@digitaldefiance/ecies-lib 4.6.3 → 4.7.0

package/src/lib/voting/poll-core.js

@@ -0,0 +1,225 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Poll = void 0;
+const audit_1 = require("./audit");
+const security_1 = require("./security");
+const types_1 = require("./types");
+/**
+ * Poll aggregates encrypted votes using only public key.
+ * Cannot decrypt votes - requires separate Tallier with private key.
+ */
+class Poll {
+    _id;
+    _choices;
+    _method;
+    _authority;
+    ___votingPublicKey;
+    _votes = new Map();
+    _receipts = new Map();
+    _createdAt;
+    _closedAt;
+    _maxWeight;
+    _auditLog;
+    constructor(id, choices, method, authority, votingPublicKey, maxWeight, allowInsecure) {
+        if (choices.length < 2)
+            throw new Error('Poll requires at least 2 choices');
+        if (!authority.votingPublicKey)
+            throw new Error('Authority must have voting keys');
+        security_1.VotingSecurityValidator.validate(method, { allowInsecure });
+        this._id = id;
+        this._choices = Object.freeze([...choices]);
+        this._method = method;
+        this._authority = authority;
+        this.___votingPublicKey = votingPublicKey;
+        this._maxWeight = maxWeight;
+        this._createdAt = Date.now();
+        this._auditLog = new audit_1.ImmutableAuditLog(authority);
+        // Record poll creation in audit log
+        this._auditLog.recordPollCreated(id, {
+            method,
+            choiceCount: choices.length,
+            maxWeight: maxWeight?.toString(),
+        });
+    }
+    get id() {
+        return this._id;
+    }
+    get choices() {
+        return this._choices;
+    }
+    get method() {
+        return this._method;
+    }
+    get isClosed() {
+        return this._closedAt !== undefined;
+    }
+    get voterCount() {
+        return this._receipts.size;
+    }
+    get createdAt() {
+        return this._createdAt;
+    }
+    get closedAt() {
+        return this._closedAt;
+    }
+    get auditLog() {
+        return this._auditLog;
+    }
+    /**
+     * Cast a vote - validates and encrypts based on method
+     */
+    vote(voter, vote) {
+        if (this.isClosed)
+            throw new Error('Poll is closed');
+        const voterId = this._toKey(voter.id);
+        if (this._receipts.has(voterId))
+            throw new Error('Already voted');
+        // Validate vote structure based on method
+        this._validateVote(vote);
+        // Store encrypted vote
+        this._votes.set(voterId, vote.encrypted);
+        // Generate receipt
+        const receipt = this._generateReceipt(voter);
+        this._receipts.set(voterId, receipt);
+        // Record vote in audit log
+        const voterIdHash = this._hashVoterId(voter.id);
+        this._auditLog.recordVoteCast(this._id, voterIdHash);
+        return receipt;
+    }
+    /**
+     * Verify a receipt is valid for this poll
+     */
+    verifyReceipt(voter, receipt) {
+        const voterId = this._toKey(voter.id);
+        const stored = this._receipts.get(voterId);
+        if (!stored)
+            return false;
+        // Verify signature
+        const data = this._receiptData(receipt);
+        return this._authority.verify(receipt.signature, data);
+    }
+    /**
+     * Close the poll - no more votes accepted
+     */
+    close() {
+        if (this.isClosed)
+            throw new Error('Already closed');
+        this._closedAt = Date.now();
+        // Record closure in audit log
+        this._auditLog.recordPollClosed(this._id, {
+            voterCount: this.voterCount,
+            closedAt: this._closedAt,
+        });
+    }
+    /**
+     * Get encrypted votes for tallying (read-only)
+     */
+    getEncryptedVotes() {
+        // Create a proxy that throws on mutation attempts
+        const frozenEntries = Array.from(this._votes.entries()).map(([key, value]) => [key, Object.freeze([...value])]);
+        const readonlyMap = new Map(frozenEntries);
+        return new Proxy(readonlyMap, {
+            get(target, prop) {
+                if (prop === 'set' || prop === 'delete' || prop === 'clear') {
+                    throw new Error('Cannot modify readonly map');
+                }
+                // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
+                const value = Reflect.get(target, prop);
+                // Bind methods to target to preserve 'this' context
+                // eslint-disable-next-line @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access
+                return typeof value === 'function' ? value.bind(target) : value;
+            },
+        });
+    }
+    _validateVote(vote) {
+        switch (this._method) {
+            case types_1.VotingMethod.Plurality:
+                if (vote.choiceIndex === undefined)
+                    throw new Error('Choice required');
+                if (vote.choiceIndex < 0 || vote.choiceIndex >= this._choices.length) {
+                    throw new Error('Invalid choice');
+                }
+                break;
+            case types_1.VotingMethod.Approval:
+                if (!vote.choices?.length)
+                    throw new Error('Choices required');
+                for (const c of vote.choices) {
+                    if (c < 0 || c >= this._choices.length)
+                        throw new Error('Invalid choice');
+                }
+                break;
+            case types_1.VotingMethod.Weighted:
+                if (vote.choiceIndex === undefined)
+                    throw new Error('Choice required');
+                if (!vote.weight || vote.weight <= 0n)
+                    throw new Error('Weight must be positive');
+                if (this._maxWeight && vote.weight > this._maxWeight) {
+                    throw new Error('Weight exceeds maximum');
+                }
+                break;
+            case types_1.VotingMethod.Borda:
+            case types_1.VotingMethod.RankedChoice: {
+                if (!vote.rankings?.length)
+                    throw new Error('Rankings required');
+                const seen = new Set();
+                for (const r of vote.rankings) {
+                    if (r < 0 || r >= this._choices.length)
+                        throw new Error('Invalid choice');
+                    if (seen.has(r))
+                        throw new Error('Duplicate ranking');
+                    seen.add(r);
+                }
+                break;
+            }
+        }
+        if (!vote.encrypted?.length)
+            throw new Error('Encrypted data required');
+    }
+    _generateReceipt(voter) {
+        const nonce = new Uint8Array(16);
+        crypto.getRandomValues(nonce);
+        const receipt = {
+            voterId: voter.id,
+            pollId: this._id,
+            timestamp: Date.now(),
+            signature: new Uint8Array(0),
+            nonce,
+        };
+        const data = this._receiptData(receipt);
+        receipt.signature = this._authority.sign(data);
+        return receipt;
+    }
+    _receiptData(receipt) {
+        const parts = [
+            receipt.voterId,
+            receipt.pollId,
+            new Uint8Array(new BigUint64Array([BigInt(receipt.timestamp)]).buffer),
+            receipt.nonce,
+        ];
+        const totalLength = parts.reduce((sum, p) => sum + p.length, 0);
+        const result = new Uint8Array(totalLength);
+        let offset = 0;
+        for (const part of parts) {
+            result.set(part, offset);
+            offset += part.length;
+        }
+        return result;
+    }
+    _toKey(id) {
+        return Array.from(id)
+            .map((b) => b.toString(16).padStart(2, '0'))
+            .join('');
+    }
+    _hashVoterId(voterId) {
+        // Simple hash for voter ID anonymization
+        const encoder = new TextEncoder();
+        const data = encoder.encode(this._toKey(voterId));
+        const hash = new Uint8Array(32);
+        for (let i = 0; i < data.length && i < 32; i++) {
+            hash[i] = data[i];
+        }
+        return hash;
+    }
+}
+exports.Poll = Poll;
+//# sourceMappingURL=poll-core.js.map

package/src/lib/voting/poll-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll-core.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/poll-core.ts"],"names":[],"mappings":";;;AAKA,mCAA2D;AAC3D,yCAAqD;AACrD,mCAKiB;AAEjB;;;GAGG;AACH,MAAa,IAAI;IACE,GAAG,CAAa;IAChB,QAAQ,CAAwB;IAChC,OAAO,CAAe;IACtB,UAAU,CAAU;IACpB,kBAAkB,CAAY;IAC9B,MAAM,GAA0B,IAAI,GAAG,EAAE,CAAC;IAC1C,SAAS,GAA6B,IAAI,GAAG,EAAE,CAAC;IAChD,UAAU,CAAS;IAC5B,SAAS,CAAU;IACnB,UAAU,CAAU;IACX,SAAS,CAAoB;IAE9C,YACE,EAAc,EACd,OAAiB,EACjB,MAAoB,EACpB,SAAkB,EAClB,eAA0B,EAC1B,SAAkB,EAClB,aAAuB;QAEvB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,CAAC,eAAe;YAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAErD,kCAAuB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;QAE5D,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,kBAAkB,GAAG,eAAe,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,yBAAiB,CAAC,SAAS,CAAC,CAAC;QAElD,oCAAoC;QACpC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,EAAE;YACnC,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;IACtC,CAAC;IACD,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC7B,CAAC;IACD,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,KAAc,EAAE,IAAmB;QACtC,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAElE,0CAA0C;QAC1C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAEzB,uBAAuB;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEzC,mBAAmB;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAErC,2BAA2B;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAErD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAc,EAAE,OAAoB;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,mBAAmB;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE5B,8BAA8B;QAC9B,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE;YACxC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,kDAAkD;QAClD,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CACzD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAU,CAC5D,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAE3C,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE;YAC5B,GAAG,CAAC,MAAM,EAAE,IAAI;gBACd,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAChD,CAAC;gBACD,mEAAmE;gBACnE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACxC,oDAAoD;gBACpD,8IAA8I;gBAC9I,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAClE,CAAC;SACF,CAA2C,CAAC;IAC/C,CAAC;IAEO,aAAa,CAAC,IAAmB;QACvC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,oBAAY,CAAC,SAAS;gBACzB,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACvE,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACrE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACpC,CAAC;gBACD,MAAM;YAER,KAAK,oBAAY,CAAC,QAAQ;gBACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBAC/D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;wBACpC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM;YAER,KAAK,oBAAY,CAAC,QAAQ;gBACxB,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACvE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;oBACnC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;gBAC7C,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM;YAER,KAAK,oBAAY,CAAC,KAAK,CAAC;YACxB,KAAK,oBAAY,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;gBAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;wBACpC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBACpC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;oBACtD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACd,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC1E,CAAC;IAEO,gBAAgB,CAAC,KAAc;QACrC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAE9B,MAAM,OAAO,GAAgB;YAC3B,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;YAC5B,KAAK;SACN,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,YAAY,CAAC,OAAoB;QACvC,MAAM,KAAK,GAAG;YACZ,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,MAAM;YACd,IAAI,UAAU,CAAC,IAAI,cAAc,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACtE,OAAO,CAAC,KAAK;SACd,CAAC;QACF,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QACxB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,EAAc;QAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;aAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAEO,YAAY,CAAC,OAAmB;QACtC,yCAAyC;QACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAlPD,oBAkPC"}

package/src/lib/voting/poll.d.ts

@@ -0,0 +1,124 @@
+import { KeyPair as PaillierKeyPair } from 'paillier-bigint';
+import { Member } from '../../member';
+import { ECIESService } from '../../services/ecies/service';
+import { VotingService } from '../../services/voting.service';
+export interface ECKeyPairBuffer {
+    privateKey: Uint8Array;
+    publicKey: Uint8Array;
+}
+/**
+ * Result of a voting poll with decrypted tallies
+ */
+export interface VotingPollResults {
+    /** Total number of votes cast */
+    totalVotes: bigint;
+    /** Tallies for each choice */
+    tallies: bigint[];
+    /** Choice names */
+    choices: string[];
+    /** Percentage for each choice (0-100) */
+    percentages: number[];
+    /** Index of the winning choice */
+    winnerIndex: number;
+    /** Name of the winning choice */
+    winnerName: string;
+    /** Number of unique voters */
+    voterCount: number;
+}
+/**
+ * VotingPoll provides a high-level interface for conducting secure, verifiable polls
+ * using Paillier homomorphic encryption.
+ *
+ * Features:
+ * - Privacy-preserving vote aggregation (votes remain encrypted until tally)
+ * - Verifiable receipts for each voter
+ * - Multiple tallying and analysis methods
+ * - Ranked choice voting support
+ * - Weighted voting support
+ */
+export declare class VotingPoll {
+    readonly choices: string[];
+    readonly votes: bigint[];
+    private readonly paillierKeyPair;
+    private readonly ecKeyPair;
+    private readonly eciesService;
+    readonly receipts: Map<string, Uint8Array>;
+    private readonly createdAt;
+    private closedAt?;
+    constructor(eciesService: ECIESService, choices: string[], paillierKeyPair: PaillierKeyPair, ecKeyPair: ECKeyPairBuffer, votes: bigint[]);
+    generateEncryptedReceipt(member: Member): Promise<Uint8Array>;
+    memberVoted(member: Member): boolean;
+    verifyReceipt(member: Member, encryptedReceipt: Uint8Array): Promise<boolean>;
+    vote(choiceIndex: number, member: Member): Promise<Uint8Array>;
+    voteWeighted(choiceIndex: number, weight: bigint, member: Member): Promise<Uint8Array>;
+    voteRanked(rankedChoices: number[], member: Member): Promise<Uint8Array>;
+    voteApproval(approvedChoices: number[], member: Member): Promise<Uint8Array>;
+    get tallies(): bigint[];
+    getTally(choiceIndex: number): bigint;
+    get leadingChoice(): string;
+    /**
+     * Get the index of the leading choice
+     */
+    get leadingChoiceIndex(): number;
+    /**
+     * Get complete poll results with percentages and winner
+     */
+    getResults(): VotingPollResults;
+    /**
+     * Get sorted results (descending by vote count)
+     */
+    getSortedResults(): Array<{
+        choice: string;
+        index: number;
+        tally: bigint;
+        percentage: number;
+    }>;
+    /**
+     * Check if there is a tie for first place
+     */
+    get hasTie(): boolean;
+    /**
+     * Get all choices tied for first place
+     */
+    get tiedChoices(): string[];
+    /**
+     * Get total number of unique voters
+     */
+    get voterCount(): number;
+    /**
+     * Get total encrypted votes (sum of all choice tallies)
+     * Note: This returns encrypted sum - decrypt with getTotalVotes()
+     */
+    get encryptedTotalVotes(): bigint;
+    /**
+     * Get total decrypted vote count
+     */
+    getTotalVotes(): bigint;
+    /**
+     * Close the poll (no more votes can be cast)
+     */
+    close(): void;
+    /**
+     * Check if poll is closed
+     */
+    get isClosed(): boolean;
+    /**
+     * Get poll creation timestamp
+     */
+    get createdAtTimestamp(): Date;
+    /**
+     * Get poll closed timestamp (undefined if not closed)
+     */
+    get closedAtTimestamp(): Date | undefined;
+    /**
+     * Get poll duration in milliseconds (undefined if not closed)
+     */
+    get durationMs(): number | undefined;
+    static newPoll(eciesService: ECIESService, choices: string[], paillierKeyPair: PaillierKeyPair, ecKeyPair: ECKeyPairBuffer): VotingPoll;
+    static newPollWithKeys(eciesService: ECIESService, votingService: VotingService, choices: string[]): Promise<{
+        poll: VotingPoll;
+        paillierKeyPair: PaillierKeyPair;
+        ecKeyPair: ECKeyPairBuffer;
+    }>;
+}
+//# sourceMappingURL=poll.d.ts.map

package/src/lib/voting/poll.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/poll.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAG9D,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mBAAmB;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yCAAyC;IACzC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,UAAU;IACrB,SAAgB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClC,SAAgB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,SAAgB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAG7C;IACJ,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAO;IACjC,OAAO,CAAC,QAAQ,CAAC,CAAO;gBAGtB,YAAY,EAAE,YAAY,EAC1B,OAAO,EAAE,MAAM,EAAE,EACjB,eAAe,EAAE,eAAe,EAChC,SAAS,EAAE,eAAe,EAC1B,KAAK,EAAE,MAAM,EAAE;IAgBJ,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAuBnE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAK9B,aAAa,CACxB,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,UAAU,GAC3B,OAAO,CAAC,OAAO,CAAC;IA2BN,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA2B9D,YAAY,CACvB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC;IAuBT,UAAU,CACrB,aAAa,EAAE,MAAM,EAAE,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC;IAqCT,YAAY,CACvB,eAAe,EAAE,MAAM,EAAE,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC;IAkCtB,IAAW,OAAO,IAAI,MAAM,EAAE,CAI7B;IAEM,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAI5C,IAAW,aAAa,IAAI,MAAM,CASjC;IAED;;OAEG;IACH,IAAW,kBAAkB,IAAI,MAAM,CAStC;IAED;;OAEG;IACI,UAAU,IAAI,iBAAiB;IAkBtC;;OAEG;IACI,gBAAgB,IAAI,KAAK,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IAYF;;OAEG;IACH,IAAW,MAAM,IAAI,OAAO,CAO3B;IAED;;OAEG;IACH,IAAW,WAAW,IAAI,MAAM,EAAE,CAUjC;IAED;;OAEG;IACH,IAAW,UAAU,IAAI,MAAM,CAE9B;IAED;;;OAGG;IACH,IAAW,mBAAmB,IAAI,MAAM,CAKvC;IAED;;OAEG;IACI,aAAa,IAAI,MAAM;IAI9B;;OAEG;IACI,KAAK,IAAI,IAAI;IAOpB;;OAEG;IACH,IAAW,QAAQ,IAAI,OAAO,CAE7B;IAED;;OAEG;IACH,IAAW,kBAAkB,IAAI,IAAI,CAEpC;IAED;;OAEG;IACH,IAAW,iBAAiB,IAAI,IAAI,GAAG,SAAS,CAE/C;IAED;;OAEG;IACH,IAAW,UAAU,IAAI,MAAM,GAAG,SAAS,CAK1C;WAEa,OAAO,CACnB,YAAY,EAAE,YAAY,EAC1B,OAAO,EAAE,MAAM,EAAE,EACjB,eAAe,EAAE,eAAe,EAChC,SAAS,EAAE,eAAe,GACzB,UAAU;WAeO,eAAe,CACjC,YAAY,EAAE,YAAY,EAC1B,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC;QACT,IAAI,EAAE,UAAU,CAAC;QACjB,eAAe,EAAE,eAAe,CAAC;QACjC,SAAS,EAAE,eAAe,CAAC;KAC5B,CAAC;CAmBH"}

package/src/lib/voting/poll.js

@@ -0,0 +1,322 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VotingPoll = void 0;
+const sha256_1 = require("@noble/hashes/sha256");
+const utils_1 = require("@noble/hashes/utils");
+const constants_1 = require("../../constants");
+/**
+ * VotingPoll provides a high-level interface for conducting secure, verifiable polls
+ * using Paillier homomorphic encryption.
+ *
+ * Features:
+ * - Privacy-preserving vote aggregation (votes remain encrypted until tally)
+ * - Verifiable receipts for each voter
+ * - Multiple tallying and analysis methods
+ * - Ranked choice voting support
+ * - Weighted voting support
+ */
+class VotingPoll {
+    choices;
+    votes;
+    paillierKeyPair;
+    ecKeyPair;
+    eciesService;
+    receipts = new Map();
+    createdAt;
+    closedAt;
+    constructor(eciesService, choices, paillierKeyPair, ecKeyPair, votes) {
+        this.eciesService = eciesService;
+        if (choices.length === 0) {
+            throw new Error('Poll must have at least one choice');
+        }
+        if (choices.length !== votes.length) {
+            throw new Error('Number of choices must match number of vote tallies');
+        }
+        this.choices = choices;
+        this.paillierKeyPair = paillierKeyPair;
+        this.ecKeyPair = ecKeyPair;
+        this.votes = votes;
+        this.createdAt = new Date();
+    }
+    async generateEncryptedReceipt(member) {
+        const randomNonce = Buffer.from((0, utils_1.randomBytes)(16)).toString(constants_1.VOTING.KEY_FORMAT);
+        const memberId = constants_1.Constants.idProvider.serialize(member.id);
+        const hashInput = `${Date.now()}-${randomNonce}-${memberId}`;
+        const hash = (0, sha256_1.sha256)(new TextEncoder().encode(hashInput));
+        const signature = this.eciesService.signMessage(this.ecKeyPair.privateKey, hash);
+        const receipt = new Uint8Array(hash.length + signature.length);
+        receipt.set(hash, 0);
+        receipt.set(signature, hash.length);
+        const encryptedReceipt = await this.eciesService.encryptSimpleOrSingle(false, member.publicKey, receipt);
+        this.receipts.set(memberId, encryptedReceipt);
+        return encryptedReceipt;
+    }
+    memberVoted(member) {
+        const memberId = constants_1.Constants.idProvider.serialize(member.id);
+        return this.receipts.has(memberId);
+    }
+    async verifyReceipt(member, encryptedReceipt) {
+        const memberId = constants_1.Constants.idProvider.serialize(member.id);
+        const foundReceipt = this.receipts.get(memberId);
+        if (!foundReceipt) {
+            return false;
+        }
+        if (foundReceipt.length !== encryptedReceipt.length ||
+            !foundReceipt.every((v, i) => v === encryptedReceipt[i])) {
+            return false;
+        }
+        const decryptedReceipt = await this.eciesService.decryptSimpleOrSingleWithHeader(false, this.ecKeyPair.privateKey, encryptedReceipt);
+        const hash = decryptedReceipt.subarray(0, 32);
+        const signature = decryptedReceipt.subarray(32);
+        return this.eciesService.verifyMessage(this.ecKeyPair.publicKey, hash, signature);
+    }
+    async vote(choiceIndex, member) {
+        if (this.isClosed) {
+            throw new Error('Poll is closed');
+        }
+        if (this.memberVoted(member)) {
+            throw new Error('Member has already voted');
+        }
+        if (choiceIndex < 0 || choiceIndex >= this.choices.length) {
+            throw new Error(`Invalid option index ${choiceIndex}`);
+        }
+        // vote a 1 for the selected candidate and a 0 for all others
+        for (let i = 0; i < this.choices.length; i++) {
+            if (i == choiceIndex) {
+                this.votes[i] = this.paillierKeyPair.publicKey.addition(this.votes[i], this.paillierKeyPair.publicKey.encrypt(1n));
+            }
+            else {
+                this.votes[i] = this.paillierKeyPair.publicKey.addition(this.votes[i], this.paillierKeyPair.publicKey.encrypt(0n));
+            }
+        }
+        return await this.generateEncryptedReceipt(member);
+    }
+    async voteWeighted(choiceIndex, weight, member) {
+        if (this.isClosed) {
+            throw new Error('Poll is closed');
+        }
+        if (this.memberVoted(member)) {
+            throw new Error('Member has already voted');
+        }
+        if (choiceIndex < 0 || choiceIndex >= this.choices.length) {
+            throw new Error(`Invalid option index ${choiceIndex}`);
+        }
+        if (weight <= 0n) {
+            throw new Error('Vote weight must be positive');
+        }
+        // Add weighted vote to selected choice
+        this.votes[choiceIndex] = this.paillierKeyPair.publicKey.addition(this.votes[choiceIndex], this.paillierKeyPair.publicKey.encrypt(weight));
+        return await this.generateEncryptedReceipt(member);
+    }
+    async voteRanked(rankedChoices, member) {
+        if (this.isClosed) {
+            throw new Error('Poll is closed');
+        }
+        if (this.memberVoted(member)) {
+            throw new Error('Member has already voted');
+        }
+        if (rankedChoices.length === 0) {
+            throw new Error('Must provide at least one ranked choice');
+        }
+        // Validate all choices are valid and unique
+        const seen = new Set();
+        for (const choiceIndex of rankedChoices) {
+            if (choiceIndex < 0 || choiceIndex >= this.choices.length) {
+                throw new Error(`Invalid choice index ${choiceIndex}`);
+            }
+            if (seen.has(choiceIndex)) {
+                throw new Error(`Duplicate choice index ${choiceIndex}`);
+            }
+            seen.add(choiceIndex);
+        }
+        // Award points based on ranking (first choice gets highest points)
+        const maxPoints = BigInt(rankedChoices.length);
+        for (let i = 0; i < rankedChoices.length; i++) {
+            const choiceIndex = rankedChoices[i];
+            const points = maxPoints - BigInt(i); // First choice gets n points, second gets n-1, etc.
+            this.votes[choiceIndex] = this.paillierKeyPair.publicKey.addition(this.votes[choiceIndex], this.paillierKeyPair.publicKey.encrypt(points));
+        }
+        return await this.generateEncryptedReceipt(member);
+    }
+    async voteApproval(approvedChoices, member) {
+        if (this.isClosed) {
+            throw new Error('Poll is closed');
+        }
+        if (this.memberVoted(member)) {
+            throw new Error('Member has already voted');
+        }
+        if (approvedChoices.length === 0) {
+            throw new Error('Must approve at least one choice');
+        }
+        // Validate all choices and check for duplicates
+        const seen = new Set();
+        for (const choiceIndex of approvedChoices) {
+            if (choiceIndex < 0 || choiceIndex >= this.choices.length) {
+                throw new Error(`Invalid choice index ${choiceIndex}`);
+            }
+            if (seen.has(choiceIndex)) {
+                throw new Error(`Duplicate choice index ${choiceIndex}`);
+            }
+            seen.add(choiceIndex);
+        }
+        // Add 1 vote to each approved choice
+        for (const choiceIndex of approvedChoices) {
+            this.votes[choiceIndex] = this.paillierKeyPair.publicKey.addition(this.votes[choiceIndex], this.paillierKeyPair.publicKey.encrypt(1n));
+        }
+        return await this.generateEncryptedReceipt(member);
+    }
+    get tallies() {
+        return this.votes.map((encryptedVote) => this.paillierKeyPair.privateKey.decrypt(encryptedVote));
+    }
+    getTally(choiceIndex) {
+        return this.paillierKeyPair.privateKey.decrypt(this.votes[choiceIndex]);
+    }
+    get leadingChoice() {
+        const tallies = this.tallies;
+        let leadingOptionIndex = 0;
+        for (let i = 1; i < tallies.length; i++) {
+            if (tallies[i] > tallies[leadingOptionIndex]) {
+                leadingOptionIndex = i;
+            }
+        }
+        return this.choices[leadingOptionIndex];
+    }
+    /**
+     * Get the index of the leading choice
+     */
+    get leadingChoiceIndex() {
+        const tallies = this.tallies;
+        let leadingOptionIndex = 0;
+        for (let i = 1; i < tallies.length; i++) {
+            if (tallies[i] > tallies[leadingOptionIndex]) {
+                leadingOptionIndex = i;
+            }
+        }
+        return leadingOptionIndex;
+    }
+    /**
+     * Get complete poll results with percentages and winner
+     */
+    getResults() {
+        const tallies = this.tallies;
+        const totalVotes = tallies.reduce((sum, tally) => sum + tally, 0n);
+        const percentages = tallies.map((tally) => totalVotes > 0n ? Number((tally * 10000n) / totalVotes) / 100 : 0);
+        return {
+            totalVotes,
+            tallies,
+            choices: [...this.choices],
+            percentages,
+            winnerIndex: this.leadingChoiceIndex,
+            winnerName: this.leadingChoice,
+            voterCount: this.receipts.size,
+        };
+    }
+    /**
+     * Get sorted results (descending by vote count)
+     */
+    getSortedResults() {
+        const results = this.getResults();
+        return this.choices
+            .map((choice, index) => ({
+            choice,
+            index,
+            tally: results.tallies[index],
+            percentage: results.percentages[index],
+        }))
+            .sort((a, b) => (b.tally > a.tally ? 1 : b.tally < a.tally ? -1 : 0));
+    }
+    /**
+     * Check if there is a tie for first place
+     */
+    get hasTie() {
+        const tallies = this.tallies;
+        const maxTally = tallies.reduce((max, tally) => (tally > max ? tally : max), 0n);
+        return tallies.filter((tally) => tally === maxTally).length > 1;
+    }
+    /**
+     * Get all choices tied for first place
+     */
+    get tiedChoices() {
+        if (!this.hasTie) {
+            return [];
+        }
+        const tallies = this.tallies;
+        const maxTally = tallies.reduce((max, tally) => (tally > max ? tally : max), 0n);
+        return this.choices.filter((_, index) => tallies[index] === maxTally);
+    }
+    /**
+     * Get total number of unique voters
+     */
+    get voterCount() {
+        return this.receipts.size;
+    }
+    /**
+     * Get total encrypted votes (sum of all choice tallies)
+     * Note: This returns encrypted sum - decrypt with getTotalVotes()
+     */
+    get encryptedTotalVotes() {
+        return this.votes.reduce((sum, vote) => this.paillierKeyPair.publicKey.addition(sum, vote), this.paillierKeyPair.publicKey.encrypt(0n));
+    }
+    /**
+     * Get total decrypted vote count
+     */
+    getTotalVotes() {
+        return this.paillierKeyPair.privateKey.decrypt(this.encryptedTotalVotes);
+    }
+    /**
+     * Close the poll (no more votes can be cast)
+     */
+    close() {
+        if (this.isClosed) {
+            throw new Error('Poll is already closed');
+        }
+        this.closedAt = new Date();
+    }
+    /**
+     * Check if poll is closed
+     */
+    get isClosed() {
+        return this.closedAt !== undefined;
+    }
+    /**
+     * Get poll creation timestamp
+     */
+    get createdAtTimestamp() {
+        return new Date(this.createdAt);
+    }
+    /**
+     * Get poll closed timestamp (undefined if not closed)
+     */
+    get closedAtTimestamp() {
+        return this.closedAt ? new Date(this.closedAt) : undefined;
+    }
+    /**
+     * Get poll duration in milliseconds (undefined if not closed)
+     */
+    get durationMs() {
+        if (!this.closedAt) {
+            return undefined;
+        }
+        return this.closedAt.getTime() - this.createdAt.getTime();
+    }
+    static newPoll(eciesService, choices, paillierKeyPair, ecKeyPair) {
+        const votes = new Array(choices.length);
+        for (let i = 0; i < choices.length; i++) {
+            votes[i] = paillierKeyPair.publicKey.encrypt(0n);
+        }
+        return new VotingPoll(eciesService, choices, paillierKeyPair, ecKeyPair, votes);
+    }
+    static async newPollWithKeys(eciesService, votingService, choices) {
+        const mnemonic = eciesService.generateNewMnemonic();
+        const keyPair = eciesService.mnemonicToSimpleKeyPair(mnemonic);
+        const ecKeyPair = {
+            privateKey: keyPair.privateKey,
+            publicKey: keyPair.publicKey,
+        };
+        const paillierKeyPair = await votingService.deriveVotingKeysFromECDH(ecKeyPair.privateKey, ecKeyPair.publicKey);
+        const poll = VotingPoll.newPoll(eciesService, choices, paillierKeyPair, ecKeyPair);
+        return { poll, paillierKeyPair, ecKeyPair };
+    }
+}
+exports.VotingPoll = VotingPoll;
+//# sourceMappingURL=poll.js.map