@smartledger/bsv 7.10.0 → 7.11.0

package/build/esbuild.js

@@ -182,8 +182,9 @@ function buildOne (cfg, opts) {
     inject: [path.join(__dirname, 'esbuild/globals.js')],
     define: { global: 'globalThis' },
     footer: { js: umdFooter(cfg.global) },
-    // Opt-in build graph, used to assert that feature bundles externalise the
-    // shared primitives instead of embedding a second copy of them.
+    // Opt-in build graph. test/build/bundle_externals.js consumes it to assert that
+    // feature bundles externalise the shared primitives instead of embedding a second
+    // copy — this comment used to claim that assertion existed when nothing performed it.
     metafile: opts.metafile === true,
     write: opts.write !== false,
     outfile: opts.write === false ? undefined : path.join(ROOT, cfg.file),
@@ -200,7 +201,7 @@ function buildAll () {
   return Promise.all(BUNDLES.map(function (c) { return buildOne(c) }))
 }
 
-module.exports = { buildFullBundle, buildAll, buildOne, BUNDLES }
+module.exports = { buildFullBundle, buildAll, buildOne, BUNDLES, LIB_GLOBALS }
 
 if (require.main === module) {
   buildAll().then(function () {

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@7.10.0/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.11.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@7.10.0/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.11.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@7.10.0/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.11.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.10.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.10.0/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.10.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.10.0/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.10.0/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.10.0/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.10.0/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.10.0/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.10.0/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.10.0/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.10.0/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.11.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.11.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.11.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.11.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.11.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.11.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.11.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.11.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.11.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.11.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.11.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.10.0/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.11.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.10.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.10.0/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.10.0/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.10.0/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.10.0/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.10.0/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.10.0/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.10.0/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.10.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.10.0/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.10.0/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.11.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.11.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.11.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.11.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.11.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.11.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.11.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.11.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.11.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.11.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.11.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.11.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/covenant-interface.js

@@ -22,12 +22,22 @@ var Opcode = require('./opcode')
 var Script = require('./script')
 
 class CovenantInterface {
-  constructor () {
-    // Full access to the underlying BSV library. Required here rather than at
-    // module scope: this file is reached while index.js is still initializing,
-    // so a top-level require of the root would capture a half-built namespace.
-    // Constructor time is after load, so the require is safe and complete.
-    this.bsv = require('../index.js'); // eslint-disable-line
+  /**
+   * Convenience access to the assembled library, for consumers who have a
+   * CovenantInterface and want the rest of the namespace.
+   *
+   * A getter, not a constructor assignment. The previous comment justified the
+   * deferral with "this file is reached while index.js is still initializing" —
+   * which is not true: nothing in index.js or anywhere under lib/ requires this
+   * module, only two files in examples/. It was also never read internally, so an
+   * eager require bought nothing and left this as the last package-root require in
+   * lib/ after a refactor whose whole purpose was removing them.
+   *
+   * Resolving on access keeps the property working for anyone using it while making
+   * the root require cost nothing for everyone else. `require` is cached.
+   */
+  get bsv () {
+    return require('../index.js')
   }
 
   /**

package/lib/script/interpreter.js

@@ -390,6 +390,56 @@ Interpreter.SCRIPT_ENABLE_MAGNETIC_OPCODES = (1 << 19)
 // exactly like the Monolith and Magnetic flags above.
 Interpreter.SCRIPT_ENABLE_CHRONICLE = (1 << 20)
 
+/**
+ * Block height at which Chronicle activated on BSV mainnet (2026-04-07).
+ *
+ * Recorded because the node gates on it PER UTXO — `utxo_after_chronicle` — not
+ * globally. Whether Chronicle rules apply to a script depends on the output being
+ * spent, so this is a property of the input under validation, never a property of
+ * the library.
+ */
+Interpreter.CHRONICLE_ACTIVATION_HEIGHT = 943816
+
+/**
+ * The script-verification flags matching BSV mainnet consensus.
+ *
+ * This library has no default flag set — `verify()` falls back to `0`, meaning no
+ * optional feature is enabled. That is deliberate and stays: a validator should state
+ * the consensus context it is validating against rather than inherit one. But leaving
+ * callers to assemble the set by hand invites getting it wrong, and "wrong" here means
+ * a verdict that disagrees with the network.
+ *
+ * `afterChronicle` defaults to TRUE because Chronicle activated at block 943,816 and
+ * every output created since is subject to it. Pass `false` to validate the spend of a
+ * pre-activation UTXO, which is exactly the distinction the node makes.
+ *
+ * NOTE: script-number and element-size limits are NOT flags — they are process-wide
+ * statics raised by `useGenesisLimits()`. A post-Genesis validator needs both this flag
+ * set and that call.
+ *
+ * @param {object} [opts]
+ * @param {boolean} [opts.afterChronicle=true] is the UTXO being spent post-activation
+ * @returns {number} the combined flags
+ */
+Interpreter.mainnetFlags = function (opts) {
+  opts = opts || {}
+  var flags = Interpreter.SCRIPT_VERIFY_P2SH |
+    Interpreter.SCRIPT_VERIFY_STRICTENC |
+    Interpreter.SCRIPT_VERIFY_DERSIG |
+    Interpreter.SCRIPT_VERIFY_LOW_S |
+    Interpreter.SCRIPT_VERIFY_NULLFAIL |
+    Interpreter.SCRIPT_VERIFY_MINIMALDATA |
+    Interpreter.SCRIPT_VERIFY_CHECKLOCKTIMEVERIFY |
+    Interpreter.SCRIPT_VERIFY_CHECKSEQUENCEVERIFY |
+    Interpreter.SCRIPT_ENABLE_SIGHASH_FORKID |
+    Interpreter.SCRIPT_ENABLE_MAGNETIC_OPCODES |
+    Interpreter.SCRIPT_ENABLE_MONOLITH_OPCODES
+  if (opts.afterChronicle !== false) {
+    flags |= Interpreter.SCRIPT_ENABLE_CHRONICLE
+  }
+  return flags
+}
+
 /* Below flags apply in the context of BIP 68 */
 /**
  * If this flag set, CTxIn::nSequence is NOT interpreted as a relative

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartledger/bsv",
-  "version": "7.10.0",
+  "version": "7.11.0",
   "description": "🚀 Complete Bitcoin SV development framework with legally-recognizable DID:web + W3C VC-JWT toolkit, Legal Token Protocol (LTP), Global Digital Attestation Framework (GDAF), StatusList2021 revocation, and 16 flexible loading options. Standards-based credentials with ES256/ES256K support, on-chain BSV anchoring, and comprehensive Bitcoin SV API. Perfect for legal tokens, verifiable credentials, DeFi, smart contracts, and secure Bitcoin applications.",
   "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
   "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",

package/test/build/bundle_externals.js

@@ -0,0 +1,120 @@
+'use strict'
+
+/* global describe, it, before */
+
+// Feature bundles must EXTERNALISE the shared primitives, not embed a second copy.
+//
+// Getting this wrong is not a size regression. If a feature bundle ships its own
+// PrivateKey class, a key built by bsv.min.js fails `instanceof` inside that bundle
+// and index.js's versionGuard reports two library instances — a failure that is
+// invisible to every test that stays inside one bundle.
+//
+// build/esbuild.js has always had a `metafile` option whose comment said it was "used
+// to assert" this property. Nothing consumed it: `grep -rn metafile` returned only the
+// option itself. This file is that consumer.
+
+require('chai').should()
+var esbuild = require('../../build/esbuild.js')
+
+// Bundles that resolve bsv from the global instead of embedding it.
+var EXTERNALISED = esbuild.BUNDLES.filter(function (c) { return c.externalBsv })
+
+describe('feature bundles externalise the shared primitives', function () {
+  this.timeout(120000)
+
+  var inputsByBundle = {}
+
+  before(function () {
+    // Build each one in memory (write:false) and keep its module graph.
+    return Promise.all(EXTERNALISED.map(function (cfg) {
+      return esbuild.buildOne(cfg, { metafile: true, write: false, logLevel: 'silent' })
+        .then(function (result) {
+          inputsByBundle[cfg.file] = Object.keys(result.metafile.inputs)
+            .filter(function (p) { return p.indexOf('lib/') === 0 })
+            .sort()
+        })
+    }))
+  })
+
+  it('has bundles to check', function () {
+    EXTERNALISED.length.should.be.above(0)
+    Object.keys(inputsByBundle).length.should.equal(EXTERNALISED.length)
+  })
+
+  // The primary assertion, derived from the config rather than hand-maintained: every
+  // path in LIB_GLOBALS is a module the build promises to take from the global bsv, so
+  // none of them may appear as a bundled input. Because it reads the same table the
+  // build uses, it cannot drift out of step with it.
+  it('never embeds a module that LIB_GLOBALS maps to the global bsv', function () {
+    var mapped = Object.keys(esbuild.LIB_GLOBALS)
+    var offences = []
+    Object.keys(inputsByBundle).forEach(function (file) {
+      inputsByBundle[file].forEach(function (input) {
+        // 'lib/privatekey.js' -> 'privatekey'; 'lib/script/index.js' -> 'script/index'
+        var key = input.replace(/^lib\//, '').replace(/\.js$/, '')
+        if (mapped.indexOf(key) !== -1) {
+          offences.push(file + ' embeds ' + input + ' (should come from global bsv.' +
+            esbuild.LIB_GLOBALS[key] + ')')
+        }
+      })
+    })
+    offences.should.deep.equal([])
+  })
+
+  // LIB_GLOBALS is deliberately not exhaustive — a feature bundle SHOULD contain its own
+  // feature code. So the catch-all is to pin what each bundle contains: anything new
+  // appearing here is either the feature growing or a primitive leaking in, and a human
+  // decides which. Without this, a `require('../mnemonic')` added to a module reachable
+  // from an externalised entry would bundle a second copy silently, with every existing
+  // test green.
+  it('contains only its own feature code, pinned per bundle', function () {
+    // Accepted in any bundle: stateless helpers, deliberately duplicated rather than
+    // routed through the global.
+    //
+    // Named FILES, not the directory. `lib/util/` as a prefix exempts anything added
+    // under it later, including something stateful — which is the property this test
+    // exists to prevent. Listing them means a new util file has to be considered.
+    var SHARED = ['lib/util/_.js', 'lib/util/preconditions.js', 'lib/util/js.js']
+    var EXPECTED = {
+      'bsv-ecies.min.js': ['lib/ecies/'],
+      'bsv-message.min.js': ['lib/message/'],
+      'bsv-mnemonic.min.js': ['lib/mnemonic/'],
+      'bsv-shamir.min.js': ['lib/crypto/'],
+      'bsv-smartcontract.min.js': ['lib/smart_contract/', 'lib/covenant/', 'lib/smartutxo.js'],
+      'bsv-covenant.min.js': ['lib/smart_contract/'],
+      'bsv-script-helper.min.js': ['lib/custom-script-helper.js']
+    }
+    var unexpected = []
+    Object.keys(inputsByBundle).forEach(function (file) {
+      var allowed = (EXPECTED[file] || []).concat(SHARED)
+      if (!EXPECTED[file]) {
+        unexpected.push(file + ' is externalised but has no expected-input list')
+        return
+      }
+      inputsByBundle[file].forEach(function (input) {
+        var ok = allowed.some(function (prefix) { return input.indexOf(prefix) === 0 })
+        if (!ok) unexpected.push(file + ' unexpectedly embeds ' + input)
+      })
+    })
+    unexpected.should.deep.equal([])
+  })
+
+  it('shares nothing but documented helpers across bundles', function () {
+    // A module appearing in two feature bundles is a duplicated copy in the shipped
+    // set. Only these are accepted, and each is a deliberate call rather than an
+    // accident: lib/util/_.js is a tiny lodash subset, and lib/smart_contract/covenant.js
+    // is genuinely the feature of both covenant-flavoured bundles.
+    var ACCEPTED_DUPLICATES = ['lib/util/_.js', 'lib/smart_contract/covenant.js']
+    var seen = {}
+    Object.keys(inputsByBundle).forEach(function (file) {
+      inputsByBundle[file].forEach(function (input) {
+        (seen[input] = seen[input] || []).push(file)
+      })
+    })
+    var duplicated = Object.keys(seen)
+      .filter(function (p) { return seen[p].length > 1 })
+      .filter(function (p) { return ACCEPTED_DUPLICATES.indexOf(p) === -1 })
+      .sort()
+    duplicated.should.deep.equal([])
+  })
+})

package/test/script/chronicle.js

@@ -35,7 +35,10 @@ function run (build, opts) {
   return {
     verified: verified,
     errstr: interp.errstr || '',
-    stack: (interp.stack || []).map(function (b) { return BN.fromScriptNumBuffer(b).toString() })
+    stack: (interp.stack || []).map(function (b) { return BN.fromScriptNumBuffer(b).toString() }),
+    // The raw bytes as well: several Chronicle behaviours are about WIDTH, not
+    // value, and a script-number reading collapses that distinction.
+    raw: (interp.stack || []).map(function (b) { return Buffer.from(b) })
   }
 }
 
@@ -53,8 +56,37 @@ describe('Chronicle script surface', function () {
       })
     })
 
-    it('is off by default, so none of this changes existing evaluation', function () {
-      (Interpreter.DEFAULT_FLAGS & CHRONICLE).should.equal(0)
+    // This assertion used to read `(Interpreter.DEFAULT_FLAGS & CHRONICLE).should.equal(0)`
+    // — and Interpreter.DEFAULT_FLAGS does not exist, so it evaluated `undefined & n`,
+    // which is 0 for every n. A tautology, written by me, in the same change that added
+    // the flag. What it MEANT to assert is that verify() enables nothing on its own.
+    it('is not enabled unless the caller asks: verify() defaults to no flags', function () {
+      // Deliberately NOT via run(): that helper defaults to CHRONICLE, so it would
+      // measure the helper rather than the library. Omit the argument entirely.
+      var script = new Script().add(Opcode.OP_VER)
+      var interp = new Interpreter()
+      var verified = interp.verify(new Script(), script, new bsv.Transaction(), 0)
+      verified.should.equal(false)
+      interp.errstr.should.match(/BAD_OPCODE/)
+    })
+
+    it('mainnetFlags() opts in, and can opt out for a pre-activation UTXO', function () {
+      // Chronicle gates PER UTXO in the node (`utxo_after_chronicle`), so the library
+      // cannot decide this globally — it can only make both answers easy to express.
+      (Interpreter.mainnetFlags() & CHRONICLE).should.not.equal(0)
+      ;(Interpreter.mainnetFlags({ afterChronicle: false }) & CHRONICLE).should.equal(0)
+      Interpreter.CHRONICLE_ACTIVATION_HEIGHT.should.equal(943816)
+    })
+
+    it('mainnetFlags() actually evaluates a Chronicle script', function () {
+      var r = run(function (s) { s.add(Opcode.OP_VER) },
+        { flags: Interpreter.mainnetFlags(), version: 7 })
+      r.stack[r.stack.length - 1].should.equal('7')
+
+      var pre = run(function (s) { s.add(Opcode.OP_VER) },
+        { flags: Interpreter.mainnetFlags({ afterChronicle: false }), version: 7 })
+      pre.verified.should.equal(false)
+      pre.errstr.should.match(/BAD_OPCODE/)
     })
   })
 
@@ -109,6 +141,11 @@ describe('Chronicle script surface', function () {
       ;[1, 2, 10].forEach(function (v) {
         var r = run(function (s) { s.add(Opcode.OP_VER) }, { version: v })
         r.stack[r.stack.length - 1].should.equal(String(v))
+        // LENGTH too, not just the numeric reading. `01000000` and `01` both read
+        // as 1, so the value check alone passes whether OP_VER pushes four
+        // little-endian bytes or a minimally-encoded script number — and pushing
+        // the script number was the bug fixed in #95.
+        r.raw[r.raw.length - 1].length.should.equal(4)
       })
     })
   })

package/version.js

@@ -1,3 +1,3 @@
 'use strict'
 // GENERATED by scripts/sync-version.js on `npm version` — do not edit.
-module.exports = '7.10.0'
+module.exports = '7.11.0'