@quo-systems/quo 0.2.10 → 0.2.12

package/src/ward/stance.ts

@@ -3,24 +3,30 @@
 // outer is in what she holds: ids in, values out, keys in the bind table.
 import { silence, isSilence, isWord, word, wordOf } from '../being/silence.ts';
 import { digest } from '../being/digest.ts';
-import { RESERVED_IDS } from '../being/types.ts';
+import { RESERVED_IDS, isBlueprint } from '../being/types.ts';
 import type { Answer, Cells, Invitation, JsonObject, Silence, Stance, Standing, Standings, Wanted, Word } from '../being/types.ts';
-import { at, put, drop, type Bind, type StandingKeys } from './partition.ts';
+import { at, put, drop, prune, type Bind, type StandingKeys } from './partition.ts';
 import { allow, within, LATE } from './allowance.ts';
-import { isWardPk, type ReplyPayload } from './seal.ts';
+import { isHex, isWardPk, type ReplyPayload } from './seal.ts';
 import { cellFault } from './cells.ts';
 
 // What the stance needs from its ward, and no more.
 export type Inside = {
   pk: string;
+  // Is the being this stance was built for still one of the ward's? Unboot
+  // takes her door and her rows, but a class whose code is still running
+  // holds the stance closure, and everything in it still points at live
+  // objects. Read before every call, so a being taken out reaches nothing.
+  live(): boolean;
   mintKey(bind: Bind): Promise<{ seed: string; pk: string }>; // a fresh signing key, recorded as minted
   openHeir(heir: string, being: string, id: string): void;
   closeHeir(heir: string): void;
   // one send for every destination. the far door's reply, silence, or unreached.
-  // signs as keys.current, announces keys.next (minting one if asked), and rotates keys on an answer.
-  send(bind: Bind, keys: StandingKeys, announce: boolean, method: string | undefined, args: JsonObject, wanted: Wanted | undefined): Promise<ReplyPayload | Silence | Word>;
+  // signs as keys.current, mints and announces keys.next where the relation has
+  // a heir to rotate on, and rotates keys on an answer.
+  send(bind: Bind, keys: StandingKeys, method: string | undefined, args: JsonObject, wanted: Wanted | undefined): Promise<ReplyPayload | Silence | Word>;
   // a new being of this ward, as the owner's boot makes one. the key, or null.
-  instantiate(key: string, className: string): string | null;
+  instantiate(className: string, key: string): string | null;
   // mint an occupant on a being of this ward, for the being who made her.
   relate(key: string, id: string): Promise<Invitation | null>;
   // take a being of this ward out again, with every relation she holds.
@@ -52,7 +58,7 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
     const i = inv as SealedInvitation;
     if (!i || typeof i !== 'object' || !isWardPk(i.ward)) return false;
     if (i.heir === undefined) return i.secret === undefined;
-    return typeof i.heir === 'string' && typeof i.secret === 'string' && /^[0-9a-f]{64}$/.test(i.heir) && /^[0-9a-f]{64}$/.test(i.secret);
+    return isHex(i.heir) && isHex(i.secret);
   };
 
   // One relation, one ask at a time. The rotation is a conversation: a send
@@ -114,13 +120,19 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
   const honoured = (r: Read): boolean => r.door && !(isWord(r.answer) && wordOf(r.answer) !== 'threw');
   const answered = (r: Read): boolean => r.door && !isSilence(r.answer) && !isWord(r.answer);
 
-  const send = async (keys: StandingKeys, method: string | undefined, args: JsonObject, wanted: Wanted | undefined, rec?: Cells['standings'][string]): Promise<Answer> => {
-    const r = read(await inside.send(bind, keys, true, method, args, wanted));
-    if (rec && method !== undefined && r.seen !== null) rec.seen = r.seen; // the digest rode along
+  // The ask is bounded twice with one budget, once around the lane and once
+  // around the wire, and the two bells are microseconds apart. A reply that
+  // lands between them is a reply she was already told was late: its keys are
+  // rotated, since the far door rotated too and nothing may un-rotate that,
+  // but nothing of it is written into her cells. What she was handed is the
+  // last word on what she saw.
+  const send = async (keys: StandingKeys, method: string | undefined, args: JsonObject, wanted: Wanted | undefined, rec?: Cells['standings'][string], live: () => boolean = () => true): Promise<Answer> => {
+    const r = read(await inside.send(bind, keys, method, args, wanted));
+    if (rec && method !== undefined && r.seen !== null && live()) rec.seen = r.seen; // the digest rode along
     return r.answer;
   };
 
-  const knocking = async (inv: SealedInvitation, method: string | undefined, args: JsonObject, wanted: Wanted | undefined): Promise<Answer> => {
+  const knocking = async (inv: SealedInvitation, method: string | undefined, args: JsonObject, wanted: Wanted | undefined, live: () => boolean = () => true): Promise<Answer> => {
     const name = nameOf(inv);
     // Taken while this knock waited its turn: the relation lives in the
     // standing now and speaks on its lane, under its keys and its count.
@@ -128,10 +140,11 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
     if (taken !== undefined) {
       const keys = at(bind.standings, taken);
       if (!keys) return word('dropped');
-      return lane(`ask:${taken}`, () => asking(taken, keys, at(cells.standings, taken), method, args, wanted));
+      return lane(`ask:${taken}`, () => asking(taken, keys, at(cells.standings, taken), method, args, wanted, live));
     }
     // her own key for this relation, minted once: rotation two. reused if she knocks again.
     const k = (bind.knocks[name] ??= { current: (await inside.mintKey(bind)).seed, next: null, spoke: false, sent: false, seq: 0 });
+    prune(bind.knocks, bind.answered); // this one is the newest, so it stays and the oldest never answered goes
     // The first knock on a heir speaks as the heir, the key the inviter
     // handed out, and announces her own. Once the door has honoured it the
     // heir is spent, whatever she then said, and her own key speaks; a heir
@@ -156,7 +169,7 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
     // door already bound it to her.
     if (inv.heir !== undefined && !k.spoke && k.sent) {
       const own: StandingKeys = { ward: inv.ward, heir: inv.heir, current: k.current, next: k.next, seq: k.seq };
-      const r = read(await inside.send(bind, own, true, method, args, wanted));
+      const r = read(await inside.send(bind, own, method, args, wanted));
       k.seq = own.seq;
       k.current = own.current;
       k.next = own.next;
@@ -178,7 +191,7 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
 
     const first = inv.heir !== undefined && !k.spoke;
     const keys: StandingKeys = first ? { ward: inv.ward, heir: inv.heir!, current: inv.secret!, next: k.current, seq: k.seq } : { ward: inv.ward, heir: inv.heir ?? null, current: k.current, next: k.next, seq: k.seq };
-    const r = read(await inside.send(bind, keys, true, method, args, wanted));
+    const r = read(await inside.send(bind, keys, method, args, wanted));
     k.sent = true; // bytes went out. whether they arrived is the far door's to know.
     // The number she spoke under, and the key she announced, kept whoever
     // answered and kept when nobody did. A reply lost on the way back is a
@@ -201,8 +214,16 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
   const keyName = (k: StandingKeys) => (k.heir === null ? `public:${k.ward}` : `${k.ward}:${k.heir}`);
   const takenAs = (name: string): string | undefined => Object.keys(bind.standings).find((id) => keyName(bind.standings[id]) === name);
 
+  // A being the ward has taken out reaches nothing through the stance she
+  // still holds. Her relations went with her, so every one of them reads as
+  // dropped, and nothing she asks for is made: a heir written here would name
+  // a being no door holds, and an id minted here would be handed to whoever
+  // is booted under her key next.
+  const gone = () => !inside.live();
+
   const calls = {
     knock: async (inv: Invitation, method?: string, args: JsonObject = {}, wanted?: Wanted): Promise<Answer> => {
+      if (gone()) return word('dropped');
       if (!valid(inv)) return word('invitation'); // S1. nothing is sent
       // She may knock again, and after take that knock is an ask: the relation
       // has one home, so it answers on the standing's lane, under the
@@ -210,7 +231,7 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
       // same relation, and the two would refuse each other.
       const id = takenAs(nameOf(inv));
       if (id !== undefined) return standingAt(id).ask(method, args, wanted);
-      return bounded(wanted, (live) => lane(`knock:${nameOf(inv)}`, () => (live() ? knocking(inv, method, args, wanted) : Promise.resolve(word('late')))));
+      return bounded(wanted, (live) => lane(`knock:${nameOf(inv)}`, () => (live() ? knocking(inv, method, args, wanted, live) : Promise.resolve(word('late')))));
     },
     // Take consumes. Until now the relation lived in the knock record, under
     // the ward and the heir; from now it lives in the standing, under her id.
@@ -230,7 +251,7 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
     // ask on it is refused. The relation she took correctly would be dead
     // because a second knock on the same invitation was careless.
     take: async (id: string, inv: Invitation): Promise<string | null> => {
-      if (!valid(inv)) return null;
+      if (gone() || !valid(inv)) return null;
       const name = nameOf(inv);
       return lane(`knock:${name}`, () => {
         if (!bind.answered[name]) return Promise.resolve(null);
@@ -248,6 +269,7 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
       });
     },
     remove: (id: string): void => {
+      if (gone()) return;
       drop(cells.standings, id);
       drop(bind.standings, id);
       inside.wrote();
@@ -260,24 +282,30 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
     // issued while the standing stood is answered even if she drops it in
     // the next line. Waiting for the lane is not a reason to lose it.
     ask: (method?: string, args: JsonObject = {}, wanted?: Wanted): Promise<Answer> => {
+      if (gone()) return Promise.resolve(word('dropped') as Answer);
       const keys = at(bind.standings, id);
       if (!keys) return Promise.resolve(word('dropped') as Answer); // S2. she dropped it between one line and the next
       const rec = at(cells.standings, id);
-      return bounded(wanted, (live) => lane(`ask:${id}`, () => (live() ? asking(id, keys, rec, method, args, wanted) : Promise.resolve(word('late')))));
+      return bounded(wanted, (live) => lane(`ask:${id}`, () => (live() ? asking(id, keys, rec, method, args, wanted, live) : Promise.resolve(word('late')))));
     },
   });
 
   // The record an ask writes into is the one it was issued on. A standing
   // dropped and re-taken under the same id while the ask was in flight is
   // another relation, and the blueprint that came back is not hers.
-  const asking = async (id: string, keys: StandingKeys, rec: Cells['standings'][string] | undefined, method: string | undefined, args: JsonObject, wanted: Wanted | undefined): Promise<Answer> => {
-    const out = await send(keys, method, args, wanted, rec);
+  const asking = async (id: string, keys: StandingKeys, rec: Cells['standings'][string] | undefined, method: string | undefined, args: JsonObject, wanted: Wanted | undefined, live: () => boolean = () => true): Promise<Answer> => {
+    const out = await send(keys, method, args, wanted, rec, live);
     if (method === undefined && !isSilence(out) && !isWord(out)) {
       // A blueprint her cells cannot keep, nested past the bound or carrying
       // a key no harbor writes, is not Quo's bytes: silence, and nothing written.
       if (cellFault(out, 'blueprint') !== null) return silence;
-      if (rec && at(cells.standings, id) === rec) {
-        rec.blueprint = out as never;
+      if (rec && live() && at(cells.standings, id) === rec) {
+        // Read as a blueprint before it is kept as one. A far describe is
+        // somebody else's code and may answer anything; what is not a
+        // blueprint is not written as one, and she holds no blueprint for
+        // that relation rather than one a side would walk and break on. The
+        // answer itself is hers either way: it is returned below, unread.
+        rec.blueprint = isBlueprint(out) ? out : null;
         rec.digest = rec.seen = await digest(out);
       }
     }
@@ -304,8 +332,9 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
     // Nothing half-lives: a relation that could not be made unmakes the
     // being, who is a moment old and known to nobody.
     boot: async (className: string, made: string, id?: string): Promise<string | null> => {
+      if (gone()) return null;
       if (id !== undefined && (reserved(id) || at(cells.standings, id) || at(cells.occupants, id))) return null;
-      const born = inside.instantiate(made, className);
+      const born = inside.instantiate(className, made);
       if (born === null || id === undefined) return born;
       const inv = await inside.relate(born, key);
       if (inv) {
@@ -319,7 +348,7 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
       // rotation one: the ward mints the occupant's first key and gives the secret away.
       // it keeps the pk beside the id and nothing else. the invitation IS the key.
       invite: async (id: string, notes?: JsonObject): Promise<Invitation | null> => {
-        if (reserved(id) || at(cells.occupants, id) || at(cells.standings, id)) return null;
+        if (gone() || reserved(id) || at(cells.occupants, id) || at(cells.standings, id)) return null;
         // The key first, and nothing written until it exists: a record put
         // before the mint would be a record a remove in the meantime drops
         // with no heir to close, and the heir opened after it would name an
@@ -335,6 +364,7 @@ export function buildStance(inside: Inside, key: string, cells: Cells, bind: Bin
         return { ward: inside.pk, heir: k.pk, secret: k.seed };
       },
       remove: (id: string): void => {
+        if (gone()) return;
         drop(cells.occupants, id);
         const heir = at(bind.occupants, id);
         drop(bind.occupants, id);

package/src/ward/ward.ts

@@ -8,7 +8,7 @@ import { silence, isSilence, unreached, isWord, word } from '../being/silence.ts
 import { OWNER } from '../being/types.ts';
 import type { Asker, BeingLike, Cells, JsonObject, Reply, Stance, Wanted, Word } from '../being/types.ts';
 import type { Ground, WardPointers } from './ground.ts';
-import { at, drop, open, put, emptyBind, emptyCells, type Bind, type Partition, type StandingKeys } from './partition.ts';
+import { at, drop, open, put, emptyBind, emptyCells, MINTED, type Bind, type Partition, type StandingKeys } from './partition.ts';
 import { Heirs } from './heirs.ts';
 import { makeDoor, type Door } from './door.ts';
 import { buildStance } from './stance.ts';
@@ -19,11 +19,10 @@ import { unhex } from './arithmetic.ts';
 import { guardCells, unguarded, cellFault } from './cells.ts';
 
 // One being of the ward as the ward holds her: her door, her bind table, her
-// stance and her cells. The owner's asks see this and nothing more.
-export type Booted = Door & { bind: Bind; stance: Stance; cells: Cells & { class?: string } };
-
-// How many minted pks she keeps behind her. Enough to name the keys in play.
-const MINTED = 8;
+// stance and her cells. The owner's asks see this and nothing more. Not
+// `Booted`, which is a harbor's word for a ward it started: this is a ward's
+// word for a being living in it, and the two are one module apart.
+export type Resident = Door & { bind: Bind; stance: Stance; cells: Cells & { class?: string } };
 
 // The ward. One call in, two pointers out. Async because keys are derived.
 export async function Ward(ground: Ground): Promise<WardPointers> {
@@ -37,7 +36,8 @@ class Self implements BeingLike {
   readonly g: Ground;
   readonly p: Partition;
   readonly heirs: Heirs;
-  readonly doors = new Map<string, Booted>();
+  readonly doors = new Map<string, Resident>();
+  readonly #birthing = new Set<string>(); // keys whose constructor is running: taken, though no door and no row say so yet
   readonly door: WardPointers['door'];
   readonly ask: WardPointers['ask'];
 
@@ -52,7 +52,7 @@ class Self implements BeingLike {
     this.p = open(ground.memory); // the partition: the ward's own state, and every being's row
     this.heirs = new Heirs(this.p, () => this.#wrote());
     this.door = makeDoor(key, this.heirs, this.doors, () => this.p.public, (n) => ground.random(n)); // pointer one
-    this.#boot(this.pk, this); // the ward's ward is itself
+    this.#boot(this.pk, () => this); // the ward's ward is itself
     // a restart is silent: every being in the cells is constructed again, unasked.
     // A throw on a boot the owner asked for is that boot's error, and nothing
     // half-lives. This boot nobody asked for, and there is nobody to hand an
@@ -64,9 +64,10 @@ class Self implements BeingLike {
     // read them. Her row stays hers: nobody boots another class over it, the
     // owner sees her as absent, and the owner may unboot her.
     for (const [k, c] of Object.entries(this.p.beings)) {
-      if (k === this.pk || !c.class) continue;
+      const className = c.class;
+      if (k === this.pk || !className) continue;
       try {
-        this.#boot(k, c.class);
+        this.#boot(k, (stance) => this.g.instantiate(className, stance));
       } catch {
         /* she is not here this run. the ward is, and so is everyone else. */
       }
@@ -87,14 +88,18 @@ class Self implements BeingLike {
   // can invite. A stranger cannot be a named asker here, because the door
   // names nobody the ward did not bind.
   async answer(asker: Asker, method?: string, args: JsonObject = {}): Promise<Reply> {
-    if (asker.id === undefined) return { error: 'unknown ask' };
+    // Nobody is not an owner. The door names nobody the ward did not bind, so
+    // the only way here unnamed is a partition that says the ward is its own
+    // public being, which no owner ask will write. Silence, not an error
+    // object: an unnamed asker is a stranger, and a stranger hears one thing.
+    if (asker.id === undefined) return silence;
     return ownerAnswer(
       {
         pk: this.pk,
         doors: this.doors,
         absent: () => this.#absent(),
         publicKey: () => this.p.public,
-        instantiate: (key, className) => this.#instantiate(key, className),
+        instantiate: (className, key) => this.#instantiate(className, key),
         unboot: (key) => this.#unboot(key),
         setPublic: (key) => {
           this.p.public = key;
@@ -128,13 +133,21 @@ class Self implements BeingLike {
   // row is hers, with every relation in it, and no class is booted over it.
   // A throw at birth is that boot's refusal and nothing half-lives; the
   // ward says which, since the owner hears objects.
-  #instantiate(key: string, className: string): Booted | 'threw' | null {
-    if (typeof key !== 'string' || typeof className !== 'string' || !key || this.doors.has(key) || at(this.p.beings, key)) return null;
-    let door: Booted | null;
+  #instantiate(className: string, key: string): Resident | 'threw' | null {
+    // The three refusals are read before the constructor runs, and the
+    // constructor can reach the stance and boot: a class that boots its own
+    // key from inside itself would pass all three, since neither its door nor
+    // its row exists yet, and the two objects would then share one row. A key
+    // being born is a key taken, for as long as the birth lasts.
+    if (typeof key !== 'string' || typeof className !== 'string' || !key || this.doors.has(key) || at(this.p.beings, key) || this.#birthing.has(key)) return null;
+    let door: Resident | null;
+    this.#birthing.add(key);
     try {
-      door = this.#boot(key, className);
+      door = this.#boot(key, (stance) => this.g.instantiate(className, stance));
     } catch {
       return 'threw';
+    } finally {
+      this.#birthing.delete(key);
     }
     if (!door) return null;
     unguarded(door.cells).class = className; // so a restart finds her. the ward's key, written behind her guard
@@ -178,20 +191,27 @@ class Self implements BeingLike {
   // Nothing is written until there is somebody to write it for: a class the
   // harbor does not know makes no being, and a boot that made nobody must
   // leave the partition as it found it.
-  #boot(key: string, classNameOrSelf: string | Self): Booted | null {
+  //
+  // `make` is who to build with the stance this raises. Two callers and two
+  // makers: the ground's `instantiate` for a being of the ward, and the ward
+  // itself, which is the first being in its own map and is already made.
+  #boot(key: string, make: (stance: Stance) => BeingLike | null): Resident | null {
     const cells = guardCells(at(this.p.beings, key) ?? emptyCells(), () => this.#wrote());
     const bind = at(this.p.bind, key) ?? emptyBind();
     const stance = buildStance(
       {
         pk: this.pk,
+        // This stance, not merely this key: unboot and boot again under the
+        // same key makes a new being, and the old stance is not hers.
+        live: () => this.doors.get(key)?.stance === stance,
         mintKey: (b) => this.#mintKey(b),
         openHeir: (heir, being, id) => this.heirs.open(heir, being, id),
         closeHeir: (heir) => this.heirs.close(heir),
-        send: (b, keys, announce, method, args, wanted) => this.#send(b, keys, announce, method, args, wanted),
+        send: (b, keys, method, args, wanted) => this.#send(b, keys, method, args, wanted),
         // A throw at birth is null to her, not a throw in her method: she asked
         // for a being and got none, and her own answer is still hers to give.
-        instantiate: (k, className) => {
-          const made = this.#instantiate(k, className);
+        instantiate: (className, k) => {
+          const made = this.#instantiate(className, k);
           return made && made !== 'threw' ? made.key : null;
         },
         // The two halves of a maker's way back, each the ward's own call: the
@@ -205,11 +225,11 @@ class Self implements BeingLike {
       cells,
       bind,
     );
-    const being = classNameOrSelf === this ? this : this.g.instantiate(classNameOrSelf as string, stance);
+    const being = make(stance);
     if (!being || typeof being.answer !== 'function') return null; // a being is anything with an answer, and nothing without one
     put(this.p.beings, key, cells);
     put(this.p.bind, key, bind);
-    const door: Booted = { key, cells, bind, stance, being };
+    const door: Resident = { key, cells, bind, stance, being };
     this.doors.set(key, door);
     this.#wrote();
     return door;
@@ -232,7 +252,7 @@ class Self implements BeingLike {
   // next, seals to the far ward, opens the reply with the ephemeral secret,
   // and rotates to the announced key once the far door has answered under
   // the current one.
-  async #send(bind: Bind, keys: StandingKeys, announce: boolean, method: string | undefined, args: JsonObject, wanted?: Wanted): Promise<ReplyPayload | typeof silence | Word> {
+  async #send(bind: Bind, keys: StandingKeys, method: string | undefined, args: JsonObject, wanted?: Wanted): Promise<ReplyPayload | typeof silence | Word> {
     // What she asked for, held to what this ward allows. Asking for nothing is
     // the default, and asking for more than the ceiling is the ceiling: budget
     // is granted by a ward, never minted by a being.
@@ -240,8 +260,9 @@ class Self implements BeingLike {
     const by = (await beingKey(unhex(keys.current))).pk;
     // A public being is reached without a heir, and the door keeps nothing for
     // whoever asked: no key it vouched for, so nothing to announce and nothing
-    // to rotate to. A standing on her signs with one key for life.
-    if (announce && keys.next === null && keys.heir !== null) keys.next = (await this.#mintKey(bind)).seed;
+    // to rotate to. A standing on her signs with one key for life. Every other
+    // ask announces its next: there is no send that does not.
+    if (keys.next === null && keys.heir !== null) keys.next = (await this.#mintKey(bind)).seed;
     const next = keys.next === null ? null : (await beingKey(unhex(keys.next))).pk;
     // Her count for this relation, one higher every call and never reused. The
     // far door honours each number once. One relation sends one at a time, so

package/vectors/framing.json

@@ -7,9 +7,9 @@
     {
       "name": "a ward pk from a fixed seed",
       "seed": "1111111111111111111111111111111111111111111111111111111111111111",
-      "pk": "d04ab232742bb4ab3a1368bd4615e4e6d0224ab71a016baf8520a332c97787377b4e909bbe7ffe44c465a220037d608ee35897d31ef972f07f74892cb0f73f13",
-      "signPk": "d04ab232742bb4ab3a1368bd4615e4e6d0224ab71a016baf8520a332c9778737",
-      "padlockPk": "7b4e909bbe7ffe44c465a220037d608ee35897d31ef972f07f74892cb0f73f13"
+      "pk": "6d773f8156c80eb9f34d0734e889d824a0d0515f527b853771208ef1ed3feb281fc3da3532de3b20deafd145e30c3de979917e96c22f6c3113a731379eeb3200",
+      "signPk": "6d773f8156c80eb9f34d0734e889d824a0d0515f527b853771208ef1ed3feb28",
+      "padlockPk": "1fc3da3532de3b20deafd145e30c3de979917e96c22f6c3113a731379eeb3200"
     },
     {
       "name": "a being key from a fixed secret",
@@ -22,6 +22,12 @@
       "canonical": "{\"asks\":{\"hello\":{\"note\":\"z\"}},\"list\":[1,2],\"note\":null}",
       "digest": "269c9e90f39f6fcae9deab916e3a4148788dec5ba0d06023edc8e52180c773db"
     },
+    {
+      "name": "the digest where JCS is hard: UTF-16 key order and ES numbers",
+      "blueprint": "{\"asks\":[],\"notes\":{\"1\":\"One\",\"\u20ac\":\"Euro Sign\",\"\\r\":\"Carriage Return\",\"\ufb33\":\"Hebrew Letter Dalet With Dagesh\",\"\ud83d\ude00\":\"Emoji: Grinning Face\",\"\u0080\":\"Control\",\"\u00f6\":\"Latin Small Letter O With Diaeresis\"},\"numbers\":[1e+21,0,0.1,1e-7,9007199254740992,0.3333333333333333]}",
+      "canonical": "{\"asks\":[],\"notes\":{\"\\r\":\"Carriage Return\",\"1\":\"One\",\"\u0080\":\"Control\",\"\u00f6\":\"Latin Small Letter O With Diaeresis\",\"\u20ac\":\"Euro Sign\",\"\ud83d\ude00\":\"Emoji: Grinning Face\",\"\ufb33\":\"Hebrew Letter Dalet With Dagesh\"},\"numbers\":[1e+21,0,0.1,1e-7,9007199254740992,0.3333333333333333]}",
+      "digest": "dc5306089d6bf46d9f91d25290b770c0f18955f1192525b51389fd4c23e02089"
+    },
     {
       "name": "the signed ask body for nobody, and its signature: to is inside, first",
       "to": "",
@@ -42,37 +48,37 @@
       "name": "a sealed ask to a heir: the ephemeral pk, then the box, and nothing outside it",
       "to": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
       "ephemeralSeed": "3333333333333333333333333333333333333333333333333333333333333333",
-      "bytes": "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"
+      "bytes": "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"
     },
     {
       "name": "a sealed ask for nobody: the same shape, with to null inside",
       "to": "",
       "ephemeralSeed": "3333333333333333333333333333333333333333333333333333333333333333",
-      "bytes": "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"
+      "bytes": "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"
     },
     {
       "name": "the sealed silence reply",
       "reply": "{\"silence\":true}",
       "replySeed": "4444444444444444444444444444444444444444444444444444444444444444",
-      "bytes": "ff2ee45601ec1b67310c7790404585ae697331eee1c1f8cf2419731c1fff3e6b76ec8fe27c6573176a8974f1235379842eeabe08f92c8aae00e383195ff41cbb2124de81119eb83326fbb9b8ab00a149ce41ea21f6c056a324333cc76b82c93ac93fbcc3fc74f57a1bff4a07a0c7824ed5516b7fb8a14006a25f6c28d95e4e64"
+      "bytes": "ff2ee45601ec1b67310c7790404585ae697331eee1c1f8cf2419731c1fff3e6b76ec8fe27c6573176a8974f123537984bdd8baea7cbd4e9b81f38db22c5917e9674bc082183e532adba06227f7e023955f16afcb723ca826a579fc08af3306824c8f8012687532ad79d81b77a7c84a429d151cc593b81312bc44433571a0b4aa"
     },
     {
       "name": "a sealed object reply",
       "reply": "{\"object\":{\"hi\":\"quo\"},\"seen\":null}",
       "replySeed": "4444444444444444444444444444444444444444444444444444444444444444",
-      "bytes": "ff2ee45601ec1b67310c7790404585ae697331eee1c1f8cf2419731c1fff3e6b76ec93e97a657e002d9135a7394f3ec33bcd723c9d8947909f4cc659d8dfeed743f5b64bfa87b4ac79074219c1032037de444400b509f31559331b7995f9dfbadbe7fb0f6d46db2257db70f248b7739b3baa2ca79b07b66b29ea680faf79340f2309163c9e3c65fcdb33297c419d1cd8517647"
+      "bytes": "ff2ee45601ec1b67310c7790404585ae697331eee1c1f8cf2419731c1fff3e6b76ec93e97a657e002d9135a7394f3ec33bcd723c9d8947909f4cc659d8dfeed743f5b6012ed80af39f9d1bc16c995f69944a0c94244e349308704f2070a98b59a5a4f3e9b1e2a1bfe2e7bcba2446de1fbf84dc15cc5fa5ac03a175cce7d2eaa07b0e1148416580932306d41dc961f145fa7141"
     },
     {
       "name": "a sealed word reply: the ward's word to a key it has bound",
       "reply": "{\"quo\":\"removed\"}",
       "replySeed": "4444444444444444444444444444444444444444444444444444444444444444",
-      "bytes": "ff2ee45601ec1b67310c7790404585ae697331eee1c1f8cf2419731c1fff3e6b76ec8dfe7f2227567dce23ea274378db64eb74efed5c91135d62d89db62db7d8ffbd54cf3e82e3272d0b26d59130020755b442a16340798d3eec60bc3a3875020da9276d5e72d712ac3dad7ef287d3c153a0588bf4951b9d3540b1142bd54875a3"
+      "bytes": "ff2ee45601ec1b67310c7790404585ae697331eee1c1f8cf2419731c1fff3e6b76ec8dfe7f2227567dce23ea274378db6487fe336070ff4780aec6e6cb89197c05df879e39252f523fc910bf2268ded0d2f323f395a4e2352a5004424b828c43f3163595c67c120e5ea029cfecec4abe575fb4327449cd6003634f30b3cc056a54"
     },
     {
       "name": "an invitation for a heir: the ward pk, the heir pk, the heir secret, and nothing else",
       "wardSeed": "1111111111111111111111111111111111111111111111111111111111111111",
       "heirSecret": "4444444444444444444444444444444444444444444444444444444444444444",
-      "invitation": "{\"ward\":\"d04ab232742bb4ab3a1368bd4615e4e6d0224ab71a016baf8520a332c97787377b4e909bbe7ffe44c465a220037d608ee35897d31ef972f07f74892cb0f73f13\",\"heir\":\"d759793bbc13a2819a827c76adb6fba8a49aee007f49f2d0992d99b825ad2c48\",\"secret\":\"4444444444444444444444444444444444444444444444444444444444444444\"}"
+      "invitation": "{\"ward\":\"6d773f8156c80eb9f34d0734e889d824a0d0515f527b853771208ef1ed3feb281fc3da3532de3b20deafd145e30c3de979917e96c22f6c3113a731379eeb3200\",\"heir\":\"d759793bbc13a2819a827c76adb6fba8a49aee007f49f2d0992d99b825ad2c48\",\"secret\":\"4444444444444444444444444444444444444444444444444444444444444444\"}"
     },
     {
       "name": "a sealed knock: the first ask under a heir, by the heir, announcing her own key, to the heir",
@@ -80,7 +86,7 @@
       "ownSecret": "5555555555555555555555555555555555555555555555555555555555555555",
       "ephemeralSeed": "6666666666666666666666666666666666666666666666666666666666666666",
       "payload": "{\"to\":\"d759793bbc13a2819a827c76adb6fba8a49aee007f49f2d0992d99b825ad2c48\",\"by\":\"d759793bbc13a2819a827c76adb6fba8a49aee007f49f2d0992d99b825ad2c48\",\"next\":\"c6822637c7d310ec57627be00ba259d253749f4aaf644470cffbe53a35f73242\",\"seq\":1,\"time\":30000,\"method\":\"hello\",\"args\":{\"name\":\"quo\"}}",
-      "bytes": "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"
+      "bytes": "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"
     }
   ]
 }

package/vectors/wire.json

@@ -7,9 +7,9 @@
     {
       "name": "an ask frame: kind, id, pk, bytes",
       "id": 1,
-      "pk": "d04ab232742bb4ab3a1368bd4615e4e6d0224ab71a016baf8520a332c97787377b4e909bbe7ffe44c465a220037d608ee35897d31ef972f07f74892cb0f73f13",
+      "pk": "6d773f8156c80eb9f34d0734e889d824a0d0515f527b853771208ef1ed3feb281fc3da3532de3b20deafd145e30c3de979917e96c22f6c3113a731379eeb3200",
       "bytes": "010203",
-      "frame": "0000000001d04ab232742bb4ab3a1368bd4615e4e6d0224ab71a016baf8520a332c97787377b4e909bbe7ffe44c465a220037d608ee35897d31ef972f07f74892cb0f73f13010203"
+      "frame": "00000000016d773f8156c80eb9f34d0734e889d824a0d0515f527b853771208ef1ed3feb281fc3da3532de3b20deafd145e30c3de979917e96c22f6c3113a731379eeb3200010203"
     },
     {
       "name": "a reply frame: kind, id, bytes",
@@ -25,9 +25,9 @@
     {
       "name": "the announce frame, text",
       "pks": [
-        "d04ab232742bb4ab3a1368bd4615e4e6d0224ab71a016baf8520a332c97787377b4e909bbe7ffe44c465a220037d608ee35897d31ef972f07f74892cb0f73f13"
+        "6d773f8156c80eb9f34d0734e889d824a0d0515f527b853771208ef1ed3feb281fc3da3532de3b20deafd145e30c3de979917e96c22f6c3113a731379eeb3200"
       ],
-      "frame": "{\"announce\":[\"d04ab232742bb4ab3a1368bd4615e4e6d0224ab71a016baf8520a332c97787377b4e909bbe7ffe44c465a220037d608ee35897d31ef972f07f74892cb0f73f13\"],\"suite\":1}",
+      "frame": "{\"announce\":[\"6d773f8156c80eb9f34d0734e889d824a0d0515f527b853771208ef1ed3feb281fc3da3532de3b20deafd145e30c3de979917e96c22f6c3113a731379eeb3200\"],\"suite\":1}",
       "suite": 1
     },
     {