feat: qol script for regen & evoting delegation

package.json

@@ -17,7 +17,8 @@
  "dev:core:apps": "pnpm exec concurrently -n registry,evault,sandbox \"pnpm --filter registry dev\" \"pnpm --filter evault-core dev\" \"pnpm --filter dev-sandbox dev\"",
  "docker:core": "docker compose -f docker-compose.databases.yml up -d",
  "docker:core:down": "docker compose -f docker-compose.databases.yml down",
- "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs"
+ "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs",
+ "env:regen": "./scripts/update-env-ip.sh -a"
  },
  "devDependencies": {
  "@biomejs/biome": "^1.9.4",

platforms/evoting/api/src/controllers/DelegationController.ts

@@ -0,0 +1,233 @@
+import { Request, Response } from "express";
+import { DelegationService } from "../services/DelegationService";
+import { VoteService } from "../services/VoteService";
+
+export class DelegationController {
+ private delegationService: DelegationService;
+ private voteService: VoteService;
+
+ constructor() {
+ this.delegationService = new DelegationService();
+ this.voteService = new VoteService();
+ }
+
+ async createDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegateId } = req.body;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegateId) {
+ return res.status(400).json({ error: "Missing delegateId" });
+ }
+
+ const delegation = await this.delegationService.createDelegation(
+ pollId,
+ delegatorId,
+ delegateId
+ );
+
+ res.status(201).json(delegation);
+ } catch (error: any) {
+ console.error("Error creating delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async revokeDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.revokeDelegationByPoll(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error revoking delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async acceptDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.acceptDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error accepting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async rejectDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.rejectDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error rejecting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async getActiveDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+ const includeUsed = req.query.includeUsed === "true" || req.query.includeUsed === "1";
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = includeUsed
+ ? await this.delegationService.getActiveAndUsedDelegationsForDelegate(
+ pollId,
+ delegateId
+ )
+ : await this.delegationService.getActiveDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting active delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getPendingDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getPendingDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getAllPendingDelegations(req: Request, res: Response) {
+ try {
+ const userId = (req as any).user?.id;
+
+ if (!userId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getAllPendingDelegationsForUser(
+ userId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting all pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getMyDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.getDelegationForDelegator(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error getting my delegation:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async castDelegatedVote(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegatorId, voteData, mode } = req.body;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegatorId || !voteData) {
+ return res.status(400).json({ error: "Missing delegatorId or voteData" });
+ }
+
+ const vote = await this.voteService.castDelegatedVote(
+ pollId,
+ delegateId,
+ delegatorId,
+ voteData,
+ mode || "normal"
+ );
+
+ res.status(201).json(vote);
+ } catch (error: any) {
+ console.error("Error casting delegated vote:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async canPollHaveDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+
+ const result = await this.delegationService.canPollHaveDelegation(pollId);
+
+ res.json(result);
+ } catch (error: any) {
+ console.error("Error checking delegation eligibility:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+}

platforms/evoting/api/src/controllers/SigningController.ts

@@ -1,5 +1,6 @@
 import { Request, Response } from "express";
 import { SigningService } from "../services/SigningService";
+import type { SigningDelegationContext } from "../services/SigningService";
 
 export class SigningController {
  private signingService: SigningService | null = null;
@@ -37,15 +38,25 @@ export class SigningController {
  // Create a new signing session for a vote
  async createSigningSession(req: Request, res: Response) {
  try {
- const { pollId, voteData, userId } = req.body;
+ const { pollId, voteData, userId, delegationContext } = req.body as {
+ pollId?: string;
+ voteData?: any;
+ userId?: string;
+ delegationContext?: SigningDelegationContext;
+ };
 
  if (!pollId || !voteData || !userId) {
  return res.status(400).json({
  error: "Missing required fields: pollId, voteData, userId"
  });
  }
 
- const session = await this.ensureService().createSession(pollId, voteData, userId);
+ const session = await this.ensureService().createSession(
+ pollId,
+ voteData,
+ userId,
+ delegationContext
+ );
 
  res.status(201).json({
  sessionId: session.id,

platforms/evoting/api/src/database/data-source.ts

@@ -11,6 +11,7 @@ import { PollVotingState } from "./entities/PollVotingState";
 import { MetaEnvelopeMap } from "./entities/MetaEnvelopeMap";
 import { Message } from "./entities/Message";
 import { VoteReputationResult } from "./entities/VoteReputationResult";
+import { Delegation } from "./entities/Delegation";
 import { PostgresSubscriber } from "../web3adapter/watchers/subscriber";
 
 config({ path: path.resolve(__dirname, "../../../../.env") });
@@ -19,7 +20,7 @@ export const dataSourceOptions: DataSourceOptions = {
  type: "postgres",
  url: process.env.EVOTING_DATABASE_URL,
  synchronize: false,
- entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult],
+ entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult, Delegation],
  migrations: [path.join(__dirname, "migrations", "*.ts")],
  logging: process.env.NODE_ENV === "development",
  subscribers: [PostgresSubscriber],

platforms/evoting/api/src/database/entities/Delegation.ts

@@ -0,0 +1,52 @@
+import {
+ Column,
+ CreateDateColumn,
+ Entity,
+ JoinColumn,
+ ManyToOne,
+ PrimaryGeneratedColumn,
+ UpdateDateColumn,
+} from "typeorm";
+import { Poll } from "./Poll";
+import { User } from "./User";
+
+export type DelegationStatus = "pending" | "active" | "rejected" | "revoked" | "used";
+
+@Entity("delegations")
+export class Delegation {
+ @PrimaryGeneratedColumn("uuid")
+ id!: string;
+
+ @ManyToOne(() => Poll, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "pollId" })
+ poll!: Poll;
+
+ @Column("uuid")
+ pollId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegatorId" })
+ delegator!: User;
+
+ @Column("uuid")
+ delegatorId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegateId" })
+ delegate!: User;
+
+ @Column("uuid")
+ delegateId!: string;
+
+ @Column("enum", {
+ enum: ["pending", "active", "rejected", "revoked", "used"],
+ default: "pending",
+ })
+ status!: DelegationStatus;
+
+ @CreateDateColumn()
+ createdAt!: Date;
+
+ @UpdateDateColumn()
+ updatedAt!: Date;
+}

platforms/evoting/api/src/database/entities/Vote.ts

@@ -63,6 +63,13 @@ export class Vote {
  @Column("uuid")
  userId!: string;
 
+ @ManyToOne(() => User, { nullable: true })
+ @JoinColumn({ name: "castById" })
+ castBy!: User | null;
+
+ @Column("uuid", { nullable: true })
+ castById!: string | null;
+
  // This can be user ID, session ID, or anonymous identifier
  @Column("varchar", { length: 255 })
  voterId!: string;

platforms/evoting/api/src/database/migrations/1771588337031-migration.ts

@@ -0,0 +1,26 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class Migration1771588337031 implements MigrationInterface {
+ name = 'Migration1771588337031'
+
+ public async up(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`CREATE TYPE "public"."delegations_status_enum" AS ENUM('pending', 'active', 'rejected', 'revoked', 'used')`);
+ await queryRunner.query(`CREATE TABLE "delegations" ("id" uuid NOT NULL DEFAULT uuid_generate_v4(), "pollId" uuid NOT NULL, "delegatorId" uuid NOT NULL, "delegateId" uuid NOT NULL, "status" "public"."delegations_status_enum" NOT NULL DEFAULT 'pending', "createdAt" TIMESTAMP NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP NOT NULL DEFAULT now(), CONSTRAINT "PK_01f9fbbc9b3bf52236a4e951b19" PRIMARY KEY ("id"))`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD "castById" uuid`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b" FOREIGN KEY ("castById") REFERENCES "users"("id") ON DELETE NO ACTION ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9" FOREIGN KEY ("pollId") REFERENCES "polls"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6" FOREIGN KEY ("delegatorId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a" FOREIGN KEY ("delegateId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ }
+
+ public async down(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP COLUMN "castById"`);
+ await queryRunner.query(`DROP TABLE "delegations"`);
+ await queryRunner.query(`DROP TYPE "public"."delegations_status_enum"`);
+ }
+
+}

package.json

@@ -17,7 +17,8 @@
  "dev:core:apps": "pnpm exec concurrently -n registry,evault,sandbox \"pnpm --filter registry dev\" \"pnpm --filter evault-core dev\" \"pnpm --filter dev-sandbox dev\"",
  "docker:core": "docker compose -f docker-compose.databases.yml up -d",
  "docker:core:down": "docker compose -f docker-compose.databases.yml down",
- "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs"
+ "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs",
+ "env:regen": "./scripts/update-env-ip.sh -a"
  },
  "devDependencies": {
  "@biomejs/biome": "^1.9.4",

platforms/evoting/api/src/controllers/DelegationController.ts

@@ -0,0 +1,233 @@
+import { Request, Response } from "express";
+import { DelegationService } from "../services/DelegationService";
+import { VoteService } from "../services/VoteService";
+
+export class DelegationController {
+ private delegationService: DelegationService;
+ private voteService: VoteService;
+
+ constructor() {
+ this.delegationService = new DelegationService();
+ this.voteService = new VoteService();
+ }
+
+ async createDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegateId } = req.body;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegateId) {
+ return res.status(400).json({ error: "Missing delegateId" });
+ }
+
+ const delegation = await this.delegationService.createDelegation(
+ pollId,
+ delegatorId,
+ delegateId
+ );
+
+ res.status(201).json(delegation);
+ } catch (error: any) {
+ console.error("Error creating delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async revokeDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.revokeDelegationByPoll(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error revoking delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async acceptDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.acceptDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error accepting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async rejectDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.rejectDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error rejecting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async getActiveDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+ const includeUsed = req.query.includeUsed === "true" || req.query.includeUsed === "1";
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = includeUsed
+ ? await this.delegationService.getActiveAndUsedDelegationsForDelegate(
+ pollId,
+ delegateId
+ )
+ : await this.delegationService.getActiveDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting active delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getPendingDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getPendingDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getAllPendingDelegations(req: Request, res: Response) {
+ try {
+ const userId = (req as any).user?.id;
+
+ if (!userId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getAllPendingDelegationsForUser(
+ userId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting all pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getMyDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.getDelegationForDelegator(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error getting my delegation:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async castDelegatedVote(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegatorId, voteData, mode } = req.body;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegatorId || !voteData) {
+ return res.status(400).json({ error: "Missing delegatorId or voteData" });
+ }
+
+ const vote = await this.voteService.castDelegatedVote(
+ pollId,
+ delegateId,
+ delegatorId,
+ voteData,
+ mode || "normal"
+ );
+
+ res.status(201).json(vote);
+ } catch (error: any) {
+ console.error("Error casting delegated vote:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async canPollHaveDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+
+ const result = await this.delegationService.canPollHaveDelegation(pollId);
+
+ res.json(result);
+ } catch (error: any) {
+ console.error("Error checking delegation eligibility:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+}

platforms/evoting/api/src/controllers/SigningController.ts

@@ -1,5 +1,6 @@
 import { Request, Response } from "express";
 import { SigningService } from "../services/SigningService";
+import type { SigningDelegationContext } from "../services/SigningService";
 
 export class SigningController {
  private signingService: SigningService | null = null;
@@ -37,15 +38,25 @@ export class SigningController {
  // Create a new signing session for a vote
  async createSigningSession(req: Request, res: Response) {
  try {
- const { pollId, voteData, userId } = req.body;
+ const { pollId, voteData, userId, delegationContext } = req.body as {
+ pollId?: string;
+ voteData?: any;
+ userId?: string;
+ delegationContext?: SigningDelegationContext;
+ };
 
  if (!pollId || !voteData || !userId) {
  return res.status(400).json({
  error: "Missing required fields: pollId, voteData, userId"
  });
  }
 
- const session = await this.ensureService().createSession(pollId, voteData, userId);
+ const session = await this.ensureService().createSession(
+ pollId,
+ voteData,
+ userId,
+ delegationContext
+ );
 
  res.status(201).json({
  sessionId: session.id,

platforms/evoting/api/src/database/data-source.ts

@@ -11,6 +11,7 @@ import { PollVotingState } from "./entities/PollVotingState";
 import { MetaEnvelopeMap } from "./entities/MetaEnvelopeMap";
 import { Message } from "./entities/Message";
 import { VoteReputationResult } from "./entities/VoteReputationResult";
+import { Delegation } from "./entities/Delegation";
 import { PostgresSubscriber } from "../web3adapter/watchers/subscriber";
 
 config({ path: path.resolve(__dirname, "../../../../.env") });
@@ -19,7 +20,7 @@ export const dataSourceOptions: DataSourceOptions = {
  type: "postgres",
  url: process.env.EVOTING_DATABASE_URL,
  synchronize: false,
- entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult],
+ entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult, Delegation],
  migrations: [path.join(__dirname, "migrations", "*.ts")],
  logging: process.env.NODE_ENV === "development",
  subscribers: [PostgresSubscriber],

platforms/evoting/api/src/database/entities/Delegation.ts

@@ -0,0 +1,52 @@
+import {
+ Column,
+ CreateDateColumn,
+ Entity,
+ JoinColumn,
+ ManyToOne,
+ PrimaryGeneratedColumn,
+ UpdateDateColumn,
+} from "typeorm";
+import { Poll } from "./Poll";
+import { User } from "./User";
+
+export type DelegationStatus = "pending" | "active" | "rejected" | "revoked" | "used";
+
+@Entity("delegations")
+export class Delegation {
+ @PrimaryGeneratedColumn("uuid")
+ id!: string;
+
+ @ManyToOne(() => Poll, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "pollId" })
+ poll!: Poll;
+
+ @Column("uuid")
+ pollId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegatorId" })
+ delegator!: User;
+
+ @Column("uuid")
+ delegatorId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegateId" })
+ delegate!: User;
+
+ @Column("uuid")
+ delegateId!: string;
+
+ @Column("enum", {
+ enum: ["pending", "active", "rejected", "revoked", "used"],
+ default: "pending",
+ })
+ status!: DelegationStatus;
+
+ @CreateDateColumn()
+ createdAt!: Date;
+
+ @UpdateDateColumn()
+ updatedAt!: Date;
+}

platforms/evoting/api/src/database/entities/Vote.ts

@@ -63,6 +63,13 @@ export class Vote {
  @Column("uuid")
  userId!: string;
 
+ @ManyToOne(() => User, { nullable: true })
+ @JoinColumn({ name: "castById" })
+ castBy!: User | null;
+
+ @Column("uuid", { nullable: true })
+ castById!: string | null;
+
  // This can be user ID, session ID, or anonymous identifier
  @Column("varchar", { length: 255 })
  voterId!: string;

platforms/evoting/api/src/database/migrations/1771588337031-migration.ts

@@ -0,0 +1,26 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class Migration1771588337031 implements MigrationInterface {
+ name = 'Migration1771588337031'
+
+ public async up(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`CREATE TYPE "public"."delegations_status_enum" AS ENUM('pending', 'active', 'rejected', 'revoked', 'used')`);
+ await queryRunner.query(`CREATE TABLE "delegations" ("id" uuid NOT NULL DEFAULT uuid_generate_v4(), "pollId" uuid NOT NULL, "delegatorId" uuid NOT NULL, "delegateId" uuid NOT NULL, "status" "public"."delegations_status_enum" NOT NULL DEFAULT 'pending', "createdAt" TIMESTAMP NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP NOT NULL DEFAULT now(), CONSTRAINT "PK_01f9fbbc9b3bf52236a4e951b19" PRIMARY KEY ("id"))`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD "castById" uuid`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b" FOREIGN KEY ("castById") REFERENCES "users"("id") ON DELETE NO ACTION ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9" FOREIGN KEY ("pollId") REFERENCES "polls"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6" FOREIGN KEY ("delegatorId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a" FOREIGN KEY ("delegateId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ }
+
+ public async down(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP COLUMN "castById"`);
+ await queryRunner.query(`DROP TABLE "delegations"`);
+ await queryRunner.query(`DROP TYPE "public"."delegations_status_enum"`);
+ }
+
+}

package.json

@@ -17,7 +17,8 @@
  "dev:core:apps": "pnpm exec concurrently -n registry,evault,sandbox \"pnpm --filter registry dev\" \"pnpm --filter evault-core dev\" \"pnpm --filter dev-sandbox dev\"",
  "docker:core": "docker compose -f docker-compose.databases.yml up -d",
  "docker:core:down": "docker compose -f docker-compose.databases.yml down",
- "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs"
+ "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs",
+ "env:regen": "./scripts/update-env-ip.sh -a"
  },
  "devDependencies": {
  "@biomejs/biome": "^1.9.4",

platforms/evoting/api/src/controllers/DelegationController.ts

@@ -0,0 +1,233 @@
+import { Request, Response } from "express";
+import { DelegationService } from "../services/DelegationService";
+import { VoteService } from "../services/VoteService";
+
+export class DelegationController {
+ private delegationService: DelegationService;
+ private voteService: VoteService;
+
+ constructor() {
+ this.delegationService = new DelegationService();
+ this.voteService = new VoteService();
+ }
+
+ async createDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegateId } = req.body;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegateId) {
+ return res.status(400).json({ error: "Missing delegateId" });
+ }
+
+ const delegation = await this.delegationService.createDelegation(
+ pollId,
+ delegatorId,
+ delegateId
+ );
+
+ res.status(201).json(delegation);
+ } catch (error: any) {
+ console.error("Error creating delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async revokeDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.revokeDelegationByPoll(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error revoking delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async acceptDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.acceptDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error accepting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async rejectDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.rejectDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error rejecting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async getActiveDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+ const includeUsed = req.query.includeUsed === "true" || req.query.includeUsed === "1";
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = includeUsed
+ ? await this.delegationService.getActiveAndUsedDelegationsForDelegate(
+ pollId,
+ delegateId
+ )
+ : await this.delegationService.getActiveDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting active delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getPendingDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getPendingDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getAllPendingDelegations(req: Request, res: Response) {
+ try {
+ const userId = (req as any).user?.id;
+
+ if (!userId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getAllPendingDelegationsForUser(
+ userId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting all pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getMyDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.getDelegationForDelegator(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error getting my delegation:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async castDelegatedVote(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegatorId, voteData, mode } = req.body;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegatorId || !voteData) {
+ return res.status(400).json({ error: "Missing delegatorId or voteData" });
+ }
+
+ const vote = await this.voteService.castDelegatedVote(
+ pollId,
+ delegateId,
+ delegatorId,
+ voteData,
+ mode || "normal"
+ );
+
+ res.status(201).json(vote);
+ } catch (error: any) {
+ console.error("Error casting delegated vote:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async canPollHaveDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+
+ const result = await this.delegationService.canPollHaveDelegation(pollId);
+
+ res.json(result);
+ } catch (error: any) {
+ console.error("Error checking delegation eligibility:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+}

platforms/evoting/api/src/controllers/SigningController.ts

@@ -1,5 +1,6 @@
 import { Request, Response } from "express";
 import { SigningService } from "../services/SigningService";
+import type { SigningDelegationContext } from "../services/SigningService";
 
 export class SigningController {
  private signingService: SigningService | null = null;
@@ -37,15 +38,25 @@ export class SigningController {
  // Create a new signing session for a vote
  async createSigningSession(req: Request, res: Response) {
  try {
- const { pollId, voteData, userId } = req.body;
+ const { pollId, voteData, userId, delegationContext } = req.body as {
+ pollId?: string;
+ voteData?: any;
+ userId?: string;
+ delegationContext?: SigningDelegationContext;
+ };
 
  if (!pollId || !voteData || !userId) {
  return res.status(400).json({
  error: "Missing required fields: pollId, voteData, userId"
  });
  }
 
- const session = await this.ensureService().createSession(pollId, voteData, userId);
+ const session = await this.ensureService().createSession(
+ pollId,
+ voteData,
+ userId,
+ delegationContext
+ );
 
  res.status(201).json({
  sessionId: session.id,

platforms/evoting/api/src/database/data-source.ts

@@ -11,6 +11,7 @@ import { PollVotingState } from "./entities/PollVotingState";
 import { MetaEnvelopeMap } from "./entities/MetaEnvelopeMap";
 import { Message } from "./entities/Message";
 import { VoteReputationResult } from "./entities/VoteReputationResult";
+import { Delegation } from "./entities/Delegation";
 import { PostgresSubscriber } from "../web3adapter/watchers/subscriber";
 
 config({ path: path.resolve(__dirname, "../../../../.env") });
@@ -19,7 +20,7 @@ export const dataSourceOptions: DataSourceOptions = {
  type: "postgres",
  url: process.env.EVOTING_DATABASE_URL,
  synchronize: false,
- entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult],
+ entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult, Delegation],
  migrations: [path.join(__dirname, "migrations", "*.ts")],
  logging: process.env.NODE_ENV === "development",
  subscribers: [PostgresSubscriber],

platforms/evoting/api/src/database/entities/Delegation.ts

@@ -0,0 +1,52 @@
+import {
+ Column,
+ CreateDateColumn,
+ Entity,
+ JoinColumn,
+ ManyToOne,
+ PrimaryGeneratedColumn,
+ UpdateDateColumn,
+} from "typeorm";
+import { Poll } from "./Poll";
+import { User } from "./User";
+
+export type DelegationStatus = "pending" | "active" | "rejected" | "revoked" | "used";
+
+@Entity("delegations")
+export class Delegation {
+ @PrimaryGeneratedColumn("uuid")
+ id!: string;
+
+ @ManyToOne(() => Poll, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "pollId" })
+ poll!: Poll;
+
+ @Column("uuid")
+ pollId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegatorId" })
+ delegator!: User;
+
+ @Column("uuid")
+ delegatorId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegateId" })
+ delegate!: User;
+
+ @Column("uuid")
+ delegateId!: string;
+
+ @Column("enum", {
+ enum: ["pending", "active", "rejected", "revoked", "used"],
+ default: "pending",
+ })
+ status!: DelegationStatus;
+
+ @CreateDateColumn()
+ createdAt!: Date;
+
+ @UpdateDateColumn()
+ updatedAt!: Date;
+}

platforms/evoting/api/src/database/entities/Vote.ts

@@ -63,6 +63,13 @@ export class Vote {
  @Column("uuid")
  userId!: string;
 
+ @ManyToOne(() => User, { nullable: true })
+ @JoinColumn({ name: "castById" })
+ castBy!: User | null;
+
+ @Column("uuid", { nullable: true })
+ castById!: string | null;
+
  // This can be user ID, session ID, or anonymous identifier
  @Column("varchar", { length: 255 })
  voterId!: string;

platforms/evoting/api/src/database/migrations/1771588337031-migration.ts

@@ -0,0 +1,26 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class Migration1771588337031 implements MigrationInterface {
+ name = 'Migration1771588337031'
+
+ public async up(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`CREATE TYPE "public"."delegations_status_enum" AS ENUM('pending', 'active', 'rejected', 'revoked', 'used')`);
+ await queryRunner.query(`CREATE TABLE "delegations" ("id" uuid NOT NULL DEFAULT uuid_generate_v4(), "pollId" uuid NOT NULL, "delegatorId" uuid NOT NULL, "delegateId" uuid NOT NULL, "status" "public"."delegations_status_enum" NOT NULL DEFAULT 'pending', "createdAt" TIMESTAMP NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP NOT NULL DEFAULT now(), CONSTRAINT "PK_01f9fbbc9b3bf52236a4e951b19" PRIMARY KEY ("id"))`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD "castById" uuid`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b" FOREIGN KEY ("castById") REFERENCES "users"("id") ON DELETE NO ACTION ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9" FOREIGN KEY ("pollId") REFERENCES "polls"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6" FOREIGN KEY ("delegatorId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a" FOREIGN KEY ("delegateId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ }
+
+ public async down(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP COLUMN "castById"`);
+ await queryRunner.query(`DROP TABLE "delegations"`);
+ await queryRunner.query(`DROP TYPE "public"."delegations_status_enum"`);
+ }
+
+}

package.json

@@ -17,7 +17,8 @@
  "dev:core:apps": "pnpm exec concurrently -n registry,evault,sandbox \"pnpm --filter registry dev\" \"pnpm --filter evault-core dev\" \"pnpm --filter dev-sandbox dev\"",
  "docker:core": "docker compose -f docker-compose.databases.yml up -d",
  "docker:core:down": "docker compose -f docker-compose.databases.yml down",
- "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs"
+ "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs",
+ "env:regen": "./scripts/update-env-ip.sh -a"
  },
  "devDependencies": {
  "@biomejs/biome": "^1.9.4",

platforms/evoting/api/src/controllers/DelegationController.ts

@@ -0,0 +1,233 @@
+import { Request, Response } from "express";
+import { DelegationService } from "../services/DelegationService";
+import { VoteService } from "../services/VoteService";
+
+export class DelegationController {
+ private delegationService: DelegationService;
+ private voteService: VoteService;
+
+ constructor() {
+ this.delegationService = new DelegationService();
+ this.voteService = new VoteService();
+ }
+
+ async createDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegateId } = req.body;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegateId) {
+ return res.status(400).json({ error: "Missing delegateId" });
+ }
+
+ const delegation = await this.delegationService.createDelegation(
+ pollId,
+ delegatorId,
+ delegateId
+ );
+
+ res.status(201).json(delegation);
+ } catch (error: any) {
+ console.error("Error creating delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async revokeDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.revokeDelegationByPoll(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error revoking delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async acceptDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.acceptDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error accepting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async rejectDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.rejectDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error rejecting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async getActiveDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+ const includeUsed = req.query.includeUsed === "true" || req.query.includeUsed === "1";
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = includeUsed
+ ? await this.delegationService.getActiveAndUsedDelegationsForDelegate(
+ pollId,
+ delegateId
+ )
+ : await this.delegationService.getActiveDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting active delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getPendingDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getPendingDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getAllPendingDelegations(req: Request, res: Response) {
+ try {
+ const userId = (req as any).user?.id;
+
+ if (!userId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getAllPendingDelegationsForUser(
+ userId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting all pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getMyDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.getDelegationForDelegator(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error getting my delegation:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async castDelegatedVote(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegatorId, voteData, mode } = req.body;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegatorId || !voteData) {
+ return res.status(400).json({ error: "Missing delegatorId or voteData" });
+ }
+
+ const vote = await this.voteService.castDelegatedVote(
+ pollId,
+ delegateId,
+ delegatorId,
+ voteData,
+ mode || "normal"
+ );
+
+ res.status(201).json(vote);
+ } catch (error: any) {
+ console.error("Error casting delegated vote:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async canPollHaveDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+
+ const result = await this.delegationService.canPollHaveDelegation(pollId);
+
+ res.json(result);
+ } catch (error: any) {
+ console.error("Error checking delegation eligibility:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+}

platforms/evoting/api/src/controllers/SigningController.ts

@@ -1,5 +1,6 @@
 import { Request, Response } from "express";
 import { SigningService } from "../services/SigningService";
+import type { SigningDelegationContext } from "../services/SigningService";
 
 export class SigningController {
  private signingService: SigningService | null = null;
@@ -37,15 +38,25 @@ export class SigningController {
  // Create a new signing session for a vote
  async createSigningSession(req: Request, res: Response) {
  try {
- const { pollId, voteData, userId } = req.body;
+ const { pollId, voteData, userId, delegationContext } = req.body as {
+ pollId?: string;
+ voteData?: any;
+ userId?: string;
+ delegationContext?: SigningDelegationContext;
+ };
 
  if (!pollId || !voteData || !userId) {
  return res.status(400).json({
  error: "Missing required fields: pollId, voteData, userId"
  });
  }
 
- const session = await this.ensureService().createSession(pollId, voteData, userId);
+ const session = await this.ensureService().createSession(
+ pollId,
+ voteData,
+ userId,
+ delegationContext
+ );
 
  res.status(201).json({
  sessionId: session.id,

platforms/evoting/api/src/database/data-source.ts

@@ -11,6 +11,7 @@ import { PollVotingState } from "./entities/PollVotingState";
 import { MetaEnvelopeMap } from "./entities/MetaEnvelopeMap";
 import { Message } from "./entities/Message";
 import { VoteReputationResult } from "./entities/VoteReputationResult";
+import { Delegation } from "./entities/Delegation";
 import { PostgresSubscriber } from "../web3adapter/watchers/subscriber";
 
 config({ path: path.resolve(__dirname, "../../../../.env") });
@@ -19,7 +20,7 @@ export const dataSourceOptions: DataSourceOptions = {
  type: "postgres",
  url: process.env.EVOTING_DATABASE_URL,
  synchronize: false,
- entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult],
+ entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult, Delegation],
  migrations: [path.join(__dirname, "migrations", "*.ts")],
  logging: process.env.NODE_ENV === "development",
  subscribers: [PostgresSubscriber],

platforms/evoting/api/src/database/entities/Delegation.ts

@@ -0,0 +1,52 @@
+import {
+ Column,
+ CreateDateColumn,
+ Entity,
+ JoinColumn,
+ ManyToOne,
+ PrimaryGeneratedColumn,
+ UpdateDateColumn,
+} from "typeorm";
+import { Poll } from "./Poll";
+import { User } from "./User";
+
+export type DelegationStatus = "pending" | "active" | "rejected" | "revoked" | "used";
+
+@Entity("delegations")
+export class Delegation {
+ @PrimaryGeneratedColumn("uuid")
+ id!: string;
+
+ @ManyToOne(() => Poll, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "pollId" })
+ poll!: Poll;
+
+ @Column("uuid")
+ pollId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegatorId" })
+ delegator!: User;
+
+ @Column("uuid")
+ delegatorId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegateId" })
+ delegate!: User;
+
+ @Column("uuid")
+ delegateId!: string;
+
+ @Column("enum", {
+ enum: ["pending", "active", "rejected", "revoked", "used"],
+ default: "pending",
+ })
+ status!: DelegationStatus;
+
+ @CreateDateColumn()
+ createdAt!: Date;
+
+ @UpdateDateColumn()
+ updatedAt!: Date;
+}

platforms/evoting/api/src/database/entities/Vote.ts

@@ -63,6 +63,13 @@ export class Vote {
  @Column("uuid")
  userId!: string;
 
+ @ManyToOne(() => User, { nullable: true })
+ @JoinColumn({ name: "castById" })
+ castBy!: User | null;
+
+ @Column("uuid", { nullable: true })
+ castById!: string | null;
+
  // This can be user ID, session ID, or anonymous identifier
  @Column("varchar", { length: 255 })
  voterId!: string;

platforms/evoting/api/src/database/migrations/1771588337031-migration.ts

@@ -0,0 +1,26 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class Migration1771588337031 implements MigrationInterface {
+ name = 'Migration1771588337031'
+
+ public async up(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`CREATE TYPE "public"."delegations_status_enum" AS ENUM('pending', 'active', 'rejected', 'revoked', 'used')`);
+ await queryRunner.query(`CREATE TABLE "delegations" ("id" uuid NOT NULL DEFAULT uuid_generate_v4(), "pollId" uuid NOT NULL, "delegatorId" uuid NOT NULL, "delegateId" uuid NOT NULL, "status" "public"."delegations_status_enum" NOT NULL DEFAULT 'pending', "createdAt" TIMESTAMP NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP NOT NULL DEFAULT now(), CONSTRAINT "PK_01f9fbbc9b3bf52236a4e951b19" PRIMARY KEY ("id"))`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD "castById" uuid`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b" FOREIGN KEY ("castById") REFERENCES "users"("id") ON DELETE NO ACTION ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9" FOREIGN KEY ("pollId") REFERENCES "polls"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6" FOREIGN KEY ("delegatorId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a" FOREIGN KEY ("delegateId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ }
+
+ public async down(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP COLUMN "castById"`);
+ await queryRunner.query(`DROP TABLE "delegations"`);
+ await queryRunner.query(`DROP TYPE "public"."delegations_status_enum"`);
+ }
+
+}

package.json

@@ -17,7 +17,8 @@
  "dev:core:apps": "pnpm exec concurrently -n registry,evault,sandbox \"pnpm --filter registry dev\" \"pnpm --filter evault-core dev\" \"pnpm --filter dev-sandbox dev\"",
  "docker:core": "docker compose -f docker-compose.databases.yml up -d",
  "docker:core:down": "docker compose -f docker-compose.databases.yml down",
- "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs"
+ "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs",
+ "env:regen": "./scripts/update-env-ip.sh -a"
  },
  "devDependencies": {
  "@biomejs/biome": "^1.9.4",

platforms/evoting/api/src/controllers/DelegationController.ts

@@ -0,0 +1,233 @@
+import { Request, Response } from "express";
+import { DelegationService } from "../services/DelegationService";
+import { VoteService } from "../services/VoteService";
+
+export class DelegationController {
+ private delegationService: DelegationService;
+ private voteService: VoteService;
+
+ constructor() {
+ this.delegationService = new DelegationService();
+ this.voteService = new VoteService();
+ }
+
+ async createDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegateId } = req.body;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegateId) {
+ return res.status(400).json({ error: "Missing delegateId" });
+ }
+
+ const delegation = await this.delegationService.createDelegation(
+ pollId,
+ delegatorId,
+ delegateId
+ );
+
+ res.status(201).json(delegation);
+ } catch (error: any) {
+ console.error("Error creating delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async revokeDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.revokeDelegationByPoll(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error revoking delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async acceptDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.acceptDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error accepting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async rejectDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.rejectDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error rejecting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async getActiveDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+ const includeUsed = req.query.includeUsed === "true" || req.query.includeUsed === "1";
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = includeUsed
+ ? await this.delegationService.getActiveAndUsedDelegationsForDelegate(
+ pollId,
+ delegateId
+ )
+ : await this.delegationService.getActiveDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting active delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getPendingDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getPendingDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getAllPendingDelegations(req: Request, res: Response) {
+ try {
+ const userId = (req as any).user?.id;
+
+ if (!userId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getAllPendingDelegationsForUser(
+ userId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting all pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getMyDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.getDelegationForDelegator(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error getting my delegation:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async castDelegatedVote(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegatorId, voteData, mode } = req.body;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegatorId || !voteData) {
+ return res.status(400).json({ error: "Missing delegatorId or voteData" });
+ }
+
+ const vote = await this.voteService.castDelegatedVote(
+ pollId,
+ delegateId,
+ delegatorId,
+ voteData,
+ mode || "normal"
+ );
+
+ res.status(201).json(vote);
+ } catch (error: any) {
+ console.error("Error casting delegated vote:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async canPollHaveDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+
+ const result = await this.delegationService.canPollHaveDelegation(pollId);
+
+ res.json(result);
+ } catch (error: any) {
+ console.error("Error checking delegation eligibility:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+}

platforms/evoting/api/src/controllers/SigningController.ts

@@ -1,5 +1,6 @@
 import { Request, Response } from "express";
 import { SigningService } from "../services/SigningService";
+import type { SigningDelegationContext } from "../services/SigningService";
 
 export class SigningController {
  private signingService: SigningService | null = null;
@@ -37,15 +38,25 @@ export class SigningController {
  // Create a new signing session for a vote
  async createSigningSession(req: Request, res: Response) {
  try {
- const { pollId, voteData, userId } = req.body;
+ const { pollId, voteData, userId, delegationContext } = req.body as {
+ pollId?: string;
+ voteData?: any;
+ userId?: string;
+ delegationContext?: SigningDelegationContext;
+ };
 
  if (!pollId || !voteData || !userId) {
  return res.status(400).json({
  error: "Missing required fields: pollId, voteData, userId"
  });
  }
 
- const session = await this.ensureService().createSession(pollId, voteData, userId);
+ const session = await this.ensureService().createSession(
+ pollId,
+ voteData,
+ userId,
+ delegationContext
+ );
 
  res.status(201).json({
  sessionId: session.id,

platforms/evoting/api/src/database/data-source.ts

@@ -11,6 +11,7 @@ import { PollVotingState } from "./entities/PollVotingState";
 import { MetaEnvelopeMap } from "./entities/MetaEnvelopeMap";
 import { Message } from "./entities/Message";
 import { VoteReputationResult } from "./entities/VoteReputationResult";
+import { Delegation } from "./entities/Delegation";
 import { PostgresSubscriber } from "../web3adapter/watchers/subscriber";
 
 config({ path: path.resolve(__dirname, "../../../../.env") });
@@ -19,7 +20,7 @@ export const dataSourceOptions: DataSourceOptions = {
  type: "postgres",
  url: process.env.EVOTING_DATABASE_URL,
  synchronize: false,
- entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult],
+ entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult, Delegation],
  migrations: [path.join(__dirname, "migrations", "*.ts")],
  logging: process.env.NODE_ENV === "development",
  subscribers: [PostgresSubscriber],

platforms/evoting/api/src/database/entities/Delegation.ts

@@ -0,0 +1,52 @@
+import {
+ Column,
+ CreateDateColumn,
+ Entity,
+ JoinColumn,
+ ManyToOne,
+ PrimaryGeneratedColumn,
+ UpdateDateColumn,
+} from "typeorm";
+import { Poll } from "./Poll";
+import { User } from "./User";
+
+export type DelegationStatus = "pending" | "active" | "rejected" | "revoked" | "used";
+
+@Entity("delegations")
+export class Delegation {
+ @PrimaryGeneratedColumn("uuid")
+ id!: string;
+
+ @ManyToOne(() => Poll, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "pollId" })
+ poll!: Poll;
+
+ @Column("uuid")
+ pollId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegatorId" })
+ delegator!: User;
+
+ @Column("uuid")
+ delegatorId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegateId" })
+ delegate!: User;
+
+ @Column("uuid")
+ delegateId!: string;
+
+ @Column("enum", {
+ enum: ["pending", "active", "rejected", "revoked", "used"],
+ default: "pending",
+ })
+ status!: DelegationStatus;
+
+ @CreateDateColumn()
+ createdAt!: Date;
+
+ @UpdateDateColumn()
+ updatedAt!: Date;
+}

platforms/evoting/api/src/database/entities/Vote.ts

@@ -63,6 +63,13 @@ export class Vote {
  @Column("uuid")
  userId!: string;
 
+ @ManyToOne(() => User, { nullable: true })
+ @JoinColumn({ name: "castById" })
+ castBy!: User | null;
+
+ @Column("uuid", { nullable: true })
+ castById!: string | null;
+
  // This can be user ID, session ID, or anonymous identifier
  @Column("varchar", { length: 255 })
  voterId!: string;

platforms/evoting/api/src/database/migrations/1771588337031-migration.ts

@@ -0,0 +1,26 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class Migration1771588337031 implements MigrationInterface {
+ name = 'Migration1771588337031'
+
+ public async up(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`CREATE TYPE "public"."delegations_status_enum" AS ENUM('pending', 'active', 'rejected', 'revoked', 'used')`);
+ await queryRunner.query(`CREATE TABLE "delegations" ("id" uuid NOT NULL DEFAULT uuid_generate_v4(), "pollId" uuid NOT NULL, "delegatorId" uuid NOT NULL, "delegateId" uuid NOT NULL, "status" "public"."delegations_status_enum" NOT NULL DEFAULT 'pending', "createdAt" TIMESTAMP NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP NOT NULL DEFAULT now(), CONSTRAINT "PK_01f9fbbc9b3bf52236a4e951b19" PRIMARY KEY ("id"))`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD "castById" uuid`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b" FOREIGN KEY ("castById") REFERENCES "users"("id") ON DELETE NO ACTION ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9" FOREIGN KEY ("pollId") REFERENCES "polls"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6" FOREIGN KEY ("delegatorId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a" FOREIGN KEY ("delegateId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ }
+
+ public async down(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP COLUMN "castById"`);
+ await queryRunner.query(`DROP TABLE "delegations"`);
+ await queryRunner.query(`DROP TYPE "public"."delegations_status_enum"`);
+ }
+
+}

package.json

@@ -17,7 +17,8 @@
  "dev:core:apps": "pnpm exec concurrently -n registry,evault,sandbox \"pnpm --filter registry dev\" \"pnpm --filter evault-core dev\" \"pnpm --filter dev-sandbox dev\"",
  "docker:core": "docker compose -f docker-compose.databases.yml up -d",
  "docker:core:down": "docker compose -f docker-compose.databases.yml down",
- "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs"
+ "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs",
+ "env:regen": "./scripts/update-env-ip.sh -a"
  },
  "devDependencies": {
  "@biomejs/biome": "^1.9.4",

platforms/evoting/api/src/controllers/DelegationController.ts

@@ -0,0 +1,233 @@
+import { Request, Response } from "express";
+import { DelegationService } from "../services/DelegationService";
+import { VoteService } from "../services/VoteService";
+
+export class DelegationController {
+ private delegationService: DelegationService;
+ private voteService: VoteService;
+
+ constructor() {
+ this.delegationService = new DelegationService();
+ this.voteService = new VoteService();
+ }
+
+ async createDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegateId } = req.body;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegateId) {
+ return res.status(400).json({ error: "Missing delegateId" });
+ }
+
+ const delegation = await this.delegationService.createDelegation(
+ pollId,
+ delegatorId,
+ delegateId
+ );
+
+ res.status(201).json(delegation);
+ } catch (error: any) {
+ console.error("Error creating delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async revokeDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.revokeDelegationByPoll(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error revoking delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async acceptDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.acceptDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error accepting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async rejectDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.rejectDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error rejecting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async getActiveDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+ const includeUsed = req.query.includeUsed === "true" || req.query.includeUsed === "1";
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = includeUsed
+ ? await this.delegationService.getActiveAndUsedDelegationsForDelegate(
+ pollId,
+ delegateId
+ )
+ : await this.delegationService.getActiveDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting active delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getPendingDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getPendingDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getAllPendingDelegations(req: Request, res: Response) {
+ try {
+ const userId = (req as any).user?.id;
+
+ if (!userId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getAllPendingDelegationsForUser(
+ userId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting all pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getMyDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.getDelegationForDelegator(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error getting my delegation:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async castDelegatedVote(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegatorId, voteData, mode } = req.body;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegatorId || !voteData) {
+ return res.status(400).json({ error: "Missing delegatorId or voteData" });
+ }
+
+ const vote = await this.voteService.castDelegatedVote(
+ pollId,
+ delegateId,
+ delegatorId,
+ voteData,
+ mode || "normal"
+ );
+
+ res.status(201).json(vote);
+ } catch (error: any) {
+ console.error("Error casting delegated vote:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async canPollHaveDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+
+ const result = await this.delegationService.canPollHaveDelegation(pollId);
+
+ res.json(result);
+ } catch (error: any) {
+ console.error("Error checking delegation eligibility:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+}

platforms/evoting/api/src/controllers/SigningController.ts

@@ -1,5 +1,6 @@
 import { Request, Response } from "express";
 import { SigningService } from "../services/SigningService";
+import type { SigningDelegationContext } from "../services/SigningService";
 
 export class SigningController {
  private signingService: SigningService | null = null;
@@ -37,15 +38,25 @@ export class SigningController {
  // Create a new signing session for a vote
  async createSigningSession(req: Request, res: Response) {
  try {
- const { pollId, voteData, userId } = req.body;
+ const { pollId, voteData, userId, delegationContext } = req.body as {
+ pollId?: string;
+ voteData?: any;
+ userId?: string;
+ delegationContext?: SigningDelegationContext;
+ };
 
  if (!pollId || !voteData || !userId) {
  return res.status(400).json({
  error: "Missing required fields: pollId, voteData, userId"
  });
  }
 
- const session = await this.ensureService().createSession(pollId, voteData, userId);
+ const session = await this.ensureService().createSession(
+ pollId,
+ voteData,
+ userId,
+ delegationContext
+ );
 
  res.status(201).json({
  sessionId: session.id,

platforms/evoting/api/src/database/data-source.ts

@@ -11,6 +11,7 @@ import { PollVotingState } from "./entities/PollVotingState";
 import { MetaEnvelopeMap } from "./entities/MetaEnvelopeMap";
 import { Message } from "./entities/Message";
 import { VoteReputationResult } from "./entities/VoteReputationResult";
+import { Delegation } from "./entities/Delegation";
 import { PostgresSubscriber } from "../web3adapter/watchers/subscriber";
 
 config({ path: path.resolve(__dirname, "../../../../.env") });
@@ -19,7 +20,7 @@ export const dataSourceOptions: DataSourceOptions = {
  type: "postgres",
  url: process.env.EVOTING_DATABASE_URL,
  synchronize: false,
- entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult],
+ entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult, Delegation],
  migrations: [path.join(__dirname, "migrations", "*.ts")],
  logging: process.env.NODE_ENV === "development",
  subscribers: [PostgresSubscriber],

platforms/evoting/api/src/database/entities/Delegation.ts

@@ -0,0 +1,52 @@
+import {
+ Column,
+ CreateDateColumn,
+ Entity,
+ JoinColumn,
+ ManyToOne,
+ PrimaryGeneratedColumn,
+ UpdateDateColumn,
+} from "typeorm";
+import { Poll } from "./Poll";
+import { User } from "./User";
+
+export type DelegationStatus = "pending" | "active" | "rejected" | "revoked" | "used";
+
+@Entity("delegations")
+export class Delegation {
+ @PrimaryGeneratedColumn("uuid")
+ id!: string;
+
+ @ManyToOne(() => Poll, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "pollId" })
+ poll!: Poll;
+
+ @Column("uuid")
+ pollId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegatorId" })
+ delegator!: User;
+
+ @Column("uuid")
+ delegatorId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegateId" })
+ delegate!: User;
+
+ @Column("uuid")
+ delegateId!: string;
+
+ @Column("enum", {
+ enum: ["pending", "active", "rejected", "revoked", "used"],
+ default: "pending",
+ })
+ status!: DelegationStatus;
+
+ @CreateDateColumn()
+ createdAt!: Date;
+
+ @UpdateDateColumn()
+ updatedAt!: Date;
+}

platforms/evoting/api/src/database/entities/Vote.ts

@@ -63,6 +63,13 @@ export class Vote {
  @Column("uuid")
  userId!: string;
 
+ @ManyToOne(() => User, { nullable: true })
+ @JoinColumn({ name: "castById" })
+ castBy!: User | null;
+
+ @Column("uuid", { nullable: true })
+ castById!: string | null;
+
  // This can be user ID, session ID, or anonymous identifier
  @Column("varchar", { length: 255 })
  voterId!: string;

platforms/evoting/api/src/database/migrations/1771588337031-migration.ts

@@ -0,0 +1,26 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class Migration1771588337031 implements MigrationInterface {
+ name = 'Migration1771588337031'
+
+ public async up(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`CREATE TYPE "public"."delegations_status_enum" AS ENUM('pending', 'active', 'rejected', 'revoked', 'used')`);
+ await queryRunner.query(`CREATE TABLE "delegations" ("id" uuid NOT NULL DEFAULT uuid_generate_v4(), "pollId" uuid NOT NULL, "delegatorId" uuid NOT NULL, "delegateId" uuid NOT NULL, "status" "public"."delegations_status_enum" NOT NULL DEFAULT 'pending', "createdAt" TIMESTAMP NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP NOT NULL DEFAULT now(), CONSTRAINT "PK_01f9fbbc9b3bf52236a4e951b19" PRIMARY KEY ("id"))`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD "castById" uuid`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b" FOREIGN KEY ("castById") REFERENCES "users"("id") ON DELETE NO ACTION ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9" FOREIGN KEY ("pollId") REFERENCES "polls"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6" FOREIGN KEY ("delegatorId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a" FOREIGN KEY ("delegateId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ }
+
+ public async down(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP COLUMN "castById"`);
+ await queryRunner.query(`DROP TABLE "delegations"`);
+ await queryRunner.query(`DROP TYPE "public"."delegations_status_enum"`);
+ }
+
+}

package.json

@@ -17,7 +17,8 @@
  "dev:core:apps": "pnpm exec concurrently -n registry,evault,sandbox \"pnpm --filter registry dev\" \"pnpm --filter evault-core dev\" \"pnpm --filter dev-sandbox dev\"",
  "docker:core": "docker compose -f docker-compose.databases.yml up -d",
  "docker:core:down": "docker compose -f docker-compose.databases.yml down",
- "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs"
+ "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs",
+ "env:regen": "./scripts/update-env-ip.sh -a"
  },
  "devDependencies": {
  "@biomejs/biome": "^1.9.4",

platforms/evoting/api/src/controllers/DelegationController.ts

@@ -0,0 +1,233 @@
+import { Request, Response } from "express";
+import { DelegationService } from "../services/DelegationService";
+import { VoteService } from "../services/VoteService";
+
+export class DelegationController {
+ private delegationService: DelegationService;
+ private voteService: VoteService;
+
+ constructor() {
+ this.delegationService = new DelegationService();
+ this.voteService = new VoteService();
+ }
+
+ async createDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegateId } = req.body;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegateId) {
+ return res.status(400).json({ error: "Missing delegateId" });
+ }
+
+ const delegation = await this.delegationService.createDelegation(
+ pollId,
+ delegatorId,
+ delegateId
+ );
+
+ res.status(201).json(delegation);
+ } catch (error: any) {
+ console.error("Error creating delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async revokeDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.revokeDelegationByPoll(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error revoking delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async acceptDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.acceptDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error accepting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async rejectDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.rejectDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error rejecting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async getActiveDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+ const includeUsed = req.query.includeUsed === "true" || req.query.includeUsed === "1";
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = includeUsed
+ ? await this.delegationService.getActiveAndUsedDelegationsForDelegate(
+ pollId,
+ delegateId
+ )
+ : await this.delegationService.getActiveDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting active delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getPendingDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getPendingDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getAllPendingDelegations(req: Request, res: Response) {
+ try {
+ const userId = (req as any).user?.id;
+
+ if (!userId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getAllPendingDelegationsForUser(
+ userId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting all pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getMyDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.getDelegationForDelegator(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error getting my delegation:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async castDelegatedVote(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegatorId, voteData, mode } = req.body;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegatorId || !voteData) {
+ return res.status(400).json({ error: "Missing delegatorId or voteData" });
+ }
+
+ const vote = await this.voteService.castDelegatedVote(
+ pollId,
+ delegateId,
+ delegatorId,
+ voteData,
+ mode || "normal"
+ );
+
+ res.status(201).json(vote);
+ } catch (error: any) {
+ console.error("Error casting delegated vote:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async canPollHaveDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+
+ const result = await this.delegationService.canPollHaveDelegation(pollId);
+
+ res.json(result);
+ } catch (error: any) {
+ console.error("Error checking delegation eligibility:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+}

platforms/evoting/api/src/controllers/SigningController.ts

@@ -1,5 +1,6 @@
 import { Request, Response } from "express";
 import { SigningService } from "../services/SigningService";
+import type { SigningDelegationContext } from "../services/SigningService";
 
 export class SigningController {
  private signingService: SigningService | null = null;
@@ -37,15 +38,25 @@ export class SigningController {
  // Create a new signing session for a vote
  async createSigningSession(req: Request, res: Response) {
  try {
- const { pollId, voteData, userId } = req.body;
+ const { pollId, voteData, userId, delegationContext } = req.body as {
+ pollId?: string;
+ voteData?: any;
+ userId?: string;
+ delegationContext?: SigningDelegationContext;
+ };
 
  if (!pollId || !voteData || !userId) {
  return res.status(400).json({
  error: "Missing required fields: pollId, voteData, userId"
  });
  }
 
- const session = await this.ensureService().createSession(pollId, voteData, userId);
+ const session = await this.ensureService().createSession(
+ pollId,
+ voteData,
+ userId,
+ delegationContext
+ );
 
  res.status(201).json({
  sessionId: session.id,

platforms/evoting/api/src/database/data-source.ts

@@ -11,6 +11,7 @@ import { PollVotingState } from "./entities/PollVotingState";
 import { MetaEnvelopeMap } from "./entities/MetaEnvelopeMap";
 import { Message } from "./entities/Message";
 import { VoteReputationResult } from "./entities/VoteReputationResult";
+import { Delegation } from "./entities/Delegation";
 import { PostgresSubscriber } from "../web3adapter/watchers/subscriber";
 
 config({ path: path.resolve(__dirname, "../../../../.env") });
@@ -19,7 +20,7 @@ export const dataSourceOptions: DataSourceOptions = {
  type: "postgres",
  url: process.env.EVOTING_DATABASE_URL,
  synchronize: false,
- entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult],
+ entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult, Delegation],
  migrations: [path.join(__dirname, "migrations", "*.ts")],
  logging: process.env.NODE_ENV === "development",
  subscribers: [PostgresSubscriber],

platforms/evoting/api/src/database/entities/Delegation.ts

@@ -0,0 +1,52 @@
+import {
+ Column,
+ CreateDateColumn,
+ Entity,
+ JoinColumn,
+ ManyToOne,
+ PrimaryGeneratedColumn,
+ UpdateDateColumn,
+} from "typeorm";
+import { Poll } from "./Poll";
+import { User } from "./User";
+
+export type DelegationStatus = "pending" | "active" | "rejected" | "revoked" | "used";
+
+@Entity("delegations")
+export class Delegation {
+ @PrimaryGeneratedColumn("uuid")
+ id!: string;
+
+ @ManyToOne(() => Poll, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "pollId" })
+ poll!: Poll;
+
+ @Column("uuid")
+ pollId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegatorId" })
+ delegator!: User;
+
+ @Column("uuid")
+ delegatorId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegateId" })
+ delegate!: User;
+
+ @Column("uuid")
+ delegateId!: string;
+
+ @Column("enum", {
+ enum: ["pending", "active", "rejected", "revoked", "used"],
+ default: "pending",
+ })
+ status!: DelegationStatus;
+
+ @CreateDateColumn()
+ createdAt!: Date;
+
+ @UpdateDateColumn()
+ updatedAt!: Date;
+}

platforms/evoting/api/src/database/entities/Vote.ts

@@ -63,6 +63,13 @@ export class Vote {
  @Column("uuid")
  userId!: string;
 
+ @ManyToOne(() => User, { nullable: true })
+ @JoinColumn({ name: "castById" })
+ castBy!: User | null;
+
+ @Column("uuid", { nullable: true })
+ castById!: string | null;
+
  // This can be user ID, session ID, or anonymous identifier
  @Column("varchar", { length: 255 })
  voterId!: string;

platforms/evoting/api/src/database/migrations/1771588337031-migration.ts

@@ -0,0 +1,26 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class Migration1771588337031 implements MigrationInterface {
+ name = 'Migration1771588337031'
+
+ public async up(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`CREATE TYPE "public"."delegations_status_enum" AS ENUM('pending', 'active', 'rejected', 'revoked', 'used')`);
+ await queryRunner.query(`CREATE TABLE "delegations" ("id" uuid NOT NULL DEFAULT uuid_generate_v4(), "pollId" uuid NOT NULL, "delegatorId" uuid NOT NULL, "delegateId" uuid NOT NULL, "status" "public"."delegations_status_enum" NOT NULL DEFAULT 'pending', "createdAt" TIMESTAMP NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP NOT NULL DEFAULT now(), CONSTRAINT "PK_01f9fbbc9b3bf52236a4e951b19" PRIMARY KEY ("id"))`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD "castById" uuid`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b" FOREIGN KEY ("castById") REFERENCES "users"("id") ON DELETE NO ACTION ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9" FOREIGN KEY ("pollId") REFERENCES "polls"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6" FOREIGN KEY ("delegatorId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a" FOREIGN KEY ("delegateId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ }
+
+ public async down(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP COLUMN "castById"`);
+ await queryRunner.query(`DROP TABLE "delegations"`);
+ await queryRunner.query(`DROP TYPE "public"."delegations_status_enum"`);
+ }
+
+}

package.json

@@ -17,7 +17,8 @@
  "dev:core:apps": "pnpm exec concurrently -n registry,evault,sandbox \"pnpm --filter registry dev\" \"pnpm --filter evault-core dev\" \"pnpm --filter dev-sandbox dev\"",
  "docker:core": "docker compose -f docker-compose.databases.yml up -d",
  "docker:core:down": "docker compose -f docker-compose.databases.yml down",
- "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs"
+ "generate-entropy-jwk": "node scripts/generate-registry-entropy-jwk.cjs",
+ "env:regen": "./scripts/update-env-ip.sh -a"
  },
  "devDependencies": {
  "@biomejs/biome": "^1.9.4",

platforms/evoting/api/src/controllers/DelegationController.ts

@@ -0,0 +1,233 @@
+import { Request, Response } from "express";
+import { DelegationService } from "../services/DelegationService";
+import { VoteService } from "../services/VoteService";
+
+export class DelegationController {
+ private delegationService: DelegationService;
+ private voteService: VoteService;
+
+ constructor() {
+ this.delegationService = new DelegationService();
+ this.voteService = new VoteService();
+ }
+
+ async createDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegateId } = req.body;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegateId) {
+ return res.status(400).json({ error: "Missing delegateId" });
+ }
+
+ const delegation = await this.delegationService.createDelegation(
+ pollId,
+ delegatorId,
+ delegateId
+ );
+
+ res.status(201).json(delegation);
+ } catch (error: any) {
+ console.error("Error creating delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async revokeDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.revokeDelegationByPoll(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error revoking delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async acceptDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.acceptDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error accepting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async rejectDelegation(req: Request, res: Response) {
+ try {
+ const { id } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.rejectDelegation(
+ id,
+ delegateId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error rejecting delegation:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async getActiveDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+ const includeUsed = req.query.includeUsed === "true" || req.query.includeUsed === "1";
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = includeUsed
+ ? await this.delegationService.getActiveAndUsedDelegationsForDelegate(
+ pollId,
+ delegateId
+ )
+ : await this.delegationService.getActiveDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting active delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getPendingDelegations(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getPendingDelegationsForDelegate(
+ pollId,
+ delegateId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getAllPendingDelegations(req: Request, res: Response) {
+ try {
+ const userId = (req as any).user?.id;
+
+ if (!userId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegations = await this.delegationService.getAllPendingDelegationsForUser(
+ userId
+ );
+
+ res.json(delegations);
+ } catch (error: any) {
+ console.error("Error getting all pending delegations:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async getMyDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const delegatorId = (req as any).user?.id;
+
+ if (!delegatorId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ const delegation = await this.delegationService.getDelegationForDelegator(
+ pollId,
+ delegatorId
+ );
+
+ res.json(delegation);
+ } catch (error: any) {
+ console.error("Error getting my delegation:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+
+ async castDelegatedVote(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+ const { delegatorId, voteData, mode } = req.body;
+ const delegateId = (req as any).user?.id;
+
+ if (!delegateId) {
+ return res.status(401).json({ error: "Authentication required" });
+ }
+
+ if (!delegatorId || !voteData) {
+ return res.status(400).json({ error: "Missing delegatorId or voteData" });
+ }
+
+ const vote = await this.voteService.castDelegatedVote(
+ pollId,
+ delegateId,
+ delegatorId,
+ voteData,
+ mode || "normal"
+ );
+
+ res.status(201).json(vote);
+ } catch (error: any) {
+ console.error("Error casting delegated vote:", error);
+ res.status(400).json({ error: error.message });
+ }
+ }
+
+ async canPollHaveDelegation(req: Request, res: Response) {
+ try {
+ const { pollId } = req.params;
+
+ const result = await this.delegationService.canPollHaveDelegation(pollId);
+
+ res.json(result);
+ } catch (error: any) {
+ console.error("Error checking delegation eligibility:", error);
+ res.status(500).json({ error: error.message });
+ }
+ }
+}

platforms/evoting/api/src/controllers/SigningController.ts

@@ -1,5 +1,6 @@
 import { Request, Response } from "express";
 import { SigningService } from "../services/SigningService";
+import type { SigningDelegationContext } from "../services/SigningService";
 
 export class SigningController {
  private signingService: SigningService | null = null;
@@ -37,15 +38,25 @@ export class SigningController {
  // Create a new signing session for a vote
  async createSigningSession(req: Request, res: Response) {
  try {
- const { pollId, voteData, userId } = req.body;
+ const { pollId, voteData, userId, delegationContext } = req.body as {
+ pollId?: string;
+ voteData?: any;
+ userId?: string;
+ delegationContext?: SigningDelegationContext;
+ };
 
  if (!pollId || !voteData || !userId) {
  return res.status(400).json({
  error: "Missing required fields: pollId, voteData, userId"
  });
  }
 
- const session = await this.ensureService().createSession(pollId, voteData, userId);
+ const session = await this.ensureService().createSession(
+ pollId,
+ voteData,
+ userId,
+ delegationContext
+ );
 
  res.status(201).json({
  sessionId: session.id,

platforms/evoting/api/src/database/data-source.ts

@@ -11,6 +11,7 @@ import { PollVotingState } from "./entities/PollVotingState";
 import { MetaEnvelopeMap } from "./entities/MetaEnvelopeMap";
 import { Message } from "./entities/Message";
 import { VoteReputationResult } from "./entities/VoteReputationResult";
+import { Delegation } from "./entities/Delegation";
 import { PostgresSubscriber } from "../web3adapter/watchers/subscriber";
 
 config({ path: path.resolve(__dirname, "../../../../.env") });
@@ -19,7 +20,7 @@ export const dataSourceOptions: DataSourceOptions = {
  type: "postgres",
  url: process.env.EVOTING_DATABASE_URL,
  synchronize: false,
- entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult],
+ entities: [User, Group, Verification, Poll, Vote, PollVotingState, MetaEnvelopeMap, Message, VoteReputationResult, Delegation],
  migrations: [path.join(__dirname, "migrations", "*.ts")],
  logging: process.env.NODE_ENV === "development",
  subscribers: [PostgresSubscriber],

platforms/evoting/api/src/database/entities/Delegation.ts

@@ -0,0 +1,52 @@
+import {
+ Column,
+ CreateDateColumn,
+ Entity,
+ JoinColumn,
+ ManyToOne,
+ PrimaryGeneratedColumn,
+ UpdateDateColumn,
+} from "typeorm";
+import { Poll } from "./Poll";
+import { User } from "./User";
+
+export type DelegationStatus = "pending" | "active" | "rejected" | "revoked" | "used";
+
+@Entity("delegations")
+export class Delegation {
+ @PrimaryGeneratedColumn("uuid")
+ id!: string;
+
+ @ManyToOne(() => Poll, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "pollId" })
+ poll!: Poll;
+
+ @Column("uuid")
+ pollId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegatorId" })
+ delegator!: User;
+
+ @Column("uuid")
+ delegatorId!: string;
+
+ @ManyToOne(() => User, { onDelete: "CASCADE" })
+ @JoinColumn({ name: "delegateId" })
+ delegate!: User;
+
+ @Column("uuid")
+ delegateId!: string;
+
+ @Column("enum", {
+ enum: ["pending", "active", "rejected", "revoked", "used"],
+ default: "pending",
+ })
+ status!: DelegationStatus;
+
+ @CreateDateColumn()
+ createdAt!: Date;
+
+ @UpdateDateColumn()
+ updatedAt!: Date;
+}

platforms/evoting/api/src/database/entities/Vote.ts

@@ -63,6 +63,13 @@ export class Vote {
  @Column("uuid")
  userId!: string;
 
+ @ManyToOne(() => User, { nullable: true })
+ @JoinColumn({ name: "castById" })
+ castBy!: User | null;
+
+ @Column("uuid", { nullable: true })
+ castById!: string | null;
+
  // This can be user ID, session ID, or anonymous identifier
  @Column("varchar", { length: 255 })
  voterId!: string;

platforms/evoting/api/src/database/migrations/1771588337031-migration.ts

@@ -0,0 +1,26 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class Migration1771588337031 implements MigrationInterface {
+ name = 'Migration1771588337031'
+
+ public async up(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`CREATE TYPE "public"."delegations_status_enum" AS ENUM('pending', 'active', 'rejected', 'revoked', 'used')`);
+ await queryRunner.query(`CREATE TABLE "delegations" ("id" uuid NOT NULL DEFAULT uuid_generate_v4(), "pollId" uuid NOT NULL, "delegatorId" uuid NOT NULL, "delegateId" uuid NOT NULL, "status" "public"."delegations_status_enum" NOT NULL DEFAULT 'pending', "createdAt" TIMESTAMP NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP NOT NULL DEFAULT now(), CONSTRAINT "PK_01f9fbbc9b3bf52236a4e951b19" PRIMARY KEY ("id"))`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD "castById" uuid`);
+ await queryRunner.query(`ALTER TABLE "votes" ADD CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b" FOREIGN KEY ("castById") REFERENCES "users"("id") ON DELETE NO ACTION ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9" FOREIGN KEY ("pollId") REFERENCES "polls"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6" FOREIGN KEY ("delegatorId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ await queryRunner.query(`ALTER TABLE "delegations" ADD CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a" FOREIGN KEY ("delegateId") REFERENCES "users"("id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+ }
+
+ public async down(queryRunner: QueryRunner): Promise<void> {
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2d4590d0c84a5ca333fd64e4c2a"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_2efda215aa6a265a536fe68dcf6"`);
+ await queryRunner.query(`ALTER TABLE "delegations" DROP CONSTRAINT "FK_32c81d839deb11bcfd8f83ba2f9"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP CONSTRAINT "FK_c3f766036bdc68567015a3f6f9b"`);
+ await queryRunner.query(`ALTER TABLE "votes" DROP COLUMN "castById"`);
+ await queryRunner.query(`DROP TABLE "delegations"`);
+ await queryRunner.query(`DROP TYPE "public"."delegations_status_enum"`);
+ }
+
+}