@openvtc/trust-tasks 0.26.25 → 0.26.27

package/dist/vta/pcs/vote-encrypted/0.1/payload.js

@@ -0,0 +1,1389 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/pcs/vote-encrypted/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/pcs/vote-encrypted/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/pcs/vote-encrypted/0.1#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/vta/pcs/vote-encrypted/0.1",
+    "title": "VTA PCS — Vote Encrypted — payload",
+    "description": "The voter's VTA checks a ballot against the manifest, encrypts it to the election key as the election's level requires, and returns the cast signed by a key made for it alone.",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "contextId",
+        "community",
+        "parameters",
+        "manifest",
+        "electionKey",
+        "ballot"
+    ],
+    "properties": {
+        "contextId": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256,
+            "description": "The context the voter belongs to."
+        },
+        "community": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 2048,
+            "description": "The community's DID."
+        },
+        "parameters": {
+            "$ref": "#/$defs/VotingParameters"
+        },
+        "manifest": {
+            "$ref": "#/$defs/Manifest"
+        },
+        "electionKey": {
+            "$ref": "#/$defs/ElectionKey"
+        },
+        "ballot": {
+            "$ref": "#/$defs/Ballot"
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext"
+        }
+    },
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTA PCS — Vote Encrypted — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "castDocument",
+                "tag"
+            ],
+            "properties": {
+                "castDocument": {
+                    "title": "CastDocument",
+                    "description": "The voting/ballot/cast-encrypted request, signed by a key made for this cast alone (VTI-VOT-003).",
+                    "type": "object",
+                    "required": [
+                        "id",
+                        "type",
+                        "issuer",
+                        "recipient",
+                        "issuedAt",
+                        "payload",
+                        "proof"
+                    ],
+                    "properties": {
+                        "id": {
+                            "type": "string",
+                            "pattern": "^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$"
+                        },
+                        "type": {
+                            "const": "https://trusttasks.org/spec/voting/ballot/cast-encrypted/0.1"
+                        },
+                        "issuer": {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 2048,
+                            "description": "The signer."
+                        },
+                        "recipient": {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 2048,
+                            "description": "The ballot box."
+                        },
+                        "issuedAt": {
+                            "type": "string",
+                            "format": "date-time"
+                        },
+                        "expiresAt": {
+                            "type": "string",
+                            "format": "date-time"
+                        },
+                        "payload": {
+                            "type": "object",
+                            "description": "That task's request payload."
+                        },
+                        "proof": {
+                            "type": "object",
+                            "description": "A Data Integrity proof by an `authentication` key of `issuer`."
+                        }
+                    }
+                },
+                "tag": {
+                    "$ref": "#/$defs/Multibase"
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "Multibase": {
+            "title": "Multibase",
+            "description": "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.",
+            "type": "string",
+            "maxLength": 16384,
+            "pattern": "^z[1-9A-HJ-NP-Za-km-z]+$"
+        },
+        "Ballot": {
+            "title": "Ballot",
+            "description": "An open ballot: one answer per question of the manifest, in any order. The bytes a cast's proof binds are the RFC 8785 (JCS) canonicalization of this object as received.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "electionId",
+                "manifestDigest",
+                "answers"
+            ],
+            "properties": {
+                "electionId": {
+                    "$ref": "#/$defs/ElectionId"
+                },
+                "manifestDigest": {
+                    "$ref": "#/$defs/DigestMultibase"
+                },
+                "answers": {
+                    "type": "array",
+                    "minItems": 1,
+                    "maxItems": 128,
+                    "items": {
+                        "$ref": "#/$defs/Answer"
+                    }
+                }
+            }
+        },
+        "Answer": {
+            "title": "Answer",
+            "description": "The answer to one question. Exactly one member besides `question` is present, matching the question's type, or `abstain` for an optional question left unanswered.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "question"
+            ],
+            "minProperties": 2,
+            "maxProperties": 2,
+            "properties": {
+                "question": {
+                    "$ref": "#/$defs/Key"
+                },
+                "choice": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/$defs/Key"
+                    },
+                    "uniqueItems": true
+                },
+                "ranking": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/$defs/Key"
+                    },
+                    "uniqueItems": true
+                },
+                "scores": {
+                    "type": "object",
+                    "propertyNames": {
+                        "$ref": "#/$defs/Key"
+                    },
+                    "additionalProperties": {
+                        "type": "integer"
+                    }
+                },
+                "text": {
+                    "type": "string",
+                    "maxLength": 4096
+                },
+                "abstain": {
+                    "const": true
+                }
+            }
+        },
+        "Key": {
+            "title": "Key",
+            "description": "A question or option key, unique within its manifest or question.",
+            "type": "string",
+            "pattern": "^[A-Za-z0-9._-]{1,64}$"
+        },
+        "ElectionId": {
+            "title": "ElectionId",
+            "description": "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.",
+            "type": "string",
+            "pattern": "^[A-Za-z0-9._-]{1,128}$"
+        },
+        "DigestMultibase": {
+            "title": "DigestMultibase",
+            "description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
+            "type": "string",
+            "minLength": 16,
+            "pattern": "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$",
+            "examples": [
+                "zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"
+            ]
+        },
+        "ElectionKey": {
+            "title": "ElectionKey",
+            "description": "The election key and each trustee's public verification key, computed from the qualified dealings (CONVENTIONS §9.6). Anyone can recompute it from the board.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "key",
+                "qualified",
+                "verification"
+            ],
+            "properties": {
+                "key": {
+                    "$ref": "#/$defs/GroupElement"
+                },
+                "qualified": {
+                    "type": "array",
+                    "minItems": 1,
+                    "maxItems": 64,
+                    "items": {
+                        "$ref": "#/$defs/TrusteeIndex"
+                    },
+                    "description": "The dealers whose dealings the key is formed from."
+                },
+                "verification": {
+                    "type": "array",
+                    "minItems": 2,
+                    "maxItems": 64,
+                    "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "trustee",
+                            "key"
+                        ],
+                        "properties": {
+                            "trustee": {
+                                "$ref": "#/$defs/TrusteeIndex"
+                            },
+                            "key": {
+                                "$ref": "#/$defs/GroupElement"
+                            }
+                        }
+                    }
+                }
+            }
+        },
+        "GroupElement": {
+            "title": "GroupElement",
+            "description": "A Ristretto group element: its 32-byte compression, multibase base58btc. Never the identity (CONVENTIONS §9.1).",
+            "type": "string",
+            "minLength": 2,
+            "maxLength": 64,
+            "pattern": "^z[1-9A-HJ-NP-Za-km-z]+$"
+        },
+        "TrusteeIndex": {
+            "title": "TrusteeIndex",
+            "description": "A trustee's index: its position in the manifest's `trustees.dids`, counting from 1.",
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 64
+        },
+        "Manifest": {
+            "title": "Manifest",
+            "description": "What an election asks and how it is decided (VTI-VOT-010). Its digest (`manifestDigest`) is the SHA-256 multihash of its RFC 8785 (JCS) canonicalization, and every cast is bound to it (VTI-VOT-011).",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "electionId",
+                "community",
+                "questions",
+                "secrecy",
+                "roll",
+                "registrationOpens",
+                "votingOpens",
+                "votingCloses",
+                "revote",
+                "board",
+                "ballotBox",
+                "binding",
+                "allowEarlyClose",
+                "resultsBeforeClose",
+                "textReleaseThreshold"
+            ],
+            "properties": {
+                "electionId": {
+                    "$ref": "#/$defs/ElectionId"
+                },
+                "community": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 2048,
+                    "description": "The community's DID."
+                },
+                "title": {
+                    "type": "string",
+                    "maxLength": 512
+                },
+                "description": {
+                    "type": "string",
+                    "maxLength": 8192
+                },
+                "questions": {
+                    "type": "array",
+                    "minItems": 1,
+                    "maxItems": 128,
+                    "items": {
+                        "$ref": "#/$defs/Question"
+                    }
+                },
+                "secrecy": {
+                    "$ref": "#/$defs/SecrecyLevel"
+                },
+                "roll": {
+                    "$ref": "#/$defs/RollRule"
+                },
+                "registrationOpens": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "votingOpens": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "votingCloses": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "revote": {
+                    "$ref": "#/$defs/Revote"
+                },
+                "board": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "visibility",
+                        "auditors"
+                    ],
+                    "properties": {
+                        "visibility": {
+                            "$ref": "#/$defs/BoardVisibility"
+                        },
+                        "auditors": {
+                            "type": "array",
+                            "items": {
+                                "type": "string",
+                                "minLength": 1,
+                                "maxLength": 2048
+                            },
+                            "uniqueItems": true
+                        }
+                    }
+                },
+                "ballotBox": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 2048,
+                    "description": "The DID of the voting service that holds the board."
+                },
+                "trustees": {
+                    "$ref": "#/$defs/Trustees"
+                },
+                "binding": {
+                    "type": "boolean",
+                    "description": "Whether the community treats the result as deciding something; creating a binding election takes another administrator's consent (VTI-VOT-081)."
+                },
+                "allowEarlyClose": {
+                    "type": "boolean"
+                },
+                "resultsBeforeClose": {
+                    "type": "boolean",
+                    "description": "Open elections only: whether running totals may be read while voting is open (VTI-VOT-061)."
+                },
+                "textReleaseThreshold": {
+                    "type": "integer",
+                    "minimum": 10,
+                    "description": "Counted ballots required before any text answer is disclosed (VTI-VOT-065)."
+                }
+            }
+        },
+        "Trustees": {
+            "title": "Trustees",
+            "description": "The trustees of a sealed or tallied-encrypted election and the number of them decryption needs (VTI-VOT-062). Neither the community nor the ballot box may be one.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "dids",
+                "threshold"
+            ],
+            "properties": {
+                "dids": {
+                    "type": "array",
+                    "minItems": 2,
+                    "items": {
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 2048
+                    },
+                    "uniqueItems": true
+                },
+                "threshold": {
+                    "type": "integer",
+                    "minimum": 2
+                }
+            }
+        },
+        "BoardVisibility": {
+            "title": "BoardVisibility",
+            "description": "`public`: anyone reads the board. `private`: the community, the auditors the manifest names and, for one cast's inclusion, the holder of its receipt (VTI-VOT-052).",
+            "type": "string",
+            "enum": [
+                "public",
+                "private"
+            ]
+        },
+        "Revote": {
+            "title": "Revote",
+            "description": "What a later, different ballot under one ticket does: `replace` the earlier one, or be refused (`refuse`) (VTI-VOT-041).",
+            "type": "string",
+            "enum": [
+                "replace",
+                "refuse"
+            ]
+        },
+        "RollRule": {
+            "title": "RollRule",
+            "description": "Who may be issued a ticket (VTI-VOT-021): the community's active members, its active members and the parties `listed` names, or only the parties `listed` names.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "rule"
+            ],
+            "properties": {
+                "rule": {
+                    "type": "string",
+                    "enum": [
+                        "members",
+                        "membersAndListed",
+                        "listed"
+                    ]
+                },
+                "listed": {
+                    "type": "array",
+                    "items": {
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 2048,
+                        "description": "A DID enfranchised by name."
+                    },
+                    "uniqueItems": true
+                }
+            }
+        },
+        "SecrecyLevel": {
+            "title": "SecrecyLevel",
+            "description": "`open`: ballots are recorded on the board as cast. `sealed`: ballots are encrypted to a jointly generated election key and decrypted after voting closes. `talliedEncrypted`: ballots are encrypted and only the totals are ever decrypted (VTI-VOT-060). The encrypted levels are cast with `voting/ballot/cast-encrypted/0.1`, under an election key the trustees generate with `voting/trustees/*` (CONVENTIONS §9).",
+            "type": "string",
+            "enum": [
+                "open",
+                "sealed",
+                "talliedEncrypted"
+            ]
+        },
+        "Question": {
+            "title": "Question",
+            "description": "One question. Tagged union over `type`.",
+            "oneOf": [
+                {
+                    "title": "ChoiceQuestion",
+                    "description": "Select between `minSelections` and `maxSelections` of `options`. A yes/no/abstain motion is a choice of exactly one of three.",
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "key",
+                        "type",
+                        "options",
+                        "minSelections",
+                        "maxSelections",
+                        "optional"
+                    ],
+                    "properties": {
+                        "key": {
+                            "$ref": "#/$defs/Key"
+                        },
+                        "type": {
+                            "const": "choice"
+                        },
+                        "text": {
+                            "type": "string",
+                            "maxLength": 2048
+                        },
+                        "options": {
+                            "type": "array",
+                            "minItems": 2,
+                            "maxItems": 256,
+                            "items": {
+                                "$ref": "#/$defs/QuestionOption"
+                            }
+                        },
+                        "minSelections": {
+                            "type": "integer",
+                            "minimum": 0
+                        },
+                        "maxSelections": {
+                            "type": "integer",
+                            "minimum": 1
+                        },
+                        "optional": {
+                            "type": "boolean"
+                        }
+                    }
+                },
+                {
+                    "title": "RankingQuestion",
+                    "description": "Order `options`; a ballot ranks every option or, when `partial` is true, a prefix of them.",
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "key",
+                        "type",
+                        "options",
+                        "partial",
+                        "optional"
+                    ],
+                    "properties": {
+                        "key": {
+                            "$ref": "#/$defs/Key"
+                        },
+                        "type": {
+                            "const": "ranking"
+                        },
+                        "text": {
+                            "type": "string",
+                            "maxLength": 2048
+                        },
+                        "options": {
+                            "type": "array",
+                            "minItems": 2,
+                            "maxItems": 64,
+                            "items": {
+                                "$ref": "#/$defs/QuestionOption"
+                            }
+                        },
+                        "partial": {
+                            "type": "boolean"
+                        },
+                        "optional": {
+                            "type": "boolean"
+                        }
+                    }
+                },
+                {
+                    "title": "ScoreQuestion",
+                    "description": "Give each option an integer score within [min, max].",
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "key",
+                        "type",
+                        "options",
+                        "min",
+                        "max",
+                        "optional"
+                    ],
+                    "properties": {
+                        "key": {
+                            "$ref": "#/$defs/Key"
+                        },
+                        "type": {
+                            "const": "score"
+                        },
+                        "text": {
+                            "type": "string",
+                            "maxLength": 2048
+                        },
+                        "options": {
+                            "type": "array",
+                            "minItems": 1,
+                            "maxItems": 256,
+                            "items": {
+                                "$ref": "#/$defs/QuestionOption"
+                            }
+                        },
+                        "min": {
+                            "type": "integer"
+                        },
+                        "max": {
+                            "type": "integer"
+                        },
+                        "optional": {
+                            "type": "boolean"
+                        }
+                    }
+                },
+                {
+                    "title": "TextQuestion",
+                    "description": "Free text of at most `maxLength` characters.",
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "key",
+                        "type",
+                        "maxLength",
+                        "optional"
+                    ],
+                    "properties": {
+                        "key": {
+                            "$ref": "#/$defs/Key"
+                        },
+                        "type": {
+                            "const": "text"
+                        },
+                        "text": {
+                            "type": "string",
+                            "maxLength": 2048
+                        },
+                        "maxLength": {
+                            "type": "integer",
+                            "minimum": 1,
+                            "maximum": 4096
+                        },
+                        "optional": {
+                            "type": "boolean"
+                        }
+                    }
+                }
+            ]
+        },
+        "QuestionOption": {
+            "title": "QuestionOption",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "key"
+            ],
+            "properties": {
+                "key": {
+                    "$ref": "#/$defs/Key"
+                },
+                "label": {
+                    "type": "string",
+                    "maxLength": 512,
+                    "description": "Display text. Absent from a manifest registered with a ballot box that holds no question text (VTI-VOT-014)."
+                }
+            }
+        },
+        "VotingParameters": {
+            "title": "VotingParameters",
+            "description": "The community's published voting parameters: the PCS suite and the voting verification key tickets are issued under (VTI-VOT-020). Distinct from its hidden-vetting helper key.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "suite",
+                "votingKey"
+            ],
+            "properties": {
+                "suite": {
+                    "type": "string",
+                    "const": "ps-ddh-bls12381"
+                },
+                "votingKey": {
+                    "$ref": "#/$defs/Multibase"
+                }
+            }
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTA PCS — Vote Encrypted — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "castDocument",
+                "tag"
+            ],
+            "properties": {
+                "castDocument": {
+                    "title": "CastDocument",
+                    "description": "The voting/ballot/cast-encrypted request, signed by a key made for this cast alone (VTI-VOT-003).",
+                    "type": "object",
+                    "required": [
+                        "id",
+                        "type",
+                        "issuer",
+                        "recipient",
+                        "issuedAt",
+                        "payload",
+                        "proof"
+                    ],
+                    "properties": {
+                        "id": {
+                            "type": "string",
+                            "pattern": "^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$"
+                        },
+                        "type": {
+                            "const": "https://trusttasks.org/spec/voting/ballot/cast-encrypted/0.1"
+                        },
+                        "issuer": {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 2048,
+                            "description": "The signer."
+                        },
+                        "recipient": {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 2048,
+                            "description": "The ballot box."
+                        },
+                        "issuedAt": {
+                            "type": "string",
+                            "format": "date-time"
+                        },
+                        "expiresAt": {
+                            "type": "string",
+                            "format": "date-time"
+                        },
+                        "payload": {
+                            "type": "object",
+                            "description": "That task's request payload."
+                        },
+                        "proof": {
+                            "type": "object",
+                            "description": "A Data Integrity proof by an `authentication` key of `issuer`."
+                        }
+                    }
+                },
+                "tag": {
+                    "$ref": "#/$defs/Multibase"
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "Multibase": {
+            "title": "Multibase",
+            "description": "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.",
+            "type": "string",
+            "maxLength": 16384,
+            "pattern": "^z[1-9A-HJ-NP-Za-km-z]+$"
+        },
+        "Ballot": {
+            "title": "Ballot",
+            "description": "An open ballot: one answer per question of the manifest, in any order. The bytes a cast's proof binds are the RFC 8785 (JCS) canonicalization of this object as received.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "electionId",
+                "manifestDigest",
+                "answers"
+            ],
+            "properties": {
+                "electionId": {
+                    "$ref": "#/$defs/ElectionId"
+                },
+                "manifestDigest": {
+                    "$ref": "#/$defs/DigestMultibase"
+                },
+                "answers": {
+                    "type": "array",
+                    "minItems": 1,
+                    "maxItems": 128,
+                    "items": {
+                        "$ref": "#/$defs/Answer"
+                    }
+                }
+            }
+        },
+        "Answer": {
+            "title": "Answer",
+            "description": "The answer to one question. Exactly one member besides `question` is present, matching the question's type, or `abstain` for an optional question left unanswered.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "question"
+            ],
+            "minProperties": 2,
+            "maxProperties": 2,
+            "properties": {
+                "question": {
+                    "$ref": "#/$defs/Key"
+                },
+                "choice": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/$defs/Key"
+                    },
+                    "uniqueItems": true
+                },
+                "ranking": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/$defs/Key"
+                    },
+                    "uniqueItems": true
+                },
+                "scores": {
+                    "type": "object",
+                    "propertyNames": {
+                        "$ref": "#/$defs/Key"
+                    },
+                    "additionalProperties": {
+                        "type": "integer"
+                    }
+                },
+                "text": {
+                    "type": "string",
+                    "maxLength": 4096
+                },
+                "abstain": {
+                    "const": true
+                }
+            }
+        },
+        "Key": {
+            "title": "Key",
+            "description": "A question or option key, unique within its manifest or question.",
+            "type": "string",
+            "pattern": "^[A-Za-z0-9._-]{1,64}$"
+        },
+        "ElectionId": {
+            "title": "ElectionId",
+            "description": "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.",
+            "type": "string",
+            "pattern": "^[A-Za-z0-9._-]{1,128}$"
+        },
+        "DigestMultibase": {
+            "title": "DigestMultibase",
+            "description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
+            "type": "string",
+            "minLength": 16,
+            "pattern": "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$",
+            "examples": [
+                "zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"
+            ]
+        },
+        "ElectionKey": {
+            "title": "ElectionKey",
+            "description": "The election key and each trustee's public verification key, computed from the qualified dealings (CONVENTIONS §9.6). Anyone can recompute it from the board.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "key",
+                "qualified",
+                "verification"
+            ],
+            "properties": {
+                "key": {
+                    "$ref": "#/$defs/GroupElement"
+                },
+                "qualified": {
+                    "type": "array",
+                    "minItems": 1,
+                    "maxItems": 64,
+                    "items": {
+                        "$ref": "#/$defs/TrusteeIndex"
+                    },
+                    "description": "The dealers whose dealings the key is formed from."
+                },
+                "verification": {
+                    "type": "array",
+                    "minItems": 2,
+                    "maxItems": 64,
+                    "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "trustee",
+                            "key"
+                        ],
+                        "properties": {
+                            "trustee": {
+                                "$ref": "#/$defs/TrusteeIndex"
+                            },
+                            "key": {
+                                "$ref": "#/$defs/GroupElement"
+                            }
+                        }
+                    }
+                }
+            }
+        },
+        "GroupElement": {
+            "title": "GroupElement",
+            "description": "A Ristretto group element: its 32-byte compression, multibase base58btc. Never the identity (CONVENTIONS §9.1).",
+            "type": "string",
+            "minLength": 2,
+            "maxLength": 64,
+            "pattern": "^z[1-9A-HJ-NP-Za-km-z]+$"
+        },
+        "TrusteeIndex": {
+            "title": "TrusteeIndex",
+            "description": "A trustee's index: its position in the manifest's `trustees.dids`, counting from 1.",
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 64
+        },
+        "Manifest": {
+            "title": "Manifest",
+            "description": "What an election asks and how it is decided (VTI-VOT-010). Its digest (`manifestDigest`) is the SHA-256 multihash of its RFC 8785 (JCS) canonicalization, and every cast is bound to it (VTI-VOT-011).",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "electionId",
+                "community",
+                "questions",
+                "secrecy",
+                "roll",
+                "registrationOpens",
+                "votingOpens",
+                "votingCloses",
+                "revote",
+                "board",
+                "ballotBox",
+                "binding",
+                "allowEarlyClose",
+                "resultsBeforeClose",
+                "textReleaseThreshold"
+            ],
+            "properties": {
+                "electionId": {
+                    "$ref": "#/$defs/ElectionId"
+                },
+                "community": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 2048,
+                    "description": "The community's DID."
+                },
+                "title": {
+                    "type": "string",
+                    "maxLength": 512
+                },
+                "description": {
+                    "type": "string",
+                    "maxLength": 8192
+                },
+                "questions": {
+                    "type": "array",
+                    "minItems": 1,
+                    "maxItems": 128,
+                    "items": {
+                        "$ref": "#/$defs/Question"
+                    }
+                },
+                "secrecy": {
+                    "$ref": "#/$defs/SecrecyLevel"
+                },
+                "roll": {
+                    "$ref": "#/$defs/RollRule"
+                },
+                "registrationOpens": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "votingOpens": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "votingCloses": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "revote": {
+                    "$ref": "#/$defs/Revote"
+                },
+                "board": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "visibility",
+                        "auditors"
+                    ],
+                    "properties": {
+                        "visibility": {
+                            "$ref": "#/$defs/BoardVisibility"
+                        },
+                        "auditors": {
+                            "type": "array",
+                            "items": {
+                                "type": "string",
+                                "minLength": 1,
+                                "maxLength": 2048
+                            },
+                            "uniqueItems": true
+                        }
+                    }
+                },
+                "ballotBox": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 2048,
+                    "description": "The DID of the voting service that holds the board."
+                },
+                "trustees": {
+                    "$ref": "#/$defs/Trustees"
+                },
+                "binding": {
+                    "type": "boolean",
+                    "description": "Whether the community treats the result as deciding something; creating a binding election takes another administrator's consent (VTI-VOT-081)."
+                },
+                "allowEarlyClose": {
+                    "type": "boolean"
+                },
+                "resultsBeforeClose": {
+                    "type": "boolean",
+                    "description": "Open elections only: whether running totals may be read while voting is open (VTI-VOT-061)."
+                },
+                "textReleaseThreshold": {
+                    "type": "integer",
+                    "minimum": 10,
+                    "description": "Counted ballots required before any text answer is disclosed (VTI-VOT-065)."
+                }
+            }
+        },
+        "Trustees": {
+            "title": "Trustees",
+            "description": "The trustees of a sealed or tallied-encrypted election and the number of them decryption needs (VTI-VOT-062). Neither the community nor the ballot box may be one.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "dids",
+                "threshold"
+            ],
+            "properties": {
+                "dids": {
+                    "type": "array",
+                    "minItems": 2,
+                    "items": {
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 2048
+                    },
+                    "uniqueItems": true
+                },
+                "threshold": {
+                    "type": "integer",
+                    "minimum": 2
+                }
+            }
+        },
+        "BoardVisibility": {
+            "title": "BoardVisibility",
+            "description": "`public`: anyone reads the board. `private`: the community, the auditors the manifest names and, for one cast's inclusion, the holder of its receipt (VTI-VOT-052).",
+            "type": "string",
+            "enum": [
+                "public",
+                "private"
+            ]
+        },
+        "Revote": {
+            "title": "Revote",
+            "description": "What a later, different ballot under one ticket does: `replace` the earlier one, or be refused (`refuse`) (VTI-VOT-041).",
+            "type": "string",
+            "enum": [
+                "replace",
+                "refuse"
+            ]
+        },
+        "RollRule": {
+            "title": "RollRule",
+            "description": "Who may be issued a ticket (VTI-VOT-021): the community's active members, its active members and the parties `listed` names, or only the parties `listed` names.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "rule"
+            ],
+            "properties": {
+                "rule": {
+                    "type": "string",
+                    "enum": [
+                        "members",
+                        "membersAndListed",
+                        "listed"
+                    ]
+                },
+                "listed": {
+                    "type": "array",
+                    "items": {
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 2048,
+                        "description": "A DID enfranchised by name."
+                    },
+                    "uniqueItems": true
+                }
+            }
+        },
+        "SecrecyLevel": {
+            "title": "SecrecyLevel",
+            "description": "`open`: ballots are recorded on the board as cast. `sealed`: ballots are encrypted to a jointly generated election key and decrypted after voting closes. `talliedEncrypted`: ballots are encrypted and only the totals are ever decrypted (VTI-VOT-060). The encrypted levels are cast with `voting/ballot/cast-encrypted/0.1`, under an election key the trustees generate with `voting/trustees/*` (CONVENTIONS §9).",
+            "type": "string",
+            "enum": [
+                "open",
+                "sealed",
+                "talliedEncrypted"
+            ]
+        },
+        "Question": {
+            "title": "Question",
+            "description": "One question. Tagged union over `type`.",
+            "oneOf": [
+                {
+                    "title": "ChoiceQuestion",
+                    "description": "Select between `minSelections` and `maxSelections` of `options`. A yes/no/abstain motion is a choice of exactly one of three.",
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "key",
+                        "type",
+                        "options",
+                        "minSelections",
+                        "maxSelections",
+                        "optional"
+                    ],
+                    "properties": {
+                        "key": {
+                            "$ref": "#/$defs/Key"
+                        },
+                        "type": {
+                            "const": "choice"
+                        },
+                        "text": {
+                            "type": "string",
+                            "maxLength": 2048
+                        },
+                        "options": {
+                            "type": "array",
+                            "minItems": 2,
+                            "maxItems": 256,
+                            "items": {
+                                "$ref": "#/$defs/QuestionOption"
+                            }
+                        },
+                        "minSelections": {
+                            "type": "integer",
+                            "minimum": 0
+                        },
+                        "maxSelections": {
+                            "type": "integer",
+                            "minimum": 1
+                        },
+                        "optional": {
+                            "type": "boolean"
+                        }
+                    }
+                },
+                {
+                    "title": "RankingQuestion",
+                    "description": "Order `options`; a ballot ranks every option or, when `partial` is true, a prefix of them.",
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "key",
+                        "type",
+                        "options",
+                        "partial",
+                        "optional"
+                    ],
+                    "properties": {
+                        "key": {
+                            "$ref": "#/$defs/Key"
+                        },
+                        "type": {
+                            "const": "ranking"
+                        },
+                        "text": {
+                            "type": "string",
+                            "maxLength": 2048
+                        },
+                        "options": {
+                            "type": "array",
+                            "minItems": 2,
+                            "maxItems": 64,
+                            "items": {
+                                "$ref": "#/$defs/QuestionOption"
+                            }
+                        },
+                        "partial": {
+                            "type": "boolean"
+                        },
+                        "optional": {
+                            "type": "boolean"
+                        }
+                    }
+                },
+                {
+                    "title": "ScoreQuestion",
+                    "description": "Give each option an integer score within [min, max].",
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "key",
+                        "type",
+                        "options",
+                        "min",
+                        "max",
+                        "optional"
+                    ],
+                    "properties": {
+                        "key": {
+                            "$ref": "#/$defs/Key"
+                        },
+                        "type": {
+                            "const": "score"
+                        },
+                        "text": {
+                            "type": "string",
+                            "maxLength": 2048
+                        },
+                        "options": {
+                            "type": "array",
+                            "minItems": 1,
+                            "maxItems": 256,
+                            "items": {
+                                "$ref": "#/$defs/QuestionOption"
+                            }
+                        },
+                        "min": {
+                            "type": "integer"
+                        },
+                        "max": {
+                            "type": "integer"
+                        },
+                        "optional": {
+                            "type": "boolean"
+                        }
+                    }
+                },
+                {
+                    "title": "TextQuestion",
+                    "description": "Free text of at most `maxLength` characters.",
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "key",
+                        "type",
+                        "maxLength",
+                        "optional"
+                    ],
+                    "properties": {
+                        "key": {
+                            "$ref": "#/$defs/Key"
+                        },
+                        "type": {
+                            "const": "text"
+                        },
+                        "text": {
+                            "type": "string",
+                            "maxLength": 2048
+                        },
+                        "maxLength": {
+                            "type": "integer",
+                            "minimum": 1,
+                            "maximum": 4096
+                        },
+                        "optional": {
+                            "type": "boolean"
+                        }
+                    }
+                }
+            ]
+        },
+        "QuestionOption": {
+            "title": "QuestionOption",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "key"
+            ],
+            "properties": {
+                "key": {
+                    "$ref": "#/$defs/Key"
+                },
+                "label": {
+                    "type": "string",
+                    "maxLength": 512,
+                    "description": "Display text. Absent from a manifest registered with a ballot box that holds no question text (VTI-VOT-014)."
+                }
+            }
+        },
+        "VotingParameters": {
+            "title": "VotingParameters",
+            "description": "The community's published voting parameters: the PCS suite and the voting verification key tickets are issued under (VTI-VOT-020). Distinct from its hidden-vetting helper key.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "suite",
+                "votingKey"
+            ],
+            "properties": {
+                "suite": {
+                    "type": "string",
+                    "const": "ps-ddh-bls12381"
+                },
+                "votingKey": {
+                    "$ref": "#/$defs/Multibase"
+                }
+            }
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: false,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map