@smartledger/bsv 9.1.0 → 9.2.0

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@9.1.0/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.2.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@9.1.0/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.2.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@9.1.0/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.2.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.1.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.1.0/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.1.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.1.0/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.1.0/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.1.0/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.1.0/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.1.0/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.1.0/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.1.0/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.1.0/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.2.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.2.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.2.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.2.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.2.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.2.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.2.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.2.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.2.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.2.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.2.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.1.0/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.2.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.1.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.1.0/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.1.0/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.1.0/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.1.0/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.1.0/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.1.0/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.1.0/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.1.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.1.0/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.1.0/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.2.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.2.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.2.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.2.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.2.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.2.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.2.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.2.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.2.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.2.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.2.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@9.1.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.2.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/index.js

@@ -307,6 +307,7 @@ bsv.createCredentialTemplate = function(credentialType) {
 
 // Legal Token Protocol (LTP) - Primitives-Only Interface
 bsv.LTP = require('./lib/ltp')
+bsv.JCS = require('./lib/util/jcs')
 
 // LTP Right Token Primitives
 bsv.prepareRightToken = function(type, issuerDID, subjectDID, claim, issuerPrivateKey, options) {
@@ -508,12 +509,12 @@ bsv.createClaimTemplate = function(schemaName) {
 }
 
 // LTP Utility Functions
-bsv.canonicalizeClaim = function(claim) {
-  return bsv.LTP.Claim.canonicalize(claim)
+bsv.canonicalizeClaim = function(claim, canonicalization) {
+  return bsv.LTP.Claim.canonicalize(claim, canonicalization)
 }
 
-bsv.hashClaim = function(claim) {
-  return bsv.LTP.Claim.hash(claim)
+bsv.hashClaim = function(claim, canonicalization) {
+  return bsv.LTP.Claim.hash(claim, canonicalization)
 }
 
 bsv.addCustomClaimSchema = function(name, schema) {

package/index.mjs

@@ -18,6 +18,7 @@ export const {
   HDPrivateKey,
   HDPublicKey,
   Input,
+  JCS,
   LTP,
   MerkleBlock,
   Message,

package/jcs-entry.d.ts

@@ -0,0 +1,12 @@
+/**
+ * RFC 8785 (JSON Canonicalization Scheme).
+ *
+ * Object keys sort by UTF-16 code unit, applied during serialization rather than by
+ * rebuilding an object — rebuilding lets V8 reorder integer-like keys ahead of the
+ * sort, producing `{"2":…,"10":…}` where the RFC requires `{"10":…,"2":…}`.
+ *
+ * Throws on non-finite numbers, bigint, circular structures, and values with no JSON
+ * representation, rather than coercing them: a canonicalizer that silently serializes
+ * a different document than the one supplied defeats its own purpose.
+ */
+export declare function stringify(value: any): string;

package/jcs-entry.js

@@ -0,0 +1 @@
+module.exports = require('./lib/util/jcs')

package/lib/block/merkleblock.js

@@ -10,6 +10,32 @@ var errors = require('../errors')
 var $ = require('../util/preconditions')
 var deprecate = require('../util/deprecate')
 
+/**
+ * Shallow-copy an array so the caller's array and ours are not the same object.
+ *
+ * The constructor used to store `arg.hashes` and `arg.flags` directly, and
+ * `toObject()` used to hand the same arrays back out. Both directions aliased, so a
+ * MerkleBlock and the object it was built from — or the object it produced — shared
+ * mutable state. Mutating either changed the other at a distance:
+ *
+ *   var mb = new MerkleBlock(obj)
+ *   mb.hashes.push(x)            // obj.hashes grew too
+ *   var out = mb.toObject()
+ *   out.flags.pop()              // mb.flags shrank too
+ *
+ * This surfaced as order-dependence in this library's own suite: tests that mutate a
+ * block built from a shared fixture corrupted that fixture for every test after them,
+ * so a new test passed alone and failed in the full run. The tests were the messenger;
+ * the aliasing is the defect, and a caller hits it the same way.
+ *
+ * Non-arrays are passed through untouched rather than coerced. The constructor never
+ * validated these fields, and turning a previously-tolerated input into a throw would
+ * be a breaking change — which 9.x is committed against. See STABILITY.md.
+ */
+function copyArray (value) {
+  return Array.isArray(value) ? value.slice() : value
+}
+
 /**
  * Instantiate a MerkleBlock from a Buffer, JSON object, or Object with
  * the properties of the Block
@@ -48,12 +74,12 @@ function MerkleBlock (arg) {
        * @name MerkleBlock#hashes
        * @type {String[]}
        */
-      hashes: arg.hashes,
+      hashes: copyArray(arg.hashes),
       /**
        * @name MerkleBlock#flags
        * @type {Number[]}
        */
-      flags: arg.flags
+      flags: copyArray(arg.flags)
     }
   } else {
     throw new TypeError('Unrecognized argument for MerkleBlock')
@@ -116,8 +142,12 @@ MerkleBlock.prototype.toObject = MerkleBlock.prototype.toJSON = function toObjec
   return {
     header: this.header.toObject(),
     numTransactions: this.numTransactions,
-    hashes: this.hashes,
-    flags: this.flags
+    // Copies, not the live arrays. Handing out the internals meant a caller who
+    // mutated the result of toObject() silently changed the MerkleBlock it came
+    // from — and `toObject` reads as a serializer, which is exactly the API you
+    // expect to be able to modify freely.
+    hashes: copyArray(this.hashes),
+    flags: copyArray(this.flags)
   }
 }
 

package/lib/ltp/claim.js

@@ -3,6 +3,8 @@
 var Hash = require('../crypto/hash')
 var $ = require('../util/preconditions')
 var Id = require('../util/id')
+var JCS = require('../util/jcs')
+var deprecate = require('../util/deprecate')
 
 /**
  * Legal Token Protocol - Claim Preparation Primitives
@@ -282,8 +284,14 @@ var ClaimValidator = {
         errors: errors,
         warnings: warnings,
         schema: schemaName,
-        claimHash: this.hash(claim),
-        canonical: this.canonicalize(claim)
+        // Both pinned to LEGACY, not inheriting the deprecated default: these are
+        // stored as identifiers by callers who cannot pass an argument here, and a
+        // warning naming a function they did not call is noise. 10.0.0 moves them to
+        // JCS as one documented change rather than a silent one.
+        claimHash: Hash.sha256(Buffer.from(
+          this._canonicalizeWith(claim, this.CANONICALIZATION.LEGACY)
+        )).toString('hex'),
+        canonical: this._canonicalizeWith(claim, this.CANONICALIZATION.LEGACY)
       }
       
       return {
@@ -360,7 +368,10 @@ var ClaimValidator = {
       }
       
       // Create attestation hash
-      var attestationHash = Hash.sha256(Buffer.from(this.canonicalize(attestation))).toString('hex')
+      // Pinned to LEGACY — see the note on validateClaim's canonical field.
+      var attestationHash = Hash.sha256(Buffer.from(
+        this._canonicalizeWith(attestation, this.CANONICALIZATION.LEGACY)
+      )).toString('hex')
       attestation.attestationHash = attestationHash
       
       return {
@@ -426,7 +437,10 @@ var ClaimValidator = {
       }
       
       // Create dispute hash
-      var disputeHash = Hash.sha256(Buffer.from(this.canonicalize(disputeRecord))).toString('hex')
+      // Pinned to LEGACY — see the note on validateClaim's canonical field.
+      var disputeHash = Hash.sha256(Buffer.from(
+        this._canonicalizeWith(disputeRecord, this.CANONICALIZATION.LEGACY)
+      )).toString('hex')
       disputeRecord.disputeHash = disputeHash
       
       return {
@@ -541,29 +555,106 @@ var ClaimValidator = {
     }
   },
   
+  /**
+   * Canonicalization forms understood when hashing a claim.
+   *
+   * JCS is RFC 8785 and is what a claim hash should be computed with: two independent
+   * implementations produce identical bytes, which is the only property that makes a
+   * hash meaningful to anyone but us.
+   *
+   * LEGACY is the sorted-key form this module has always used. It sorts keys and then
+   * REBUILDS an object, which loses the sort — V8 orders integer-like own properties
+   * numerically ahead of string keys whatever order they were inserted in:
+   *
+   *     LEGACY   {"2":"two","10":"ten"}
+   *     JCS      {"10":"ten","2":"two"}      (RFC 8785, UTF-16 code unit order)
+   *
+   * Deterministic, so nothing already hashed is wrong or forgeable. Not interoperable,
+   * so an RFC 8785 verifier in any other language computes a different claim hash.
+   */
+  CANONICALIZATION: {
+    JCS: 'jcs',
+    LEGACY: 'legacy'
+  },
+
   /**
    * Canonicalize claim for hashing
+   *
    * @param {Object} claim - Claim to canonicalize
+   * @param {String} [canonicalization] - CANONICALIZATION.JCS or .LEGACY. Omitting it
+   *        selects LEGACY and emits a deprecation notice; the default becomes JCS in
+   *        10.0.0. Pass one explicitly to pin the behaviour across that change.
    * @returns {String} Canonical JSON string
    */
-  canonicalize: function(claim) {
+  canonicalize: function(claim, canonicalization) {
+    return this._canonicalizeWith(
+      claim,
+      this._resolveCanonicalization(canonicalization, 'LTP.Claim.canonicalize')
+    )
+  },
+
+  /**
+   * Hash claim
+   *
+   * @param {Object} claim - Claim to hash
+   * @param {String} [canonicalization] - see canonicalize()
+   * @returns {String} SHA256 hash
+   */
+  hash: function(claim, canonicalization) {
+    var canonical = this._canonicalizeWith(
+      claim,
+      this._resolveCanonicalization(canonicalization, 'LTP.Claim.hash')
+    )
+    return Hash.sha256(Buffer.from(canonical)).toString('hex')
+  },
+
+  /**
+   * Canonicalize with the form already decided. No deprecation notice: the caller has
+   * chosen, either explicitly or on its behalf by _resolveCanonicalization.
+   */
+  _canonicalizeWith: function(claim, canonicalization) {
     $.checkArgument(claim && typeof claim === 'object', 'Invalid claim')
-    
+
+    if (canonicalization === this.CANONICALIZATION.JCS) {
+      return JCS.stringify(claim)
+    }
+
     // Sort keys recursively
     var canonical = this._sortObjectKeys(claim)
-    
+
     // Return deterministic JSON
     return JSON.stringify(canonical)
   },
-  
+
   /**
-   * Hash claim
-   * @param {Object} claim - Claim to hash
-   * @returns {String} SHA256 hash
+   * Resolve an optional canonicalization argument to a concrete form.
+   *
+   * An unrecognised value throws rather than falling back. A silent fallback would
+   * turn a typo such as `'JCS'` into a differently-hashed claim that still looks
+   * successful, which is the failure mode this whole change exists to remove.
    */
-  hash: function(claim) {
-    var canonical = this.canonicalize(claim)
-    return Hash.sha256(Buffer.from(canonical)).toString('hex')
+  _resolveCanonicalization: function(canonicalization, caller) {
+    if (canonicalization === undefined) {
+      // Per STABILITY.md: mark it in a minor, flip it in a major. 9.x does not break
+      // callers, so the default stays LEGACY and the notice carries the migration.
+      deprecate({
+        what: caller + '() without a canonicalization argument',
+        since: '9.2.0',
+        removeIn: '10.0.0',
+        use: caller + '(claim, bsv.LTP.Claim.CANONICALIZATION.JCS)',
+        why: 'the default sorted-key form is not RFC 8785, so other implementations compute a different claim hash'
+      })
+      return this.CANONICALIZATION.LEGACY
+    }
+
+    $.checkArgument(
+      canonicalization === this.CANONICALIZATION.JCS ||
+      canonicalization === this.CANONICALIZATION.LEGACY,
+      'Unknown canonicalization: ' + canonicalization +
+      ". Expected 'jcs' or 'legacy' (bsv.LTP.Claim.CANONICALIZATION)"
+    )
+
+    return canonicalization
   },
   
   /**

package/lib/util/jcs.js

@@ -35,6 +35,21 @@ var JCS = {}
  * @returns {String}
  */
 JCS.stringify = function (value) {
+  return serialize(value, [])
+}
+
+/**
+ * `stack` carries the containers currently being serialized, so a cycle throws a
+ * typed error instead of recursing until the call stack is exhausted. That matters
+ * now the function is public API reachable from a verifier: verification input is by
+ * definition untrusted, and a RangeError raised at an arbitrary depth is a worse
+ * failure than a deliberate one. A linear scan beats a Set here because these
+ * structures are shallow and the array avoids the allocation entirely for the common
+ * acyclic case.
+ *
+ * No acyclic input changes behaviour, so nothing already signed is affected.
+ */
+function serialize (value, stack) {
   if (value === null) return 'null'
 
   var type = typeof value
@@ -50,23 +65,38 @@ JCS.stringify = function (value) {
 
   if (type === 'string') return JSON.stringify(value)
 
-  if (Array.isArray(value)) {
-    // Arrays are order-significant. `undefined` has no JSON form and becomes null in an
-    // array, matching JSON.stringify.
-    return '[' + value.map(function (item) {
-      return item === undefined ? 'null' : JCS.stringify(item)
-    }).join(',') + ']'
+  if (type === 'bigint') {
+    // JSON has no bigint form and coercing one would silently canonicalize a
+    // different document than the caller supplied. Carry it as a string.
+    throw new Error('Cannot canonicalize bigint; represent it as a string')
   }
 
-  if (type === 'object') {
-    // Absent and explicitly-undefined are indistinguishable in JSON, so both are dropped.
-    var keys = Object.keys(value).filter(function (key) {
-      return value[key] !== undefined && typeof value[key] !== 'function'
-    }).sort()
+  if (Array.isArray(value) || type === 'object') {
+    if (stack.indexOf(value) !== -1) {
+      throw new Error('Cannot canonicalize a circular structure')
+    }
+    stack.push(value)
+
+    var out
+    if (Array.isArray(value)) {
+      // Arrays are order-significant. `undefined` has no JSON form and becomes null in an
+      // array, matching JSON.stringify.
+      out = '[' + value.map(function (item) {
+        return item === undefined ? 'null' : serialize(item, stack)
+      }).join(',') + ']'
+    } else {
+      // Absent and explicitly-undefined are indistinguishable in JSON, so both are dropped.
+      var keys = Object.keys(value).filter(function (key) {
+        return value[key] !== undefined && typeof value[key] !== 'function'
+      }).sort()
+
+      out = '{' + keys.map(function (key) {
+        return JSON.stringify(key) + ':' + serialize(value[key], stack)
+      }).join(',') + '}'
+    }
 
-    return '{' + keys.map(function (key) {
-      return JSON.stringify(key) + ':' + JCS.stringify(value[key])
-    }).join(',') + '}'
+    stack.pop()
+    return out
   }
 
   throw new Error('Cannot canonicalize value of type: ' + type)