@smartledger/bsv 7.10.1 → 7.12.0

package/build/esbuild/crypto-shim.js

@@ -0,0 +1,35 @@
+'use strict'
+// Minimal browser polyfill for Node's `crypto`, replacing `crypto-browserify`.
+//
+// crypto-browserify is a faithful shim for the whole of Node's crypto module, which
+// means it drags AES, DES, Diffie-Hellman, RSA public-encrypt and an ASN.1 parser into
+// every browser bundle. We call none of it. It also depends on browserify-sign and
+// create-ecdh, whose `elliptic` carries an advisory with no patched version — the build
+// already had to stub those two out by hand to keep elliptic out of the output.
+//
+// The bundles need exactly three entry points, established by reading the graph rather
+// than by guessing:
+//
+//   createHash   lib/crypto/hash.node.js and the didweb / vcjwt / statuslist / anchor /
+//                gdaf modules, which require('crypto') unconditionally
+//   createHmac   lib/mnemonic/pbkdf2.node.js
+//   randomBytes  secrets.js-grempe's Shamir CSPRNG
+//
+// Deliberately NOT exported:
+//
+//   getRandomValues  secrets.js prefers it over randomBytes when present, so adding it
+//                    would silently switch the Shamir CSPRNG to a different code path.
+//                    crypto-browserify does not expose it either; omitting it keeps the
+//                    selection identical to what shipped before.
+//   everything else  an unimplemented member of Node's crypto surface should fail loudly
+//                    at the call site rather than resolve to undefined. Modules that use
+//                    createPublicKey / generateKeyPairSync / sign / verify are Node-only
+//                    already: crypto-browserify never implemented those either, so this
+//                    changes nothing for them.
+//
+// Note that lib/crypto/random.js does not come through here — its browser branch reads
+// window.crypto directly.
+
+exports.createHash = require('create-hash')
+exports.createHmac = require('create-hmac')
+exports.randomBytes = require('randombytes')

package/build/esbuild.js

@@ -18,8 +18,14 @@ const EMPTY = path.join(__dirname, 'esbuild/empty.js')
 const BUILTIN = /^(crypto|stream|assert|util|zlib|vm|buffer|path|http|https|os|url|fs|net|tls|readline|child_process)$/
 
 // full (bundlePolyfills): real browserify shims; unused server-only built-ins -> empty.
+//
+// `crypto` is our own three-function shim rather than crypto-browserify. The full shim
+// pulled AES, DES, Diffie-Hellman, RSA and an ASN.1 parser into every bundle for code we
+// never call, and depended on browserify-sign/create-ecdh, whose `elliptic` has an
+// advisory with no fix — which is why this file used to stub those two by hand. That
+// stub is gone; test/build/bundle_crypto_shim.js now asserts the graph stays clean.
 const FULL_SHIM = {
-  crypto: R('crypto-browserify'),
+  crypto: path.join(__dirname, 'esbuild/crypto-shim.js'),
   stream: R('stream-browserify'),
   assert: R('assert/'),
   util: R('util/'),
@@ -38,8 +44,6 @@ function polyfillPlugin (mode) {
       const shim = mode === 'stub' ? STUB_SHIM : FULL_SHIM
       build.onResolve({ filter: BUILTIN }, (a) => ({ path: shim[a.path] || EMPTY }))
       build.onResolve({ filter: /^process(\/browser)?$/ }, () => ({ path: R('process/browser') }))
-      // keep `elliptic` out of the bundle (webpack aliased browserify-sign / create-ecdh -> false)
-      build.onResolve({ filter: /^(browserify-sign|create-ecdh)(\/|$)/ }, () => ({ path: EMPTY }))
     }
   }
 }

package/docs/AUDIT_SCOPE.md

@@ -0,0 +1,199 @@
+# External security audit — scope and request for quote
+
+This document scopes an independent security review of the `@smartledger/bsv`
+cryptographic core, and carries the enquiry text to send to vendors. It exists so that
+every vendor prices the *same* thing, and so that the reasoning behind the scope
+boundary survives past the engagement that prompted it.
+
+Measured against **v7.12.0**, 2026-08-10 (`lib/` is byte-identical to v7.11.0, where these
+figures were first taken). Re-measure before sending if the version has
+moved (`docs/AUDIT_SCOPE.md` is not covered by a drift gate).
+
+## 1. The question we are asking
+
+The core is inherited from bitcore via moneybutton and has only ever been fixed
+reactively. Every hardening effort to date — the threat model, the conformance corpus,
+the adversarial suites, the bundle and type-drift gates — has been applied **at the
+boundary or to new code**. The inherited layer underneath has never been independently
+reviewed.
+
+So: *is it sound?*
+
+The failure mode we most want examined is **code that reports a check as passed without
+performing it**. Several of the defects found so far have had exactly that shape,
+including assertions written by the maintainers that could not fail. See
+`SECURITY.md` → 6.0.0 and `docs/THREAT_MODEL.md` for the fail-closed principle this is
+testing.
+
+## 2. Scope
+
+Two tiers, to be **priced separately** so the boundary can be drawn against a number
+rather than before seeing one.
+
+### Tier 1 — core, 11,739 lines across 33 files
+
+| Module | Lines | Why it matters |
+| --- | ---: | --- |
+| `lib/script/` | 3,375 | Consensus script interpreter. Divergence from the node means accepting a transaction the network rejects, or the reverse. |
+| `lib/transaction/` | 2,767 | Sighash construction and signing — both BIP-143 and the Original Transaction Digest Algorithm. |
+| `lib/crypto/` | 2,378 | ECDSA, nonce derivation, signature encoding, the script-number type. |
+| `lib/hdprivatekey.js`, `lib/hdpublickey.js` | 1,168 | BIP-32 derivation, including hardened paths. |
+| `lib/privatekey.js`, `lib/publickey.js` | 843 | Key construction, serialisation, WIF. Recent defects here produced a *different* key without error. |
+| `lib/address.js` | 543 | Address derivation and network binding. |
+| `lib/networks.js`, `lib/opcode.js` | 665 | Network parameters and the opcode table, which BSV upgrades have reassigned. |
+
+### Tier 2 — optional, 1,496 lines
+
+| Module | Lines | Why it may belong in scope |
+| --- | ---: | --- |
+| `lib/encoding/` | 644 | Base58Check, varint and buffer readers — the parsing surface untrusted bytes hit first. |
+| `lib/mnemonic/` | 544 | BIP-39 seed derivation. Small, but a weakness here compromises every key beneath it. |
+| `lib/ecies/` | 308 | Encryption built on audited primitives; the composition is ours. |
+
+Tier 2 is cryptographic rather than application code, so excluding it is a **budget
+decision, not a risk judgement**. Priced as an add-on it is cheap; discovered later it
+is not.
+
+## 3. Out of scope, and why
+
+| Component | Status | Reason |
+| --- | --- | --- |
+| `@noble/curves`, `@noble/hashes`, `@noble/ciphers` | Already audited | The primitives come from the Noble libraries, which **Cure53 has audited and published on**. We do not implement curve or hash arithmetic ourselves. State this explicitly to vendors — otherwise they price work we do not need. |
+| `lib/smart_contract/`, `lib/ltp/`, `lib/gdaf/`, `lib/ordinals/`, `lib/block/`, plus 9 further directories and 6 top-level files | Excluded | Application layer, 22,699 lines — 18,435 in the five named modules and 4,264 in the remainder. Written in-house and covered by adversarial tests. Worth a separate engagement; including it here would blur the question in §1. |
+
+Totals reconcile against `lib/`, which is 35,934 lines across 122 files:
+
+```
+tier 1      11,739
+tier 2       1,496
+excluded    22,699
+            ------
+total       35,934
+```
+
+Core + optional = 13,235.
+
+## 4. What an auditor gets on day one
+
+Each of these should *reduce* the quote — they remove discovery work.
+
+- **`docs/THREAT_MODEL.md`** — every claimed security property mapped to the adversarial
+  test that proves it, with honest known limitations. Test paths are gate-checked by
+  `test/security/threat_model_coverage.js`, so the document cannot cite tests that no
+  longer exist. Scope that honestly: the gate asserts existence and a minimum citation
+  count, not that the cited tests still assert anything — a test gutted in place would
+  pass it.
+- **`npm run conformance`** — 452 cases across 13 suites, freezing observable behaviour
+  so any change surfaces as a diff. A second, independently written implementation
+  (`smartledger-bsv-core`, the TypeScript port) agrees on all 452.
+- **4,647 passing tests**, plus a reproducible-bundle gate, a require-cycle gate, and a
+  type-drift gate that parses the published types against the runtime.
+- **`SECURITY.md`** — a published advisory (GHSA-gw63-x79h-mhjc) and a changelog of
+  security fixes with the reasoning for each.
+- **`docs/BN_JS_V5_REVIEW.md`** — an 11,071-check differential review, included so a
+  reviewer can calibrate the depth we work at.
+
+Known limitation worth disclosing up front: a frozen corpus detects a *change*, never a
+pre-existing wrong assumption, and is silent on paths it does not cover. It is a
+regression net, not a correctness oracle. Two independent implementations agreeing is
+only evidence when they were derived independently — both this library and the TS port
+guessed "fail closed" on the Chronicle shift opcodes, and both were wrong.
+
+## 5. Vendors
+
+| Vendor | Indicative | Rationale |
+| --- | --- | --- |
+| **Cure53** | €40–90k | Audited the Noble libraries we depend on, so they already know the layer beneath our core. Boutique, cryptography-literate, publishes its reports. Best fit on substance. |
+| **NCC Group — Cryptography Services** | $60–150k | A dedicated cryptography team rather than a general pentest arm, with protocol and design review as a stated specialism. Good fit for the sighash and key-derivation portions. |
+| **Trail of Bits** | $80–200k | Strongest name and an explicitly exploit-oriented methodology, which suits the §1 failure mode. Most expensive, and their blockchain practice leans toward smart contracts over wallet-library internals. |
+
+Figures are published market ranges for an engagement of this size, **not offers**.
+Expect re-audit of fixes to be quoted separately, typically 20–30% of the original.
+
+Send to all three. The spread in how they scope it back is usually more informative than
+any single number.
+
+## 6. Enquiry text
+
+```text
+Subject: Audit enquiry — BSV cryptographic library core (~13k LOC JavaScript)
+
+Hello,
+
+We maintain @smartledger/bsv, a Bitcoin SV library published on npm. We are
+seeking a quote for an independent security review of its cryptographic core.
+
+Scope, and we would like these priced separately:
+
+  Tier 1 — 11,739 lines, 33 files. Script interpreter, sighash and signing,
+  ECDSA and signature encoding, BIP-32 derivation, key and address
+  construction.
+
+  Tier 2 — 1,496 lines. BIP-39 mnemonics, ECIES, and the Base58Check/varint
+  decoding surface.
+
+JavaScript (CommonJS), Node >= 20.19. The code is public.
+
+Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
+by the Noble libraries and already audited; and our 22,699-line application
+layer (credentials, tokens, ordinals), which we would treat as a separate
+engagement.
+
+Context that should shorten discovery: the core is inherited from bitcore and
+has been fixed reactively but never independently reviewed. We can provide a
+test-backed threat model, a 452-case behavioural conformance corpus that a
+second independent implementation agrees with, and a documented history of the
+defects we have found ourselves.
+
+The failure mode we most want examined is code that reports a check as passed
+without performing it — several of our own findings have had that shape.
+
+Could you indicate availability, an approximate cost range, and what you would
+need from us to firm that up?
+
+Repository: https://github.com/codenlighten/smartledger-bsv
+Package:    https://www.npmjs.com/package/@smartledger/bsv
+
+Thank you,
+SmartLedger Technology
+```
+
+## 7. Reproducing the measurements
+
+Every figure in this document, including the excluded total, must come out of this
+script. **Derive the excluded count as the complement — never by subtracting tier 1
+alone.** The first draft did exactly that, double-counted tier 2, and published parts
+summing to 37,430 against a 35,934 whole; §7 could not catch it because it reproduced
+every figure except the wrong one.
+
+```sh
+lines () { find "$@" -name '*.js' -exec cat {} + | wc -l; }
+
+TIER1_DIRS="lib/crypto lib/transaction lib/script"
+TIER1_FILES="lib/privatekey.js lib/publickey.js lib/address.js \
+             lib/hdprivatekey.js lib/hdpublickey.js lib/opcode.js lib/networks.js"
+TIER2_DIRS="lib/encoding lib/mnemonic lib/ecies"
+
+# Per-module breakdown for the scope tables
+for d in $TIER1_DIRS $TIER2_DIRS; do
+  printf '%-18s %3s files %6s lines\n' "$d" \
+    "$(find $d -name '*.js' | wc -l)" "$(lines $d)"
+done
+wc -l $TIER1_FILES
+
+# Totals, with the excluded count derived as the complement
+TOTAL=$(lines lib)
+T1=$(( $(lines $TIER1_DIRS) + $(cat $TIER1_FILES | wc -l) ))
+T2=$(lines $TIER2_DIRS)
+EXCLUDED=$(( TOTAL - T1 - T2 ))
+
+printf 'tier 1    %6s\ntier 2    %6s\nexcluded  %6s\n          ------\ntotal     %6s\n' \
+  "$T1" "$T2" "$EXCLUDED" "$TOTAL"
+
+# Fails loudly if the three tiers stop reconciling. The non-zero check matters:
+# run from the wrong directory every figure is 0, and 0+0+0 reconciles vacuously.
+[ "$TOTAL" -gt 0 ] || echo "MISMATCH — run this from the repo root"
+[ $(( T1 + T2 + EXCLUDED )) -eq "$TOTAL" ] || echo "MISMATCH — do not send"
+
+find lib -name '*.js' | wc -l   # file count
+```

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@7.10.1/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.12.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.12.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.12.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.10.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.10.1/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.10.1/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.10.1/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.10.1/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.10.1/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.12.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.12.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.12.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.12.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.12.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.12.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.12.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.12.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.12.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.12.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.12.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.12.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.10.1/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.10.1/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.10.1/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.10.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.10.1/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.10.1/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.12.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.12.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.12.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.12.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.12.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.12.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.12.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.12.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.12.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.12.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.12.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.12.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/script/interpreter.js

@@ -390,6 +390,56 @@ Interpreter.SCRIPT_ENABLE_MAGNETIC_OPCODES = (1 << 19)
 // exactly like the Monolith and Magnetic flags above.
 Interpreter.SCRIPT_ENABLE_CHRONICLE = (1 << 20)
 
+/**
+ * Block height at which Chronicle activated on BSV mainnet (2026-04-07).
+ *
+ * Recorded because the node gates on it PER UTXO — `utxo_after_chronicle` — not
+ * globally. Whether Chronicle rules apply to a script depends on the output being
+ * spent, so this is a property of the input under validation, never a property of
+ * the library.
+ */
+Interpreter.CHRONICLE_ACTIVATION_HEIGHT = 943816
+
+/**
+ * The script-verification flags matching BSV mainnet consensus.
+ *
+ * This library has no default flag set — `verify()` falls back to `0`, meaning no
+ * optional feature is enabled. That is deliberate and stays: a validator should state
+ * the consensus context it is validating against rather than inherit one. But leaving
+ * callers to assemble the set by hand invites getting it wrong, and "wrong" here means
+ * a verdict that disagrees with the network.
+ *
+ * `afterChronicle` defaults to TRUE because Chronicle activated at block 943,816 and
+ * every output created since is subject to it. Pass `false` to validate the spend of a
+ * pre-activation UTXO, which is exactly the distinction the node makes.
+ *
+ * NOTE: script-number and element-size limits are NOT flags — they are process-wide
+ * statics raised by `useGenesisLimits()`. A post-Genesis validator needs both this flag
+ * set and that call.
+ *
+ * @param {object} [opts]
+ * @param {boolean} [opts.afterChronicle=true] is the UTXO being spent post-activation
+ * @returns {number} the combined flags
+ */
+Interpreter.mainnetFlags = function (opts) {
+  opts = opts || {}
+  var flags = Interpreter.SCRIPT_VERIFY_P2SH |
+    Interpreter.SCRIPT_VERIFY_STRICTENC |
+    Interpreter.SCRIPT_VERIFY_DERSIG |
+    Interpreter.SCRIPT_VERIFY_LOW_S |
+    Interpreter.SCRIPT_VERIFY_NULLFAIL |
+    Interpreter.SCRIPT_VERIFY_MINIMALDATA |
+    Interpreter.SCRIPT_VERIFY_CHECKLOCKTIMEVERIFY |
+    Interpreter.SCRIPT_VERIFY_CHECKSEQUENCEVERIFY |
+    Interpreter.SCRIPT_ENABLE_SIGHASH_FORKID |
+    Interpreter.SCRIPT_ENABLE_MAGNETIC_OPCODES |
+    Interpreter.SCRIPT_ENABLE_MONOLITH_OPCODES
+  if (opts.afterChronicle !== false) {
+    flags |= Interpreter.SCRIPT_ENABLE_CHRONICLE
+  }
+  return flags
+}
+
 /* Below flags apply in the context of BIP 68 */
 /**
  * If this flag set, CTxIn::nSequence is NOT interpreted as a relative

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartledger/bsv",
-  "version": "7.10.1",
+  "version": "7.12.0",
   "description": "🚀 Complete Bitcoin SV development framework with legally-recognizable DID:web + W3C VC-JWT toolkit, Legal Token Protocol (LTP), Global Digital Attestation Framework (GDAF), StatusList2021 revocation, and 16 flexible loading options. Standards-based credentials with ES256/ES256K support, on-chain BSV anchoring, and comprehensive Bitcoin SV API. Perfect for legal tokens, verifiable credentials, DeFi, smart contracts, and secure Bitcoin applications.",
   "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
   "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",
@@ -243,7 +243,8 @@
     "browserify-zlib": "^0.2.0",
     "buffer": "^6.0.3",
     "chai": "6.2.2",
-    "crypto-browserify": "^3.12.1",
+    "create-hash": "^1.2.0",
+    "create-hmac": "^1.1.7",
     "esbuild": "^0.28.1",
     "events": "^3.3.0",
     "jose": "^5.10.0",
@@ -251,6 +252,7 @@
     "nyc": "^18.0.0",
     "path-browserify": "^1.0.1",
     "process": "^0.11.10",
+    "randombytes": "^2.1.0",
     "sinon": "22.1.0",
     "standard": "12.0.1",
     "stream-browserify": "^3.0.0",
@@ -258,6 +260,15 @@
     "util": "^0.12.5",
     "vm-browserify": "^1.1.2"
   },
+  "overrides": {
+    "js-yaml@^3": "^3.15.1",
+    "js-yaml@^4": "^4.3.1",
+    "serialize-javascript": "^7.0.5",
+    "tmp": "^0.2.7",
+    "mocha": {
+      "diff": "^8.0.3"
+    }
+  },
   "license": "MIT",
   "standard": {
     "globals": [