@interop/wallet-core 0.19.0 → 0.21.0

package/README.md

@@ -44,7 +44,8 @@ The subpaths:
   apps must perform byte-for-byte identically: `agentsFromSecret` /
   `agentsFromSeed` (controller secret or 32-byte seed to the did:key
   `CapabilityAgent`, `ZcapClient`, X25519 key agreement key, and single-key
-  resolver, under the fixed bootstrap handle / key name) and
+  resolver, under the fixed bootstrap handle / key name), `agentsFromKeyAgent`
+  (the same assembly from a `CapabilityAgent` an app derived itself), and
   `singleKeyResolver`.
 
 - **`@interop/wallet-core/request`** -- wallet-request / exchange protocol

package/dist/identity/agents.d.ts

@@ -65,4 +65,20 @@ export declare function agentsFromSeed({ seed }: {
 export declare function agentsFromSecret({ secret }: {
     secret: string;
 }): Promise<ProfileAgents>;
+/**
+ * Assembles the derived agents -- signer, `ZcapClient`, key agreement key (the
+ * Ed25519-to-X25519 Montgomery conversion), and single-key resolver -- from an
+ * already-derived `CapabilityAgent`. The shared tail of both derivations here,
+ * and exported because downstream packages derive their own `CapabilityAgent`
+ * (from an app seed, under their own handle / key name) and then need this same
+ * assembly: keeping it in one place means the Montgomery conversion that every
+ * encrypted collection is read with has exactly one implementation.
+ *
+ * @param options {object}
+ * @param options.keyAgent {CapabilityAgent}   the derived signing agent
+ * @returns {ProfileAgents}
+ */
+export declare function agentsFromKeyAgent({ keyAgent }: {
+    keyAgent: CapabilityAgent;
+}): ProfileAgents;
 //# sourceMappingURL=agents.d.ts.map

package/dist/identity/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/identity/agents.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAE3C,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACb,MAAM,8BAA8B,CAAA;AAGrC;;;GAGG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C,eAAO,MAAM,kBAAkB,iBAAiB,CAAA;AAEhD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,eAAe,CAAA;IACzB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,EACnC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,aAAa,CAAC,CAOzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,MAAM,EACP,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,aAAa,CAAC,CAOzB"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/identity/agents.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAE3C,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACb,MAAM,8BAA8B,CAAA;AAGrC;;;GAGG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C,eAAO,MAAM,kBAAkB,iBAAiB,CAAA;AAEhD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,eAAe,CAAA;IACzB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,EACnC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,aAAa,CAAC,CAOzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,MAAM,EACP,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,aAAa,CAAC,CAOzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,QAAQ,EACT,EAAE;IACD,QAAQ,EAAE,eAAe,CAAA;CAC1B,GAAG,aAAa,CAyBhB"}

package/dist/identity/agents.js

@@ -66,10 +66,19 @@ export async function agentsFromSecret({ secret }) {
     return agentsFromKeyAgent({ keyAgent });
 }
 /**
- * The shared tail of both derivations: ZcapClient + KAK + resolver from the
- * bootstrap CapabilityAgent.
+ * Assembles the derived agents -- signer, `ZcapClient`, key agreement key (the
+ * Ed25519-to-X25519 Montgomery conversion), and single-key resolver -- from an
+ * already-derived `CapabilityAgent`. The shared tail of both derivations here,
+ * and exported because downstream packages derive their own `CapabilityAgent`
+ * (from an app seed, under their own handle / key name) and then need this same
+ * assembly: keeping it in one place means the Montgomery conversion that every
+ * encrypted collection is read with has exactly one implementation.
+ *
+ * @param options {object}
+ * @param options.keyAgent {CapabilityAgent}   the derived signing agent
+ * @returns {ProfileAgents}
  */
-function agentsFromKeyAgent({ keyAgent }) {
+export function agentsFromKeyAgent({ keyAgent }) {
     const signer = keyAgent.getSigner();
     const zcapClient = new ZcapClient({
         SuiteClass: Ed25519Signature2020,

package/dist/identity/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/identity/agents.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAK7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAA;AAehD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,IAAI,EAGL;IACC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC;QAC9C,IAAI;QACJ,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,kBAAkB;KAC5B,CAAC,CAAA;IACF,OAAO,kBAAkB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,MAAM,EAGP;IACC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC;QAChD,MAAM;QACN,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,kBAAkB;KAC5B,CAAC,CAAA;IACF,OAAO,kBAAkB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AACzC,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,EAC1B,QAAQ,EAGT;IACC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAA;IACnC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;QAChC,UAAU,EAAE,oBAAoB;QAChC,gBAAgB,EAAE,MAAM;QACxB,sEAAsE;QACtE,WAAW;QACX,gBAAgB,EAAE,MAAM;KACzB,CAAC,CAAA;IAEF,MAAM,eAAe,GACnB,yBAAyB,CAAC,8BAA8B,CAAC;QACvD,OAAO,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC3C,CAAC,CAAA;IACJ,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;IAE1D,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,EAAE;QAC1B,QAAQ;QACR,UAAU;QACV,mEAAmE;QACnE,iEAAiE;QACjE,eAAe,EAAE,eAAmC;QACpD,WAAW;KACZ,CAAA;AACH,CAAC"}
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/identity/agents.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAK7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAA;AAehD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,IAAI,EAGL;IACC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC;QAC9C,IAAI;QACJ,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,kBAAkB;KAC5B,CAAC,CAAA;IACF,OAAO,kBAAkB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,MAAM,EAGP;IACC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC;QAChD,MAAM;QACN,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,kBAAkB;KAC5B,CAAC,CAAA;IACF,OAAO,kBAAkB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,QAAQ,EAGT;IACC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAA;IACnC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;QAChC,UAAU,EAAE,oBAAoB;QAChC,gBAAgB,EAAE,MAAM;QACxB,sEAAsE;QACtE,WAAW;QACX,gBAAgB,EAAE,MAAM;KACzB,CAAC,CAAA;IAEF,MAAM,eAAe,GACnB,yBAAyB,CAAC,8BAA8B,CAAC;QACvD,OAAO,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC3C,CAAC,CAAA;IACJ,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;IAE1D,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,EAAE;QAC1B,QAAQ;QACR,UAAU;QACV,mEAAmE;QACnE,iEAAiE;QACjE,eAAe,EAAE,eAAmC;QACpD,WAAW;KACZ,CAAA;AACH,CAAC"}

package/dist/identity/index.d.ts

@@ -8,13 +8,15 @@
  * - `agentsFromSecret` / `agentsFromSeed` -- controller secret or 32-byte seed
  *   to `ProfileAgents` (did:key CapabilityAgent, ZcapClient, X25519 KAK,
  *   single-key resolver) under the fixed bootstrap handle / key name.
+ * - `agentsFromKeyAgent` -- the same assembly from a CapabilityAgent an app
+ *   derived itself, so the Montgomery conversion has one implementation.
  * - `singleKeyResolver` -- the one-key `IKeyResolver` factory (also used by
  *   app-side derivations such as a keyring unlock identity).
  *
  * Kept out of the root export: this subpath pulls the webkms-client / ezcap /
  * x25519 dependency graph (the same isolation pattern as `./request`).
  */
-export { BOOTSTRAP_HANDLE, BOOTSTRAP_KEY_NAME, agentsFromSecret, agentsFromSeed } from './agents.js';
+export { BOOTSTRAP_HANDLE, BOOTSTRAP_KEY_NAME, agentsFromKeyAgent, agentsFromSecret, agentsFromSeed } from './agents.js';
 export type { ProfileAgents } from './agents.js';
 export { singleKeyResolver } from './keyResolver.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACf,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACf,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/identity/index.js

@@ -8,12 +8,14 @@
  * - `agentsFromSecret` / `agentsFromSeed` -- controller secret or 32-byte seed
  *   to `ProfileAgents` (did:key CapabilityAgent, ZcapClient, X25519 KAK,
  *   single-key resolver) under the fixed bootstrap handle / key name.
+ * - `agentsFromKeyAgent` -- the same assembly from a CapabilityAgent an app
+ *   derived itself, so the Montgomery conversion has one implementation.
  * - `singleKeyResolver` -- the one-key `IKeyResolver` factory (also used by
  *   app-side derivations such as a keyring unlock identity).
  *
  * Kept out of the root export: this subpath pulls the webkms-client / ezcap /
  * x25519 dependency graph (the same isolation pattern as `./request`).
  */
-export { BOOTSTRAP_HANDLE, BOOTSTRAP_KEY_NAME, agentsFromSecret, agentsFromSeed } from './agents.js';
+export { BOOTSTRAP_HANDLE, BOOTSTRAP_KEY_NAME, agentsFromKeyAgent, agentsFromSecret, agentsFromSeed } from './agents.js';
 export { singleKeyResolver } from './keyResolver.js';
 //# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACf,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACf,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/space/collections.d.ts

@@ -1,20 +1,9 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
 /**
- * The shared wallet Space layout: the collection ids and descriptive specs both
- * wallet replicas provision, so a credential written by one is found and read by
- * the other. Both replicas MUST agree on every field here -- `collectionId`
- * decides where a document lands on the server, `idDerivation` and `mutable`
- * decide whether it is overwritten in place or only appended, and `encryption` /
- * `isPublic` decide how it is stored and who can read it. A disagreement splits
- * the feed into separate or incompatibly-shaped collections that never converge.
- *
- * The contacts collections (`contacts`, `contacts-history`) are NOT declared
- * here: their ids and specs live in `@interop/social-core`
- * (`CONTACTS_COLLECTION_SPEC` / `CONTACTS_HISTORY_COLLECTION_SPEC`), which apps
- * import directly. The field vocabulary below mirrors that spec.
+ * The app-neutral display name every wallet passes when provisioning the
+ * shared Space (`space.configure({ name })` re-runs on provisioning, so a
+ * per-app name would flip to whichever wallet provisioned last).
  */
+export declare const WALLET_SPACE_NAME = "Wallet Space";
 /**
  * The immutable, content-addressed, EDV-encrypted credential replica.
  */
@@ -28,27 +17,37 @@ export declare const PUBLIC_CREDENTIALS_COLLECTION = "public-credentials";
  */
 export declare const WALLET_ACTIVITY_COLLECTION = "wallet-activity";
 /**
- * A declarative descriptor of a synced wallet Space collection, aligned with
- * `@interop/social-core`'s `CONTACTS_COLLECTION_SPEC` vocabulary and extended
- * with the storage attributes the wallet Space needs:
+ * What provisioning a wallet Space collection needs: the collection id, the
+ * friendly display name both wallets pass as the server-side collection name,
+ * and the storage attributes --
  *
- * - `idDerivation` -- `'content'` for an append-only, content-addressed log (the
- *   id IS the hash of the stored body) or `'random'` for a mutable head (a
- *   stable id whose body is overwritten).
- * - `mutable` -- whether a document is overwritten in place (`true`) or only
- *   ever appended (`false`).
  * - `encryption` -- `'edv'` stores each document as an EDV envelope; `'plaintext'`
  *   stores it verbatim.
  * - `isPublic` -- whether the collection is granted collection-level world read
  *   on the server.
  */
-export interface SpaceCollectionSpec {
+export interface SpaceProvisionSpec {
     collectionId: string;
-    idDerivation: 'content' | 'random';
-    mutable: boolean;
+    name: string;
     encryption: 'edv' | 'plaintext';
     isPublic: boolean;
 }
+/**
+ * A declarative descriptor of a synced wallet Space collection: the
+ * provisioning attributes plus the document-identity contract the replication
+ * engines need, aligned with `@interop/social-core`'s
+ * `CONTACTS_COLLECTION_SPEC` vocabulary --
+ *
+ * - `idDerivation` -- `'content'` for an append-only, content-addressed log (the
+ *   id IS the hash of the stored body) or `'random'` for a mutable head (a
+ *   stable id whose body is overwritten).
+ * - `mutable` -- whether a document is overwritten in place (`true`) or only
+ *   ever appended (`false`).
+ */
+export interface SpaceCollectionSpec extends SpaceProvisionSpec {
+    idDerivation: 'content' | 'random';
+    mutable: boolean;
+}
 /**
  * The immutable credential replica: each credential stored as an EDV envelope,
  * addressed by the envelope's content hash, never overwritten, never public.
@@ -67,9 +66,19 @@ export declare const PUBLIC_CREDENTIALS_COLLECTION_SPEC: SpaceCollectionSpec;
  */
 export declare const WALLET_ACTIVITY_COLLECTION_SPEC: SpaceCollectionSpec;
 /**
- * The wallet Space's own (non-contacts) collection specs, in provision order.
+ * The contacts head collection as it sits in the wallet Space: the identity
+ * contract (`collectionId`, `idDerivation`, `mutable`) spread from
+ * `@interop/social-core`'s `CONTACTS_COLLECTION_SPEC` (which stays its owner),
+ * plus the storage attributes that are wallet-Space layout -- each contact a
+ * mutable EDV envelope, never public.
  */
-export declare const WALLET_SPACE_COLLECTION_SPECS: SpaceCollectionSpec[];
+export declare const CONTACTS_SPACE_COLLECTION_SPEC: SpaceCollectionSpec;
+/**
+ * The contacts history log in the wallet Space: identity contract spread from
+ * `@interop/social-core`'s `CONTACTS_HISTORY_COLLECTION_SPEC`, stored as
+ * append-only, content-addressed EDV envelopes, never public.
+ */
+export declare const CONTACTS_HISTORY_SPACE_COLLECTION_SPEC: SpaceCollectionSpec;
 /**
  * The system collections and resource names that carry an account's identity
  * and key material. They sit deliberately OUTSIDE the synced collection specs
@@ -100,6 +109,37 @@ export declare const KEYRING_COLLECTION: {
     id: string;
     name: string;
 };
+/**
+ * The `id` collection's provisioning attributes: plaintext (it holds only
+ * world-readable DID artifacts) with a collection-level public-read grant.
+ */
+export declare const ID_COLLECTION_SPEC: SpaceProvisionSpec;
+/**
+ * The `key-map` collection's provisioning attributes: plaintext (its resources
+ * are wrap-sets and key-id maps, protected by capability, not by an EDV
+ * envelope) and capability-only -- never public, exactly so `id` can be
+ * world-readable without exposing key material.
+ */
+export declare const KEY_MAP_COLLECTION_SPEC: SpaceProvisionSpec;
+/**
+ * The synced wallet Space collections, in provision order: the feeds a wallet
+ * both provisions and replicates (each gets a local replica and a sync engine).
+ */
+export declare const WALLET_SPACE_SYNCED_SPECS: SpaceCollectionSpec[];
+/**
+ * The provisioned-but-not-synced system collections: part of every wallet
+ * Space's layout, but no wallet mints a replication feed for them -- their
+ * resources (`did.json`, `keys.json`, `user-key.json`, ...) are read and
+ * written directly. `keyring` is deliberately absent: it lives in the separate
+ * unlock Space, never in the wallet data Space this roster lays out.
+ */
+export declare const WALLET_SPACE_SYSTEM_SPECS: SpaceProvisionSpec[];
+/**
+ * The full wallet Space layout -- every collection the provisioning wallet
+ * ensures, synced feeds first. A Space provisioned from this roster is
+ * identical no matter which wallet app created it.
+ */
+export declare const WALLET_SPACE_PROVISION_ROSTER: SpaceProvisionSpec[];
 /**
  * The world-readable DID document, served as `application/did+json`.
  */

package/dist/space/collections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH;;GAEG;AACH,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE;;GAEG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAMjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAMhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAM7C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,6BAA6B,EAAE,mBAAmB,EAI9D,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa;;;CAAiC,CAAA;AAC3D,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AACpE,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AAEpE;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,kBAAkB,CAAA;AACvD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D;;GAEG;AACH,eAAO,MAAM,gBAAgB,iBAAiB,CAAA"}
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAyBA;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,iBAAiB,CAAA;AAE/C;;GAEG;AACH,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE;;GAEG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAOjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAOhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAO7C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,mBAK5C,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,EAAE,mBAKpD,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa;;;CAAiC,CAAA;AAC3D,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AACpE,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AAEpE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,kBAKhC,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,kBAKrC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,mBAAmB,EAM1D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,kBAAkB,EAGzD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,kBAAkB,EAG7D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,kBAAkB,CAAA;AACvD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D;;GAEG;AACH,eAAO,MAAM,gBAAgB,iBAAiB,CAAA"}

package/dist/space/collections.js

@@ -10,11 +10,21 @@
  * `isPublic` decide how it is stored and who can read it. A disagreement splits
  * the feed into separate or incompatibly-shaped collections that never converge.
  *
- * The contacts collections (`contacts`, `contacts-history`) are NOT declared
- * here: their ids and specs live in `@interop/social-core`
- * (`CONTACTS_COLLECTION_SPEC` / `CONTACTS_HISTORY_COLLECTION_SPEC`), which apps
- * import directly. The field vocabulary below mirrors that spec.
+ * The contacts collections (`contacts`, `contacts-history`) keep their identity
+ * contract (`collectionId`, `idDerivation`, `mutable`) in `@interop/social-core`
+ * (`CONTACTS_COLLECTION_SPEC` / `CONTACTS_HISTORY_COLLECTION_SPEC`) -- the field
+ * vocabulary below mirrors that spec. This module does not redeclare those
+ * fields; the wallet-Space rosters spread them in and add only the storage
+ * attributes that are wallet-Space layout (display name, `encryption`,
+ * `isPublic`).
+ */
+import { CONTACTS_COLLECTION_SPEC, CONTACTS_HISTORY_COLLECTION_SPEC } from '@interop/social-core';
+/**
+ * The app-neutral display name every wallet passes when provisioning the
+ * shared Space (`space.configure({ name })` re-runs on provisioning, so a
+ * per-app name would flip to whichever wallet provisioned last).
  */
+export const WALLET_SPACE_NAME = 'Wallet Space';
 /**
  * The immutable, content-addressed, EDV-encrypted credential replica.
  */
@@ -33,6 +43,7 @@ export const WALLET_ACTIVITY_COLLECTION = 'wallet-activity';
  */
 export const PRIVATE_CREDENTIALS_COLLECTION_SPEC = {
     collectionId: PRIVATE_CREDENTIALS_COLLECTION,
+    name: 'Verifiable Credentials',
     idDerivation: 'content',
     mutable: false,
     encryption: 'edv',
@@ -45,6 +56,7 @@ export const PRIVATE_CREDENTIALS_COLLECTION_SPEC = {
  */
 export const PUBLIC_CREDENTIALS_COLLECTION_SPEC = {
     collectionId: PUBLIC_CREDENTIALS_COLLECTION,
+    name: 'Verifiable Credentials (Publicly Shared)',
     idDerivation: 'content',
     mutable: false,
     encryption: 'plaintext',
@@ -57,19 +69,36 @@ export const PUBLIC_CREDENTIALS_COLLECTION_SPEC = {
  */
 export const WALLET_ACTIVITY_COLLECTION_SPEC = {
     collectionId: WALLET_ACTIVITY_COLLECTION,
+    name: 'Wallet Activity Log',
     idDerivation: 'content',
     mutable: false,
     encryption: 'edv',
     isPublic: false
 };
 /**
- * The wallet Space's own (non-contacts) collection specs, in provision order.
+ * The contacts head collection as it sits in the wallet Space: the identity
+ * contract (`collectionId`, `idDerivation`, `mutable`) spread from
+ * `@interop/social-core`'s `CONTACTS_COLLECTION_SPEC` (which stays its owner),
+ * plus the storage attributes that are wallet-Space layout -- each contact a
+ * mutable EDV envelope, never public.
+ */
+export const CONTACTS_SPACE_COLLECTION_SPEC = {
+    ...CONTACTS_COLLECTION_SPEC,
+    name: 'Contacts',
+    encryption: 'edv',
+    isPublic: false
+};
+/**
+ * The contacts history log in the wallet Space: identity contract spread from
+ * `@interop/social-core`'s `CONTACTS_HISTORY_COLLECTION_SPEC`, stored as
+ * append-only, content-addressed EDV envelopes, never public.
  */
-export const WALLET_SPACE_COLLECTION_SPECS = [
-    PRIVATE_CREDENTIALS_COLLECTION_SPEC,
-    PUBLIC_CREDENTIALS_COLLECTION_SPEC,
-    WALLET_ACTIVITY_COLLECTION_SPEC
-];
+export const CONTACTS_HISTORY_SPACE_COLLECTION_SPEC = {
+    ...CONTACTS_HISTORY_COLLECTION_SPEC,
+    name: 'Contacts History',
+    encryption: 'edv',
+    isPublic: false
+};
 /**
  * The system collections and resource names that carry an account's identity
  * and key material. They sit deliberately OUTSIDE the synced collection specs
@@ -91,6 +120,59 @@ export const WALLET_SPACE_COLLECTION_SPECS = [
 export const ID_COLLECTION = { id: 'id', name: 'Identity' };
 export const KEY_MAP_COLLECTION = { id: 'key-map', name: 'Key Map' };
 export const KEYRING_COLLECTION = { id: 'keyring', name: 'Keyring' };
+/**
+ * The `id` collection's provisioning attributes: plaintext (it holds only
+ * world-readable DID artifacts) with a collection-level public-read grant.
+ */
+export const ID_COLLECTION_SPEC = {
+    collectionId: ID_COLLECTION.id,
+    name: ID_COLLECTION.name,
+    encryption: 'plaintext',
+    isPublic: true
+};
+/**
+ * The `key-map` collection's provisioning attributes: plaintext (its resources
+ * are wrap-sets and key-id maps, protected by capability, not by an EDV
+ * envelope) and capability-only -- never public, exactly so `id` can be
+ * world-readable without exposing key material.
+ */
+export const KEY_MAP_COLLECTION_SPEC = {
+    collectionId: KEY_MAP_COLLECTION.id,
+    name: KEY_MAP_COLLECTION.name,
+    encryption: 'plaintext',
+    isPublic: false
+};
+/**
+ * The synced wallet Space collections, in provision order: the feeds a wallet
+ * both provisions and replicates (each gets a local replica and a sync engine).
+ */
+export const WALLET_SPACE_SYNCED_SPECS = [
+    PRIVATE_CREDENTIALS_COLLECTION_SPEC,
+    PUBLIC_CREDENTIALS_COLLECTION_SPEC,
+    WALLET_ACTIVITY_COLLECTION_SPEC,
+    CONTACTS_SPACE_COLLECTION_SPEC,
+    CONTACTS_HISTORY_SPACE_COLLECTION_SPEC
+];
+/**
+ * The provisioned-but-not-synced system collections: part of every wallet
+ * Space's layout, but no wallet mints a replication feed for them -- their
+ * resources (`did.json`, `keys.json`, `user-key.json`, ...) are read and
+ * written directly. `keyring` is deliberately absent: it lives in the separate
+ * unlock Space, never in the wallet data Space this roster lays out.
+ */
+export const WALLET_SPACE_SYSTEM_SPECS = [
+    ID_COLLECTION_SPEC,
+    KEY_MAP_COLLECTION_SPEC
+];
+/**
+ * The full wallet Space layout -- every collection the provisioning wallet
+ * ensures, synced feeds first. A Space provisioned from this roster is
+ * identical no matter which wallet app created it.
+ */
+export const WALLET_SPACE_PROVISION_ROSTER = [
+    ...WALLET_SPACE_SYNCED_SPECS,
+    ...WALLET_SPACE_SYSTEM_SPECS
+];
 /**
  * The world-readable DID document, served as `application/did+json`.
  */

package/dist/space/collections.js.map

@@ -1 +1 @@
-{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAA;AACnE;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AACjE;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAyB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAwB;IACtE,YAAY,EAAE,8BAA8B;IAC5C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAA0B;IAClE,mCAAmC;IACnC,kCAAkC;IAClC,+BAA+B;CAChC,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAEpE;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAA;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAC3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAC5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAA;AACvD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAA;AAC1D;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAA"}
+{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,wBAAwB,EACxB,gCAAgC,EACjC,MAAM,sBAAsB,CAAA;AAE7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAA;AAE/C;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAA;AACnE;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AACjE;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAoC3D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAwB;IACtE,YAAY,EAAE,8BAA8B;IAC5C,IAAI,EAAE,wBAAwB;IAC9B,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,IAAI,EAAE,0CAA0C;IAChD,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,IAAI,EAAE,qBAAqB;IAC3B,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAwB;IACjE,GAAG,wBAAwB;IAC3B,IAAI,EAAE,UAAU;IAChB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAwB;IACzE,GAAG,gCAAgC;IACnC,IAAI,EAAE,kBAAkB;IACxB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAEpE;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAuB;IACpD,YAAY,EAAE,aAAa,CAAC,EAAE;IAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;IACxB,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAuB;IACzD,YAAY,EAAE,kBAAkB,CAAC,EAAE;IACnC,IAAI,EAAE,kBAAkB,CAAC,IAAI;IAC7B,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,mCAAmC;IACnC,kCAAkC;IAClC,+BAA+B;IAC/B,8BAA8B;IAC9B,sCAAsC;CACvC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAyB;IAC7D,kBAAkB;IAClB,uBAAuB;CACxB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAyB;IACjE,GAAG,yBAAyB;IAC5B,GAAG,yBAAyB;CAC7B,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAA;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAC3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAC5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAA;AACvD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAA;AAC1D;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAA"}

package/dist/space/index.d.ts

@@ -6,11 +6,15 @@
  * WAS-enabled wallet apps share.
  *
  * - The shared collection ids and descriptive specs (`private-credentials`,
- *   `public-credentials`, `wallet-activity`). The contacts collections stay in
- *   `@interop/social-core`.
+ *   `public-credentials`, `wallet-activity`; the contacts identity contract
+ *   stays in `@interop/social-core`, spread into the wallet-Space specs here),
+ *   and the provisioning rosters that split them into synced feeds vs.
+ *   provisioned-but-not-synced system collections.
  * - The system collections and resource names that carry identity and key
  *   material (`id`, `key-map`, `keyring`; `did.json`, `did.jsonl`, `keys.json`,
  *   `user-key.json`, `keyring.json`) -- outside the synced set, never replicated.
+ * - `provisionWalletSpace`, the one-shot full-roster provisioner the
+ *   Space-creating wallet runs.
  * - The `wallet-activity` wire shape (`WalletActivity`) and the pure
  *   `addHistory*` payload builders.
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
@@ -18,9 +22,10 @@
  * - The `was-link` QR hand-off contract (`buildWasLinkPayload` /
  *   `parseWasLinkPayload` / `encodeWasLinkSecret`).
  */
-export { PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, WALLET_SPACE_COLLECTION_SPECS } from './collections.js';
-export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_RESOURCE, CLIENT_LABELS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
-export type { SpaceCollectionSpec } from './collections.js';
+export { WALLET_SPACE_NAME, PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, CONTACTS_SPACE_COLLECTION_SPEC, CONTACTS_HISTORY_SPACE_COLLECTION_SPEC, WALLET_SPACE_SYNCED_SPECS, WALLET_SPACE_SYSTEM_SPECS, WALLET_SPACE_PROVISION_ROSTER } from './collections.js';
+export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, ID_COLLECTION_SPEC, KEY_MAP_COLLECTION_SPEC, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_RESOURCE, CLIENT_LABELS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
+export type { SpaceProvisionSpec, SpaceCollectionSpec } from './collections.js';
+export { provisionWalletSpace } from './provisioning.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryWalletLogin, addHistoryAppRevoke, addHistoryClientRevoked } from './activity.js';
 export type { WalletActivity, ActivityGrant } from './activity.js';
 export { publicCredentialUrl } from './publicLink.js';

package/dist/space/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE3D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}

package/dist/space/index.js

@@ -6,11 +6,15 @@
  * WAS-enabled wallet apps share.
  *
  * - The shared collection ids and descriptive specs (`private-credentials`,
- *   `public-credentials`, `wallet-activity`). The contacts collections stay in
- *   `@interop/social-core`.
+ *   `public-credentials`, `wallet-activity`; the contacts identity contract
+ *   stays in `@interop/social-core`, spread into the wallet-Space specs here),
+ *   and the provisioning rosters that split them into synced feeds vs.
+ *   provisioned-but-not-synced system collections.
  * - The system collections and resource names that carry identity and key
  *   material (`id`, `key-map`, `keyring`; `did.json`, `did.jsonl`, `keys.json`,
  *   `user-key.json`, `keyring.json`) -- outside the synced set, never replicated.
+ * - `provisionWalletSpace`, the one-shot full-roster provisioner the
+ *   Space-creating wallet runs.
  * - The `wallet-activity` wire shape (`WalletActivity`) and the pure
  *   `addHistory*` payload builders.
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
@@ -18,8 +22,9 @@
  * - The `was-link` QR hand-off contract (`buildWasLinkPayload` /
  *   `parseWasLinkPayload` / `encodeWasLinkSecret`).
  */
-export { PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, WALLET_SPACE_COLLECTION_SPECS } from './collections.js';
-export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_RESOURCE, CLIENT_LABELS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
+export { WALLET_SPACE_NAME, PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, CONTACTS_SPACE_COLLECTION_SPEC, CONTACTS_HISTORY_SPACE_COLLECTION_SPEC, WALLET_SPACE_SYNCED_SPECS, WALLET_SPACE_SYSTEM_SPECS, WALLET_SPACE_PROVISION_ROSTER } from './collections.js';
+export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, ID_COLLECTION_SPEC, KEY_MAP_COLLECTION_SPEC, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_RESOURCE, CLIENT_LABELS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
+export { provisionWalletSpace } from './provisioning.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryWalletLogin, addHistoryAppRevoke, addHistoryClientRevoked } from './activity.js';
 export { publicCredentialUrl } from './publicLink.js';
 export { encodeWasLinkSecret, buildWasLinkPayload, parseWasLinkPayload } from './wasLink.js';

package/dist/space/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}

package/dist/space/provisioning.d.ts

@@ -0,0 +1,35 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * One-shot wallet Space provisioning: the single mechanism both wallet apps run
+ * when they are the wallet that creates (or re-ensures) a Space, walking the
+ * full `WALLET_SPACE_PROVISION_ROSTER` -- the synced feeds plus the non-synced
+ * system collections (`id`, `key-map`) -- so a Space's layout never depends on
+ * which app happened to provision it.
+ */
+import type { WasClient } from '@interop/was-client';
+/**
+ * Ensures the controller's Space exists and every collection in the wallet
+ * Space roster is configured, concurrently -- each collection depends only on
+ * the Space existing, and every step is an idempotent upsert, so an interrupted
+ * run is completed by simply re-running. The Space is (re)configured with the
+ * app-neutral `WALLET_SPACE_NAME` and each collection with its roster display
+ * name. Runs full-tier -- the client invokes its own root capability -- so this
+ * belongs only in the wallet that holds the Space's controller; an enrolled
+ * client joining a Space another wallet provisioned must not call it (a
+ * re-declaration could clobber collection configuration other clients depend
+ * on).
+ *
+ * @param options {object}
+ * @param options.was {WasClient}
+ * @param options.spaceId {string}
+ * @param options.controllerDid {string}   the Space controller
+ * @returns {Promise<void>}
+ */
+export declare function provisionWalletSpace({ was, spaceId, controllerDid }: {
+    was: WasClient;
+    spaceId: string;
+    controllerDid: string;
+}): Promise<void>;
+//# sourceMappingURL=provisioning.d.ts.map

package/dist/space/provisioning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.d.ts","sourceRoot":"","sources":["../../src/space/provisioning.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AASpD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,OAAO,EACP,aAAa,EACd,EAAE;IACD,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhB"}

package/dist/space/provisioning.js

@@ -0,0 +1,63 @@
+import { ensureSpaceAndCollection } from '@interop/was-client/sync';
+import { WALLET_SPACE_NAME, WALLET_SPACE_PROVISION_ROSTER } from './collections.js';
+/**
+ * Ensures the controller's Space exists and every collection in the wallet
+ * Space roster is configured, concurrently -- each collection depends only on
+ * the Space existing, and every step is an idempotent upsert, so an interrupted
+ * run is completed by simply re-running. The Space is (re)configured with the
+ * app-neutral `WALLET_SPACE_NAME` and each collection with its roster display
+ * name. Runs full-tier -- the client invokes its own root capability -- so this
+ * belongs only in the wallet that holds the Space's controller; an enrolled
+ * client joining a Space another wallet provisioned must not call it (a
+ * re-declaration could clobber collection configuration other clients depend
+ * on).
+ *
+ * @param options {object}
+ * @param options.was {WasClient}
+ * @param options.spaceId {string}
+ * @param options.controllerDid {string}   the Space controller
+ * @returns {Promise<void>}
+ */
+export async function provisionWalletSpace({ was, spaceId, controllerDid }) {
+    await Promise.all(WALLET_SPACE_PROVISION_ROSTER.map(spec => ensureCollection({ was, spaceId, controllerDid, spec })));
+}
+async function ensureCollection({ was, spaceId, controllerDid, spec: { collectionId, name, encryption, isPublic } }) {
+    try {
+        await ensureSpaceAndCollection({
+            was,
+            spaceId,
+            controllerDid,
+            collectionId,
+            collectionName: name,
+            encryption,
+            isPublic,
+            spaceName: WALLET_SPACE_NAME
+        });
+    }
+    catch (err) {
+        // An encrypted collection whose descriptor already carries key epochs (a
+        // share, or a recovery escrow) refuses the bare `edv` re-declaration: the
+        // PUT would drop the append-only epochs and the server rejects it. A
+        // name-only configure merges the current description forward, re-stating
+        // the standing descriptor (epochs included) verbatim -- the idempotent form
+        // of "ensure it exists". The original error is still logged on a successful
+        // retry: the retry also masks failures that were never the epoch refusal
+        // (including a failed Space-description PUT, which `ensureSpaceAndCollection`
+        // performs FIRST), and those should stay visible even when the narrower
+        // configure happens to land.
+        if (encryption === 'edv') {
+            try {
+                await was.space(spaceId).collection(collectionId).configure({ name });
+                console.warn(`Collection "${collectionId}" was ensured via the name-only retry; ` +
+                    'the full ensure had failed with:', err);
+                return;
+            }
+            catch {
+                // Fall through to the wrapped throw below, keeping the original
+                // (full-ensure) error as the cause.
+            }
+        }
+        throw new Error(`Error provisioning collection "${collectionId}" in space "${spaceId}".`, { cause: err });
+    }
+}
+//# sourceMappingURL=provisioning.js.map

package/dist/space/provisioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.js","sourceRoot":"","sources":["../../src/space/provisioning.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AAGzB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,GAAG,EACH,OAAO,EACP,aAAa,EAKd;IACC,MAAM,OAAO,CAAC,GAAG,CACf,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACvC,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CACxD,CACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,EAC9B,GAAG,EACH,OAAO,EACP,aAAa,EACb,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAMnD;IACC,IAAI,CAAC;QACH,MAAM,wBAAwB,CAAC;YAC7B,GAAG;YACH,OAAO;YACP,aAAa;YACb,YAAY;YACZ,cAAc,EAAE,IAAI;YACpB,UAAU;YACV,QAAQ;YACR,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,0EAA0E;QAC1E,qEAAqE;QACrE,yEAAyE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,yEAAyE;QACzE,8EAA8E;QAC9E,wEAAwE;QACxE,6BAA6B;QAC7B,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;gBACrE,OAAO,CAAC,IAAI,CACV,eAAe,YAAY,yCAAyC;oBAClE,kCAAkC,EACpC,GAAG,CACJ,CAAA;gBACD,OAAM;YACR,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,oCAAoC;YACtC,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kCAAkC,YAAY,eAAe,OAAO,IAAI,EACxE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@interop/wallet-core",
   "description": "Shared wallet-domain logic (WAS sync engine core and wallet Space layout contracts) for Interop wallet apps.",
-  "version": "0.19.0",
+  "version": "0.21.0",
   "type": "module",
   "scripts": {
     "build": "pnpm run clear && tsc",