@openvtc/trust-tasks 0.26.27 → 0.26.28

package/src/_shared/components.ts

@@ -435,7 +435,8 @@ export type BoardEntry =
   | ElectionKeyEntry
   | PartialDecryptionsEntry
   | UnsealedEntry
-  | SpoiledEntry;
+  | SpoiledEntry
+  | TrusteeStepEntry;
 /**
  * `public`: anyone reads the board. `private`: the community, the auditors the manifest names and, for one cast's inclusion, the holder of its receipt (VTI-VOT-052).
  */
@@ -4900,14 +4901,23 @@ export interface EncryptedCastEntry {
   kind: "encryptedCast";
   cast: EncryptedCast;
 }
+/**
+ * Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind.
+ */
 export interface TransportKeyEntry {
   kind: "transportKey";
   transportKey: TransportKey;
 }
+/**
+ * Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind.
+ */
 export interface DealingEntry {
   kind: "dealing";
   dealing: Dealing;
 }
+/**
+ * Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind.
+ */
 export interface ConfirmationEntry {
   kind: "confirmation";
   trustee: TrusteeIndex;
@@ -4916,6 +4926,9 @@ export interface ConfirmationEntry {
    */
   complaints: TrusteeIndex[];
 }
+/**
+ * Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind.
+ */
 export interface JustificationEntry {
   kind: "justification";
   dealer: TrusteeIndex;
@@ -4947,6 +4960,13 @@ export interface SpoiledEntry {
   kind: "spoiled";
   leafIndex: number;
 }
+/**
+ * One step of the trustees' ceremony — an enrolment, a dealing, a confirmation or a justification — as the trustee's own signed request, so that anyone reading the board can tell who took it (CONVENTIONS §9.6).
+ */
+export interface TrusteeStepEntry {
+  kind: "trusteeStep";
+  request: SignedRequest;
+}
 /**
  * A board's tree head (RFC 9162 §2.1). A head is signed by being carried in a document the ballot box signs; whoever keeps a head keeps that whole document.
  */
@@ -10401,6 +10421,10 @@ export interface SigmaProof {
   c: GroupScalar;
   z: GroupScalar;
 }
+/**
+ * A whole Trust Task request document — `id`, `type`, `issuer`, `payload` and every other member, `proof` included — exactly as the ballot box received it, never re-serialised: its proof is taken over its members, and a re-serialised copy does not reliably reproduce them. Typed as an open object so every member survives; CONVENTIONS §9.6 gives the checks that make it a trustee's step.
+ */
+export interface SignedRequest {}
 /**
  * One signing-key delegation, as its holder sees it. A delegation confers nothing of its own: it names an identity that already holds whatever standing it holds, and a document signed by the key is authorized by that identity's standing read at execution time.
  */

package/src/voting/_shared/0.1/voting.ts

@@ -14,4 +14,4 @@ export interface CommunityVotingSharedDefinitions {
  * The definitions this shared schema publishes, hoisted to one declaration each.
  * See "../../../_shared/components.js".
  */
-export type { Answer, Ballot, BoardEntry, BoardHead, BoardVisibility, Cast, Dealing, DecryptionTarget, Disclosure, DisjunctiveProof, ElectionId, ElectionKey, ElectionResult, ElectionState, ElectionSummary, ElGamalCiphertext, EncryptedBallot, EncryptedCast, EncryptedOption, EncryptedQuestion, GroupElement, GroupScalar, Key_VotingV0_1 as Key, Manifest, MerklePath, Multibase_VotingV0_1 as Multibase, PartialDecryption, Question, QuestionOption, QuestionResult, Revote, RollRule, SealedPayload, SealedShare, SecrecyLevel, SigmaProof, TransportKey, TrusteeIndex, TrusteePhase, Trustees, VotingParameters } from "../../../_shared/components.js";
+export type { Answer, Ballot, BoardEntry, BoardHead, BoardVisibility, Cast, Dealing, DecryptionTarget, Disclosure, DisjunctiveProof, ElectionId, ElectionKey, ElectionResult, ElectionState, ElectionSummary, ElGamalCiphertext, EncryptedBallot, EncryptedCast, EncryptedOption, EncryptedQuestion, GroupElement, GroupScalar, Key_VotingV0_1 as Key, Manifest, MerklePath, Multibase_VotingV0_1 as Multibase, PartialDecryption, Question, QuestionOption, QuestionResult, Revote, RollRule, SealedPayload, SealedShare, SecrecyLevel, SigmaProof, SignedRequest, TransportKey, TrusteeIndex, TrusteePhase, Trustees, VotingParameters } from "../../../_shared/components.js";

package/src/voting/board/read/0.1/payload.ts

@@ -3,7 +3,7 @@
  * Source: specs/voting/board/read/0.1/payload.schema.json
  */
 
-import type { Answer, Ballot, BoardEntry, BoardHead, Cast, CastEntry, ConfirmationEntry, Dealing, DealingEntry, DecryptionTarget, DigestMultibase, ElectionId, ElectionKey, ElectionKeyEntry, ElectionResult, ElGamalCiphertext, EncryptedCast, EncryptedCastEntry, Ext, GroupElement, GroupScalar, JustificationEntry, Key_VotingV0_1 as Key, LifecycleEntry, Multibase_VotingV0_1 as Multibase, PartialDecryption, PartialDecryptionsEntry, QuestionResult, ReplacementEntry, ResultEntry, SealedPayload, SealedShare, SigmaProof, SpoiledEntry, TransportKey, TransportKeyEntry, TrusteeIndex, UnsealedEntry } from "../../../../_shared/components.js";
+import type { Answer, Ballot, BoardEntry, BoardHead, Cast, CastEntry, ConfirmationEntry, Dealing, DealingEntry, DecryptionTarget, DigestMultibase, ElectionId, ElectionKey, ElectionKeyEntry, ElectionResult, ElGamalCiphertext, EncryptedCast, EncryptedCastEntry, Ext, GroupElement, GroupScalar, JustificationEntry, Key_VotingV0_1 as Key, LifecycleEntry, Multibase_VotingV0_1 as Multibase, PartialDecryption, PartialDecryptionsEntry, QuestionResult, ReplacementEntry, ResultEntry, SealedPayload, SealedShare, SigmaProof, SignedRequest, SpoiledEntry, TransportKey, TransportKeyEntry, TrusteeIndex, TrusteeStepEntry, UnsealedEntry } from "../../../../_shared/components.js";
 
 
 /**
@@ -51,7 +51,7 @@ export interface VotingBoardReadResponsePayload {
 }
 
 /** Shared definitions this specification references, re-exported under the names it used to declare them with. */
-export type { Answer, Ballot, BoardEntry, BoardHead, Cast, CastEntry, ConfirmationEntry, Dealing, DealingEntry, DecryptionTarget, DigestMultibase, ElectionId, ElectionKey, ElectionKeyEntry, ElectionResult, ElGamalCiphertext, EncryptedCast, EncryptedCastEntry, Ext, GroupElement, GroupScalar, JustificationEntry, Key, LifecycleEntry, Multibase, PartialDecryption, PartialDecryptionsEntry, QuestionResult, ReplacementEntry, ResultEntry, SealedPayload, SealedShare, SigmaProof, SpoiledEntry, TransportKey, TransportKeyEntry, TrusteeIndex, UnsealedEntry };
+export type { Answer, Ballot, BoardEntry, BoardHead, Cast, CastEntry, ConfirmationEntry, Dealing, DealingEntry, DecryptionTarget, DigestMultibase, ElectionId, ElectionKey, ElectionKeyEntry, ElectionResult, ElGamalCiphertext, EncryptedCast, EncryptedCastEntry, Ext, GroupElement, GroupScalar, JustificationEntry, Key, LifecycleEntry, Multibase, PartialDecryption, PartialDecryptionsEntry, QuestionResult, ReplacementEntry, ResultEntry, SealedPayload, SealedShare, SigmaProof, SignedRequest, SpoiledEntry, TransportKey, TransportKeyEntry, TrusteeIndex, TrusteeStepEntry, UnsealedEntry };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/voting/board/read/0.1" as const;
@@ -296,7 +296,8 @@ export const PAYLOAD_SCHEMA = {
             "transportKey": {
               "$ref": "#/$defs/TransportKey"
             }
-          }
+          },
+          "description": "Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind."
         },
         {
           "title": "DealingEntry",
@@ -313,7 +314,8 @@ export const PAYLOAD_SCHEMA = {
             "dealing": {
               "$ref": "#/$defs/Dealing"
             }
-          }
+          },
+          "description": "Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind."
         },
         {
           "title": "ConfirmationEntry",
@@ -338,7 +340,8 @@ export const PAYLOAD_SCHEMA = {
                 "$ref": "#/$defs/TrusteeIndex"
               }
             }
-          }
+          },
+          "description": "Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind."
         },
         {
           "title": "JustificationEntry",
@@ -363,7 +366,8 @@ export const PAYLOAD_SCHEMA = {
             "share": {
               "$ref": "#/$defs/GroupScalar"
             }
-          }
+          },
+          "description": "Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind."
         },
         {
           "title": "ElectionKeyEntry",
@@ -448,9 +452,33 @@ export const PAYLOAD_SCHEMA = {
               "minimum": 0
             }
           }
+        },
+        {
+          "title": "TrusteeStepEntry",
+          "description": "One step of the trustees' ceremony — an enrolment, a dealing, a confirmation or a justification — as the trustee's own signed request, so that anyone reading the board can tell who took it (CONVENTIONS §9.6).",
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "kind",
+            "request"
+          ],
+          "properties": {
+            "kind": {
+              "const": "trusteeStep"
+            },
+            "request": {
+              "$ref": "#/$defs/SignedRequest"
+            }
+          }
         }
       ]
     },
+    "SignedRequest": {
+      "title": "SignedRequest",
+      "description": "A whole Trust Task request document — `id`, `type`, `issuer`, `payload` and every other member, `proof` included — exactly as the ballot box received it, never re-serialised: its proof is taken over its members, and a re-serialised copy does not reliably reproduce them. Typed as an open object so every member survives; CONVENTIONS §9.6 gives the checks that make it a trustee's step.",
+      "type": "object",
+      "minProperties": 1
+    },
     "Ballot": {
       "title": "Ballot",
       "description": "An open ballot: one answer per question of the manifest, in any order. The bytes a cast's proof binds are the RFC 8785 (JCS) canonicalization of this object as received.",
@@ -1278,7 +1306,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
             "transportKey": {
               "$ref": "#/$defs/TransportKey"
             }
-          }
+          },
+          "description": "Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind."
         },
         {
           "title": "DealingEntry",
@@ -1295,7 +1324,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
             "dealing": {
               "$ref": "#/$defs/Dealing"
             }
-          }
+          },
+          "description": "Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind."
         },
         {
           "title": "ConfirmationEntry",
@@ -1320,7 +1350,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
                 "$ref": "#/$defs/TrusteeIndex"
               }
             }
-          }
+          },
+          "description": "Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind."
         },
         {
           "title": "JustificationEntry",
@@ -1345,7 +1376,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
             "share": {
               "$ref": "#/$defs/GroupScalar"
             }
-          }
+          },
+          "description": "Not appended: each enrolment, dealing, confirmation and justification is a `trusteeStep` entry carrying the trustee's signed request (CONVENTIONS §9.6). A consumer MUST refuse a board holding this kind."
         },
         {
           "title": "ElectionKeyEntry",
@@ -1430,9 +1462,33 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
               "minimum": 0
             }
           }
+        },
+        {
+          "title": "TrusteeStepEntry",
+          "description": "One step of the trustees' ceremony — an enrolment, a dealing, a confirmation or a justification — as the trustee's own signed request, so that anyone reading the board can tell who took it (CONVENTIONS §9.6).",
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "kind",
+            "request"
+          ],
+          "properties": {
+            "kind": {
+              "const": "trusteeStep"
+            },
+            "request": {
+              "$ref": "#/$defs/SignedRequest"
+            }
+          }
         }
       ]
     },
+    "SignedRequest": {
+      "title": "SignedRequest",
+      "description": "A whole Trust Task request document — `id`, `type`, `issuer`, `payload` and every other member, `proof` included — exactly as the ballot box received it, never re-serialised: its proof is taken over its members, and a re-serialised copy does not reliably reproduce them. Typed as an open object so every member survives; CONVENTIONS §9.6 gives the checks that make it a trustee's step.",
+      "type": "object",
+      "minProperties": 1
+    },
     "Ballot": {
       "title": "Ballot",
       "description": "An open ballot: one answer per question of the manifest, in any order. The bytes a cast's proof binds are the RFC 8785 (JCS) canonicalization of this object as received.",