@smartledger/bsv 8.3.1 → 9.0.0

package/docs/BRC220_BATCH_LEAF_AMENDMENT.md

@@ -110,10 +110,85 @@ of the three and this is the moment to fix it, before that stops being true.
 
 ---
 
-## Recommended alongside
-
-Publish a **batch-mode golden vector** with the other test vectors: a small tree — four
-proofs, say — with the four `proofHash` values, the resulting root, and the inclusion path
-for one leaf. One such vector removes this entire class of ambiguity for every future
-implementer, in a way that no amount of prose reliably does. Its absence is why this
-document is necessary.
+## The golden vector, ready to publish
+
+Prose does not reliably close this: two implementers read the same sentence and chose
+differently. A vector does. This one is generated by
+`tools/gen-brc220-batch-vector.js`, lives at `test/data/brc220-batch-vector.json`, and is
+checked by `test/notaryhash/batch_vector.js`.
+
+**Five leaves, not four.** RFC 6962 splits at the largest power of two *below* `n`, so
+`n = 5` splits 4/1 — a midpoint split would give 2/3 and a different root — and an odd
+count exercises the rule that the last leaf is never duplicated. Those are the two places
+implementations of this tree go wrong, and a power-of-two vector catches neither. It shows
+up in the audit-path lengths: `[3, 3, 3, 3, 1]`.
+
+Every input is derived from a labelled preimage rather than chosen, so the file
+regenerates byte-identically and any implementation can rebuild it from scratch:
+
+- private key `i` = `SHA-256("BRC-220/batch-vector/key/" + i)`
+- `payloadHash` `i` = `SHA-256("BRC-220/batch-vector/payload/" + i)`
+- `createdAt` `i` = `2026-01-0(i+1)T00:00:00.000Z`
+- `algorithm` = `ECDSA-secp256k1`, `hashAlgorithm` = `SHA-256`, `encoding` = `"raw"`
+
+**Signing.** The signer signs the 32-byte `payloadHash` directly — the digest *is* the
+scalar, big-endian. RFC 6979 makes the nonce deterministic, so the signatures, and every
+hash derived from them, reproduce exactly.
+
+This matters more than it looks. The signature is inside `canonicalBytes`, which is inside
+`proofHash`, which is the leaf — so the signing convention determines the root. An earlier
+draft of this vector was generated against the byte-reversed convention that
+`@smartledger/bsv` 8.3.0 used when verifying, and produced five signatures that no
+conformant implementation could check (0/5 under `@noble/curves`), together with a root
+nobody else would compute. It was never published. The values below were generated at
+**8.3.1**, and `test/notaryhash/batch_vector.js` now verifies every signature under
+`@noble/curves` as well as under this library, because a generator and a checker that
+share a signer agree with each other whether or not they are right.
+
+The five `proofHash` values that result:
+
+| leafIndex | proofHash |
+| ---: | --- |
+| 0 | `83f3f73ebc5146b96cce1ee0b6ed4fd251a933a5332fbe5e5ab80da7920fe2c9` |
+| 1 | `29fca10808a3653efbe38abd5f0b926aa09f13bff7847475139a422869729e77` |
+| 2 | `3c44828bea3ca01dfcd5305a839ce02cc1e855f5a7c7028bb4931d42dea3aa2b` |
+| 3 | `0692e22da9b68634e5384bb012324c140c676d2301e078a67f17e335661a9565` |
+| 4 | `1a9c6bc1a6cf8319344ca8c30ca9e9eef8ab3df732748f6be2c824bb84ec0ca9` |
+
+**Merkle root (`d = proofHash`, this amendment):**
+
+```
+abb53eb3b2e3530d51685c6813bb85c85892d2f214c2dc504029d071434ac074
+```
+
+The on-chain record tail is therefore `merkleRoot` above followed by
+`u32be(5) = 00000005`. The audit path for leaf 4 — the lone right-hand leaf, and the
+cheapest single value to check a split rule against — is one node:
+
+```
+060ca4e4bbcb647ab0162bb027cd8f08c1577aaa7069166dd629a3df7e57befd
+```
+
+**Merkle root under the rejected reading (`d = canonicalBytes`):**
+
+```
+4a59ade74941e4d6ca4b7c9f610e0a01a0c3f24cfa94efe816e53ef85f99e324
+```
+
+That second root is published deliberately. An implementation computing it has made the
+other reading of `d` — which is a sound choice against an ambiguous sentence, not a bug in
+their code — and printing both turns a silent non-interoperability into a one-line
+diagnosis.
+
+The stored vector records `canonicalBytes`, `proofHash` and the leaf hash under *both*
+readings for every proof, so an implementer can find which step diverges rather than only
+that the roots differ.
+
+### What this vector is not
+
+It is a conformance target produced by `@smartledger/bsv`, not external validation, and it
+does not prove this reading is the one originally intended — the spec does not say. What
+makes it load-bearing is that the tree beneath it is independently anchored: the RFC 6962
+construction is verified against the published Certificate Transparency roots in
+`test/notaryhash/merkle.js`. Given a tree that provably matches RFC 6962, the vector fixes
+the single thing left open.

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@8.3.1/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.0.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@8.3.1/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.0.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@8.3.1/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.0.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@8.3.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@8.3.1/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@8.3.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@8.3.1/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@8.3.1/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@8.3.1/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@8.3.1/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@8.3.1/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@8.3.1/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@8.3.1/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@8.3.1/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.0.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.0.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.0.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.0.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.0.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.0.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.0.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.0.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.0.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.0.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.0.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/README.md

@@ -138,7 +138,8 @@ const helper = new CustomScriptHelper();
 const multisig = helper.createMultisigScript([pk1, pk2, pk3], 2);
 
 // Timelock script  
-const timelock = helper.createTimelockScript(publicKey, 750000, 'block');
+// REMOVED in 9.0.0 — OP_CHECKLOCKTIMEVERIFY is a NOP after Genesis, so this
+// enforced nothing on mainnet. There is no supported time-lock primitive.
 ```
 
 ### 📊 BIP143 Preimage Analysis

package/docs/THREAT_MODEL.md

@@ -108,8 +108,16 @@ Node, or hostile browser extension is out of scope — see `SECURITY.md`).
 - **No published provenance yet.** Bundles are a reproducible build of source (see §4) but
   npm provenance attestation is pending a trusted-publisher registration (2FA-gated). This is
   a *supply-chain verifiability* gap, not a code vulnerability.
-- **Genesis limits.** Covenant scripts require post-Genesis limits (`SmartContract.enableGenesis()`);
-  the guarantees assume a post-Genesis BSV node.
+- **CLTV time locks removed (9.0.0).** `Locks.timeLockCLTV`, `Locks.htlc` and
+  `CustomScriptHelper.createTimelockScript` were gated by `OP_CHECKLOCKTIMEVERIFY`,
+  which Genesis reverted to an upgradable NOP for outputs created after it. They
+  enforced **nothing** on mainnet — the coins were spendable immediately — yet the
+  library's own tests asserted the lock held, because the covenant harness verified
+  under flags missing the era bits. That is the §1 failure mode found in our own code,
+  and the reason the API was deleted rather than documented: a time lock that does not
+  lock has no safe use. There is no supported time-lock primitive in this library.
+- **Consensus era.** Covenant guarantees assume current BSV mainnet; the harness verifies
+  under `Interpreter.mainnetFlags()` with no opt-in required (8.4.0+).
 
 ## 4. Supply chain / reproducible builds
 

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@8.3.1/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.0.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@8.3.1/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@8.3.1/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@8.3.1/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@8.3.1/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@8.3.1/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@8.3.1/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@8.3.1/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@8.3.1/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@8.3.1/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@8.3.1/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@8.3.1/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.0.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.0.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.0.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.0.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.0.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.0.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.0.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.0.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.0.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.0.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.0.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@8.3.1/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.0.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/index.js

@@ -172,34 +172,18 @@ try {
 // Node.js specific tools (advanced development tools)
 if (typeof window === 'undefined' && typeof require === 'function') {
   try {
-    // bsv.SmartUTXO is a development-only file-backed UTXO simulator.
-    // It writes to node_modules/@smartledger/bsv/utilities/blockchain-state.json,
-    // races on shared filesystem state across processes, and only ships with
-    // an empty seed (the 3.3 MB dev fixture is npmignored). Exposing it on
-    // the main `bsv` namespace creates a real footgun for anyone who assumes
-    // a production UTXO manager.
+    // bsv.SmartUTXO was REMOVED in 9.0.0. It is a development-only file-backed UTXO
+    // simulator: it writes to node_modules/@smartledger/bsv/utilities/blockchain-state.json,
+    // races on shared filesystem state across processes, and ships with an empty seed.
+    // On the main namespace it read as a production UTXO manager, which it never was.
+    //
+    // Soft-deprecated in 4.0.1 with removal promised for 6.0.0, then shipped through
+    // 6.x, 7.x and 8.x still warning about a removal that never came. The module itself
+    // is unchanged and still available by direct import:
     //
-    // Soft-deprecated in v4.0.1: the symbol is preserved (no semver break)
-    // but access surfaces a one-shot warning. Direct import remains:
     //   require('@smartledger/bsv/lib/smartutxo')
-    // The symbol will be removed in v6.0.0.
-    var _SmartUTXO
-    var _SmartUTXOWarned = false
-    Object.defineProperty(bsv, 'SmartUTXO', {
-      configurable: true,
-      enumerable: true,
-      get: function () {
-        if (!_SmartUTXOWarned && !(process.env && process.env.BSV_HIDE_DEPRECATIONS)) {
-          _SmartUTXOWarned = true
-          console.warn('[bsv] bsv.SmartUTXO is a development-only simulator and is deprecated; ' +
-            'it will be removed in v6.0.0. Import directly: ' +
-            "require('@smartledger/bsv/lib/smartutxo'). " +
-            'Set BSV_HIDE_DEPRECATIONS=1 to silence this warning.')
-        }
-        if (!_SmartUTXO) _SmartUTXO = require('./lib/smartutxo')
-        return _SmartUTXO
-      }
-    })
+    //
+    // which is exactly what the deprecation warning told callers to do since 4.0.1.
 
     bsv.SmartMiner = require('./lib/smartminer')
     bsv.CustomScriptHelper = require('./lib/custom-script-helper')

package/lib/covenant/helpers.js

@@ -23,42 +23,42 @@ var Signature = require('../crypto/signature')
 // SIGHASH_ALL | SIGHASH_FORKID — the BSV default these covenants are built for.
 var SIGHASH = Signature.SIGHASH_ALL | Signature.SIGHASH_FORKID // 0x41
 
-// Post-Genesis consensus + STANDARD RELAY flags — what mainnet miners actually
-// enforce. Includes SCRIPT_VERIFY_MINIMALDATA (every push must be minimal) and
-// SCRIPT_VERIFY_LOW_S (canonical signatures). Verifying with these flags locally
-// mirrors mainnet relay/consensus policy, so a covenant that passes here is
-// expected to be accepted on broadcast — catch non-relayable scripts before then.
-function flags () {
-  var I = Interpreter
-  return I.SCRIPT_VERIFY_P2SH |
-    I.SCRIPT_VERIFY_STRICTENC |
-    I.SCRIPT_VERIFY_DERSIG |
-    I.SCRIPT_VERIFY_LOW_S |
-    I.SCRIPT_VERIFY_MINIMALDATA |
-    I.SCRIPT_VERIFY_CHECKLOCKTIMEVERIFY |
-    I.SCRIPT_VERIFY_CHECKSEQUENCEVERIFY |
-    I.SCRIPT_ENABLE_SIGHASH_FORKID |
-    I.SCRIPT_ENABLE_MAGNETIC_OPCODES |
-    I.SCRIPT_ENABLE_MONOLITH_OPCODES |
-    // REQUIRED, not optional. pushTxCore emits OP_RIGHT/OP_LEFT — see
-    // extractHashOutputs and assertSighashType — and those bytes (180/181) are
-    // upgradable NOPs on the network until Chronicle activates. Without this
-    // flag the interpreter treats them as no-ops, exactly as a pre-Chronicle
-    // node does, and the covenant does not verify.
-    //
-    // Stated plainly: OP_PUSH_TX covenants built by this library DEPEND on
-    // Chronicle and cannot be spent on a pre-Chronicle chain. That was
-    // previously invisible because the interpreter ran the string opcodes
-    // unconditionally — more permissively than the network.
-    I.SCRIPT_ENABLE_CHRONICLE
-}
-
 /**
- * Opt into post-Genesis script limits (needed by OP_PUSH_TX covenants).
- * Thin wrapper over Interpreter.useGenesisLimits (added in 4.1.0).
+ * Current BSV mainnet consensus + standard relay flags — what miners actually
+ * enforce. A covenant that verifies here is expected to be accepted on broadcast.
+ *
+ * This DELEGATES to Interpreter.mainnetFlags() rather than assembling a list, and
+ * that is the whole point. Until 8.4.0 it was hand-assembled, and the hand-written
+ * list omitted the three UTXO-ERA flags — SCRIPT_GENESIS, SCRIPT_UTXO_AFTER_GENESIS
+ * and SCRIPT_UTXO_AFTER_CHRONICLE. It carried SCRIPT_ENABLE_CHRONICLE, which enables
+ * the string opcodes, so the omission was easy to miss: the opcodes ran, and only the
+ * *limits* were wrong.
+ *
+ * The era flags are what the interpreter derives its data limits from. Without them
+ * every covenant was verified under PRE-GENESIS rules — a 520-byte element cap that
+ * BSV removed in February 2020. An OP_PUSH_TX preimage is ~585 bytes, so this
+ * library's flagship feature could not verify against its own harness, and
+ * `enableGenesis()` existed to paper over it by raising process-wide statics. That
+ * was treating the symptom: raising the statics cannot enable post-Genesis
+ * arithmetic (only the era flags can) and it weakens pre-Genesis validation, turning
+ * 15 of the reference node's 22 SCRIPTNUM_OVERFLOW vectors into false accepts.
+ *
+ * Delegating also means the covenant path tracks consensus automatically instead of
+ * drifting the next time an era activates. `mainnetFlags()` is the same function the
+ * Interpreter uses for a no-flags verify(), so "verify locally" and "what the network
+ * does" cannot diverge again without both moving together.
+ *
+ * Two flags in the old list are deliberately gone: SCRIPT_VERIFY_CHECKLOCKTIMEVERIFY
+ * and SCRIPT_VERIFY_CHECKSEQUENCEVERIFY. Genesis reverted OP_CLTV/OP_CSV to
+ * upgradable NOPs for outputs created after it (see interpreter.js, the
+ * `isAfterGenesis()` short-circuit), so once the era flags are present these two
+ * change nothing. Keeping them would have implied a time-lock guarantee mainnet does
+ * not provide, which is why the CLTV-based locks were removed in 9.0.0.
+ *
+ * NULLFAIL is gained, which is strictly stricter.
  */
-function enableGenesis (max) {
-  return Interpreter.useGenesisLimits(max)
+function flags () {
+  return Interpreter.mainnetFlags()
 }
 
 /**
@@ -135,7 +135,6 @@ function scriptNum (n) {
 module.exports = {
   SIGHASH: SIGHASH,
   flags: flags,
-  enableGenesis: enableGenesis,
   verify: verify,
   rawPreimage: rawPreimage,
   sighashDigest: sighashDigest,

package/lib/covenant/pushtx.js

@@ -13,8 +13,8 @@
  * Optimal parameters: private key a = 1, ephemeral k = 1  =>  r = Gx,
  *   s = (e + Gx) mod n,  pubkey P = 02||Gx,  e = HASH256(preimage).
  *
- * Requires post-Genesis limits — call SmartContract.enableGenesis() (a.k.a
- * Interpreter.useGenesisLimits()) before verifying these scripts.
+ * Verifies under mainnet consensus flags with no opt-in (8.4.0+). Earlier versions
+ * required SmartContract.enableGenesis() first; that call is now a deprecated no-op.
  */
 
 var Script = require('../script')

package/lib/custom-script-helper.js

@@ -71,22 +71,6 @@ class CustomScriptHelper {
     return script;
   }
 
-  /**
-   * Create a time-locked script (CHECKLOCKTIMEVERIFY)
-   * @param {number} lockTime - Block height or timestamp
-   * @param {Script} baseScript - Base script to execute after time lock
-   * @returns {Script} Time-locked script
-   */
-  static createTimelockScript(lockTime, baseScript) {
-    const lockTimeBuffer = Buffer.from(lockTime.toString(16).padStart(8, '0'), 'hex').reverse();
-    
-    return new Script()
-      .add(lockTimeBuffer)
-      .add(Opcode.OP_CHECKLOCKTIMEVERIFY)
-      .add(Opcode.OP_DROP)
-      .add(baseScript.toBuffer());
-  }
-
   /**
    * Create a conditional script (IF/ELSE/ENDIF)
    * @param {Script} ifScript - Script to execute if condition is true

package/lib/ordinals/ordlock.js

@@ -35,7 +35,7 @@
  *   OP_ENDIF
  *   [OP_FALSE OP_IF "ord" … OP_ENDIF]   // optional inert inscription envelope
  *
- * Requires post-Genesis limits: call SmartContract.enableGenesis() before verifying.
+ * Verifies under mainnet consensus flags with no opt-in (8.4.0+).
  */
 var P = require('../covenant/pushtx')
 var H = require('../covenant/helpers')

package/lib/smart_contract/debugger.js

@@ -5,8 +5,8 @@
  * Step-traces a locking/unlocking pair through Script.Interpreter and records the
  * stack + alt-stack after every opcode, so you can watch an OP_PUSH_TX covenant
  * build its signature and enforce its constraints. Uses the interpreter's
- * stepListener hook. Call SmartContract.enableGenesis() first for OP_PUSH_TX
- * covenants (their preimage element / opcode count exceed pre-Genesis limits).
+ * stepListener hook. No opt-in is needed since 8.4.0: covenants verify under mainnet
+ * consensus flags, whose era bits lift the pre-Genesis element and opcode caps.
  */
 
 var Interpreter = require('../script/interpreter')

package/lib/smart_contract/dsl.js

@@ -14,8 +14,8 @@
  *   // c.unlock(spendTx, satoshis) -> grinds + returns the preimage unlock Script
  *
  * Each clause compiles to one preimage-field check on top of a single OP_PUSH_TX
- * authentication; clauses AND together. Requires post-Genesis limits at verify
- * time (SmartContract.enableGenesis()).
+ * authentication; clauses AND together. Verifies under mainnet consensus flags with
+ * no opt-in (8.4.0+).
  */
 
 var PushTx = require('../covenant/pushtx')

package/lib/smart_contract/index.js

@@ -70,9 +70,6 @@ SmartContract.trace = function (unlockingScript, lockingScript, opts) {
 
 // --- Covenant convenience API (v4.2.0) ---
 // Opt into post-Genesis script limits (required by OP_PUSH_TX covenants).
-SmartContract.enableGenesis = function (max) {
-  return SmartContract.CovenantHelpers.enableGenesis(max)
-}
 // Verify an unlocking/locking pair through the consensus interpreter.
 SmartContract.verifyScript = function (unlockingScript, lockingScript, opts) {
   return SmartContract.CovenantHelpers.verify(unlockingScript, lockingScript, opts)