@interop/wallet-core 0.20.0 → 0.21.0

package/dist/space/collections.d.ts

@@ -1,20 +1,3 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * The shared wallet Space layout: the collection ids and descriptive specs both
- * wallet replicas provision, so a credential written by one is found and read by
- * the other. Both replicas MUST agree on every field here -- `collectionId`
- * decides where a document lands on the server, `idDerivation` and `mutable`
- * decide whether it is overwritten in place or only appended, and `encryption` /
- * `isPublic` decide how it is stored and who can read it. A disagreement splits
- * the feed into separate or incompatibly-shaped collections that never converge.
- *
- * The contacts collections (`contacts`, `contacts-history`) are NOT declared
- * here: their ids and specs live in `@interop/social-core`
- * (`CONTACTS_COLLECTION_SPEC` / `CONTACTS_HISTORY_COLLECTION_SPEC`), which apps
- * import directly. The field vocabulary below mirrors that spec.
- */
 /**
  * The app-neutral display name every wallet passes when provisioning the
  * shared Space (`space.configure({ name })` re-runs on provisioning, so a
@@ -34,27 +17,37 @@ export declare const PUBLIC_CREDENTIALS_COLLECTION = "public-credentials";
  */
 export declare const WALLET_ACTIVITY_COLLECTION = "wallet-activity";
 /**
- * A declarative descriptor of a synced wallet Space collection, aligned with
- * `@interop/social-core`'s `CONTACTS_COLLECTION_SPEC` vocabulary and extended
- * with the storage attributes the wallet Space needs:
+ * What provisioning a wallet Space collection needs: the collection id, the
+ * friendly display name both wallets pass as the server-side collection name,
+ * and the storage attributes --
  *
- * - `idDerivation` -- `'content'` for an append-only, content-addressed log (the
- *   id IS the hash of the stored body) or `'random'` for a mutable head (a
- *   stable id whose body is overwritten).
- * - `mutable` -- whether a document is overwritten in place (`true`) or only
- *   ever appended (`false`).
  * - `encryption` -- `'edv'` stores each document as an EDV envelope; `'plaintext'`
  *   stores it verbatim.
  * - `isPublic` -- whether the collection is granted collection-level world read
  *   on the server.
  */
-export interface SpaceCollectionSpec {
+export interface SpaceProvisionSpec {
     collectionId: string;
-    idDerivation: 'content' | 'random';
-    mutable: boolean;
+    name: string;
     encryption: 'edv' | 'plaintext';
     isPublic: boolean;
 }
+/**
+ * A declarative descriptor of a synced wallet Space collection: the
+ * provisioning attributes plus the document-identity contract the replication
+ * engines need, aligned with `@interop/social-core`'s
+ * `CONTACTS_COLLECTION_SPEC` vocabulary --
+ *
+ * - `idDerivation` -- `'content'` for an append-only, content-addressed log (the
+ *   id IS the hash of the stored body) or `'random'` for a mutable head (a
+ *   stable id whose body is overwritten).
+ * - `mutable` -- whether a document is overwritten in place (`true`) or only
+ *   ever appended (`false`).
+ */
+export interface SpaceCollectionSpec extends SpaceProvisionSpec {
+    idDerivation: 'content' | 'random';
+    mutable: boolean;
+}
 /**
  * The immutable credential replica: each credential stored as an EDV envelope,
  * addressed by the envelope's content hash, never overwritten, never public.
@@ -73,9 +66,19 @@ export declare const PUBLIC_CREDENTIALS_COLLECTION_SPEC: SpaceCollectionSpec;
  */
 export declare const WALLET_ACTIVITY_COLLECTION_SPEC: SpaceCollectionSpec;
 /**
- * The wallet Space's own (non-contacts) collection specs, in provision order.
+ * The contacts head collection as it sits in the wallet Space: the identity
+ * contract (`collectionId`, `idDerivation`, `mutable`) spread from
+ * `@interop/social-core`'s `CONTACTS_COLLECTION_SPEC` (which stays its owner),
+ * plus the storage attributes that are wallet-Space layout -- each contact a
+ * mutable EDV envelope, never public.
  */
-export declare const WALLET_SPACE_COLLECTION_SPECS: SpaceCollectionSpec[];
+export declare const CONTACTS_SPACE_COLLECTION_SPEC: SpaceCollectionSpec;
+/**
+ * The contacts history log in the wallet Space: identity contract spread from
+ * `@interop/social-core`'s `CONTACTS_HISTORY_COLLECTION_SPEC`, stored as
+ * append-only, content-addressed EDV envelopes, never public.
+ */
+export declare const CONTACTS_HISTORY_SPACE_COLLECTION_SPEC: SpaceCollectionSpec;
 /**
  * The system collections and resource names that carry an account's identity
  * and key material. They sit deliberately OUTSIDE the synced collection specs
@@ -106,6 +109,37 @@ export declare const KEYRING_COLLECTION: {
     id: string;
     name: string;
 };
+/**
+ * The `id` collection's provisioning attributes: plaintext (it holds only
+ * world-readable DID artifacts) with a collection-level public-read grant.
+ */
+export declare const ID_COLLECTION_SPEC: SpaceProvisionSpec;
+/**
+ * The `key-map` collection's provisioning attributes: plaintext (its resources
+ * are wrap-sets and key-id maps, protected by capability, not by an EDV
+ * envelope) and capability-only -- never public, exactly so `id` can be
+ * world-readable without exposing key material.
+ */
+export declare const KEY_MAP_COLLECTION_SPEC: SpaceProvisionSpec;
+/**
+ * The synced wallet Space collections, in provision order: the feeds a wallet
+ * both provisions and replicates (each gets a local replica and a sync engine).
+ */
+export declare const WALLET_SPACE_SYNCED_SPECS: SpaceCollectionSpec[];
+/**
+ * The provisioned-but-not-synced system collections: part of every wallet
+ * Space's layout, but no wallet mints a replication feed for them -- their
+ * resources (`did.json`, `keys.json`, `user-key.json`, ...) are read and
+ * written directly. `keyring` is deliberately absent: it lives in the separate
+ * unlock Space, never in the wallet data Space this roster lays out.
+ */
+export declare const WALLET_SPACE_SYSTEM_SPECS: SpaceProvisionSpec[];
+/**
+ * The full wallet Space layout -- every collection the provisioning wallet
+ * ensures, synced feeds first. A Space provisioned from this roster is
+ * identical no matter which wallet app created it.
+ */
+export declare const WALLET_SPACE_PROVISION_ROSTER: SpaceProvisionSpec[];
 /**
  * The world-readable DID document, served as `application/did+json`.
  */

package/dist/space/collections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,iBAAiB,CAAA;AAE/C;;GAEG;AACH,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE;;GAEG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAMjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAMhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAM7C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,6BAA6B,EAAE,mBAAmB,EAI9D,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa;;;CAAiC,CAAA;AAC3D,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AACpE,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AAEpE;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,kBAAkB,CAAA;AACvD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D;;GAEG;AACH,eAAO,MAAM,gBAAgB,iBAAiB,CAAA"}
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAyBA;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,iBAAiB,CAAA;AAE/C;;GAEG;AACH,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE;;GAEG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAOjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAOhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAO7C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,mBAK5C,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,EAAE,mBAKpD,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa;;;CAAiC,CAAA;AAC3D,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AACpE,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AAEpE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,kBAKhC,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,kBAKrC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,mBAAmB,EAM1D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,kBAAkB,EAGzD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,kBAAkB,EAG7D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,kBAAkB,CAAA;AACvD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D;;GAEG;AACH,eAAO,MAAM,gBAAgB,iBAAiB,CAAA"}

package/dist/space/collections.js

@@ -10,11 +10,15 @@
  * `isPublic` decide how it is stored and who can read it. A disagreement splits
  * the feed into separate or incompatibly-shaped collections that never converge.
  *
- * The contacts collections (`contacts`, `contacts-history`) are NOT declared
- * here: their ids and specs live in `@interop/social-core`
- * (`CONTACTS_COLLECTION_SPEC` / `CONTACTS_HISTORY_COLLECTION_SPEC`), which apps
- * import directly. The field vocabulary below mirrors that spec.
+ * The contacts collections (`contacts`, `contacts-history`) keep their identity
+ * contract (`collectionId`, `idDerivation`, `mutable`) in `@interop/social-core`
+ * (`CONTACTS_COLLECTION_SPEC` / `CONTACTS_HISTORY_COLLECTION_SPEC`) -- the field
+ * vocabulary below mirrors that spec. This module does not redeclare those
+ * fields; the wallet-Space rosters spread them in and add only the storage
+ * attributes that are wallet-Space layout (display name, `encryption`,
+ * `isPublic`).
  */
+import { CONTACTS_COLLECTION_SPEC, CONTACTS_HISTORY_COLLECTION_SPEC } from '@interop/social-core';
 /**
  * The app-neutral display name every wallet passes when provisioning the
  * shared Space (`space.configure({ name })` re-runs on provisioning, so a
@@ -39,6 +43,7 @@ export const WALLET_ACTIVITY_COLLECTION = 'wallet-activity';
  */
 export const PRIVATE_CREDENTIALS_COLLECTION_SPEC = {
     collectionId: PRIVATE_CREDENTIALS_COLLECTION,
+    name: 'Verifiable Credentials',
     idDerivation: 'content',
     mutable: false,
     encryption: 'edv',
@@ -51,6 +56,7 @@ export const PRIVATE_CREDENTIALS_COLLECTION_SPEC = {
  */
 export const PUBLIC_CREDENTIALS_COLLECTION_SPEC = {
     collectionId: PUBLIC_CREDENTIALS_COLLECTION,
+    name: 'Verifiable Credentials (Publicly Shared)',
     idDerivation: 'content',
     mutable: false,
     encryption: 'plaintext',
@@ -63,19 +69,36 @@ export const PUBLIC_CREDENTIALS_COLLECTION_SPEC = {
  */
 export const WALLET_ACTIVITY_COLLECTION_SPEC = {
     collectionId: WALLET_ACTIVITY_COLLECTION,
+    name: 'Wallet Activity Log',
     idDerivation: 'content',
     mutable: false,
     encryption: 'edv',
     isPublic: false
 };
 /**
- * The wallet Space's own (non-contacts) collection specs, in provision order.
+ * The contacts head collection as it sits in the wallet Space: the identity
+ * contract (`collectionId`, `idDerivation`, `mutable`) spread from
+ * `@interop/social-core`'s `CONTACTS_COLLECTION_SPEC` (which stays its owner),
+ * plus the storage attributes that are wallet-Space layout -- each contact a
+ * mutable EDV envelope, never public.
  */
-export const WALLET_SPACE_COLLECTION_SPECS = [
-    PRIVATE_CREDENTIALS_COLLECTION_SPEC,
-    PUBLIC_CREDENTIALS_COLLECTION_SPEC,
-    WALLET_ACTIVITY_COLLECTION_SPEC
-];
+export const CONTACTS_SPACE_COLLECTION_SPEC = {
+    ...CONTACTS_COLLECTION_SPEC,
+    name: 'Contacts',
+    encryption: 'edv',
+    isPublic: false
+};
+/**
+ * The contacts history log in the wallet Space: identity contract spread from
+ * `@interop/social-core`'s `CONTACTS_HISTORY_COLLECTION_SPEC`, stored as
+ * append-only, content-addressed EDV envelopes, never public.
+ */
+export const CONTACTS_HISTORY_SPACE_COLLECTION_SPEC = {
+    ...CONTACTS_HISTORY_COLLECTION_SPEC,
+    name: 'Contacts History',
+    encryption: 'edv',
+    isPublic: false
+};
 /**
  * The system collections and resource names that carry an account's identity
  * and key material. They sit deliberately OUTSIDE the synced collection specs
@@ -97,6 +120,59 @@ export const WALLET_SPACE_COLLECTION_SPECS = [
 export const ID_COLLECTION = { id: 'id', name: 'Identity' };
 export const KEY_MAP_COLLECTION = { id: 'key-map', name: 'Key Map' };
 export const KEYRING_COLLECTION = { id: 'keyring', name: 'Keyring' };
+/**
+ * The `id` collection's provisioning attributes: plaintext (it holds only
+ * world-readable DID artifacts) with a collection-level public-read grant.
+ */
+export const ID_COLLECTION_SPEC = {
+    collectionId: ID_COLLECTION.id,
+    name: ID_COLLECTION.name,
+    encryption: 'plaintext',
+    isPublic: true
+};
+/**
+ * The `key-map` collection's provisioning attributes: plaintext (its resources
+ * are wrap-sets and key-id maps, protected by capability, not by an EDV
+ * envelope) and capability-only -- never public, exactly so `id` can be
+ * world-readable without exposing key material.
+ */
+export const KEY_MAP_COLLECTION_SPEC = {
+    collectionId: KEY_MAP_COLLECTION.id,
+    name: KEY_MAP_COLLECTION.name,
+    encryption: 'plaintext',
+    isPublic: false
+};
+/**
+ * The synced wallet Space collections, in provision order: the feeds a wallet
+ * both provisions and replicates (each gets a local replica and a sync engine).
+ */
+export const WALLET_SPACE_SYNCED_SPECS = [
+    PRIVATE_CREDENTIALS_COLLECTION_SPEC,
+    PUBLIC_CREDENTIALS_COLLECTION_SPEC,
+    WALLET_ACTIVITY_COLLECTION_SPEC,
+    CONTACTS_SPACE_COLLECTION_SPEC,
+    CONTACTS_HISTORY_SPACE_COLLECTION_SPEC
+];
+/**
+ * The provisioned-but-not-synced system collections: part of every wallet
+ * Space's layout, but no wallet mints a replication feed for them -- their
+ * resources (`did.json`, `keys.json`, `user-key.json`, ...) are read and
+ * written directly. `keyring` is deliberately absent: it lives in the separate
+ * unlock Space, never in the wallet data Space this roster lays out.
+ */
+export const WALLET_SPACE_SYSTEM_SPECS = [
+    ID_COLLECTION_SPEC,
+    KEY_MAP_COLLECTION_SPEC
+];
+/**
+ * The full wallet Space layout -- every collection the provisioning wallet
+ * ensures, synced feeds first. A Space provisioned from this roster is
+ * identical no matter which wallet app created it.
+ */
+export const WALLET_SPACE_PROVISION_ROSTER = [
+    ...WALLET_SPACE_SYNCED_SPECS,
+    ...WALLET_SPACE_SYSTEM_SPECS
+];
 /**
  * The world-readable DID document, served as `application/did+json`.
  */

package/dist/space/collections.js.map

@@ -1 +1 @@
-{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAA;AAE/C;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAA;AACnE;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AACjE;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAyB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAwB;IACtE,YAAY,EAAE,8BAA8B;IAC5C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAA0B;IAClE,mCAAmC;IACnC,kCAAkC;IAClC,+BAA+B;CAChC,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAEpE;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAA;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAC3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAC5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAA;AACvD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAA;AAC1D;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAA"}
+{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,wBAAwB,EACxB,gCAAgC,EACjC,MAAM,sBAAsB,CAAA;AAE7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAA;AAE/C;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAA;AACnE;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AACjE;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAoC3D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAwB;IACtE,YAAY,EAAE,8BAA8B;IAC5C,IAAI,EAAE,wBAAwB;IAC9B,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,IAAI,EAAE,0CAA0C;IAChD,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,IAAI,EAAE,qBAAqB;IAC3B,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAwB;IACjE,GAAG,wBAAwB;IAC3B,IAAI,EAAE,UAAU;IAChB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAwB;IACzE,GAAG,gCAAgC;IACnC,IAAI,EAAE,kBAAkB;IACxB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAEpE;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAuB;IACpD,YAAY,EAAE,aAAa,CAAC,EAAE;IAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;IACxB,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAuB;IACzD,YAAY,EAAE,kBAAkB,CAAC,EAAE;IACnC,IAAI,EAAE,kBAAkB,CAAC,IAAI;IAC7B,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,mCAAmC;IACnC,kCAAkC;IAClC,+BAA+B;IAC/B,8BAA8B;IAC9B,sCAAsC;CACvC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAyB;IAC7D,kBAAkB;IAClB,uBAAuB;CACxB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAyB;IACjE,GAAG,yBAAyB;IAC5B,GAAG,yBAAyB;CAC7B,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAA;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAC3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAC5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAA;AACvD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAA;AAC1D;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAA"}

package/dist/space/index.d.ts

@@ -6,11 +6,15 @@
  * WAS-enabled wallet apps share.
  *
  * - The shared collection ids and descriptive specs (`private-credentials`,
- *   `public-credentials`, `wallet-activity`). The contacts collections stay in
- *   `@interop/social-core`.
+ *   `public-credentials`, `wallet-activity`; the contacts identity contract
+ *   stays in `@interop/social-core`, spread into the wallet-Space specs here),
+ *   and the provisioning rosters that split them into synced feeds vs.
+ *   provisioned-but-not-synced system collections.
  * - The system collections and resource names that carry identity and key
  *   material (`id`, `key-map`, `keyring`; `did.json`, `did.jsonl`, `keys.json`,
  *   `user-key.json`, `keyring.json`) -- outside the synced set, never replicated.
+ * - `provisionWalletSpace`, the one-shot full-roster provisioner the
+ *   Space-creating wallet runs.
  * - The `wallet-activity` wire shape (`WalletActivity`) and the pure
  *   `addHistory*` payload builders.
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
@@ -18,9 +22,10 @@
  * - The `was-link` QR hand-off contract (`buildWasLinkPayload` /
  *   `parseWasLinkPayload` / `encodeWasLinkSecret`).
  */
-export { WALLET_SPACE_NAME, PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, WALLET_SPACE_COLLECTION_SPECS } from './collections.js';
-export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_RESOURCE, CLIENT_LABELS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
-export type { SpaceCollectionSpec } from './collections.js';
+export { WALLET_SPACE_NAME, PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, CONTACTS_SPACE_COLLECTION_SPEC, CONTACTS_HISTORY_SPACE_COLLECTION_SPEC, WALLET_SPACE_SYNCED_SPECS, WALLET_SPACE_SYSTEM_SPECS, WALLET_SPACE_PROVISION_ROSTER } from './collections.js';
+export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, ID_COLLECTION_SPEC, KEY_MAP_COLLECTION_SPEC, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_RESOURCE, CLIENT_LABELS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
+export type { SpaceProvisionSpec, SpaceCollectionSpec } from './collections.js';
+export { provisionWalletSpace } from './provisioning.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryWalletLogin, addHistoryAppRevoke, addHistoryClientRevoked } from './activity.js';
 export type { WalletActivity, ActivityGrant } from './activity.js';
 export { publicCredentialUrl } from './publicLink.js';

package/dist/space/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE3D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}

package/dist/space/index.js

@@ -6,11 +6,15 @@
  * WAS-enabled wallet apps share.
  *
  * - The shared collection ids and descriptive specs (`private-credentials`,
- *   `public-credentials`, `wallet-activity`). The contacts collections stay in
- *   `@interop/social-core`.
+ *   `public-credentials`, `wallet-activity`; the contacts identity contract
+ *   stays in `@interop/social-core`, spread into the wallet-Space specs here),
+ *   and the provisioning rosters that split them into synced feeds vs.
+ *   provisioned-but-not-synced system collections.
  * - The system collections and resource names that carry identity and key
  *   material (`id`, `key-map`, `keyring`; `did.json`, `did.jsonl`, `keys.json`,
  *   `user-key.json`, `keyring.json`) -- outside the synced set, never replicated.
+ * - `provisionWalletSpace`, the one-shot full-roster provisioner the
+ *   Space-creating wallet runs.
  * - The `wallet-activity` wire shape (`WalletActivity`) and the pure
  *   `addHistory*` payload builders.
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
@@ -18,8 +22,9 @@
  * - The `was-link` QR hand-off contract (`buildWasLinkPayload` /
  *   `parseWasLinkPayload` / `encodeWasLinkSecret`).
  */
-export { WALLET_SPACE_NAME, PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, WALLET_SPACE_COLLECTION_SPECS } from './collections.js';
-export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_RESOURCE, CLIENT_LABELS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
+export { WALLET_SPACE_NAME, PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, CONTACTS_SPACE_COLLECTION_SPEC, CONTACTS_HISTORY_SPACE_COLLECTION_SPEC, WALLET_SPACE_SYNCED_SPECS, WALLET_SPACE_SYSTEM_SPECS, WALLET_SPACE_PROVISION_ROSTER } from './collections.js';
+export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, ID_COLLECTION_SPEC, KEY_MAP_COLLECTION_SPEC, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_RESOURCE, CLIENT_LABELS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
+export { provisionWalletSpace } from './provisioning.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryWalletLogin, addHistoryAppRevoke, addHistoryClientRevoked } from './activity.js';
 export { publicCredentialUrl } from './publicLink.js';
 export { encodeWasLinkSecret, buildWasLinkPayload, parseWasLinkPayload } from './wasLink.js';

package/dist/space/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}

package/dist/space/provisioning.d.ts

@@ -0,0 +1,35 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * One-shot wallet Space provisioning: the single mechanism both wallet apps run
+ * when they are the wallet that creates (or re-ensures) a Space, walking the
+ * full `WALLET_SPACE_PROVISION_ROSTER` -- the synced feeds plus the non-synced
+ * system collections (`id`, `key-map`) -- so a Space's layout never depends on
+ * which app happened to provision it.
+ */
+import type { WasClient } from '@interop/was-client';
+/**
+ * Ensures the controller's Space exists and every collection in the wallet
+ * Space roster is configured, concurrently -- each collection depends only on
+ * the Space existing, and every step is an idempotent upsert, so an interrupted
+ * run is completed by simply re-running. The Space is (re)configured with the
+ * app-neutral `WALLET_SPACE_NAME` and each collection with its roster display
+ * name. Runs full-tier -- the client invokes its own root capability -- so this
+ * belongs only in the wallet that holds the Space's controller; an enrolled
+ * client joining a Space another wallet provisioned must not call it (a
+ * re-declaration could clobber collection configuration other clients depend
+ * on).
+ *
+ * @param options {object}
+ * @param options.was {WasClient}
+ * @param options.spaceId {string}
+ * @param options.controllerDid {string}   the Space controller
+ * @returns {Promise<void>}
+ */
+export declare function provisionWalletSpace({ was, spaceId, controllerDid }: {
+    was: WasClient;
+    spaceId: string;
+    controllerDid: string;
+}): Promise<void>;
+//# sourceMappingURL=provisioning.d.ts.map

package/dist/space/provisioning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.d.ts","sourceRoot":"","sources":["../../src/space/provisioning.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AASpD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,GAAG,EACH,OAAO,EACP,aAAa,EACd,EAAE;IACD,GAAG,EAAE,SAAS,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhB"}

package/dist/space/provisioning.js

@@ -0,0 +1,63 @@
+import { ensureSpaceAndCollection } from '@interop/was-client/sync';
+import { WALLET_SPACE_NAME, WALLET_SPACE_PROVISION_ROSTER } from './collections.js';
+/**
+ * Ensures the controller's Space exists and every collection in the wallet
+ * Space roster is configured, concurrently -- each collection depends only on
+ * the Space existing, and every step is an idempotent upsert, so an interrupted
+ * run is completed by simply re-running. The Space is (re)configured with the
+ * app-neutral `WALLET_SPACE_NAME` and each collection with its roster display
+ * name. Runs full-tier -- the client invokes its own root capability -- so this
+ * belongs only in the wallet that holds the Space's controller; an enrolled
+ * client joining a Space another wallet provisioned must not call it (a
+ * re-declaration could clobber collection configuration other clients depend
+ * on).
+ *
+ * @param options {object}
+ * @param options.was {WasClient}
+ * @param options.spaceId {string}
+ * @param options.controllerDid {string}   the Space controller
+ * @returns {Promise<void>}
+ */
+export async function provisionWalletSpace({ was, spaceId, controllerDid }) {
+    await Promise.all(WALLET_SPACE_PROVISION_ROSTER.map(spec => ensureCollection({ was, spaceId, controllerDid, spec })));
+}
+async function ensureCollection({ was, spaceId, controllerDid, spec: { collectionId, name, encryption, isPublic } }) {
+    try {
+        await ensureSpaceAndCollection({
+            was,
+            spaceId,
+            controllerDid,
+            collectionId,
+            collectionName: name,
+            encryption,
+            isPublic,
+            spaceName: WALLET_SPACE_NAME
+        });
+    }
+    catch (err) {
+        // An encrypted collection whose descriptor already carries key epochs (a
+        // share, or a recovery escrow) refuses the bare `edv` re-declaration: the
+        // PUT would drop the append-only epochs and the server rejects it. A
+        // name-only configure merges the current description forward, re-stating
+        // the standing descriptor (epochs included) verbatim -- the idempotent form
+        // of "ensure it exists". The original error is still logged on a successful
+        // retry: the retry also masks failures that were never the epoch refusal
+        // (including a failed Space-description PUT, which `ensureSpaceAndCollection`
+        // performs FIRST), and those should stay visible even when the narrower
+        // configure happens to land.
+        if (encryption === 'edv') {
+            try {
+                await was.space(spaceId).collection(collectionId).configure({ name });
+                console.warn(`Collection "${collectionId}" was ensured via the name-only retry; ` +
+                    'the full ensure had failed with:', err);
+                return;
+            }
+            catch {
+                // Fall through to the wrapped throw below, keeping the original
+                // (full-ensure) error as the cause.
+            }
+        }
+        throw new Error(`Error provisioning collection "${collectionId}" in space "${spaceId}".`, { cause: err });
+    }
+}
+//# sourceMappingURL=provisioning.js.map

package/dist/space/provisioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.js","sourceRoot":"","sources":["../../src/space/provisioning.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AAGzB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,GAAG,EACH,OAAO,EACP,aAAa,EAKd;IACC,MAAM,OAAO,CAAC,GAAG,CACf,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACvC,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CACxD,CACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,EAC9B,GAAG,EACH,OAAO,EACP,aAAa,EACb,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAMnD;IACC,IAAI,CAAC;QACH,MAAM,wBAAwB,CAAC;YAC7B,GAAG;YACH,OAAO;YACP,aAAa;YACb,YAAY;YACZ,cAAc,EAAE,IAAI;YACpB,UAAU;YACV,QAAQ;YACR,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,0EAA0E;QAC1E,qEAAqE;QACrE,yEAAyE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,yEAAyE;QACzE,8EAA8E;QAC9E,wEAAwE;QACxE,6BAA6B;QAC7B,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;gBACrE,OAAO,CAAC,IAAI,CACV,eAAe,YAAY,yCAAyC;oBAClE,kCAAkC,EACpC,GAAG,CACJ,CAAA;gBACD,OAAM;YACR,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,oCAAoC;YACtC,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kCAAkC,YAAY,eAAe,OAAO,IAAI,EACxE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@interop/wallet-core",
   "description": "Shared wallet-domain logic (WAS sync engine core and wallet Space layout contracts) for Interop wallet apps.",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "type": "module",
   "scripts": {
     "build": "pnpm run clear && tsc",