@smartledger/bsv 7.4.0 → 7.5.1

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@7.4.0/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.5.1/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@7.4.0/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.5.1/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@7.4.0/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.5.1/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.4.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.4.0/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.4.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.4.0/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.4.0/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.4.0/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.4.0/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.4.0/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.4.0/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.4.0/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.4.0/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.5.1/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.5.1/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.5.1/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.5.1/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.5.1/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.5.1/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.5.1/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.5.1/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.5.1/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.5.1/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.5.1/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.4.0/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.5.1/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.4.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.4.0/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.4.0/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.4.0/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.4.0/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.4.0/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.4.0/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.4.0/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.4.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.4.0/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.4.0/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.5.1/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.5.1/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.5.1/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.5.1/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.5.1/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.5.1/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.5.1/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.5.1/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.5.1/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.5.1/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.5.1/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@7.4.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.1/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/gdaf/index.js

@@ -294,6 +294,24 @@ GDAF.prototype.verifyMembershipProof = function(proof, validSet) {
  * Blockchain Anchoring Methods
  */
 
+/**
+ * Normalise the `options` argument of the anchoring wrappers to `{ metadata, utxos }`.
+ *
+ * These wrappers take (payload, privateKey, options) while the underlying anchor methods
+ * take (payload, metadata, utxos) — so every one of them forwarded `privateKey` into a
+ * slot that is not a key. For registerDID/revokeCredential that landed in `utxos` and died
+ * on `utxos.reduce`; for anchorCredential/anchorBatch it landed in `metadata`, which is
+ * JSON.stringify-ed straight into the OP_RETURN, publishing the secret scalar on chain.
+ *
+ * A bare array is still accepted as the UTXO list, because that was the only shape that
+ * previously produced a transaction at all.
+ */
+function _anchorOpts (options) {
+  if (Array.isArray(options)) return { metadata: undefined, utxos: options }
+  options = options || {}
+  return { metadata: options.metadata, utxos: options.utxos }
+}
+
 /**
  * Anchor credential to blockchain
  * @param {Object} credential - Credential to anchor
@@ -301,9 +319,13 @@ GDAF.prototype.verifyMembershipProof = function(proof, validSet) {
  * @param {Object} options - Anchoring options
  * @returns {Object} Anchor result
  */
-GDAF.prototype.anchorCredential = function(credential, privateKey, options) {
+GDAF.prototype.anchorCredential = function(credentialHash, privateKey, options) {
   var anchor = new SmartLedgerAnchor(privateKey, this._anchorOptions)
-  return anchor.anchorCredential(credential, privateKey, options)
+  var opts = _anchorOpts(options)
+  // `privateKey` is NOT forwarded: the anchor already holds it, and its second parameter
+  // is `metadata`, which is JSON-serialised into the OP_RETURN. Passing the key here
+  // published it on chain. See the note above _anchorOpts.
+  return anchor.anchorCredential(credentialHash, opts.metadata, opts.utxos)
 }
 
 /**
@@ -313,9 +335,10 @@ GDAF.prototype.anchorCredential = function(credential, privateKey, options) {
  * @param {Object} options - Anchoring options
  * @returns {Object} Batch anchor result
  */
-GDAF.prototype.anchorBatch = function(credentials, privateKey, options) {
+GDAF.prototype.anchorBatch = function(credentialHashes, privateKey, options) {
   var anchor = new SmartLedgerAnchor(privateKey, this._anchorOptions)
-  return anchor.anchorBatch(credentials, privateKey, options)
+  var opts = _anchorOpts(options)
+  return anchor.anchorBatch(credentialHashes, opts.metadata, opts.utxos)
 }
 
 /**
@@ -328,7 +351,7 @@ GDAF.prototype.anchorBatch = function(credentials, privateKey, options) {
  */
 GDAF.prototype.registerDID = function(did, didDocument, privateKey, options) {
   var anchor = new SmartLedgerAnchor(privateKey, this._anchorOptions)
-  return anchor.registerDID(did, didDocument, privateKey, options)
+  return anchor.registerDID(did, didDocument, _anchorOpts(options).utxos)
 }
 
 /**
@@ -341,7 +364,7 @@ GDAF.prototype.registerDID = function(did, didDocument, privateKey, options) {
  */
 GDAF.prototype.revokeCredential = function(credentialId, reason, privateKey, options) {
   var anchor = new SmartLedgerAnchor(privateKey, this._anchorOptions)
-  return anchor.revokeCredential(credentialId, reason, privateKey, options)
+  return anchor.revokeCredential(credentialId, reason, _anchorOpts(options).utxos)
 }
 
 /**

package/lib/gdaf/smartledger-anchor.js

@@ -226,9 +226,39 @@ SmartLedgerAnchor.prototype.revokeCredential = async function(credentialId, reas
  * Create anchor payload
  * @private
  */
+/**
+ * Refuse to serialise anything that looks like key material.
+ *
+ * Defence in depth for the argument-order defect that put a private key in the `metadata`
+ * slot: even if a caller reaches this with a key, the anchor fails loudly instead of
+ * broadcasting the secret. Checks the shape rather than the class, because a key that has
+ * already been through JSON is a plain object by then.
+ */
+function assertNoKeyMaterial (metadata) {
+  var SECRET_KEYS = ['bn', 'privateKey', 'privkey', 'wif', 'privateJwk', 'd', 'seed', 'xpriv', 'xprv']
+  function walk (value, path, depth) {
+    if (!value || typeof value !== 'object' || depth > 4) return
+    if (typeof value.toWIF === 'function' && value.bn) {
+      throw new Error('Refusing to anchor: ' + (path || 'metadata') + ' is a PrivateKey. ' +
+        'Anchor metadata is published in the OP_RETURN and must never contain key material.')
+    }
+    Object.keys(value).forEach(function (k) {
+      if (SECRET_KEYS.indexOf(k) !== -1 && value[k] != null && typeof value[k] !== 'object') {
+        throw new Error('Refusing to anchor: ' + (path ? path + '.' : '') + k +
+          ' looks like key material, and anchor metadata is published in the OP_RETURN.')
+      }
+      walk(value[k], path ? path + '.' + k : k, depth + 1)
+    })
+  }
+  walk(metadata, '', 0)
+}
+
 SmartLedgerAnchor.prototype._createAnchorPayload = function(type, hash, metadata) {
   var timestamp = Math.floor(Date.now() / 1000) // Unix timestamp
-  
+
+  // This payload goes on chain, permanently and publicly.
+  assertNoKeyMaterial(metadata)
+
   // Create structured payload
   var payload = Buffer.concat([
     Buffer.from(this.PROTOCOL_ID, 'utf8'),        // Protocol identifier

package/lib/privatekey.js

@@ -156,11 +156,18 @@ PrivateKey._transformBuffer = function (buf, network) {
  * @returns {object} an Object with keys: bn, network, and compressed
  * @private
  */
-PrivateKey._transformBNBuffer = function (buf, network) {
+PrivateKey._transformBNBuffer = function (buf, network, compressed) {
   var info = {}
   info.network = Networks.get(network) || Networks.defaultNetwork
   info.bn = BN.fromBuffer(buf)
-  info.compressed = false
+  // A raw 32-byte scalar carries no compression information, so this is a choice, not a
+  // reading. It used to be `false` while every other constructor path — random keys, hex
+  // strings, compressed WIF — produced `true`, so `PrivateKey.fromHex(h)` and
+  // `new PrivateKey(h)` returned different addresses and different WIFs for identical
+  // input. Restore a key by the wrong route and you derive an address you never funded.
+  // The default now matches the rest of the library; pass `false` explicitly for the
+  // legacy uncompressed form.
+  info.compressed = compressed === undefined ? true : !!compressed
   return info
 }
 
@@ -182,12 +189,21 @@ PrivateKey._transformWIF = function (str, network) {
  * @param {Network} network
  * @return {PrivateKey}
  */
-PrivateKey.fromBuffer = function (buf, network) {
+PrivateKey.fromBuffer = function (buf, network, compressed) {
+  if (compressed !== undefined && buf && buf.length === 32) {
+    return new PrivateKey(PrivateKey._transformBNBuffer(buf, network, compressed))
+  }
   return new PrivateKey(buf, network)
 }
 
-PrivateKey.fromHex = function (hex, network) {
-  return PrivateKey.fromBuffer(Buffer.from(hex, 'hex'), network)
+/**
+ * @param {string} hex - 32-byte private key scalar, hex encoded
+ * @param {Network|string=} network
+ * @param {boolean=} compressed - defaults to true, matching every other constructor path
+ * @return {PrivateKey}
+ */
+PrivateKey.fromHex = function (hex, network, compressed) {
+  return PrivateKey.fromBuffer(Buffer.from(hex, 'hex'), network, compressed)
 }
 
 /**
@@ -209,14 +225,21 @@ PrivateKey._transformObject = function (json) {
 }
 
 /**
- * Instantiate a PrivateKey from a WIF string
+ * Instantiate a PrivateKey from a WIF string, or from a hex-encoded scalar.
+ *
+ * The `network` argument used to be accepted and silently discarded, so
+ * `fromString(hex, 'testnet')` returned a livenet key and therefore a MAINNET address —
+ * funds sent there land on the wrong network. It is now honoured. For a WIF, which
+ * already encodes its own network, a conflicting `network` throws rather than being
+ * quietly overridden.
  *
- * @param {string} str - The WIF encoded private key string
+ * @param {string} str - WIF-encoded private key, or a hex-encoded scalar
+ * @param {Network|string=} network
  * @returns {PrivateKey} A new valid instance of PrivateKey
  */
-PrivateKey.fromString = PrivateKey.fromWIF = function (str) {
+PrivateKey.fromString = PrivateKey.fromWIF = function (str, network) {
   $.checkArgument(_.isString(str), 'First argument is expected to be a string.')
-  return new PrivateKey(str)
+  return new PrivateKey(str, network)
 }
 
 /**
@@ -350,9 +373,14 @@ PrivateKey.prototype.toAddress = function (network) {
 }
 
 /**
+ * A plain object representation, including the secret scalar.
+ *
+ * This is the deliberate, explicit export — the round-trip partner of
+ * `PrivateKey.fromObject()`. It is NOT what `JSON.stringify()` calls; see `toJSON`.
+ *
  * @returns {Object} A plain object representation
  */
-PrivateKey.prototype.toObject = PrivateKey.prototype.toJSON = function toObject () {
+PrivateKey.prototype.toObject = function toObject () {
   return {
     bn: this.bn.toString('hex'),
     compressed: this.compressed,
@@ -360,6 +388,27 @@ PrivateKey.prototype.toObject = PrivateKey.prototype.toJSON = function toObject
   }
 }
 
+/**
+ * What `JSON.stringify()` calls — deliberately REDACTED.
+ *
+ * `toJSON` used to be the same function as `toObject`, so the secret scalar was emitted
+ * by anything that stringified a key, or an object holding one: a log line, an error
+ * dump, a request body. That is how a private key reached an OP_RETURN in the GDAF
+ * anchor path. Serialising a key is now something you have to ask for by name.
+ *
+ * Use `toObject()` (or `toWIF()`) when you genuinely intend to export the secret;
+ * `PrivateKey.fromObject(key.toObject())` still round-trips exactly.
+ *
+ * @returns {Object} A redacted representation, safe to log
+ */
+PrivateKey.prototype.toJSON = function toJSON () {
+  return {
+    bn: '[REDACTED]',
+    compressed: this.compressed,
+    network: this.network.toString()
+  }
+}
+
 /**
  * Will return a string formatted for the console
  *

package/lib/script/interpreter.js

@@ -223,15 +223,23 @@ Interpreter.MAXIMUM_ELEMENT_SIZE = 4
 // number) so applications can opt into post-Genesis rules — e.g. OP_PUSH_TX
 // covenants, which need a few hundred opcodes — without forking the interpreter.
 Interpreter.MAX_OPS_PER_SCRIPT = 201
+// Maximum total serialized script size. Pre-Genesis consensus is 10,000 bytes;
+// post-Genesis BSV removed this limit too. It was previously a literal inside
+// evaluate(), so `useGenesisLimits()` could not lift it and any script over 10 KB —
+// a large 1Sat Ordinals inscription, for instance — failed SCRIPT_ERR_SCRIPT_SIZE
+// no matter what the caller asked for.
+Interpreter.MAX_SCRIPT_SIZE = 10000
 
 Interpreter.LOCKTIME_THRESHOLD = 500000000
 Interpreter.LOCKTIME_THRESHOLD_BN = new BN(Interpreter.LOCKTIME_THRESHOLD)
 
 /**
  * Opt into post-Genesis BSV consensus limits: effectively no caps on stack
- * element size, script-number width, or opcode count. Pre-Genesis defaults
- * (520 / 4 / 201) remain the out-of-the-box behavior; call this before
- * verify() to run modern covenants such as OP_PUSH_TX.
+ * element size, script-number width, opcode count, or total script size.
+ * Pre-Genesis defaults (520 / 4 / 201 / 10,000) remain the out-of-the-box
+ * behavior; call this before verify() to run modern covenants such as
+ * OP_PUSH_TX, or to evaluate a script larger than 10 KB such as a sizeable
+ * 1Sat Ordinals inscription.
  *
  * IMPORTANT: this mutates static properties on the Interpreter constructor
  * and therefore affects EVERY subsequent `new Interpreter()` in this
@@ -245,7 +253,7 @@ Interpreter.LOCKTIME_THRESHOLD_BN = new BN(Interpreter.LOCKTIME_THRESHOLD)
  *
  *   bsv.Script.Interpreter.useGenesisLimits(64 * 1024)
  *
- * @param {number} [max=0x7fffffff] Ceiling applied to all three caps.
+ * @param {number} [max=0x7fffffff] Ceiling applied to all four caps.
  * @returns {Interpreter} the Interpreter constructor (for chaining)
  */
 Interpreter.useGenesisLimits = function (max) {
@@ -253,6 +261,40 @@ Interpreter.useGenesisLimits = function (max) {
   Interpreter.MAX_SCRIPT_ELEMENT_SIZE = max
   Interpreter.MAXIMUM_ELEMENT_SIZE = max
   Interpreter.MAX_OPS_PER_SCRIPT = max
+  Interpreter.MAX_SCRIPT_SIZE = max
+  return Interpreter
+}
+
+/** The four consensus caps, as a plain object. */
+Interpreter.getLimits = function () {
+  return {
+    maxScriptElementSize: Interpreter.MAX_SCRIPT_ELEMENT_SIZE,
+    maximumElementSize: Interpreter.MAXIMUM_ELEMENT_SIZE,
+    maxOpsPerScript: Interpreter.MAX_OPS_PER_SCRIPT,
+    maxScriptSize: Interpreter.MAX_SCRIPT_SIZE
+  }
+}
+
+/**
+ * Restore caps captured by `getLimits()`. Because the caps are process-wide statics,
+ * anything that raises them must put them back or it silently changes the rules for
+ * unrelated code later in the same process — which is exactly how a test that opts
+ * into Genesis limits can make a pre-Genesis consensus fixture pass. Pair the two:
+ *
+ *   var saved = Interpreter.getLimits()
+ *   Interpreter.useGenesisLimits()
+ *   ...
+ *   Interpreter.setLimits(saved)
+ *
+ * @param {object} limits as returned by getLimits()
+ * @returns {Interpreter} the Interpreter constructor (for chaining)
+ */
+Interpreter.setLimits = function (limits) {
+  limits = limits || {}
+  if (limits.maxScriptElementSize != null) Interpreter.MAX_SCRIPT_ELEMENT_SIZE = limits.maxScriptElementSize
+  if (limits.maximumElementSize != null) Interpreter.MAXIMUM_ELEMENT_SIZE = limits.maximumElementSize
+  if (limits.maxOpsPerScript != null) Interpreter.MAX_OPS_PER_SCRIPT = limits.maxOpsPerScript
+  if (limits.maxScriptSize != null) Interpreter.MAX_SCRIPT_SIZE = limits.maxScriptSize
   return Interpreter
 }
 
@@ -520,8 +562,7 @@ Interpreter._minimallyEncode = function (buf) {
  * bitcoind commit: b5d1b1092998bc95313856d535c632ea5a8f9104
  */
 Interpreter.prototype.evaluate = function () {
-  // TODO: script size should be configurable. no magic numbers
-  if (this.script.toBuffer().length > 10000) {
+  if (this.script.toBuffer().length > Interpreter.MAX_SCRIPT_SIZE) {
     this.errstr = 'SCRIPT_ERR_SCRIPT_SIZE'
     return false
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartledger/bsv",
-  "version": "7.4.0",
+  "version": "7.5.1",
   "description": "🚀 Complete Bitcoin SV development framework with legally-recognizable DID:web + W3C VC-JWT toolkit, Legal Token Protocol (LTP), Global Digital Attestation Framework (GDAF), StatusList2021 revocation, and 16 flexible loading options. Standards-based credentials with ES256/ES256K support, on-chain BSV anchoring, and comprehensive Bitcoin SV API. Perfect for legal tokens, verifiable credentials, DeFi, smart contracts, and secure Bitcoin applications.",
   "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
   "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",