@smartledger/bsv 9.15.0 → 9.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (28) hide show
  1. package/CHANGELOG.md +63 -0
  2. package/README.md +19 -19
  3. package/bsv-gdaf.min.js +2 -2
  4. package/bsv-ltp.min.js +3 -3
  5. package/bsv-smartcontract.min.js +1 -1
  6. package/bsv.bundle.js +2 -2
  7. package/bsv.min.js +2 -2
  8. package/docs/AUDIT_SCOPE.md +6 -6
  9. package/docs/BRC220_BATCH_LEAF_AMENDMENT.md +16 -4
  10. package/docs/BRC220_CERTIFICATE_FIELDS_AMENDMENT.md +11 -4
  11. package/docs/BRC220_PLAN.md +5 -2
  12. package/docs/MODULE_REFERENCE_COMPLETE.md +27 -27
  13. package/docs/advanced/UTXO_MANAGER_GUIDE.md +1 -1
  14. package/docs/audit-rfq/cure53.txt +1 -1
  15. package/docs/audit-rfq/ncc-group.txt +1 -1
  16. package/docs/audit-rfq/trail-of-bits.txt +1 -1
  17. package/docs/getting-started/INSTALLATION.md +23 -23
  18. package/docs/getting-started/QUICK_START.md +7 -7
  19. package/docs/migration/FROM_BSV_1_5_6.md +5 -5
  20. package/lib/script/interpreter.js +38 -15
  21. package/package.json +9 -5
  22. package/tools/gen-blind-spot-vectors.js +422 -0
  23. package/tools/minimal_reproduction.js +1 -1
  24. package/tools/opcode_map.js +11 -4
  25. package/tools/simple_real_tx.js +1 -1
  26. package/tools/sv-vector-coverage.js +174 -0
  27. package/tools/sv-vector-harness.js +8 -4
  28. package/version.js +1 -1
package/docs/AUDIT_SCOPE.md CHANGED
@@ -34,12 +34,12 @@ module sounds. That is a deliberate revision: an earlier version of this documen
34
34
  scoped Tier 1 as "the cryptographic core" and would have excluded four of the six real
35
35
  defects this codebase has produced. See §2.1.
36
36
 
37
- ### Tier 1 — 12,158 lines
37
+ ### Tier 1 — 12,181 lines
38
38
 
39
39
  | Module | Lines | Why it matters |
40
40
  | --- | ---: | --- |
41
41
  | `lib/transaction/` | 2,786 | Sighash construction and signing — both BIP-143 and the Original Transaction Digest Algorithm. |
42
- | `lib/script/interpreter.js` | 2,920 | **Scoped to the flag and era surface, not opcode execution.** Consensus-flag selection and defaults, era derivation (Genesis/Chronicle), the limits derived from them, and the semantics of the exported `verify()`. Opcode execution is excluded — see §2.2. |
42
+ | `lib/script/interpreter.js` | 2,943 | **Scoped to the flag and era surface, not opcode execution.** Consensus-flag selection and defaults, era derivation (Genesis/Chronicle), the limits derived from them, and the semantics of the exported `verify()`. Opcode execution is excluded — see §2.2. |
43
43
  | `lib/crypto/` | 2,519 | ECDSA, nonce derivation, signature encoding, the script-number type. **Scope this for an architectural judgement as well as for bugs** — see §2.3. |
44
44
  | `lib/notaryhash/` | 2,104 | BRC-220 signing and verification. Publicly reachable and relied on downstream. |
45
45
  | `lib/privatekey.js`, `lib/publickey.js` | 843 | Key construction, serialisation, WIF. Recent defects here produced a *different* key without error. |
@@ -150,14 +150,14 @@ this repository.
150
150
  | `lib/address.js`, `lib/networks.js`, `lib/opcode.js`, `lib/hdprivatekey.js`, `lib/hdpublickey.js` (2,391 lines) | Cut to pay for §2.1 | Formatting, network constants and BIP-32 derivation. No defect has originated here, and `networks.js` in particular defines addressing constants — pubkey hashes, xpub prefixes, ports, DNS seeds — and contains **no consensus-flag logic at all**. |
151
151
  | The rest of the application layer — `lib/gdaf/`, `lib/ltp/`, `lib/ordinals/`, `lib/block/`, `lib/didweb/`, `lib/vcjwt/`, `lib/statuslist/`, most of `lib/smart_contract/`, plus assorted top-level files | Excluded | ~26,000 lines. Worth a separate engagement; including it here would blur the question in §1. Note the parts of it with a demonstrated defect history have been pulled *into* Tier 1 rather than left here — see §2.1. |
152
152
 
153
- Totals reconcile against `lib/`, which is 40,181 lines across 131 files:
153
+ Totals reconcile against `lib/`, which is 40,204 lines across 131 files:
154
154
 
155
155
  ```
156
- tier 1 12,158
156
+ tier 1 12,181
157
157
  tier 2 1,607
158
158
  excluded 26,416
159
159
  ------
160
- total 40,181
160
+ total 40,204
161
161
  ```
162
162
 
163
163
  Measured 2026-08-29 at `a954c27`. These figures drift as the library changes — an
@@ -228,7 +228,7 @@ seeking a quote for an independent security review.
228
228
 
229
229
  Scope, and we would like these priced separately:
230
230
 
231
- Tier 1 — 12,158 lines. Sighash construction and signing; ECDSA, nonce
231
+ Tier 1 — 12,181 lines. Sighash construction and signing; ECDSA, nonce
232
232
  derivation and signature encoding; the consensus-flag and era-derivation
233
233
  surface of the script interpreter; BRC-220 signing and verification;
234
234
  key construction and serialisation; the covenant verification harness and
package/docs/BRC220_BATCH_LEAF_AMENDMENT.md CHANGED
@@ -5,10 +5,22 @@ in a leaf. This proposes the definition, with the reasoning that led to it.
5
5
 
6
6
  Prepared 2026-08-17 while implementing BRC-220 in `@smartledger/bsv`.
7
7
 
8
- **Status: filed** as [bsv-blockchain/BRCs#246](https://github.com/bsv-blockchain/BRCs/pull/246)
9
- on 2026-09-11, together with a clarification of the ECDSA digest convention. Its review
10
- asked that `leafIndex` be stated as counted from 0 and that the vector say how `i` is
11
- written; both are in #246 and below. Before filing
8
+ **Status: MERGED** as [bsv-blockchain/BRCs#246](https://github.com/bsv-blockchain/BRCs/pull/246),
9
+ filed 2026-09-11 and merged **2026-09-18**, together with a clarification of the ECDSA digest
10
+ convention. Its review asked that `leafIndex` be stated as counted from 0 and that the vector say
11
+ how `i` is written; both are in #246 and below.
12
+
13
+ **The merged spec is the authority, not this document.** The maintainers reflowed the wording
14
+ before merging — denser sentences, `SHA256` rather than `SHA-256` — so the blockquotes below are
15
+ what was *proposed*, and ten of their fourteen lines no longer appear verbatim in
16
+ [`apps/0220.md`](https://github.com/bsv-blockchain/BRCs/blob/master/apps/0220.md). **The rule
17
+ merged unchanged in substance**, which was checked rather than assumed: this library reproduces
18
+ the merged spec's own published batch example exactly — root
19
+ `abb53eb3b2e3530d51685c6813bb85c85892d2f214c2dc504029d071434ac074` and leaf 4's audit path of a
20
+ single `left` sibling `060ca4e4…befd`, from `test/data/brc220-batch-vector.json` through
21
+ `lib/notaryhash/merkle.js`. Quote the merged text, not this.
22
+
23
+ Before filing
12
24
  it was checked against the BRC-220 reference implementation, whose batcher uses exactly
13
25
  this leaf (`leaves = batch.map(e => e.proofHash)`), and the vector below was rebuilt
14
26
  without any of this library's code — the root from the reference's own RFC 6962 tree.
package/docs/BRC220_CERTIFICATE_FIELDS_AMENDMENT.md CHANGED
@@ -6,10 +6,17 @@ implementation writes, and two rules for reading them. With both, any implementa
6
6
  produces certificates the reference verifies, and reads certificates the way the reference
7
7
  does.
8
8
 
9
- Prepared 2026-09-11, with the open points decided [below](#decisions). **Status: filed**
10
- as [bsv-blockchain/BRCs#247](https://github.com/bsv-blockchain/BRCs/pull/247) on 2026-09-11. It is meant to be a separate pull request from
11
- [bsv-blockchain/BRCs#246](https://github.com/bsv-blockchain/BRCs/pull/246), which is under
12
- review and deliberately narrow; this text builds on it for the batch leaf datum.
9
+ Prepared 2026-09-11, with the open points decided [below](#decisions). **Status: MERGED** as
10
+ [bsv-blockchain/BRCs#247](https://github.com/bsv-blockchain/BRCs/pull/247), filed 2026-09-11 and
11
+ merged **2026-09-18**. It was a separate pull request from
12
+ [bsv-blockchain/BRCs#246](https://github.com/bsv-blockchain/BRCs/pull/246), deliberately narrow
13
+ and merged the same day; this text builds on it for the batch leaf datum.
14
+
15
+ **The merged spec is the authority, not this document.** Eight of the sixty-nine lines quoted
16
+ below were reworded before merging. The substance is unchanged — the field values and the two
17
+ reading rules are as proposed — but quote
18
+ [`apps/0220.md`](https://github.com/bsv-blockchain/BRCs/blob/master/apps/0220.md) rather than
19
+ this file.
13
20
 
14
21
  ---
15
22
 
package/docs/BRC220_PLAN.md CHANGED
@@ -179,8 +179,11 @@ summarising rather than anything in the document.
179
179
  document, in the `proofHash` definition, and nowhere in the batch text. We read `d` as
180
180
  `proofHash`; so does the reference implementation's batcher, and given the same five
181
181
  proofs it builds the same root. Reading it as `canonicalBytes` is equally sound and
182
- produces a different root, so the two do not interoperate. Filed upstream as
183
- [bsv-blockchain/BRCs#246](https://github.com/bsv-blockchain/BRCs/pull/246); see
182
+ produces a different root, so the two do not interoperate. **Settled upstream: merged as
183
+ [bsv-blockchain/BRCs#246](https://github.com/bsv-blockchain/BRCs/pull/246) on 2026-09-18**, so
184
+ `d = proofHash` is now what BRC-220 says rather than how we read it. This library reproduces the
185
+ merged spec's own published example — root `abb53eb3…c074` and leaf 4's single `left` sibling
186
+ `060ca4e4…befd`. See
184
187
  [BRC220_BATCH_LEAF_AMENDMENT.md](BRC220_BATCH_LEAF_AMENDMENT.md), enforced in
185
188
  `test/notaryhash/batch_leaf.js`.
186
189
  - **`createdAt` is advisory for trust but load-bearing for the hash.** §Verification calls
package/docs/MODULE_REFERENCE_COMPLETE.md CHANGED
@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
55
55
  - **Purpose**: Threshold cryptography for secure secret distribution
56
56
  - **Use Cases**: Backup keys, multi-party security, key recovery
57
57
  - **Features**: Split secrets into N shares, require M to reconstruct
58
- - **CDN**: `unpkg.com/@smartledger/bsv@9.15.0/bsv-shamir.min.js`
58
+ - **CDN**: `unpkg.com/@smartledger/bsv@9.16.0/bsv-shamir.min.js`
59
59
 
60
60
  #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**
61
61
  - **Purpose**: W3C Verifiable Credentials and decentralized identity
62
62
  - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
63
63
  - **Features**: DID creation, credential issuance, selective disclosure
64
- - **CDN**: `unpkg.com/@smartledger/bsv@9.15.0/bsv-gdaf.min.js`
64
+ - **CDN**: `unpkg.com/@smartledger/bsv@9.16.0/bsv-gdaf.min.js`
65
65
 
66
66
  #### **⚖️ Legal Token Protocol - LTP (1184KB)**
67
67
  - **Purpose**: Legal compliance framework for tokenized assets
68
68
  - **Use Cases**: Property rights, obligations, compliant tokenization
69
69
  - **Features**: Legal primitives, compliance checking, attestation anchoring
70
- - **CDN**: `unpkg.com/@smartledger/bsv@9.15.0/bsv-ltp.min.js`
70
+ - **CDN**: `unpkg.com/@smartledger/bsv@9.16.0/bsv-ltp.min.js`
71
71
 
72
72
  ### **2. Incorrect File Sizes in Documentation**
73
73
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
81
81
 
82
82
  | Module | Size | Use Case | CDN Link |
83
83
  |--------|------|----------|----------|
84
- | **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js` |
85
- | **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.15.0/bsv.bundle.js` |
86
- | **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.15.0/bsv-smartcontract.min.js` |
87
- | **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.15.0/bsv-covenant.min.js` |
88
- | **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.15.0/bsv-script-helper.min.js` |
89
- | **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.15.0/bsv-security.min.js` |
90
- | **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.15.0/bsv-ecies.min.js` |
91
- | **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.15.0/bsv-message.min.js` |
92
- | **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.15.0/bsv-mnemonic.min.js` |
93
- | **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.15.0/bsv-shamir.min.js` |
94
- | **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.15.0/bsv-gdaf.min.js` |
95
- | **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.15.0/bsv-ltp.min.js` |
84
+ | **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js` |
85
+ | **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.16.0/bsv.bundle.js` |
86
+ | **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.16.0/bsv-smartcontract.min.js` |
87
+ | **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.16.0/bsv-covenant.min.js` |
88
+ | **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.16.0/bsv-script-helper.min.js` |
89
+ | **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.16.0/bsv-security.min.js` |
90
+ | **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.16.0/bsv-ecies.min.js` |
91
+ | **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.16.0/bsv-message.min.js` |
92
+ | **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.16.0/bsv-mnemonic.min.js` |
93
+ | **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.16.0/bsv-shamir.min.js` |
94
+ | **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.16.0/bsv-gdaf.min.js` |
95
+ | **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.16.0/bsv-ltp.min.js` |
96
96
 
97
97
  ## 🎯 **Updated Usage Examples**
98
98
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
100
100
 
101
101
  #### **1. Basic Development (~963KB)**
102
102
  ```html
103
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
104
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-script-helper.min.js"></script>
103
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
104
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-script-helper.min.js"></script>
105
105
  ```
106
106
 
107
107
  #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
108
108
  ```html
109
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
110
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-covenant.min.js"></script>
111
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-smartcontract.min.js"></script>
109
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
110
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-covenant.min.js"></script>
111
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-smartcontract.min.js"></script>
112
112
  ```
113
113
 
114
114
  #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
115
115
  ```html
116
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
117
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-ltp.min.js"></script>
118
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-gdaf.min.js"></script>
116
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
117
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-ltp.min.js"></script>
118
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-gdaf.min.js"></script>
119
119
  <script>
120
120
  // Legal Token Protocol
121
121
  const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
132
132
 
133
133
  #### **4. 🆕 Security & Cryptography (~1.4MB)**
134
134
  ```html
135
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
136
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-security.min.js"></script>
137
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-shamir.min.js"></script>
135
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
136
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-security.min.js"></script>
137
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-shamir.min.js"></script>
138
138
  <script>
139
139
  // Shamir Secret Sharing
140
140
  const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
146
146
 
147
147
  #### **5. Everything Bundle (937KB)**
148
148
  ```html
149
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.bundle.js"></script>
149
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.bundle.js"></script>
150
150
  <script>
151
151
  // Everything available immediately
152
152
  const shares = bsv.splitSecret('secret', 5, 3);
package/docs/advanced/UTXO_MANAGER_GUIDE.md CHANGED
@@ -722,7 +722,7 @@ interface UTXO {
722
722
  <html>
723
723
  <head>
724
724
  <title>UTXO Manager Demo</title>
725
- <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.15.0/bsv.min.js"></script>
725
+ <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.16.0/bsv.min.js"></script>
726
726
  </head>
727
727
  <body>
728
728
  <script>
package/docs/audit-rfq/cure53.txt CHANGED
@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
15
15
 
16
16
  Scope, and we would like these priced separately:
17
17
 
18
- Tier 1 — 12,158 lines. Sighash construction and signing; ECDSA, nonce
18
+ Tier 1 — 12,181 lines. Sighash construction and signing; ECDSA, nonce
19
19
  derivation and signature encoding; the consensus-flag and era surface of the
20
20
  script interpreter; BRC-220 signing; the covenant verification harness; RFC
21
21
  8785 canonicalization; and the covenant-facing entrypoints of the smart
package/docs/audit-rfq/ncc-group.txt CHANGED
@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
15
15
 
16
16
  Scope, and we would like these priced separately:
17
17
 
18
- Tier 1 — 12,158 lines. Sighash construction and signing; ECDSA, nonce
18
+ Tier 1 — 12,181 lines. Sighash construction and signing; ECDSA, nonce
19
19
  derivation and signature encoding; the consensus-flag and era surface of the
20
20
  script interpreter; BRC-220 signing; the covenant verification harness; RFC
21
21
  8785 canonicalization; and the covenant-facing entrypoints of the smart
package/docs/audit-rfq/trail-of-bits.txt CHANGED
@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
15
15
 
16
16
  Scope, and we would like these priced separately:
17
17
 
18
- Tier 1 — 12,158 lines. Sighash construction and signing; ECDSA, nonce
18
+ Tier 1 — 12,181 lines. Sighash construction and signing; ECDSA, nonce
19
19
  derivation and signature encoding; the consensus-flag and era surface of the
20
20
  script interpreter; BRC-220 signing; the covenant verification harness; RFC
21
21
  8785 canonicalization; and the covenant-facing entrypoints of the smart
package/docs/getting-started/INSTALLATION.md CHANGED
@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
48
48
  #### **Core Library Only (937KB)**
49
49
  For basic Bitcoin SV operations:
50
50
  ```html
51
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
51
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
52
52
  <script>
53
53
  const privateKey = new bsv.PrivateKey();
54
54
  const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
58
58
  #### **Complete Bundle (937KB)**
59
59
  Everything in one file:
60
60
  ```html
61
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.bundle.js"></script>
61
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.bundle.js"></script>
62
62
  <script>
63
63
  // All features available immediately
64
64
  const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
71
71
 
72
72
  #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
73
73
  ```html
74
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
75
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-covenant.min.js"></script>
76
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-smartcontract.min.js"></script>
74
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
75
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-covenant.min.js"></script>
76
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-smartcontract.min.js"></script>
77
77
  <script>
78
78
  const covenant = bsv.SmartContract.createCovenantBuilder()
79
79
  .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
82
82
 
83
83
  #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
84
84
  ```html
85
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
86
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-ltp.min.js"></script>
87
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-gdaf.min.js"></script>
85
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
86
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-ltp.min.js"></script>
87
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-gdaf.min.js"></script>
88
88
  <script>
89
89
  // Legal Token Protocol
90
90
  const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
98
98
 
99
99
  #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
100
100
  ```html
101
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
102
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-security.min.js"></script>
103
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-shamir.min.js"></script>
101
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
102
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-security.min.js"></script>
103
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-shamir.min.js"></script>
104
104
  <script>
105
105
  // Threshold Cryptography
106
106
  const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
114
114
 
115
115
  | Module | Size | Purpose | CDN Link |
116
116
  |--------|------|---------|----------|
117
- | **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js` |
118
- | **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.15.0/bsv.bundle.js` |
119
- | **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.15.0/bsv-smartcontract.min.js` |
120
- | **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.15.0/bsv-ltp.min.js` |
121
- | **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.15.0/bsv-gdaf.min.js` |
122
- | **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.15.0/bsv-shamir.min.js` |
123
- | **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.15.0/bsv-security.min.js` |
124
- | **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.15.0/bsv-mnemonic.min.js` |
125
- | **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.15.0/bsv-ecies.min.js` |
126
- | **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.15.0/bsv-covenant.min.js` |
127
- | **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.15.0/bsv-script-helper.min.js` |
128
- | **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.15.0/bsv-message.min.js` |
117
+ | **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js` |
118
+ | **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.16.0/bsv.bundle.js` |
119
+ | **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.16.0/bsv-smartcontract.min.js` |
120
+ | **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.16.0/bsv-ltp.min.js` |
121
+ | **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.16.0/bsv-gdaf.min.js` |
122
+ | **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.16.0/bsv-shamir.min.js` |
123
+ | **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.16.0/bsv-security.min.js` |
124
+ | **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.16.0/bsv-mnemonic.min.js` |
125
+ | **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.16.0/bsv-ecies.min.js` |
126
+ | **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.16.0/bsv-covenant.min.js` |
127
+ | **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.16.0/bsv-script-helper.min.js` |
128
+ | **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.16.0/bsv-message.min.js` |
129
129
 
130
130
  ## ⚙️ **Development Environment Setup**
131
131
 
package/docs/getting-started/QUICK_START.md CHANGED
@@ -14,10 +14,10 @@ npm install @smartledger/bsv
14
14
  ### Browser CDN (Instant)
15
15
  ```html
16
16
  <!-- Core library (937KB) -->
17
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
17
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
18
18
 
19
19
  <!-- Everything included (937KB) -->
20
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.bundle.js"></script>
20
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.bundle.js"></script>
21
21
  ```
22
22
 
23
23
  ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
127
127
 
128
128
  ```html
129
129
  <!-- Core BSV only (937KB) -->
130
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
130
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
131
131
 
132
132
  <!-- Smart contracts (937KB) -->
133
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-smartcontract.min.js"></script>
133
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-smartcontract.min.js"></script>
134
134
 
135
135
  <!-- Legal tokens (1.16MB) -->
136
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-ltp.min.js"></script>
136
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-ltp.min.js"></script>
137
137
 
138
138
  <!-- Digital identity (1.16MB) -->
139
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-gdaf.min.js"></script>
139
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-gdaf.min.js"></script>
140
140
 
141
141
  <!-- Everything (937KB) -->
142
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.bundle.js"></script>
142
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.bundle.js"></script>
143
143
  ```
144
144
 
145
145
  ## ⚡ **Key Advantages**
package/docs/migration/FROM_BSV_1_5_6.md CHANGED
@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
159
159
  ### **New Modular Options**
160
160
  ```html
161
161
  <!-- Core compatibility (same size as bsv@1.5.6) -->
162
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.min.js"></script>
162
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.min.js"></script>
163
163
 
164
164
  <!-- Add smart contracts when ready -->
165
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-smartcontract.min.js"></script>
165
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-smartcontract.min.js"></script>
166
166
 
167
167
  <!-- Add advanced features as needed -->
168
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-ltp.min.js"></script>
169
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv-gdaf.min.js"></script>
168
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-ltp.min.js"></script>
169
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv-gdaf.min.js"></script>
170
170
 
171
171
  <!-- Everything in one file -->
172
- <script src="https://unpkg.com/@smartledger/bsv@9.15.0/bsv.bundle.js"></script>
172
+ <script src="https://unpkg.com/@smartledger/bsv@9.16.0/bsv.bundle.js"></script>
173
173
  ```
174
174
 
175
175
  ## 🔍 **Testing Your Migration**
package/lib/script/interpreter.js CHANGED
@@ -1415,27 +1415,40 @@ Interpreter.prototype.step = function () {
1415
1415
  switch (opcode) {
1416
1416
  case Opcode.OP_2MUL:
1417
1417
  case Opcode.OP_2DIV:
1418
- // Chronicle restores both. Until it is enabled they stay disabled, and
1419
- // "disabled" is stronger than "unimplemented": a disabled opcode fails the
1420
- // script even in an UNEXECUTED branch, which is why this lives in
1421
- // isOpcodeDisabled rather than in the evaluation switch.
1418
+ // Chronicle restores both; until the UTXO is post-Chronicle they stay disabled.
1419
+ //
1420
+ // "Disabled" is stronger than "unimplemented", but only before Genesis. The node reads
1421
+ //
1422
+ // if(IsOpcodeDisabled(opcode, utxoEra) && (!utxo_after_genesis || fExec))
1423
+ // return SCRIPT_ERR_DISABLED_OPCODE;
1424
+ //
1425
+ // so a disabled opcode in an UNEXECUTED branch fails a pre-Genesis spend and is harmless
1426
+ // in a post-Genesis one. That is why this lives in isOpcodeDisabled, which the caller
1427
+ // consults before testing fExec — the era decides, not the branch alone. An earlier
1428
+ // version of this comment said it fails unexecuted in every era, which is half the rule.
1422
1429
  if (!self.isAfterChronicle()) {
1423
1430
  return true
1424
1431
  }
1425
1432
  break
1426
1433
 
1434
+ // Restored on BSV and never gated by the node. Monolith came back in May 2018 and
1435
+ // Magnetic in November 2018, and IsOpcodeDisabled (src/script/interpreter.cpp) disables
1436
+ // OP_2MUL and OP_2DIV and nothing else — so every opcode below executes in every era the
1437
+ // node can validate, with no flag to enable.
1438
+ //
1439
+ // The four Magnetic ones used to be refused here unless SCRIPT_ENABLE_MAGNETIC_OPCODES
1440
+ // was set, "for backwards compatibility". That refused 77 rows of the node's own corpus
1441
+ // as DISABLED_OPCODE. Fail-closed, so nothing was at risk of being accepted wrongly, but
1442
+ // they were spends the network accepts. The Monolith group beside them had already made
1443
+ // the opposite call on identical reasoning, so the two halves of one 2018 upgrade
1444
+ // disagreed with each other.
1445
+ //
1446
+ // SCRIPT_ENABLE_MAGNETIC_OPCODES and SCRIPT_ENABLE_MONOLITH_OPCODES remain exported and
1447
+ // accepted — they are public API — and setting either is now simply redundant.
1427
1448
  case Opcode.OP_INVERT:
1428
1449
  case Opcode.OP_MUL:
1429
1450
  case Opcode.OP_LSHIFT:
1430
1451
  case Opcode.OP_RSHIFT:
1431
- // Magnetic opcodes - still require flag for backwards compatibility
1432
- if ((self.flags & Interpreter.SCRIPT_ENABLE_MAGNETIC_OPCODES) === 0) {
1433
- return true
1434
- }
1435
- break
1436
-
1437
- // Monolith opcodes are now enabled by default in SmartLedger BSV
1438
- // These were activated in May 2018 and are part of standard BSV consensus
1439
1452
  case Opcode.OP_DIV:
1440
1453
  case Opcode.OP_MOD:
1441
1454
  case Opcode.OP_SPLIT:
@@ -1445,7 +1458,6 @@ Interpreter.prototype.step = function () {
1445
1458
  case Opcode.OP_XOR:
1446
1459
  case Opcode.OP_BIN2NUM:
1447
1460
  case Opcode.OP_NUM2BIN:
1448
- // These opcodes are now always enabled - no flag required
1449
1461
  return false
1450
1462
 
1451
1463
  default:
@@ -2555,7 +2567,17 @@ Interpreter.prototype.step = function () {
2555
2567
  return false
2556
2568
  }
2557
2569
 
2558
- var nKeysCount = BN.fromScriptNumBuffer(stacktop(-i), fRequireMinimal, this.maxScriptNumLength()).toNumber()
2570
+ // FOUR bytes, not the era's length. The node hardcodes it and says why:
2571
+ //
2572
+ // // initialize to max size of CScriptNum::MAXIMUM_ELEMENT_SIZE (4 bytes)
2573
+ // // because only 4 byte integers are supported by OP_CHECKMULTISIG / OP_CHECKMULTISIGVERIFY
2574
+ // nKeysCountSigned = CScriptNum(stack.stacktop(-i).GetElement(), requireMinimal,
2575
+ // CScriptNum::MAXIMUM_ELEMENT_SIZE).getint();
2576
+ //
2577
+ // So it is era-independent, unlike every other operand decode in this file. Passing
2578
+ // maxScriptNumLength() here accepted a 5-byte count that the node refuses as
2579
+ // SCRIPTNUM_OVERFLOW in every era — a false accept, the direction that costs money.
2580
+ var nKeysCount = BN.fromScriptNumBuffer(stacktop(-i), fRequireMinimal, 4).toNumber()
2559
2581
  // TODO: Keys and opcount are parameterized in client. No magic numbers!
2560
2582
  // Genesis raised this to UINT32_MAX rather than removing it.
2561
2583
  if (nKeysCount < 0 || nKeysCount > this.maxPubKeysPerMultisig()) {
@@ -2589,7 +2611,8 @@ Interpreter.prototype.step = function () {
2589
2611
  return false
2590
2612
  }
2591
2613
 
2592
- var nSigsCount = BN.fromScriptNumBuffer(stacktop(-i), fRequireMinimal, this.maxScriptNumLength()).toNumber()
2614
+ // Four bytes, for the same reason as nKeysCount above.
2615
+ var nSigsCount = BN.fromScriptNumBuffer(stacktop(-i), fRequireMinimal, 4).toNumber()
2593
2616
  if (nSigsCount < 0 || nSigsCount > nKeysCount) {
2594
2617
  this.errstr = 'SCRIPT_ERR_SIG_COUNT'
2595
2618
  return false
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@smartledger/bsv",
3
- "version": "9.15.0",
3
+ "version": "9.16.0",
4
4
  "description": "Bitcoin SV library with an interpreter-verified script engine: OP_PUSH_TX covenants, BIP-143 preimage tooling, and consensus flags that match what miners actually enforce. Also ships DID:web / W3C VC-JWT credentials and the Legal Token Protocol.",
5
5
  "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
6
6
  "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",
@@ -145,7 +145,8 @@
145
145
  "check:dts": "node scripts/check-dts-coverage.js",
146
146
  "check:audit-scope": "node scripts/check-audit-scope.js",
147
147
  "check:audit-scope:fix": "node scripts/check-audit-scope.js --fix",
148
- "check:dts:update": "node scripts/check-dts-coverage.js --update"
148
+ "check:dts:update": "node scripts/check-dts-coverage.js --update",
149
+ "vectors:sv-coverage": "node tools/sv-vector-coverage.js"
149
150
  },
150
151
  "unpkg": "bsv.min.js",
151
152
  "jsdelivr": "bsv.min.js",
@@ -243,13 +244,16 @@
243
244
  "vm-browserify": "^1.1.2"
244
245
  },
245
246
  "overrides": {
246
- "js-yaml@^3": "^3.15.1",
247
- "js-yaml@^4": "^4.3.1",
247
+ "js-yaml@^3": "^3.15.2",
248
+ "js-yaml@^4": "^4.3.2",
248
249
  "serialize-javascript": "^7.0.5",
249
250
  "tmp": "^0.2.7",
250
251
  "mocha": {
251
252
  "diff": "^8.0.3"
252
- }
253
+ },
254
+ "brace-expansion": "^2.0.2",
255
+ "browserslist": "^4.28.7",
256
+ "baseline-browser-mapping": "^2.11.0"
253
257
  },
254
258
  "license": "MIT",
255
259
  "standard": {