Phase B / B5.9: v3 UI surface — toggle, banner, results panel

Three pieces glue the v3 client flow to the existing UI:

1. Create-poll form: a "Maximum privacy (v3)" checkbox
   (poll-max-privacy) with an inline disclaimer about the
   creator-key backup risk and the 8-choice limit. createPoll
   already reads this id (B5.8b) so checking the box opts in.

2. Vote view: a v3-privacy banner mirrors the existing v2-backup
   banner with copy specific to the homomorphic-tally privacy
   model. loadPoll picks exactly one of the two banners based on
   the poll's voteSchemaVersion.

3. Closed-poll handling: v3 polls render "Tallies have been
   published" instead of the v1/v2 reveal button — the reveal
   server endpoint already returns 404 for v3 (B5.5) so the
   button has nowhere to go. Close button labeled
   "Close & Publish Tallies" for v3 to surface that the action
   is one-step.

4. Results panel: v3 reads tallies from data.tally.tallies (the
   embedded HomomorphicTallyArtifact) instead of data.tallies,
   and renders a clean per-vote-data-free results panel with
   pointers to /votes and /tally for inspection. The v1/v2
   tally-proof refresh path is suppressed for v3 since that
   produces a different artifact shape.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: stackdump

public/poll.html

@@ -181,6 +181,19 @@ <h2 style="margin-top:0;">Create a New Poll</h2>
                     <option value="0">No expiration</option>
                 </select>
             </div>
+            <div class="form-group">
+                <label style="display:flex; align-items:flex-start; gap:10px; cursor:pointer; padding:12px; border:1px solid var(--border); border-radius:var(--radius); background:rgba(100,149,237,0.04);">
+                    <input type="checkbox" id="poll-max-privacy" style="margin-top:3px;"/>
+                    <span style="flex:1;">
+                        <strong style="color:var(--text);">Maximum privacy (v3)</strong>
+                        <span style="display:block; font-size:0.8rem; color:var(--text-muted); margin-top:4px; line-height:1.4;">
+                            Per-voter choices are encrypted under a creator-only key and never decrypted individually &mdash; only the aggregate is. Removes the reveal phase entirely.
+                            <span style="display:block; color:#ff8844; margin-top:6px;">Requires a creator key. A backup file will download automatically &mdash; <strong>lose both browser storage and the file and the poll cannot be closed.</strong></span>
+                            <span style="display:block; margin-top:4px;">Limited to <strong>8 choices</strong>.</span>
+                        </span>
+                    </span>
+                </label>
+            </div>
             <div style="display:flex; gap:12px; margin-top:24px;">
                 <button class="btn-primary" id="btn-create" onclick="createPoll()">Create Poll</button>
                 <button class="btn-secondary" onclick="showList()">Cancel</button>
@@ -206,6 +219,9 @@ <h2 class="poll-title" id="vote-title"></h2>
             <div id="v2-backup-banner" style="display:none; margin-bottom:16px; padding:10px 14px; border:1px solid #6495ed; border-radius:var(--radius); background:rgba(100,149,237,0.08); font-size:0.8rem; color:#9cb7e8;">
                 <strong>Coercion-resistant poll (v2):</strong> when you cast your vote, your browser will automatically download a small backup JSON. Keep it safe &mdash; without it, a cleared browser cache means your vote cannot be revealed. The older "re-sign to recover" path has been removed so that a captured wallet signature alone can't deanonymize your vote.
             </div>
+            <div id="v3-privacy-banner" style="display:none; margin-bottom:16px; padding:10px 14px; border:1px solid #6495ed; border-radius:var(--radius); background:rgba(100,149,237,0.08); font-size:0.8rem; color:#9cb7e8;">
+                <strong>Maximum privacy (v3):</strong> your choice is encrypted in your browser under the creator's public key and only ever decrypted in aggregate. There is no reveal phase &mdash; results appear once the creator publishes the tally. A backup file will download with your vote so you can re-prove if needed; it does not contain your choice.
+            </div>
 
             <div id="vote-choices"></div>
 

public/poll.js

@@ -360,6 +360,13 @@ async function loadPoll(pollId) {
             regBar.style.display = 'none';
         }
 
+        const schemaVersion = poll.voteSchemaVersion || 1;
+        // Schema-version banners — only one is visible at a time.
+        const v2Banner = document.getElementById('v2-backup-banner');
+        const v3Banner = document.getElementById('v3-privacy-banner');
+        if (v2Banner) v2Banner.style.display = (schemaVersion === 2) ? 'block' : 'none';
+        if (v3Banner) v3Banner.style.display = (schemaVersion === 3) ? 'block' : 'none';
+
         if (poll.status === 'active') {
             choicesDiv.innerHTML = poll.choices.map((c, i) => `
                 <label class="choice-option" data-idx="${i}" onclick="selectChoice(this, ${i})">
@@ -369,12 +376,12 @@ async function loadPoll(pollId) {
             `).join('');
             btnVote.style.display = '';
             btnReveal.style.display = 'none';
-            // Schema-version banner: explain the backup requirement up front.
-            const banner = document.getElementById('v2-backup-banner');
-            if (banner) banner.style.display = ((poll.voteSchemaVersion || 1) >= 2) ? 'block' : 'none';
 
-            // Show close button if current wallet is the creator
+            // Show close button if current wallet is the creator. v3
+            // close button gets a different label since the action
+            // publishes tallies in one step.
             btnClose.style.display = 'none';
+            btnClose.textContent = (schemaVersion === 3) ? 'Close & Publish Tallies' : 'Close Poll';
             const provider = getWalletProvider();
             if (provider && poll.creator) {
                 provider.request({ method: 'eth_accounts' }).then(accts => {
@@ -383,19 +390,24 @@ async function loadPoll(pollId) {
                     }
                 }).catch(() => {});
             }
+        } else if (schemaVersion === 3) {
+            // v3 closed — there's no reveal phase. The tally artifact
+            // is already published; the results view renders it.
+            choicesDiv.innerHTML = '<p style="color:var(--text-muted);">This poll is closed. Tallies have been published &mdash; no per-vote reveal is needed.</p>';
+            btnVote.style.display = 'none';
+            btnClose.style.display = 'none';
+            btnReveal.style.display = 'none';
         } else {
-            // Poll closed — always show the Reveal button. If localStorage
-            // has the voterSecret we submit it directly; otherwise we fall
-            // through to a re-sign recovery flow (wallet re-signs the
-            // bitwrap-vote message; voter picks which choice they cast;
-            // server verifies mimcHash(secret, choice) == commitment).
+            // v1/v2 closed — show the Reveal button. If localStorage
+            // has the voterSecret we submit it directly; otherwise we
+            // fall through to upload-backup or re-sign recovery.
             choicesDiv.innerHTML = '<p style="color:var(--text-muted);">This poll is closed. Reveal your vote to add it to the tally.</p>';
             btnVote.style.display = 'none';
             btnClose.style.display = 'none';
             btnReveal.style.display = '';
             if (findRevealData(pollId)) {
                 btnReveal.textContent = 'Reveal My Vote';
-            } else if ((poll.voteSchemaVersion || 1) >= 2) {
+            } else if (schemaVersion >= 2) {
                 btnReveal.textContent = 'Reveal My Vote (upload backup)';
             } else {
                 btnReveal.textContent = 'Reveal My Vote (re-sign to recover)';
@@ -1231,9 +1243,17 @@ async function loadResults(pollId) {
             return;
         }
 
-        // Poll is closed — show full results
-        const tallies = data.tallies || null;
-        const talliedCount = data.talliedCount || 0;
+        // Poll is closed — show full results.
+        // v3 polls embed the full tally artifact under data.tally; v1/v2
+        // expose the per-choice tallies inline via the reveal pipeline.
+        const schemaVersion = data.voteSchemaVersion || 1;
+        const v3 = (schemaVersion === 3);
+        const tallies = v3
+            ? (data.tally && data.tally.tallies) || null
+            : (data.tallies || null);
+        const talliedCount = v3
+            ? (data.tally && data.tally.numBallots) || 0
+            : (data.talliedCount || 0);
 
         if (tallies && talliedCount > 0) {
             const maxVotes = Math.max(...tallies, 1);
@@ -1272,17 +1292,30 @@ async function loadResults(pollId) {
         }
         document.getElementById('results-total').textContent = statusText;
 
-        // Nullifiers
-        const nullifiers = data.nullifiers || [];
         const nullDiv = document.getElementById('results-nullifiers');
-        if (nullifiers.length === 0) {
-            nullDiv.textContent = 'No votes yet.';
+        if (v3) {
+            // v3 polls deliberately don't list nullifiers in the
+            // results panel — voters can hit /nullifiers directly to
+            // confirm their own ballot was counted, but the standard
+            // results view stays clean of per-voter data.
+            nullDiv.innerHTML =
+                '<div style="color:var(--text-muted); font-style:italic;">Per-vote ciphertexts available at <code>/api/polls/' +
+                esc(pollId) + '/votes</code>. The decrypt proof for these tallies is at <code>/api/polls/' +
+                esc(pollId) + '/tally</code>.</div>';
         } else {
-            nullDiv.innerHTML = nullifiers.map(n => `<div style="padding:2px 0;">${esc(n)}</div>`).join('');
+            const nullifiers = data.nullifiers || [];
+            if (nullifiers.length === 0) {
+                nullDiv.textContent = 'No votes yet.';
+            } else {
+                nullDiv.innerHTML = nullifiers.map(n => `<div style="padding:2px 0;">${esc(n)}</div>`).join('');
+            }
         }
 
-        // Tally proof section — only meaningful after close.
-        await refreshTallyProofUI(pollId, data);
+        // Tally proof section — v1/v2 only (v3 produces a different
+        // artifact under /tally that isn't compatible with this UI).
+        if (!v3) {
+            await refreshTallyProofUI(pollId, data);
+        }
     } catch (err) {
         showMsg('Failed to load results: ' + err.message, 'error');
     }