@interop/wallet-core 0.108.0 → 0.109.0

package/dist/recovery/recoveryDelegation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recoveryDelegation.d.ts","sourceRoot":"","sources":["../../src/recovery/recoveryDelegation.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAGhD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAClE,OAAO,EACL,oBAAoB,EAErB,MAAM,0BAA0B,CAAA;AAEjC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,0BAA0B,QAAuB,CAAA;AAI9D,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAqB/E;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,UAAU,EACV,OAAO,EACP,iBAAiB,EACjB,GAAgB,EACjB,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,cAAc,CAAA;IACvB,iBAAiB,EAAE,MAAM,CAAA;IACzB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,KAAK,CAAC,CAOjB;AAID,OAAO,EAAE,oBAAoB,EAAE,CAAA;AAE/B;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,UAAU,EACV,gBAAgB,EACjB,EAAE;IACD,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,gBAAgB,CAAC,EAAE,KAAK,CAAA;CACzB,GAAG;IACF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC,CAiBA"}
+{"version":3,"file":"recoveryDelegation.d.ts","sourceRoot":"","sources":["../../src/recovery/recoveryDelegation.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAElE,OAAO,EACL,oBAAoB,EAErB,MAAM,0BAA0B,CAAA;AAEjC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,0BAA0B,QAAuB,CAAA;AAI9D,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAE/E;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,UAAU,EACV,OAAO,EACP,iBAAiB,EACjB,GAAgB,EACjB,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,cAAc,CAAA;IACvB,iBAAiB,EAAE,MAAM,CAAA;IACzB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAAC,KAAK,CAAC,CAOjB;AAID,OAAO,EAAE,oBAAoB,EAAE,CAAA;AAE/B;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,UAAU,EACV,gBAAgB,EACjB,EAAE;IACD,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,gBAAgB,CAAC,EAAE,KAAK,CAAA;CACzB,GAAG;IACF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC,CAiBA"}

package/dist/recovery/recoveryDelegation.js

@@ -1,5 +1,4 @@
-import { resourcePath, toUrl } from '@interop/was-client/paths';
-import { DID_LOG_RESOURCE, ID_COLLECTION } from '../space/collections.js';
+import { accountLogUrl } from '../webvh/logLocation.js';
 import { delegationProofKeyId, STANDING_ZCAP_TTL_MS } from '../webvh/standingZcap.js';
 /**
  * The recovery delegation's lifetime: the house standing-zcap value
@@ -19,24 +18,6 @@ export const RECOVERY_DELEGATION_TTL_MS = STANDING_ZCAP_TTL_MS;
 // Re-exported from their shared home (`webvh/standingZcap.ts`), so this
 // module's public surface predating the move is unchanged.
 export { ZCAP_RENEWAL_WINDOW_MS, zcapExpiring } from '../webvh/standingZcap.js';
-/**
- * The absolute URL of the account's `did.jsonl` log resource -- the
- * invocation target of the pre-minted recovery delegation. Built with
- * was-client's path builders, the one owner of the WAS path grammar, so the
- * path is joined onto the pointer host's base path (a sub-path deployment
- * keeps its prefix) and the minted target matches the URL the server checks
- * it against byte for byte.
- *
- * @param options {object}
- * @param options.pointer {AccountPointer}
- * @returns {string}
- */
-function didLogUrl({ pointer }) {
-    return toUrl({
-        baseUrl: pointer.host,
-        path: resourcePath(pointer.spaceId, ID_COLLECTION.id, DID_LOG_RESOURCE)
-    });
-}
 /**
  * Delegates the narrow log-write bridge to a code-derived client: PUT on the
  * one `did.jsonl` resource, {@link RECOVERY_DELEGATION_TTL_MS} lifetime. The
@@ -54,7 +35,7 @@ function didLogUrl({ pointer }) {
  */
 export async function delegateLogWrite({ zcapClient, pointer, recoveryClientDid, now = Date.now() }) {
     return zcapClient.delegate({
-        invocationTarget: didLogUrl({ pointer }),
+        invocationTarget: accountLogUrl({ spaceUrl: pointer.spaceUrl }),
         controller: recoveryClientDid,
         allowedActions: ['PUT'],
         expires: new Date(now + RECOVERY_DELEGATION_TTL_MS)

package/dist/recovery/recoveryDelegation.js.map

@@ -1 +1 @@
-{"version":3,"file":"recoveryDelegation.js","sourceRoot":"","sources":["../../src/recovery/recoveryDelegation.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEzE,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,0BAA0B,CAAA;AAEjC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAAoB,CAAA;AAE9D,wEAAwE;AACxE,2DAA2D;AAC3D,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAE/E;;;;;;;;;;;GAWG;AACH,SAAS,SAAS,CAAC,EAAE,OAAO,EAA+B;IACzD,OAAO,KAAK,CAAC;QACX,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,EAAE,gBAAgB,CAAC;KACxE,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,UAAU,EACV,OAAO,EACP,iBAAiB,EACjB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAMjB;IACC,OAAO,UAAU,CAAC,QAAQ,CAAC;QACzB,gBAAgB,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;QACxC,UAAU,EAAE,iBAAiB;QAC7B,cAAc,EAAE,CAAC,KAAK,CAAC;QACvB,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,0BAA0B,CAAC;KACpD,CAAC,CAAA;AACJ,CAAC;AAED,sEAAsE;AACtE,wCAAwC;AACxC,OAAO,EAAE,oBAAoB,EAAE,CAAA;AAE/B;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,EACvC,UAAU,EACV,gBAAgB,EAIjB;IAMC,MAAM,eAAe,GAAG,UAAU;QAChC,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAClC,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,iBAAiB,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,MAAM,qBAAqB,GAAG,gBAAgB;QAC5C,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,CAAC;QACxC,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,uBAAuB,GAAG,gBAAgB;QAC9C,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC;QAC/B,CAAC,CAAC,SAAS,CAAA;IACb,OAAO;QACL,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,IAAW;IAC9B,OAAQ,IAA6B,CAAC,OAAO,CAAA;AAC/C,CAAC"}
+{"version":3,"file":"recoveryDelegation.js","sourceRoot":"","sources":["../../src/recovery/recoveryDelegation.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,0BAA0B,CAAA;AAEjC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAAoB,CAAA;AAE9D,wEAAwE;AACxE,2DAA2D;AAC3D,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAE/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,UAAU,EACV,OAAO,EACP,iBAAiB,EACjB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAMjB;IACC,OAAO,UAAU,CAAC,QAAQ,CAAC;QACzB,gBAAgB,EAAE,aAAa,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/D,UAAU,EAAE,iBAAiB;QAC7B,cAAc,EAAE,CAAC,KAAK,CAAC;QACvB,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,0BAA0B,CAAC;KACpD,CAAC,CAAA;AACJ,CAAC;AAED,sEAAsE;AACtE,wCAAwC;AACxC,OAAO,EAAE,oBAAoB,EAAE,CAAA;AAE/B;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,EACvC,UAAU,EACV,gBAAgB,EAIjB;IAMC,MAAM,eAAe,GAAG,UAAU;QAChC,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAClC,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,iBAAiB,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,MAAM,qBAAqB,GAAG,gBAAgB;QAC5C,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,CAAC;QACxC,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,uBAAuB,GAAG,gBAAgB;QAC9C,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC;QAC/B,CAAC,CAAC,SAAS,CAAA;IACb,OAAO;QACL,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,IAAW;IAC9B,OAAQ,IAA6B,CAAC,OAAO,CAAA;AAC/C,CAAC"}

package/dist/space/collections.d.ts

@@ -219,8 +219,8 @@ export declare const DID_DOCUMENT_RESOURCE = "did.json";
  * The world-readable did:webvh history log, a raw JSON-Lines string served as
  * `text/jsonl`: one log entry per line, each a full DID-document snapshot in a
  * hash chain. Sibling of `did.json` in the same `id` collection;
- * `did:webvh:<scid>:<host>:space:<spaceId>:id` resolves to
- * `https://<host>/space/<spaceId>/id/did.jsonl`.
+ * `did:webvh:<scid>:<host>:<prefix...>:space:<spaceId>:id` resolves to
+ * `https://<host>/<prefix>/space/<spaceId>/id/did.jsonl`.
  */
 export declare const DID_LOG_RESOURCE = "did.jsonl";
 /**

package/dist/space/collections.js

@@ -291,8 +291,8 @@ export const DID_DOCUMENT_RESOURCE = 'did.json';
  * The world-readable did:webvh history log, a raw JSON-Lines string served as
  * `text/jsonl`: one log entry per line, each a full DID-document snapshot in a
  * hash chain. Sibling of `did.json` in the same `id` collection;
- * `did:webvh:<scid>:<host>:space:<spaceId>:id` resolves to
- * `https://<host>/space/<spaceId>/id/did.jsonl`.
+ * `did:webvh:<scid>:<host>:<prefix...>:space:<spaceId>:id` resolves to
+ * `https://<host>/<prefix>/space/<spaceId>/id/did.jsonl`.
  */
 export const DID_LOG_RESOURCE = 'did.jsonl';
 /**

package/dist/space/deleteSpace.d.ts

@@ -30,7 +30,7 @@ import type { ZcapClient } from '@interop/ezcap';
  * DELETE against the Space.
  *
  * @param options {object}
- * @param options.storageServerUrl {string}
+ * @param options.baseServerUrl {string}
  * @param options.zcapClient {ZcapClient}   the invoking client
  * @param options.spaceId {string}   the Space to delete
  * @param options.capability {IZcap}   the attached capability (must allow
@@ -43,8 +43,8 @@ import type { ZcapClient } from '@interop/ezcap';
  *   indistinguishable on the wire, so this is not a statement of absence.
  *   Every other error propagates unchanged
  */
-export declare function deleteSpaceWithCapability({ storageServerUrl, zcapClient, spaceId, capability, serviceDescription }: {
-    storageServerUrl: string;
+export declare function deleteSpaceWithCapability({ baseServerUrl, zcapClient, spaceId, capability, serviceDescription }: {
+    baseServerUrl: string;
     zcapClient: ZcapClient;
     spaceId: string;
     capability: IZcap;

package/dist/space/deleteSpace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deleteSpace.d.ts","sourceRoot":"","sources":["../../src/space/deleteSpace.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAa,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAExE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,yBAAyB,CAAC,EAC9C,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,UAAU,EACV,kBAAkB,EACnB,EAAE;IACD,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,KAAK,CAAA;IACjB,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;CACxC,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,GAAG,WAAW,CAAA;CAAE,CAAC,CAOhD"}
+{"version":3,"file":"deleteSpace.d.ts","sourceRoot":"","sources":["../../src/space/deleteSpace.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAa,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,yBAAyB,CAAC,EAC9C,aAAa,EACb,UAAU,EACV,OAAO,EACP,UAAU,EACV,kBAAkB,EACnB,EAAE;IACD,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,KAAK,CAAA;IACjB,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;CACxC,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,GAAG,WAAW,CAAA;CAAE,CAAC,CAOhD"}

package/dist/space/deleteSpace.js

@@ -21,7 +21,6 @@
  * it by its own prior discovery.
  */
 import { WasClient } from '@interop/was-client';
-import { spacesUrl } from '@interop/was-client/paths';
 /**
  * Deletes a Space with an explicitly attached capability, rather than by root
  * invocation. The `zcapClient`'s invocation signer must be a controller of
@@ -29,7 +28,7 @@ import { spacesUrl } from '@interop/was-client/paths';
  * DELETE against the Space.
  *
  * @param options {object}
- * @param options.storageServerUrl {string}
+ * @param options.baseServerUrl {string}
  * @param options.zcapClient {ZcapClient}   the invoking client
  * @param options.spaceId {string}   the Space to delete
  * @param options.capability {IZcap}   the attached capability (must allow
@@ -42,9 +41,9 @@ import { spacesUrl } from '@interop/was-client/paths';
  *   indistinguishable on the wire, so this is not a statement of absence.
  *   Every other error propagates unchanged
  */
-export async function deleteSpaceWithCapability({ storageServerUrl, zcapClient, spaceId, capability, serviceDescription }) {
+export async function deleteSpaceWithCapability({ baseServerUrl, zcapClient, spaceId, capability, serviceDescription }) {
     const was = new WasClient({
-        serverUrl: spacesUrl({ baseUrl: storageServerUrl }),
+        baseServerUrl,
         zcapClient,
         serviceDescription
     });

package/dist/space/deleteSpace.js.map

@@ -1 +1 @@
-{"version":3,"file":"deleteSpace.js","sourceRoot":"","sources":["../../src/space/deleteSpace.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,SAAS,EAA2B,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAIrD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,gBAAgB,EAChB,UAAU,EACV,OAAO,EACP,UAAU,EACV,kBAAkB,EAOnB;IACC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;QACxB,SAAS,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;QACnD,UAAU;QACV,kBAAkB;KACnB,CAAC,CAAA;IACF,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAA;AAC/D,CAAC"}
+{"version":3,"file":"deleteSpace.js","sourceRoot":"","sources":["../../src/space/deleteSpace.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,SAAS,EAA2B,MAAM,qBAAqB,CAAA;AAIxE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,aAAa,EACb,UAAU,EACV,OAAO,EACP,UAAU,EACV,kBAAkB,EAOnB;IACC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;QACxB,aAAa;QACb,UAAU;QACV,kBAAkB;KACnB,CAAC,CAAA;IACF,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAA;AAC/D,CAAC"}

package/dist/space/errors.d.ts

@@ -5,7 +5,7 @@
  * A user-facing error whose `message` is safe to show verbatim. Carries the name
  * `'HumanReadableError'` so an app that classifies errors by `name` (rather than
  * by `instanceof`, which fails across module realms) treats a wallet-core error
- * the same as its own. Thrown by `parseWasLinkPayload` for every malformed /
+ * the same as its own. Thrown by `parsePwsLinkPayload` for every malformed /
  * wrong-version / non-link input.
  */
 export declare class HumanReadableError extends Error {

package/dist/space/errors.js

@@ -5,7 +5,7 @@
  * A user-facing error whose `message` is safe to show verbatim. Carries the name
  * `'HumanReadableError'` so an app that classifies errors by `name` (rather than
  * by `instanceof`, which fails across module realms) treats a wallet-core error
- * the same as its own. Thrown by `parseWasLinkPayload` for every malformed /
+ * the same as its own. Thrown by `parsePwsLinkPayload` for every malformed /
  * wrong-version / non-link input.
  */
 export class HumanReadableError extends Error {

package/dist/space/index.d.ts

@@ -31,8 +31,8 @@
  *   backup-bundle import writes) among them.
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
  *   replicas derive identically.
- * - The `was-link` QR hand-off contract (`buildWasLinkPayload` /
- *   `parseWasLinkPayload` / `encodeWasLinkSecret`) and `isWasLinkPayload`,
+ * - The `pws-link` QR hand-off contract (`buildPwsLinkPayload` /
+ *   `parsePwsLinkPayload` / `encodePwsLinkSecret`) and `isPwsLinkPayload`,
  *   the recognizer a wallet hands `@interop/wallet-request`'s input
  *   classifier.
  * - The inbox message envelope (`InboxGrantMessage`, built by
@@ -50,8 +50,8 @@ export { plaintextCollection } from './plaintextCollection.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryGrant, addHistoryWalletLogin, addHistoryAppRevoke, addHistoryAgentRevoke, addHistoryClientConnected, addHistoryClientRevoked, addHistoryGenerationCollected, addHistoryContentImported, addHistoryProfileCreated, addHistoryCollectionShared, addHistoryCollectionUnshared } from './activity.js';
 export type { WalletActivity, ActivityGrant, ImportCollectionOutcome } from './activity.js';
 export { publicCredentialUrl } from './publicLink.js';
-export { encodeWasLinkSecret, isWasLinkPayload, buildWasLinkPayload, parseWasLinkPayload } from './wasLink.js';
-export type { WasLinkPayload } from './wasLink.js';
+export { encodePwsLinkSecret, isPwsLinkPayload, buildPwsLinkPayload, parsePwsLinkPayload } from './pwsLink.js';
+export type { PwsLinkPayload } from './pwsLink.js';
 export { inboxGrantMessage, parseInboxGrantMessage } from './inboxMessage.js';
 export type { InboxGrantMessage, InboxMessageZcap } from './inboxMessage.js';
 export { HumanReadableError } from './errors.js';

package/dist/space/index.js

@@ -31,8 +31,8 @@
  *   backup-bundle import writes) among them.
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
  *   replicas derive identically.
- * - The `was-link` QR hand-off contract (`buildWasLinkPayload` /
- *   `parseWasLinkPayload` / `encodeWasLinkSecret`) and `isWasLinkPayload`,
+ * - The `pws-link` QR hand-off contract (`buildPwsLinkPayload` /
+ *   `parsePwsLinkPayload` / `encodePwsLinkSecret`) and `isPwsLinkPayload`,
  *   the recognizer a wallet hands `@interop/wallet-request`'s input
  *   classifier.
  * - The inbox message envelope (`InboxGrantMessage`, built by
@@ -48,7 +48,7 @@ export { provisionWalletSpace } from './provisioning.js';
 export { plaintextCollection } from './plaintextCollection.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryGrant, addHistoryWalletLogin, addHistoryAppRevoke, addHistoryAgentRevoke, addHistoryClientConnected, addHistoryClientRevoked, addHistoryGenerationCollected, addHistoryContentImported, addHistoryProfileCreated, addHistoryCollectionShared, addHistoryCollectionUnshared } from './activity.js';
 export { publicCredentialUrl } from './publicLink.js';
-export { encodeWasLinkSecret, isWasLinkPayload, buildWasLinkPayload, parseWasLinkPayload } from './wasLink.js';
+export { encodePwsLinkSecret, isPwsLinkPayload, buildPwsLinkPayload, parsePwsLinkPayload } from './pwsLink.js';
 export { inboxGrantMessage, parseInboxGrantMessage } from './inboxMessage.js';
 export { HumanReadableError } from './errors.js';
 export { CEREMONY_IDS } from './ceremony.js';

package/dist/space/provisioning.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provisioning.d.ts","sourceRoot":"","sources":["../../src/space/provisioning.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAiB,SAAS,EAAE,MAAM,qBAAqB,CAAA;AASnE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,OAAO,EACP,aAAa,EACd,EAAE;IACD,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhB"}
+{"version":3,"file":"provisioning.d.ts","sourceRoot":"","sources":["../../src/space/provisioning.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAiB,SAAS,EAAE,MAAM,qBAAqB,CAAA;AASnE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,OAAO,EACP,aAAa,EACd,EAAE;IACD,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBhB"}

package/dist/space/provisioning.js

@@ -36,19 +36,20 @@ export async function provisionWalletSpace({ was, spaceId, controllerDid }) {
     // each of the roster's branches describe and configure the same Space
     // concurrently -- nine reads and nine racing writes where one of each does,
     // since none of them can observe another's create.
+    const spaceUrl = was.space(spaceId).url;
     const spaceDescription = await ensureSpace({
         was,
-        spaceId,
+        spaceUrl,
         controllerDid,
         spaceName: WALLET_SPACE_NAME
     });
-    await Promise.all(WALLET_SPACE_PROVISION_ROSTER.map(spec => ensureCollection({ was, spaceId, controllerDid, spaceDescription, spec })));
+    await Promise.all(WALLET_SPACE_PROVISION_ROSTER.map(spec => ensureCollection({ was, spaceUrl, controllerDid, spaceDescription, spec })));
 }
-async function ensureCollection({ was, spaceId, controllerDid, spaceDescription, spec: { collectionId, name, encryption, isPublic } }) {
+async function ensureCollection({ was, spaceUrl, controllerDid, spaceDescription, spec: { collectionId, name, encryption, isPublic } }) {
     try {
         await ensureSpaceAndCollection({
             was,
-            spaceId,
+            spaceUrl,
             controllerDid,
             collectionId,
             collectionName: name,
@@ -62,7 +63,7 @@ async function ensureCollection({ was, spaceId, controllerDid, spaceDescription,
         });
     }
     catch (err) {
-        throw new Error(`Error provisioning collection "${collectionId}" in space "${spaceId}".`, { cause: err });
+        throw new Error(`Error provisioning collection "${collectionId}" in Space "${spaceUrl}".`, { cause: err });
     }
 }
 //# sourceMappingURL=provisioning.js.map

package/dist/space/provisioning.js.map

@@ -1 +1 @@
-{"version":3,"file":"provisioning.js","sourceRoot":"","sources":["../../src/space/provisioning.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAEhF,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AAGzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,GAAG,EACH,OAAO,EACP,aAAa,EAKd;IACC,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM,gBAAgB,GAAG,MAAM,WAAW,CAAC;QACzC,GAAG;QACH,OAAO;QACP,aAAa;QACb,SAAS,EAAE,iBAAiB;KAC7B,CAAC,CAAA;IACF,MAAM,OAAO,CAAC,GAAG,CACf,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACvC,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAC1E,CACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,EAC9B,GAAG,EACH,OAAO,EACP,aAAa,EACb,gBAAgB,EAChB,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAOnD;IACC,IAAI,CAAC;QACH,MAAM,wBAAwB,CAAC;YAC7B,GAAG;YACH,OAAO;YACP,aAAa;YACb,YAAY;YACZ,cAAc,EAAE,IAAI;YACpB,oEAAoE;YACpE,sEAAsE;YACtE,iDAAiD;YACjD,UAAU,EAAE,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;YAC1D,QAAQ;YACR,gBAAgB;YAChB,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kCAAkC,YAAY,eAAe,OAAO,IAAI,EACxE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"provisioning.js","sourceRoot":"","sources":["../../src/space/provisioning.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAEhF,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AAGzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,GAAG,EACH,OAAO,EACP,aAAa,EAKd;IACC,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAA;IACvC,MAAM,gBAAgB,GAAG,MAAM,WAAW,CAAC;QACzC,GAAG;QACH,QAAQ;QACR,aAAa;QACb,SAAS,EAAE,iBAAiB;KAC7B,CAAC,CAAA;IACF,MAAM,OAAO,CAAC,GAAG,CACf,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACvC,gBAAgB,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAC3E,CACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,EAC9B,GAAG,EACH,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAOnD;IACC,IAAI,CAAC;QACH,MAAM,wBAAwB,CAAC;YAC7B,GAAG;YACH,QAAQ;YACR,aAAa;YACb,YAAY;YACZ,cAAc,EAAE,IAAI;YACpB,oEAAoE;YACpE,sEAAsE;YACtE,iDAAiD;YACjD,UAAU,EAAE,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;YAC1D,QAAQ;YACR,gBAAgB;YAChB,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kCAAkC,YAAY,eAAe,QAAQ,IAAI,EACzE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/space/publicLink.d.ts

@@ -1,18 +1,18 @@
 /**
  * The absolute, world-readable URL of a credential's shared copy:
- * `{serverUrl}/space/{spaceId}/public-credentials/{cid}`. Takes the server URL,
+ * `{baseServerUrl}/space/{spaceId}/public-credentials/{cid}`. Takes the server URL,
  * Space id, and credential cid as arguments, with no dependency on app config.
  * The path is joined onto the server URL's base path (a sub-path deployment
  * keeps its prefix), and each segment is percent-encoded by the builder.
  *
  * @param options {object}
- * @param options.serverUrl {string}   the WAS storage server base URL
+ * @param options.baseServerUrl {string}   the server's base server URL
  * @param options.spaceId {string}   the profile's WAS Space id
  * @param options.cid {string}   the credential's content cid
  * @returns {string}
  */
-export declare function publicCredentialUrl({ serverUrl, spaceId, cid }: {
-    serverUrl: string;
+export declare function publicCredentialUrl({ baseServerUrl, spaceId, cid }: {
+    baseServerUrl: string;
     spaceId: string;
     cid: string;
 }): string;

package/dist/space/publicLink.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publicLink.d.ts","sourceRoot":"","sources":["../../src/space/publicLink.ts"],"names":[],"mappings":"AAoBA;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,SAAS,EACT,OAAO,EACP,GAAG,EACJ,EAAE;IACD,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,MAAM,CAKT"}
+{"version":3,"file":"publicLink.d.ts","sourceRoot":"","sources":["../../src/space/publicLink.ts"],"names":[],"mappings":"AAoBA;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,aAAa,EACb,OAAO,EACP,GAAG,EACJ,EAAE;IACD,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,MAAM,CAMT"}

package/dist/space/publicLink.js

@@ -6,7 +6,7 @@
  * into the profile's `public-credentials` collection, keyed by the credential's
  * content cid; once replication mirrors it to the profile's WAS Space it
  * resolves at the URL below. Both wallet replicas build the identical URL for a
- * given `(serverUrl, spaceId, cid)`, so a link handed out by one resolves the
+ * given `(baseServerUrl, spaceId, cid)`, so a link handed out by one resolves the
  * copy replicated by the other.
  *
  * The URL is assembled by was-client's path builders, the one owner of the WAS
@@ -15,25 +15,26 @@
  * sub-path deployment keeps its prefix and the link addresses the same URL the
  * client wrote to.
  */
-import { resourcePath, toUrl } from '@interop/was-client/paths';
+import { resourceUrl, spaceUrlById } from '@interop/was-client/paths';
 import { PUBLIC_CREDENTIALS_COLLECTION } from './collections.js';
 /**
  * The absolute, world-readable URL of a credential's shared copy:
- * `{serverUrl}/space/{spaceId}/public-credentials/{cid}`. Takes the server URL,
+ * `{baseServerUrl}/space/{spaceId}/public-credentials/{cid}`. Takes the server URL,
  * Space id, and credential cid as arguments, with no dependency on app config.
  * The path is joined onto the server URL's base path (a sub-path deployment
  * keeps its prefix), and each segment is percent-encoded by the builder.
  *
  * @param options {object}
- * @param options.serverUrl {string}   the WAS storage server base URL
+ * @param options.baseServerUrl {string}   the server's base server URL
  * @param options.spaceId {string}   the profile's WAS Space id
  * @param options.cid {string}   the credential's content cid
  * @returns {string}
  */
-export function publicCredentialUrl({ serverUrl, spaceId, cid }) {
-    return toUrl({
-        baseUrl: serverUrl,
-        path: resourcePath(spaceId, PUBLIC_CREDENTIALS_COLLECTION, cid)
+export function publicCredentialUrl({ baseServerUrl, spaceId, cid }) {
+    return resourceUrl({
+        spaceUrl: spaceUrlById({ baseServerUrl, spaceId }),
+        collectionId: PUBLIC_CREDENTIALS_COLLECTION,
+        resourceId: cid
     });
 }
 //# sourceMappingURL=publicLink.js.map

package/dist/space/publicLink.js.map

@@ -1 +1 @@
-{"version":3,"file":"publicLink.js","sourceRoot":"","sources":["../../src/space/publicLink.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAA;AAEhE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,SAAS,EACT,OAAO,EACP,GAAG,EAKJ;IACC,OAAO,KAAK,CAAC;QACX,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,6BAA6B,EAAE,GAAG,CAAC;KAChE,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"publicLink.js","sourceRoot":"","sources":["../../src/space/publicLink.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAA;AAEhE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,aAAa,EACb,OAAO,EACP,GAAG,EAKJ;IACC,OAAO,WAAW,CAAC;QACjB,QAAQ,EAAE,YAAY,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QAClD,YAAY,EAAE,6BAA6B;QAC3C,UAAU,EAAE,GAAG;KAChB,CAAC,CAAA;AACJ,CAAC"}

package/dist/space/pwsLink.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The decoded link: the base server URL plus the controller secret AS A
+ * STRING.
+ */
+export interface PwsLinkPayload {
+    baseServerUrl: string;
+    /**
+     * The controller secret (already decoded back to the passphrase string).
+     */
+    secret: string;
+}
+/**
+ * The `t` discriminator member every `pws-link` payload carries.
+ */
+export declare const PWS_LINK_TYPE = "pws-link";
+/**
+ * Whether some scanned or pasted text has a `pws-link` payload's JSON shape.
+ * Matched structurally on the `t` member rather than by calling the parser,
+ * so an unrelated JSON blob is not refused with a connection-code error
+ * message. This is the recognizer a wallet hands `@interop/wallet-request`'s
+ * input classifier for its `pws-link` branch; whether the payload is valid
+ * is {@link parsePwsLinkPayload}'s answer.
+ *
+ * @param text {string}
+ * @returns {boolean}
+ */
+export declare function isPwsLinkPayload(text: string): boolean;
+/**
+ * Encodes a passphrase into the payload's `secret` field: `base64url(utf8(...))`,
+ * no padding.
+ *
+ * @param passphrase {string}
+ * @returns {string}
+ */
+export declare function encodePwsLinkSecret(passphrase: string): string;
+/**
+ * Builds the full `pws-link` payload string a QR encodes.
+ *
+ * @param options {object}
+ * @param options.baseServerUrl {string}   the server's base server URL
+ * @param options.passphrase {string}
+ * @returns {string}
+ */
+export declare function buildPwsLinkPayload({ baseServerUrl, passphrase }: {
+    baseServerUrl: string;
+    passphrase: string;
+}): string;
+/**
+ * Parses and validates a scanned payload, returning the base server URL and the
+ * decoded string secret. Throws {@link HumanReadableError} for anything that is
+ * not a valid current-version `pws-link` payload (so the scanner shows a clean
+ * message rather than mis-handling an unrelated QR).
+ *
+ * @param raw {string}   the raw scanned code value
+ * @returns {PwsLinkPayload}
+ */
+export declare function parsePwsLinkPayload(raw: string): PwsLinkPayload;
+//# sourceMappingURL=pwsLink.d.ts.map

package/dist/space/pwsLink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pwsLink.d.ts","sourceRoot":"","sources":["../../src/space/pwsLink.ts"],"names":[],"mappings":"AAoBA;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAA;IACrB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,aAAa,CAAA;AAEvC;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAgBtD;AA6CD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,aAAa,EACb,UAAU,EACX,EAAE;IACD,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,MAAM,CAOT;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAyC/D"}

package/dist/space/{wasLink.js → pwsLink.js}

@@ -2,33 +2,37 @@
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
 /**
- * The `was-link` QR hand-off payload -- the "Connect mobile wallet" flow where
+ * The `pws-link` QR hand-off payload -- the "Connect mobile wallet" flow where
  * the web wallet displays a QR that carries an account's controller secret and
  * the mobile wallet scans it.
  *
  * The payload is a NON-URL JSON blob (deliberately not a link, so the OS camera
  * app / deep-link handling never routes it and it cannot leak into browser
  * history or link-preview fetchers). It is accepted only by the in-app scanner.
- * Shape: `{ v: 1, t: 'was-link', serverUrl, secret: base64url(utf8(passphrase)) }`.
+ * Shape:
+ * `{ v: 1, t: 'pws-link', baseServerUrl, secret: base64url(utf8(passphrase)) }`.
+ * `baseServerUrl` is the server's base server URL, the one the receiving
+ * wallet builds its client from; the account itself is reached through the
+ * keyring record the secret unlocks, so the link carries no DID.
  */
 import { base64urlnopad } from '@scure/base';
 import { HumanReadableError } from './errors.js';
 /**
- * The `t` discriminator member every `was-link` payload carries.
+ * The `t` discriminator member every `pws-link` payload carries.
  */
-export const WAS_LINK_TYPE = 'was-link';
+export const PWS_LINK_TYPE = 'pws-link';
 /**
- * Whether some scanned or pasted text has a `was-link` payload's JSON shape.
+ * Whether some scanned or pasted text has a `pws-link` payload's JSON shape.
  * Matched structurally on the `t` member rather than by calling the parser,
  * so an unrelated JSON blob is not refused with a connection-code error
  * message. This is the recognizer a wallet hands `@interop/wallet-request`'s
- * input classifier for its `was-link` branch; whether the payload is valid
- * is {@link parseWasLinkPayload}'s answer.
+ * input classifier for its `pws-link` branch; whether the payload is valid
+ * is {@link parsePwsLinkPayload}'s answer.
  *
  * @param text {string}
  * @returns {boolean}
  */
-export function isWasLinkPayload(text) {
+export function isPwsLinkPayload(text) {
     const trimmed = text.trim();
     if (!trimmed.startsWith('{')) {
         return false;
@@ -42,7 +46,7 @@ export function isWasLinkPayload(text) {
     }
     return (parsed !== null &&
         typeof parsed === 'object' &&
-        parsed.t === WAS_LINK_TYPE);
+        parsed.t === PWS_LINK_TYPE);
 }
 const NOT_A_LINK = 'This QR code is not a wallet connection code.';
 const BAD_SERVER = 'Connection code points at an insecure or invalid server and was rejected.';
@@ -53,22 +57,23 @@ function stripPadding(value) {
     return value.replace(/=+$/, '');
 }
 /**
- * Validates the scanned `serverUrl` before the wallet ever signs a request to
- * it. The code carries the controller secret in the clear, so a bad `serverUrl`
- * would let a crafted QR aim capability-signed requests (and the secret) at an
- * attacker-controlled or cleartext host. Requires a parseable `https:` URL;
- * plain `http:` is allowed ONLY for loopback dev hosts.
+ * Validates the scanned `baseServerUrl` before the wallet ever signs a
+ * request to it. The code carries the controller secret in the clear, so a
+ * bad base would let a crafted QR aim capability-signed requests (and the
+ * secret) at an attacker-controlled or cleartext host. Requires a parseable
+ * `https:` URL; plain `http:` is allowed ONLY for loopback dev hosts.
  *
  * This is a scheme/host rule, not an allowlist: the payload carries its own
- * `serverUrl`, and there is no app-configured set of permitted servers to inject
- * -- a connection code names the storage server the user is joining. If a
- * consuming app later needs to constrain the host further, that check belongs at
- * the call site, on the returned {@link WasLinkPayload.serverUrl}.
+ * base server URL, and there is no app-configured set of permitted servers
+ * to inject -- a connection code names the storage server the user is
+ * joining. If a consuming app later needs to constrain the host further, that
+ * check belongs at the call site, on the returned
+ * {@link PwsLinkPayload.baseServerUrl}.
  */
-function assertValidServerUrl(serverUrl) {
+function assertValidBaseServerUrl(baseServerUrl) {
     let url;
     try {
-        url = new URL(serverUrl);
+        url = new URL(baseServerUrl);
     }
     catch {
         throw new HumanReadableError(BAD_SERVER);
@@ -89,35 +94,35 @@ function assertValidServerUrl(serverUrl) {
  * @param passphrase {string}
  * @returns {string}
  */
-export function encodeWasLinkSecret(passphrase) {
+export function encodePwsLinkSecret(passphrase) {
     return base64urlnopad.encode(new TextEncoder().encode(passphrase));
 }
 /**
- * Builds the full `was-link` payload string a QR encodes.
+ * Builds the full `pws-link` payload string a QR encodes.
  *
  * @param options {object}
- * @param options.serverUrl {string}
+ * @param options.baseServerUrl {string}   the server's base server URL
  * @param options.passphrase {string}
  * @returns {string}
  */
-export function buildWasLinkPayload({ serverUrl, passphrase }) {
+export function buildPwsLinkPayload({ baseServerUrl, passphrase }) {
     return JSON.stringify({
         v: 1,
-        t: WAS_LINK_TYPE,
-        serverUrl,
-        secret: encodeWasLinkSecret(passphrase)
+        t: PWS_LINK_TYPE,
+        baseServerUrl,
+        secret: encodePwsLinkSecret(passphrase)
     });
 }
 /**
- * Parses and validates a scanned payload, returning the server URL and the
+ * Parses and validates a scanned payload, returning the base server URL and the
  * decoded string secret. Throws {@link HumanReadableError} for anything that is
- * not a valid current-version `was-link` payload (so the scanner shows a clean
+ * not a valid current-version `pws-link` payload (so the scanner shows a clean
  * message rather than mis-handling an unrelated QR).
  *
  * @param raw {string}   the raw scanned code value
- * @returns {WasLinkPayload}
+ * @returns {PwsLinkPayload}
  */
-export function parseWasLinkPayload(raw) {
+export function parsePwsLinkPayload(raw) {
     let parsed;
     try {
         parsed = JSON.parse(raw);
@@ -128,17 +133,17 @@ export function parseWasLinkPayload(raw) {
     if (typeof parsed !== 'object' || parsed === null) {
         throw new HumanReadableError(NOT_A_LINK);
     }
-    const { v, t, serverUrl, secret } = parsed;
-    if (t !== WAS_LINK_TYPE) {
+    const { v, t, baseServerUrl, secret } = parsed;
+    if (t !== PWS_LINK_TYPE) {
         throw new HumanReadableError(NOT_A_LINK);
     }
     if (v !== 1) {
         throw new HumanReadableError('This connection code is from a newer app version. Please update.');
     }
-    if (typeof serverUrl !== 'string' || serverUrl.length === 0) {
+    if (typeof baseServerUrl !== 'string' || baseServerUrl.length === 0) {
         throw new HumanReadableError('Connection code is missing its server.');
     }
-    assertValidServerUrl(serverUrl);
+    assertValidBaseServerUrl(baseServerUrl);
     if (typeof secret !== 'string' || secret.length === 0) {
         throw new HumanReadableError('Connection code is missing its secret.');
     }
@@ -152,6 +157,6 @@ export function parseWasLinkPayload(raw) {
     if (secretText.length === 0) {
         throw new HumanReadableError('Connection code has an empty secret.');
     }
-    return { serverUrl, secret: secretText };
+    return { baseServerUrl, secret: secretText };
 }
-//# sourceMappingURL=wasLink.js.map
+//# sourceMappingURL=pwsLink.js.map

package/dist/space/pwsLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pwsLink.js","sourceRoot":"","sources":["../../src/space/pwsLink.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAchD;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAA;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,CACL,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QACzB,MAA0B,CAAC,CAAC,KAAK,aAAa,CAChD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,GAAG,+CAA+C,CAAA;AAClE,MAAM,UAAU,GACd,2EAA2E,CAAA;AAE7E;;GAEG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AACjC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,wBAAwB,CAAC,aAAqB;IACrD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IACD,MAAM,UAAU,GACd,GAAG,CAAC,QAAQ,KAAK,WAAW;QAC5B,GAAG,CAAC,QAAQ,KAAK,WAAW;QAC5B,uDAAuD;QACvD,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAA;IAC1B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;QAC1E,OAAM;IACR,CAAC;IACD,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,aAAa,EACb,UAAU,EAIX;IACC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,CAAC,EAAE,CAAC;QACJ,CAAC,EAAE,aAAa;QAChB,aAAa;QACb,MAAM,EAAE,mBAAmB,CAAC,UAAU,CAAC;KACxC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAiC,CAAA;IACzE,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,kBAAkB,CAC1B,kEAAkE,CACnE,CAAA;IACH,CAAC;IACD,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAA;IACxE,CAAC;IACD,wBAAwB,CAAC,aAAa,CAAC,CAAA;IACvC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAA;IACxE,CAAC;IAED,IAAI,UAAkB,CAAA;IACtB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACnC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAC5C,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;AAC9C,CAAC"}