@openvtc/trust-tasks 0.28.7 → 0.28.9

package/dist/vtc/elections/tickets/issue/0.2/payload.d.ts

@@ -0,0 +1,651 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/elections/tickets/issue/0.2/payload.schema.json
+ */
+import type { DigestMultibase, ElectionId, Ext, Multibase_VotingV0_1 as Multibase } from "../../../../../_shared/components.js";
+/**
+ * An eligible party asks the community to blind-issue its ticket for one election: the community checks eligibility against its own records and signs a commitment it cannot open, so the ticket its voter's agent unblinds is one the community has never seen. Under a credential roll the party also presents its membership credential for the party the roll names, which the community checks at that moment. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.
+ *
+ * @deprecated superseded by vtc/elections/tickets/issue/0.3
+ */
+export interface VTCElectionsTicketsIssuePayload {
+    electionId: ElectionId;
+    /**
+     * The digest of the manifest the requester read (vtc/elections/show) and its agent bound the request to. A ticket is only ever asked for under the manifest the voter saw.
+     */
+    manifestDigest: DigestMultibase;
+    request: TicketRequest;
+    /**
+     * Under a `credential` roll (voting/_shared/0.4 `RollRule`), and only then: the requester's presentation of its membership credential for the party `roll.memberOf` names, made by the credential's subject — who signs this document — and bound to this document (VTI-VOT-025). Required when the election's roll rule is `credential`, refused under any other rule; the community checks it as it stands at the moment of issuance and discards it once it has decided.
+     */
+    presentation?: {} | string;
+    ext?: Ext;
+}
+/**
+ * The blinded root request for the election's ticket class, as the voter's VTA built it (vta/pcs/voter/register). The community verifies it under its voting parameters and learns nothing else from it.
+ */
+export interface TicketRequest {
+    /**
+     * The ticket class label, `voter/<electionId>` (CONVENTIONS §3.2). It MUST name the election `electionId` names.
+     */
+    label: string;
+    /**
+     * The voter's PCS identifier for this election, derived from the election's voter key, which is allocated for this election alone (VTI-VOT-023).
+     */
+    id: Multibase;
+    request: RootRequest;
+}
+/**
+ * The suite's blinded root request, serialised as vtc/vetting/vetters/pcs-root carries one. Opaque to the community beyond verifying it under its voting parameters.
+ */
+export interface RootRequest {
+    /**
+     * The issuance encoding the suite carries.
+     */
+    encoding?: string;
+    /**
+     * The request's tag under the root context.
+     */
+    t0?: string;
+    /**
+     * The proof that the commitment is well formed and the requester holds its secret.
+     */
+    proof: string;
+}
+/**
+ * Success response to vtc/elections/tickets/issue/0.2: the blind pre-credential. The voter's VTA unblinds it into a ticket the community has never seen (vta/pcs/voter/accept).
+ *
+ * @deprecated superseded by vtc/elections/tickets/issue/0.3
+ */
+export interface VTCElectionsTicketsIssueResponsePayload {
+    electionId: ElectionId;
+    /**
+     * The label signed under — the one asked for.
+     */
+    label: string;
+    /**
+     * The pre-credential, under the community's voting key. Useless to anyone but the holder of the request's blinding state.
+     */
+    preCredential: Multibase;
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { DigestMultibase, ElectionId, Ext, Multibase };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/elections/tickets/issue/0.2";
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export declare const EXTENDS: string | null;
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export declare const DEPRECATION: string | null;
+/**
+ * Stable alias for this specification's request payload shape.
+ *
+ * @deprecated superseded by vtc/elections/tickets/issue/0.3
+ */
+export type Payload = VTCElectionsTicketsIssuePayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vtc/elections/tickets/issue/0.2#response";
+/**
+ * Stable alias for this specification's success-response payload shape.
+ *
+ * @deprecated superseded by vtc/elections/tickets/issue/0.3
+ */
+export type Response = VTCElectionsTicketsIssueResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vtc/elections/tickets/issue/0.2";
+    readonly title: "VTC Elections — Tickets — Issue — payload";
+    readonly description: "An eligible party asks the community to blind-issue its ticket for one election: the community checks eligibility against its own records and signs a commitment it cannot open, so the ticket its voter's agent unblinds is one the community has never seen. Under a credential roll the party also presents its membership credential for the party the roll names, which the community checks at that moment. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["electionId", "manifestDigest", "request"];
+    readonly properties: {
+        readonly electionId: {
+            readonly $ref: "#/$defs/ElectionId";
+        };
+        readonly manifestDigest: {
+            readonly $ref: "#/$defs/DigestMultibase";
+            readonly description: "The digest of the manifest the requester read (vtc/elections/show) and its agent bound the request to. A ticket is only ever asked for under the manifest the voter saw.";
+        };
+        readonly request: {
+            readonly $ref: "#/$defs/TicketRequest";
+        };
+        readonly presentation: {
+            readonly description: "Under a `credential` roll (voting/_shared/0.4 `RollRule`), and only then: the requester's presentation of its membership credential for the party `roll.memberOf` names, made by the credential's subject — who signs this document — and bound to this document (VTI-VOT-025). Required when the election's roll rule is `credential`, refused under any other rule; the community checks it as it stands at the moment of issuance and discards it once it has decided.";
+            readonly anyOf: readonly [{
+                readonly type: "object";
+                readonly description: "A W3C Verifiable Presentation whose `nonce` is this document's `id` and whose `domain` is the community's DID, both signed by its holder's Data Integrity proof.";
+            }, {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 65536;
+                readonly description: "A compact presentation: an SD-JWT with a key-binding JWT whose `nonce` is this document's `id` and `aud` the community's DID.";
+            }];
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly TicketRequest: {
+            readonly title: "TicketRequest";
+            readonly description: "The blinded root request for the election's ticket class, as the voter's VTA built it (vta/pcs/voter/register). The community verifies it under its voting parameters and learns nothing else from it.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["label", "id", "request"];
+            readonly properties: {
+                readonly label: {
+                    readonly type: "string";
+                    readonly pattern: "^voter/[A-Za-z0-9._-]{1,128}$";
+                    readonly maxLength: 134;
+                    readonly description: "The ticket class label, `voter/<electionId>` (CONVENTIONS §3.2). It MUST name the election `electionId` names.";
+                };
+                readonly id: {
+                    readonly $ref: "#/$defs/Multibase";
+                    readonly description: "The voter's PCS identifier for this election, derived from the election's voter key, which is allocated for this election alone (VTI-VOT-023).";
+                };
+                readonly request: {
+                    readonly $ref: "#/$defs/RootRequest";
+                };
+            };
+        };
+        readonly RootRequest: {
+            readonly title: "RootRequest";
+            readonly description: "The suite's blinded root request, serialised as vtc/vetting/vetters/pcs-root carries one. Opaque to the community beyond verifying it under its voting parameters.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["proof"];
+            readonly properties: {
+                readonly encoding: {
+                    readonly type: "string";
+                    readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                    readonly maxLength: 4096;
+                    readonly description: "The issuance encoding the suite carries.";
+                };
+                readonly t0: {
+                    readonly type: "string";
+                    readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                    readonly maxLength: 4096;
+                    readonly description: "The request's tag under the root context.";
+                };
+                readonly proof: {
+                    readonly type: "string";
+                    readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                    readonly maxLength: 8192;
+                    readonly description: "The proof that the commitment is well formed and the requester holds its secret.";
+                };
+            };
+        };
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Elections — Tickets — Issue — response payload";
+            readonly description: "Success response to vtc/elections/tickets/issue/0.2: the blind pre-credential. The voter's VTA unblinds it into a ticket the community has never seen (vta/pcs/voter/accept).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["electionId", "label", "preCredential"];
+            readonly properties: {
+                readonly electionId: {
+                    readonly $ref: "#/$defs/ElectionId";
+                };
+                readonly label: {
+                    readonly type: "string";
+                    readonly pattern: "^voter/[A-Za-z0-9._-]{1,128}$";
+                    readonly maxLength: 134;
+                    readonly description: "The label signed under — the one asked for.";
+                };
+                readonly preCredential: {
+                    readonly $ref: "#/$defs/Multibase";
+                    readonly description: "The pre-credential, under the community's voting key. Useless to anyone but the holder of the request's blinding state.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly Multibase: {
+            readonly title: "Multibase";
+            readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
+            readonly type: "string";
+            readonly maxLength: 16384;
+            readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+        };
+        readonly ElectionId: {
+            readonly title: "ElectionId";
+            readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
+            readonly type: "string";
+            readonly pattern: "^[A-Za-z0-9._-]{1,128}$";
+        };
+        readonly DigestMultibase: {
+            readonly title: "DigestMultibase";
+            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly TicketRequest: {
+            readonly title: "TicketRequest";
+            readonly description: "The blinded root request for the election's ticket class, as the voter's VTA built it (vta/pcs/voter/register). The community verifies it under its voting parameters and learns nothing else from it.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["label", "id", "request"];
+            readonly properties: {
+                readonly label: {
+                    readonly type: "string";
+                    readonly pattern: "^voter/[A-Za-z0-9._-]{1,128}$";
+                    readonly maxLength: 134;
+                    readonly description: "The ticket class label, `voter/<electionId>` (CONVENTIONS §3.2). It MUST name the election `electionId` names.";
+                };
+                readonly id: {
+                    readonly $ref: "#/$defs/Multibase";
+                    readonly description: "The voter's PCS identifier for this election, derived from the election's voter key, which is allocated for this election alone (VTI-VOT-023).";
+                };
+                readonly request: {
+                    readonly $ref: "#/$defs/RootRequest";
+                };
+            };
+        };
+        readonly RootRequest: {
+            readonly title: "RootRequest";
+            readonly description: "The suite's blinded root request, serialised as vtc/vetting/vetters/pcs-root carries one. Opaque to the community beyond verifying it under its voting parameters.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["proof"];
+            readonly properties: {
+                readonly encoding: {
+                    readonly type: "string";
+                    readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                    readonly maxLength: 4096;
+                    readonly description: "The issuance encoding the suite carries.";
+                };
+                readonly t0: {
+                    readonly type: "string";
+                    readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                    readonly maxLength: 4096;
+                    readonly description: "The request's tag under the root context.";
+                };
+                readonly proof: {
+                    readonly type: "string";
+                    readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                    readonly maxLength: 8192;
+                    readonly description: "The proof that the commitment is well formed and the requester holds its secret.";
+                };
+            };
+        };
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Elections — Tickets — Issue — response payload";
+            readonly description: "Success response to vtc/elections/tickets/issue/0.2: the blind pre-credential. The voter's VTA unblinds it into a ticket the community has never seen (vta/pcs/voter/accept).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["electionId", "label", "preCredential"];
+            readonly properties: {
+                readonly electionId: {
+                    readonly $ref: "#/$defs/ElectionId";
+                };
+                readonly label: {
+                    readonly type: "string";
+                    readonly pattern: "^voter/[A-Za-z0-9._-]{1,128}$";
+                    readonly maxLength: 134;
+                    readonly description: "The label signed under — the one asked for.";
+                };
+                readonly preCredential: {
+                    readonly $ref: "#/$defs/Multibase";
+                    readonly description: "The pre-credential, under the community's voting key. Useless to anyone but the holder of the request's blinding state.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly Multibase: {
+            readonly title: "Multibase";
+            readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
+            readonly type: "string";
+            readonly maxLength: 16384;
+            readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+        };
+        readonly ElectionId: {
+            readonly title: "ElectionId";
+            readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
+            readonly type: "string";
+            readonly pattern: "^[A-Za-z0-9._-]{1,128}$";
+        };
+        readonly DigestMultibase: {
+            readonly title: "DigestMultibase";
+            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/elections/tickets/issue/0.2";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vtc/elections/tickets/issue/0.2";
+        readonly title: "VTC Elections — Tickets — Issue — payload";
+        readonly description: "An eligible party asks the community to blind-issue its ticket for one election: the community checks eligibility against its own records and signs a commitment it cannot open, so the ticket its voter's agent unblinds is one the community has never seen. Under a credential roll the party also presents its membership credential for the party the roll names, which the community checks at that moment. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["electionId", "manifestDigest", "request"];
+        readonly properties: {
+            readonly electionId: {
+                readonly $ref: "#/$defs/ElectionId";
+            };
+            readonly manifestDigest: {
+                readonly $ref: "#/$defs/DigestMultibase";
+                readonly description: "The digest of the manifest the requester read (vtc/elections/show) and its agent bound the request to. A ticket is only ever asked for under the manifest the voter saw.";
+            };
+            readonly request: {
+                readonly $ref: "#/$defs/TicketRequest";
+            };
+            readonly presentation: {
+                readonly description: "Under a `credential` roll (voting/_shared/0.4 `RollRule`), and only then: the requester's presentation of its membership credential for the party `roll.memberOf` names, made by the credential's subject — who signs this document — and bound to this document (VTI-VOT-025). Required when the election's roll rule is `credential`, refused under any other rule; the community checks it as it stands at the moment of issuance and discards it once it has decided.";
+                readonly anyOf: readonly [{
+                    readonly type: "object";
+                    readonly description: "A W3C Verifiable Presentation whose `nonce` is this document's `id` and whose `domain` is the community's DID, both signed by its holder's Data Integrity proof.";
+                }, {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 65536;
+                    readonly description: "A compact presentation: an SD-JWT with a key-binding JWT whose `nonce` is this document's `id` and `aud` the community's DID.";
+                }];
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly TicketRequest: {
+                readonly title: "TicketRequest";
+                readonly description: "The blinded root request for the election's ticket class, as the voter's VTA built it (vta/pcs/voter/register). The community verifies it under its voting parameters and learns nothing else from it.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["label", "id", "request"];
+                readonly properties: {
+                    readonly label: {
+                        readonly type: "string";
+                        readonly pattern: "^voter/[A-Za-z0-9._-]{1,128}$";
+                        readonly maxLength: 134;
+                        readonly description: "The ticket class label, `voter/<electionId>` (CONVENTIONS §3.2). It MUST name the election `electionId` names.";
+                    };
+                    readonly id: {
+                        readonly $ref: "#/$defs/Multibase";
+                        readonly description: "The voter's PCS identifier for this election, derived from the election's voter key, which is allocated for this election alone (VTI-VOT-023).";
+                    };
+                    readonly request: {
+                        readonly $ref: "#/$defs/RootRequest";
+                    };
+                };
+            };
+            readonly RootRequest: {
+                readonly title: "RootRequest";
+                readonly description: "The suite's blinded root request, serialised as vtc/vetting/vetters/pcs-root carries one. Opaque to the community beyond verifying it under its voting parameters.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["proof"];
+                readonly properties: {
+                    readonly encoding: {
+                        readonly type: "string";
+                        readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                        readonly maxLength: 4096;
+                        readonly description: "The issuance encoding the suite carries.";
+                    };
+                    readonly t0: {
+                        readonly type: "string";
+                        readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                        readonly maxLength: 4096;
+                        readonly description: "The request's tag under the root context.";
+                    };
+                    readonly proof: {
+                        readonly type: "string";
+                        readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                        readonly maxLength: 8192;
+                        readonly description: "The proof that the commitment is well formed and the requester holds its secret.";
+                    };
+                };
+            };
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Elections — Tickets — Issue — response payload";
+                readonly description: "Success response to vtc/elections/tickets/issue/0.2: the blind pre-credential. The voter's VTA unblinds it into a ticket the community has never seen (vta/pcs/voter/accept).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["electionId", "label", "preCredential"];
+                readonly properties: {
+                    readonly electionId: {
+                        readonly $ref: "#/$defs/ElectionId";
+                    };
+                    readonly label: {
+                        readonly type: "string";
+                        readonly pattern: "^voter/[A-Za-z0-9._-]{1,128}$";
+                        readonly maxLength: 134;
+                        readonly description: "The label signed under — the one asked for.";
+                    };
+                    readonly preCredential: {
+                        readonly $ref: "#/$defs/Multibase";
+                        readonly description: "The pre-credential, under the community's voting key. Useless to anyone but the holder of the request's blinding state.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly Multibase: {
+                readonly title: "Multibase";
+                readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
+                readonly type: "string";
+                readonly maxLength: 16384;
+                readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+            };
+            readonly ElectionId: {
+                readonly title: "ElectionId";
+                readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
+                readonly type: "string";
+                readonly pattern: "^[A-Za-z0-9._-]{1,128}$";
+            };
+            readonly DigestMultibase: {
+                readonly title: "DigestMultibase";
+                readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+                readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/elections/tickets/issue/0.2#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly TicketRequest: {
+                readonly title: "TicketRequest";
+                readonly description: "The blinded root request for the election's ticket class, as the voter's VTA built it (vta/pcs/voter/register). The community verifies it under its voting parameters and learns nothing else from it.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["label", "id", "request"];
+                readonly properties: {
+                    readonly label: {
+                        readonly type: "string";
+                        readonly pattern: "^voter/[A-Za-z0-9._-]{1,128}$";
+                        readonly maxLength: 134;
+                        readonly description: "The ticket class label, `voter/<electionId>` (CONVENTIONS §3.2). It MUST name the election `electionId` names.";
+                    };
+                    readonly id: {
+                        readonly $ref: "#/$defs/Multibase";
+                        readonly description: "The voter's PCS identifier for this election, derived from the election's voter key, which is allocated for this election alone (VTI-VOT-023).";
+                    };
+                    readonly request: {
+                        readonly $ref: "#/$defs/RootRequest";
+                    };
+                };
+            };
+            readonly RootRequest: {
+                readonly title: "RootRequest";
+                readonly description: "The suite's blinded root request, serialised as vtc/vetting/vetters/pcs-root carries one. Opaque to the community beyond verifying it under its voting parameters.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["proof"];
+                readonly properties: {
+                    readonly encoding: {
+                        readonly type: "string";
+                        readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                        readonly maxLength: 4096;
+                        readonly description: "The issuance encoding the suite carries.";
+                    };
+                    readonly t0: {
+                        readonly type: "string";
+                        readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                        readonly maxLength: 4096;
+                        readonly description: "The request's tag under the root context.";
+                    };
+                    readonly proof: {
+                        readonly type: "string";
+                        readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                        readonly maxLength: 8192;
+                        readonly description: "The proof that the commitment is well formed and the requester holds its secret.";
+                    };
+                };
+            };
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Elections — Tickets — Issue — response payload";
+                readonly description: "Success response to vtc/elections/tickets/issue/0.2: the blind pre-credential. The voter's VTA unblinds it into a ticket the community has never seen (vta/pcs/voter/accept).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["electionId", "label", "preCredential"];
+                readonly properties: {
+                    readonly electionId: {
+                        readonly $ref: "#/$defs/ElectionId";
+                    };
+                    readonly label: {
+                        readonly type: "string";
+                        readonly pattern: "^voter/[A-Za-z0-9._-]{1,128}$";
+                        readonly maxLength: 134;
+                        readonly description: "The label signed under — the one asked for.";
+                    };
+                    readonly preCredential: {
+                        readonly $ref: "#/$defs/Multibase";
+                        readonly description: "The pre-credential, under the community's voting key. Useless to anyone but the holder of the request's blinding state.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly Multibase: {
+                readonly title: "Multibase";
+                readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
+                readonly type: "string";
+                readonly maxLength: 16384;
+                readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+            };
+            readonly ElectionId: {
+                readonly title: "ElectionId";
+                readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
+                readonly type: "string";
+                readonly pattern: "^[A-Za-z0-9._-]{1,128}$";
+            };
+            readonly DigestMultibase: {
+                readonly title: "DigestMultibase";
+                readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+                readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map