@smartledger/bsv 9.11.2 → 9.12.0

package/docs/AUDIT_SCOPE.md

@@ -34,14 +34,14 @@ module sounds. That is a deliberate revision: an earlier version of this documen
 scoped Tier 1 as "the cryptographic core" and would have excluded four of the six real
 defects this codebase has produced. See §2.1.
 
-### Tier 1 — 12,013 lines
+### Tier 1 — 12,065 lines
 
 | Module | Lines | Why it matters |
 | --- | ---: | --- |
 | `lib/transaction/` | 2,786 | Sighash construction and signing — both BIP-143 and the Original Transaction Digest Algorithm. |
 | `lib/script/interpreter.js` | 2,851 | **Scoped to the flag and era surface, not opcode execution.** Consensus-flag selection and defaults, era derivation (Genesis/Chronicle), the limits derived from them, and the semantics of the exported `verify()`. Opcode execution is excluded — see §2.2. |
 | `lib/crypto/` | 2,519 | ECDSA, nonce derivation, signature encoding, the script-number type. **Scope this for an architectural judgement as well as for bugs** — see §2.3. |
-| `lib/notaryhash/` | 2,028 | BRC-220 signing and verification. Publicly reachable and relied on downstream. |
+| `lib/notaryhash/` | 2,080 | BRC-220 signing and verification. Publicly reachable and relied on downstream. |
 | `lib/privatekey.js`, `lib/publickey.js` | 843 | Key construction, serialisation, WIF. Recent defects here produced a *different* key without error. |
 | `lib/smart_contract/` (targeted) | 472 | `locks.js` and the covenant-facing entrypoints in `index.js`: CLTV and HTLC locking semantics, flag plumbing, and any wrapper claiming mainnet-equivalent verification. Not the whole 6,908-line module. |
 | `lib/covenant/` | 409 | The verification harness. Its flag word is what made covenants verify under 2019 rules while claiming to mirror mainnet. |
@@ -150,14 +150,14 @@ this repository.
 | `lib/address.js`, `lib/networks.js`, `lib/opcode.js`, `lib/hdprivatekey.js`, `lib/hdpublickey.js` (2,391 lines) | Cut to pay for §2.1 | Formatting, network constants and BIP-32 derivation. No defect has originated here, and `networks.js` in particular defines addressing constants — pubkey hashes, xpub prefixes, ports, DNS seeds — and contains **no consensus-flag logic at all**. |
 | The rest of the application layer — `lib/gdaf/`, `lib/ltp/`, `lib/ordinals/`, `lib/block/`, `lib/didweb/`, `lib/vcjwt/`, `lib/statuslist/`, most of `lib/smart_contract/`, plus assorted top-level files | Excluded | ~26,000 lines. Worth a separate engagement; including it here would blur the question in §1. Note the parts of it with a demonstrated defect history have been pulled *into* Tier 1 rather than left here — see §2.1. |
 
-Totals reconcile against `lib/`, which is 39,791 lines across 131 files:
+Totals reconcile against `lib/`, which is 40,020 lines across 131 files:
 
 ```
-tier 1      12,013
+tier 1      12,065
 tier 2       1,607
-excluded    26,171
+excluded    26,348
             ------
-total       39,791
+total       40,020
 ```
 
 Measured 2026-08-29 at `a954c27`. These figures drift as the library changes — an
@@ -228,7 +228,7 @@ seeking a quote for an independent security review.
 
 Scope, and we would like these priced separately:
 
-  Tier 1 — 12,013 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,065 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era-derivation
   surface of the script interpreter; BRC-220 signing and verification;
   key construction and serialisation; the covenant verification harness and

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@9.11.2/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.12.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@9.11.2/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@9.11.2/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.11.2/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.11.2/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.11.2/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.11.2/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.11.2/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.11.2/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.11.2/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.11.2/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.11.2/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.11.2/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.11.2/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.12.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.12.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.12.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.12.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.12.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.12.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.11.2/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.12.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/audit-rfq/cure53.txt

@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
 
 Scope, and we would like these priced separately:
 
-  Tier 1 — 12,013 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,065 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era surface of the
   script interpreter; BRC-220 signing; the covenant verification harness; RFC
   8785 canonicalization; and the covenant-facing entrypoints of the smart
@@ -30,7 +30,7 @@ Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
 by the Noble libraries and already audited; opcode EXECUTION in the script
 interpreter, which passes 1,483 of 1,483 of the reference node's own consensus
 vectors with zero false accepts and zero false rejects; and the remaining
-26,171-line application layer (credentials, tokens, ordinals), which we would
+26,348-line application layer (credentials, tokens, ordinals), which we would
 treat as a separate engagement.
 
 Note the shape of that first exclusion, because it is what we want priced. The

package/docs/audit-rfq/ncc-group.txt

@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
 
 Scope, and we would like these priced separately:
 
-  Tier 1 — 12,013 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,065 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era surface of the
   script interpreter; BRC-220 signing; the covenant verification harness; RFC
   8785 canonicalization; and the covenant-facing entrypoints of the smart
@@ -30,7 +30,7 @@ Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
 by the Noble libraries and already audited; opcode EXECUTION in the script
 interpreter, which passes 1,483 of 1,483 of the reference node's own consensus
 vectors with zero false accepts and zero false rejects; and the remaining
-26,171-line application layer (credentials, tokens, ordinals), which we would
+26,348-line application layer (credentials, tokens, ordinals), which we would
 treat as a separate engagement.
 
 Note the shape of that first exclusion, because it is what we want priced. The

package/docs/audit-rfq/trail-of-bits.txt

@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
 
 Scope, and we would like these priced separately:
 
-  Tier 1 — 12,013 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,065 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era surface of the
   script interpreter; BRC-220 signing; the covenant verification harness; RFC
   8785 canonicalization; and the covenant-facing entrypoints of the smart
@@ -30,7 +30,7 @@ Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
 by the Noble libraries and already audited; opcode EXECUTION in the script
 interpreter, which passes 1,483 of 1,483 of the reference node's own consensus
 vectors with zero false accepts and zero false rejects; and the remaining
-26,171-line application layer (credentials, tokens, ordinals), which we would
+26,348-line application layer (credentials, tokens, ordinals), which we would
 treat as a separate engagement.
 
 Note the shape of that first exclusion, because it is what we want priced. The

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.11.2/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.11.2/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.11.2/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.11.2/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.11.2/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.11.2/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.11.2/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.11.2/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.11.2/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.11.2/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.11.2/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.12.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.12.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.12.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.12.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.12.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.12.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@9.11.2/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/gdaf/smartledger-anchor.js

@@ -615,6 +615,7 @@ SmartLedgerAnchor._verifyAnchorSPV = function(txid, expectedHash, options) {
   if (options.headerChain) {
     chainResult = SPV.verifyHeaderChain(options.headerChain, {
       requirePow: options.requirePow !== false,
+      powLimit: options.powLimit,
       trustedHash: options.trustedHash
     })
     inclusionHeader = options.headerChain[0]
@@ -625,7 +626,9 @@ SmartLedgerAnchor._verifyAnchorSPV = function(txid, expectedHash, options) {
     index: proof.index,
     nodes: proof.nodes,
     header: inclusionHeader,
-    requirePow: options.requirePow !== false
+    requirePow: options.requirePow !== false,
+    powLimit: options.powLimit,
+    minWork: options.minWork
   })
 
   // Bind the raw tx to the proven txid (double-SHA256, reversed to display order),

package/lib/notaryhash/index.js

@@ -164,9 +164,22 @@ NotaryHash.recordMatchesCertificate = function (record, certificate) {
  *
  * @param {Object} certificate - must carry an `spv` envelope
  * @param {Object} opts
- * @param {String|Buffer|BlockHeader} opts.header - independently obtained
+ * A header's work is only as good as the target it declares, and it declares its own, so
+ * the declared target is capped at `powLimit` (difficulty 1 by default). Even a genuine,
+ * fully worked header can be an orphan: `blockHashAtHeight` is how a caller that has its
+ * own chain view says which block that height really holds.
+ *
+ * @param {Object} certificate - must carry an `spv` envelope
+ * @param {Object} opts
+ * @param {String|Buffer|BlockHeader} opts.header - independently obtained, 80 bytes
  * @param {Number} [opts.height] - the height the header was obtained at. A header's 80
  *   bytes do not carry it, so it is checked against spv.blockHeight only when supplied.
+ * @param {String} [opts.blockHashAtHeight] - the block hash the caller's own chain source
+ *   has at that height. Rejects an orphaned block, which no header check can detect.
+ * @param {Number|String} [opts.powLimit] - easiest target a header may declare, as compact
+ *   bits. Default 0x1d00ffff, the limit of mainnet and testnet; regtest is 0x207fffff.
+ * @param {Number|String} [opts.minWork] - minimum work the header must represent.
+ *   Difficulty 1 is about 4.295e9.
  * @param {Boolean} [opts.requirePow=true] - pass false only for test fixtures
  * @returns {Object} { valid, errors }
  */
@@ -201,17 +214,41 @@ NotaryHash.verifyAnchorSPV = function (certificate, opts) {
     }
 
     var proof = spv.merkleProof || {}
-    var inclusion = SPV.verifyTxInclusion({
-      header: opts.header,
-      txid: txid,
-      index: proof.index,
-      nodes: proof.nodes,
-      requirePow: opts.requirePow !== false
-    })
-    if (inclusion.valid !== true) {
-      errors.push(inclusion.rootMatches === false
-        ? 'merkle proof does not fold to the header\'s root'
-        : 'block header failed proof-of-work validation')
+    var inclusion
+    try {
+      inclusion = SPV.verifyTxInclusion({
+        header: opts.header,
+        txid: txid,
+        index: proof.index,
+        nodes: proof.nodes,
+        requirePow: opts.requirePow !== false,
+        powLimit: opts.powLimit,
+        minWork: opts.minWork
+      })
+    } catch (inputError) {
+      // Something the caller passed cannot be used: a header that is not 80 bytes (often an
+      // object stating a merkleRoot, the very assertion this check exists to stop
+      // believing), a malformed powLimit or minWork, or a malformed proof. Said plainly.
+      errors.push(inputError.message)
+      return { valid: false, errors: errors }
+    }
+    if (inclusion.rootMatches !== true) {
+      errors.push('merkle proof does not fold to the header\'s root')
+    }
+    // The work checks, all of which requirePow:false turns off together, as it always did.
+    if (opts.requirePow !== false) {
+      if (inclusion.powValid !== true) {
+        errors.push('block header failed proof-of-work validation')
+      }
+      // A forged header can declare any target it likes and then meet it: with bits of
+      // 0x2100ffff every hash qualifies. Work below the network's limit is not work.
+      if (inclusion.targetAllowed !== true) {
+        errors.push('block header declares a target easier than the proof-of-work limit, ' +
+          'so its work proves nothing')
+      }
+      if (inclusion.workSufficient !== true) {
+        errors.push('block header carries less work than required: ' + inclusion.work)
+      }
     }
 
     // The spec anchors the certificate in "the block header for spv.blockHash". A header
@@ -230,6 +267,21 @@ NotaryHash.verifyAnchorSPV = function (certificate, opts) {
       errors.push('the supplied header is not at the height the SPV envelope names')
     }
 
+    // The one check no amount of proof of work can replace. A genuine block that lost a
+    // race carries real work and a real Merkle root; only a chain source knows which block
+    // the chain kept at that height, so a caller holding one says so here.
+    if (opts.blockHashAtHeight !== undefined && opts.blockHashAtHeight !== null) {
+      var claimed = Buffer.isBuffer(opts.blockHashAtHeight)
+        ? opts.blockHashAtHeight.toString('hex')
+        : String(opts.blockHashAtHeight).replace(/^0x/, '')
+      if (!/^[0-9a-fA-F]{64}$/.test(claimed)) {
+        errors.push('blockHashAtHeight must be a 32-byte block hash')
+      } else if (claimed.toLowerCase() !== String(inclusion.blockHash).toLowerCase()) {
+        errors.push('the header is not the block the caller\'s chain has at that height: ' +
+          'it may be orphaned')
+      }
+    }
+
     return { valid: errors.length === 0, errors: errors }
   } catch (e) {
     return { valid: false, errors: ['anchor verification error: ' + e.message] }

package/lib/spv/headerchain.js

@@ -8,28 +8,33 @@
  * the chain is anchored at a hash the caller independently trusts.
  *
  * TRUST MODEL — read this. It validates linkage + PER-HEADER proof-of-work, but NOT
- * the difficulty-retargeting schedule. A determined attacker can mine cheap headers
- * at an artificially easy `bits`, so PoW-per-header alone is not sufficient in an
- * adversarial setting. For real assurance pass `opts.trustedHash` — a block hash you
+ * the difficulty-retargeting schedule. Mining a header at an artificially easy `bits`
+ * is no longer enough on its own: every header's DECLARED target must be at least as
+ * hard as `opts.powLimit` (difficulty 1 by default), so a chain of free headers is
+ * refused. Retargeting is still unchecked, so a fork whose headers are each above the
+ * limit remains possible. For real assurance pass `opts.trustedHash` — a block hash you
  * already trust (from your own node, or a hardcoded checkpoint) that the chain's tip
  * (or anchor) must match; the headers around it are then real work extending a block
  * you trust. Full difficulty-retarget validation is intentionally out of scope here.
  */
-var BlockHeader = require('../block/blockheader')
+var BN = require('../crypto/bn')
+var merkleproof = require('./merkleproof')
 
 function rev (b) { return Buffer.from(b).reverse() }
 
+// Every header goes through the same 80-byte snapshot verifyTxInclusion uses, so a chain
+// cannot be built from objects that merely claim a prevHash, an id and a passing
+// validProofOfWork(). Their fields are read from the bytes, or there are no bytes.
 function toHeader (h) {
-  if (h && typeof h.validProofOfWork === 'function') return h
-  if (Buffer.isBuffer(h)) return BlockHeader.fromBuffer(h)
-  if (typeof h === 'string') return BlockHeader.fromBuffer(Buffer.from(h, 'hex'))
-  throw new Error('each header must be a BlockHeader, an 80-byte Buffer, or hex')
+  return merkleproof.headerSnapshot(h)
 }
 
 /**
  * @param {Array} headers  consecutive headers, oldest→newest (BlockHeader/Buffer/hex).
  * @param {object} [opts]
  *   requirePow {boolean=true}  verify each header meets its bits target.
+ *   powLimit {number|string}   easiest target a header may declare, as compact bits.
+ *                              Default 0x1d00ffff; regtest headers need 0x207fffff.
  *   trustedHash {string}       a block hash the chain's tip or anchor must equal.
  * @returns {{ valid, reason?, count, anchorHash, tipHash, work }}
  */
@@ -42,9 +47,25 @@ function verifyHeaderChain (headers, opts) {
   var requirePow = opts.requirePow !== false
   var work = 0
 
+  var limit = requirePow ? merkleproof.targetLimit(opts.powLimit) : null
   for (var i = 0; i < hs.length; i++) {
-    if (requirePow && !hs[i].validProofOfWork()) {
-      return { valid: false, reason: 'invalid proof-of-work at index ' + i, count: hs.length }
+    // The declared target, read the way the node reads it. validProofOfWork() would use
+    // BlockHeader.getTargetDifficulty, which disagrees with this for a size below 4, so
+    // the hash test and the limit test would be against two different targets.
+    var declared = merkleproof.targetFromBits(hs[i].bits)
+    if (requirePow) {
+      if (declared === null || new BN(hs[i].id, 'hex').cmp(declared) > 0) {
+        return { valid: false, reason: 'invalid proof-of-work at index ' + i, count: hs.length }
+      }
+      // Work against a target the header chose for itself is not work. Without this, a
+      // chain of headers mined at bits 0x2100ffff costs nothing and links perfectly.
+      if (declared.cmp(limit) > 0) {
+        return {
+          valid: false,
+          reason: 'target easier than the proof-of-work limit at index ' + i,
+          count: hs.length
+        }
+      }
     }
     work += hs[i].getDifficulty()
     if (i > 0) {

package/lib/spv/index.js

@@ -9,6 +9,7 @@ var merkleproof = require('./merkleproof')
 var headerchain = require('./headerchain')
 
 module.exports = {
+  POW_LIMIT_BITS: merkleproof.POW_LIMIT_BITS,
   merkleRootFromBranch: merkleproof.merkleRootFromBranch,
   verifyMerkleProof: merkleproof.verifyMerkleProof,
   verifyTxInclusion: merkleproof.verifyTxInclusion,