@smartledger/bsv 7.9.0 → 7.10.1

package/build/esbuild.js

@@ -44,18 +44,95 @@ function polyfillPlugin (mode) {
   }
 }
 
-// Externalise the bsv root (require('../..') / require('../index.js') / etc.) to the global
-// `bsv` — the webpack `externals: { … : 'bsv' }` behaviour for feature bundles.
+// Map a lib/ module to the expression that retrieves it from the global `bsv`.
+// Feature bundles resolve shared primitives through this table instead of
+// bundling their own copy.
+//
+// This exists because modules under lib/ used to reach the shared primitives by
+// requiring the package ROOT, and this plugin externalised that single require.
+// Those root requires were removed (they made module load order load-bearing and
+// blocked any move to ESM), so each module now imports what it needs directly —
+// which means the externalisation has to happen per module rather than once.
+//
+// Getting this wrong is not merely a size regression. If a feature bundle embeds
+// its own PrivateKey class, a key constructed by bsv.min.js fails `instanceof`
+// inside that bundle, and index.js's versionGuard reports two library instances.
+const GLOBAL_BSV = '(typeof globalThis!=="undefined"?globalThis:(typeof self!=="undefined"?self:window)).bsv'
+const LIB_GLOBALS = {
+  'address': 'Address',
+  'opcode': 'Opcode',
+  'networks': 'Networks',
+  'privatekey': 'PrivateKey',
+  'publickey': 'PublicKey',
+  'hdprivatekey': 'HDPrivateKey',
+  'hdpublickey': 'HDPublicKey',
+  'script': 'Script',
+  'script/index': 'Script',
+  'script/interpreter': 'Script.Interpreter',
+  'transaction': 'Transaction',
+  'transaction/index': 'Transaction',
+  'transaction/input': 'Transaction.Input',
+  'transaction/output': 'Transaction.Output',
+  'transaction/sighash': 'Transaction.sighash',
+  'transaction/unspentoutput': 'Transaction.UnspentOutput',
+  'crypto/bn': 'crypto.BN',
+  'crypto/ecdsa': 'crypto.ECDSA',
+  'crypto/hash': 'crypto.Hash',
+  'crypto/point': 'crypto.Point',
+  'crypto/random': 'crypto.Random',
+  'crypto/signature': 'crypto.Signature',
+  'encoding/base58': 'encoding.Base58',
+  'encoding/base58check': 'encoding.Base58Check',
+  'encoding/bufferreader': 'encoding.BufferReader',
+  'encoding/bufferwriter': 'encoding.BufferWriter',
+  'encoding/varint': 'encoding.Varint',
+  'errors': 'errors',
+  'errors/index': 'errors',
+  'util/js': 'util.js',
+  'util/preconditions': 'util.preconditions',
+  'block': 'Block',
+  'block/index': 'Block',
+  'block/blockheader': 'BlockHeader',
+  'block/merkleblock': 'MerkleBlock'
+  // Deliberately NOT mapped: lib/util/_.js. Its only global alias is the legacy
+  // `bsv.deps._`, which is slated for removal in the next major; the bundles
+  // should not be the thing keeping it alive. It is ~1.7 KB, has no dependencies
+  // and no identity semantics (pure isString/isNumber-style predicates), so a
+  // duplicate copy in the message/mnemonic bundles is harmless — unlike a
+  // duplicate PrivateKey, which would break instanceof across bundles.
+}
+
+const LIB_DIR = path.join(ROOT, 'lib')
+
+// Turn an absolute resolved path into its lib-relative key ('crypto/hash').
+function libKey (resolved) {
+  if (resolved.indexOf(LIB_DIR + path.sep) !== 0) return null
+  return resolved.slice(LIB_DIR.length + 1).replace(/\\/g, '/').replace(/\.js$/, '')
+}
+
+// Externalise the bsv root (require('../..') / require('../index.js') / etc.) and the
+// individual lib/ primitives to the global `bsv` — the webpack
+// `externals: { … : 'bsv' }` behaviour for feature bundles.
 function externalBsvPlugin () {
   return {
     name: 'external-bsv',
     setup (build) {
       build.onResolve({ filter: /^\.\.?[\\/]/ }, (a) => {
         const resolved = path.resolve(a.resolveDir, a.path)
-        if (resolved === BSV_INDEX || resolved === ROOT) return { path: a.path, namespace: 'bsv-global' }
+        if (resolved === BSV_INDEX || resolved === ROOT) {
+          return { path: a.path, namespace: 'bsv-global' }
+        }
+        const key = libKey(resolved)
+        if (key && LIB_GLOBALS[key]) {
+          return { path: LIB_GLOBALS[key], namespace: 'bsv-global-member' }
+        }
       })
       build.onLoad({ filter: /.*/, namespace: 'bsv-global' }, () => ({
-        contents: 'module.exports=(typeof globalThis!=="undefined"?globalThis:(typeof self!=="undefined"?self:window)).bsv',
+        contents: 'module.exports=' + GLOBAL_BSV,
+        loader: 'js'
+      }))
+      build.onLoad({ filter: /.*/, namespace: 'bsv-global-member' }, (a) => ({
+        contents: 'module.exports=' + GLOBAL_BSV + '.' + a.path,
         loader: 'js'
       }))
     }
@@ -105,6 +182,10 @@ function buildOne (cfg, opts) {
     inject: [path.join(__dirname, 'esbuild/globals.js')],
     define: { global: 'globalThis' },
     footer: { js: umdFooter(cfg.global) },
+    // Opt-in build graph. test/build/bundle_externals.js consumes it to assert that
+    // feature bundles externalise the shared primitives instead of embedding a second
+    // copy — this comment used to claim that assertion existed when nothing performed it.
+    metafile: opts.metafile === true,
     write: opts.write !== false,
     outfile: opts.write === false ? undefined : path.join(ROOT, cfg.file),
     logLevel: opts.logLevel || 'warning'
@@ -120,7 +201,7 @@ function buildAll () {
   return Promise.all(BUNDLES.map(function (c) { return buildOne(c) }))
 }
 
-module.exports = { buildFullBundle, buildAll, buildOne, BUNDLES }
+module.exports = { buildFullBundle, buildAll, buildOne, BUNDLES, LIB_GLOBALS }
 
 if (require.main === module) {
   buildAll().then(function () {

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@7.9.0/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.10.1/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@7.9.0/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@7.9.0/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.9.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.9.0/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.9.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.9.0/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.9.0/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.9.0/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.9.0/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.9.0/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.9.0/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.9.0/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.9.0/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.10.1/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.10.1/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.10.1/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.10.1/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.10.1/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.10.1/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.9.0/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@7.10.1/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.9.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.9.0/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.9.0/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.9.0/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.9.0/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.9.0/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.9.0/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.9.0/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.9.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.9.0/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.9.0/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@7.10.1/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@7.10.1/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@7.10.1/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@7.10.1/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@7.10.1/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@7.10.1/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@7.10.1/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@7.9.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@7.10.1/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/index.js

@@ -2,7 +2,15 @@
 
 var bsv = module.exports
 
-// Initialize dependencies first to avoid circular dependency issues.
+// `bsv.deps` is a legacy compatibility surface, retained as public API.
+//
+// It previously had to be initialized FIRST because modules under lib/ read
+// `bsv.deps._` and friends back off the package root while index.js was still
+// executing — 45 files required the root, so load order was load-bearing.
+// Those cycles were removed: every module under lib/ now requires its
+// dependencies directly, and nothing in lib/ reads bsv.deps any more.
+// The property stays because external consumers may use it; removing it is a
+// breaking change deferred to the next major.
 //
 // `bn.js`, `bs58`, and `elliptic` are declared runtime deps in
 // package.json. In Node they MUST be installed — silently swallowing

package/lib/covenant/helpers.js

@@ -0,0 +1,146 @@
+'use strict'
+/**
+ * SmartContract covenant helpers
+ * ==============================
+ *
+ * Shared utilities for building and verifying custom locking scripts &
+ * OP_PUSH_TX covenants: a consensus-flag verify() harness, raw BIP-143 preimage
+ * access, signing, and fund/spend scaffolding. Used by ./pushtx, ./pels, ./token
+ * and ./locks.
+ */
+
+var Script = require('../script')
+var Interpreter = require('../script/interpreter')
+var Opcode = require('../opcode')
+var Transaction = require('../transaction')
+var Input = require('../transaction/input')
+var Output = require('../transaction/output')
+var sighash = require('../transaction/sighash')
+var BN = require('../crypto/bn')
+var Hash = require('../crypto/hash')
+var Signature = require('../crypto/signature')
+
+// SIGHASH_ALL | SIGHASH_FORKID — the BSV default these covenants are built for.
+var SIGHASH = Signature.SIGHASH_ALL | Signature.SIGHASH_FORKID // 0x41
+
+// Post-Genesis consensus + STANDARD RELAY flags — what mainnet miners actually
+// enforce. Includes SCRIPT_VERIFY_MINIMALDATA (every push must be minimal) and
+// SCRIPT_VERIFY_LOW_S (canonical signatures). Verifying with these flags locally
+// mirrors mainnet relay/consensus policy, so a covenant that passes here is
+// expected to be accepted on broadcast — catch non-relayable scripts before then.
+function flags () {
+  var I = Interpreter
+  return I.SCRIPT_VERIFY_P2SH |
+    I.SCRIPT_VERIFY_STRICTENC |
+    I.SCRIPT_VERIFY_DERSIG |
+    I.SCRIPT_VERIFY_LOW_S |
+    I.SCRIPT_VERIFY_MINIMALDATA |
+    I.SCRIPT_VERIFY_CHECKLOCKTIMEVERIFY |
+    I.SCRIPT_VERIFY_CHECKSEQUENCEVERIFY |
+    I.SCRIPT_ENABLE_SIGHASH_FORKID |
+    I.SCRIPT_ENABLE_MAGNETIC_OPCODES |
+    I.SCRIPT_ENABLE_MONOLITH_OPCODES |
+    // REQUIRED, not optional. pushTxCore emits OP_RIGHT/OP_LEFT — see
+    // extractHashOutputs and assertSighashType — and those bytes (180/181) are
+    // upgradable NOPs on the network until Chronicle activates. Without this
+    // flag the interpreter treats them as no-ops, exactly as a pre-Chronicle
+    // node does, and the covenant does not verify.
+    //
+    // Stated plainly: OP_PUSH_TX covenants built by this library DEPEND on
+    // Chronicle and cannot be spent on a pre-Chronicle chain. That was
+    // previously invisible because the interpreter ran the string opcodes
+    // unconditionally — more permissively than the network.
+    I.SCRIPT_ENABLE_CHRONICLE
+}
+
+/**
+ * Opt into post-Genesis script limits (needed by OP_PUSH_TX covenants).
+ * Thin wrapper over Interpreter.useGenesisLimits (added in 4.1.0).
+ */
+function enableGenesis (max) {
+  return Interpreter.useGenesisLimits(max)
+}
+
+/**
+ * Verify an unlocking script against a locking script through the consensus
+ * interpreter. @returns {{ok:boolean, err:string}}
+ */
+function verify (unlockingScript, lockingScript, opts) {
+  opts = opts || {}
+  var interp = new Interpreter()
+  var ok = interp.verify(
+    unlockingScript,
+    lockingScript,
+    opts.tx || new Transaction(),
+    opts.inputIndex || 0,
+    opts.flags || flags(),
+    new BN(opts.satoshis || 0)
+  )
+  return { ok: ok, err: interp.errstr || '' }
+}
+
+/** Raw BIP-143 preimage (the serialization that is double-SHA256'd), not the digest. */
+function rawPreimage (tx, inputIndex, lockingScript, satoshis, sighashType) {
+  return sighash.sighashPreimage(
+    tx, sighashType || SIGHASH, inputIndex, lockingScript, new BN(satoshis))
+}
+
+/** Sighash digest = HASH256(rawPreimage) — useful for asserting OP_PUSH_TX linkage in JS. */
+function sighashDigest (tx, inputIndex, lockingScript, satoshis, sighashType) {
+  return Hash.sha256sha256(rawPreimage(tx, inputIndex, lockingScript, satoshis, sighashType))
+}
+
+/** DER+sighash-byte signature over `lockingScript` for `inputIndex`. */
+function signInput (tx, privateKey, inputIndex, lockingScript, satoshis, sighashType) {
+  sighashType = sighashType || SIGHASH
+  var sig = sighash.sign(tx, privateKey, sighashType, inputIndex, lockingScript, new BN(satoshis))
+  return Buffer.concat([sig.toDER(), Buffer.from([sighashType])])
+}
+
+/**
+ * Build a funding tx paying `satoshis` into `lockingScript`, plus a spending tx
+ * consuming it with the supplied outputs. Returns { funding, spend }; the caller
+ * sets spend.inputs[0] script.
+ */
+function fundAndSpend (lockingScript, satoshis, opts) {
+  opts = opts || {}
+  var funding = new Transaction().addOutput(
+    new Output({ script: lockingScript, satoshis: satoshis }))
+  var spend = new Transaction()
+  spend.addInput(
+    new Input({ prevTxId: funding.hash, outputIndex: 0, script: Script.empty() }),
+    lockingScript, satoshis)
+  if (opts.outputs) opts.outputs.forEach(function (o) { spend.addOutput(o) })
+  return { funding: funding, spend: spend }
+}
+
+/** A P2PKH Output object for an address or public key. */
+function p2pkhOutput (addressOrPubKey, satoshis) {
+  var addr = addressOrPubKey.toAddress ? addressOrPubKey.toAddress() : addressOrPubKey
+  return new Output({ script: Script.buildPublicKeyHashOut(addr), satoshis: satoshis })
+}
+
+/** Minimal little-endian script-number Buffer (push as data to put a number on-stack). */
+function scriptNum (n) {
+  // Minimal on-stack number: 0..16 and -1 use the dedicated opcodes (OP_0..OP_16,
+  // OP_1NEGATE) instead of a data push, so covenant scripts stay MINIMALDATA-clean
+  // (mainnet relay policy). Larger values use a minimal scriptNum push. The result
+  // is passed to Script.add(), which accepts an opcode number or a Buffer.
+  if (n === 0) return Opcode.OP_0
+  if (n === -1) return Opcode.OP_1NEGATE
+  if (n >= 1 && n <= 16) return Opcode['OP_' + n]
+  return new BN(n).toScriptNumBuffer()
+}
+
+module.exports = {
+  SIGHASH: SIGHASH,
+  flags: flags,
+  enableGenesis: enableGenesis,
+  verify: verify,
+  rawPreimage: rawPreimage,
+  sighashDigest: sighashDigest,
+  signInput: signInput,
+  fundAndSpend: fundAndSpend,
+  p2pkhOutput: p2pkhOutput,
+  scriptNum: scriptNum
+}

package/lib/covenant/index.js

@@ -0,0 +1,21 @@
+'use strict'
+/**
+ * Covenant primitives — OP_PUSH_TX and the BIP-143 preimage helpers it needs.
+ *
+ * These live in core rather than under lib/smart_contract because they have two
+ * independent consumers: the smart-contract tooling, and lib/ordinals (OrdLock
+ * covenants). lib/ordinals previously reached sideways into lib/smart_contract
+ * for them, which was the only dependency from core code into the application
+ * layer and the one thing blocking a clean split of the two.
+ *
+ * Nothing here depends on anything above Script / Transaction / crypto.
+ *
+ * The old paths (lib/smart_contract/pushtx.js and
+ * lib/smart_contract/covenant_helpers.js) remain as re-export shims, since deep
+ * imports are public API via the package.json exports map.
+ */
+
+module.exports = {
+  PushTx: require('./pushtx'),
+  Helpers: require('./helpers')
+}