@digitaldefiance/node-ecies-lib 4.6.3 → 4.7.0

package/src/lib/voting/poll-core.js

@@ -0,0 +1,183 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Poll = void 0;
+/**
+ * Secure Voting Poll - Node.js Optimized
+ */
+const crypto_1 = require("crypto");
+const audit_1 = require("./audit");
+const security_1 = require("./security");
+const types_1 = require("./types");
+class Poll {
+    _id;
+    _choices;
+    _method;
+    _authority;
+    ___votingPublicKey;
+    _votes = new Map();
+    _receipts = new Map();
+    _createdAt;
+    _closedAt;
+    _maxWeight;
+    _auditLog;
+    constructor(id, choices, method, authority, votingPublicKey, maxWeight, allowInsecure) {
+        if (choices.length < 2)
+            throw new Error('Poll requires at least 2 choices');
+        if (!authority.votingPublicKey)
+            throw new Error('Authority must have voting keys');
+        security_1.VotingSecurityValidator.validate(method, { allowInsecure });
+        this._id = id;
+        this._choices = Object.freeze([...choices]);
+        this._method = method;
+        this._authority = authority;
+        this.___votingPublicKey = votingPublicKey;
+        this._maxWeight = maxWeight;
+        this._createdAt = Date.now();
+        this._auditLog = new audit_1.ImmutableAuditLog(authority);
+        this._auditLog.recordPollCreated(id, {
+            method,
+            choiceCount: choices.length,
+            maxWeight: maxWeight?.toString(),
+        });
+    }
+    get id() {
+        return this._id;
+    }
+    get choices() {
+        return this._choices;
+    }
+    get method() {
+        return this._method;
+    }
+    get isClosed() {
+        return this._closedAt !== undefined;
+    }
+    get voterCount() {
+        return this._receipts.size;
+    }
+    get createdAt() {
+        return this._createdAt;
+    }
+    get closedAt() {
+        return this._closedAt;
+    }
+    get auditLog() {
+        return this._auditLog;
+    }
+    vote(voter, vote) {
+        if (this.isClosed)
+            throw new Error('Poll is closed');
+        const voterId = voter.id.toString('hex');
+        if (this._receipts.has(voterId))
+            throw new Error('Already voted');
+        this._validateVote(vote);
+        this._votes.set(voterId, vote.encrypted);
+        const receipt = this._generateReceipt(voter);
+        this._receipts.set(voterId, receipt);
+        const voterIdHash = (0, crypto_1.createHash)('sha256').update(voter.id).digest();
+        this._auditLog.recordVoteCast(this._id, voterIdHash);
+        return receipt;
+    }
+    verifyReceipt(voter, receipt) {
+        const voterId = voter.id.toString('hex');
+        const stored = this._receipts.get(voterId);
+        if (!stored)
+            return false;
+        const data = this._receiptData(receipt);
+        return this._authority.verify(receipt.signature, data);
+    }
+    close() {
+        if (this.isClosed)
+            throw new Error('Already closed');
+        this._closedAt = Date.now();
+        this._auditLog.recordPollClosed(this._id, {
+            voterCount: this.voterCount,
+            closedAt: this._closedAt,
+        });
+    }
+    getEncryptedVotes() {
+        const frozenEntries = Array.from(this._votes.entries()).map(([key, value]) => [key, Object.freeze([...value])]);
+        const readonlyMap = new Map(frozenEntries);
+        return new Proxy(readonlyMap, {
+            get(target, prop) {
+                if (prop === 'set' || prop === 'delete' || prop === 'clear') {
+                    throw new Error('Cannot modify readonly map');
+                }
+                const value = Reflect.get(target, prop);
+                if (typeof value === 'function') {
+                    return value.bind(target);
+                }
+                return value;
+            },
+        });
+    }
+    _validateVote(vote) {
+        switch (this._method) {
+            case types_1.VotingMethod.Plurality:
+                if (vote.choiceIndex === undefined)
+                    throw new Error('Choice required');
+                if (vote.choiceIndex < 0 || vote.choiceIndex >= this._choices.length) {
+                    throw new Error('Invalid choice');
+                }
+                break;
+            case types_1.VotingMethod.Approval:
+                if (!vote.choices?.length)
+                    throw new Error('Choices required');
+                for (const c of vote.choices) {
+                    if (c < 0 || c >= this._choices.length)
+                        throw new Error('Invalid choice');
+                }
+                break;
+            case types_1.VotingMethod.Weighted:
+                if (vote.choiceIndex === undefined)
+                    throw new Error('Choice required');
+                if (!vote.weight || vote.weight <= 0n)
+                    throw new Error('Weight must be positive');
+                if (this._maxWeight && vote.weight > this._maxWeight) {
+                    throw new Error('Weight exceeds maximum');
+                }
+                break;
+            case types_1.VotingMethod.Borda:
+            case types_1.VotingMethod.RankedChoice: {
+                if (!vote.rankings?.length)
+                    throw new Error('Rankings required');
+                const seen = new Set();
+                for (const r of vote.rankings) {
+                    if (r < 0 || r >= this._choices.length)
+                        throw new Error('Invalid choice');
+                    if (seen.has(r))
+                        throw new Error('Duplicate ranking');
+                    seen.add(r);
+                }
+                break;
+            }
+        }
+        if (!vote.encrypted?.length)
+            throw new Error('Encrypted data required');
+    }
+    _generateReceipt(voter) {
+        const nonce = (0, crypto_1.randomBytes)(16);
+        const receipt = {
+            voterId: voter.id,
+            pollId: this._id,
+            timestamp: Date.now(),
+            signature: Buffer.alloc(0),
+            nonce,
+        };
+        const data = this._receiptData(receipt);
+        receipt.signature = this._authority.sign(data);
+        return receipt;
+    }
+    _receiptData(receipt) {
+        const timestamp = Buffer.alloc(8);
+        timestamp.writeBigUInt64BE(BigInt(receipt.timestamp));
+        return Buffer.concat([
+            receipt.voterId,
+            receipt.pollId,
+            timestamp,
+            receipt.nonce,
+        ]);
+    }
+}
+exports.Poll = Poll;
+//# sourceMappingURL=poll-core.js.map

package/src/lib/voting/poll-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll-core.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-node-ecies-lib/src/lib/voting/poll-core.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,mCAAiD;AAOjD,mCAA2D;AAC3D,yCAAqD;AACrD,mCAA6E;AAE7E,MAAa,IAAI;IACE,GAAG,CAAS;IACZ,QAAQ,CAAwB;IAChC,OAAO,CAAe;IACtB,UAAU,CAAU;IACpB,kBAAkB,CAAY;IAC9B,MAAM,GAA0B,IAAI,GAAG,EAAE,CAAC;IAC1C,SAAS,GAA6B,IAAI,GAAG,EAAE,CAAC;IAChD,UAAU,CAAS;IAC5B,SAAS,CAAU;IACnB,UAAU,CAAU;IACX,SAAS,CAAoB;IAE9C,YACE,EAAU,EACV,OAAiB,EACjB,MAAoB,EACpB,SAAkB,EAClB,eAA0B,EAC1B,SAAkB,EAClB,aAAuB;QAEvB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,CAAC,eAAe;YAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,kCAAuB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,kBAAkB,GAAG,eAAe,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,yBAAiB,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,EAAE;YACnC,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;IACtC,CAAC;IACD,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC7B,CAAC;IACD,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,KAAc,EAAE,IAAmB;QACtC,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAClE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QACnE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACrD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,aAAa,CAAC,KAAc,EAAE,OAAoB;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAC3B,OAAO,CAAC,SAAuC,EAC/C,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE;YACxC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB;QACf,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CACzD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAU,CAC5D,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3C,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE;YAC5B,GAAG,CAAC,MAAM,EAAE,IAAI;gBACd,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAY,CAAC;gBACnD,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;oBAChC,OAAQ,KAAyC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAA2C,CAAC;IAC/C,CAAC;IAEO,aAAa,CAAC,IAAmB;QACvC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,oBAAY,CAAC,SAAS;gBACzB,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACvE,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACrE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACpC,CAAC;gBACD,MAAM;YACR,KAAK,oBAAY,CAAC,QAAQ;gBACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBAC/D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;wBACpC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM;YACR,KAAK,oBAAY,CAAC,QAAQ;gBACxB,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACvE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;oBACnC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;gBAC7C,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM;YACR,KAAK,oBAAY,CAAC,KAAK,CAAC;YACxB,KAAK,oBAAY,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;gBAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;wBACpC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBACpC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;oBACtD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACd,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC1E,CAAC;IAEO,gBAAgB,CAAC,KAAc;QACrC,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAgB;YAC3B,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1B,KAAK;SACN,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,YAAY,CAAC,OAAoB;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,CAAC,OAAO;YACf,OAAO,CAAC,MAAM;YACd,SAAS;YACT,OAAO,CAAC,KAAK;SACd,CAAC,CAAC;IACL,CAAC;CACF;AArLD,oBAqLC"}

package/src/lib/voting/security.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Voting Security Validator
+ * Enforces cryptographic security requirements
+ */
+import { VotingMethod } from './types';
+export declare enum SecurityLevel {
+    FullyHomomorphic = "fully-homomorphic",
+    MultiRound = "multi-round",
+    Insecure = "insecure"
+}
+export declare const VOTING_SECURITY: Record<VotingMethod, SecurityLevel>;
+export declare class VotingSecurityValidator {
+    static isFullySecure(method: VotingMethod): boolean;
+    static requiresMultipleRounds(method: VotingMethod): boolean;
+    static getSecurityLevel(method: VotingMethod): SecurityLevel;
+    static validate(method: VotingMethod, options?: {
+        requireFullySecure?: boolean;
+        allowInsecure?: boolean;
+    }): void;
+}
+//# sourceMappingURL=security.d.ts.map

package/src/lib/voting/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-node-ecies-lib/src/lib/voting/security.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,oBAAY,aAAa;IACvB,gBAAgB,sBAAsB;IACtC,UAAU,gBAAgB;IAC1B,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,CAgB/D,CAAC;AAEF,qBAAa,uBAAuB;IAClC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO;IAInD,MAAM,CAAC,sBAAsB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO;IAI5D,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,aAAa;IAI5D,MAAM,CAAC,QAAQ,CACb,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GAClE,IAAI;CAgBR"}

package/src/lib/voting/security.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VotingSecurityValidator = exports.VOTING_SECURITY = exports.SecurityLevel = void 0;
+/**
+ * Voting Security Validator
+ * Enforces cryptographic security requirements
+ */
+const types_1 = require("./types");
+var SecurityLevel;
+(function (SecurityLevel) {
+    SecurityLevel["FullyHomomorphic"] = "fully-homomorphic";
+    SecurityLevel["MultiRound"] = "multi-round";
+    SecurityLevel["Insecure"] = "insecure";
+})(SecurityLevel || (exports.SecurityLevel = SecurityLevel = {}));
+exports.VOTING_SECURITY = {
+    [types_1.VotingMethod.Plurality]: SecurityLevel.FullyHomomorphic,
+    [types_1.VotingMethod.Approval]: SecurityLevel.FullyHomomorphic,
+    [types_1.VotingMethod.Weighted]: SecurityLevel.FullyHomomorphic,
+    [types_1.VotingMethod.Borda]: SecurityLevel.FullyHomomorphic,
+    [types_1.VotingMethod.Score]: SecurityLevel.FullyHomomorphic,
+    [types_1.VotingMethod.YesNo]: SecurityLevel.FullyHomomorphic,
+    [types_1.VotingMethod.YesNoAbstain]: SecurityLevel.FullyHomomorphic,
+    [types_1.VotingMethod.Supermajority]: SecurityLevel.FullyHomomorphic,
+    [types_1.VotingMethod.RankedChoice]: SecurityLevel.MultiRound,
+    [types_1.VotingMethod.TwoRound]: SecurityLevel.MultiRound,
+    [types_1.VotingMethod.STAR]: SecurityLevel.MultiRound,
+    [types_1.VotingMethod.STV]: SecurityLevel.MultiRound,
+    [types_1.VotingMethod.Quadratic]: SecurityLevel.Insecure,
+    [types_1.VotingMethod.Consensus]: SecurityLevel.Insecure,
+    [types_1.VotingMethod.ConsentBased]: SecurityLevel.Insecure,
+};
+class VotingSecurityValidator {
+    static isFullySecure(method) {
+        return exports.VOTING_SECURITY[method] === SecurityLevel.FullyHomomorphic;
+    }
+    static requiresMultipleRounds(method) {
+        return exports.VOTING_SECURITY[method] === SecurityLevel.MultiRound;
+    }
+    static getSecurityLevel(method) {
+        return exports.VOTING_SECURITY[method];
+    }
+    static validate(method, options) {
+        const level = exports.VOTING_SECURITY[method];
+        if (level === SecurityLevel.Insecure && !options?.allowInsecure) {
+            throw new Error(`Voting method ${method} is not cryptographically secure with Paillier. Set allowInsecure: true to use anyway (NOT RECOMMENDED).`);
+        }
+        if (options?.requireFullySecure &&
+            level !== SecurityLevel.FullyHomomorphic) {
+            throw new Error(`Voting method ${method} requires intermediate decryption. Use a fully homomorphic method for maximum security.`);
+        }
+    }
+}
+exports.VotingSecurityValidator = VotingSecurityValidator;
+//# sourceMappingURL=security.js.map

package/src/lib/voting/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-node-ecies-lib/src/lib/voting/security.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,mCAAuC;AAEvC,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,uDAAsC,CAAA;IACtC,2CAA0B,CAAA;IAC1B,sCAAqB,CAAA;AACvB,CAAC,EAJW,aAAa,6BAAb,aAAa,QAIxB;AAEY,QAAA,eAAe,GAAwC;IAClE,CAAC,oBAAY,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,gBAAgB;IACxD,CAAC,oBAAY,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,gBAAgB;IACvD,CAAC,oBAAY,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,gBAAgB;IACvD,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,gBAAgB;IACpD,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,gBAAgB;IACpD,CAAC,oBAAY,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,gBAAgB;IACpD,CAAC,oBAAY,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,gBAAgB;IAC3D,CAAC,oBAAY,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,gBAAgB;IAC5D,CAAC,oBAAY,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,UAAU;IACrD,CAAC,oBAAY,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,UAAU;IACjD,CAAC,oBAAY,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,UAAU;IAC7C,CAAC,oBAAY,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,UAAU;IAC5C,CAAC,oBAAY,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,QAAQ;IAChD,CAAC,oBAAY,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,QAAQ;IAChD,CAAC,oBAAY,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,QAAQ;CACpD,CAAC;AAEF,MAAa,uBAAuB;IAClC,MAAM,CAAC,aAAa,CAAC,MAAoB;QACvC,OAAO,uBAAe,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,gBAAgB,CAAC;IACpE,CAAC;IAED,MAAM,CAAC,sBAAsB,CAAC,MAAoB;QAChD,OAAO,uBAAe,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,UAAU,CAAC;IAC9D,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,MAAoB;QAC1C,OAAO,uBAAe,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,CAAC,QAAQ,CACb,MAAoB,EACpB,OAAmE;QAEnE,MAAM,KAAK,GAAG,uBAAe,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,aAAa,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,iBAAiB,MAAM,0GAA0G,CAClI,CAAC;QACJ,CAAC;QACD,IACE,OAAO,EAAE,kBAAkB;YAC3B,KAAK,KAAK,aAAa,CAAC,gBAAgB,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iBAAiB,MAAM,yFAAyF,CACjH,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAhCD,0DAgCC"}

package/src/lib/voting/tallier.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Poll Tallier - Node.js optimized
+ */
+import type { PrivateKey, PublicKey } from 'paillier-bigint';
+import type { IMember } from '../../interfaces/member';
+import { Poll } from './poll-core';
+import { type PollResults } from './types';
+export declare class PollTallier {
+    private readonly __authority;
+    private readonly votingPrivateKey;
+    private readonly __votingPublicKey;
+    constructor(__authority: IMember, votingPrivateKey: PrivateKey, __votingPublicKey: PublicKey);
+    tally(poll: Poll): PollResults;
+    private _tallyAdditive;
+    private _tallyScored;
+    private _tallyYesNo;
+    private _tallyRankedChoice;
+    private _decryptRankings;
+    private _countFirstChoices;
+    private _tallyQuadratic;
+    private _tallyConsensus;
+    private _tallyConsentBased;
+    private _tallyTwoRound;
+    private _tallySTAR;
+    private _tallySTV;
+}
+//# sourceMappingURL=tallier.d.ts.map

package/src/lib/voting/tallier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tallier.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-node-ecies-lib/src/lib/voting/tallier.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAgB,KAAK,WAAW,EAAoB,MAAM,SAAS,CAAC;AAE3E,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,WAAW,EAAE,OAAO,EACpB,gBAAgB,EAAE,UAAU,EAC5B,iBAAiB,EAAE,SAAS;IAM/C,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,WAAW;IAmC9B,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,kBAAkB;IA6F1B,OAAO,CAAC,gBAAgB;IAiBxB,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,eAAe;IA0BvB,OAAO,CAAC,eAAe;IA0BvB,OAAO,CAAC,kBAAkB;IA2B1B,OAAO,CAAC,cAAc;IA+CtB,OAAO,CAAC,UAAU;IAqClB,OAAO,CAAC,SAAS;CA2DlB"}