@smartledger/bsv 7.5.2 → 7.5.4

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@7.5.2/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.5.4/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@7.5.2/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.5.4/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@7.5.2/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.5.4/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.5.2/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.5.2/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.5.2/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.5.2/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.5.2/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.5.2/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.5.2/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.5.2/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.5.2/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.5.2/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.5.2/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.5.4/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.5.4/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.5.4/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.5.4/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.5.4/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.5.4/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.5.4/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.5.4/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.5.4/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.5.4/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.5.4/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.5.2/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.5.4/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.5.2/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.5.2/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.5.2/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.5.2/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.5.2/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.5.2/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.5.2/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.5.2/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.5.2/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.5.2/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.5.2/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.5.4/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.5.4/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.5.4/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.5.4/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.5.4/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.5.4/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.5.4/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.5.4/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.5.4/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.5.4/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.5.4/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@7.5.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.5.4/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/gdaf/smartledger-anchor.js

@@ -234,20 +234,127 @@ SmartLedgerAnchor.prototype.revokeCredential = async function(credentialId, reas
  * broadcasting the secret. Checks the shape rather than the class, because a key that has
  * already been through JSON is a plain object by then.
  */
-function assertNoKeyMaterial (metadata) {
-  var SECRET_KEYS = ['bn', 'privateKey', 'privkey', 'wif', 'privateJwk', 'd', 'seed', 'xpriv', 'xprv']
+// Field names that mean key material whatever they contain.
+var SECRET_KEYS = ['bn', 'privateKey', 'privkey', 'privKey', 'wif', 'privateJwk', 'xpriv', 'xprv', 'mnemonic']
+// Field names that are only suspicious when the VALUE also looks secret. `d` is the JWK
+// private exponent but also the most common short field name there is (a date, a delta);
+// `seed` is a BIP39 seed but also a campaign seed. Refusing these on the name alone
+// rejected `{ d: '2026-01-01' }` and told the caller their date looked like a key.
+var AMBIGUOUS_KEYS = ['d', 'seed', 'secret', 'key']
+
+/** A WIF that actually decodes to a key — the checksum makes false positives negligible. */
+function isWIF (str) {
+  if (typeof str !== 'string' || str.length < 50 || str.length > 53) return false
+  try {
+    bsv.PrivateKey.fromWIF(str)
+    return true
+  } catch (e) { return false }
+}
+
+/** An extended PRIVATE key (xprv/tprv). The public xpub is not secret and is allowed. */
+function isXprv (str) {
+  if (typeof str !== 'string' || !/^(xprv|tprv)/.test(str)) return false
+  try {
+    bsv.HDPrivateKey.fromString(str)
+    return true
+  } catch (e) { return false }
+}
+
+/** A valid BIP39 phrase. Checked against the wordlist + checksum, not just word count. */
+function isMnemonic (str) {
+  if (typeof str !== 'string') return false
+  var words = str.trim().split(/\s+/)
+  if ([12, 15, 18, 21, 24].indexOf(words.length) === -1) return false
+  try {
+    return bsv.Mnemonic.isValid(str.trim())
+  } catch (e) { return false }
+}
+
+/** 64 hex characters that are a valid secp256k1 scalar — i.e. usable as a private key. */
+function isHexScalar (str) {
+  if (typeof str !== 'string' || !/^[0-9a-fA-F]{64}$/.test(str)) return false
+  try {
+    bsv.PrivateKey.fromHex(str)
+    return true
+  } catch (e) { return false }
+}
+
+/**
+ * Self-identifying secrets: formats whose own encoding says "this is a private key".
+ * These are refused under ANY field name, because naming a WIF `note` does not make it
+ * safe to publish. A bare 64-hex scalar is deliberately NOT here — it is indistinguishable
+ * from a SHA-256 hash, and anchoring a document hash is the module's whole purpose.
+ */
+function isSelfIdentifyingSecret (str) {
+  return isWIF(str) || isXprv(str) || isMnemonic(str)
+}
+
+/**
+ * Refuse to serialise anything that looks like key material.
+ *
+ * Defence in depth for the argument-order defect that put a private key in the `metadata`
+ * slot: even if a caller reaches this with a key, the anchor fails loudly instead of
+ * broadcasting the secret. Checks shape rather than class, because a key that has already
+ * been through JSON is a plain object by then.
+ *
+ * Three independent signals, because name alone was both too strict and too loose — it
+ * rejected `{ d: '2026-01-01' }` while happily publishing `{ note: '<a real WIF>' }`:
+ *
+ *   1. the value IS this anchor's own signing key, in any representation;
+ *   2. the value is a self-identifying secret (WIF / xprv / BIP39) under any name;
+ *   3. the field name means key material — always for `wif`/`bn`/`xprv`/…, and for
+ *      ambiguous names like `d`/`seed` only when the value looks secret too.
+ *
+ * @param {object} metadata  the object about to be published in the OP_RETURN
+ * @param {PrivateKey} [ownKey]  this anchor's key, so leaking it is caught by value
+ */
+function assertNoKeyMaterial (metadata, ownKey) {
+  // Every representation of our own key. Addresses and public keys are omitted on
+  // purpose: they are public, and an anchor legitimately references them.
+  var ownForms = []
+  if (ownKey && typeof ownKey.toWIF === 'function') {
+    try {
+      ownForms = [ownKey.toWIF(), ownKey.toString(), ownKey.bn && ownKey.bn.toString(16)]
+        .filter(function (f) { return typeof f === 'string' && f.length })
+        .map(function (f) { return f.toLowerCase() })
+    } catch (e) { ownForms = [] }
+  }
+
+  function refuse (path, why) {
+    throw new Error('Refusing to anchor: ' + (path || 'metadata') + ' ' + why +
+      ', and anchor metadata is published in the OP_RETURN where it is permanent and public.')
+  }
+
+  function checkString (str, path) {
+    if (ownForms.length && ownForms.indexOf(str.toLowerCase()) !== -1) {
+      refuse(path, "is this anchor's own private key")
+    }
+    if (isWIF(str)) refuse(path, 'is a WIF private key')
+    if (isXprv(str)) refuse(path, 'is an extended private key')
+    if (isMnemonic(str)) refuse(path, 'is a BIP39 mnemonic phrase')
+  }
+
   function walk (value, path, depth) {
-    if (!value || typeof value !== 'object' || depth > 4) return
+    if (typeof value === 'string') { checkString(value, path); return }
+    if (!value || typeof value !== 'object' || depth > 6) return
     if (typeof value.toWIF === 'function' && value.bn) {
-      throw new Error('Refusing to anchor: ' + (path || 'metadata') + ' is a PrivateKey. ' +
-        'Anchor metadata is published in the OP_RETURN and must never contain key material.')
+      refuse(path, 'is a PrivateKey')
+    }
+    if (Array.isArray(value)) {
+      value.forEach(function (v, i) { walk(v, (path || 'metadata') + '[' + i + ']', depth + 1) })
+      return
     }
     Object.keys(value).forEach(function (k) {
-      if (SECRET_KEYS.indexOf(k) !== -1 && value[k] != null && typeof value[k] !== 'object') {
-        throw new Error('Refusing to anchor: ' + (path ? path + '.' : '') + k +
-          ' looks like key material, and anchor metadata is published in the OP_RETURN.')
+      var v = value[k]
+      var here = path ? path + '.' + k : k
+      if (v != null && typeof v !== 'object') {
+        var s = String(v)
+        if (SECRET_KEYS.indexOf(k) !== -1) refuse(here, 'is a field that holds key material')
+        if (AMBIGUOUS_KEYS.indexOf(k) !== -1 && (isSelfIdentifyingSecret(s) || isHexScalar(s))) {
+          refuse(here, 'holds something that decodes as a private key')
+        }
       }
-      walk(value[k], path ? path + '.' + k : k, depth + 1)
+      walk(v, here, depth + 1)
     })
   }
   walk(metadata, '', 0)
@@ -256,8 +363,10 @@ function assertNoKeyMaterial (metadata) {
 SmartLedgerAnchor.prototype._createAnchorPayload = function(type, hash, metadata) {
   var timestamp = Math.floor(Date.now() / 1000) // Unix timestamp
 
-  // This payload goes on chain, permanently and publicly.
-  assertNoKeyMaterial(metadata)
+  // This payload goes on chain, permanently and publicly. Pass our own key so that
+  // leaking *it* — the exact defect this guard exists for — is caught by value and not
+  // only by field name.
+  assertNoKeyMaterial(metadata, this.privateKey)
 
   // Create structured payload
   var payload = Buffer.concat([

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartledger/bsv",
-  "version": "7.5.2",
+  "version": "7.5.4",
   "description": "🚀 Complete Bitcoin SV development framework with legally-recognizable DID:web + W3C VC-JWT toolkit, Legal Token Protocol (LTP), Global Digital Attestation Framework (GDAF), StatusList2021 revocation, and 16 flexible loading options. Standards-based credentials with ES256/ES256K support, on-chain BSV anchoring, and comprehensive Bitcoin SV API. Perfect for legal tokens, verifiable credentials, DeFi, smart contracts, and secure Bitcoin applications.",
   "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
   "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",
@@ -215,15 +215,15 @@
     "bs58": "=4.0.1",
     "clone-deep": "^4.0.1",
     "hash.js": "^1.1.7",
-    "inherits": "2.0.3",
+    "inherits": "2.0.4",
     "secrets.js-grempe": "^2.0.0",
-    "unorm": "1.4.1"
+    "unorm": "1.6.0"
   },
   "devDependencies": {
     "assert": "^2.1.0",
     "browserify-zlib": "^0.2.0",
     "buffer": "^6.0.3",
-    "chai": "4.2.0",
+    "chai": "6.2.2",
     "crypto-browserify": "^3.12.1",
     "esbuild": "^0.28.1",
     "events": "^3.3.0",

package/test/gdaf/anchor_no_key_leak.js

@@ -77,7 +77,7 @@ describe('GDAF anchoring never publishes key material', function () {
   it('refuses to anchor metadata carrying a key-shaped field', function () {
     return gdaf().anchorCredential(HASH, key, { utxos: utxos, metadata: { wif: key.toWIF() } })
       .then(function () { throw new Error('should not have anchored') },
-        function (err) { err.message.should.match(/looks like key material/) })
+        function (err) { err.message.should.match(/key material/) })
   })
 
   it('leaves ordinary metadata alone', function () {
@@ -85,4 +85,62 @@ describe('GDAF anchoring never publishes key material', function () {
       utxos: utxos, metadata: { id: 'urn:uuid:1', nested: { note: 'fine' } }
     }).then(function (r) { assertNoSecret(r) })
   })
+  // The guard keyed off field NAMES alone, which was wrong in both directions: it
+  // rejected `{ d: '2026-01-01' }` as key material while publishing a real WIF stored
+  // under `note`. Detection is now by value as well as name.
+  describe('detects key material by value, not just by field name', function () {
+    var Anchor = require('../../lib/gdaf/smartledger-anchor.js')
+    var other = bsv.PrivateKey.fromBuffer(Buffer.alloc(32, 99))
+    var HASH_BUF = bsv.crypto.Hash.sha256(Buffer.from('doc'))
+
+    function build (metadata) {
+      return new Anchor(key, {})._createAnchorPayload('CREDENTIAL', HASH_BUF, metadata)
+    }
+    function refuses (label, metadata) {
+      it('refuses ' + label, function () {
+        ;(function () { build(metadata) }).should.throw(/Refusing to anchor/)
+      })
+    }
+    function accepts (label, metadata) {
+      it('accepts ' + label, function () {
+        var payload = Buffer.from(build(metadata)).toString('utf8')
+        payload.indexOf(key.toWIF()).should.equal(-1)
+      })
+    }
+
+    // Self-identifying secrets: the encoding says "private key" whatever the field is
+    // called. Naming a WIF `note` does not make it safe to publish.
+    refuses('a WIF under an innocuous name', { note: other.toWIF() })
+    refuses('an xprv under an innocuous name', {
+      ref: bsv.HDPrivateKey.fromSeed(Buffer.alloc(32, 1)).toString()
+    })
+    refuses('a BIP39 mnemonic under an innocuous name', {
+      memo: 'abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about'
+    })
+    refuses('a secret nested in an array', { signers: [other.toWIF()] })
+
+    // The anchor's OWN key, in any representation — the exact defect this guard exists
+    // for. A bare hex scalar is otherwise indistinguishable from a hash, so knowing our
+    // own key is what makes this catchable.
+    refuses("the anchor's own key as a raw hex scalar", { backup: key.toString() })
+    refuses("the anchor's own key as a WIF", { backup: key.toWIF() })
+
+    // Ambiguous names are refused only when the value really is secret.
+    refuses('d holding a private scalar', { d: other.toString() })
+    refuses('seed holding a mnemonic', {
+      seed: 'abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about'
+    })
+
+    // ...and left alone otherwise. Anchoring a document hash is the module's purpose,
+    // and a 64-hex hash cannot be told apart from a scalar, so it must not be rejected.
+    accepts('d as a date', { d: '2026-01-01' })
+    accepts('seed as a campaign name', { seed: 'spring-campaign' })
+    accepts('a SHA-256 document hash', { docHash: bsv.crypto.Hash.sha256(Buffer.from('x')).toString('hex') })
+    accepts('key used as an ordinary label', { key: 'value' })
+
+    // Public material is not secret and an anchor legitimately references it.
+    accepts('an address', { payTo: key.toAddress().toString() })
+    accepts('a public key', { pub: key.toPublicKey().toString() })
+    accepts('an xpub', { xpub: bsv.HDPrivateKey.fromSeed(Buffer.alloc(32, 1)).hdPublicKey.toString() })
+  })
 })

package/version.js

@@ -1,3 +1,3 @@
 'use strict'
 // GENERATED by scripts/sync-version.js on `npm version` — do not edit.
-module.exports = '7.5.2'
+module.exports = '7.5.4'