@openvtc/trust-tasks 0.28.12 → 0.28.14

package/CHANGELOG.md

@@ -11,6 +11,94 @@ The package versions over **its own API** — what a consumer compiles against
 not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
 component.
 
+## 0.28.14 — 2026-11-04
+
+
+### Added
+
+- **trust-task-discovery**: Publish 0.4, a responder advertises the horizon up to which it honours a stated expiresAt (#1030)
+
+SPEC §7.2 (Bounding the record) applies a consumer's maximum age only where a
+  document states no expiresAt, and since trust-tasks-rs 0.37 (#1021)
+  validate_freshness does so, honouring a stated expiry up to the policy's
+  expiry_horizon. discovery 0.3 cannot describe that: its window "governs
+  issuedAt only" and its responder refuses any document past
+  issuedAt + maxAgeSeconds + clockSkewSeconds, whatever expiresAt it states. A
+  responder that honours an expiry could only advertise a narrower window than
+  it applies, and a producer could not learn that stating an expiry keeps a long
+  delivery acceptable.
+
+  - specs/trust-task-discovery/0.4: acceptanceWindow gains an optional
+    expiryHorizonSeconds (whole seconds, at least 1), and the spec defines a
+    document's acceptance end: issuedAt + maxAgeSeconds without an expiresAt;
+    the earlier of expiresAt and issuedAt + expiryHorizonSeconds with one; and,
+    where the window carries no horizon, the earlier of expiresAt and
+    issuedAt + maxAgeSeconds, which is what a 0.3 window says.
+    - Responder: MUST NOT advertise a horizon wider than it applies, nor one at
+      all if it applies its maximum age whatever expiresAt states.
+    - Discoverer: send bounds follow the acceptance end. MAY state an expiresAt
+      within the horizon, no later than it will pursue delivery, instead of
+      issuing a chain of new attempts; a new attempt carries it unchanged.
+      Absent a horizon, it MUST assume the maximum age applies to every
+      document.
+    - AcceptanceWindow is closed in 0.3, so an added optional member is a MINOR
+      increment (§5.2): a new version, not an edit.
+    - Response-side invalid examples: a zero horizon, a duration string, and a
+      fractional entry-level horizon.
+  - trust-tasks-rs: DiscoveryRegistry::respond_to_v0_4 is the current answer.
+    acceptance_window_from reads the policy's expiry_horizon, and
+    expiry_horizon() sets one by hand. respond_to_v0_3 moves to
+    discovery/superseded.rs and states the window without the horizon (narrower
+    than applied, which 0.3 permits).
+  - trust-tasks-https: enable_discovery answers 0.4, and 0.3 beside 0.2 and 0.1.
+  - trust-tasks-dart-https: enableDiscovery answers 0.4. Dart's FreshnessPolicy
+    has no horizon, so its window states none, which says the maximum age
+    applies to every document. 0.3 moves to the superseded block.
+  - Examples and tests that named the 0.3 types use 0.4.
+  - Bindings regenerated (Rust, TS, Go, Dart). 0.3 is superseded.
+
+  Follows from #1021 and trustoverip/dtgwg-vti-spec#96 (VTI-OPS-024,
+  VTI-OPS-028, VTI-TRN-048), whose implementation in
+  OpenVTC/verifiable-trust-infrastructure states delivery deadlines as expiresAt.
+
+
+
+### Specifications
+
+- **process-attestation**: Label WritersProof as the Holder, and check that an implementation's role names a party (#1029)
+
+Follow-up to #994 and #997.
+
+  - process-attestation/0.1 lists WritersProof in the { url, role, name } form
+    #997 added, so the spec page shows which party it plays.
+  - The outcome-evidence rule says "a relying party MUST NOT", not "a consumer":
+    the rule binds whoever relies on the citing artifact, and "consumer" means a
+    document's recipient (SPEC §7.2).
+  - build-registry fails a knownImplementations role that names none of the
+    specification's parties and is not "both". The meta-schema can only bound it
+    as a string, and a typo would put an undefined party on the page.
+
+- **process-attestation**: Declare outcome evidence, bind receipts by digest, add the CPoE profile (#994)
+
+* spec(process-attestation): declare outcome evidence, bind receipts by digest, add the CPoE profile
+
+
+
+### Website
+
+- Show a task's outcome evidence and size bound, and which party an implementation plays (#997)
+
+* site: show a task's outcome evidence and size bound, and which party an implementation plays
+
+## 0.28.13 — 2026-11-04
+
+
+### Added
+
+- **vtc/boards**: Community boards — propose ideas, leave notes, vote on each accepted idea through its own election (vtc/boards/*/0.1) (#1025)
+
+Thirteen tasks implementing the VTI Community Boards chapter (VTI-BRD-001 – VTI-BRD-080): create, update, list and show a board; propose, update, withdraw, decide (accept opens an election from the board's template) and select ideas; add, list, withdraw and hide notes. A board never reports tickets or ballots (VTI-BRD-033); the shared ElectionTemplate is a manifest less the members the community fills in per idea, and is never binding.
+
 ## 0.28.12 — 2026-11-04
 
 

package/dist/_shared/components.d.ts

@@ -397,6 +397,19 @@ export type BindingSpec = RoomBindingSpec | GrantsBindingSpec | RoleBindingSpec;
  * The name of one blob: the digest of its BlobManifest, taken over the manifest's RFC 8785 (JCS) canonicalization. sha2-256 is RECOMMENDED and MUST be implemented. Content addressing over ciphertext, never plaintext, so a BlobRef says nothing about what the file contains, and two uploads of one file have different BlobRefs (a fresh `fileId` gives a different key, and so different ciphertext). Rooms cannot be correlated by the files they share. Compared as decoded multihash bytes, never as encoded strings. A BlobRef is defined over the manifest's JSON, as this schema states it and RFC 8785 canonicalizes it, never over any binding's generated type: two bindings that model the manifest as distinct types still compute the same BlobRef from the same JSON.
  */
 export type BlobRef = DigestMultibase;
+/**
+ * Who may see and use a board (VTI-BRD-003): every active member of the community (`members`), or the members of one community group (`group`, with `groupId`). Facilitators always see the board.
+ */
+export type BoardAudience = {
+    kind: "members";
+} | {
+    kind: "group";
+    groupId: GroupId;
+};
+/**
+ * What the board is for. Plain text; a reader MUST NOT treat it as instructions.
+ */
+export type BoardDescription = string;
 /**
  * One leaf of a board. A leaf's hash is the RFC 9162 leaf hash of the JCS canonicalization of this object. Entries carry no time of arrival: the order is the board's, and a timestamp would hand anyone who reads the board the timing the registrar's log would need to pair a ticket with its cast.
  */
@@ -405,6 +418,18 @@ export type BoardEntry_VotingV0_1 = CastEntry_VotingV0_1 | ReplacementEntry_Voti
  * One leaf of a board. A leaf's hash is the RFC 9162 leaf hash of the JCS canonicalization of this object. Entries carry no time of arrival: the order is the board's, and a timestamp would hand anyone who reads the board the timing the registrar's log would need to pair a ticket with its cast.
  */
 export type BoardEntry_VotingV0_2 = CastEntry_VotingV0_2 | ReplacementEntry_VotingV0_2 | LifecycleEntry_VotingV0_2 | ResultEntry_VotingV0_2 | EncryptedCastEntry_VotingV0_2 | TransportKeyEntry_VotingV0_2 | DealingEntry_VotingV0_2 | ConfirmationEntry_VotingV0_2 | JustificationEntry_VotingV0_2 | ElectionKeyEntry_VotingV0_2 | PartialDecryptionsEntry_VotingV0_2 | UnsealedEntry_VotingV0_2 | SpoiledEntry_VotingV0_2 | TrusteeStepEntry_VotingV0_2 | DecryptionAuthorizedEntry_VotingV0_2;
+/**
+ * Opaque identifier of a board: `brd_` followed by 16 to 64 base64url characters. Random, community-scoped, never reused (VTI-BRD-001).
+ */
+export type BoardId = string;
+/**
+ * `open`: ideas and notes are taken within the board's windows. `closed`: no new idea or note; facilitators still decide and select. `archived`: no change at all; facilitators can still read it (VTI-BRD-005). `open` → `closed` → `archived`, never back.
+ */
+export type BoardStatus = "open" | "closed" | "archived";
+/**
+ * Plain text; a reader MUST NOT treat it as instructions.
+ */
+export type BoardTitle = string;
 /**
  * `public`: anyone reads the board. `private`: the community, the auditors the manifest names and, for one cast's inclusion, the holder of its receipt (VTI-VOT-052).
  */
@@ -855,6 +880,26 @@ export type Handle = string;
  * **Not a timestamp.** A time is host-asserted, unverifiable and useless for this: two roots a second apart are not evidence of anything, while two roots at one version are.
  */
 export type HeadVersion = number;
+/**
+ * What the idea is: for a session, what it covers and who should come. Becomes its election's manifest `description` when accepted. Plain text; a reader MUST NOT treat it as instructions.
+ */
+export type IdeaDescription = string;
+/**
+ * What kind of idea it is (for an unconference: `Discussion`, `Talk`, `Workshop`, `Demo`). One of the board's `formats` where the board states them.
+ */
+export type IdeaFormat = string;
+/**
+ * Opaque identifier of an idea: `ida_` followed by 16 to 64 base64url characters. Random and unique within the community.
+ */
+export type IdeaId = string;
+/**
+ * Where an idea stands (VTI-BRD-011).
+ */
+export type IdeaState = "proposed" | "open" | "selected" | "notSelected" | "declined" | "merged" | "withdrawn";
+/**
+ * An idea's title. Becomes the title of its election's manifest when the idea is accepted, and cannot change after that (VTI-BRD-012). Plain text.
+ */
+export type IdeaTitle = string;
 /**
  * The named key role a key occupies in an identity (CONVENTIONS.md §2; VTI-KEY-070 onward). `attestation` — the only keys in `assertionMethod`; sign the identity's attestation artefacts (credentials, endorsements, status lists) through the VTA's signing service and nowhere else. Generated inside the VTA, never derived, never exportable, never in a backup. `operational` — the only keys the identity's own process uses in `authentication`; sign the node's own traffic (Trust Task requests and responses, DIDComm and TSP signatures, invitations, notices, audit checkpoints). Derived. `messaging` — the only keys in `keyAgreement`; sign nothing. X25519, derived or generated in its own right and never converted from a signing key. `update` — the identifier's change authority as its DID method states it (a did:webvh log's `updateKeys` and `nextKeyHashes`, a KERI key event log's current and next keys); never a role-bound verification method, never in `keyRoles`. Generated inside the VTA, never derived, never exportable, never in a backup, and always accompanied by a committed recovery key held outside the VTA's protection boundary. `authenticator` — a key held on a person's own authenticator (a WebAuthn passkey), listed in `authentication` of that person's identity only; used only to verify the person's WebAuthn assertions (sign-in and step-up evidence) and never to accept a Data Integrity proof. The VTA never holds its private half, so it is enrolled by the passkey ceremony and never generated, added or rotated by these tasks. Never permitted on the durable identity of a VTA, a VTC or a VTN. No role permits `capabilityInvocation` or `capabilityDelegation` (VTI-KEY-075). The set is an extensible registry: a consumer that meets a role it does not implement MUST rely on the key for nothing, and MUST NOT map it onto a role it does know (VTI-KEY-074).
  */
@@ -1072,10 +1117,19 @@ export type NotCollectedReason = "limit" | "conflict" | "disabled";
  * Opaque identifier of one note: `note_` followed by 16 to 64 base64url characters.
  */
 export type NoteId = string;
+/**
+ * Opaque identifier of a note: `bnt_` followed by 16 to 64 base64url characters. Random and unique within the community.
+ */
+export type NoteId_VtcBoardsV0_1 = string;
+export type NoteState = "visible" | "withdrawn" | "hidden";
 /**
  * The note, as plain text. Read only by holders of `vtc.directory.notes`. A reader MUST NOT treat it as instructions.
  */
 export type NoteText = string;
+/**
+ * A note's text (VTI-BRD-020). Plain text; a reader MUST NOT treat it as instructions. Never changes once added (VTI-BRD-021).
+ */
+export type NoteText_VtcBoardsV0_1 = string;
 /**
  * The originator's identifier for one notification, unique among the notifications that originator issues and the same in every document that carries it — retries, re-issued documents and relayed copies alike. It is the notification's idempotency key (VTI-NTF-021). Compared for equality only. An originator SHOULD make it unguessable and SHOULD NOT make it descriptive: it travels as far as the notification does.
  */
@@ -1391,6 +1445,10 @@ export type Queue = "receive" | "send";
  * Why the administrator is making this change. Recorded with it in the audit trail. Attributed to its author on every surface and untrusted: it MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions.
  */
 export type Reason = string;
+/**
+ * A facilitator's stated reason, shown to the board's audience with the decision it explains. Plain text.
+ */
+export type Reason_VtcBoardsV0_1 = string;
 /**
  * The reason given, if any.
  */
@@ -1879,6 +1937,10 @@ export type Topic_VtcAdminEventsV0_3 = "actions" | "acknowledgements" | "joinReq
  * One kind of change a console can be told about. A closed set: a topic not listed here is a new MINOR version of this component, not an `ext` member, because each topic is bound to the read that authorizes it.
  */
 export type Topic_VtcAdminEventsV0_4 = "actions" | "acknowledgements" | "joinRequests" | "members" | "singleAdminMode" | "config" | "rooms" | "directory" | "groups" | "communityRooms";
+/**
+ * A topic an idea is filed under. One of the board's `topics` where the board states them.
+ */
+export type Topic_VtcBoardsV0_1 = string;
 /**
  * How the traffic reached or left the mediator. `peerMediator` is mediator-to-mediator forwarding.
  */
@@ -5354,6 +5416,18 @@ export interface AuthenticatorAttestationResponseRegistration {
     authenticatorAttachment?: "platform" | "cross-platform";
     clientExtensionResults?: {};
 }
+/**
+ * Who proposed an idea or wrote a note, as the board's audience sees them. `entryId` is their directory entry, which survives a rotation of their DID; `name` is their directory display name as this caller may see it, absent where the directory withholds it. A departed member is shown as `formerMember: true` with neither (VTI-BRD-060).
+ */
+export interface Author {
+    entryId?: EntryId;
+    name?: string;
+    formerMember?: true;
+    /**
+     * Present when the caller is the author.
+     */
+    you?: true;
+}
 /**
  * What a party presents to act on a room. Carries the whole authority chain: a host MUST NOT dereference an authority credential's `parent` to fetch a link it was not given. Resolving over the network would make verification depend on availability, turn every identifier into a request the host can be induced to make against an address the holder chooses, and signal credential use to whoever hosts the identifier. A host MUST bind the presenter to the chain's leaf. A chain that verifies is evidence that authority was conferred on somebody; it is not evidence that the party presenting it is that somebody. The leaf's subject MUST equal the party the host authenticated for this request — an identity the transport established or a document `proof` proved, never one named in a payload. A host that omits this check authorizes every captured presentation, and the omission is silent, because the chain still verifies.
  *
@@ -5500,6 +5574,160 @@ export interface BlobManifest {
      */
     digest: DigestMultibase;
 }
+/**
+ * A board as one caller may see it.
+ */
+export interface Board {
+    boardId: BoardId;
+    title: BoardTitle;
+    description?: BoardDescription;
+    status: BoardStatus;
+    audience: BoardAudience;
+    /**
+     * When ideas are taken (VTI-BRD-010).
+     */
+    proposals: Window;
+    /**
+     * When every idea's election takes ballots. Opens after `proposals` opens and closes after it closes (VTI-BRD-001).
+     */
+    voting: Window;
+    /**
+     * @maxItems 32
+     */
+    topics?: Topic_VtcBoardsV0_1[];
+    /**
+     * @maxItems 16
+     */
+    formats?: [] | [IdeaFormat] | [IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat, IdeaFormat] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ] | [
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat,
+        IdeaFormat
+    ];
+    /**
+     * The most ideas one member may have on the board that are not `withdrawn` or `declined`. Absent: no limit beyond the community's own.
+     */
+    maxIdeasPerMember?: number;
+    /**
+     * How facilitators intend to select, in plain words (VTI-BRD-041), e.g. "The twelve ideas the most members would attend".
+     */
+    selectionRule?: string;
+    /**
+     * @maxItems 256
+     */
+    timetable?: Slot_VtcBoardsV0_1[];
+    template: ElectionTemplate;
+    createdAt: string;
+    /**
+     * Whether the caller facilitates this board.
+     */
+    facilitator: boolean;
+    /**
+     * How many of the board's ideas are in each state the caller may see.
+     */
+    ideaCounts: {
+        proposed?: number;
+        open?: number;
+        selected?: number;
+        notSelected?: number;
+        declined?: number;
+        merged?: number;
+        withdrawn?: number;
+    };
+}
 export interface CastEntry_VotingV0_1 {
     kind: "cast";
     cast: Cast;
@@ -8126,6 +8354,114 @@ export interface ElectionSummary {
     ballotsAdmitted: number;
     head: BoardHead;
 }
+/**
+ * Every member of an idea's election manifest that the board fixes (VTI-BRD-030). When a facilitator accepts an idea the community completes it: `electionId` (naming the board and the idea), `community`, `title` and `description` from the idea, `registrationOpensAt` and `votingOpensAt` from the board's voting window's `opensAt` or the acceptance, whichever is later, `votingClosesAt` from its `closesAt`, `roll` from the board's audience (rule `members`, or a credential roll naming the group), and `binding: false`. A board's template is never binding, and so has no `binding` member.
+ */
+export interface ElectionTemplate {
+    /**
+     * @minItems 1
+     * @maxItems 16
+     */
+    questions: [Question] | [Question, Question] | [Question, Question, Question] | [Question, Question, Question, Question] | [Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question, Question, Question, Question, Question] | [Question, Question, Question, Question, Question, Question, Question, Question, Question, Question, Question] | [
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question
+    ] | [
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question
+    ] | [
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question
+    ] | [
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question
+    ] | [
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question,
+        Question
+    ];
+    secrecy: SecrecyLevel;
+    revote: Revote;
+    /**
+     * The ballot box's board for each idea's election, as a manifest states it (VTI-VOT-052). `public` lets a board show each idea's ballot count while voting is open (VTI-BRD-033).
+     */
+    board: {
+        visibility: BoardVisibility;
+        auditors: string[];
+    };
+    /**
+     * The DID of the voting service every idea's election is registered with; one on the community's list (VTI-VOT-082).
+     */
+    ballotBox: string;
+    trustees?: Trustees;
+    allowEarlyClose: boolean;
+    /**
+     * Open elections only: whether running totals may be read while voting is open (VTI-VOT-061). A board SHOULD set it false (VTI-BRD-033).
+     */
+    resultsBeforeClose: boolean;
+    /**
+     * Counted ballots required before any text answer is disclosed (VTI-VOT-065); SHOULD be at least 10.
+     */
+    textReleaseThreshold: number;
+}
 /**
  * A tallied-encrypted ballot: one EncryptedQuestion per manifest question, in the manifest's order. Never decrypted (VTI-VOT-064).
  */
@@ -9172,6 +9508,93 @@ export interface HpkeArmoredEnvelope_VaultV0_2 {
      */
     producerAssertion?: "didSigned" | "attested" | "pinnedOnly";
 }
+/**
+ * An idea as one caller may see it.
+ */
+export interface Idea {
+    ideaId: IdeaId;
+    boardId: BoardId;
+    state: IdeaState;
+    title: IdeaTitle;
+    description: IdeaDescription;
+    format?: IdeaFormat;
+    topic?: Topic_VtcBoardsV0_1;
+    proposer: Author;
+    proposedAt: string;
+    /**
+     * Notes on the idea the caller may read.
+     */
+    noteCount: number;
+    /**
+     * Present once an election was opened for the idea.
+     */
+    election?: IdeaElection;
+    opening?: IdeaOpening;
+    /**
+     * Present in `declined`, `merged`, `selected` and `notSelected`.
+     */
+    decision?: IdeaDecision;
+}
+/**
+ * A facilitator's decision on an idea: declining or merging it (VTI-BRD-013), or selecting it or not (VTI-BRD-040). The deciding facilitator is not named to the audience.
+ */
+export interface IdeaDecision {
+    decidedAt: string;
+    reason?: Reason_VtcBoardsV0_1;
+    /**
+     * Present exactly when the idea is `merged`.
+     */
+    mergedInto?: IdeaId;
+    /**
+     * A `selected` idea's place in the board's timetable, where it has one.
+     */
+    slotId?: Key_VotingV0_1;
+    /**
+     * `selected` or `notSelected` only: whether the facilitator said the decision departs from the board's `selectionRule` (VTI-BRD-041); `reason` then says why.
+     */
+    departsFromRule?: boolean;
+    /**
+     * Present when a facilitator decided their own idea because no other facilitator existed (VTI-BRD-013).
+     */
+    ownIdea?: true;
+}
+/**
+ * An idea's election as a board shows it (VTI-BRD-033): never who took a ticket or cast a ballot.
+ */
+export interface IdeaElection {
+    electionId: ElectionId;
+    state: ElectionState;
+    /**
+     * The ballot box's latest board head's ballot count, where its board is public (VTI-VOT-052); absent otherwise. Counts ballots, not voters, where a later ballot replaces an earlier one.
+     */
+    ballotsOnBoard?: number;
+    /**
+     * When the head `ballotsOnBoard` was read from was issued.
+     */
+    boardHeadIssuedAt?: string;
+    /**
+     * Present once the election is tallied.
+     */
+    result?: ElectionResult;
+    /**
+     * Present with `result`: whether the community certified it (VTI-VOT-071).
+     */
+    certified?: boolean;
+}
+/**
+ * Shown to facilitators only: an accepted idea whose election the ballot box has not yet registered, so the idea is still `proposed` (VTI-BRD-031). `refusal` is the ballot box's or community's refusal of the last attempt, after which the idea is no longer being opened.
+ */
+export interface IdeaOpening {
+    electionId: ElectionId;
+    /**
+     * When the facilitator accepted the idea.
+     */
+    startedAt: string;
+    refusal?: {
+        code: string;
+        refusedAt: string;
+    };
+}
 export interface IdentityChange {
     /**
      * `addKey` — a verification method joins its role's relationship and `keyRoles`. `retireKey` — a verification method leaves its relationship, `keyRoles` and the document. `revokeKey` — a verification method leaves its relationship and `keyRoles`, and stays in `verificationMethod` with `revoked` set to the compromise time (CONVENTIONS.md §9.1). `rotateUpdateKey` — the identifier's update authority moves to a committed routine successor. `commitUpdateKey` — a new routine successor is committed. `replaceRecoveryCommitment` — the recovery commitment changes. `useRecoveryKey` — the change is authorized by the recovery key, which the identifier then reveals.
@@ -10556,6 +10979,25 @@ export interface Node {
      */
     url?: string;
 }
+/**
+ * A note as one caller may see it. `text` is absent from a `withdrawn` or `hidden` note for anyone but its author and the board's facilitators (VTI-BRD-021).
+ */
+export interface Note {
+    noteId: NoteId_VtcBoardsV0_1;
+    boardId: BoardId;
+    /**
+     * The idea the note is attached to; absent for a note on the board itself.
+     */
+    ideaId?: IdeaId;
+    author: Author;
+    text?: NoteText_VtcBoardsV0_1;
+    createdAt: string;
+    state: NoteState;
+    /**
+     * A `hidden` note's reason, shown to everyone who sees the note.
+     */
+    hiddenReason?: Reason_VtcBoardsV0_1;
+}
 /**
  * The members of one notification, as notifications/notify carries them and as a recipient's agent records them. The originator is the `issuer` of the notifications/notify document and the addressee its `recipient`; neither is repeated here, because the originator's proof covers both.
  */
@@ -13683,6 +14125,15 @@ export interface AndroidApp_VaultV0_2 {
      */
     sha256CertFingerprints: [string, ...string[]];
 }
+/**
+ * One place in a board's timetable that a selected idea can be put in (VTI-BRD-040): a place (`label`, e.g. a room) and a time.
+ */
+export interface Slot_VtcBoardsV0_1 {
+    slotId: Key_VotingV0_1;
+    label: string;
+    startsAt: string;
+    endsAt: string;
+}
 /**
  * One transition in an entry's lifecycle.
  */
@@ -15113,6 +15564,13 @@ export interface WebvhServerRecord {
     updatedAt: string;
     ext?: Ext;
 }
+/**
+ * A period, open from `opensAt` until `closesAt`. `closesAt` is after `opensAt` (a consumer check; JSON Schema cannot compare them).
+ */
+export interface Window {
+    opensAt: string;
+    closesAt: string;
+}
 export interface WitnessKey {
     /**
      * The witness service's identifier for this identity. Opaque to the requester.