@mindpeeker/entropy 0.1.0

package/dist/providers/anu.d.ts

@@ -0,0 +1,14 @@
+import type { EntropyProvider } from '../types.js';
+export interface AnuOptions {
+    /** ANU Quantum Numbers API key (AWS Marketplace subscription). */
+    apiKey: string;
+    fetch?: typeof fetch;
+    /** Override for tests or a server-side proxy that hides the key. */
+    baseUrl?: string;
+}
+/**
+ * ANU Quantum Numbers (quantum-vacuum fluctuations), keyed API.
+ * https://quantumnumbers.anu.edu.au — up to 1024 numbers per request.
+ */
+export declare function anu(opts: AnuOptions): EntropyProvider;
+//# sourceMappingURL=anu.d.ts.map

package/dist/providers/anu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anu.d.ts","sourceRoot":"","sources":["../../src/providers/anu.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAMrE,MAAM,WAAW,UAAU;IACzB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAOD;;;GAGG;AACH,wBAAgB,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CA4BrD"}

package/dist/providers/anu.js

@@ -0,0 +1,42 @@
+import { EntropyError } from '../errors.js';
+import { concatBytes } from '../internal/bytes.js';
+import { fetchJson } from '../internal/http.js';
+import { defineProvider } from '../internal/provider.js';
+import { byteArrayFrom } from '../internal/validate.js';
+const INFO = Object.freeze({ name: 'anu', kind: 'qrng', privacy: 'private' });
+const MAX_PER_REQUEST = 1024;
+const DEFAULT_BASE_URL = 'https://api.quantumnumbers.anu.edu.au';
+/**
+ * ANU Quantum Numbers (quantum-vacuum fluctuations), keyed API.
+ * https://quantumnumbers.anu.edu.au — up to 1024 numbers per request.
+ */
+export function anu(opts) {
+    if (!opts?.apiKey)
+        throw new TypeError('anu({ apiKey }) requires a non-empty apiKey');
+    const { apiKey, baseUrl = DEFAULT_BASE_URL, fetch: fetchImpl } = opts;
+    return defineProvider({
+        ...INFO,
+        async getBytes(length, reqOpts) {
+            const chunks = [];
+            for (let remaining = length; remaining > 0;) {
+                const n = Math.min(MAX_PER_REQUEST, remaining);
+                const query = new URLSearchParams({ length: String(n), type: 'uint8' });
+                const res = await fetchJson(`${baseUrl}?${query}`, {
+                    provider: INFO.name,
+                    headers: { 'x-api-key': apiKey },
+                    signal: reqOpts?.signal,
+                    fetchImpl,
+                });
+                if (res?.success !== true) {
+                    throw new EntropyError('bad_response', 'ANU QRNG returned an unsuccessful response', {
+                        provider: INFO.name,
+                    });
+                }
+                chunks.push(byteArrayFrom(res.data, n, INFO.name));
+                remaining -= n;
+            }
+            return { bytes: concatBytes(chunks), sources: [INFO] };
+        },
+    });
+}
+//# sourceMappingURL=anu.js.map

package/dist/providers/anu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anu.js","sourceRoot":"","sources":["../../src/providers/anu.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAGvD,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;AAChG,MAAM,eAAe,GAAG,IAAI,CAAA;AAC5B,MAAM,gBAAgB,GAAG,uCAAuC,CAAA;AAehE;;;GAGG;AACH,MAAM,UAAU,GAAG,CAAC,IAAgB;IAClC,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAA;IACrF,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAErE,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO;YAC5B,MAAM,MAAM,GAAiB,EAAE,CAAA;YAC/B,KAAK,IAAI,SAAS,GAAG,MAAM,EAAE,SAAS,GAAG,CAAC,GAAI,CAAC;gBAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;gBAC9C,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;gBACvE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAc,GAAG,OAAO,IAAI,KAAK,EAAE,EAAE;oBAC9D,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;oBAChC,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,SAAS;iBACV,CAAC,CAAA;gBACF,IAAI,GAAG,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;oBAC1B,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,4CAA4C,EAAE;wBACnF,QAAQ,EAAE,IAAI,CAAC,IAAI;qBACpB,CAAC,CAAA;gBACJ,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;gBAClD,SAAS,IAAI,CAAC,CAAA;YAChB,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACxD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/bitcoin.d.ts

@@ -0,0 +1,14 @@
+import type { EntropyProvider } from '../types.js';
+export interface BitcoinBeaconOptions {
+    fetch?: typeof fetch;
+    baseUrls?: string[];
+    pollIntervalMs?: number;
+}
+/**
+ * Bitcoin block hashes as a PUBLIC crypto-beacon. Proof-of-work makes bias
+ * expensive (six figures per bit — Bonneau et al., eprint 2015/1015) but not
+ * impossible: miners can discard unfavourable blocks. Slow cadence
+ * (~10 minutes). Audits and mixing only, never private entropy.
+ */
+export declare function bitcoinBeacon(opts?: BitcoinBeaconOptions): EntropyProvider;
+//# sourceMappingURL=bitcoin.d.ts.map

package/dist/providers/bitcoin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitcoin.d.ts","sourceRoot":"","sources":["../../src/providers/bitcoin.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAYrE,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAMD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,GAAE,oBAAyB,GAAG,eAAe,CAuF9E"}

package/dist/providers/bitcoin.js

@@ -0,0 +1,95 @@
+import { EntropyError } from '../errors.js';
+import { concatBytes } from '../internal/bytes.js';
+import { fetchJson, fetchText } from '../internal/http.js';
+import { defineProvider } from '../internal/provider.js';
+import { beaconStream } from '../internal/stream.js';
+import { bytesFromHexField } from '../internal/validate.js';
+const INFO = Object.freeze({
+    name: 'bitcoin',
+    kind: 'beacon',
+    privacy: 'public',
+});
+const HASH_BYTES = 32;
+const DEFAULT_BASE_URLS = ['https://blockstream.info/api', 'https://mempool.space/api'];
+// ~10-minute blocks; poll once a minute.
+const DEFAULT_POLL_INTERVAL_MS = 60_000;
+/**
+ * Bitcoin block hashes as a PUBLIC crypto-beacon. Proof-of-work makes bias
+ * expensive (six figures per bit — Bonneau et al., eprint 2015/1015) but not
+ * impossible: miners can discard unfavourable blocks. Slow cadence
+ * (~10 minutes). Audits and mixing only, never private entropy.
+ */
+export function bitcoinBeacon(opts = {}) {
+    const { baseUrls = DEFAULT_BASE_URLS, pollIntervalMs = DEFAULT_POLL_INTERVAL_MS, fetch: fetchImpl, } = opts;
+    async function withFailover(run) {
+        let lastError;
+        for (const base of baseUrls) {
+            try {
+                return await run(base);
+            }
+            catch (error) {
+                if (!(error instanceof EntropyError) || error.code === 'aborted')
+                    throw error;
+                lastError = error; // try the next mirror
+            }
+        }
+        throw lastError;
+    }
+    function parseHash(hash) {
+        return bytesFromHexField(hash.trim(), HASH_BYTES, INFO.name);
+    }
+    async function fetchTip(signal) {
+        return withFailover(async (base) => {
+            const text = await fetchText(`${base}/blocks/tip/hash`, {
+                provider: INFO.name,
+                signal,
+                fetchImpl,
+            });
+            const hash = text.trim();
+            return { hash, bytes: parseHash(hash) };
+        });
+    }
+    async function fetchPreviousHash(hash, signal) {
+        return withFailover(async (base) => {
+            const res = await fetchJson(`${base}/block/${hash}`, {
+                provider: INFO.name,
+                signal,
+                fetchImpl,
+            });
+            if (typeof res?.previousblockhash !== 'string') {
+                throw new EntropyError('bad_response', 'missing previousblockhash', {
+                    provider: INFO.name,
+                });
+            }
+            return res.previousblockhash;
+        });
+    }
+    return defineProvider({
+        ...INFO,
+        defaultChunkBytes: HASH_BYTES,
+        async getBytes(length, reqOpts) {
+            const blocksNeeded = Math.ceil(length / HASH_BYTES);
+            const tip = await fetchTip(reqOpts?.signal);
+            const chunks = [tip.bytes];
+            let cursor = tip.hash;
+            for (let i = 1; i < blocksNeeded; i++) {
+                cursor = await fetchPreviousHash(cursor, reqOpts?.signal);
+                chunks.push(parseHash(cursor));
+            }
+            return { bytes: concatBytes(chunks).slice(0, length), sources: [INFO] };
+        },
+        stream(streamOpts = {}) {
+            let lastHash = '';
+            let seq = 0;
+            return beaconStream(async (signal) => {
+                const tip = await fetchTip(signal);
+                if (tip.hash !== lastHash) {
+                    lastHash = tip.hash;
+                    seq++;
+                }
+                return { id: seq, bytes: tip.bytes };
+            }, pollIntervalMs, HASH_BYTES, INFO.name, streamOpts);
+        },
+    });
+}
+//# sourceMappingURL=bitcoin.js.map

package/dist/providers/bitcoin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitcoin.js","sourceRoot":"","sources":["../../src/providers/bitcoin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAG3D,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,QAAQ;CAClB,CAAC,CAAA;AACF,MAAM,UAAU,GAAG,EAAE,CAAA;AACrB,MAAM,iBAAiB,GAAG,CAAC,8BAA8B,EAAE,2BAA2B,CAAC,CAAA;AACvF,yCAAyC;AACzC,MAAM,wBAAwB,GAAG,MAAM,CAAA;AAYvC;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAA6B,EAAE;IAC3D,MAAM,EACJ,QAAQ,GAAG,iBAAiB,EAC5B,cAAc,GAAG,wBAAwB,EACzC,KAAK,EAAE,SAAS,GACjB,GAAG,IAAI,CAAA;IAER,KAAK,UAAU,YAAY,CAAI,GAAiC;QAC9D,IAAI,SAAkB,CAAA;QACtB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,CAAA;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAA;gBAC7E,SAAS,GAAG,KAAK,CAAA,CAAC,sBAAsB;YAC1C,CAAC;QACH,CAAC;QACD,MAAM,SAAS,CAAA;IACjB,CAAC;IAED,SAAS,SAAS,CAAC,IAAY;QAC7B,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,MAAoB;QAC1C,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,kBAAkB,EAAE;gBACtD,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM;gBACN,SAAS;aACV,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YACxB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAA;QACzC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAoB;QACjE,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAgB,GAAG,IAAI,UAAU,IAAI,EAAE,EAAE;gBAClE,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM;gBACN,SAAS;aACV,CAAC,CAAA;YACF,IAAI,OAAO,GAAG,EAAE,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBAC/C,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,2BAA2B,EAAE;oBAClE,QAAQ,EAAE,IAAI,CAAC,IAAI;iBACpB,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,GAAG,CAAC,iBAAiB,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,iBAAiB,EAAE,UAAU;QAE7B,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO;YAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,CAAA;YACnD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC1B,IAAI,MAAM,GAAG,GAAG,CAAC,IAAI,CAAA;YACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;gBACzD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;YAChC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACzE,CAAC;QAED,MAAM,CAAC,UAAU,GAAG,EAAE;YACpB,IAAI,QAAQ,GAAG,EAAE,CAAA;YACjB,IAAI,GAAG,GAAG,CAAC,CAAA;YACX,OAAO,YAAY,CACjB,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAA;gBAClC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC1B,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAA;oBACnB,GAAG,EAAE,CAAA;gBACP,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;YACtC,CAAC,EACD,cAAc,EACd,UAAU,EACV,IAAI,CAAC,IAAI,EACT,UAAU,CACX,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/camera.d.ts

@@ -0,0 +1,49 @@
+import type { ConditioningOptions } from '../internal/condition.js';
+import type { EntropyProvider } from '../types.js';
+export interface Frame {
+    width: number;
+    height: number;
+    /** RGBA (channels 4, e.g. canvas ImageData) or single-channel (1, e.g. rawvideo gray). */
+    data: Uint8ClampedArray | Uint8Array;
+    channels: 1 | 4;
+}
+export interface FrameSource {
+    /** A fresh frame iterable per session; stop capturing in the generator's finally. */
+    frames(signal?: AbortSignal): AsyncIterable<Frame>;
+    close?(): void | Promise<void>;
+}
+export interface CameraOptions extends ConditioningOptions {
+    /** Injected frames (Node, tests). Default: getUserMedia + canvas (browser only). */
+    source?: FrameSource;
+    /** getUserMedia video constraints. Default { width: 640, height: 480 }. */
+    constraints?: MediaTrackConstraints;
+    /** Pixel subsampling stride — breaks adjacent-pixel correlation. Default 4. */
+    stride?: number;
+    /** Frames discarded at session start while auto-exposure/AGC settles. Default 10. */
+    warmupFrames?: number;
+    /** Bit extraction: 'sign' (frame-diff sign, AetherOnePi-style, default) or 'lsb'. */
+    bits?: 'sign' | 'lsb';
+    /**
+     * Von Neumann debiasing over the bit stream before packing. Default TRUE:
+     * auto-exposure drift and mains-flicker make whole frames brighten or
+     * darken together, producing long identical-bit runs that rightly trip the
+     * health tests — debiasing drops those correlated runs. Disable for the
+     * unprocessed AetherOnePi-style bit stream.
+     */
+    debias?: boolean;
+}
+/**
+ * Frame-diff sign extraction: brighter pixel → 1, darker → 0, unchanged →
+ * no bit. Compares the green (or only) channel of every stride-th pixel.
+ */
+export declare function signBits(prev: Frame, cur: Frame, stride: number): number[];
+/** Least-significant bit of every stride-th pixel's green (or only) channel. */
+export declare function lsbBits(frame: Frame, stride: number): number[];
+/**
+ * Camera sensor noise (photon shot noise in lit scenes, thermal noise with
+ * the lens covered). Raw mode emits the packed frame-diff sign bits — the
+ * honest unwhitened physical signal. Auto-exposure and ISP processing vary
+ * wildly between devices; the built-in health tests are the guard.
+ */
+export declare function cameraEntropy(opts?: CameraOptions): EntropyProvider;
+//# sourceMappingURL=camera.d.ts.map

package/dist/providers/camera.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"camera.d.ts","sourceRoot":"","sources":["../../src/providers/camera.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAGnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,0FAA0F;IAC1F,IAAI,EAAE,iBAAiB,GAAG,UAAU,CAAA;IACpC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAA;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,qFAAqF;IACrF,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IAClD,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/B;AAED,MAAM,WAAW,aAAc,SAAQ,mBAAmB;IACxD,oFAAoF;IACpF,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;IACrB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAMD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAW1E;AAED,gFAAgF;AAChF,wBAAgB,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAO9D;AAuCD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,GAAE,aAAkB,GAAG,eAAe,CAqDvE"}

package/dist/providers/camera.js

@@ -0,0 +1,123 @@
+import { packBits, vonNeumann } from '../internal/bits.js';
+import { sleep } from '../internal/rate-limit.js';
+import { sampledProvider } from '../internal/sampled.js';
+function channelOffset(channels) {
+    return channels === 4 ? 1 : 0; // green channel for RGBA
+}
+/**
+ * Frame-diff sign extraction: brighter pixel → 1, darker → 0, unchanged →
+ * no bit. Compares the green (or only) channel of every stride-th pixel.
+ */
+export function signBits(prev, cur, stride) {
+    const step = stride * cur.channels;
+    const length = Math.min(prev.data.length, cur.data.length);
+    const bits = [];
+    for (let i = channelOffset(cur.channels); i < length; i += step) {
+        const a = prev.data[i];
+        const b = cur.data[i];
+        if (b > a)
+            bits.push(1);
+        else if (b < a)
+            bits.push(0);
+    }
+    return bits;
+}
+/** Least-significant bit of every stride-th pixel's green (or only) channel. */
+export function lsbBits(frame, stride) {
+    const step = stride * frame.channels;
+    const bits = [];
+    for (let i = channelOffset(frame.channels); i < frame.data.length; i += step) {
+        bits.push(frame.data[i] & 1);
+    }
+    return bits;
+}
+const FRAME_INTERVAL_MS = 100; // ~10 fps is plenty for entropy harvesting
+function browserFrameSource(constraints) {
+    return {
+        async *frames(signal) {
+            const mediaDevices = globalThis.navigator?.mediaDevices;
+            if (typeof mediaDevices?.getUserMedia !== 'function') {
+                throw new TypeError('cameraEntropy: no camera in this runtime — pass a { source } (in Node: ffmpegFrameSource from @mindpeeker/entropy/node)');
+            }
+            const stream = await mediaDevices.getUserMedia({ video: constraints });
+            try {
+                const video = document.createElement('video');
+                video.srcObject = stream;
+                video.muted = true;
+                await video.play();
+                const width = video.videoWidth || 640;
+                const height = video.videoHeight || 480;
+                const canvas = document.createElement('canvas');
+                canvas.width = width;
+                canvas.height = height;
+                const context = canvas.getContext('2d', { willReadFrequently: true });
+                if (!context)
+                    throw new TypeError('cameraEntropy: 2d canvas context unavailable');
+                while (true) {
+                    context.drawImage(video, 0, 0);
+                    const image = context.getImageData(0, 0, width, height);
+                    yield { width, height, data: image.data, channels: 4 };
+                    await sleep(FRAME_INTERVAL_MS, signal);
+                }
+            }
+            finally {
+                for (const track of stream.getTracks())
+                    track.stop();
+            }
+        },
+    };
+}
+/**
+ * Camera sensor noise (photon shot noise in lit scenes, thermal noise with
+ * the lens covered). Raw mode emits the packed frame-diff sign bits — the
+ * honest unwhitened physical signal. Auto-exposure and ISP processing vary
+ * wildly between devices; the built-in health tests are the guard.
+ */
+export function cameraEntropy(opts = {}) {
+    const { constraints = { width: 640, height: 480 }, stride = 4, warmupFrames = 10, bits = 'sign', debias = true, } = opts;
+    const source = opts.source ?? browserFrameSource(constraints);
+    async function* open(signal) {
+        let previous = null;
+        let skipped = 0;
+        let leftover = [];
+        for await (const frame of source.frames(signal)) {
+            // cooperative abort: a frozen scene yields frames but never bytes, so
+            // this loop must observe the signal itself
+            if (signal?.aborted)
+                throw signal.reason ?? new DOMException('aborted', 'AbortError');
+            if (skipped < warmupFrames) {
+                skipped++;
+                previous = frame;
+                continue;
+            }
+            let frameBits;
+            if (bits === 'sign') {
+                if (!previous) {
+                    previous = frame;
+                    continue;
+                }
+                frameBits = signBits(previous, frame, stride);
+                previous = frame;
+            }
+            else {
+                frameBits = lsbBits(frame, stride);
+            }
+            if (debias)
+                frameBits = vonNeumann(frameBits);
+            const [bytes, rest] = packBits(leftover.concat(frameBits));
+            leftover = rest;
+            if (bytes.length > 0)
+                yield bytes;
+        }
+    }
+    return sampledProvider({
+        name: 'camera',
+        kind: 'trng',
+        privacy: 'private',
+        open,
+        defaultMinEntropyPerSample: 1,
+        defaultSafetyFactor: 8,
+        defaultTimeoutMs: 30_000, // permission prompt + AGC warmup
+    }, opts);
+}
+//# sourceMappingURL=camera.js.map

package/dist/providers/camera.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"camera.js","sourceRoot":"","sources":["../../src/providers/camera.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAsCxD,SAAS,aAAa,CAAC,QAAe;IACpC,OAAO,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,yBAAyB;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAW,EAAE,GAAU,EAAE,MAAc;IAC9D,MAAM,IAAI,GAAG,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAA;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAChE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAW,CAAA;QAChC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAW,CAAA;QAC/B,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;aAClB,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC9B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,OAAO,CAAC,KAAY,EAAE,MAAc;IAClD,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAA;IACpC,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAY,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,iBAAiB,GAAG,GAAG,CAAA,CAAC,2CAA2C;AAEzE,SAAS,kBAAkB,CAAC,WAAkC;IAC5D,OAAO;QACL,KAAK,CAAC,CAAC,MAAM,CAAC,MAAoB;YAChC,MAAM,YAAY,GAAI,UAAwC,CAAC,SAAS,EAAE,YAAY,CAAA;YACtF,IAAI,OAAO,YAAY,EAAE,YAAY,KAAK,UAAU,EAAE,CAAC;gBACrD,MAAM,IAAI,SAAS,CACjB,yHAAyH,CAC1H,CAAA;YACH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YACtE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;gBAC7C,KAAK,CAAC,SAAS,GAAG,MAAM,CAAA;gBACxB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAA;gBAClB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;gBAClB,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,IAAI,GAAG,CAAA;gBACrC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,IAAI,GAAG,CAAA;gBACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;gBAC/C,MAAM,CAAC,KAAK,GAAG,KAAK,CAAA;gBACpB,MAAM,CAAC,MAAM,GAAG,MAAM,CAAA;gBACtB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAA;gBACrE,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAA;gBACjF,OAAO,IAAI,EAAE,CAAC;oBACZ,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;oBAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;oBACvD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAU,EAAE,CAAA;oBAC/D,MAAM,KAAK,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;gBACxC,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS,EAAE;oBAAE,KAAK,CAAC,IAAI,EAAE,CAAA;YACtD,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAAsB,EAAE;IACpD,MAAM,EACJ,WAAW,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EACzC,MAAM,GAAG,CAAC,EACV,YAAY,GAAG,EAAE,EACjB,IAAI,GAAG,MAAM,EACb,MAAM,GAAG,IAAI,GACd,GAAG,IAAI,CAAA;IACR,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,kBAAkB,CAAC,WAAW,CAAC,CAAA;IAE7D,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,MAAoB;QACvC,IAAI,QAAQ,GAAiB,IAAI,CAAA;QACjC,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,IAAI,QAAQ,GAAa,EAAE,CAAA;QAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,sEAAsE;YACtE,2CAA2C;YAC3C,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;YACrF,IAAI,OAAO,GAAG,YAAY,EAAE,CAAC;gBAC3B,OAAO,EAAE,CAAA;gBACT,QAAQ,GAAG,KAAK,CAAA;gBAChB,SAAQ;YACV,CAAC;YACD,IAAI,SAAmB,CAAA;YACvB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,QAAQ,GAAG,KAAK,CAAA;oBAChB,SAAQ;gBACV,CAAC;gBACD,SAAS,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;gBAC7C,QAAQ,GAAG,KAAK,CAAA;YAClB,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YACpC,CAAC;YACD,IAAI,MAAM;gBAAE,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;YAC7C,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;YAC1D,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAA;QACnC,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CACpB;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,SAAS;QAClB,IAAI;QACJ,0BAA0B,EAAE,CAAC;QAC7B,mBAAmB,EAAE,CAAC;QACtB,gBAAgB,EAAE,MAAM,EAAE,iCAAiC;KAC5D,EACD,IAAI,CACL,CAAA;AACH,CAAC"}

package/dist/providers/crypto.d.ts

@@ -0,0 +1,8 @@
+import type { EntropyProvider } from '../types.js';
+/**
+ * The runtime's cryptographic PRNG. Always available, never rate limited —
+ * the natural last link of any fallback chain and the standard private mixin
+ * for `xorMix` with public beacons.
+ */
+export declare function cryptoProvider(): EntropyProvider;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/providers/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/providers/crypto.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAWrE;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,eAAe,CAahD"}

package/dist/providers/crypto.js

@@ -0,0 +1,26 @@
+import { defineProvider } from '../internal/provider.js';
+// crypto.getRandomValues throws QuotaExceededError above 65536 bytes per call.
+const MAX_PER_CALL = 65_536;
+const INFO = Object.freeze({
+    name: 'crypto',
+    kind: 'csprng',
+    privacy: 'private',
+});
+/**
+ * The runtime's cryptographic PRNG. Always available, never rate limited —
+ * the natural last link of any fallback chain and the standard private mixin
+ * for `xorMix` with public beacons.
+ */
+export function cryptoProvider() {
+    return defineProvider({
+        ...INFO,
+        async getBytes(length) {
+            const bytes = new Uint8Array(length);
+            for (let offset = 0; offset < length; offset += MAX_PER_CALL) {
+                globalThis.crypto.getRandomValues(bytes.subarray(offset, Math.min(offset + MAX_PER_CALL, length)));
+            }
+            return { bytes, sources: [INFO] };
+        },
+    });
+}
+//# sourceMappingURL=crypto.js.map

package/dist/providers/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/providers/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAGxD,+EAA+E;AAC/E,MAAM,YAAY,GAAG,MAAM,CAAA;AAE3B,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,SAAS;CACnB,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;YACpC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,YAAY,EAAE,CAAC;gBAC7D,UAAU,CAAC,MAAM,CAAC,eAAe,CAC/B,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,YAAY,EAAE,MAAM,CAAC,CAAC,CAChE,CAAA;YACH,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACnC,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/curby.d.ts

@@ -0,0 +1,17 @@
+import type { EntropyProvider } from '../types.js';
+export interface CurbyOptions {
+    fetch?: typeof fetch;
+    baseUrls?: string[];
+    /** Twine chain CID. Default: the CURBy-RNG chain. */
+    chainCid?: string;
+    pollIntervalMs?: number;
+    /** Reject pulses older than this — guards against a stalled spool. Default 180_000. */
+    maxStalenessMs?: number;
+}
+/**
+ * CURBy (CU Boulder + NIST) randomness beacon over the Twine protocol. The
+ * per-pulse randomness is defined as the block CID's multihash digest.
+ * PUBLIC randomness with a built-in freshness guard.
+ */
+export declare function curby(opts?: CurbyOptions): EntropyProvider;
+//# sourceMappingURL=curby.d.ts.map

package/dist/providers/curby.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"curby.d.ts","sourceRoot":"","sources":["../../src/providers/curby.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAiBrE,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAOD;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,IAAI,GAAE,YAAiB,GAAG,eAAe,CA8G9D"}

package/dist/providers/curby.js

@@ -0,0 +1,113 @@
+import { EntropyError } from '../errors.js';
+import { concatBytes } from '../internal/bytes.js';
+import { cidDigest } from '../internal/encoding.js';
+import { fetchJson } from '../internal/http.js';
+import { defineProvider } from '../internal/provider.js';
+import { beaconStream } from '../internal/stream.js';
+const INFO = Object.freeze({
+    name: 'curby',
+    kind: 'beacon',
+    privacy: 'public',
+});
+const PULSE_BYTES = 32;
+const DEFAULT_BASE_URLS = ['https://api.entwine.me', 'https://random.colorado.edu/api'];
+// The CURBy-RNG chain (classical, 60 s cadence). The quantum CURBy-Q chain is
+// deliberately NOT used: it has been stalled since 2025-08 (same round for
+// months) while this chain keeps pulsing.
+const CURBY_RNG_CHAIN_CID = 'bafyriqci6f3st2mg7gq733ho4zvvth32zpy2mtiylixwmhoz6d627eo3jfpmbxepe54u2zdvymonq5sp3armtm4rodxsynsirr5g3xsbd3q4s';
+const DEFAULT_POLL_INTERVAL_MS = 60_000;
+const DEFAULT_MAX_STALENESS_MS = 3 * 60_000;
+/**
+ * CURBy (CU Boulder + NIST) randomness beacon over the Twine protocol. The
+ * per-pulse randomness is defined as the block CID's multihash digest.
+ * PUBLIC randomness with a built-in freshness guard.
+ */
+export function curby(opts = {}) {
+    const { baseUrls = DEFAULT_BASE_URLS, chainCid = CURBY_RNG_CHAIN_CID, pollIntervalMs = DEFAULT_POLL_INTERVAL_MS, maxStalenessMs = DEFAULT_MAX_STALENESS_MS, fetch: fetchImpl, } = opts;
+    function parseBlock(block) {
+        const rawCid = block?.cid;
+        const cidString = typeof rawCid === 'string' ? rawCid : rawCid?.['/'];
+        const index = block?.data?.content?.index;
+        const timestampRaw = block?.data?.content?.payload?.timestamp;
+        const timestamp = typeof timestampRaw === 'string' ? Date.parse(timestampRaw) : Number.NaN;
+        if (typeof cidString !== 'string' || !Number.isInteger(index) || Number.isNaN(timestamp)) {
+            throw new EntropyError('bad_response', 'malformed twine block', { provider: INFO.name });
+        }
+        let digest;
+        try {
+            digest = cidDigest(cidString);
+        }
+        catch (error) {
+            throw new EntropyError('bad_response', 'undecodable block CID', {
+                provider: INFO.name,
+                cause: error,
+            });
+        }
+        // The CURBy-RNG chain uses 64-byte (sha2-512) digests; other twine chains
+        // may differ, so accept any reasonable multihash digest size.
+        if (digest.length < 16) {
+            throw new EntropyError('bad_response', `digest too short (${digest.length} bytes)`, {
+                provider: INFO.name,
+            });
+        }
+        return { index: index, timestamp, bytes: digest };
+    }
+    async function fetchPulse(which, signal) {
+        let lastError;
+        for (const base of baseUrls) {
+            try {
+                const block = await fetchJson(`${base}/chains/${chainCid}/pulses/${which}`, {
+                    provider: INFO.name,
+                    signal,
+                    fetchImpl,
+                });
+                return parseBlock(block);
+            }
+            catch (error) {
+                if (!(error instanceof EntropyError) || error.code === 'aborted')
+                    throw error;
+                lastError = error; // try the next mirror
+            }
+        }
+        throw lastError;
+    }
+    async function fetchFreshLatest(signal) {
+        const pulse = await fetchPulse('latest', signal);
+        if (Date.now() - pulse.timestamp > maxStalenessMs) {
+            throw new EntropyError('bad_response', `chain stale — latest pulse is ${Math.round((Date.now() - pulse.timestamp) / 1000)}s old`, { provider: INFO.name });
+        }
+        return pulse;
+    }
+    return defineProvider({
+        ...INFO,
+        defaultChunkBytes: PULSE_BYTES,
+        async getBytes(length, reqOpts) {
+            const latest = await fetchFreshLatest(reqOpts?.signal);
+            const chunks = [latest.bytes];
+            let collected = latest.bytes.length;
+            // Walk prior pulses until we have enough, adapting to the chain's actual
+            // digest size (learned from the latest block).
+            for (let i = 1; collected < length; i++) {
+                const index = latest.index - i;
+                if (index < 1) {
+                    throw new EntropyError('insufficient_entropy', 'chain too short for request', {
+                        provider: INFO.name,
+                    });
+                }
+                // verify-live: latest is research-verified; by-index follows the
+                // documented twine pattern and is exercised by LIVE=1 runs
+                const prior = await fetchPulse(index, reqOpts?.signal);
+                chunks.push(prior.bytes);
+                collected += prior.bytes.length;
+            }
+            return { bytes: concatBytes(chunks).slice(0, length), sources: [INFO] };
+        },
+        stream(streamOpts = {}) {
+            return beaconStream(async (signal) => {
+                const pulse = await fetchFreshLatest(signal);
+                return { id: pulse.index, bytes: pulse.bytes };
+            }, pollIntervalMs, PULSE_BYTES, INFO.name, streamOpts);
+        },
+    });
+}
+//# sourceMappingURL=curby.js.map

package/dist/providers/curby.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"curby.js","sourceRoot":"","sources":["../../src/providers/curby.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAGpD,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,QAAQ;CAClB,CAAC,CAAA;AACF,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,MAAM,iBAAiB,GAAG,CAAC,wBAAwB,EAAE,iCAAiC,CAAC,CAAA;AACvF,8EAA8E;AAC9E,2EAA2E;AAC3E,0CAA0C;AAC1C,MAAM,mBAAmB,GACvB,gHAAgH,CAAA;AAClH,MAAM,wBAAwB,GAAG,MAAM,CAAA;AACvC,MAAM,wBAAwB,GAAG,CAAC,GAAG,MAAM,CAAA;AAiB3C;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,OAAqB,EAAE;IAC3C,MAAM,EACJ,QAAQ,GAAG,iBAAiB,EAC5B,QAAQ,GAAG,mBAAmB,EAC9B,cAAc,GAAG,wBAAwB,EACzC,cAAc,GAAG,wBAAwB,EACzC,KAAK,EAAE,SAAS,GACjB,GAAG,IAAI,CAAA;IAER,SAAS,UAAU,CAAC,KAAiB;QACnC,MAAM,MAAM,GAAG,KAAK,EAAE,GAAG,CAAA;QACzB,MAAM,SAAS,GACb,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,MAAwC,EAAE,CAAC,GAAG,CAAC,CAAA;QACxF,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAA;QACzC,MAAM,YAAY,GAAG,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAA;QAC7D,MAAM,SAAS,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;QAC1F,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,uBAAuB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAC1F,CAAC;QACD,IAAI,MAAkB,CAAA;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,uBAAuB,EAAE;gBAC9D,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,KAAK,EAAE,KAAK;aACb,CAAC,CAAA;QACJ,CAAC;QACD,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,qBAAqB,MAAM,CAAC,MAAM,SAAS,EAAE;gBAClF,QAAQ,EAAE,IAAI,CAAC,IAAI;aACpB,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAe,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAC7D,CAAC;IAED,KAAK,UAAU,UAAU,CACvB,KAAwB,EACxB,MAAoB;QAEpB,IAAI,SAAkB,CAAA;QACtB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAa,GAAG,IAAI,WAAW,QAAQ,WAAW,KAAK,EAAE,EAAE;oBACtF,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM;oBACN,SAAS;iBACV,CAAC,CAAA;gBACF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAA;gBAC7E,SAAS,GAAG,KAAK,CAAA,CAAC,sBAAsB;YAC1C,CAAC;QACH,CAAC;QACD,MAAM,SAAS,CAAA;IACjB,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,MAAoB;QAClD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAChD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;YAClD,MAAM,IAAI,YAAY,CACpB,cAAc,EACd,iCAAiC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,EACzF,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CACxB,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,iBAAiB,EAAE,WAAW;QAE9B,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO;YAC5B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACtD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC7B,IAAI,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAA;YACnC,yEAAyE;YACzE,+CAA+C;YAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAA;gBAC9B,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBACd,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,6BAA6B,EAAE;wBAC5E,QAAQ,EAAE,IAAI,CAAC,IAAI;qBACpB,CAAC,CAAA;gBACJ,CAAC;gBACD,iEAAiE;gBACjE,2DAA2D;gBAC3D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;gBACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACxB,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAA;YACjC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACzE,CAAC;QAED,MAAM,CAAC,UAAU,GAAG,EAAE;YACpB,OAAO,YAAY,CACjB,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;YAChD,CAAC,EACD,cAAc,EACd,WAAW,EACX,IAAI,CAAC,IAAI,EACT,UAAU,CACX,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/drand.d.ts

@@ -0,0 +1,19 @@
+import type { EntropyProvider } from '../types.js';
+export interface DrandOptions {
+    fetch?: typeof fetch;
+    /** Mirrors tried in order per request. */
+    baseUrls?: string[];
+    /** Beacon id. Default 'quicknet' (3 s rounds, unchained). */
+    beacon?: string;
+    /** Stream poll cadence. Default 3000 (the quicknet round period). */
+    pollIntervalMs?: number;
+}
+/**
+ * drand / League of Entropy distributed randomness beacon (threshold BLS).
+ * PUBLIC randomness: everyone sees every round — never seed secrets from it
+ * alone; combine via `xorMix` with a private source for auditable secrets.
+ * Randomness is derived as SHA-256(signature), as specified for unchained
+ * beacons like quicknet.
+ */
+export declare function drand(opts?: DrandOptions): EntropyProvider;
+//# sourceMappingURL=drand.d.ts.map

package/dist/providers/drand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drand.d.ts","sourceRoot":"","sources":["../../src/providers/drand.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAYrE,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAOD;;;;;;GAMG;AACH,wBAAgB,KAAK,CAAC,IAAI,GAAE,YAAiB,GAAG,eAAe,CAgF9D"}