@mindpeeker/entropy 0.1.0

package/dist/internal/byte-source.d.ts

@@ -0,0 +1,16 @@
+/** Any pull-able byte producer a local provider can consume. */
+export type ByteSource = AsyncIterable<Uint8Array> | ReadableStream<Uint8Array>;
+/**
+ * Share one underlying byte iterator across many short-lived consumer views.
+ * A view's early termination or abort never closes the shared source — its
+ * lifetime belongs to whoever created it. Used for injected sources that
+ * must survive repeated getBytes sessions.
+ */
+export declare function persistentBytes(source: ByteSource): (signal?: AbortSignal) => AsyncGenerator<Uint8Array>;
+/**
+ * Uniform pull adapter over both ByteSource shapes. Skips empty chunks,
+ * releases the ReadableStream reader (or calls the inner iterator's
+ * return()) on early termination, and rejects promptly on signal abort.
+ */
+export declare function iterateBytes(source: ByteSource, signal?: AbortSignal): AsyncGenerator<Uint8Array>;
+//# sourceMappingURL=byte-source.d.ts.map

package/dist/internal/byte-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byte-source.d.ts","sourceRoot":"","sources":["../../src/internal/byte-source.ts"],"names":[],"mappings":"AAEA,gEAAgE;AAChE,MAAM,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;AAgC/E;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,UAAU,GACjB,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,cAAc,CAAC,UAAU,CAAC,CAUtD;AAED;;;;GAIG;AACH,wBAAuB,YAAY,CACjC,MAAM,EAAE,UAAU,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,cAAc,CAAC,UAAU,CAAC,CAiC5B"}

package/dist/internal/byte-source.js

@@ -0,0 +1,96 @@
+import { sleep } from './rate-limit.js';
+/**
+ * How long an abort waits for generator cleanup. return() on an async
+ * generator only takes effect at a yield point — a source stuck in awaits
+ * without yielding would otherwise block cleanup forever.
+ */
+const ABORT_CLEANUP_GRACE_MS = 100;
+function abortError(signal) {
+    return signal.reason ?? new DOMException('The operation was aborted.', 'AbortError');
+}
+/** Race a pending read against signal abort, cleaning the listener up either way. */
+function abortable(promise, signal) {
+    if (!signal)
+        return promise;
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(abortError(signal));
+        signal.addEventListener('abort', onAbort, { once: true });
+        promise.then((value) => {
+            signal.removeEventListener('abort', onAbort);
+            resolve(value);
+        }, (error) => {
+            signal.removeEventListener('abort', onAbort);
+            reject(error);
+        });
+    });
+}
+/**
+ * Share one underlying byte iterator across many short-lived consumer views.
+ * A view's early termination or abort never closes the shared source — its
+ * lifetime belongs to whoever created it. Used for injected sources that
+ * must survive repeated getBytes sessions.
+ */
+export function persistentBytes(source) {
+    const shared = iterateBytes(source)[Symbol.asyncIterator]();
+    return async function* view(signal) {
+        while (true) {
+            if (signal?.aborted)
+                throw abortError(signal);
+            const { done, value } = await abortable(shared.next(), signal);
+            if (done)
+                return;
+            yield value;
+        }
+    };
+}
+/**
+ * Uniform pull adapter over both ByteSource shapes. Skips empty chunks,
+ * releases the ReadableStream reader (or calls the inner iterator's
+ * return()) on early termination, and rejects promptly on signal abort.
+ */
+export async function* iterateBytes(source, signal) {
+    if (typeof source.getReader === 'function') {
+        const reader = source.getReader();
+        try {
+            while (true) {
+                if (signal?.aborted)
+                    throw abortError(signal);
+                const { done, value } = await abortable(reader.read(), signal);
+                if (done)
+                    return;
+                if (value && value.length > 0)
+                    yield value;
+            }
+        }
+        finally {
+            reader.cancel().catch(() => { });
+            reader.releaseLock();
+        }
+    }
+    else {
+        const iterator = source[Symbol.asyncIterator]();
+        try {
+            while (true) {
+                if (signal?.aborted)
+                    throw abortError(signal);
+                const { done, value } = await abortable(iterator.next(), signal);
+                if (done)
+                    return;
+                if (value && value.length > 0)
+                    yield value;
+            }
+        }
+        finally {
+            const cleanup = iterator.return?.().catch(() => { });
+            if (cleanup) {
+                // On abort, wait only briefly — a source that never yields would
+                // block return() forever. Normal termination waits for full cleanup.
+                if (signal?.aborted)
+                    await Promise.race([cleanup, sleep(ABORT_CLEANUP_GRACE_MS)]);
+                else
+                    await cleanup;
+            }
+        }
+    }
+}
+//# sourceMappingURL=byte-source.js.map

package/dist/internal/byte-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"byte-source.js","sourceRoot":"","sources":["../../src/internal/byte-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAKvC;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,GAAG,CAAA;AAElC,SAAS,UAAU,CAAC,MAAmB;IACrC,OAAO,MAAM,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC,4BAA4B,EAAE,YAAY,CAAC,CAAA;AACtF,CAAC;AAED,qFAAqF;AACrF,SAAS,SAAS,CAAI,OAAmB,EAAE,MAAoB;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAA;IAC3B,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;QAChD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,MAAM,CAAC,KAAK,CAAC,CAAA;QACf,CAAC,CACF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAkB;IAElB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAA;IAC3D,OAAO,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,MAAoB;QAC9C,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,UAAU,CAAC,MAAM,CAAC,CAAA;YAC7C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;YAC9D,IAAI,IAAI;gBAAE,OAAM;YAChB,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,YAAY,CACjC,MAAkB,EAClB,MAAoB;IAEpB,IAAI,OAAQ,MAAqC,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAC3E,MAAM,MAAM,GAAI,MAAqC,CAAC,SAAS,EAAE,CAAA;QACjE,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,UAAU,CAAC,MAAM,CAAC,CAAA;gBAC7C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;gBAC9D,IAAI,IAAI;oBAAE,OAAM;gBAChB,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,KAAK,CAAA;YAC5C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAC/B,MAAM,CAAC,WAAW,EAAE,CAAA;QACtB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAI,MAAoC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAA;QAC9E,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,UAAU,CAAC,MAAM,CAAC,CAAA;gBAC7C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;gBAChE,IAAI,IAAI;oBAAE,OAAM;gBAChB,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,KAAK,CAAA;YAC5C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,iEAAiE;gBACjE,qEAAqE;gBACrE,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAA;;oBAC5E,MAAM,OAAO,CAAA;YACpB,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/internal/bytes.d.ts

@@ -0,0 +1,5 @@
+export declare function hexToBytes(hex: string): Uint8Array<ArrayBuffer>;
+export declare function base64ToBytes(b64: string): Uint8Array<ArrayBuffer>;
+export declare function concatBytes(chunks: readonly Uint8Array[]): Uint8Array<ArrayBuffer>;
+export declare function xorBytes(inputs: readonly Uint8Array[]): Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=bytes.d.ts.map

package/dist/internal/bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.d.ts","sourceRoot":"","sources":["../../src/internal/bytes.ts"],"names":[],"mappings":"AAEA,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAS/D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAYlE;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,CAUlF;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,CAgB/E"}

package/dist/internal/bytes.js

@@ -0,0 +1,56 @@
+const HEX_RE = /^[0-9a-fA-F]*$/;
+export function hexToBytes(hex) {
+    if (hex.length % 2 !== 0 || !HEX_RE.test(hex)) {
+        throw new TypeError(`invalid hex string of length ${hex.length}`);
+    }
+    const out = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < out.length; i++) {
+        out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return out;
+}
+export function base64ToBytes(b64) {
+    let binary;
+    try {
+        binary = atob(b64);
+    }
+    catch (error) {
+        throw new TypeError(`invalid base64 string: ${error.message}`);
+    }
+    const out = new Uint8Array(binary.length);
+    for (let i = 0; i < out.length; i++) {
+        out[i] = binary.charCodeAt(i);
+    }
+    return out;
+}
+export function concatBytes(chunks) {
+    let total = 0;
+    for (const chunk of chunks)
+        total += chunk.length;
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        out.set(chunk, offset);
+        offset += chunk.length;
+    }
+    return out;
+}
+export function xorBytes(inputs) {
+    const first = inputs[0];
+    if (!first)
+        throw new TypeError('xorBytes needs at least one input');
+    for (const input of inputs) {
+        if (input.length !== first.length) {
+            throw new TypeError(`xorBytes length mismatch: ${input.length} !== ${first.length}`);
+        }
+    }
+    const out = new Uint8Array(first);
+    for (let i = 1; i < inputs.length; i++) {
+        const input = inputs[i];
+        for (let j = 0; j < out.length; j++) {
+            out[j] = out[j] ^ input[j];
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=bytes.js.map

package/dist/internal/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.js","sourceRoot":"","sources":["../../src/internal/bytes.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,GAAG,gBAAgB,CAAA;AAE/B,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CAAC,gCAAgC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,0BAA2B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAA6B;IACvD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;IACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA;IACxB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAA6B;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IACvB,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;IACpE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,SAAS,CAAC,6BAA6B,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QACtF,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAe,CAAA;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,GAAG,CAAC,CAAC,CAAC,GAAI,GAAG,CAAC,CAAC,CAAY,GAAI,KAAK,CAAC,CAAC,CAAY,CAAA;QACpD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/internal/composite.d.ts

@@ -0,0 +1,15 @@
+import { EntropyError } from '../errors.js';
+import type { EntropyKind, EntropyPrivacy, EntropyProvider } from '../types.js';
+export declare function requireProviders(providers: readonly EntropyProvider[], strategy: string): void;
+export declare function compositeName(strategy: string, providers: readonly EntropyProvider[]): string;
+export declare function commonKind(providers: readonly EntropyProvider[]): EntropyKind;
+/** For fallback/race: any member might serve, so one public member taints the whole. */
+export declare function pessimisticPrivacy(providers: readonly EntropyProvider[]): EntropyPrivacy;
+/**
+ * For xorMix: XOR with at least one independent private input yields a private
+ * output — public beacons mixed in add auditability without exposing the result.
+ */
+export declare function anyPrivatePrivacy(providers: readonly EntropyProvider[]): EntropyPrivacy;
+export declare function toEntropyError(error: unknown, provider: string): EntropyError;
+export declare function abortedError(provider: string): EntropyError;
+//# sourceMappingURL=composite.d.ts.map

package/dist/internal/composite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composite.d.ts","sourceRoot":"","sources":["../../src/internal/composite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE/E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAI9F;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAE7F;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,GAAG,WAAW,CAG7E;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,GAAG,cAAc,CAExF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,GAAG,cAAc,CAEvF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,CAM7E;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAE3D"}

package/dist/internal/composite.js

@@ -0,0 +1,36 @@
+import { EntropyError } from '../errors.js';
+export function requireProviders(providers, strategy) {
+    if (providers.length === 0) {
+        throw new TypeError(`${strategy} requires at least one provider`);
+    }
+}
+export function compositeName(strategy, providers) {
+    return `${strategy}(${providers.map((p) => p.name).join(',')})`;
+}
+export function commonKind(providers) {
+    const first = providers[0]?.kind ?? 'mixed';
+    return providers.every((p) => p.kind === first) ? first : 'mixed';
+}
+/** For fallback/race: any member might serve, so one public member taints the whole. */
+export function pessimisticPrivacy(providers) {
+    return providers.every((p) => p.privacy === 'private') ? 'private' : 'public';
+}
+/**
+ * For xorMix: XOR with at least one independent private input yields a private
+ * output — public beacons mixed in add auditability without exposing the result.
+ */
+export function anyPrivatePrivacy(providers) {
+    return providers.some((p) => p.privacy === 'private') ? 'private' : 'public';
+}
+export function toEntropyError(error, provider) {
+    if (error instanceof EntropyError)
+        return error;
+    return new EntropyError('network', `unexpected provider error: ${String(error)}`, {
+        provider,
+        cause: error,
+    });
+}
+export function abortedError(provider) {
+    return new EntropyError('aborted', 'request aborted', { provider });
+}
+//# sourceMappingURL=composite.js.map

package/dist/internal/composite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composite.js","sourceRoot":"","sources":["../../src/internal/composite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAG3C,MAAM,UAAU,gBAAgB,CAAC,SAAqC,EAAE,QAAgB;IACtF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CAAC,GAAG,QAAQ,iCAAiC,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,SAAqC;IACnF,OAAO,GAAG,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAqC;IAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,OAAO,CAAA;IAC3C,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAA;AACnE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,SAAqC;IACtE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAqC;IACrE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC9E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,QAAgB;IAC7D,IAAI,KAAK,YAAY,YAAY;QAAE,OAAO,KAAK,CAAA;IAC/C,OAAO,IAAI,YAAY,CAAC,SAAS,EAAE,8BAA8B,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;QAChF,QAAQ;QACR,KAAK,EAAE,KAAK;KACb,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,IAAI,YAAY,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;AACrE,CAAC"}

package/dist/internal/condition.d.ts

@@ -0,0 +1,38 @@
+export type ConditioningMode = 'conditioned' | 'raw';
+/** Shared option surface every local (physical-noise) provider extends. */
+export interface ConditioningOptions {
+    /**
+     * 'conditioned' (default): SHA-256 extraction with entropy-credit
+     * accounting. 'raw': health-tested samples pass through unwhitened —
+     * for uses where the unprocessed physical noise is the point.
+     */
+    conditioning?: ConditioningMode;
+    /** Override the source's assessed min-entropy (bits per raw sample byte). */
+    minEntropyPerSample?: number;
+    /** Pool safetyFactor × 256 credited bits before emitting each 32-byte block. */
+    safetyFactor?: number;
+}
+export interface ConditionerConfig {
+    provider: string;
+    minEntropyPerSample: number;
+    safetyFactor: number;
+    mode: ConditioningMode;
+    windowSize?: 512 | 1024;
+    /**
+     * Run the health tests at a stricter assessed H than what is credited.
+     * At very low credited H the APT cutoff exceeds its window (test disabled)
+     * and the RCT cutoff balloons — a frozen-but-patterned source would pass.
+     * Default: same as minEntropyPerSample.
+     */
+    healthMinEntropyPerSample?: number;
+}
+/**
+ * Raw sample chunks in → output chunks out. Health tests (RCT + APT) always
+ * run on the raw side, in both modes. Conditioned mode pools raw bytes until
+ * the credited min-entropy reaches safetyFactor × 256 bits, then emits
+ * SHA-256(pool) and resets the pool.
+ */
+export declare function condition(raw: AsyncIterable<Uint8Array>, config: ConditionerConfig): AsyncGenerator<Uint8Array>;
+/** Drain a stream into exactly `n` bytes or throw insufficient_entropy. */
+export declare function collectBytes(stream: AsyncIterable<Uint8Array>, n: number, provider: string): Promise<Uint8Array>;
+//# sourceMappingURL=condition.d.ts.map

package/dist/internal/condition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.d.ts","sourceRoot":"","sources":["../../src/internal/condition.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,KAAK,CAAA;AAEpD,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAC/B,6EAA6E;IAC7E,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,gBAAgB,CAAA;IACtB,UAAU,CAAC,EAAE,GAAG,GAAG,IAAI,CAAA;IACvB;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;CACnC;AAID;;;;;GAKG;AACH,wBAAuB,SAAS,CAC9B,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,EAC9B,MAAM,EAAE,iBAAiB,GACxB,cAAc,CAAC,UAAU,CAAC,CA2B5B;AAED,2EAA2E;AAC3E,wBAAsB,YAAY,CAChC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,EACjC,CAAC,EAAE,MAAM,EACT,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,CAAC,CAWrB"}

package/dist/internal/condition.js

@@ -0,0 +1,49 @@
+import { EntropyError } from '../errors.js';
+import { concatBytes } from './bytes.js';
+import { HealthTests } from './health.js';
+const BLOCK_BITS = 256;
+/**
+ * Raw sample chunks in → output chunks out. Health tests (RCT + APT) always
+ * run on the raw side, in both modes. Conditioned mode pools raw bytes until
+ * the credited min-entropy reaches safetyFactor × 256 bits, then emits
+ * SHA-256(pool) and resets the pool.
+ */
+export async function* condition(raw, config) {
+    const { provider, minEntropyPerSample, safetyFactor, mode, windowSize } = config;
+    const health = new HealthTests({ minEntropyPerSample: config.healthMinEntropyPerSample ?? minEntropyPerSample, windowSize }, provider);
+    const bytesPerBlock = Math.ceil((safetyFactor * BLOCK_BITS) / minEntropyPerSample);
+    let pool = [];
+    let pooled = 0;
+    for await (const chunk of raw) {
+        health.test(chunk);
+        if (mode === 'raw') {
+            yield chunk;
+            continue;
+        }
+        pool.push(chunk);
+        pooled += chunk.length;
+        while (pooled >= bytesPerBlock) {
+            const all = concatBytes(pool);
+            const block = all.slice(0, bytesPerBlock);
+            const rest = all.slice(bytesPerBlock);
+            pool = rest.length > 0 ? [rest] : [];
+            pooled = rest.length;
+            yield new Uint8Array(await crypto.subtle.digest('SHA-256', block));
+        }
+    }
+}
+/** Drain a stream into exactly `n` bytes or throw insufficient_entropy. */
+export async function collectBytes(stream, n, provider) {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of stream) {
+        chunks.push(chunk);
+        total += chunk.length;
+        if (total >= n)
+            return concatBytes(chunks).slice(0, n);
+    }
+    throw new EntropyError('insufficient_entropy', `source ended after ${total}/${n} bytes`, {
+        provider,
+    });
+}
+//# sourceMappingURL=condition.js.map

package/dist/internal/condition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.js","sourceRoot":"","sources":["../../src/internal/condition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAiCzC,MAAM,UAAU,GAAG,GAAG,CAAA;AAEtB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,SAAS,CAC9B,GAA8B,EAC9B,MAAyB;IAEzB,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;IAChF,MAAM,MAAM,GAAG,IAAI,WAAW,CAC5B,EAAE,mBAAmB,EAAE,MAAM,CAAC,yBAAyB,IAAI,mBAAmB,EAAE,UAAU,EAAE,EAC5F,QAAQ,CACT,CAAA;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,mBAAmB,CAAC,CAAA;IAElF,IAAI,IAAI,GAAiB,EAAE,CAAA;IAC3B,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,KAAK,CAAA;YACX,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA;QACtB,OAAO,MAAM,IAAI,aAAa,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;YAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;YACzC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;YACrC,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACpC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;YACpB,MAAM,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAiC,EACjC,CAAS,EACT,QAAgB;IAEhB,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;QACrB,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACxD,CAAC;IACD,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,sBAAsB,KAAK,IAAI,CAAC,QAAQ,EAAE;QACvF,QAAQ;KACT,CAAC,CAAA;AACJ,CAAC"}

package/dist/internal/encoding.d.ts

@@ -0,0 +1,14 @@
+/** Zero-dep decoders for blockchain hashes (base58) and IPLD CIDs (base32/varint). */
+/** Decode base58btc (Bitcoin/Solana alphabet). Leading '1's become 0x00 bytes. */
+export declare function base58Decode(input: string): Uint8Array;
+/** Decode RFC 4648 base32, lowercase and unpadded (the CIDv1 default encoding). */
+export declare function base32Decode(input: string): Uint8Array;
+/** Read an unsigned LEB128 varint. Returns [value, nextOffset]. */
+export declare function readVarint(bytes: Uint8Array, offset: number): [number, number];
+/**
+ * Extract the multihash digest bytes from a base32 CIDv1 string (e.g. a CURBy
+ * twine block CID). The digest of the block's content hash is CURBy's defined
+ * per-pulse randomness.
+ */
+export declare function cidDigest(cid: string): Uint8Array;
+//# sourceMappingURL=encoding.d.ts.map

package/dist/internal/encoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../../src/internal/encoding.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAKtF,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAoBtD;AAKD,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAetD;AAED,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAc9E;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAejD"}

package/dist/internal/encoding.js

@@ -0,0 +1,91 @@
+/** Zero-dep decoders for blockchain hashes (base58) and IPLD CIDs (base32/varint). */
+const BASE58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
+const BASE58_MAP = new Map([...BASE58_ALPHABET].map((c, i) => [c, i]));
+/** Decode base58btc (Bitcoin/Solana alphabet). Leading '1's become 0x00 bytes. */
+export function base58Decode(input) {
+    const bytes = [];
+    for (const char of input) {
+        const value = BASE58_MAP.get(char);
+        if (value === undefined)
+            throw new TypeError(`invalid base58 character '${char}'`);
+        // long multiplication: bytes = bytes * 58 + value
+        let carry = value;
+        for (let i = bytes.length - 1; i >= 0; i--) {
+            const acc = bytes[i] * 58 + carry;
+            bytes[i] = acc & 0xff;
+            carry = acc >> 8;
+        }
+        while (carry > 0) {
+            bytes.unshift(carry & 0xff);
+            carry >>= 8;
+        }
+    }
+    let leadingZeros = 0;
+    while (leadingZeros < input.length && input[leadingZeros] === '1')
+        leadingZeros++;
+    return new Uint8Array([...new Array(leadingZeros).fill(0), ...bytes]);
+}
+const BASE32_ALPHABET = 'abcdefghijklmnopqrstuvwxyz234567';
+const BASE32_MAP = new Map([...BASE32_ALPHABET].map((c, i) => [c, i]));
+/** Decode RFC 4648 base32, lowercase and unpadded (the CIDv1 default encoding). */
+export function base32Decode(input) {
+    const out = [];
+    let buffer = 0;
+    let bits = 0;
+    for (const char of input) {
+        const value = BASE32_MAP.get(char);
+        if (value === undefined)
+            throw new TypeError(`invalid base32 character '${char}'`);
+        buffer = (buffer << 5) | value;
+        bits += 5;
+        if (bits >= 8) {
+            bits -= 8;
+            out.push((buffer >> bits) & 0xff);
+        }
+    }
+    return new Uint8Array(out);
+}
+/** Read an unsigned LEB128 varint. Returns [value, nextOffset]. */
+export function readVarint(bytes, offset) {
+    let value = 0;
+    let shift = 0;
+    let position = offset;
+    while (true) {
+        if (position >= bytes.length)
+            throw new TypeError('truncated varint');
+        const byte = bytes[position];
+        position++;
+        value += (byte & 0x7f) * 2 ** shift;
+        if ((byte & 0x80) === 0)
+            break;
+        shift += 7;
+        if (shift > 49)
+            throw new TypeError('varint too large');
+    }
+    return [value, position];
+}
+/**
+ * Extract the multihash digest bytes from a base32 CIDv1 string (e.g. a CURBy
+ * twine block CID). The digest of the block's content hash is CURBy's defined
+ * per-pulse randomness.
+ */
+export function cidDigest(cid) {
+    if (!cid.startsWith('b')) {
+        throw new TypeError(`expected a base32 CIDv1 (multibase prefix 'b'), got '${cid.slice(0, 4)}…'`);
+    }
+    const bytes = base32Decode(cid.slice(1));
+    let offset = 0;
+    let version;
+    [version, offset] = readVarint(bytes, offset);
+    if (version !== 1)
+        throw new TypeError(`unsupported CID version ${version}`);
+    [, offset] = readVarint(bytes, offset) // content codec — irrelevant here
+    ;
+    [, offset] = readVarint(bytes, offset); // multihash function code — irrelevant here
+    let digestLength;
+    [digestLength, offset] = readVarint(bytes, offset);
+    if (offset + digestLength > bytes.length)
+        throw new TypeError('truncated multihash digest');
+    return bytes.slice(offset, offset + digestLength);
+}
+//# sourceMappingURL=encoding.js.map

package/dist/internal/encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../../src/internal/encoding.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,MAAM,eAAe,GAAG,4DAA4D,CAAA;AACpF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAEtE,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAA;QAClF,kDAAkD;QAClD,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAI,KAAK,CAAC,CAAC,CAAY,GAAG,EAAE,GAAG,KAAK,CAAA;YAC7C,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAA;YACrB,KAAK,GAAG,GAAG,IAAI,CAAC,CAAA;QAClB,CAAC;QACD,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;YACjB,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;YAC3B,KAAK,KAAK,CAAC,CAAA;QACb,CAAC;IACH,CAAC;IACD,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,OAAO,YAAY,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,GAAG;QAAE,YAAY,EAAE,CAAA;IACjF,OAAO,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,eAAe,GAAG,kCAAkC,CAAA;AAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAEtE,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAA;QAClF,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,CAAA;QAC9B,IAAI,IAAI,CAAC,CAAA;QACT,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAA;YACT,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;AAC5B,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,MAAc;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,QAAQ,GAAG,MAAM,CAAA;IACrB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,CAAC,CAAA;QACrE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAW,CAAA;QACtC,QAAQ,EAAE,CAAA;QACV,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAA;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,MAAK;QAC9B,KAAK,IAAI,CAAC,CAAA;QACV,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,wDAAwD,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IAClG,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACxC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,OAAe,CAClB;IAAA,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC9C,IAAI,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAC3E;IAAA,CAAC,EAAE,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,kCAAkC;KACzE;IAAA,CAAC,EAAE,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA,CAAC,4CAA4C;IACpF,IAAI,YAAoB,CACvB;IAAA,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACnD,IAAI,MAAM,GAAG,YAAY,GAAG,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;IAC3F,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAAC,CAAA;AACnD,CAAC"}

package/dist/internal/health.d.ts

@@ -0,0 +1,25 @@
+export interface HealthConfig {
+    /** Assessed min-entropy H in bits per raw sample byte. May be fractional. */
+    minEntropyPerSample: number;
+    /** APT window: 512 (default, non-binary samples) or 1024 (binary sources). */
+    windowSize?: 512 | 1024;
+}
+/** SP 800-90B §4.4.1 Repetition Count Test cutoff: C = 1 + ceil(20 / H) at alpha 2^-20. */
+export declare function rctCutoff(h: number): number;
+/**
+ * SP 800-90B §4.4.2 Adaptive Proportion Test cutoff:
+ * 1 + smallest k with P(Binomial(W, 2^-H) <= k) >= 1 - 2^-20,
+ * computed via the iterative pmf recurrence (exact enough for W <= 1024).
+ */
+export declare function aptCutoff(h: number, windowSize: number): number;
+/**
+ * Continuous health tests over RAW samples (run in both conditioning modes).
+ * Throws EntropyError('health_test') the moment either test fails — a failing
+ * source must never silently degrade to pseudo-randomness.
+ */
+export declare class HealthTests {
+    #private;
+    constructor(config: HealthConfig, provider: string);
+    test(samples: Uint8Array): void;
+}
+//# sourceMappingURL=health.d.ts.map

package/dist/internal/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/internal/health.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,mBAAmB,EAAE,MAAM,CAAA;IAC3B,8EAA8E;IAC9E,UAAU,CAAC,EAAE,GAAG,GAAG,IAAI,CAAA;CACxB;AAED,2FAA2F;AAC3F,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAW/D;AAED;;;;GAIG;AACH,qBAAa,WAAW;;gBAeV,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM;IAWlD,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;CAsChC"}

package/dist/internal/health.js

@@ -0,0 +1,84 @@
+import { EntropyError } from '../errors.js';
+const ALPHA = 2 ** -20; // false-positive rate for both tests (SP 800-90B recommendation)
+/** SP 800-90B §4.4.1 Repetition Count Test cutoff: C = 1 + ceil(20 / H) at alpha 2^-20. */
+export function rctCutoff(h) {
+    return 1 + Math.ceil(20 / h);
+}
+/**
+ * SP 800-90B §4.4.2 Adaptive Proportion Test cutoff:
+ * 1 + smallest k with P(Binomial(W, 2^-H) <= k) >= 1 - 2^-20,
+ * computed via the iterative pmf recurrence (exact enough for W <= 1024).
+ */
+export function aptCutoff(h, windowSize) {
+    const p = 2 ** -h;
+    let pmf = (1 - p) ** windowSize;
+    let cdf = pmf;
+    let k = 0;
+    while (cdf < 1 - ALPHA && k < windowSize) {
+        pmf *= ((windowSize - k) / (k + 1)) * (p / (1 - p));
+        k++;
+        cdf += pmf;
+    }
+    return 1 + k;
+}
+/**
+ * Continuous health tests over RAW samples (run in both conditioning modes).
+ * Throws EntropyError('health_test') the moment either test fails — a failing
+ * source must never silently degrade to pseudo-randomness.
+ */
+export class HealthTests {
+    #rctCutoff;
+    #aptCutoff;
+    #windowSize;
+    #provider;
+    // Repetition Count Test state
+    #lastSample = -1;
+    #runLength = 0;
+    // Adaptive Proportion Test state
+    #windowIndex = 0;
+    #reference = -1;
+    #referenceCount = 0;
+    constructor(config, provider) {
+        const { minEntropyPerSample, windowSize = 512 } = config;
+        if (!(minEntropyPerSample > 0)) {
+            throw new TypeError('minEntropyPerSample must be > 0');
+        }
+        this.#rctCutoff = rctCutoff(minEntropyPerSample);
+        this.#aptCutoff = aptCutoff(minEntropyPerSample, windowSize);
+        this.#windowSize = windowSize;
+        this.#provider = provider;
+    }
+    test(samples) {
+        for (const sample of samples) {
+            // Repetition Count Test
+            if (sample === this.#lastSample) {
+                this.#runLength++;
+                if (this.#runLength >= this.#rctCutoff) {
+                    throw new EntropyError('health_test', `repetition count test failed: ${this.#runLength} identical samples (cutoff ${this.#rctCutoff})`, { provider: this.#provider });
+                }
+            }
+            else {
+                this.#lastSample = sample;
+                this.#runLength = 1;
+            }
+            // Adaptive Proportion Test
+            if (this.#windowIndex === 0) {
+                this.#reference = sample;
+                this.#referenceCount = 1;
+                this.#windowIndex = 1;
+            }
+            else {
+                if (sample === this.#reference) {
+                    this.#referenceCount++;
+                    if (this.#referenceCount >= this.#aptCutoff) {
+                        throw new EntropyError('health_test', `adaptive proportion test failed: value ${this.#reference} seen ${this.#referenceCount}× in a ${this.#windowSize}-sample window (cutoff ${this.#aptCutoff})`, { provider: this.#provider });
+                    }
+                }
+                this.#windowIndex++;
+                if (this.#windowIndex === this.#windowSize)
+                    this.#windowIndex = 0;
+            }
+        }
+    }
+}
+//# sourceMappingURL=health.js.map

package/dist/internal/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/internal/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,CAAA,CAAC,iEAAiE;AASxF,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,CAAS,EAAE,UAAkB;IACrD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;IACjB,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,UAAU,CAAA;IAC/B,IAAI,GAAG,GAAG,GAAG,CAAA;IACb,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,GAAG,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC;QACzC,GAAG,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACnD,CAAC,EAAE,CAAA;QACH,GAAG,IAAI,GAAG,CAAA;IACZ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACb,UAAU,CAAQ;IAClB,UAAU,CAAQ;IAClB,WAAW,CAAQ;IACnB,SAAS,CAAQ;IAE1B,8BAA8B;IAC9B,WAAW,GAAG,CAAC,CAAC,CAAA;IAChB,UAAU,GAAG,CAAC,CAAA;IAEd,iCAAiC;IACjC,YAAY,GAAG,CAAC,CAAA;IAChB,UAAU,GAAG,CAAC,CAAC,CAAA;IACf,eAAe,GAAG,CAAC,CAAA;IAEnB,YAAY,MAAoB,EAAE,QAAgB;QAChD,MAAM,EAAE,mBAAmB,EAAE,UAAU,GAAG,GAAG,EAAE,GAAG,MAAM,CAAA;QACxD,IAAI,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAA;QACxD,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAAA;QAChD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAA;QAC5D,IAAI,CAAC,WAAW,GAAG,UAAU,CAAA;QAC7B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;IAC3B,CAAC;IAED,IAAI,CAAC,OAAmB;QACtB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,wBAAwB;YACxB,IAAI,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBAChC,IAAI,CAAC,UAAU,EAAE,CAAA;gBACjB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACvC,MAAM,IAAI,YAAY,CACpB,aAAa,EACb,iCAAiC,IAAI,CAAC,UAAU,8BAA8B,IAAI,CAAC,UAAU,GAAG,EAChG,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7B,CAAA;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,WAAW,GAAG,MAAM,CAAA;gBACzB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAA;YACrB,CAAC;YAED,2BAA2B;YAC3B,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAA;gBACxB,IAAI,CAAC,eAAe,GAAG,CAAC,CAAA;gBACxB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAA;YACvB,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC/B,IAAI,CAAC,eAAe,EAAE,CAAA;oBACtB,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;wBAC5C,MAAM,IAAI,YAAY,CACpB,aAAa,EACb,0CAA0C,IAAI,CAAC,UAAU,SAAS,IAAI,CAAC,eAAe,UAAU,IAAI,CAAC,WAAW,0BAA0B,IAAI,CAAC,UAAU,GAAG,EAC5J,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7B,CAAA;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,YAAY,EAAE,CAAA;gBACnB,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,WAAW;oBAAE,IAAI,CAAC,YAAY,GAAG,CAAC,CAAA;YACnE,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/internal/http.d.ts

@@ -0,0 +1,25 @@
+import { EntropyError } from '../errors.js';
+export interface FetchJsonOptions {
+    /** Provider name for error attribution. */
+    provider: string;
+    method?: 'GET' | 'POST';
+    headers?: Record<string, string>;
+    /** JSON-stringified and sent with content-type: application/json. */
+    body?: unknown;
+    signal?: AbortSignal;
+    fetchImpl?: typeof fetch;
+    /**
+     * Provider-specific mapping of non-2xx responses (e.g. ANU legacy signals
+     * its rate limit as HTTP 500 with a message). Return undefined to fall back
+     * to the default mapping.
+     */
+    onErrorResponse?: (status: number, body: string) => EntropyError | undefined;
+}
+/**
+ * fetch + JSON parse with the library's uniform error taxonomy. Abort/timeout
+ * reasons pass through unwrapped so `defineProvider` can classify them.
+ */
+export declare function fetchJson<T>(url: string, opts: FetchJsonOptions): Promise<T>;
+/** fetch returning the raw text body (e.g. Bitcoin tip-hash endpoints). */
+export declare function fetchText(url: string, opts: FetchJsonOptions): Promise<string>;
+//# sourceMappingURL=http.d.ts.map

package/dist/internal/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/internal/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,qEAAqE;IACrE,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,YAAY,GAAG,SAAS,CAAA;CAC7E;AAyDD;;;GAGG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,CAUlF;AAED,2EAA2E;AAC3E,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAUpF"}