npm - @smartledger/bsv - Versions diffs - 9.19.0 → 9.20.0 - Mend

@smartledger/bsv 9.19.0 → 9.20.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (20) hide show

package/CHANGELOG.md +81 -0
package/README.md +19 -19
package/bsv-gdaf.min.js +22 -22
package/bsv-smartcontract.min.js +1 -1
package/bsv.bundle.js +24 -24
package/bsv.min.js +24 -24
package/docs/AUDIT_SCOPE.md +7 -7
package/docs/MODULE_REFERENCE_COMPLETE.md +27 -27
package/docs/advanced/UTXO_MANAGER_GUIDE.md +1 -1
package/docs/audit-rfq/cure53.txt +2 -2
package/docs/audit-rfq/ncc-group.txt +2 -2
package/docs/audit-rfq/trail-of-bits.txt +2 -2
package/docs/getting-started/INSTALLATION.md +23 -23
package/docs/getting-started/QUICK_START.md +7 -7
package/docs/migration/FROM_BSV_1_5_6.md +5 -5
package/lib/gdaf/zk-prover.js +80 -10
package/lib/notaryhash/certificate.js +31 -0
package/lib/notaryhash/index.js +61 -3
package/package.json +1 -1
package/version.js +1 -1

package/docs/AUDIT_SCOPE.md CHANGED Viewed

@@ -34,14 +34,14 @@ module sounds. That is a deliberate revision: an earlier version of this documen
 scoped Tier 1 as "the cryptographic core" and would have excluded four of the six real
 defects this codebase has produced. See §2.1.
-### Tier 1 — 12,348 lines
+### Tier 1 — 12,437 lines
 | Module | Lines | Why it matters |
 | --- | ---: | --- |
 | `lib/transaction/` | 2,786 | Sighash construction and signing — both BIP-143 and the Original Transaction Digest Algorithm. |
 | `lib/script/interpreter.js` | 2,962 | **Scoped to the flag and era surface, not opcode execution.** Consensus-flag selection and defaults, era derivation (Genesis/Chronicle), the limits derived from them, and the semantics of the exported `verify()`. Opcode execution is excluded — see §2.2. |
 | `lib/crypto/` | 2,519 | ECDSA, nonce derivation, signature encoding, the script-number type. **Scope this for an architectural judgement as well as for bugs** — see §2.3. |
-| `lib/notaryhash/` | 2,252 | BRC-220 signing and verification. Publicly reachable and relied on downstream. |
+| `lib/notaryhash/` | 2,341 | BRC-220 signing and verification. Publicly reachable and relied on downstream. |
 | `lib/privatekey.js`, `lib/publickey.js` | 843 | Key construction, serialisation, WIF. Recent defects here produced a *different* key without error. |
 | `lib/smart_contract/` (targeted) | 472 | `locks.js` and the covenant-facing entrypoints in `index.js`: CLTV and HTLC locking semantics, flag plumbing, and any wrapper claiming mainnet-equivalent verification. Not the whole 6,908-line module. |
 | `lib/covenant/` | 409 | The verification harness. Its flag word is what made covenants verify under 2019 rules while claiming to mirror mainnet. |
@@ -150,14 +150,14 @@ this repository.
 | `lib/address.js`, `lib/networks.js`, `lib/opcode.js`, `lib/hdprivatekey.js`, `lib/hdpublickey.js` (2,391 lines) | Cut to pay for §2.1 | Formatting, network constants and BIP-32 derivation. No defect has originated here, and `networks.js` in particular defines addressing constants — pubkey hashes, xpub prefixes, ports, DNS seeds — and contains **no consensus-flag logic at all**. |
 | The rest of the application layer — `lib/gdaf/`, `lib/ltp/`, `lib/ordinals/`, `lib/block/`, `lib/didweb/`, `lib/vcjwt/`, `lib/statuslist/`, most of `lib/smart_contract/`, plus assorted top-level files | Excluded | ~26,000 lines. Worth a separate engagement; including it here would blur the question in §1. Note the parts of it with a demonstrated defect history have been pulled *into* Tier 1 rather than left here — see §2.1. |
-Totals reconcile against `lib/`, which is 40,403 lines across 131 files:
+Totals reconcile against `lib/`, which is 40,562 lines across 131 files:
 ```
-tier 1      12,348
+tier 1      12,437
 tier 2       1,607
-excluded    26,448
+excluded    26,518
             ------
-total       40,403
+total       40,562
 ```
 Measured 2026-08-29 at `a954c27`. These figures drift as the library changes — an
@@ -228,7 +228,7 @@ seeking a quote for an independent security review.
 Scope, and we would like these priced separately:
-  Tier 1 — 12,348 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,437 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era-derivation
   surface of the script interpreter; BRC-220 signing and verification;
   key construction and serialisation; the covenant verification harness and

package/docs/MODULE_REFERENCE_COMPLETE.md CHANGED Viewed

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@9.19.0/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.20.0/bsv-shamir.min.js`
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@9.19.0/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.20.0/bsv-gdaf.min.js`
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@9.19.0/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@9.20.0/bsv-ltp.min.js`
 ### **2. Incorrect File Sizes in Documentation**
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.19.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.19.0/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.19.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.19.0/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.19.0/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.19.0/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.19.0/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.19.0/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.19.0/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.19.0/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.19.0/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.20.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@9.20.0/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.20.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.20.0/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.20.0/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.20.0/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.20.0/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.20.0/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@9.20.0/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@9.20.0/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@9.20.0/bsv-ltp.min.js` |
 ## 🎯 **Updated Usage Examples**
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-script-helper.min.js"></script>
 ```
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-smartcontract.min.js"></script>
 ```
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md CHANGED Viewed

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.19.0/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@9.20.0/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/audit-rfq/cure53.txt CHANGED Viewed

@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
 Scope, and we would like these priced separately:
-  Tier 1 — 12,348 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,437 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era surface of the
   script interpreter; BRC-220 signing; the covenant verification harness; RFC
   8785 canonicalization; and the covenant-facing entrypoints of the smart
@@ -30,7 +30,7 @@ Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
 by the Noble libraries and already audited; opcode EXECUTION in the script
 interpreter, which passes 1,483 of 1,483 of the reference node's own consensus
 vectors with zero false accepts and zero false rejects; and the remaining
-26,448-line application layer (credentials, tokens, ordinals), which we would
+26,518-line application layer (credentials, tokens, ordinals), which we would
 treat as a separate engagement.
 Note the shape of that first exclusion, because it is what we want priced. The

package/docs/audit-rfq/ncc-group.txt CHANGED Viewed

@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
 Scope, and we would like these priced separately:
-  Tier 1 — 12,348 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,437 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era surface of the
   script interpreter; BRC-220 signing; the covenant verification harness; RFC
   8785 canonicalization; and the covenant-facing entrypoints of the smart
@@ -30,7 +30,7 @@ Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
 by the Noble libraries and already audited; opcode EXECUTION in the script
 interpreter, which passes 1,483 of 1,483 of the reference node's own consensus
 vectors with zero false accepts and zero false rejects; and the remaining
-26,448-line application layer (credentials, tokens, ordinals), which we would
+26,518-line application layer (credentials, tokens, ordinals), which we would
 treat as a separate engagement.
 Note the shape of that first exclusion, because it is what we want priced. The

package/docs/audit-rfq/trail-of-bits.txt CHANGED Viewed

@@ -15,7 +15,7 @@ seeking a quote for an independent security review of its cryptographic core.
 Scope, and we would like these priced separately:
-  Tier 1 — 12,348 lines. Sighash construction and signing; ECDSA, nonce
+  Tier 1 — 12,437 lines. Sighash construction and signing; ECDSA, nonce
   derivation and signature encoding; the consensus-flag and era surface of the
   script interpreter; BRC-220 signing; the covenant verification harness; RFC
   8785 canonicalization; and the covenant-facing entrypoints of the smart
@@ -30,7 +30,7 @@ Explicitly out of scope: elliptic-curve and hash primitives, which are supplied
 by the Noble libraries and already audited; opcode EXECUTION in the script
 interpreter, which passes 1,483 of 1,483 of the reference node's own consensus
 vectors with zero false accepts and zero false rejects; and the remaining
-26,448-line application layer (credentials, tokens, ordinals), which we would
+26,518-line application layer (credentials, tokens, ordinals), which we would
 treat as a separate engagement.
 Note the shape of that first exclusion, because it is what we want priced. The

package/docs/getting-started/INSTALLATION.md CHANGED Viewed

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.19.0/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.19.0/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.19.0/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.19.0/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.19.0/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.19.0/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.19.0/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.19.0/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.19.0/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.19.0/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.19.0/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.20.0/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.20.0/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@9.20.0/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@9.20.0/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@9.20.0/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@9.20.0/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@9.20.0/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@9.20.0/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.20.0/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.20.0/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@9.20.0/bsv-message.min.js` |
 ## ⚙️ **Development Environment Setup**

package/docs/getting-started/QUICK_START.md CHANGED Viewed

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.bundle.js"></script>
 ```
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-smartcontract.min.js"></script>
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-ltp.min.js"></script>
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-gdaf.min.js"></script>
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.bundle.js"></script>
 ```
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md CHANGED Viewed

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options**
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.min.js"></script>
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-smartcontract.min.js"></script>
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv-gdaf.min.js"></script>
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@9.19.0/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@9.20.0/bsv.bundle.js"></script>
 ```
 ## 🔍 **Testing Your Migration**

package/lib/gdaf/zk-prover.js CHANGED Viewed

@@ -572,29 +572,99 @@ ZKProver.generateMembershipProof = function(set, value, salt) {
     proofPurpose: 'membershipVerification',
     setCommitments: commitments,
     valueCommitment: valueCommitment,
-    isMember: true
+    isMember: true,
+    // The salt is returned so the holder can build the opening the verifier now requires.
+    // It is NOT secret from the verifier: one salt covers every member, so a verifier given
+    // the salt and the set can recompute every commitment — which is exactly what
+    // verification does. See the note on verifyMembershipProof.
+    salt: salt
   }
 }
 /**
- * Verify membership proof
- * @param {Object} proof - Membership proof
- * @returns {Boolean} True if proof is valid
+ * Verify membership proof.
+ *
+ * The same defect as verifyAgeProof and verifyRangeProof had, and the same fix. This used
+ * to take the proof alone and return
+ *
+ *     proof.setCommitments.includes(proof.valueCommitment) && proof.isMember
+ *
+ * where EVERY value in that expression came from the prover. Nothing bound the commitments
+ * to a set the verifier knew, nothing opened the value commitment, and `isMember` was the
+ * prover's own claim. So this returned true:
+ *
+ *     verifyMembershipProof({ type: 'MembershipProof',
+ *                             setCommitments: ['x'], valueCommitment: 'x', isMember: true })
+ *
+ * A forged proof needed no key, no salt and no set. Reported against 9.19.0 by a consumer
+ * who had reviewed the GDAF proofs in July and re-tested them.
+ *
+ * The verifier must now supply the set it believes in, and the holder must supply an
+ * opening. Both commitments are recomputed and membership is decided against the VERIFIER's
+ * set, not the prover's array.
+ *
+ * This is not zero-knowledge and cannot be, consistent with the header note on this module.
+ * One salt covers every member, so a verifier holding the set and the salt can recompute
+ * every commitment — the set is not hidden from the verifier, and a low-entropy set is not
+ * hidden from anyone who sees the proof. The honest claim is "this value is in a set the
+ * verifier already holds", which is a membership CHECK, not a privacy-preserving proof. A
+ * caller who needs the value or the set hidden needs a different primitive; a reference
+ * construction is per-attribute fresh salts under an issuer-signed RFC 6962 root.
+ *
+ * @param {Object} proof - Membership proof from generateMembershipProof
+ * @param {Object} opening - { value, salt } as returned alongside the proof
+ * @param {Array} set - the set the VERIFIER believes in, supplied by the verifier
+ * @returns {Boolean} True if the opening commits to a member of the verifier's set
  */
-ZKProver.verifyMembershipProof = function(proof) {
+ZKProver.verifyMembershipProof = function(proof, opening, set) {
   try {
     $.checkArgument(proof && typeof proof === 'object', 'Invalid proof')
     if (proof.type !== 'MembershipProof') {
       return false
     }
     if (!Array.isArray(proof.setCommitments)) {
       return false
     }
-    // Verify that the value commitment appears in the set commitments
-    return proof.setCommitments.includes(proof.valueCommitment) && proof.isMember
+    // Without a verifier-supplied set and an opening there is nothing to check the prover's
+    // array against, so there is no honest answer but false.
+    if (!Array.isArray(set) || set.length === 0) {
+      return false
+    }
+    if (!opening || typeof opening !== 'object' || typeof opening.salt !== 'string') {
+      return false
+    }
+    if (!('value' in opening)) {
+      return false
+    }
+    var commit = function (member) {
+      return Hash.sha256(
+        Buffer.from(JSON.stringify(member) + ':' + opening.salt, 'utf8')
+      ).toString('hex')
+    }
+    // The prover's array must be exactly the commitments the verifier's set implies, in
+    // order. Comparing as a set would let a prover append a commitment of its own.
+    var expected = set.map(commit)
+    if (expected.length !== proof.setCommitments.length) {
+      return false
+    }
+    for (var i = 0; i < expected.length; i++) {
+      if (expected[i] !== proof.setCommitments[i]) {
+        return false
+      }
+    }
+    // The opening must commit to the value the proof names.
+    if (commit(opening.value) !== proof.valueCommitment) {
+      return false
+    }
+    // Decided against the verifier's set, and `proof.isMember` is not consulted.
+    return expected.indexOf(proof.valueCommitment) !== -1
   } catch (error) {
     return false

package/lib/notaryhash/certificate.js CHANGED Viewed

@@ -637,6 +637,37 @@ Certificate.validateShape = function (certificate) {
     if (c[field] === undefined) problems.push('missing required field: ' + field)
   })
+  // `createdAt` must be the canonical rendering of its second.
+  //
+  // The proofHash commits to `createdAtUnix`, which is the time truncated to a second, so
+  // `...04.000Z`, `...04.527Z` and `...04Z` all produce the SAME commitment. The sub-second
+  // component is therefore not covered by the proof: it is an editable field that reads as
+  // part of a verified record. Three different strings claiming three different instants
+  // verified identically.
+  //
+  // Requiring the canonical form removes the ambiguity rather than papering over it, and it
+  // costs real issuers nothing — the two live certificates checked against this rule, a
+  // mainnet batch anchor and a production drop record, both already emit `.000Z`.
+  //
+  // Applied to the REFERENCE format only. Certificates written by 8.3.0-9.8.0 carry a
+  // millisecond component — `test/data/notaryhash-9.8.0-certs.json` pins one that this
+  // library deliberately still reads — and those exist in the wild. Legacy certificates are
+  // read, never written, so rejecting them now would break holders of records that were
+  // valid when issued; the rule binds the format we actually emit.
+  if (typeof c.createdAt === 'string' && !Certificate.isLegacy(certificate)) {
+    var canonical = null
+    var parsed = new Date(c.createdAt)
+    if (!isNaN(parsed.getTime())) {
+      canonical = new Date(Math.floor(parsed.getTime() / 1000) * 1000).toISOString()
+    }
+    if (canonical === null) {
+      problems.push('createdAt is not a date: ' + c.createdAt)
+    } else if (c.createdAt !== canonical) {
+      problems.push('createdAt must be the canonical rendering of its second: expected ' +
+        canonical + ', got ' + c.createdAt)
+    }
+  }
   if (c.protocol !== undefined && c.protocol !== Certificate.PROTOCOL) {
     problems.push('protocol must be "' + Certificate.PROTOCOL + '"')
   }

package/lib/notaryhash/index.js CHANGED Viewed

@@ -129,9 +129,25 @@ NotaryHash.txidFromRawTx = function (rawTx) {
  * @param {Buffer|String} rawTx
  * @returns {Object|null} the parsed record, or null if there is none
  */
-NotaryHash.recordFromRawTx = function (rawTx) {
+NotaryHash.recordFromRawTx = function (rawTx, vout) {
   try {
     var tx = new Transaction(Buffer.isBuffer(rawTx) ? rawTx.toString('hex') : rawTx)
+    // With a vout, read THAT output and no other.
+    //
+    // Scanning every output means the certificate's `anchor.vout` is decorative: it can name
+    // any index, or one past the end, and the record is still found somewhere else in the
+    // transaction. `anchor.vout` is covered by no signature, so that made it an editable
+    // field that looked authoritative. A caller verifying an anchor must read the output the
+    // certificate points at.
+    if (vout !== undefined && vout !== null) {
+      if (!Number.isInteger(vout) || vout < 0 || vout >= tx.outputs.length) {
+        return null
+      }
+      var at = tx.outputs[vout].script
+      return NotaryScript.isNotaryHash(at) ? NotaryScript.parse(at) : null
+    }
     for (var i = 0; i < tx.outputs.length; i++) {
       var script = tx.outputs[i].script
       if (NotaryScript.isNotaryHash(script)) {
@@ -252,9 +268,9 @@ NotaryHash.verifyAnchorSPV = function (certificate, opts) {
       errors.push('rawTx does not hash to anchor.txid')
     }
-    var record = NotaryHash.recordFromRawTx(spv.rawTx)
+    var record = NotaryHash.recordFromRawTx(spv.rawTx, c.anchor && c.anchor.vout)
     if (!record) {
-      errors.push('no NotaryHash record found in rawTx')
+      errors.push('no NotaryHash record at anchor.vout in rawTx')
     } else if (!NotaryHash.recordMatchesCertificate(record, c)) {
       errors.push('on-chain record does not match the certificate')
     }
@@ -349,6 +365,48 @@ NotaryHash.verifyAnchorSPV = function (certificate, opts) {
       }
     }
+    // The anchor's own labels must agree with what was actually proved.
+    //
+    // `anchor.blockTime` and `anchor.blockHeight` are covered by no signature and were
+    // checked by nothing, so an edited certificate verified while reporting a different time
+    // or height than the header and proof establish. A reader shown "anchored at
+    // 2026-06-23T10:06:04Z in block 954784" has no reason to doubt either number.
+    //
+    // A null is not a claim: a certificate issued before confirmation legitimately carries
+    // nulls, and only a stated value is checked.
+    var headerBuf = Buffer.isBuffer(opts.header)
+      ? opts.header
+      : Buffer.from(String(opts.header).replace(/^0x/, ''), 'hex')
+    if (headerBuf.length === 80 && c.anchor) {
+      if (c.anchor.blockTime !== undefined && c.anchor.blockTime !== null) {
+        var headerTime = headerBuf.readUInt32LE(68)
+        if (Number(c.anchor.blockTime) !== headerTime) {
+          errors.push('anchor.blockTime ' + c.anchor.blockTime +
+            ' is not the time in the block header (' + headerTime + ')')
+        }
+      }
+      if (c.anchor.blockHeight !== undefined && c.anchor.blockHeight !== null &&
+          spv.blockHeight !== undefined && spv.blockHeight !== null &&
+          Number(c.anchor.blockHeight) !== Number(spv.blockHeight)) {
+        errors.push('anchor.blockHeight ' + c.anchor.blockHeight +
+          ' does not equal spv.blockHeight ' + spv.blockHeight)
+      }
+    }
+    // A TSC index must be representable by the path it comes with: a path of n nodes
+    // addresses at most 2^n leaves, so a larger index describes a tree the path cannot
+    // belong to. Unchecked, the index was another unsigned field that verified while naming
+    // an impossible position.
+    var mp = spv.merkleProof
+    if (mp && Array.isArray(mp.nodes) && mp.index !== undefined && mp.index !== null) {
+      var capacity = Math.pow(2, mp.nodes.length)
+      if (!Number.isInteger(Number(mp.index)) || Number(mp.index) < 0 ||
+          Number(mp.index) >= capacity) {
+        errors.push('spv.merkleProof.index ' + mp.index + ' does not fit a path of ' +
+          mp.nodes.length + ' nodes, which addresses at most ' + capacity + ' leaves')
+      }
+    }
     return { valid: errors.length === 0, errors: errors }
   } catch (e) {
     return { valid: false, errors: ['anchor verification error: ' + e.message] }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@smartledger/bsv",
-  "version": "9.19.0",
+  "version": "9.20.0",
   "description": "Bitcoin SV library with an interpreter-verified script engine: OP_PUSH_TX covenants, BIP-143 preimage tooling, and consensus flags that match what miners actually enforce. Also ships DID:web / W3C VC-JWT credentials and the Legal Token Protocol.",
   "author": "SmartLedger Technology <hello@smartledger.technology> (https://smartledger.technology)",
   "homepage": "https://github.com/codenlighten/smartledger-bsv#readme",

package/version.js CHANGED Viewed

@@ -1,3 +1,3 @@
 'use strict'
 // GENERATED by scripts/sync-version.js on `npm version` — do not edit.
-module.exports = '9.19.0'
+module.exports = '9.20.0'