@smartledger/bsv 9.3.0 → 9.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +105 -0
- package/README.md +19 -19
- package/bsv-gdaf.min.js +52 -52
- package/bsv-ltp.min.js +1 -1
- package/bsv-smartcontract.min.js +18 -18
- package/bsv.bundle.js +52 -52
- package/bsv.d.ts +8 -0
- package/bsv.min.js +52 -52
- package/docs/AUDIT_SCOPE.md +135 -34
- package/docs/MODULE_REFERENCE_COMPLETE.md +27 -27
- package/docs/advanced/UTXO_MANAGER_GUIDE.md +1 -1
- package/docs/getting-started/INSTALLATION.md +23 -23
- package/docs/getting-started/QUICK_START.md +7 -7
- package/docs/migration/FROM_BSV_1_5_6.md +5 -5
- package/lib/script/interpreter.js +34 -5
- package/lib/smart_contract/dsl.js +55 -3
- package/package.json +3 -3
- package/version.js +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,111 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [9.5.0] - 2026-09-02
|
|
11
|
+
|
|
12
|
+
### Fixed — SIGPUSHONLY, LOW_S and NULLFAIL are consensus, and both flag helpers now say so
|
|
13
|
+
|
|
14
|
+
BSV enforces these three as **mandatory**, not as standardness. Each was broadcast to
|
|
15
|
+
mainnet in a transaction violating it and nothing else, and the node answered code 16
|
|
16
|
+
`mandatory-script-verify-flag-failed`:
|
|
17
|
+
|
|
18
|
+
| rule | the node's message |
|
|
19
|
+
| --- | --- |
|
|
20
|
+
| `SIGPUSHONLY` | Only non-push operators allowed in signatures |
|
|
21
|
+
| `LOW_S` | Non-canonical signature: S value is unnecessarily high |
|
|
22
|
+
| `NULLFAIL` | Signature must be zero for failed CHECK(MULTI)SIG operation |
|
|
23
|
+
|
|
24
|
+
For contrast, `MINIMALDATA`, `CLEANSTACK`, `NULLDUMMY` and the upgradable NOPs all came
|
|
25
|
+
back code 64 `non-mandatory-script-verify-flag` in the same run — relay policy, not
|
|
26
|
+
consensus.
|
|
27
|
+
|
|
28
|
+
`currentConsensusFlags()` carried none of the three, so `verify()` with no explicit
|
|
29
|
+
flags **accepted scripts the network judges invalid**. `mainnetFlags()` carried two of
|
|
30
|
+
them, so the two helpers disagreed and the default was the weaker one.
|
|
31
|
+
|
|
32
|
+
Both now carry all three. Fixing only the default would have left the worse half
|
|
33
|
+
standing: `mainnetFlags()` is the helper the README recommends and the one
|
|
34
|
+
`lib/covenant/helpers.flags()` returns, so **every covenant and the whole `policy()`
|
|
35
|
+
DSL** verified without `SIGPUSHONLY`. A test asserts the invariant behind that — the
|
|
36
|
+
default word may never enforce a rule `mainnetFlags()` would let through — rather than
|
|
37
|
+
naming individual bits, since naming two of three rules is exactly what let
|
|
38
|
+
`SIGPUSHONLY` slip.
|
|
39
|
+
|
|
40
|
+
The node's own corpus cannot settle this: all seven of its `SIGPUSHONLY` vectors name
|
|
41
|
+
the flag in their own flag list, and a vector that states its own flags says nothing
|
|
42
|
+
about which flags belong in a default set. Same shape as the `OP_BIN2NUM` defect in
|
|
43
|
+
9.4.0 — the mechanism was covered, the selection was not.
|
|
44
|
+
|
|
45
|
+
Four existing tests were themselves relying on the permissive default, verifying with
|
|
46
|
+
unlocking scripts that contain non-push opcodes. They now pass an explicit flag word
|
|
47
|
+
with `SIGPUSHONLY` cleared, so they exercise the mechanism they are named for.
|
|
48
|
+
|
|
49
|
+
## [9.4.0] - 2026-09-01
|
|
50
|
+
|
|
51
|
+
### Fixed — `policy().lockUntil()` did not bind, and `OP_BIN2NUM` used the wrong era's width
|
|
52
|
+
|
|
53
|
+
Two defects, found together because the second is what stops you fixing the first.
|
|
54
|
+
|
|
55
|
+
#### `lockUntil` checked one third of a time lock
|
|
56
|
+
|
|
57
|
+
The compiled script asserted `nLockTime >= floor` and nothing else. A time lock
|
|
58
|
+
is three rules in the node's `CheckLockTime`, and the other two each have a spend
|
|
59
|
+
that walks straight through:
|
|
60
|
+
|
|
61
|
+
- **Sequence.** `IsFinalTx()` ignores `nLockTime` outright when every input is
|
|
62
|
+
`0xffffffff`. A spender who set a final sequence satisfied the script with the
|
|
63
|
+
very locktime it demanded and produced a transaction minable in the next block.
|
|
64
|
+
The honest `unlock()` helper set `0xfffffffe`, so the covenant looked correct
|
|
65
|
+
from inside — and the test that covered the early-locktime case set
|
|
66
|
+
`0xfffffffe` too, which is why nothing caught it.
|
|
67
|
+
- **Units.** Consensus reads `nLockTime` below 500,000,000 as a block height and
|
|
68
|
+
at or above it as a unix timestamp. A bare `>=` compares the two as plain
|
|
69
|
+
numbers, so `1500000000 >= 900000` cleared a floor of block 900,000 with a
|
|
70
|
+
timestamp from July 2017 — a transaction that is final today.
|
|
71
|
+
|
|
72
|
+
Both are now enforced in script: this input must be non-final, and a height floor
|
|
73
|
+
requires the locktime to be a height. `describe()` reports both, and
|
|
74
|
+
`lockUntil(0)` throws, since consensus reads 0 as "no lock" whatever the
|
|
75
|
+
sequences are.
|
|
76
|
+
|
|
77
|
+
This is the same defect that removed `Locks.timeLockCLTV` and `Locks.htlc` in
|
|
78
|
+
9.0.0 — a time lock that enforces nothing — reappearing in the DSL that replaced
|
|
79
|
+
them. There, the cause was Genesis reverting `OP_CHECKLOCKTIMEVERIFY` to a NOP.
|
|
80
|
+
Here, it was reimplementing `CHECKLOCKTIMEVERIFY` by hand and reproducing only
|
|
81
|
+
its comparison.
|
|
82
|
+
|
|
83
|
+
#### `OP_BIN2NUM` capped every era at the pre-Genesis 4 bytes
|
|
84
|
+
|
|
85
|
+
It range-checked its result with `_isMinimallyEncoded(buf)`, whose `nMaxNumSize`
|
|
86
|
+
argument **defaults to 4**. The node passes `maxScriptNumLength`, which is 4
|
|
87
|
+
before Genesis, 750,000 after it and 32,000,000 after Chronicle.
|
|
88
|
+
|
|
89
|
+
Any unsigned field whose top byte has the sign bit set needs a fifth byte to read
|
|
90
|
+
as positive, so this rejected:
|
|
91
|
+
|
|
92
|
+
- **Every perpetual covenant and ownership token holding 21.47 BSV or more**
|
|
93
|
+
(2³¹ satoshis). Both read the preimage's 8-byte value field through
|
|
94
|
+
`OP_BIN2NUM`, so the coins were locked in and unspendable.
|
|
95
|
+
- **Every `nLockTime` from 19 Jan 2038**, whose high bit is set.
|
|
96
|
+
|
|
97
|
+
The node's own corpus did not catch it: all 25 of its `OP_BIN2NUM` vectors run
|
|
98
|
+
under `P2SH,STRICTENC` alone — pre-Genesis, where 4 is the right answer either
|
|
99
|
+
way. 1,483/1,483 passed before the fix and after it. The opcode was covered; the
|
|
100
|
+
*era* was not, and era selection is where both of this library's consensus
|
|
101
|
+
defects have been.
|
|
102
|
+
|
|
103
|
+
`lockUntil` also needed this: `nLockTime` is unsigned and `OP_BIN2NUM` reads
|
|
104
|
+
signed, so from 2038 the extracted value came back as negative zero and no spend
|
|
105
|
+
could clear the floor. The fix is to sign-pad to five bytes first, and that push
|
|
106
|
+
is only legal once `OP_BIN2NUM` honours the era.
|
|
107
|
+
|
|
108
|
+
#### Upgrading
|
|
109
|
+
|
|
110
|
+
`lockUntil` compiles different bytes, so a UTXO locked by 9.3.0 or earlier cannot
|
|
111
|
+
be spent with a script compiled by this version — keep the compiled object, or
|
|
112
|
+
recompile with the old version. Those locks bind nothing, so treat their coins as
|
|
113
|
+
spendable by anyone and move them.
|
|
114
|
+
|
|
10
115
|
## [9.3.0] - 2026-08-28
|
|
11
116
|
|
|
12
117
|
### Added
|
package/README.md
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
Bitcoin SV library with an interpreter-verified script engine.
|
|
4
4
|
|
|
5
|
-
[](https://www.npmjs.com/package/@smartledger/bsv)
|
|
6
6
|
[](LICENSE)
|
|
7
7
|
[](STABILITY.md)
|
|
8
8
|
|
|
@@ -155,44 +155,44 @@ const bsv = require('@smartledger/bsv') // 128 modules
|
|
|
155
155
|
### **Core Modules**
|
|
156
156
|
| Module | Size | Use Case | CDN |
|
|
157
157
|
|--------|------|----------|-----|
|
|
158
|
-
| **bsv.min.js** |
|
|
159
|
-
| **bsv.bundle.js** |
|
|
158
|
+
| **bsv.min.js** | 1045KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@9.5.0/bsv.min.js` |
|
|
159
|
+
| **bsv.bundle.js** | 1045KB | Everything in one file | `unpkg.com/@smartledger/bsv@9.5.0/bsv.bundle.js` |
|
|
160
160
|
|
|
161
161
|
### **W3C Verifiable Credentials**
|
|
162
162
|
| Module | Size | Use Case | CDN |
|
|
163
163
|
|--------|------|----------|-----|
|
|
164
|
-
| **🟢 bsv-didweb.min.js** | 166KB | **DID:web generation** | `unpkg.com/@smartledger/bsv@9.
|
|
165
|
-
| **🟢 bsv-vcjwt.min.js** | 166KB | **VC-JWT issue/verify** | `unpkg.com/@smartledger/bsv@9.
|
|
166
|
-
| **🟢 bsv-statuslist.min.js** | 256KB | **StatusList2021 revocation** | `unpkg.com/@smartledger/bsv@9.
|
|
167
|
-
| **🟢 bsv-anchor.min.js** | 164KB | **BSV anchoring (hash-only)** | `unpkg.com/@smartledger/bsv@9.
|
|
164
|
+
| **🟢 bsv-didweb.min.js** | 166KB | **DID:web generation** | `unpkg.com/@smartledger/bsv@9.5.0/bsv-didweb.min.js` |
|
|
165
|
+
| **🟢 bsv-vcjwt.min.js** | 166KB | **VC-JWT issue/verify** | `unpkg.com/@smartledger/bsv@9.5.0/bsv-vcjwt.min.js` |
|
|
166
|
+
| **🟢 bsv-statuslist.min.js** | 256KB | **StatusList2021 revocation** | `unpkg.com/@smartledger/bsv@9.5.0/bsv-statuslist.min.js` |
|
|
167
|
+
| **🟢 bsv-anchor.min.js** | 164KB | **BSV anchoring (hash-only)** | `unpkg.com/@smartledger/bsv@9.5.0/bsv-anchor.min.js` |
|
|
168
168
|
|
|
169
169
|
### **Smart Contract & Development**
|
|
170
170
|
| Module | Size | Use Case | CDN |
|
|
171
171
|
|--------|------|----------|-----|
|
|
172
|
-
| **bsv-smartcontract.min.js** |
|
|
173
|
-
| **bsv-covenant.min.js** | 35KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.
|
|
174
|
-
| **bsv-script-helper.min.js** | 33KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.
|
|
175
|
-
| **bsv-security.min.js** | 32KB | Security enhancements | `unpkg.com/@smartledger/bsv@9.
|
|
172
|
+
| **bsv-smartcontract.min.js** | 141KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@9.5.0/bsv-smartcontract.min.js` |
|
|
173
|
+
| **bsv-covenant.min.js** | 35KB | Covenant operations | `unpkg.com/@smartledger/bsv@9.5.0/bsv-covenant.min.js` |
|
|
174
|
+
| **bsv-script-helper.min.js** | 33KB | Custom script tools | `unpkg.com/@smartledger/bsv@9.5.0/bsv-script-helper.min.js` |
|
|
175
|
+
| **bsv-security.min.js** | 32KB | Security enhancements | `unpkg.com/@smartledger/bsv@9.5.0/bsv-security.min.js` |
|
|
176
176
|
|
|
177
177
|
### **Legal & Compliance**
|
|
178
178
|
| Module | Size | Use Case | CDN |
|
|
179
179
|
|--------|------|----------|-----|
|
|
180
|
-
| **bsv-ltp.min.js** | 539KB | Legal Token Protocol | `unpkg.com/@smartledger/bsv@9.
|
|
181
|
-
| **bsv-gdaf.min.js** |
|
|
180
|
+
| **bsv-ltp.min.js** | 539KB | Legal Token Protocol | `unpkg.com/@smartledger/bsv@9.5.0/bsv-ltp.min.js` |
|
|
181
|
+
| **bsv-gdaf.min.js** | 1045KB | Digital Identity & Attestation | `unpkg.com/@smartledger/bsv@9.5.0/bsv-gdaf.min.js` |
|
|
182
182
|
|
|
183
183
|
### **Advanced Cryptography**
|
|
184
184
|
| Module | Size | Use Case | CDN |
|
|
185
185
|
|--------|------|----------|-----|
|
|
186
|
-
| **bsv-shamir.min.js** | 177KB | Threshold Cryptography | `unpkg.com/@smartledger/bsv@9.
|
|
186
|
+
| **bsv-shamir.min.js** | 177KB | Threshold Cryptography | `unpkg.com/@smartledger/bsv@9.5.0/bsv-shamir.min.js` |
|
|
187
187
|
|
|
188
188
|
### **Utilities**
|
|
189
189
|
| Module | Size | Use Case | CDN |
|
|
190
190
|
|--------|------|----------|-----|
|
|
191
|
-
| **bsv-ecies.min.js** | 137KB | Encryption | `unpkg.com/@smartledger/bsv@9.
|
|
192
|
-
| **bsv-message.min.js** | 34KB | Message signing | `unpkg.com/@smartledger/bsv@9.
|
|
193
|
-
| **bsv-mnemonic.min.js** | 320KB | HD wallets | `unpkg.com/@smartledger/bsv@9.
|
|
191
|
+
| **bsv-ecies.min.js** | 137KB | Encryption | `unpkg.com/@smartledger/bsv@9.5.0/bsv-ecies.min.js` |
|
|
192
|
+
| **bsv-message.min.js** | 34KB | Message signing | `unpkg.com/@smartledger/bsv@9.5.0/bsv-message.min.js` |
|
|
193
|
+
| **bsv-mnemonic.min.js** | 320KB | HD wallets | `unpkg.com/@smartledger/bsv@9.5.0/bsv-mnemonic.min.js` |
|
|
194
194
|
```html
|
|
195
|
-
<script src="https://unpkg.com/@smartledger/bsv@9.
|
|
195
|
+
<script src="https://unpkg.com/@smartledger/bsv@9.5.0/bsv.min.js"></script>
|
|
196
196
|
<script>
|
|
197
197
|
const key = bsv.PrivateKey.fromRandom()
|
|
198
198
|
</script>
|
|
@@ -240,4 +240,4 @@ MIT
|
|
|
240
240
|
|
|
241
241
|
---
|
|
242
242
|
|
|
243
|
-
**SmartLedger-BSV v9.
|
|
243
|
+
**SmartLedger-BSV v9.5.0**
|