@smartledger/bsv 9.12.0 → 9.14.0

package/docs/AUDIT_SCOPE.md

@@ -34,14 +34,14 @@ module sounds. That is a deliberate revision: an earlier version of this documen
 scoped Tier 1 as "the cryptographic core" and would have excluded four of the six real
 defects this codebase has produced. See §2.1.
 
-### Tier 1 — 12,065 lines
+### Tier 1 — 12,089 lines
 
 | Module | Lines | Why it matters |
 | --- | ---: | --- |
 | `lib/transaction/` | 2,786 | Sighash construction and signing — both BIP-143 and the Original Transaction Digest Algorithm. |
 | `lib/script/interpreter.js` | 2,851 | **Scoped to the flag and era surface, not opcode execution.** Consensus-flag selection and defaults, era derivation (Genesis/Chronicle), the limits derived from them, and the semantics of the exported `verify()`. Opcode execution is excluded — see §2.2. |
 | `lib/crypto/` | 2,519 | ECDSA, nonce derivation, signature encoding, the script-number type. **Scope this for an architectural judgement as well as for bugs** — see §2.3. |
-| `lib/notaryhash/` | 2,080 | BRC-220 signing and verification. Publicly reachable and relied on downstream. |
+| `lib/notaryhash/` | 2,104 | BRC-220 signing and verification. Publicly reachable and relied on downstream. |
 | `lib/privatekey.js`, `lib/publickey.js` | 843 | Key construction, serialisation, WIF. Recent defects here produced a *different* key without error. |
 | `lib/smart_contract/` (targeted) | 472 | `locks.js` and the covenant-facing entrypoints in `index.js`: CLTV and HTLC locking semantics, flag plumbing, and any wrapper claiming mainnet-equivalent verification. Not the whole 6,908-line module. |
 | `lib/covenant/` | 409 | The verification harness. Its flag word is what made covenants verify under 2019 rules while claiming to mirror mainnet. |
@@ -150,14 +150,14 @@ this repository.
 | `lib/address.js`, `lib/networks.js`, `lib/opcode.js`, `lib/hdprivatekey.js`, `lib/hdpublickey.js` (2,391 lines) | Cut to pay for §2.1 | Formatting, network constants and BIP-32 derivation. No defect has originated here, and `networks.js` in particular defines addressing constants — pubkey hashes, xpub prefixes, ports, DNS seeds — and contains **no consensus-flag logic at all**. |
 | The rest of the application layer — `lib/gdaf/`, `lib/ltp/`, `lib/ordinals/`, `lib/block/`, `lib/didweb/`, `lib/vcjwt/`, `lib/statuslist/`, most of `lib/smart_contract/`, plus assorted top-level files | Excluded | ~26,000 lines. Worth a separate engagement; including it here would blur the question in §1. Note the parts of it with a demonstrated defect history have been pulled *into* Tier 1 rather than left here — see §2.1. |
 
-Totals reconcile against `lib/`, which is 40,020 lines across 131 files:
+Totals reconcile against `lib/`, which is 40,112 lines across 131 files:
 
 ```
-tier 1      12,065
+tier 1      12,089
 tier 2       1,607
-excluded    26,348
+excluded    26,416
             ------
-total       40,020
+total       40,112
 ```
 
 Measured 2026-08-29 at `a954c27`. These figures drift as the library changes — an
@@ -228,7 +228,7 @@ seeking a quote for an independent security review.
 
 Scope, and we would like these priced separately:
 
-  Tier 1 — 12,065 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,089 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era-derivation
   surface of the script interpreter; BRC-220 signing and verification;
   key construction and serialisation; the covenant verification harness and

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@9.12.0/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.14.0/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.14.0/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.14.0/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.12.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.12.0/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.12.0/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.12.0/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.12.0/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.12.0/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.14.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.14.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.14.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.14.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.14.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.14.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.14.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.14.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.14.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.14.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.14.0/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.14.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/audit-rfq/cure53.txt

@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
 
 Scope, and we would like these priced separately:
 
-  Tier 1 — 12,065 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,089 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era surface of the
   script interpreter; BRC-220 signing; the covenant verification harness; RFC
   8785 canonicalization; and the covenant-facing entrypoints of the smart
@@ -30,7 +30,7 @@ Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
 by the Noble libraries and already audited; opcode EXECUTION in the script
 interpreter, which passes 1,483 of 1,483 of the reference node's own consensus
 vectors with zero false accepts and zero false rejects; and the remaining
-26,348-line application layer (credentials, tokens, ordinals), which we would
+26,416-line application layer (credentials, tokens, ordinals), which we would
 treat as a separate engagement.
 
 Note the shape of that first exclusion, because it is what we want priced. The

package/docs/audit-rfq/ncc-group.txt

@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
 
 Scope, and we would like these priced separately:
 
-  Tier 1 — 12,065 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,089 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era surface of the
   script interpreter; BRC-220 signing; the covenant verification harness; RFC
   8785 canonicalization; and the covenant-facing entrypoints of the smart
@@ -30,7 +30,7 @@ Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
 by the Noble libraries and already audited; opcode EXECUTION in the script
 interpreter, which passes 1,483 of 1,483 of the reference node's own consensus
 vectors with zero false accepts and zero false rejects; and the remaining
-26,348-line application layer (credentials, tokens, ordinals), which we would
+26,416-line application layer (credentials, tokens, ordinals), which we would
 treat as a separate engagement.
 
 Note the shape of that first exclusion, because it is what we want priced. The

package/docs/audit-rfq/trail-of-bits.txt

@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
 
 Scope, and we would like these priced separately:
 
-  Tier 1 — 12,065 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,089 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era surface of the
   script interpreter; BRC-220 signing; the covenant verification harness; RFC
   8785 canonicalization; and the covenant-facing entrypoints of the smart
@@ -30,7 +30,7 @@ Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
 by the Noble libraries and already audited; opcode EXECUTION in the script
 interpreter, which passes 1,483 of 1,483 of the reference node's own consensus
 vectors with zero false accepts and zero false rejects; and the remaining
-26,348-line application layer (credentials, tokens, ordinals), which we would
+26,416-line application layer (credentials, tokens, ordinals), which we would
 treat as a separate engagement.
 
 Note the shape of that first exclusion, because it is what we want priced. The

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.12.0/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.12.0/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.12.0/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.12.0/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.12.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.12.0/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.12.0/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.14.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.14.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.14.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.14.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.14.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.14.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.14.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.14.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.14.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.14.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.14.0/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@9.12.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.14.0/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/lib/notaryhash/index.js

@@ -6,6 +6,7 @@ var SPV = require('../spv')
 var Encoding = require('./encoding')
 var NotaryScript = require('./script')
 var Certificate = require('./certificate')
+var deprecate = require('../util/deprecate')
 var Suites = require('./suites')
 var Merkle = require('./merkle')
 
@@ -178,8 +179,10 @@ NotaryHash.recordMatchesCertificate = function (record, certificate) {
  *   has at that height. Rejects an orphaned block, which no header check can detect.
  * @param {Number|String} [opts.powLimit] - easiest target a header may declare, as compact
  *   bits. Default 0x1d00ffff, the limit of mainnet and testnet; regtest is 0x207fffff.
- * @param {Number|String} [opts.minWork] - minimum work the header must represent.
+ * @param {Number|String} [opts.minWork] - minimum work the header must represent, in HASHES.
  *   Difficulty 1 is about 4.295e9.
+ * @param {Number|String} [opts.minDifficulty] - the same floor in DIFFICULTY, the unit
+ *   difficulty is quoted in: a real BSV header is about 2.6e10. Exactly one of the two.
  * @param {Boolean} [opts.requirePow=true] - pass false only for test fixtures
  * @returns {Object} { valid, errors }
  */
@@ -213,6 +216,26 @@ NotaryHash.verifyAnchorSPV = function (certificate, opts) {
       errors.push('on-chain record does not match the certificate')
     }
 
+    // The cap rules out a FREE forgery, not a cheap one. A header at difficulty 1 costs
+    // about 4.3e9 double-SHA256 attempts — seconds on one GPU — while a real mainnet header
+    // carries around 1e20. So a caller whose only input is "a header" has proved inclusion
+    // in something that cost very little, unless it came from a source it trusts. Per
+    // STABILITY.md this is marked in a minor and becomes required in the major.
+    if (opts.requirePow !== false && opts.minWork === undefined &&
+      opts.minDifficulty === undefined &&
+      (opts.blockHashAtHeight === undefined || opts.blockHashAtHeight === null)) {
+      deprecate({
+        what: 'NotaryHash.verify() with a header but no minWork or blockHashAtHeight',
+        since: '9.13.0',
+        removeIn: '10.0.0',
+        use: 'verify(certificate, { header, blockHashAtHeight }) with the block hash your own ' +
+          'chain source has at spv.blockHeight, or { header, minDifficulty } with the ' +
+          'difficulty you require',
+        why: 'the proof-of-work limit only rules out a free forgery: a header at difficulty 1 ' +
+          'costs about 4.3e9 hashes, while a real mainnet header carries about 1e20'
+      })
+    }
+
     var proof = spv.merkleProof || {}
     var inclusion
     try {
@@ -223,7 +246,8 @@ NotaryHash.verifyAnchorSPV = function (certificate, opts) {
         nodes: proof.nodes,
         requirePow: opts.requirePow !== false,
         powLimit: opts.powLimit,
-        minWork: opts.minWork
+        minWork: opts.minWork,
+        minDifficulty: opts.minDifficulty
       })
     } catch (inputError) {
       // Something the caller passed cannot be used: a header that is not 80 bytes (often an

package/lib/spv/merkleproof.js

@@ -70,8 +70,14 @@ function targetLimit (powLimit) {
   if (powLimit === undefined || powLimit === null) powLimit = POW_LIMIT_BITS
   // A BN is taken as the target itself. The node's limit is a uint256 (2^224 - 1 on
   // mainnet), and for compact bits the two agree, because 0x1d00ffff is the largest
-  // compact target at or below it; a BN limit can sit anywhere between them.
-  if (BN.isBN(powLimit)) return powLimit
+  // compact target at or below it; a BN limit can sit anywhere between them. It still has
+  // to be a target: 2^256 or above is not a limit at all, and zero admits nothing.
+  if (BN.isBN(powLimit)) {
+    if (powLimit.isNeg() || powLimit.isZero() || powLimit.cmp(TWO_256) >= 0) {
+      throw new Error('powLimit as a BN must be a target above zero and below 2^256')
+    }
+    return powLimit
+  }
   var bits
   if (typeof powLimit === 'string') {
     // parseInt stops at the first character it dislikes: '1d00ffzz' would silently
@@ -93,13 +99,60 @@ function targetLimit (powLimit) {
   return target
 }
 
+/**
+ * A floor given in DIFFICULTY as the work it means: difficulty x 4,295,032,833, exactly.
+ *
+ * `minWork` counts hashes, and difficulty is the unit people actually quote — a real BSV
+ * header is "difficulty 2.6e10", not "1.1e20 hashes". Reading one as the other sets a floor
+ * 4.3 billion times too low and fails OPEN, which is why the unit is in the name. The
+ * multiplication is done on integers so a fractional difficulty keeps its digits instead of
+ * drifting through a float.
+ */
+function workFromDifficulty (difficulty) {
+  var text = typeof difficulty === 'number' ? numberToDecimal(difficulty) : String(difficulty)
+  // `1e19` is how a floor this size is written, by hand and by JSON, so both a Number and a
+  // string may arrive in exponent form. Expanded by moving the point, never through a float.
+  if (/^[0-9]+(\.[0-9]+)?[eE][+]?[0-9]+$/.test(text)) text = expandExponent(text)
+  if (!/^[0-9]+(\.[0-9]+)?$/.test(text)) {
+    throw new Error('minDifficulty must be a non-negative decimal number, not ' +
+      JSON.stringify(difficulty))
+  }
+  var parts = text.split('.')
+  var frac = parts[1] || ''
+  var scaled = new BN(parts[0] + frac, 10).mul(workFromTarget(targetFromBits(POW_LIMIT_BITS)))
+  return frac.length ? scaled.div(new BN(10).pow(new BN(frac.length))) : scaled
+}
+
+/** `2.557e10` as `25570000000`, by moving the decimal point, with no float in the path. */
+function expandExponent (text) {
+  var halves = text.split(/[eE]/)
+  var exp = parseInt(halves[1].replace('+', ''), 10)
+  var digits = halves[0].split('.')
+  var intPart = digits[0]
+  var frac = digits[1] || ''
+  if (exp >= frac.length) return intPart + frac + new Array(exp - frac.length + 1).join('0')
+  return intPart + frac.slice(0, exp) + '.' + frac.slice(exp)
+}
+
+/** A Number as plain decimal digits, so 2.6e10 does not reach the parser as "2.6e+10". */
+function numberToDecimal (n) {
+  if (!Number.isFinite(n) || n < 0) {
+    throw new Error('minDifficulty must be a non-negative finite number, not ' + String(n))
+  }
+  if (!/e/i.test(String(n))) return String(n)
+  return n.toLocaleString('en-US', { useGrouping: false, maximumFractionDigits: 20 })
+}
+
 /**
  * `minWork` as a BN, refusing anything bn.js would read loosely. It parses `1e21` as
  * 23521, `'4.3e9'` as 4 and `'abc'` as 1122, so a floor set from a Number near the
  * chain's work would silently become a few thousand — a floor nothing fails.
  */
 function minWorkBN (minWork) {
-  if (BN.isBN(minWork)) return minWork
+  if (BN.isBN(minWork)) {
+    if (minWork.isNeg()) throw new Error('minWork as a BN must not be negative')
+    return minWork
+  }
   if (typeof minWork === 'number') {
     if (!Number.isSafeInteger(minWork) || minWork < 0) {
       throw new Error('minWork as a number must be a non-negative safe integer; for larger ' +
@@ -207,8 +260,10 @@ function verifyMerkleProof (proof) {
  *   header:   a bsv.BlockHeader, an 80-byte Buffer, or 80-byte hex.
  *   powLimit: the easiest target a header may declare, as compact bits (number or hex
  *             string) or a BN target. Default 0x1d00ffff. Regtest needs 0x207fffff.
- *   minWork:  minimum work the header must represent (number, decimal string or BN);
- *             2^256 / (target + 1). Difficulty 1 is about 4.295e9.
+ *   minWork:  minimum work the header must represent, in HASHES (number, decimal string or
+ *             BN): 2^256 / (target + 1). Difficulty 1 is about 4.295e9.
+ *   minDifficulty: the same floor in DIFFICULTY, which is the unit difficulty is quoted in
+ *             (a real BSV header is about 2.6e10). Exactly one of the two, or neither.
  * With `requirePow: false` the work checks are not performed at all: `targetAllowed` and
  * `workSufficient` report true because nothing objected, and `powLimit`/`minWork` are not
  * even read.
@@ -231,8 +286,20 @@ function verifyTxInclusion (params) {
   // when the work checks are off.
   var targetAllowed = target !== null &&
     (!requirePow || target.cmp(targetLimit(params.powLimit)) <= 0)
-  var workSufficient = !requirePow || params.minWork === undefined || params.minWork === null ||
-    work.cmp(minWorkBN(params.minWork)) >= 0
+  var floor = null
+  if (requirePow) {
+    // One floor, named for its unit. Accepting both would leave the caller guessing which
+    // one bit, and the two are 4.3e9 apart.
+    if (params.minWork !== undefined && params.minWork !== null &&
+      params.minDifficulty !== undefined && params.minDifficulty !== null) {
+      throw new Error('pass minWork (hashes) or minDifficulty (difficulty), not both')
+    }
+    if (params.minWork !== undefined && params.minWork !== null) floor = minWorkBN(params.minWork)
+    else if (params.minDifficulty !== undefined && params.minDifficulty !== null) {
+      floor = workFromDifficulty(params.minDifficulty)
+    }
+  }
+  var workSufficient = floor === null || work.cmp(floor) >= 0
 
   return {
     valid: rootMatches && (!requirePow || (powValid && targetAllowed && workSufficient)),
@@ -253,6 +320,7 @@ module.exports = {
   targetFromBits: targetFromBits,
   targetLimit: targetLimit,
   workFromTarget: workFromTarget,
+  workFromDifficulty: workFromDifficulty,
   headerSnapshot: headerSnapshot,
   merkleRootFromBranch: merkleRootFromBranch,
   verifyMerkleProof: verifyMerkleProof,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartledger/bsv",
-  "version": "9.12.0",
+  "version": "9.14.0",
   "description": "Bitcoin SV library with an interpreter-verified script engine: OP_PUSH_TX covenants, BIP-143 preimage tooling, and consensus flags that match what miners actually enforce. Also ships DID:web / W3C VC-JWT credentials and the Legal Token Protocol.",
   "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
   "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",

package/version.js

@@ -1,3 +1,3 @@
 'use strict'
 // GENERATED by scripts/sync-version.js on `npm version` — do not edit.
-module.exports = '9.12.0'
+module.exports = '9.14.0'