/bsv",
-  "version": "7.1.0",
+  "version": "7.2.0",
   "description": "🚀 Complete Bitcoin SV development framework with legally-recognizable DID:web + W3C VC-JWT toolkit, Legal Token Protocol (LTP), Global Digital Attestation Framework (GDAF), StatusList2021 revocation, and 16 flexible loading options. Standards-based credentials with ES256/ES256K support, on-chain BSV anchoring, and comprehensive Bitcoin SV API. Perfect for legal tokens, verifiable credentials, DeFi, smart contracts, and secure Bitcoin applications.",
   "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
   "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",