@interop/wallet-core 0.93.0 → 0.95.0

package/dist/labelText.d.ts

@@ -3,9 +3,10 @@
  */
 /**
  * The character set and length every attacker-adjacent display string is
- * held to: the onboarding response's suggested label, and a server-served
- * identifier the ceremony event helpers carry. An import-free leaf, so a
- * layer that must not load the enrollment ceremony can still take it.
+ * held to: the onboarding response's suggested label, a directory entry's
+ * `name`, and a server-served identifier the ceremony event helpers carry. An
+ * import-free leaf, so a layer that must not load the enrollment ceremony can
+ * still take it.
  */
 /**
  * The longest suggested display label an onboarding response may carry, in
@@ -21,4 +22,30 @@ export declare const ONBOARDING_LABEL_MAX_LENGTH = 64;
  * reorder or hide what a consent screen or a log line shows.
  */
 export declare const LABEL_STRIPPED_CHARACTERS: RegExp;
+/**
+ * A display string with the {@link LABEL_STRIPPED_CHARACTERS} removed and the
+ * surrounding whitespace trimmed: the text a display name is measured by.
+ *
+ * @param options {object}
+ * @param options.value {string}
+ * @returns {string}
+ */
+export declare function strippedDisplayText({ value }: {
+    value: string;
+}): string;
+/**
+ * The one display-name rule every producer and reader shares: the stripped
+ * text (see {@link strippedDisplayText}) when it holds at least one and at
+ * most {@link ONBOARDING_LABEL_MAX_LENGTH} code points, else `undefined`. The
+ * onboarding response's suggested label, the directory entry's `name` member,
+ * and every write of that member all run through it, so no producer can
+ * write a name a reader refuses.
+ *
+ * @param options {object}
+ * @param options.value {string}
+ * @returns {string | undefined}
+ */
+export declare function normalizeDisplayName({ value }: {
+    value: string;
+}): string | undefined;
 //# sourceMappingURL=labelText.d.ts.map

package/dist/labelText.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"labelText.d.ts","sourceRoot":"","sources":["../src/labelText.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;GAKG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,KAAK,CAAA;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,QAEkC,CAAA"}
+{"version":3,"file":"labelText.d.ts","sourceRoot":"","sources":["../src/labelText.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,KAAK,CAAA;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,QAEkC,CAAA;AAExE;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAExE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,KAAK,EACN,EAAE;IACD,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,GAAG,SAAS,CAOrB"}

package/dist/labelText.js

@@ -3,9 +3,10 @@
  */
 /**
  * The character set and length every attacker-adjacent display string is
- * held to: the onboarding response's suggested label, and a server-served
- * identifier the ceremony event helpers carry. An import-free leaf, so a
- * layer that must not load the enrollment ceremony can still take it.
+ * held to: the onboarding response's suggested label, a directory entry's
+ * `name`, and a server-served identifier the ceremony event helpers carry. An
+ * import-free leaf, so a layer that must not load the enrollment ceremony can
+ * still take it.
  */
 /**
  * The longest suggested display label an onboarding response may carry, in
@@ -23,4 +24,35 @@ export const ONBOARDING_LABEL_MAX_LENGTH = 64;
 export const LABEL_STRIPPED_CHARACTERS = 
 // eslint-disable-next-line no-control-regex
 /[\u0000-\u001f\u007f-\u009f\u200e\u200f\u202a-\u202e\u2066-\u2069]/gu;
+/**
+ * A display string with the {@link LABEL_STRIPPED_CHARACTERS} removed and the
+ * surrounding whitespace trimmed: the text a display name is measured by.
+ *
+ * @param options {object}
+ * @param options.value {string}
+ * @returns {string}
+ */
+export function strippedDisplayText({ value }) {
+    return value.replace(LABEL_STRIPPED_CHARACTERS, '').trim();
+}
+/**
+ * The one display-name rule every producer and reader shares: the stripped
+ * text (see {@link strippedDisplayText}) when it holds at least one and at
+ * most {@link ONBOARDING_LABEL_MAX_LENGTH} code points, else `undefined`. The
+ * onboarding response's suggested label, the directory entry's `name` member,
+ * and every write of that member all run through it, so no producer can
+ * write a name a reader refuses.
+ *
+ * @param options {object}
+ * @param options.value {string}
+ * @returns {string | undefined}
+ */
+export function normalizeDisplayName({ value }) {
+    const stripped = strippedDisplayText({ value });
+    const length = [...stripped].length;
+    if (length === 0 || length > ONBOARDING_LABEL_MAX_LENGTH) {
+        return undefined;
+    }
+    return stripped;
+}
 //# sourceMappingURL=labelText.js.map

package/dist/labelText.js.map

@@ -1 +1 @@
-{"version":3,"file":"labelText.js","sourceRoot":"","sources":["../src/labelText.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;GAKG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAA;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB;AACpC,4CAA4C;AAC5C,sEAAsE,CAAA"}
+{"version":3,"file":"labelText.js","sourceRoot":"","sources":["../src/labelText.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAA;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB;AACpC,4CAA4C;AAC5C,sEAAsE,CAAA;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAE,KAAK,EAAqB;IAC9D,OAAO,KAAK,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;AAC5D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,KAAK,EAGN;IACC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAA;IACnC,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,2BAA2B,EAAE,CAAC;QACzD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/menders/ids.d.ts

@@ -15,7 +15,7 @@
 /**
  * Every invariant id, in design-table order.
  */
-export declare const INVARIANT_IDS: readonly ["roster-wraps-exactly-the-document-key-set", "governed-log-heads-anchor-past-the-membership-change", "collection-epochs-name-the-current-user-key", "unlock-registry-opens-under-the-current-user-key", "registry-passphrase-entry-names-the-standing-credential", "passkey-entry-carries-its-standing-configuration", "registry-lists-the-passphrase-method", "standing-delegations-verify-under-the-current-document", "registry-records-the-committed-ladder-rung", "unlock-record-points-at-the-account-did", "account-pointer-names-the-account-did", "space-controller-is-the-account-did", "roster-and-collection-epochs-exist", "registry-records-the-establishing-credential", "annex-generation-is-reachable", "generation-delegation-is-current", "acting-credential-manage-zcap-is-current", "did-web-projection-matches-the-log", "no-annex-generation-outlives-its-pointer", "app-keys-live-only-in-app-connections", "client-key-record-matches-the-pointed-account", "this-browser-is-still-an-enrolled-client", "no-client-key-record-stays-pending", "recovery-spend-is-completed", "retired-credential-leaves-no-annex-inventory", "document-lists-the-acting-credential", "keystore-controller-is-the-account-did", "account-document-publishes-an-authentication-key", "every-document-key-agreement-entry-has-a-locatable-credential", "no-unlock-space-outlives-its-credential", "no-keystore-outlives-its-account", "saved-recovery-codes-locate-their-account", "standard-collections-are-provisioned", "no-auxiliary-space-stands-unnamed", "no-registered-writer-outlives-its-expiry"];
+export declare const INVARIANT_IDS: readonly ["roster-wraps-exactly-the-document-key-set", "governed-log-heads-anchor-past-the-membership-change", "collection-epochs-name-the-current-user-key", "unlock-registry-opens-under-the-current-user-key", "registry-passphrase-entry-names-the-standing-credential", "passkey-entry-carries-its-standing-configuration", "registry-lists-the-passphrase-method", "standing-delegations-verify-under-the-current-document", "registry-records-the-committed-ladder-rung", "unlock-record-points-at-the-account-did", "account-pointer-names-the-account-did", "space-controller-is-the-account-did", "roster-and-collection-epochs-exist", "registry-records-the-establishing-credential", "annex-generation-is-reachable", "generation-delegation-is-current", "acting-credential-manage-zcap-is-current", "did-web-projection-matches-the-log", "no-annex-generation-outlives-its-pointer", "app-keys-live-only-in-app-connections", "client-key-record-matches-the-pointed-account", "this-browser-is-still-an-enrolled-client", "no-client-key-record-stays-pending", "recovery-spend-is-completed", "retired-credential-leaves-no-annex-inventory", "document-lists-the-acting-credential", "keystore-controller-is-the-account-did", "account-document-publishes-an-authentication-key", "every-document-key-agreement-entry-has-a-locatable-credential", "no-unlock-space-outlives-its-credential", "no-keystore-outlives-its-account", "saved-recovery-codes-locate-their-account", "standard-collections-are-provisioned", "no-auxiliary-space-stands-unnamed", "no-registered-writer-outlives-its-expiry", "every-party-with-authority-has-a-connection-entry"];
 /**
  * One id from {@link INVARIANT_IDS}.
  */

package/dist/menders/ids.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../src/menders/ids.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa,6hDAuEhB,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA"}
+{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../src/menders/ids.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa,klDA4EhB,CAAA;AAEV;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/menders/ids.js

@@ -84,7 +84,12 @@ export const INVARIANT_IDS = [
     'standard-collections-are-provisioned',
     // 34
     'no-auxiliary-space-stands-unnamed',
-    // 35
-    'no-registered-writer-outlives-its-expiry'
+    // 35: no `writers` member of any `connections` entry stays `active` past
+    // the inactivity window, and no entry holds more than the writer cap once
+    // a sweep has run over it. The id predates the directory and stays.
+    'no-registered-writer-outlives-its-expiry',
+    // 36: every party holding a live grant, or listed in an unprotected
+    // collection's current epoch, has an unretired `connections` entry.
+    'every-party-with-authority-has-a-connection-entry'
 ];
 //# sourceMappingURL=ids.js.map

package/dist/menders/ids.js.map

@@ -1 +1 @@
-{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/menders/ids.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI;IACJ,2CAA2C;IAC3C,IAAI;IACJ,sDAAsD;IACtD,IAAI;IACJ,6CAA6C;IAC7C,IAAI;IACJ,kDAAkD;IAClD,IAAI;IACJ,yDAAyD;IACzD,IAAI;IACJ,kDAAkD;IAClD,IAAI;IACJ,sCAAsC;IACtC,IAAI;IACJ,wDAAwD;IACxD,IAAI;IACJ,4CAA4C;IAC5C,KAAK;IACL,yCAAyC;IACzC,KAAK;IACL,uCAAuC;IACvC,KAAK;IACL,qCAAqC;IACrC,KAAK;IACL,oCAAoC;IACpC,KAAK;IACL,8CAA8C;IAC9C,KAAK;IACL,+BAA+B;IAC/B,KAAK;IACL,kCAAkC;IAClC,KAAK;IACL,0CAA0C;IAC1C,KAAK;IACL,oCAAoC;IACpC,KAAK;IACL,0CAA0C;IAC1C,KAAK;IACL,uCAAuC;IACvC,KAAK;IACL,+CAA+C;IAC/C,KAAK;IACL,0CAA0C;IAC1C,KAAK;IACL,oCAAoC;IACpC,KAAK;IACL,6BAA6B;IAC7B,KAAK;IACL,8CAA8C;IAC9C,KAAK;IACL,sCAAsC;IACtC,KAAK;IACL,wCAAwC;IACxC,KAAK;IACL,kDAAkD;IAClD,KAAK;IACL,+DAA+D;IAC/D,KAAK;IACL,yCAAyC;IACzC,KAAK;IACL,kCAAkC;IAClC,KAAK;IACL,2CAA2C;IAC3C,KAAK;IACL,sCAAsC;IACtC,KAAK;IACL,mCAAmC;IACnC,KAAK;IACL,0CAA0C;CAClC,CAAA"}
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/menders/ids.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI;IACJ,2CAA2C;IAC3C,IAAI;IACJ,sDAAsD;IACtD,IAAI;IACJ,6CAA6C;IAC7C,IAAI;IACJ,kDAAkD;IAClD,IAAI;IACJ,yDAAyD;IACzD,IAAI;IACJ,kDAAkD;IAClD,IAAI;IACJ,sCAAsC;IACtC,IAAI;IACJ,wDAAwD;IACxD,IAAI;IACJ,4CAA4C;IAC5C,KAAK;IACL,yCAAyC;IACzC,KAAK;IACL,uCAAuC;IACvC,KAAK;IACL,qCAAqC;IACrC,KAAK;IACL,oCAAoC;IACpC,KAAK;IACL,8CAA8C;IAC9C,KAAK;IACL,+BAA+B;IAC/B,KAAK;IACL,kCAAkC;IAClC,KAAK;IACL,0CAA0C;IAC1C,KAAK;IACL,oCAAoC;IACpC,KAAK;IACL,0CAA0C;IAC1C,KAAK;IACL,uCAAuC;IACvC,KAAK;IACL,+CAA+C;IAC/C,KAAK;IACL,0CAA0C;IAC1C,KAAK;IACL,oCAAoC;IACpC,KAAK;IACL,6BAA6B;IAC7B,KAAK;IACL,8CAA8C;IAC9C,KAAK;IACL,sCAAsC;IACtC,KAAK;IACL,wCAAwC;IACxC,KAAK;IACL,kDAAkD;IAClD,KAAK;IACL,+DAA+D;IAC/D,KAAK;IACL,yCAAyC;IACzC,KAAK;IACL,kCAAkC;IAClC,KAAK;IACL,2CAA2C;IAC3C,KAAK;IACL,sCAAsC;IACtC,KAAK;IACL,mCAAmC;IACnC,yEAAyE;IACzE,0EAA0E;IAC1E,oEAAoE;IACpE,0CAA0C;IAC1C,oEAAoE;IACpE,oEAAoE;IACpE,mDAAmD;CAC3C,CAAA"}

package/dist/space/collections.d.ts

@@ -22,10 +22,10 @@ export declare const WALLET_ACTIVITY_COLLECTION = "wallet-activity";
  */
 export declare const APP_CONNECTIONS_COLLECTION = "app-connections";
 /**
- * The EDV-encrypted writer roster: one entry per registered writer, naming
- * the `writerId` a revision carries.
+ * The EDV-encrypted `connections` directory: one entry per party the wallet
+ * has dealt with (an app, an agent, a wallet client, a contact).
  */
-export declare const REGISTERED_WRITERS_COLLECTION = "registered-writers";
+export declare const CONNECTIONS_COLLECTION = "connections";
 /**
  * What provisioning a wallet Space collection needs: the collection id, the
  * friendly display name both wallets pass as the server-side collection name,
@@ -37,12 +37,20 @@ export declare const REGISTERED_WRITERS_COLLECTION = "registered-writers";
  *   bare and declared encrypted by its governing history log's genesis.
  * - `isPublic` -- whether the collection is granted collection-level world read
  *   on the server.
+ * - `grantable` -- whether an App Connect or interaction-URL grant may name the
+ *   collection, read-only or otherwise. It is independent of `shareable`.
+ *   `public-credentials` is not shareable yet is grantable. `app-connections`
+ *   carries a key-epoch roster yet is never grantable, since its Resources are
+ *   the connected apps' private seeds. A key- or seed-bearing collection MUST
+ *   be `grantable: false`. The field is wallet-side policy only and is never
+ *   written to the server.
  */
 export interface SpaceProvisionSpec {
     collectionId: string;
     name: string;
     encryption: 'edv' | 'plaintext';
     isPublic: boolean;
+    grantable: boolean;
 }
 /**
  * A declarative descriptor of a synced wallet Space collection: the
@@ -112,18 +120,21 @@ export declare const CONTACTS_HISTORY_SPACE_COLLECTION_SPEC: SpaceCollectionSpec
  * replica, but in their own collection: keeping them out of
  * `private-credentials` means the credential-wide surfaces (public-link
  * creation, collection shares) can structurally never reach a seed.
- * `shareable: false` is the point of the split.
+ * `shareable: false` is the point of the split, and `grantable: false` keeps
+ * every requester's grant off the seeds too.
  */
 export declare const APP_CONNECTIONS_COLLECTION_SPEC: SpaceCollectionSpec;
 /**
- * The writer roster: one mutable EDV envelope per registered writer, at a
- * resource id derived from the account DID and the `writerId`
- * (`registeredWriterResourceId`). It annotates revision history with display
- * labels. Not shareable for now: a history grantee sees its revisions under
- * the fallback label. It is read and written directly, with no local replica
- * and no sync feed.
+ * The `connections` directory: one mutable EDV envelope per party, at a
+ * resource id keyed by the collection's blinded-index key
+ * (`connectionResourceId` in `@interop/wallet-core/connections`). It is the
+ * wallet's revocation index (each entry's `grants`) and its party names, so
+ * one reader would learn every party, its names and origins, and every
+ * capability delegated to it. Hence neither shareable nor grantable. Its only
+ * key-epoch recipient is the user key, and no party ever writes it. It is
+ * read and written directly, with no local replica and no sync feed.
  */
-export declare const REGISTERED_WRITERS_COLLECTION_SPEC: SpaceCollectionSpec;
+export declare const CONNECTIONS_COLLECTION_SPEC: SpaceCollectionSpec;
 /**
  * The `id` collection's provisioning attributes: plaintext (it holds only
  * world-readable DID artifacts) with a collection-level public-read grant.
@@ -135,7 +146,8 @@ export declare const ID_COLLECTION_SPEC: SpaceProvisionSpec;
  * envelope) and capability-only -- never public, exactly so `id` can be
  * world-readable without exposing key material. Its roster names a passphrase
  * credential by its passphrase-derived key beside a wrap of the user key, so
- * a third-party read grant on it is an offline guessing oracle.
+ * a third-party read grant on it is an offline guessing oracle, which is why it
+ * is never grantable.
  */
 export declare const KEY_MAP_COLLECTION_SPEC: SpaceProvisionSpec;
 /**
@@ -144,6 +156,7 @@ export declare const KEY_MAP_COLLECTION_SPEC: SpaceProvisionSpec;
  * itself, so the collection needs no EDV envelope) and capability-only. Read
  * and written directly with the remote as the source of truth, under
  * conditional writes; it gets no local replica and no background replication.
+ * Never grantable: it is the account's own unlock-method registry.
  */
 export declare const UNLOCK_METHODS_COLLECTION_SPEC: SpaceProvisionSpec;
 /**
@@ -162,9 +175,9 @@ export declare const WALLET_SPACE_SYNCED_SPECS: SpaceCollectionSpec[];
 export declare const WALLET_SPACE_SYSTEM_SPECS: SpaceProvisionSpec[];
 /**
  * The full wallet Space layout -- every collection the provisioning wallet
- * ensures: the synced feeds first, then the directly read writer roster, then
- * the system collections. A Space provisioned from this roster is identical no
- * matter which wallet app created it.
+ * ensures: the synced feeds first, then the directly read `connections`
+ * directory, then the system collections. A Space provisioned from this roster
+ * is identical no matter which wallet app created it.
  */
 export declare const WALLET_SPACE_PROVISION_ROSTER: SpaceProvisionSpec[];
 /**
@@ -225,16 +238,6 @@ export declare const USER_KEY_ROSTER_LOG_RESOURCE = "user-key.jsonl";
  * reads and writes exactly this sub-resource through the Collection handle.
  */
 export declare const COLLECTION_HISTORY_LOG_SUBRESOURCE = "meta/log";
-/**
- * The enrolled-client display labels, sibling of `keys.json` and
- * `user-key.jsonl` in the same private `key-map` collection: a plain-JSON map
- * from a client's signing-key multibase to its human-chosen label. Display
- * metadata only -- the did:webvh document carries key material, never labels --
- * and plaintext by the collection's convention: the storage host can read the
- * labels, but it already serves the world-readable log that names every client
- * key, so a label adds only the display name.
- */
-export declare const CLIENT_LABELS_RESOURCE = "client-labels.json";
 /**
  * The account's unlock-method registry, the single resource of the
  * `unlock-methods` collection: the records naming which methods can unlock the

package/dist/space/collections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAgCA,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,wBAAwB,CAAA;AAE/B;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,iBAAiB,CAAA;AAE/C;;GAEG;AACH,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE;;GAEG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAC3D;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAC3D;;;GAGG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AAEjE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;CACnB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAQjD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAQhD,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAQ7C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,mBAM5C,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,EAAE,mBAMpD,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAQ7C,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAQhD,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,kBAKhC,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,EAAE,kBAKrC,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,kBAK5C,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,mBAAmB,EAO1D,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,kBAAkB,EAIzD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAE,kBAAkB,EAI7D,CAAA;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,IAAI,MAAM,EAAE,CAIvD;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,mBAAmB,CAAA;AAC5D;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,kCAAkC,aAAa,CAAA;AAC5D;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,iBAAiB,CAAA"}
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAiCA,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,wBAAwB,CAAA;AAE/B;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,iBAAiB,CAAA;AAE/C;;GAEG;AACH,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE;;GAEG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAC3D;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAC3D;;;GAGG;AACH,eAAO,MAAM,sBAAsB,gBAAgB,CAAA;AAEnD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;IACjB,SAAS,EAAE,OAAO,CAAA;CACnB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;CACnB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBASjD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAShD,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAS7C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,mBAO5C,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,EAAE,mBAOpD,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAS7C,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,EAAE,mBASzC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,kBAMhC,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,EAAE,kBAMrC,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,EAAE,kBAM5C,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,mBAAmB,EAO1D,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,kBAAkB,EAIzD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAE,kBAAkB,EAI7D,CAAA;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,IAAI,MAAM,EAAE,CAIvD;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,mBAAmB,CAAA;AAC5D;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,kCAAkC,aAAa,CAAA;AAC5D;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,iBAAiB,CAAA"}

package/dist/space/collections.js

@@ -7,8 +7,9 @@
  * the other. Both replicas MUST agree on every field here -- `collectionId`
  * decides where a document lands on the server, `idDerivation` and `mutable`
  * decide whether it is overwritten in place or only appended, `encryption` /
- * `isPublic` decide how it is stored and who can read it, and `shareable`
- * decides whether it may be offered on the wallet's share surface. A
+ * `isPublic` decide how it is stored and who can read it, `shareable`
+ * decides whether it may be offered on the wallet's share surface, and
+ * `grantable` decides whether a requester's grant may name it at all. A
  * disagreement splits the feed into separate or incompatibly-shaped collections
  * that never converge.
  *
@@ -46,10 +47,10 @@ export const WALLET_ACTIVITY_COLLECTION = 'wallet-activity';
  */
 export const APP_CONNECTIONS_COLLECTION = 'app-connections';
 /**
- * The EDV-encrypted writer roster: one entry per registered writer, naming
- * the `writerId` a revision carries.
+ * The EDV-encrypted `connections` directory: one entry per party the wallet
+ * has dealt with (an app, an agent, a wallet client, a contact).
  */
-export const REGISTERED_WRITERS_COLLECTION = 'registered-writers';
+export const CONNECTIONS_COLLECTION = 'connections';
 /**
  * The immutable credential replica: each credential stored as an EDV envelope,
  * addressed by the envelope's content hash, never overwritten, never public.
@@ -61,7 +62,8 @@ export const PRIVATE_CREDENTIALS_COLLECTION_SPEC = {
     mutable: false,
     encryption: 'edv',
     isPublic: false,
-    shareable: true
+    shareable: true,
+    grantable: true
 };
 /**
  * The plaintext, world-readable copies of shared credentials, keyed by the
@@ -76,7 +78,8 @@ export const PUBLIC_CREDENTIALS_COLLECTION_SPEC = {
     mutable: false,
     encryption: 'plaintext',
     isPublic: true,
-    shareable: false
+    shareable: false,
+    grantable: true
 };
 /**
  * The append-only activity log: each entry stored as an EDV envelope, addressed
@@ -95,7 +98,8 @@ export const WALLET_ACTIVITY_COLLECTION_SPEC = {
     mutable: false,
     encryption: 'edv',
     isPublic: false,
-    shareable: false
+    shareable: false,
+    grantable: true
 };
 /**
  * The contacts head collection as it sits in the wallet Space: the identity
@@ -109,7 +113,8 @@ export const CONTACTS_SPACE_COLLECTION_SPEC = {
     name: 'Contacts',
     encryption: 'edv',
     isPublic: false,
-    shareable: true
+    shareable: true,
+    grantable: true
 };
 /**
  * The contacts history log in the wallet Space: identity contract spread from
@@ -121,7 +126,8 @@ export const CONTACTS_HISTORY_SPACE_COLLECTION_SPEC = {
     name: 'Contacts History',
     encryption: 'edv',
     isPublic: false,
-    shareable: true
+    shareable: true,
+    grantable: true
 };
 /**
  * The app-key credentials behind connected apps, each carrying that app's
@@ -129,7 +135,8 @@ export const CONTACTS_HISTORY_SPACE_COLLECTION_SPEC = {
  * replica, but in their own collection: keeping them out of
  * `private-credentials` means the credential-wide surfaces (public-link
  * creation, collection shares) can structurally never reach a seed.
- * `shareable: false` is the point of the split.
+ * `shareable: false` is the point of the split, and `grantable: false` keeps
+ * every requester's grant off the seeds too.
  */
 export const APP_CONNECTIONS_COLLECTION_SPEC = {
     collectionId: APP_CONNECTIONS_COLLECTION,
@@ -138,24 +145,28 @@ export const APP_CONNECTIONS_COLLECTION_SPEC = {
     mutable: false,
     encryption: 'edv',
     isPublic: false,
-    shareable: false
+    shareable: false,
+    grantable: false
 };
 /**
- * The writer roster: one mutable EDV envelope per registered writer, at a
- * resource id derived from the account DID and the `writerId`
- * (`registeredWriterResourceId`). It annotates revision history with display
- * labels. Not shareable for now: a history grantee sees its revisions under
- * the fallback label. It is read and written directly, with no local replica
- * and no sync feed.
+ * The `connections` directory: one mutable EDV envelope per party, at a
+ * resource id keyed by the collection's blinded-index key
+ * (`connectionResourceId` in `@interop/wallet-core/connections`). It is the
+ * wallet's revocation index (each entry's `grants`) and its party names, so
+ * one reader would learn every party, its names and origins, and every
+ * capability delegated to it. Hence neither shareable nor grantable. Its only
+ * key-epoch recipient is the user key, and no party ever writes it. It is
+ * read and written directly, with no local replica and no sync feed.
  */
-export const REGISTERED_WRITERS_COLLECTION_SPEC = {
-    collectionId: REGISTERED_WRITERS_COLLECTION,
-    name: 'Registered Writers',
+export const CONNECTIONS_COLLECTION_SPEC = {
+    collectionId: CONNECTIONS_COLLECTION,
+    name: 'Connections',
     idDerivation: 'random',
     mutable: true,
     encryption: 'edv',
     isPublic: false,
-    shareable: false
+    shareable: false,
+    grantable: false
 };
 /**
  * The `id` collection's provisioning attributes: plaintext (it holds only
@@ -165,7 +176,8 @@ export const ID_COLLECTION_SPEC = {
     collectionId: ID_COLLECTION.id,
     name: ID_COLLECTION.name,
     encryption: 'plaintext',
-    isPublic: true
+    isPublic: true,
+    grantable: true
 };
 /**
  * The `key-map` collection's provisioning attributes: plaintext (its resources
@@ -173,13 +185,15 @@ export const ID_COLLECTION_SPEC = {
  * envelope) and capability-only -- never public, exactly so `id` can be
  * world-readable without exposing key material. Its roster names a passphrase
  * credential by its passphrase-derived key beside a wrap of the user key, so
- * a third-party read grant on it is an offline guessing oracle.
+ * a third-party read grant on it is an offline guessing oracle, which is why it
+ * is never grantable.
  */
 export const KEY_MAP_COLLECTION_SPEC = {
     collectionId: KEY_MAP_COLLECTION.id,
     name: KEY_MAP_COLLECTION.name,
     encryption: 'plaintext',
-    isPublic: false
+    isPublic: false,
+    grantable: false
 };
 /**
  * The `unlock-methods` collection's provisioning attributes: plaintext on the
@@ -187,12 +201,14 @@ export const KEY_MAP_COLLECTION_SPEC = {
  * itself, so the collection needs no EDV envelope) and capability-only. Read
  * and written directly with the remote as the source of truth, under
  * conditional writes; it gets no local replica and no background replication.
+ * Never grantable: it is the account's own unlock-method registry.
  */
 export const UNLOCK_METHODS_COLLECTION_SPEC = {
     collectionId: UNLOCK_METHODS_COLLECTION.id,
     name: UNLOCK_METHODS_COLLECTION.name,
     encryption: 'plaintext',
-    isPublic: false
+    isPublic: false,
+    grantable: false
 };
 /**
  * The synced wallet Space collections, in provision order: the feeds a wallet
@@ -221,13 +237,13 @@ export const WALLET_SPACE_SYSTEM_SPECS = [
 ];
 /**
  * The full wallet Space layout -- every collection the provisioning wallet
- * ensures: the synced feeds first, then the directly read writer roster, then
- * the system collections. A Space provisioned from this roster is identical no
- * matter which wallet app created it.
+ * ensures: the synced feeds first, then the directly read `connections`
+ * directory, then the system collections. A Space provisioned from this roster
+ * is identical no matter which wallet app created it.
  */
 export const WALLET_SPACE_PROVISION_ROSTER = [
     ...WALLET_SPACE_SYNCED_SPECS,
-    REGISTERED_WRITERS_COLLECTION_SPEC,
+    CONNECTIONS_COLLECTION_SPEC,
     ...WALLET_SPACE_SYSTEM_SPECS
 ];
 /**
@@ -290,16 +306,6 @@ export const USER_KEY_ROSTER_LOG_RESOURCE = 'user-key.jsonl';
  * reads and writes exactly this sub-resource through the Collection handle.
  */
 export const COLLECTION_HISTORY_LOG_SUBRESOURCE = 'meta/log';
-/**
- * The enrolled-client display labels, sibling of `keys.json` and
- * `user-key.jsonl` in the same private `key-map` collection: a plain-JSON map
- * from a client's signing-key multibase to its human-chosen label. Display
- * metadata only -- the did:webvh document carries key material, never labels --
- * and plaintext by the collection's convention: the storage host can read the
- * labels, but it already serves the world-readable log that names every client
- * key, so a label adds only the display name.
- */
-export const CLIENT_LABELS_RESOURCE = 'client-labels.json';
 /**
  * The account's unlock-method registry, the single resource of the
  * `unlock-methods` collection: the records naming which methods can unlock the

package/dist/space/collections.js.map

@@ -1 +1 @@
-{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EACL,wBAAwB,EACxB,gCAAgC,EACjC,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EAC1B,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,wBAAwB,CAAA;AAE/B;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAA;AAE/C;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAA;AACnE;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AACjE;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAC3D;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAC3D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AA+CjE;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAwB;IACtE,YAAY,EAAE,8BAA8B;IAC5C,IAAI,EAAE,wBAAwB;IAC9B,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,IAAI;CAChB,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,IAAI,EAAE,0CAA0C;IAChD,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,KAAK;CACjB,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,IAAI,EAAE,qBAAqB;IAC3B,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;CACjB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAwB;IACjE,GAAG,wBAAwB;IAC3B,IAAI,EAAE,UAAU;IAChB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,IAAI;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAwB;IACzE,GAAG,gCAAgC;IACnC,IAAI,EAAE,kBAAkB;IACxB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,IAAI;CAChB,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,IAAI,EAAE,iBAAiB;IACvB,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;CACjB,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,IAAI,EAAE,oBAAoB;IAC1B,YAAY,EAAE,QAAQ;IACtB,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;CACjB,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAuB;IACpD,YAAY,EAAE,aAAa,CAAC,EAAE;IAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;IACxB,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAuB;IACzD,YAAY,EAAE,kBAAkB,CAAC,EAAE;IACnC,IAAI,EAAE,kBAAkB,CAAC,IAAI;IAC7B,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAuB;IAChE,YAAY,EAAE,yBAAyB,CAAC,EAAE;IAC1C,IAAI,EAAE,yBAAyB,CAAC,IAAI;IACpC,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,mCAAmC;IACnC,kCAAkC;IAClC,+BAA+B;IAC/B,8BAA8B;IAC9B,sCAAsC;IACtC,+BAA+B;CAChC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAyB;IAC7D,kBAAkB;IAClB,uBAAuB;IACvB,8BAA8B;CAC/B,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAyB;IACjE,GAAG,yBAAyB;IAC5B,kCAAkC;IAClC,GAAG,yBAAyB;CAC7B,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO,6BAA6B,CAAC,MAAM,CACzC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAClC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAA;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAC3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAC5C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAA;AAC5D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,UAAU,CAAA;AAC5D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAA;AAC1D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAA"}
+{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EACL,wBAAwB,EACxB,gCAAgC,EACjC,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EAC1B,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,wBAAwB,CAAA;AAE/B;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAA;AAE/C;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAA;AACnE;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AACjE;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAC3D;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAC3D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAA;AAuDnD;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAwB;IACtE,YAAY,EAAE,8BAA8B;IAC5C,IAAI,EAAE,wBAAwB;IAC9B,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;CAChB,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,IAAI,EAAE,0CAA0C;IAChD,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,IAAI;CAChB,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,IAAI,EAAE,qBAAqB;IAC3B,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,IAAI;CAChB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAwB;IACjE,GAAG,wBAAwB;IAC3B,IAAI,EAAE,UAAU;IAChB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAwB;IACzE,GAAG,gCAAgC;IACnC,IAAI,EAAE,kBAAkB;IACxB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;CAChB,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,IAAI,EAAE,iBAAiB;IACvB,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,KAAK;CACjB,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAwB;IAC9D,YAAY,EAAE,sBAAsB;IACpC,IAAI,EAAE,aAAa;IACnB,YAAY,EAAE,QAAQ;IACtB,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,KAAK;CACjB,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAuB;IACpD,YAAY,EAAE,aAAa,CAAC,EAAE;IAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;IACxB,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;CAChB,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAuB;IACzD,YAAY,EAAE,kBAAkB,CAAC,EAAE;IACnC,IAAI,EAAE,kBAAkB,CAAC,IAAI;IAC7B,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;CACjB,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAuB;IAChE,YAAY,EAAE,yBAAyB,CAAC,EAAE;IAC1C,IAAI,EAAE,yBAAyB,CAAC,IAAI;IACpC,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;CACjB,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,mCAAmC;IACnC,kCAAkC;IAClC,+BAA+B;IAC/B,8BAA8B;IAC9B,sCAAsC;IACtC,+BAA+B;CAChC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAyB;IAC7D,kBAAkB;IAClB,uBAAuB;IACvB,8BAA8B;CAC/B,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAyB;IACjE,GAAG,yBAAyB;IAC5B,2BAA2B;IAC3B,GAAG,yBAAyB;CAC7B,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO,6BAA6B,CAAC,MAAM,CACzC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAClC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAA;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAC3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAC5C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAA;AAC5D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,UAAU,CAAA;AAC5D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAA"}

package/dist/space/index.d.ts

@@ -6,7 +6,8 @@
  * WAS-enabled wallet apps share.
  *
  * - The shared collection ids and descriptive specs (`private-credentials`,
- *   `public-credentials`, `wallet-activity`, `app-connections`; the contacts
+ *   `public-credentials`, `wallet-activity`, `app-connections`, and the
+ *   directly read `connections` directory; the contacts
  *   identity contract
  *   stays in `@interop/social-core`, spread into the wallet-Space specs here),
  *   and the provisioning rosters that split them into synced feeds vs.
@@ -38,8 +39,8 @@
  *   ids, including the ceremonies still implemented app-side.
  */
 export { deleteSpaceWithCapability } from './deleteSpace.js';
-export { WALLET_SPACE_NAME, PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, APP_CONNECTIONS_COLLECTION, REGISTERED_WRITERS_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, CONTACTS_SPACE_COLLECTION_SPEC, CONTACTS_HISTORY_SPACE_COLLECTION_SPEC, APP_CONNECTIONS_COLLECTION_SPEC, REGISTERED_WRITERS_COLLECTION_SPEC, WALLET_SPACE_SYNCED_SPECS, WALLET_SPACE_SYSTEM_SPECS, WALLET_SPACE_PROVISION_ROSTER } from './collections.js';
-export { ID_COLLECTION, KEY_MAP_COLLECTION, UNLOCK_METHODS_COLLECTION, KEYRING_COLLECTION, ID_COLLECTION_SPEC, KEY_MAP_COLLECTION_SPEC, UNLOCK_METHODS_COLLECTION_SPEC, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_LOG_RESOURCE, COLLECTION_HISTORY_LOG_SUBRESOURCE, CLIENT_LABELS_RESOURCE, UNLOCK_METHODS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
+export { WALLET_SPACE_NAME, PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, APP_CONNECTIONS_COLLECTION, CONNECTIONS_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, CONTACTS_SPACE_COLLECTION_SPEC, CONTACTS_HISTORY_SPACE_COLLECTION_SPEC, APP_CONNECTIONS_COLLECTION_SPEC, CONNECTIONS_COLLECTION_SPEC, WALLET_SPACE_SYNCED_SPECS, WALLET_SPACE_SYSTEM_SPECS, WALLET_SPACE_PROVISION_ROSTER } from './collections.js';
+export { ID_COLLECTION, KEY_MAP_COLLECTION, UNLOCK_METHODS_COLLECTION, KEYRING_COLLECTION, ID_COLLECTION_SPEC, KEY_MAP_COLLECTION_SPEC, UNLOCK_METHODS_COLLECTION_SPEC, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_LOG_RESOURCE, COLLECTION_HISTORY_LOG_SUBRESOURCE, UNLOCK_METHODS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
 export type { SpaceProvisionSpec, SpaceCollectionSpec } from './collections.js';
 export { provisionWalletSpace } from './provisioning.js';
 export { plaintextCollection } from './plaintextCollection.js';

package/dist/space/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,+BAA+B,EAC/B,kCAAkC,EAClC,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,4BAA4B,EAC5B,kCAAkC,EAClC,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC7B,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,cAAc,EACd,aAAa,EACb,uBAAuB,EACxB,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,EACtB,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,+BAA+B,EAC/B,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,4BAA4B,EAC5B,kCAAkC,EAClC,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC7B,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,cAAc,EACd,aAAa,EACb,uBAAuB,EACxB,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA"}

package/dist/space/index.js

@@ -6,7 +6,8 @@
  * WAS-enabled wallet apps share.
  *
  * - The shared collection ids and descriptive specs (`private-credentials`,
- *   `public-credentials`, `wallet-activity`, `app-connections`; the contacts
+ *   `public-credentials`, `wallet-activity`, `app-connections`, and the
+ *   directly read `connections` directory; the contacts
  *   identity contract
  *   stays in `@interop/social-core`, spread into the wallet-Space specs here),
  *   and the provisioning rosters that split them into synced feeds vs.
@@ -38,8 +39,8 @@
  *   ids, including the ceremonies still implemented app-side.
  */
 export { deleteSpaceWithCapability } from './deleteSpace.js';
-export { WALLET_SPACE_NAME, PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, APP_CONNECTIONS_COLLECTION, REGISTERED_WRITERS_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, CONTACTS_SPACE_COLLECTION_SPEC, CONTACTS_HISTORY_SPACE_COLLECTION_SPEC, APP_CONNECTIONS_COLLECTION_SPEC, REGISTERED_WRITERS_COLLECTION_SPEC, WALLET_SPACE_SYNCED_SPECS, WALLET_SPACE_SYSTEM_SPECS, WALLET_SPACE_PROVISION_ROSTER } from './collections.js';
-export { ID_COLLECTION, KEY_MAP_COLLECTION, UNLOCK_METHODS_COLLECTION, KEYRING_COLLECTION, ID_COLLECTION_SPEC, KEY_MAP_COLLECTION_SPEC, UNLOCK_METHODS_COLLECTION_SPEC, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_LOG_RESOURCE, COLLECTION_HISTORY_LOG_SUBRESOURCE, CLIENT_LABELS_RESOURCE, UNLOCK_METHODS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
+export { WALLET_SPACE_NAME, PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, APP_CONNECTIONS_COLLECTION, CONNECTIONS_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, CONTACTS_SPACE_COLLECTION_SPEC, CONTACTS_HISTORY_SPACE_COLLECTION_SPEC, APP_CONNECTIONS_COLLECTION_SPEC, CONNECTIONS_COLLECTION_SPEC, WALLET_SPACE_SYNCED_SPECS, WALLET_SPACE_SYSTEM_SPECS, WALLET_SPACE_PROVISION_ROSTER } from './collections.js';
+export { ID_COLLECTION, KEY_MAP_COLLECTION, UNLOCK_METHODS_COLLECTION, KEYRING_COLLECTION, ID_COLLECTION_SPEC, KEY_MAP_COLLECTION_SPEC, UNLOCK_METHODS_COLLECTION_SPEC, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, USER_KEY_ROSTER_LOG_RESOURCE, COLLECTION_HISTORY_LOG_SUBRESOURCE, UNLOCK_METHODS_RESOURCE, KEYRING_RESOURCE } from './collections.js';
 export { provisionWalletSpace } from './provisioning.js';
 export { plaintextCollection } from './plaintextCollection.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryGrant, addHistoryWalletLogin, addHistoryAppRevoke, addHistoryAgentRevoke, addHistoryClientRevoked, addHistoryGenerationCollected, addHistoryContentImported, addHistoryProfileCreated, addHistoryCollectionShared, addHistoryCollectionUnshared } from './activity.js';

package/dist/space/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,+BAA+B,EAC/B,kCAAkC,EAClC,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,4BAA4B,EAC5B,kCAAkC,EAClC,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC7B,MAAM,eAAe,CAAA;AAOtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,EACtB,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,+BAA+B,EAC/B,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,4BAA4B,EAC5B,kCAAkC,EAClC,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC7B,MAAM,eAAe,CAAA;AAOtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@interop/wallet-core",
   "description": "Shared wallet-domain logic (WAS sync engine core and wallet Space layout contracts) for Interop wallet apps.",
-  "version": "0.93.0",
+  "version": "0.95.0",
   "type": "module",
   "scripts": {
     "build": "pnpm run clear && tsc",
@@ -37,8 +37,8 @@
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@interop/logger": "^0.2.0",
-    "@interop/storage-core": "^0.22.0",
-    "@interop/was-client": "^0.80.0",
+    "@interop/storage-core": "^0.25.0",
+    "@interop/was-client": "^0.81.0",
     "@playwright/test": "^1.60.0",
     "@types/node": "^26.0.1",
     "@vitest/coverage-v8": "^4.1.7",
@@ -199,11 +199,11 @@
       "import": "./dist/clients/index.js",
       "default": "./dist/clients/index.js"
     },
-    "./writers": {
-      "types": "./dist/writers/index.d.ts",
-      "react-native": "./dist/writers/index.js",
-      "import": "./dist/writers/index.js",
-      "default": "./dist/writers/index.js"
+    "./connections": {
+      "types": "./dist/connections/index.d.ts",
+      "react-native": "./dist/connections/index.js",
+      "import": "./dist/connections/index.js",
+      "default": "./dist/connections/index.js"
     },
     "./menders": {
       "types": "./dist/menders/index.d.ts",