@openvtc/trust-tasks 0.26.24 → 0.26.26

package/src/_shared/components.ts

@@ -422,7 +422,20 @@ export type BlobRef = DigestMultibase;
 /**
  * One leaf of a board. A leaf's hash is the RFC 9162 leaf hash of the JCS canonicalization of this object. Entries carry no time of arrival: the order is the board's, and a timestamp would hand anyone who reads the board the timing the registrar's log would need to pair a ticket with its cast.
  */
-export type BoardEntry = CastEntry | ReplacementEntry | LifecycleEntry | ResultEntry;
+export type BoardEntry =
+  | CastEntry
+  | ReplacementEntry
+  | LifecycleEntry
+  | ResultEntry
+  | EncryptedCastEntry
+  | TransportKeyEntry
+  | DealingEntry
+  | ConfirmationEntry
+  | JustificationEntry
+  | ElectionKeyEntry
+  | PartialDecryptionsEntry
+  | UnsealedEntry
+  | SpoiledEntry;
 /**
  * `public`: anyone reads the board. `private`: the community, the auditors the manifest names and, for one cast's inclusion, the holder of its receipt (VTI-VOT-052).
  */
@@ -475,7 +488,8 @@ export type Capability_DeviceV0_1 =
   | "pcs-vetter"
   | "pcs-applicant"
   | "witness-request"
-  | "pcs-voter";
+  | "pcs-voter"
+  | "pcs-trustee";
 /**
  * Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything.
  */
@@ -504,7 +518,8 @@ export type Capability_DeviceV0_2 =
   | "pcsVetter"
   | "pcsApplicant"
   | "witnessRequest"
-  | "pcsVoter";
+  | "pcsVoter"
+  | "pcsTrustee";
 /**
  * Number of chunks in the bundle, equal to ceil(expectedSizeBytes / chunkSize). Bounded at 4096 so that the manifest itself — one digest per chunk — fits in the single document that carries it under the same message-size reasoning as a chunk.
  */
@@ -598,6 +613,12 @@ export type DataCommitment = DigestMultibase;
  * The approver's answer. `deny` aborts the pending request; a subsequent submit of the same task starts a fresh one.
  */
 export type Decision = "approve" | "deny";
+/**
+ * What a partial decryption decrypts: the sealed cast at a board leaf, or the total of one option of one question.
+ */
+export type DecryptionTarget = {
+  [k: string]: unknown | undefined;
+};
 /**
  * `queued`: stored and not yet handed to the recipient. `delivered`: handed to the recipient (pickup or live stream) but not yet deleted by it — the recipient has not acknowledged it.
  */
@@ -657,6 +678,13 @@ export type DigestMultibase = string;
  * A community directory entry's identifier, exactly as that community's directory returned it. Opaque and community-scoped: the agent stores and compares it as a string, never parses it, and never treats the same value under two communities as the same entry.
  */
 export type DirectoryEntryId = string;
+/**
+ * A disjunctive proof that a ciphertext encrypts one value of a public list: one `(c, z)` per value, in the list's order (CONVENTIONS §9.3).
+ *
+ * @minItems 1
+ * @maxItems 65
+ */
+export type DisjunctiveProof = [SigmaProof, ...SigmaProof[]];
 /**
  * The kinds of drift, named so that a task can select a drift item by kind. The same values, with the same meanings, as `DriftItem`'s `type`, which keeps its own inline list so that `DriftItem` stays textually identical to 0.1; the two lists change together. `roleAdded` — someone holds a forge role the projection does not give them. `roleRemoved` — a projected role is missing. `roleChanged` — a projected role is present at another level. `requiredCheckMissing` — the verify-trust check is no longer required. `protectionWeakened` — branch protection or a ruleset is weaker than the projection in another way (force-push allowed, bypass actors added). `bootstrapMissing` — a bootstrap file or variable is gone.
  */
@@ -688,6 +716,12 @@ export type ElectionState = "registered" | "registration" | "voting" | "closed"
  * The three rights that carry authority over other people's rights: `git.ns.admin`, `git.repo.create` (which makes its holder the owner of every repository they create) and `git.repo.own`. Separation of duties applies to these: nobody grants one to themselves through git-ns/right/grant, or records one for themselves through any other task that grants on the actor's own authority. The explicit self-grant is git-ns/right/break-glass. `git.repo.maintain` and `git.commit.sign` are not elevated.
  */
 export type ElevatedRight = "git.ns.admin" | "git.repo.create" | "git.repo.own";
+/**
+ * A cast of a sealed or tallied-encrypted election: exactly one of `sealed` (the Ballot's JCS bytes sealed to the election key) or `encrypted`, with the tag and the attestation over the JCS bytes of whichever is present (CONVENTIONS §3.6, §9.5).
+ */
+export type EncryptedCast = {
+  [k: string]: unknown | undefined;
+};
 /**
  * The anchor the binding rested on, recorded so an incident review can see how each factor came to exist. `install`: claimed with the community's install token (vtc/install/claim/finish/0.3). `invite`: redeemed from an administrator's invite (auth/step-up/approver/redeem/finish/0.1). `selfService`: added by the subject behind a factor they already held (auth/step-up/approver/enroll/0.1). `offline`: redeemed from an invite minted by the operator with host access while the service was stopped — an `invite`-shaped redemption whose issuer was the host rather than an administrator.
  */
@@ -825,6 +859,10 @@ export type GroupCredentialId = string;
  * What the group is for. Plain text; a reader MUST NOT treat it as instructions. Same placement rules as `GroupName`.
  */
 export type GroupDescription = string;
+/**
+ * A Ristretto group element: its 32-byte compression, multibase base58btc. Never the identity (CONVENTIONS §9.1).
+ */
+export type GroupElement = string;
 /**
  * Opaque identifier of a community group: `grp_` followed by 16 to 64 base64url characters. Random and community-scoped; not the group's DID.
  */
@@ -837,6 +875,10 @@ export type GroupKind = "static" | "dynamic";
  * The group's name, shown to those who may see the group. The community's own record: never in the group's DID document or its credentials' subject beyond the group's DID. Plain text.
  */
 export type GroupName = string;
+/**
+ * A scalar mod the Ristretto group order: 32 canonical little-endian bytes, multibase base58btc (CONVENTIONS §9.1).
+ */
+export type GroupScalar = string;
 /**
  * The Farm-generated handle of one reservation: 16 to 32 bytes from a cryptographically secure random source, written as unpadded base64url (22 to 43 characters; 16 bytes, 22 characters, is what VTI-LNK-116 recommends). It is the `_id` of the trigger link (VTI-LNK-033) and is compared as a string. In a claim it MUST equal the document's `parentThreadId`. It confers no authority on its holder beyond the right to make one claim.
  */
@@ -1539,7 +1581,7 @@ export type SealedEnvelope_VaultV0_2 =
  */
 export type SealedTransferBundle = string;
 /**
- * `open`: ballots are recorded on the board as cast. `sealed`: ballots are encrypted to a jointly generated election key and decrypted after voting closes. `talliedEncrypted`: ballots are encrypted and only the totals are ever decrypted (VTI-VOT-060). Version 0.1 of the voting tasks carries open ballots only; a ballot box refuses to register any other level with `voting/election/register:unsupportedSecrecy` until the trustee tasks are specified.
+ * `open`: ballots are recorded on the board as cast. `sealed`: ballots are encrypted to a jointly generated election key and decrypted after voting closes. `talliedEncrypted`: ballots are encrypted and only the totals are ever decrypted (VTI-VOT-060). The encrypted levels are cast with `voting/ballot/cast-encrypted/0.1`, under an election key the trustees generate with `voting/trustees/*` (CONVENTIONS §9).
  */
 export type SecrecyLevel = "open" | "sealed" | "talliedEncrypted";
 /**
@@ -1770,6 +1812,14 @@ export type TransferId = string;
  * How a blob's bytes move. `proxied`: through the host, as chunk documents (rooms/blobs/upload/chunk, rooms/blobs/chunk). `direct`: straight between the member and the storage the room is assigned to, over time-limited URLs the host issues for one object and one method each; the host authorizes every object and verifies every upload, and never carries a byte. Which mode applies is the host's answer, from what the producer accepts, what the room's storage can do, and the room's tier.
  */
 export type TransferMode = "direct" | "proxied";
+/**
+ * A trustee's index: its position in the manifest's `trustees.dids`, counting from 1.
+ */
+export type TrusteeIndex = number;
+/**
+ * `enrolling`: transport keys are being published. `dealing`: dealings are. `confirming`: each trustee confirms or complains. `keyed`: the election key is formed. `decrypting`: voting has closed and partial decryptions are being published. `done`: every target is decrypted. `failed`: the key could not be formed in time.
+ */
+export type TrusteePhase = "enrolling" | "dealing" | "confirming" | "keyed" | "decrypting" | "done" | "failed";
 /**
  * A ULID in Crockford base32, uppercase. Used for `attributeId` and `profileId`. Chosen over a UUID because the leading 48 bits are a timestamp, so a key-ordered scan of the store is also creation-ordered and a `list` needs no secondary sort. Server-assigned on create; a producer MAY supply one to make a create idempotent, and a maintainer MUST reject a supplied value that already exists rather than silently overwriting.
  */
@@ -4846,6 +4896,57 @@ export interface ResultEntry {
   kind: "result";
   result: ElectionResult;
 }
+export interface EncryptedCastEntry {
+  kind: "encryptedCast";
+  cast: EncryptedCast;
+}
+export interface TransportKeyEntry {
+  kind: "transportKey";
+  transportKey: TransportKey;
+}
+export interface DealingEntry {
+  kind: "dealing";
+  dealing: Dealing;
+}
+export interface ConfirmationEntry {
+  kind: "confirmation";
+  trustee: TrusteeIndex;
+  /**
+   * @maxItems 64
+   */
+  complaints: TrusteeIndex[];
+}
+export interface JustificationEntry {
+  kind: "justification";
+  dealer: TrusteeIndex;
+  recipient: TrusteeIndex;
+  share: GroupScalar;
+}
+export interface ElectionKeyEntry {
+  kind: "electionKey";
+  electionKey: ElectionKey;
+}
+export interface PartialDecryptionsEntry {
+  kind: "partials";
+  trustee: TrusteeIndex;
+  /**
+   * @minItems 1
+   * @maxItems 100000
+   */
+  partials: [PartialDecryption, ...PartialDecryption[]];
+}
+export interface UnsealedEntry {
+  kind: "unsealed";
+  leafIndex: number;
+  ballot: Ballot;
+}
+/**
+ * A sealed cast that did not open, or opened to no valid ballot: not counted (CONVENTIONS §9.7).
+ */
+export interface SpoiledEntry {
+  kind: "spoiled";
+  leafIndex: number;
+}
 /**
  * A board's tree head (RFC 9162 §2.1). A head is signed by being carried in a document the ballot box signs; whoever keeps a head keeps that whole document.
  */
@@ -5695,6 +5796,23 @@ export interface DataIntegrityProof {
 export interface DcqlQuery {
   [k: string]: unknown | undefined;
 }
+/**
+ * A trustee's contribution to the election key: Feldman commitments to its polynomial, a proof of knowledge of the constant term, and one share per trustee sealed to that trustee's transport key (CONVENTIONS §9.6).
+ */
+export interface Dealing {
+  dealer: TrusteeIndex;
+  /**
+   * @minItems 2
+   * @maxItems 64
+   */
+  commitments: [GroupElement, GroupElement, ...GroupElement[]];
+  pok: SigmaProof;
+  /**
+   * @minItems 2
+   * @maxItems 64
+   */
+  shares: [SealedShare, SealedShare, ...SealedShare[]];
+}
 /**
  * One presentation request awaiting the holder's decision, as the approver sees it.
  *
@@ -6646,6 +6764,44 @@ export interface EffectiveLimits {
    */
   hostCeilingBytes?: number;
 }
+/**
+ * `(a, b) = (r·G, M + r·Y)` under the election key `Y` (CONVENTIONS §9.2).
+ */
+export interface ElGamalCiphertext {
+  a: GroupElement;
+  b: GroupElement;
+}
+/**
+ * The election key and each trustee's public verification key, computed from the qualified dealings (CONVENTIONS §9.6). Anyone can recompute it from the board.
+ */
+export interface ElectionKey {
+  key: GroupElement;
+  /**
+   * The dealers whose dealings the key is formed from.
+   *
+   * @minItems 1
+   * @maxItems 64
+   */
+  qualified: [TrusteeIndex, ...TrusteeIndex[]];
+  /**
+   * @minItems 2
+   * @maxItems 64
+   */
+  verification: [
+    {
+      trustee: TrusteeIndex;
+      key: GroupElement;
+    },
+    {
+      trustee: TrusteeIndex;
+      key: GroupElement;
+    },
+    ...{
+      trustee: TrusteeIndex;
+      key: GroupElement;
+    }[]
+  ];
+}
 /**
  * An election's result, computable by anyone who can read its board from the board and the registration alone (VTI-VOT-070).
  */
@@ -6673,6 +6829,34 @@ export interface ElectionSummary {
   ballotsAdmitted: number;
   head: BoardHead;
 }
+/**
+ * A tallied-encrypted ballot: one EncryptedQuestion per manifest question, in the manifest's order. Never decrypted (VTI-VOT-064).
+ */
+export interface EncryptedBallot {
+  electionId: ElectionId;
+  manifestDigest: DigestMultibase;
+  /**
+   * @minItems 1
+   * @maxItems 64
+   */
+  questions: [EncryptedQuestion, ...EncryptedQuestion[]];
+}
+export interface EncryptedOption {
+  ciphertext: ElGamalCiphertext;
+  proof: DisjunctiveProof;
+}
+/**
+ * One choice question of a tallied-encrypted ballot: per option, in the manifest's order, an encryption of 0 or 1 with its proof; and a proof that the selections sum to a count the question admits (CONVENTIONS §9.5).
+ */
+export interface EncryptedQuestion {
+  question: Key_VotingV0_1;
+  /**
+   * @minItems 1
+   * @maxItems 64
+   */
+  options: [EncryptedOption, ...EncryptedOption[]];
+  sumProof: DisjunctiveProof;
+}
 export interface EncryptionParams {
   /**
    * AEAD identifier, e.g. `aes-256-gcm`.
@@ -8277,6 +8461,14 @@ export interface PartPlan {
    */
   partDigests: [DigestMultibase, ...DigestMultibase[]];
 }
+/**
+ * Trustee `trustee`'s share of one decryption, `d = x_j·a`, with a Chaum–Pedersen proof against its verification key (CONVENTIONS §9.7).
+ */
+export interface PartialDecryption {
+  target: DecryptionTarget;
+  d: GroupElement;
+  proof: SigmaProof;
+}
 export interface PasskeyVerificationMethod {
   /**
    * The verificationMethod id as it appears in the DID document: `<did>#passkey-<base64url(sha256(credentialId))>`. The fragment is content-derived so a verifier can locate this VM by recomputing `sha256(credential.id)`.
@@ -9098,6 +9290,46 @@ export interface RejectedKey {
    */
   reason: string;
 }
+/**
+ * What vtc/rooms/offers/list/0.3 returns in `renewals`: a renewal of an admission the member already holds, as the member it is addressed to sees it. `label` and `description` are the room's as they stand when it is read.
+ */
+export interface Renewal {
+  roomId: string;
+  /**
+   * The room's host: this community.
+   */
+  host: string;
+  label: RoomLabel;
+  /**
+   * Absent when the room has none.
+   */
+  description?: RoomDescription;
+  visibility: Visibility;
+  actions: MemberActions;
+  /**
+   * When the renewed authority expires.
+   */
+  validUntil: string;
+  /**
+   * When the authority it replaces expires: the renewal is listed until then, or until a later renewal or the member's removal supersedes it.
+   */
+  renews: string;
+  issuedAt: string;
+  credentials: RenewalCredentials;
+}
+/**
+ * The two credentials a renewal replaces, serialized as rooms/owner/{issue-membership,issue-authority} return them: a membership and an authority granting the same actions until the renewal's `validUntil`. No invitation: the member is already admitted, and a renewal never opens a second way in. The member's surface stores each with the member's key holder **in place of** the one it renews, never beside it.
+ */
+export interface RenewalCredentials {
+  /**
+   * The renewed Verifiable Membership Credential.
+   */
+  membership: string;
+  /**
+   * The renewed Verifiable Authority Credential granting `actions` until `validUntil`.
+   */
+  authority: string;
+}
 /**
  * One repository as the VTC records it.
  */
@@ -9572,7 +9804,7 @@ export interface RollbackResult {
   ext?: Ext;
 }
 /**
- * Links a room the community owns to the group: joining the group offers the member admission to the room with `actions`, valid for `validFor`; leaving removes them unless another source still covers them.
+ * Links a room the community owns to the group: joining the group offers the member admission to the room with `actions`, valid for `validFor`, renewed while they stay in the group (collected with vtc/rooms/offers/list at 0.3 or later); leaving removes them unless another source still covers them.
  */
 export interface RoomBindingSpec {
   kind: "room";
@@ -9865,6 +10097,13 @@ export interface Context_VtaV0_1 {
   type: "context";
   contextId: string;
 }
+/**
+ * Bytes sealed to a key: a random group element encrypted as `kem`, and the bytes under ChaCha20-Poly1305 with a key derived from it, multibase base58btc (CONVENTIONS §9.4).
+ */
+export interface SealedPayload {
+  kem: ElGamalCiphertext;
+  body: string;
+}
 /**
  * A record as a host stores it on an `attributed` or `private` room. Title, description, body, author and tags are sealed together in one blob rather than separately: splitting them would let a host learn the shape of the material from ciphertext lengths, for no benefit, since a reader decrypts the whole record either way.
  */
@@ -9890,6 +10129,10 @@ export interface SealedRecord {
    */
   version?: number;
 }
+export interface SealedShare {
+  recipient: TrusteeIndex;
+  share: SealedPayload;
+}
 /**
  * Who the service says it is.
  */
@@ -10151,6 +10394,13 @@ export interface Session_AuthV0_3 {
    */
   ext?: Ext;
 }
+/**
+ * A non-interactive sigma proof as its challenge and response `(c, z)` (Schnorr or Chaum–Pedersen; CONVENTIONS §9.3).
+ */
+export interface SigmaProof {
+  c: GroupScalar;
+  z: GroupScalar;
+}
 /**
  * One signing-key delegation, as its holder sees it. A delegation confers nothing of its own: it names an identity that already holds whatever standing it holds, and a document signed by the key is authorized by that identity's standing read at execution time.
  */
@@ -10671,6 +10921,14 @@ export interface TransferTarget {
    */
   expiresAt: string;
 }
+/**
+ * The group element a trustee's shares are sealed to, with a Schnorr proof of knowledge of its discrete log (CONVENTIONS §9.6).
+ */
+export interface TransportKey {
+  trustee: TrusteeIndex;
+  key: GroupElement;
+  pok: SigmaProof;
+}
 export interface TransportObservation {
   /**
    * The binding the document actually travelled on.

package/src/device/list/0.1/payload.ts

@@ -258,7 +258,8 @@ export const PAYLOAD_SCHEMA = {
         "pcs-vetter",
         "pcs-applicant",
         "witness-request",
-        "pcs-voter"
+        "pcs-voter",
+        "pcs-trustee"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },
@@ -607,7 +608,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "pcs-vetter",
         "pcs-applicant",
         "witness-request",
-        "pcs-voter"
+        "pcs-voter",
+        "pcs-trustee"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },

package/src/device/list/0.2/payload.ts

@@ -258,7 +258,8 @@ export const PAYLOAD_SCHEMA = {
         "pcsVetter",
         "pcsApplicant",
         "witnessRequest",
-        "pcsVoter"
+        "pcsVoter",
+        "pcsTrustee"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },
@@ -607,7 +608,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "pcsVetter",
         "pcsApplicant",
         "witnessRequest",
-        "pcsVoter"
+        "pcsVoter",
+        "pcsTrustee"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },

package/src/device/register/0.1/payload.ts

@@ -226,7 +226,8 @@ export const PAYLOAD_SCHEMA = {
         "pcs-vetter",
         "pcs-applicant",
         "witness-request",
-        "pcs-voter"
+        "pcs-voter",
+        "pcs-trustee"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },
@@ -565,7 +566,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "pcs-vetter",
         "pcs-applicant",
         "witness-request",
-        "pcs-voter"
+        "pcs-voter",
+        "pcs-trustee"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },

package/src/device/register/0.2/payload.ts

@@ -226,7 +226,8 @@ export const PAYLOAD_SCHEMA = {
         "pcsVetter",
         "pcsApplicant",
         "witnessRequest",
-        "pcsVoter"
+        "pcsVoter",
+        "pcsTrustee"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },
@@ -565,7 +566,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "pcsVetter",
         "pcsApplicant",
         "witnessRequest",
-        "pcsVoter"
+        "pcsVoter",
+        "pcsTrustee"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },

package/src/index.ts

@@ -462,6 +462,7 @@ export * as RoomsKeysAct_v0_2 from "./rooms/keys/act/0.2/payload.js";
 export * as RoomsKeysAct_v0_3 from "./rooms/keys/act/0.3/payload.js";
 export * as RoomsKeysAct_v0_4 from "./rooms/keys/act/0.4/payload.js";
 export * as RoomsKeysAct_v0_5 from "./rooms/keys/act/0.5/payload.js";
+export * as RoomsKeysAct_v0_6 from "./rooms/keys/act/0.6/payload.js";
 export * as RoomsKeysBackfill_v0_1 from "./rooms/keys/backfill/0.1/payload.js";
 export * as RoomsKeysBrowse_v0_1 from "./rooms/keys/browse/0.1/payload.js";
 export * as RoomsKeysChain_v0_1 from "./rooms/keys/chain/0.1/payload.js";
@@ -585,6 +586,7 @@ export * as VettingDecline_v0_1 from "./vetting/decline/0.1/payload.js";
 export * as VettingRequest_v0_1 from "./vetting/request/0.1/payload.js";
 export * as VettingSession_v0_1 from "./vetting/session/0.1/payload.js";
 export * as VotingShared_v0_1 from "./voting/_shared/0.1/voting.js";
+export * as VotingBallotCastEncrypted_v0_1 from "./voting/ballot/cast-encrypted/0.1/payload.js";
 export * as VotingBallotCast_v0_1 from "./voting/ballot/cast/0.1/payload.js";
 export * as VotingBoardConsistency_v0_1 from "./voting/board/consistency/0.1/payload.js";
 export * as VotingBoardHead_v0_1 from "./voting/board/head/0.1/payload.js";
@@ -595,6 +597,12 @@ export * as VotingElectionClose_v0_1 from "./voting/election/close/0.1/payload.j
 export * as VotingElectionRegister_v0_1 from "./voting/election/register/0.1/payload.js";
 export * as VotingElectionShow_v0_1 from "./voting/election/show/0.1/payload.js";
 export * as VotingResultShow_v0_1 from "./voting/result/show/0.1/payload.js";
+export * as VotingTrusteesConfirm_v0_1 from "./voting/trustees/confirm/0.1/payload.js";
+export * as VotingTrusteesDeal_v0_1 from "./voting/trustees/deal/0.1/payload.js";
+export * as VotingTrusteesDecrypt_v0_1 from "./voting/trustees/decrypt/0.1/payload.js";
+export * as VotingTrusteesEnrol_v0_1 from "./voting/trustees/enrol/0.1/payload.js";
+export * as VotingTrusteesJustify_v0_1 from "./voting/trustees/justify/0.1/payload.js";
+export * as VotingTrusteesStatus_v0_1 from "./voting/trustees/status/0.1/payload.js";
 export * as VrcRelationshipsIssue_v0_1 from "./vrc/relationships/issue/0.1/payload.js";
 export * as VrcRelationshipsPropose_v0_1 from "./vrc/relationships/propose/0.1/payload.js";
 export * as AppStateRecordShared_v0_1 from "./vta/_shared/0.1/app-state-record.js";
@@ -685,8 +693,14 @@ export * as VtaPcsRootRequest_v0_1 from "./vta/pcs/root-request/0.1/payload.js";
 export * as VtaPcsTokensAbandon_v0_1 from "./vta/pcs/tokens/abandon/0.1/payload.js";
 export * as VtaPcsTokensAccept_v0_1 from "./vta/pcs/tokens/accept/0.1/payload.js";
 export * as VtaPcsTokensRequest_v0_1 from "./vta/pcs/tokens/request/0.1/payload.js";
+export * as VtaPcsTrusteeDeal_v0_1 from "./vta/pcs/trustee/deal/0.1/payload.js";
+export * as VtaPcsTrusteeDecrypt_v0_1 from "./vta/pcs/trustee/decrypt/0.1/payload.js";
+export * as VtaPcsTrusteeEnrol_v0_1 from "./vta/pcs/trustee/enrol/0.1/payload.js";
+export * as VtaPcsTrusteeJustify_v0_1 from "./vta/pcs/trustee/justify/0.1/payload.js";
+export * as VtaPcsTrusteeKeys_v0_1 from "./vta/pcs/trustee/keys/0.1/payload.js";
 export * as VtaPcsVerifyAttestation_v0_1 from "./vta/pcs/verify-attestation/0.1/payload.js";
 export * as VtaPcsVetterShow_v0_1 from "./vta/pcs/vetter/show/0.1/payload.js";
+export * as VtaPcsVoteEncrypted_v0_1 from "./vta/pcs/vote-encrypted/0.1/payload.js";
 export * as VtaPcsVote_v0_1 from "./vta/pcs/vote/0.1/payload.js";
 export * as VtaPcsVoterAccept_v0_1 from "./vta/pcs/voter/accept/0.1/payload.js";
 export * as VtaPcsVoterRead_v0_1 from "./vta/pcs/voter/read/0.1/payload.js";
@@ -964,6 +978,7 @@ export * as VtcRoomsMembershipsList_v0_1 from "./vtc/rooms/memberships/list/0.1/
 export * as VtcRoomsOffersAccept_v0_1 from "./vtc/rooms/offers/accept/0.1/payload.js";
 export * as VtcRoomsOffersList_v0_1 from "./vtc/rooms/offers/list/0.1/payload.js";
 export * as VtcRoomsOffersList_v0_2 from "./vtc/rooms/offers/list/0.2/payload.js";
+export * as VtcRoomsOffersList_v0_3 from "./vtc/rooms/offers/list/0.3/payload.js";
 export * as VtcRoomsStorageAssign_v0_1 from "./vtc/rooms/storage/assign/0.1/payload.js";
 export * as VtcRoomsStorageMigrate_v0_1 from "./vtc/rooms/storage/migrate/0.1/payload.js";
 export * as VtcRoomsUsage_v0_1 from "./vtc/rooms/usage/0.1/payload.js";