@smartledger/bsv 7.10.0 → 7.11.0

package/CHANGELOG.md

@@ -7,6 +7,96 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [7.11.0] - 2026-08-10
+
+### The Chronicle default, decided
+
+Chronicle activated on BSV mainnet at block **943,816** on 2026-04-07, so a caller
+validating anything created since needs its rules. The obvious move was to enable
+`SCRIPT_ENABLE_CHRONICLE` by default. That is the wrong shape, and the reason is in the
+node: it gates on `utxo_after_chronicle` — a property of **the output being spent**, not
+of the chain or the validator. Both answers stay correct forever, because pre-activation
+UTXOs remain spendable. A library-wide default would be a guess about the caller's input.
+
+There is also no default to flip: `verify()` falls back to `0`, enabling no optional
+feature at all, exactly as it does for FORKID, P2SH and CLTV. That is deliberate — a
+validator should state the consensus context it is validating against.
+
+**So the flag stays opt-in, and the real gap is fixed instead: callers had nothing
+correct to opt into.** Assembling the flag set by hand invites getting it wrong, and
+wrong here means a verdict that disagrees with the network.
+
+### Added
+
+- **`Interpreter.mainnetFlags({ afterChronicle })`** — the verification flags matching
+  BSV mainnet consensus. `afterChronicle` defaults to `true`, since every output created
+  since April is subject to Chronicle; pass `false` to validate the spend of a
+  pre-activation UTXO, which is the same distinction the node makes per input.
+
+  Script-number and element-size limits are deliberately **not** included: they are
+  process-wide statics raised by `useGenesisLimits()`, not flags. A post-Genesis
+  validator needs both, and the docstring says so.
+
+- **`Interpreter.CHRONICLE_ACTIVATION_HEIGHT`** (943816), recorded so the per-UTXO
+  question has an answer in the library rather than in a changelog.
+
+### Fixed
+
+- **A tautology in this project's own test suite, written in 7.7.0.** The assertion
+  `(Interpreter.DEFAULT_FLAGS & CHRONICLE).should.equal(0)` was meant to prove the flag
+  is off unless requested. `Interpreter.DEFAULT_FLAGS` does not exist, so it evaluated
+  `undefined & n` — zero for every `n`, and unfailable. It now calls `verify()` with the
+  flags argument omitted and asserts `BAD_OPCODE`, which is what it always meant.
+
+  Noted plainly because 7.10.1 fixed three checks of exactly this shape in other
+  people's code, and this one was mine.
+
+Suite 4647.
+
+## [7.10.1] - 2026-08-10
+
+The three remaining findings from the #85 review. All three are cases of something
+that *looked* like it checked a property and did not — the same class the corpus and
+the bundle-parity gate keep surfacing.
+
+### Fixed
+
+- **The browser smoke test's cross-bundle assertion was a tautology.** In the one test
+  named `feature bundles did not embed a second library instance`, the assertion read
+  `assert(e.privateKey ? true : true, ...)` — it could not fail. Everything else in it
+  stayed inside the ecies bundle, so it would have passed unchanged even if that bundle
+  shipped a private copy of every primitive.
+
+  `ECIES.prototype.privateKey` does `this._privateKey = PrivateKey(hex)`, constructing
+  from the class *it* resolved, so `e._privateKey instanceof bsv.PrivateKey` is the real
+  test — the same shape as the neighbouring mnemonic case. Verified to fail when the
+  class identity is wrong.
+
+- **`build/esbuild.js`'s `metafile` option claimed an assertion that did not exist.**
+  Its comment said it was "used to assert that feature bundles externalise the shared
+  primitives", but nothing consumed it — `grep -rn metafile` returned only the option.
+  `test/build/bundle_externals.js` is now that consumer, and asserts three things:
+
+  - no module mapped by `LIB_GLOBALS` appears as a bundled input. This is derived from
+    the same table the build uses, so it cannot drift out of step with it;
+  - each bundle's `lib/` inputs are pinned, because `LIB_GLOBALS` is deliberately not
+    exhaustive — a feature bundle *should* carry its own feature code, so anything new
+    appearing is either growth or a leak, and a human decides which;
+  - nothing but two documented helpers is duplicated across bundles.
+
+  Verified by removing `privatekey` from `LIB_GLOBALS`: the test immediately reports
+  `bsv-ecies.min.js unexpectedly embeds lib/privatekey.js` and one more.
+
+- **`lib/covenant-interface.js` held the last package-root require in `lib/`**, justified
+  by a comment claiming "this file is reached while index.js is still initializing". That
+  is not true — nothing in `index.js` or under `lib/` requires this module, only two
+  files in `examples/` — and the property it assigned was never read internally. It is
+  now a lazy getter, so `interface.bsv` keeps working while the require costs nothing
+  for everyone else, and the refactor in 7.10.0 is complete: no package-root require in
+  `lib/` executes at load.
+
+Suite 4643 → 4645. Browser smoke 25/25, corpus 371/371, bundles unchanged.
+
 ## [7.10.0] - 2026-08-10
 
 Internal restructuring with no API change, plus a conformance corpus and two

package/README.md

@@ -186,42 +186,42 @@ console.log('Status:', status) // 'revoked'
 ### **Core Modules**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv.min.js** | 1149KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js` |
-| **bsv.bundle.js** | 1149KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.10.0/bsv.bundle.js` |
+| **bsv.min.js** | 1149KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js` |
+| **bsv.bundle.js** | 1149KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.11.0/bsv.bundle.js` |
 
 ### **W3C Verifiable Credentials**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **🟢 bsv-didweb.min.js** | 315KB | **DID:web generation** | `unpkg.com/@smartledger/bsv@7.10.0/bsv-didweb.min.js` |
-| **🟢 bsv-vcjwt.min.js** | 315KB | **VC-JWT issue/verify** | `unpkg.com/@smartledger/bsv@7.10.0/bsv-vcjwt.min.js` |
-| **🟢 bsv-statuslist.min.js** | 415KB | **StatusList2021 revocation** | `unpkg.com/@smartledger/bsv@7.10.0/bsv-statuslist.min.js` |
-| **🟢 bsv-anchor.min.js** | 314KB | **BSV anchoring (hash-only)** | `unpkg.com/@smartledger/bsv@7.10.0/bsv-anchor.min.js` |
+| **🟢 bsv-didweb.min.js** | 315KB | **DID:web generation** | `unpkg.com/@smartledger/bsv@7.11.0/bsv-didweb.min.js` |
+| **🟢 bsv-vcjwt.min.js** | 315KB | **VC-JWT issue/verify** | `unpkg.com/@smartledger/bsv@7.11.0/bsv-vcjwt.min.js` |
+| **🟢 bsv-statuslist.min.js** | 415KB | **StatusList2021 revocation** | `unpkg.com/@smartledger/bsv@7.11.0/bsv-statuslist.min.js` |
+| **🟢 bsv-anchor.min.js** | 314KB | **BSV anchoring (hash-only)** | `unpkg.com/@smartledger/bsv@7.11.0/bsv-anchor.min.js` |
 
 ### **Smart Contract & Development**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-smartcontract.min.js** | 873KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.10.0/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 873KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.10.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 30KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.10.0/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 30KB | Security enhancements | `unpkg.com/@smartledger/bsv@7.10.0/bsv-security.min.js` |
+| **bsv-smartcontract.min.js** | 873KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.11.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 873KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.11.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 30KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.11.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 30KB | Security enhancements | `unpkg.com/@smartledger/bsv@7.11.0/bsv-security.min.js` |
 
 ### **Legal & Compliance**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-ltp.min.js** | 1149KB | Legal Token Protocol | `unpkg.com/@smartledger/bsv@7.10.0/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1149KB | Digital Identity & Attestation | `unpkg.com/@smartledger/bsv@7.10.0/bsv-gdaf.min.js` |
+| **bsv-ltp.min.js** | 1149KB | Legal Token Protocol | `unpkg.com/@smartledger/bsv@7.11.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1149KB | Digital Identity & Attestation | `unpkg.com/@smartledger/bsv@7.11.0/bsv-gdaf.min.js` |
 
 ### **Advanced Cryptography**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-shamir.min.js** | 353KB | Threshold Cryptography | `unpkg.com/@smartledger/bsv@7.10.0/bsv-shamir.min.js` |
+| **bsv-shamir.min.js** | 353KB | Threshold Cryptography | `unpkg.com/@smartledger/bsv@7.11.0/bsv-shamir.min.js` |
 
 ### **Utilities**
 | Module | Size | Use Case | CDN |
 |--------|------|----------|-----|
-| **bsv-ecies.min.js** | 79KB | Encryption | `unpkg.com/@smartledger/bsv@7.10.0/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 30KB | Message signing | `unpkg.com/@smartledger/bsv@7.10.0/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 592KB | HD wallets | `unpkg.com/@smartledger/bsv@7.10.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 79KB | Encryption | `unpkg.com/@smartledger/bsv@7.11.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 30KB | Message signing | `unpkg.com/@smartledger/bsv@7.11.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 592KB | HD wallets | `unpkg.com/@smartledger/bsv@7.11.0/bsv-mnemonic.min.js` |
 
 ## ⚡ **2-Minute Quick Start**
 
@@ -232,7 +232,7 @@ Get started with Bitcoin SV development in under 2 minutes:
 npm install @smartledger/bsv
 
 # Or include in HTML
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
 ```
 
 > **🔒 v5.0.0 (production hardening — has breaking changes):** Shamir secret
@@ -332,8 +332,8 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🔧 **Basic Development** (~1.2MB total)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-script-helper.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const utxos = new bsv.SmartContract.UTXOGenerator().createRealUTXOs(2, 100000);
@@ -342,9 +342,9 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🔒 **Smart Contract Development** (~2.8MB total — each bundle re-embeds core BSV)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().verify().build();
@@ -354,9 +354,9 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🆕 **Legal & Identity Development** (~3.4MB total — each bundle re-embeds core BSV)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -370,9 +370,9 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🆕 **Security & Cryptography** (~1.5MB total)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -384,7 +384,7 @@ const covenant = bsv.SmartContract.createCovenantBuilder()
 
 ### 🎯 **Everything Bundle** (~1.1MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);           // Shamir Secret Sharing
@@ -494,8 +494,8 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 1. **Minimal Setup** - Core + Script Helper (~1.2MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-script-helper.min.js"></script>
 <script>
   const tx = new bsv.Transaction();
   const sig = bsvScriptHelper.createSignature(tx, privateKey, 0, script, satoshis);
@@ -504,9 +504,9 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 2. **DeFi Development** - Core + Covenants + Debug (~2.8MB — each bundle re-embeds core BSV)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = new bsvCovenant.CovenantInterface();
   const debugInfo = SmartContract.interpretScript(script);
@@ -516,8 +516,8 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 3. **Security First** - Core + Enhanced Security (~1.2MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-security.min.js"></script>
 <script>
   const verified = bsvSecurity.SmartVerify.verify(signature, hash, publicKey);
   const enhanced = bsvSecurity.EllipticFixed.createSignature(privateKey, hash);
@@ -526,7 +526,7 @@ const contractTx = covenant.createCovenantTransaction({
 
 #### 4. **Everything Bundle** - One File Solution (~1.1MB)
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.bundle.js"></script>
 <script>
   // Everything available under bsv namespace
   const keys = bsv.SmartLedgerBundle.generateKeys();
@@ -834,7 +834,7 @@ const timelockScript = helper.createTimelockScript(
 
 See the **[16 Loading Options](#-16-loading-options---choose-your-approach)**
 table near the top for the full list of bundles with current sizes and
-canonical `unpkg.com/@smartledger/bsv@7.10.0/...` URLs.
+canonical `unpkg.com/@smartledger/bsv@7.11.0/...` URLs.
 
 ## 🔐 Security