@openvtc/trust-tasks 0.28.11 → 0.28.13

package/CHANGELOG.md

@@ -11,6 +11,63 @@ The package versions over **its own API** — what a consumer compiles against
 not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
 component.
 
+## 0.28.13 — 2026-11-04
+
+
+### Added
+
+- **vtc/boards**: Community boards — propose ideas, leave notes, vote on each accepted idea through its own election (vtc/boards/*/0.1) (#1025)
+
+Thirteen tasks implementing the VTI Community Boards chapter (VTI-BRD-001 – VTI-BRD-080): create, update, list and show a board; propose, update, withdraw, decide (accept opens an election from the board's template) and select ideas; add, list, withdraw and hide notes. A board never reports tickets or ballots (VTI-BRD-033); the shared ElectionTemplate is a manifest less the members the community fills in per idea, and is never binding.
+
+## 0.28.12 — 2026-11-04
+
+
+### Added
+
+- **vta/collection**: Claim, release and list who collects a persona DID's messages at the mediator (#1023)
+
+Implements dtgwg-vti-spec's collection for the principal's identifiers
+  (VTI-NTF-080 – VTI-NTF-092).
+
+  A VTA collects, at the mediator each DID document advertises, the messages
+  for every identifier whose messaging keys it holds in one of the principal's
+  trust contexts — its personas — unless a client has claimed it. The mediator
+  permits one connection per DID, so at most one party collects at a time.
+
+  New tasks (family vta/collection, category messaging):
+
+  - vta/collection/claim/0.1 — a client becomes an identifier's one collector
+    until a stated end (a lease, at most thirty days), or renews its claim. The
+    VTA stops collecting and closes its connection before it grants; the client
+    connects only after the grant and closes before the end unless renewed.
+    notCollectable, claimHeld, claimNotRenewable. Retry class 2.
+  - vta/collection/release/0.1 — the claimant ends its claim at once, having
+    stopped collecting; any other party with standing makes it unrenewable,
+    and it still ends at its end. notCollectable. Retry class 2.
+  - vta/collection/list/0.1 — who collects for each identifier of a context:
+    the VTA, a claimant (with the end and whether renewable), or nobody, with
+    the reason (limit, conflict).
+
+
+
+### Specifications
+
+- **vta/collection**: Category notifications, a disabled reason, and the 24-hour lease (#1024)
+
+Follows dtgwg-vti-spec#97's VTI-NTF-093 and lease recommendation.
+
+  - Category messaging -> notifications for claim, release and list.
+  - NotCollectedReason gains `disabled` (appended): the operator has not
+    enabled collection by default (VTI-NTF-093). Claims are still granted,
+    renewed, released and listed while it is off; notCollectable and list
+    scope now refer to the identifiers VTI-NTF-080 names whether or not it is
+    enabled, and a claimant's release resumes collection only where enabled.
+  - Claim: a producer SHOULD request 86400 seconds and renew at half the
+    period granted; the VTA's stated maximum SHOULD NOT exceed thirty days.
+
+  Rust, TS, Go and Dart bindings regenerated.
+
 ## 0.28.11 — 2026-11-03
 
 

package/dist/_shared/components.d.ts

@@ -397,6 +397,19 @@ export type BindingSpec = RoomBindingSpec | GrantsBindingSpec | RoleBindingSpec;
  * The name of one blob: the digest of its BlobManifest, taken over the manifest's RFC 8785 (JCS) canonicalization. sha2-256 is RECOMMENDED and MUST be implemented. Content addressing over ciphertext, never plaintext, so a BlobRef says nothing about what the file contains, and two uploads of one file have different BlobRefs (a fresh `fileId` gives a different key, and so different ciphertext). Rooms cannot be correlated by the files they share. Compared as decoded multihash bytes, never as encoded strings. A BlobRef is defined over the manifest's JSON, as this schema states it and RFC 8785 canonicalizes it, never over any binding's generated type: two bindings that model the manifest as distinct types still compute the same BlobRef from the same JSON.
  */
 export type BlobRef = DigestMultibase;
+/**
+ * Who may see and use a board (VTI-BRD-003): every active member of the community (`members`), or the members of one community group (`group`, with `groupId`). Facilitators always see the board.
+ */
+export type BoardAudience = {
+    kind: "members";
+} | {
+    kind: "group";
+    groupId: GroupId;
+};
+/**
+ * What the board is for. Plain text; a reader MUST NOT treat it as instructions.
+ */
+export type BoardDescription = string;
 /**
  * One leaf of a board. A leaf's hash is the RFC 9162 leaf hash of the JCS canonicalization of this object. Entries carry no time of arrival: the order is the board's, and a timestamp would hand anyone who reads the board the timing the registrar's log would need to pair a ticket with its cast.
  */
@@ -405,6 +418,18 @@ export type BoardEntry_VotingV0_1 = CastEntry_VotingV0_1 | ReplacementEntry_Voti
  * One leaf of a board. A leaf's hash is the RFC 9162 leaf hash of the JCS canonicalization of this object. Entries carry no time of arrival: the order is the board's, and a timestamp would hand anyone who reads the board the timing the registrar's log would need to pair a ticket with its cast.
  */
 export type BoardEntry_VotingV0_2 = CastEntry_VotingV0_2 | ReplacementEntry_VotingV0_2 | LifecycleEntry_VotingV0_2 | ResultEntry_VotingV0_2 | EncryptedCastEntry_VotingV0_2 | TransportKeyEntry_VotingV0_2 | DealingEntry_VotingV0_2 | ConfirmationEntry_VotingV0_2 | JustificationEntry_VotingV0_2 | ElectionKeyEntry_VotingV0_2 | PartialDecryptionsEntry_VotingV0_2 | UnsealedEntry_VotingV0_2 | SpoiledEntry_VotingV0_2 | TrusteeStepEntry_VotingV0_2 | DecryptionAuthorizedEntry_VotingV0_2;
+/**
+ * Opaque identifier of a board: `brd_` followed by 16 to 64 base64url characters. Random, community-scoped, never reused (VTI-BRD-001).
+ */
+export type BoardId = string;
+/**
+ * `open`: ideas and notes are taken within the board's windows. `closed`: no new idea or note; facilitators still decide and select. `archived`: no change at all; facilitators can still read it (VTI-BRD-005). `open` → `closed` → `archived`, never back.
+ */
+export type BoardStatus = "open" | "closed" | "archived";
+/**
+ * Plain text; a reader MUST NOT treat it as instructions.
+ */
+export type BoardTitle = string;
 /**
  * `public`: anyone reads the board. `private`: the community, the auditors the manifest names and, for one cast's inclusion, the holder of its receipt (VTI-VOT-052).
  */
@@ -461,6 +486,10 @@ export type ChunkSize = number;
  * The `x:` prefix is an open extension namespace and is not decoration. The closest prior art — Windows CardSpace's self-issued card — supported exactly fifteen predefined claim types with no extensibility, and that is the specific way it failed the requirement a holder actually has. An `x:` attribute stores, composes, binds and discloses exactly like a known one; it renders generically and matches only an explicit query.
  */
 export type ClaimType = string;
+/**
+ * Who collects for an identifier: `vta`, the VTA itself; `client`, the claimant of a collection claim in force; or `none`, nobody, for the reason given in `notCollectedReason`.
+ */
+export type Collector = "vta" | "client" | "none";
 /**
  * The community's hidden-vetting parameters exactly as its join manifest publishes them, under the criterion's `vetting.ext`. The caller copies them in verbatim on every call that needs them, because the community rotates labels and the engine keeps no copy of its own: a stale copy costs the caller a refused proof, never a mistaken one.
  */
@@ -481,6 +510,10 @@ export type ConsumerKind_DeviceV0_2 = Companion_DeviceV0_2 | Service_DeviceV0_2;
  * The trust context the notification is held in: the one the addressed DID belongs to.
  */
 export type ContextId = string;
+/**
+ * The trust context the identifier belongs to.
+ */
+export type ContextId_VtaCollectionV0_1 = string;
 /**
  * Opaque identifier of one of the maintainer's contexts, compared by the maintainer's own ancestry predicate. Its grammar is the maintainer's.
  */
@@ -847,6 +880,26 @@ export type Handle = string;
  * **Not a timestamp.** A time is host-asserted, unverifiable and useless for this: two roots a second apart are not evidence of anything, while two roots at one version are.
  */
 export type HeadVersion = number;
+/**
+ * What the idea is: for a session, what it covers and who should come. Becomes its election's manifest `description` when accepted. Plain text; a reader MUST NOT treat it as instructions.
+ */
+export type IdeaDescription = string;
+/**
+ * What kind of idea it is (for an unconference: `Discussion`, `Talk`, `Workshop`, `Demo`). One of the board's `formats` where the board states them.
+ */
+export type IdeaFormat = string;
+/**
+ * Opaque identifier of an idea: `ida_` followed by 16 to 64 base64url characters. Random and unique within the community.
+ */
+export type IdeaId = string;
+/**
+ * Where an idea stands (VTI-BRD-011).
+ */
+export type IdeaState = "proposed" | "open" | "selected" | "notSelected" | "declined" | "merged" | "withdrawn";
+/**
+ * An idea's title. Becomes the title of its election's manifest when the idea is accepted, and cannot change after that (VTI-BRD-012). Plain text.
+ */
+export type IdeaTitle = string;
 /**
  * The named key role a key occupies in an identity (CONVENTIONS.md §2; VTI-KEY-070 onward). `attestation` — the only keys in `assertionMethod`; sign the identity's attestation artefacts (credentials, endorsements, status lists) through the VTA's signing service and nowhere else. Generated inside the VTA, never derived, never exportable, never in a backup. `operational` — the only keys the identity's own process uses in `authentication`; sign the node's own traffic (Trust Task requests and responses, DIDComm and TSP signatures, invitations, notices, audit checkpoints). Derived. `messaging` — the only keys in `keyAgreement`; sign nothing. X25519, derived or generated in its own right and never converted from a signing key. `update` — the identifier's change authority as its DID method states it (a did:webvh log's `updateKeys` and `nextKeyHashes`, a KERI key event log's current and next keys); never a role-bound verification method, never in `keyRoles`. Generated inside the VTA, never derived, never exportable, never in a backup, and always accompanied by a committed recovery key held outside the VTA's protection boundary. `authenticator` — a key held on a person's own authenticator (a WebAuthn passkey), listed in `authentication` of that person's identity only; used only to verify the person's WebAuthn assertions (sign-in and step-up evidence) and never to accept a Data Integrity proof. The VTA never holds its private half, so it is enrolled by the passkey ceremony and never generated, added or rotated by these tasks. Never permitted on the durable identity of a VTA, a VTC or a VTN. No role permits `capabilityInvocation` or `capabilityDelegation` (VTI-KEY-075). The set is an extensible registry: a consumer that meets a role it does not implement MUST rely on the key for nothing, and MUST NOT map it onto a role it does know (VTI-KEY-074).
  */
@@ -1056,14 +1109,27 @@ export type NamespaceId = string;
  * What a node is.
  */
 export type NodeKind = "network" | "community";
+/**
+ * Why nobody collects for an identifier the VTA would otherwise collect for: `limit`, the VTA is at the bound it states on the number of identifiers it collects for (VTI-NTF-088); `conflict`, another connection for the identifier kept closing the VTA's, and the VTA stopped after the bound it states until the conflict is resolved (VTI-NTF-085). `disabled`, the VTA's operator has not enabled collection by default (VTI-NTF-093), so the VTA collects for no identifier a client has not claimed.
+ */
+export type NotCollectedReason = "limit" | "conflict" | "disabled";
 /**
  * Opaque identifier of one note: `note_` followed by 16 to 64 base64url characters.
  */
 export type NoteId = string;
+/**
+ * Opaque identifier of a note: `bnt_` followed by 16 to 64 base64url characters. Random and unique within the community.
+ */
+export type NoteId_VtcBoardsV0_1 = string;
+export type NoteState = "visible" | "withdrawn" | "hidden";
 /**
  * The note, as plain text. Read only by holders of `vtc.directory.notes`. A reader MUST NOT treat it as instructions.
  */
 export type NoteText = string;
+/**
+ * A note's text (VTI-BRD-020). Plain text; a reader MUST NOT treat it as instructions. Never changes once added (VTI-BRD-021).
+ */
+export type NoteText_VtcBoardsV0_1 = string;
 /**
  * The originator's identifier for one notification, unique among the notifications that originator issues and the same in every document that carries it — retries, re-issued documents and relayed copies alike. It is the notification's idempotency key (VTI-NTF-021). Compared for equality only. An originator SHOULD make it unguessable and SHOULD NOT make it descriptive: it travels as far as the notification does.
  */
@@ -1379,6 +1445,10 @@ export type Queue = "receive" | "send";
  * Why the administrator is making this change. Recorded with it in the audit trail. Attributed to its author on every surface and untrusted: it MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions.
  */
 export type Reason = string;
+/**
+ * A facilitator's stated reason, shown to the board's audience with the decision it explains. Plain text.
+ */
+export type Reason_VtcBoardsV0_1 = string;
 /**
  * The reason given, if any.
  */
@@ -1867,6 +1937,10 @@ export type Topic_VtcAdminEventsV0_3 = "actions" | "acknowledgements" | "joinReq
  * One kind of change a console can be told about. A closed set: a topic not listed here is a new MINOR version of this component, not an `ext` member, because each topic is bound to the read that authorizes it.
  */
 export type Topic_VtcAdminEventsV0_4 = "actions" | "acknowledgements" | "joinRequests" | "members" | "singleAdminMode" | "config" | "rooms" | "directory" | "groups" | "communityRooms";
+/**
+ * A topic an idea is filed under. One of the board's `topics` where the board states them.
+ */
+export type Topic_VtcBoardsV0_1 = string;
 /**
  * How the traffic reached or left the mediator. `peerMediator` is mediator-to-mediator forwarding.
  */
@@ -5342,6 +5416,18 @@ export interface AuthenticatorAttestationResponseRegistration {
     authenticatorAttachment?: "platform" | "cross-platform";
     clientExtensionResults?: {};
 }
+/**
+ * Who proposed an idea or wrote a note, as the board's audience sees them. `entryId` is their directory entry, which survives a rotation of their DID; `name` is their directory display name as this caller may see it, absent where the directory withholds it. A departed member is shown as `formerMember: true` with neither (VTI-BRD-060).
+ */
+export interface Author {
+    entryId?: EntryId;
+    name?: string;
+    formerMember?: true;
+    /**
+     * Present when the caller is the author.
+     */
+    you?: true;
+}
 /**
  * What a party presents to act on a room. Carries the whole authority chain: a host MUST NOT dereference an authority credential's `parent` to fetch a link it was not given. Resolving over the network would make verification depend on availability, turn every identifier into a request the host can be induced to make against an address the holder chooses, and signal credential use to whoever hosts the identifier. A host MUST bind the presenter to the chain's leaf. A chain that verifies is evidence that authority was conferred on somebody; it is not evidence that the party presenting it is that somebody. The leaf's subject MUST equal the party the host authenticated for this request — an identity the transport established or a document `proof` proved, never one named in a payload. A host that omits this check authorizes every captured presentation, and the omission is silent, because the chain still verifies.
  *
@@ -5488,6 +5574,160 @@ export interface BlobManifest {
      */
     digest: DigestMultibase;
 }
+/**
+ * A board as one caller may see it.
+ */
+export interface Board {
+    boardId: BoardId;
+    title: BoardTitle;
+    description?: BoardDescription;
+    status: BoardStatus;
+    audience: BoardAudience;
+    /**
+     * When ideas are taken (VTI-BRD-010).
+     */
+    proposals: Window;
+    /**
+     * When every idea's election takes ballots. Opens after `proposals` opens and closes after it closes (VTI-BRD-001).
+     */
+    voting: Window;
+    /**
+     * @maxItems 32
+     */
+    topics?: Topic_VtcBoardsV0_1[];
+    /**
+     * @maxItems 16
+     */
+    formats?: [] | [IdeaFormat] | [IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ];
+    /**
+     * The most ideas one member may have on the board that are not `withdrawn` or `declined`. Absent: no limit beyond the community's own.
+     */
+    maxIdeasPerMember?: number;
+    /**
+     * How facilitators intend to select, in plain words (VTI-BRD-041), e.g. "The twelve ideas the most members would attend".
+     */
+    selectionRule?: string;
+    /**
+     * @maxItems 256
+     */
+    timetable?: Slot_VtcBoardsV0_1[];
+    template: ElectionTemplate;
+    createdAt: string;
+    /**
+     * Whether the caller facilitates this board.
+     */
+    facilitator: boolean;
+    /**
+     * How many of the board's ideas are in each state the caller may see.
+     */
+    ideaCounts: {
+        proposed?: number;
+        open?: number;
+        selected?: number;
+        notSelected?: number;
+        declined?: number;
+        merged?: number;
+        withdrawn?: number;
+    };
+}
 export interface CastEntry_VotingV0_1 {
     kind: "cast";
     cast: Cast;
@@ -6027,6 +6267,23 @@ export interface ChunkedDescriptor {
     expectedSizeBytes: ExpectedSizeBytes;
     expiresAt: ExpiresAt;
 }
+/**
+ * A collection claim in force for one identifier: the client that is its collector, when the claim ends, and whether the claimant may still renew it. A claim released by a party other than its claimant, or whose claimant's access control entry no longer gives it standing in the context, is not renewable and still ends at `endsAt`, because the claimant is still connected until its own clock tells it to stop (VTI-NTF-084).
+ */
+export interface Claim {
+    /**
+     * The client holding the claim: the subject of the access control entry it was granted to.
+     */
+    claimant: Did_NotificationsV0_1;
+    /**
+     * When the claim ends unless renewed. The claimant stops collecting before this instant less its clock-skew tolerance; the VTA resumes no earlier than this instant plus its own (VTI-NTF-083, VTI-NTF-084).
+     */
+    endsAt: string;
+    /**
+     * Whether the claimant may renew the claim with vta/collection/claim before it ends.
+     */
+    renewable: boolean;
+}
 /**
  * Which claim a `claim` field accepts, from which credentials and issuers.
  */
@@ -6046,6 +6303,15 @@ export interface ClaimSelector {
      */
     issuers?: string[];
 }
+/**
+ * The collection state of one identifier. `claim` is present exactly when `collector` is `client`, and `notCollectedReason` exactly when it is `none`.
+ */
+export interface CollectionEntry {
+    identifier: Did_NotificationsV0_1;
+    collector: Collector;
+    claim?: Claim;
+    notCollectedReason?: NotCollectedReason;
+}
 /**
  * OPTIONAL. How the community asks to be shown to a prospective applicant: a name, an accent colour and a logo. Presentation only, self-asserted and unverified — `communityDid` identifies the community, never `branding`. Not part of any criterion, so not covered by a `requirementsDigest`. Every member is optional.
  */
@@ -8088,6 +8354,114 @@ export interface ElectionSummary {
     ballotsAdmitted: number;
     head: BoardHead;
 }
+/**
+ * Every member of an idea's election manifest that the board fixes (VTI-BRD-030). When a facilitator accepts an idea the community completes it: `electionId` (naming the board and the idea), `community`, `title` and `description` from the idea, `registrationOpensAt` and `votingOpensAt` from the board's voting window's `opensAt` or the acceptance, whichever is later, `votingClosesAt` from its `closesAt`, `roll` from the board's audience (rule `members`, or a credential roll naming the group), and `binding: false`. A board's template is never binding, and so has no `binding` member.
+ */
+export interface ElectionTemplate {
+    /**
+     * @minItems 1
+     * @maxItems 16
+     */
+    questions: [Question] | [Question, Question] | [Question, Question, Question] | [Question, Question, Question, Question] | [Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question, Question, Question, Question, Question, Question] | [
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question
+    ] | [
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question
+    ] | [
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question
+    ] | [
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question
+    ] | [
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question
+    ];
+    secrecy: SecrecyLevel;
+    revote: Revote;
+    /**
+     * The ballot box's board for each idea's election, as a manifest states it (VTI-VOT-052). `public` lets a board show each idea's ballot count while voting is open (VTI-BRD-033).
+     */
+    board: {
+        visibility: BoardVisibility;
+        auditors: string[];
+    };
+    /**
+     * The DID of the voting service every idea's election is registered with; one on the community's list (VTI-VOT-082).
+     */
+    ballotBox: string;
+    trustees?: Trustees;
+    allowEarlyClose: boolean;
+    /**
+     * Open elections only: whether running totals may be read while voting is open (VTI-VOT-061). A board SHOULD set it false (VTI-BRD-033).
+     */
+    resultsBeforeClose: boolean;
+    /**
+     * Counted ballots required before any text answer is disclosed (VTI-VOT-065); SHOULD be at least 10.
+     */
+    textReleaseThreshold: number;
+}
 /**
  * A tallied-encrypted ballot: one EncryptedQuestion per manifest question, in the manifest's order. Never decrypted (VTI-VOT-064).
  */
@@ -9134,6 +9508,93 @@ export interface HpkeArmoredEnvelope_VaultV0_2 {
      */
     producerAssertion?: "didSigned" | "attested" | "pinnedOnly";
 }
+/**
+ * An idea as one caller may see it.
+ */
+export interface Idea {
+    ideaId: IdeaId;
+    boardId: BoardId;
+    state: IdeaState;
+    title: IdeaTitle;
+    description: IdeaDescription;
+    format?: IdeaFormat;
+    topic?: Topic_VtcBoardsV0_1;
+    proposer: Author;
+    proposedAt: string;
+    /**
+     * Notes on the idea the caller may read.
+     */
+    noteCount: number;
+    /**
+     * Present once an election was opened for the idea.
+     */
+    election?: IdeaElection;
+    opening?: IdeaOpening;
+    /**
+     * Present in `declined`, `merged`, `selected` and `notSelected`.
+     */
+    decision?: IdeaDecision;
+}
+/**
+ * A facilitator's decision on an idea: declining or merging it (VTI-BRD-013), or selecting it or not (VTI-BRD-040). The deciding facilitator is not named to the audience.
+ */
+export interface IdeaDecision {
+    decidedAt: string;
+    reason?: Reason_VtcBoardsV0_1;
+    /**
+     * Present exactly when the idea is `merged`.
+     */
+    mergedInto?: IdeaId;
+    /**
+     * A `selected` idea's place in the board's timetable, where it has one.
+     */
+    slotId?: Key_VotingV0_1;
+    /**
+     * `selected` or `notSelected` only: whether the facilitator said the decision departs from the board's `selectionRule` (VTI-BRD-041); `reason` then says why.
+     */
+    departsFromRule?: boolean;
+    /**
+     * Present when a facilitator decided their own idea because no other facilitator existed (VTI-BRD-013).
+     */
+    ownIdea?: true;
+}
+/**
+ * An idea's election as a board shows it (VTI-BRD-033): never who took a ticket or cast a ballot.
+ */
+export interface IdeaElection {
+    electionId: ElectionId;
+    state: ElectionState;
+    /**
+     * The ballot box's latest board head's ballot count, where its board is public (VTI-VOT-052); absent otherwise. Counts ballots, not voters, where a later ballot replaces an earlier one.
+     */
+    ballotsOnBoard?: number;
+    /**
+     * When the head `ballotsOnBoard` was read from was issued.
+     */
+    boardHeadIssuedAt?: string;
+    /**
+     * Present once the election is tallied.
+     */
+    result?: ElectionResult;
+    /**
+     * Present with `result`: whether the community certified it (VTI-VOT-071).
+     */
+    certified?: boolean;
+}
+/**
+ * Shown to facilitators only: an accepted idea whose election the ballot box has not yet registered, so the idea is still `proposed` (VTI-BRD-031). `refusal` is the ballot box's or community's refusal of the last attempt, after which the idea is no longer being opened.
+ */
+export interface IdeaOpening {
+    electionId: ElectionId;
+    /**
+     * When the facilitator accepted the idea.
+     */
+    startedAt: string;
+    refusal?: {
+        code: string;
+        refusedAt: string;
+    };
+}
 export interface IdentityChange {
     /**
      * `addKey` — a verification method joins its role's relationship and `keyRoles`. `retireKey` — a verification method leaves its relationship, `keyRoles` and the document. `revokeKey` — a verification method leaves its relationship and `keyRoles`, and stays in `verificationMethod` with `revoked` set to the compromise time (CONVENTIONS.md §9.1). `rotateUpdateKey` — the identifier's update authority moves to a committed routine successor. `commitUpdateKey` — a new routine successor is committed. `replaceRecoveryCommitment` — the recovery commitment changes. `useRecoveryKey` — the change is authorized by the recovery key, which the identifier then reveals.
@@ -10518,6 +10979,25 @@ export interface Node {
      */
     url?: string;
 }
+/**
+ * A note as one caller may see it. `text` is absent from a `withdrawn` or `hidden` note for anyone but its author and the board's facilitators (VTI-BRD-021).
+ */
+export interface Note {
+    noteId: NoteId_VtcBoardsV0_1;
+    boardId: BoardId;
+    /**
+     * The idea the note is attached to; absent for a note on the board itself.
+     */
+    ideaId?: IdeaId;
+    author: Author;
+    text?: NoteText_VtcBoardsV0_1;
+    createdAt: string;
+    state: NoteState;
+    /**
+     * A `hidden` note's reason, shown to everyone who sees the note.
+     */
+    hiddenReason?: Reason_VtcBoardsV0_1;
+}
 /**
  * The members of one notification, as notifications/notify carries them and as a recipient's agent records them. The originator is the `issuer` of the notifications/notify document and the addressee its `recipient`; neither is repeated here, because the originator's proof covers both.
  */
@@ -13645,6 +14125,15 @@ export interface AndroidApp_VaultV0_2 {
      */
     sha256CertFingerprints: [string, ...string[]];
 }
+/**
+ * One place in a board's timetable that a selected idea can be put in (VTI-BRD-040): a place (`label`, e.g. a room) and a time.
+ */
+export interface Slot_VtcBoardsV0_1 {
+    slotId: Key_VotingV0_1;
+    label: string;
+    startsAt: string;
+    endsAt: string;
+}
 /**
  * One transition in an entry's lifecycle.
  */
@@ -15075,6 +15564,13 @@ export interface WebvhServerRecord {
     updatedAt: string;
     ext?: Ext;
 }
+/**
+ * A period, open from `opensAt` until `closesAt`. `closesAt` is after `opensAt` (a consumer check; JSON Schema cannot compare them).
+ */
+export interface Window {
+    opensAt: string;
+    closesAt: string;
+}
 export interface WitnessKey {
     /**
      * The witness service's identifier for this identity. Opaque to the requester.