@mindpeeker/entropy 0.1.0

package/dist/providers/microphone.js

@@ -0,0 +1,120 @@
+import { packBits } from '../internal/bits.js';
+import { sampledProvider } from '../internal/sampled.js';
+/** Extract the lowest `bitsPerSample` bits of each sample (Float32 scaled to int16 first). */
+export function sampleLsbBits(samples, bitsPerSample) {
+    const isFloat = samples instanceof Float32Array;
+    const bits = [];
+    for (let i = 0; i < samples.length; i++) {
+        let value = samples[i];
+        if (isFloat) {
+            value = Math.round(Math.max(-1, Math.min(1, value)) * 32_767);
+        }
+        for (let b = bitsPerSample - 1; b >= 0; b--) {
+            bits.push((value >> b) & 1);
+        }
+    }
+    return bits;
+}
+const CAPTURE_BUFFER_SAMPLES = 4096;
+function browserSampleSource() {
+    return {
+        async *samples(signal) {
+            const mediaDevices = globalThis.navigator?.mediaDevices;
+            if (typeof mediaDevices?.getUserMedia !== 'function') {
+                throw new TypeError('micEntropy: no microphone in this runtime — pass a { source } (in Node: ffmpegSampleSource from @mindpeeker/entropy/node)');
+            }
+            // Disable all DSP the platform lets us disable; browsers do not always
+            // honor these, which is exactly what the health tests guard against.
+            const stream = await mediaDevices.getUserMedia({
+                audio: { echoCancellation: false, noiseSuppression: false, autoGainControl: false },
+            });
+            const AudioContextCtor = globalThis.AudioContext;
+            if (!AudioContextCtor) {
+                for (const track of stream.getTracks())
+                    track.stop();
+                throw new TypeError('micEntropy: AudioContext unavailable in this runtime');
+            }
+            const context = new AudioContextCtor();
+            const queue = [];
+            let notify = null;
+            const push = (chunk) => {
+                queue.push(chunk);
+                notify?.();
+            };
+            const sourceNode = context.createMediaStreamSource(stream);
+            // ScriptProcessorNode is deprecated but universal and asset-free; an
+            // AudioWorklet would need a module URL. Entropy harvesting does not
+            // care about the latency drawbacks.
+            const processor = context.createScriptProcessor(CAPTURE_BUFFER_SAMPLES, 1, 1);
+            processor.onaudioprocess = (event) => {
+                push(new Float32Array(event.inputBuffer.getChannelData(0)));
+            };
+            sourceNode.connect(processor);
+            processor.connect(context.destination);
+            try {
+                while (true) {
+                    if (signal?.aborted)
+                        throw signal.reason;
+                    const chunk = queue.shift();
+                    if (chunk) {
+                        yield chunk;
+                    }
+                    else {
+                        await new Promise((resolve) => {
+                            notify = resolve;
+                        });
+                        notify = null;
+                    }
+                }
+            }
+            finally {
+                processor.disconnect();
+                sourceNode.disconnect();
+                for (const track of stream.getTracks())
+                    track.stop();
+                await context.close().catch(() => { });
+            }
+        },
+    };
+}
+/**
+ * Microphone ADC noise — the least significant bits of the audio samples.
+ * MEMS microphones and browser DSP can interfere; keep expectations modest
+ * and rely on the health tests to catch dead or processed inputs.
+ */
+export function micEntropy(opts = {}) {
+    const { bitsPerSample = 1, warmupMs = 200, sampleRate = 48_000 } = opts;
+    const source = opts.source ?? browserSampleSource();
+    const warmupSamples = Math.ceil((warmupMs / 1000) * sampleRate);
+    async function* open(signal) {
+        let skipped = 0;
+        let leftover = [];
+        for await (let chunk of source.samples(signal)) {
+            if (signal?.aborted)
+                throw signal.reason ?? new DOMException('aborted', 'AbortError');
+            if (skipped < warmupSamples) {
+                const need = warmupSamples - skipped;
+                if (chunk.length <= need) {
+                    skipped += chunk.length;
+                    continue;
+                }
+                skipped = warmupSamples;
+                chunk = chunk.slice(need);
+            }
+            const [bytes, rest] = packBits(leftover.concat(sampleLsbBits(chunk, bitsPerSample)));
+            leftover = rest;
+            if (bytes.length > 0)
+                yield bytes;
+        }
+    }
+    return sampledProvider({
+        name: 'microphone',
+        kind: 'trng',
+        privacy: 'private',
+        open,
+        defaultMinEntropyPerSample: 2,
+        defaultSafetyFactor: 4,
+        defaultTimeoutMs: 30_000, // permission prompt + warmup
+    }, opts);
+}
+//# sourceMappingURL=microphone.js.map

package/dist/providers/microphone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"microphone.js","sourceRoot":"","sources":["../../src/providers/microphone.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAoBxD,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAC3B,OAAkC,EAClC,aAAwB;IAExB,MAAM,OAAO,GAAG,OAAO,YAAY,YAAY,CAAA;IAC/C,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,KAAK,GAAG,OAAO,CAAC,CAAC,CAAW,CAAA;QAChC,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,aAAa,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,sBAAsB,GAAG,IAAI,CAAA;AAEnC,SAAS,mBAAmB;IAC1B,OAAO;QACL,KAAK,CAAC,CAAC,OAAO,CAAC,MAAoB;YACjC,MAAM,YAAY,GAAI,UAAwC,CAAC,SAAS,EAAE,YAAY,CAAA;YACtF,IAAI,OAAO,YAAY,EAAE,YAAY,KAAK,UAAU,EAAE,CAAC;gBACrD,MAAM,IAAI,SAAS,CACjB,2HAA2H,CAC5H,CAAA;YACH,CAAC;YACD,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC;gBAC7C,KAAK,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;aACpF,CAAC,CAAA;YACF,MAAM,gBAAgB,GAAI,UAAqD,CAAC,YAAY,CAAA;YAC5F,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS,EAAE;oBAAE,KAAK,CAAC,IAAI,EAAE,CAAA;gBACpD,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAA;YAC7E,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAA;YACtC,MAAM,KAAK,GAAmB,EAAE,CAAA;YAChC,IAAI,MAAM,GAAwB,IAAI,CAAA;YACtC,MAAM,IAAI,GAAG,CAAC,KAAmB,EAAE,EAAE;gBACnC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACjB,MAAM,EAAE,EAAE,CAAA;YACZ,CAAC,CAAA;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAA;YAC1D,qEAAqE;YACrE,oEAAoE;YACpE,oCAAoC;YACpC,MAAM,SAAS,GAAG,OAAO,CAAC,qBAAqB,CAAC,sBAAsB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;YAC7E,SAAS,CAAC,cAAc,GAAG,CAAC,KAAK,EAAE,EAAE;gBACnC,IAAI,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7D,CAAC,CAAA;YACD,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC7B,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YACtC,IAAI,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;oBACZ,IAAI,MAAM,EAAE,OAAO;wBAAE,MAAM,MAAM,CAAC,MAAM,CAAA;oBACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;oBAC3B,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,KAAK,CAAA;oBACb,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;4BAClC,MAAM,GAAG,OAAO,CAAA;wBAClB,CAAC,CAAC,CAAA;wBACF,MAAM,GAAG,IAAI,CAAA;oBACf,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,UAAU,EAAE,CAAA;gBACtB,UAAU,CAAC,UAAU,EAAE,CAAA;gBACvB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS,EAAE;oBAAE,KAAK,CAAC,IAAI,EAAE,CAAA;gBACpD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACvC,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAA0B,EAAE;IACrD,MAAM,EAAE,aAAa,GAAG,CAAC,EAAE,QAAQ,GAAG,GAAG,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,IAAI,CAAA;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACnD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,CAAA;IAE/D,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,MAAoB;QACvC,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,IAAI,QAAQ,GAAa,EAAE,CAAA;QAC3B,IAAI,KAAK,EAAE,IAAI,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;YACrF,IAAI,OAAO,GAAG,aAAa,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,aAAa,GAAG,OAAO,CAAA;gBACpC,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;oBACzB,OAAO,IAAI,KAAK,CAAC,MAAM,CAAA;oBACvB,SAAQ;gBACV,CAAC;gBACD,OAAO,GAAG,aAAa,CAAA;gBACvB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAA8B,CAAA;YACxD,CAAC;YACD,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;YACpF,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAA;QACnC,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CACpB;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,SAAS;QAClB,IAAI;QACJ,0BAA0B,EAAE,CAAC;QAC7B,mBAAmB,EAAE,CAAC;QACtB,gBAAgB,EAAE,MAAM,EAAE,6BAA6B;KACxD,EACD,IAAI,CACL,CAAA;AACH,CAAC"}

package/dist/providers/nist-beacon.d.ts

@@ -0,0 +1,11 @@
+import { type NistFamilyOptions } from '../internal/nist-pulse.js';
+import type { EntropyProvider } from '../types.js';
+export interface NistBeaconOptions extends NistFamilyOptions {
+}
+/**
+ * NIST Randomness Beacon 2.0 — 512 signed bits every 60 seconds. PUBLIC
+ * randomness; NIST's own warning applies: never use beacon values as secret
+ * keys. Useful for audits, lotteries and as an `xorMix` auditability input.
+ */
+export declare function nistBeacon(opts?: NistBeaconOptions): EntropyProvider;
+//# sourceMappingURL=nist-beacon.d.ts.map

package/dist/providers/nist-beacon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nist-beacon.d.ts","sourceRoot":"","sources":["../../src/providers/nist-beacon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,iBAAiB,EAAmB,MAAM,2BAA2B,CAAA;AACnF,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAQrE,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;CAAG;AAE/D;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,GAAE,iBAAsB,GAAG,eAAe,CAUxE"}

package/dist/providers/nist-beacon.js

@@ -0,0 +1,20 @@
+import { nistPulseBeacon } from '../internal/nist-pulse.js';
+const INFO = Object.freeze({
+    name: 'nist-beacon',
+    kind: 'beacon',
+    privacy: 'public',
+});
+/**
+ * NIST Randomness Beacon 2.0 — 512 signed bits every 60 seconds. PUBLIC
+ * randomness; NIST's own warning applies: never use beacon values as secret
+ * keys. Useful for audits, lotteries and as an `xorMix` auditability input.
+ */
+export function nistBeacon(opts = {}) {
+    return nistPulseBeacon({
+        info: INFO,
+        defaultBaseUrl: 'https://beacon.nist.gov/beacon/2.0',
+        latestPath: '/pulse/last',
+        defaultPollIntervalMs: 60_000,
+    }, opts);
+}
+//# sourceMappingURL=nist-beacon.js.map

package/dist/providers/nist-beacon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nist-beacon.js","sourceRoot":"","sources":["../../src/providers/nist-beacon.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAGnF,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,QAAQ;CAClB,CAAC,CAAA;AAIF;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAA0B,EAAE;IACrD,OAAO,eAAe,CACpB;QACE,IAAI,EAAE,IAAI;QACV,cAAc,EAAE,oCAAoC;QACpD,UAAU,EAAE,aAAa;QACzB,qBAAqB,EAAE,MAAM;KAC9B,EACD,IAAI,CACL,CAAA;AACH,CAAC"}

package/dist/providers/nqsn.d.ts

@@ -0,0 +1,11 @@
+import { type NistFamilyOptions } from '../internal/nist-pulse.js';
+import type { EntropyProvider } from '../types.js';
+export interface NqsnOptions extends NistFamilyOptions {
+}
+/**
+ * NQSN Singapore quantum randomness beacon (National Quantum-Safe Network) —
+ * NIST IR 8213 format, 512 bits every 60 seconds. PUBLIC randomness.
+ * The latest-pulse route answers with a 303 redirect that fetch follows.
+ */
+export declare function nqsn(opts?: NqsnOptions): EntropyProvider;
+//# sourceMappingURL=nqsn.d.ts.map

package/dist/providers/nqsn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nqsn.d.ts","sourceRoot":"","sources":["../../src/providers/nqsn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,iBAAiB,EAAmB,MAAM,2BAA2B,CAAA;AACnF,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAIrE,MAAM,WAAW,WAAY,SAAQ,iBAAiB;CAAG;AAEzD;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,IAAI,GAAE,WAAgB,GAAG,eAAe,CAU5D"}

package/dist/providers/nqsn.js

@@ -0,0 +1,16 @@
+import { nistPulseBeacon } from '../internal/nist-pulse.js';
+const INFO = Object.freeze({ name: 'nqsn', kind: 'beacon', privacy: 'public' });
+/**
+ * NQSN Singapore quantum randomness beacon (National Quantum-Safe Network) —
+ * NIST IR 8213 format, 512 bits every 60 seconds. PUBLIC randomness.
+ * The latest-pulse route answers with a 303 redirect that fetch follows.
+ */
+export function nqsn(opts = {}) {
+    return nistPulseBeacon({
+        info: INFO,
+        defaultBaseUrl: 'https://quantum-entropy.sg/beacon/2.0',
+        latestPath: '/pulse',
+        defaultPollIntervalMs: 60_000,
+    }, opts);
+}
+//# sourceMappingURL=nqsn.js.map

package/dist/providers/nqsn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nqsn.js","sourceRoot":"","sources":["../../src/providers/nqsn.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAGnF,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;AAIlG;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,OAAoB,EAAE;IACzC,OAAO,eAAe,CACpB;QACE,IAAI,EAAE,IAAI;QACV,cAAc,EAAE,uCAAuC;QACvD,UAAU,EAAE,QAAQ;QACpB,qBAAqB,EAAE,MAAM;KAC9B,EACD,IAAI,CACL,CAAA;AACH,CAAC"}

package/dist/providers/outshift.d.ts

@@ -0,0 +1,14 @@
+import type { EntropyProvider } from '../types.js';
+export interface OutshiftOptions {
+    /** Free key from https://qrng.outshift.com (Cisco account). */
+    apiKey: string;
+    fetch?: typeof fetch;
+    baseUrl?: string;
+}
+/**
+ * Outshift by Cisco QRNG (photonic hardware). Free tier: 100k bits/day.
+ * Blocks are requested in `format: 'all'` and read from the string-valued
+ * `decimal` field — the one response shape verified in the wild.
+ */
+export declare function outshift(opts: OutshiftOptions): EntropyProvider;
+//# sourceMappingURL=outshift.d.ts.map

package/dist/providers/outshift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outshift.d.ts","sourceRoot":"","sources":["../../src/providers/outshift.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAUrE,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAMD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAmC/D"}

package/dist/providers/outshift.js

@@ -0,0 +1,52 @@
+import { EntropyError } from '../errors.js';
+import { concatBytes } from '../internal/bytes.js';
+import { fetchJson } from '../internal/http.js';
+import { defineProvider } from '../internal/provider.js';
+import { byteArrayFrom } from '../internal/validate.js';
+const INFO = Object.freeze({
+    name: 'outshift',
+    kind: 'qrng',
+    privacy: 'private',
+});
+const MAX_PER_REQUEST = 1000; // documented cap: 1000 numbers per call
+const DEFAULT_BASE_URL = 'https://api.qrng.outshift.com/api/v1/random_numbers';
+/**
+ * Outshift by Cisco QRNG (photonic hardware). Free tier: 100k bits/day.
+ * Blocks are requested in `format: 'all'` and read from the string-valued
+ * `decimal` field — the one response shape verified in the wild.
+ */
+export function outshift(opts) {
+    if (!opts?.apiKey)
+        throw new TypeError('outshift({ apiKey }) requires a non-empty apiKey');
+    const { apiKey, baseUrl = DEFAULT_BASE_URL, fetch: fetchImpl } = opts;
+    return defineProvider({
+        ...INFO,
+        async getBytes(length, reqOpts) {
+            const chunks = [];
+            for (let remaining = length; remaining > 0;) {
+                const n = Math.min(MAX_PER_REQUEST, remaining);
+                const res = await fetchJson(baseUrl, {
+                    provider: INFO.name,
+                    method: 'POST',
+                    headers: { 'x-id-api-key': apiKey },
+                    body: { encoding: 'raw', format: 'all', bits_per_block: 8, number_of_blocks: n },
+                    signal: reqOpts?.signal,
+                    fetchImpl,
+                });
+                const entries = res?.random_numbers;
+                if (!Array.isArray(entries)) {
+                    throw new EntropyError('bad_response', 'missing random_numbers array', {
+                        provider: INFO.name,
+                    });
+                }
+                const values = entries.map((entry) => typeof entry?.decimal === 'string'
+                    ? Number.parseInt(entry.decimal, 10)
+                    : Number.NaN);
+                chunks.push(byteArrayFrom(values, n, INFO.name));
+                remaining -= n;
+            }
+            return { bytes: concatBytes(chunks), sources: [INFO] };
+        },
+    });
+}
+//# sourceMappingURL=outshift.js.map

package/dist/providers/outshift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outshift.js","sourceRoot":"","sources":["../../src/providers/outshift.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAGvD,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;CACnB,CAAC,CAAA;AACF,MAAM,eAAe,GAAG,IAAI,CAAA,CAAC,wCAAwC;AACrE,MAAM,gBAAgB,GAAG,qDAAqD,CAAA;AAa9E;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAqB;IAC5C,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAA;IAC1F,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAErE,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO;YAC5B,MAAM,MAAM,GAAiB,EAAE,CAAA;YAC/B,KAAK,IAAI,SAAS,GAAG,MAAM,EAAE,SAAS,GAAG,CAAC,GAAI,CAAC;gBAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;gBAC9C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAmB,OAAO,EAAE;oBACrD,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE;oBACnC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE;oBAChF,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,SAAS;iBACV,CAAC,CAAA;gBACF,MAAM,OAAO,GAAG,GAAG,EAAE,cAAc,CAAA;gBACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,8BAA8B,EAAE;wBACrE,QAAQ,EAAE,IAAI,CAAC,IAAI;qBACpB,CAAC,CAAA;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnC,OAAQ,KAA+B,EAAE,OAAO,KAAK,QAAQ;oBAC3D,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAE,KAA6B,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC7D,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,CAAA;gBACD,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;gBAChD,SAAS,IAAI,CAAC,CAAA;YAChB,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACxD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/padova.d.ts

@@ -0,0 +1,12 @@
+import type { EntropyProvider } from '../types.js';
+export interface PadovaOptions {
+    fetch?: typeof fetch;
+    baseUrl?: string;
+}
+/**
+ * University of Padova QRNG hosted at the VSIX internet exchange — keyless
+ * PRIVATE quantum draws, the simplest QRNG API in the wild: one GET returning
+ * base64 bytes. Academic service without an SLA.
+ */
+export declare function padova(opts?: PadovaOptions): EntropyProvider;
+//# sourceMappingURL=padova.d.ts.map

package/dist/providers/padova.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"padova.d.ts","sourceRoot":"","sources":["../../src/providers/padova.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAWrE,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAMD;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,IAAI,GAAE,aAAkB,GAAG,eAAe,CAqChE"}

package/dist/providers/padova.js

@@ -0,0 +1,56 @@
+import { EntropyError } from '../errors.js';
+import { base64ToBytes, concatBytes } from '../internal/bytes.js';
+import { fetchJson } from '../internal/http.js';
+import { defineProvider } from '../internal/provider.js';
+const INFO = Object.freeze({
+    name: 'padova',
+    kind: 'qrng',
+    privacy: 'private',
+});
+// No documented cap — conservative politeness limit per request.
+const MAX_PER_REQUEST = 256;
+const DEFAULT_BASE_URL = 'https://qrng-qtech.vs-ix.net/api/get_string_get';
+/**
+ * University of Padova QRNG hosted at the VSIX internet exchange — keyless
+ * PRIVATE quantum draws, the simplest QRNG API in the wild: one GET returning
+ * base64 bytes. Academic service without an SLA.
+ */
+export function padova(opts = {}) {
+    const { baseUrl = DEFAULT_BASE_URL, fetch: fetchImpl } = opts;
+    return defineProvider({
+        ...INFO,
+        async getBytes(length, reqOpts) {
+            const chunks = [];
+            for (let remaining = length; remaining > 0;) {
+                const n = Math.min(MAX_PER_REQUEST, remaining);
+                const res = await fetchJson(`${baseUrl}?string_length=${n}`, {
+                    provider: INFO.name,
+                    signal: reqOpts?.signal,
+                    fetchImpl,
+                });
+                if (typeof res?.string !== 'string') {
+                    throw new EntropyError('bad_response', 'missing string field', { provider: INFO.name });
+                }
+                let bytes;
+                try {
+                    bytes = base64ToBytes(res.string);
+                }
+                catch (error) {
+                    throw new EntropyError('bad_response', 'invalid base64 payload', {
+                        provider: INFO.name,
+                        cause: error,
+                    });
+                }
+                if (bytes.length !== n) {
+                    throw new EntropyError('bad_response', `expected ${n} bytes, got ${bytes.length}`, {
+                        provider: INFO.name,
+                    });
+                }
+                chunks.push(bytes);
+                remaining -= n;
+            }
+            return { bytes: concatBytes(chunks), sources: [INFO] };
+        },
+    });
+}
+//# sourceMappingURL=padova.js.map

package/dist/providers/padova.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"padova.js","sourceRoot":"","sources":["../../src/providers/padova.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAGxD,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;CACnB,CAAC,CAAA;AACF,iEAAiE;AACjE,MAAM,eAAe,GAAG,GAAG,CAAA;AAC3B,MAAM,gBAAgB,GAAG,iDAAiD,CAAA;AAW1E;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,OAAsB,EAAE;IAC7C,MAAM,EAAE,OAAO,GAAG,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAE7D,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO;YAC5B,MAAM,MAAM,GAAiB,EAAE,CAAA;YAC/B,KAAK,IAAI,SAAS,GAAG,MAAM,EAAE,SAAS,GAAG,CAAC,GAAI,CAAC;gBAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;gBAC9C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAiB,GAAG,OAAO,kBAAkB,CAAC,EAAE,EAAE;oBAC3E,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,SAAS;iBACV,CAAC,CAAA;gBACF,IAAI,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACpC,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,sBAAsB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBACzF,CAAC;gBACD,IAAI,KAAiB,CAAA;gBACrB,IAAI,CAAC;oBACH,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACnC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,wBAAwB,EAAE;wBAC/D,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,KAAK,EAAE,KAAK;qBACb,CAAC,CAAA;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,eAAe,KAAK,CAAC,MAAM,EAAE,EAAE;wBACjF,QAAQ,EAAE,IAAI,CAAC,IAAI;qBACpB,CAAC,CAAA;gBACJ,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBAClB,SAAS,IAAI,CAAC,CAAA;YAChB,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACxD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/qbck.d.ts

@@ -0,0 +1,13 @@
+import type { EntropyProvider } from '../types.js';
+export interface QbckOptions {
+    /** Free key by email registration at quantumblockchains.io. Sits in the URL path. */
+    apiKey: string;
+    fetch?: typeof fetch;
+    baseUrl?: string;
+}
+/**
+ * Quantum Blockchains QRNG aggregator (IDQ Quantis, qStream, SeQRNG, Tropos
+ * hardware behind one API). PRIVATE draws; free key by email registration.
+ */
+export declare function qbck(opts: QbckOptions): EntropyProvider;
+//# sourceMappingURL=qbck.d.ts.map

package/dist/providers/qbck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qbck.d.ts","sourceRoot":"","sources":["../../src/providers/qbck.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAMrE,MAAM,WAAW,WAAW;IAC1B,qFAAqF;IACrF,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAyCD;;;GAGG;AACH,wBAAgB,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,CAqBvD"}

package/dist/providers/qbck.js

@@ -0,0 +1,62 @@
+import { EntropyError } from '../errors.js';
+import { concatBytes, hexToBytes } from '../internal/bytes.js';
+import { fetchJson } from '../internal/http.js';
+import { defineProvider } from '../internal/provider.js';
+const INFO = Object.freeze({ name: 'qbck', kind: 'qrng', privacy: 'private' });
+const MAX_PER_REQUEST = 256;
+const DEFAULT_BASE_URL = 'https://qrng.qbck.io';
+// NOTE: the qbck response schema is documented only in their PDF and the
+// exact success shape is unverified without a registered key. The parse below
+// tolerates the two plausible shapes (array of hex strings / single hex
+// string, under data.result or result). VERIFY-WITH-KEY before production.
+function parseHexResult(res, expected) {
+    const raw = res?.data?.result ?? res?.result;
+    const joined = Array.isArray(raw) ? raw.join('') : typeof raw === 'string' ? raw : null;
+    if (joined === null) {
+        const detail = typeof res?.message === 'string' ? res.message : 'missing result field';
+        throw new EntropyError('bad_response', `qbck: ${detail}`, { provider: INFO.name });
+    }
+    let bytes;
+    try {
+        bytes = hexToBytes(joined);
+    }
+    catch (error) {
+        throw new EntropyError('bad_response', 'qbck: invalid hex payload', {
+            provider: INFO.name,
+            cause: error,
+        });
+    }
+    if (bytes.length !== expected) {
+        throw new EntropyError('bad_response', `qbck: expected ${expected} bytes, got ${bytes.length}`, {
+            provider: INFO.name,
+        });
+    }
+    return bytes;
+}
+/**
+ * Quantum Blockchains QRNG aggregator (IDQ Quantis, qStream, SeQRNG, Tropos
+ * hardware behind one API). PRIVATE draws; free key by email registration.
+ */
+export function qbck(opts) {
+    if (!opts?.apiKey)
+        throw new TypeError('qbck({ apiKey }) requires a non-empty apiKey');
+    const { apiKey, baseUrl = DEFAULT_BASE_URL, fetch: fetchImpl } = opts;
+    return defineProvider({
+        ...INFO,
+        async getBytes(length, reqOpts) {
+            const chunks = [];
+            for (let remaining = length; remaining > 0;) {
+                const n = Math.min(MAX_PER_REQUEST, remaining);
+                const res = await fetchJson(`${baseUrl}/${apiKey}/qbck/block/hex?size=${n}`, {
+                    provider: INFO.name,
+                    signal: reqOpts?.signal,
+                    fetchImpl,
+                });
+                chunks.push(parseHexResult(res, n));
+                remaining -= n;
+            }
+            return { bytes: concatBytes(chunks), sources: [INFO] };
+        },
+    });
+}
+//# sourceMappingURL=qbck.js.map

package/dist/providers/qbck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qbck.js","sourceRoot":"","sources":["../../src/providers/qbck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAGxD,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;AACjG,MAAM,eAAe,GAAG,GAAG,CAAA;AAC3B,MAAM,gBAAgB,GAAG,sBAAsB,CAAA;AAgB/C,yEAAyE;AACzE,8EAA8E;AAC9E,wEAAwE;AACxE,2EAA2E;AAC3E,SAAS,cAAc,CAAC,GAAiB,EAAE,QAAgB;IACzD,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,IAAI,GAAG,EAAE,MAAM,CAAA;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IACvF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAA;QACtF,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,KAAiB,CAAA;IACrB,IAAI,CAAC;QACH,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,2BAA2B,EAAE;YAClE,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,KAAK,EAAE,KAAK;SACb,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,YAAY,CACpB,cAAc,EACd,kBAAkB,QAAQ,eAAe,KAAK,CAAC,MAAM,EAAE,EACvD;YACE,QAAQ,EAAE,IAAI,CAAC,IAAI;SACpB,CACF,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,IAAI,CAAC,IAAiB;IACpC,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAA;IACtF,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAErE,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO;YAC5B,MAAM,MAAM,GAAiB,EAAE,CAAA;YAC/B,KAAK,IAAI,SAAS,GAAG,MAAM,EAAE,SAAS,GAAG,CAAC,GAAI,CAAC;gBAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;gBAC9C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAe,GAAG,OAAO,IAAI,MAAM,wBAAwB,CAAC,EAAE,EAAE;oBACzF,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,SAAS;iBACV,CAAC,CAAA;gBACF,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;gBACnC,SAAS,IAAI,CAAC,CAAA;YAChB,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACxD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/qci.d.ts

@@ -0,0 +1,14 @@
+import type { EntropyProvider } from '../types.js';
+export interface QciOptions {
+    /** QCi API token (exchanged for a short-lived bearer token). */
+    apiToken: string;
+    fetch?: typeof fetch;
+    baseUrl?: string;
+}
+/**
+ * Quantum Computing Inc. uQRNG (photonic). OAuth2-style flow: the long-lived
+ * API token is exchanged for a bearer token, cached until expiry, and
+ * refreshed once automatically when a request comes back 401.
+ */
+export declare function qci(opts: QciOptions): EntropyProvider;
+//# sourceMappingURL=qci.d.ts.map

package/dist/providers/qci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qci.d.ts","sourceRoot":"","sources":["../../src/providers/qci.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAA4C,MAAM,aAAa,CAAA;AAQ5F,MAAM,WAAW,UAAU;IACzB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAOD;;;;GAIG;AACH,wBAAgB,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CAgFrD"}

package/dist/providers/qci.js

@@ -0,0 +1,91 @@
+import { EntropyError } from '../errors.js';
+import { concatBytes } from '../internal/bytes.js';
+import { fetchJson } from '../internal/http.js';
+import { defineProvider } from '../internal/provider.js';
+import { byteArrayFrom } from '../internal/validate.js';
+const INFO = Object.freeze({ name: 'qci', kind: 'qrng', privacy: 'private' });
+// API allows up to 1M samples/request; stay well below.
+const MAX_PER_REQUEST = 100_000;
+const DEFAULT_BASE_URL = 'https://api.qci-prod.com';
+const TOKEN_SAFETY_MARGIN_MS = 30_000;
+/**
+ * Quantum Computing Inc. uQRNG (photonic). OAuth2-style flow: the long-lived
+ * API token is exchanged for a bearer token, cached until expiry, and
+ * refreshed once automatically when a request comes back 401.
+ */
+export function qci(opts) {
+    if (!opts?.apiToken)
+        throw new TypeError('qci({ apiToken }) requires a non-empty apiToken');
+    const { apiToken, baseUrl = DEFAULT_BASE_URL, fetch: fetchImpl } = opts;
+    let cached = null;
+    let inflight = null;
+    async function getToken(signal) {
+        if (cached && Date.now() < cached.expiresAt - TOKEN_SAFETY_MARGIN_MS)
+            return cached.token;
+        if (!inflight) {
+            inflight = fetchJson(`${baseUrl}/auth/v1/access-tokens`, {
+                provider: INFO.name,
+                method: 'POST',
+                body: { refresh_token: apiToken },
+                signal,
+                fetchImpl,
+            })
+                .then((res) => {
+                const token = res?.access_token;
+                if (typeof token !== 'string' || token.length === 0) {
+                    throw new EntropyError('auth', 'QCi token exchange returned no access_token', {
+                        provider: INFO.name,
+                    });
+                }
+                // Observed in the wild as an absolute unix timestamp despite the
+                // OAuth-style name; handle both interpretations.
+                const raw = res?.expires_in;
+                const expiresAt = typeof raw === 'number'
+                    ? raw > 1_000_000_000
+                        ? raw * 1000
+                        : Date.now() + raw * 1000
+                    : Date.now() + 300_000;
+                return { token, expiresAt };
+            })
+                .finally(() => {
+                inflight = null;
+            });
+        }
+        cached = await inflight;
+        return cached.token;
+    }
+    async function fetchSamples(n, reqOpts, retried) {
+        const token = await getToken(reqOpts?.signal);
+        try {
+            const res = await fetchJson(`${baseUrl}/qrng/random_numbers`, {
+                provider: INFO.name,
+                method: 'POST',
+                headers: { authorization: `Bearer ${token}` },
+                body: { distribution: 'uniform_discrete', output_type: 'decimal', n_samples: n, n_bits: 8 },
+                signal: reqOpts?.signal,
+                fetchImpl,
+            });
+            return byteArrayFrom(res, n, INFO.name);
+        }
+        catch (error) {
+            if (!retried && error instanceof EntropyError && error.code === 'auth') {
+                cached = null; // token expired server-side — re-authenticate once
+                return fetchSamples(n, reqOpts, true);
+            }
+            throw error;
+        }
+    }
+    return defineProvider({
+        ...INFO,
+        async getBytes(length, reqOpts) {
+            const chunks = [];
+            for (let remaining = length; remaining > 0;) {
+                const n = Math.min(MAX_PER_REQUEST, remaining);
+                chunks.push(await fetchSamples(n, reqOpts, false));
+                remaining -= n;
+            }
+            return { bytes: concatBytes(chunks), sources: [INFO] };
+        },
+    });
+}
+//# sourceMappingURL=qci.js.map

package/dist/providers/qci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qci.js","sourceRoot":"","sources":["../../src/providers/qci.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAGvD,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;AAChG,wDAAwD;AACxD,MAAM,eAAe,GAAG,OAAO,CAAA;AAC/B,MAAM,gBAAgB,GAAG,0BAA0B,CAAA;AACnD,MAAM,sBAAsB,GAAG,MAAM,CAAA;AAcrC;;;;GAIG;AACH,MAAM,UAAU,GAAG,CAAC,IAAgB;IAClC,IAAI,CAAC,IAAI,EAAE,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAA;IAC3F,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAEvE,IAAI,MAAM,GAAgD,IAAI,CAAA;IAC9D,IAAI,QAAQ,GAAyD,IAAI,CAAA;IAEzE,KAAK,UAAU,QAAQ,CAAC,MAAoB;QAC1C,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,sBAAsB;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACzF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,SAAS,CAAgB,GAAG,OAAO,wBAAwB,EAAE;gBACtE,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE;gBACjC,MAAM;gBACN,SAAS;aACV,CAAC;iBACC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACZ,MAAM,KAAK,GAAG,GAAG,EAAE,YAAY,CAAA;gBAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACpD,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,6CAA6C,EAAE;wBAC5E,QAAQ,EAAE,IAAI,CAAC,IAAI;qBACpB,CAAC,CAAA;gBACJ,CAAC;gBACD,iEAAiE;gBACjE,iDAAiD;gBACjD,MAAM,GAAG,GAAG,GAAG,EAAE,UAAU,CAAA;gBAC3B,MAAM,SAAS,GACb,OAAO,GAAG,KAAK,QAAQ;oBACrB,CAAC,CAAC,GAAG,GAAG,aAAa;wBACnB,CAAC,CAAC,GAAG,GAAG,IAAI;wBACZ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI;oBAC3B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAA;gBAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;YAC7B,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC,CAAC,CAAA;QACN,CAAC;QACD,MAAM,GAAG,MAAM,QAAQ,CAAA;QACvB,OAAO,MAAM,CAAC,KAAK,CAAA;IACrB,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,CAAS,EACT,OAA0C,EAC1C,OAAgB;QAEhB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC7C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAU,GAAG,OAAO,sBAAsB,EAAE;gBACrE,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;gBAC7C,IAAI,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;gBAC3F,MAAM,EAAE,OAAO,EAAE,MAAM;gBACvB,SAAS;aACV,CAAC,CAAA;YACF,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACvE,MAAM,GAAG,IAAI,CAAA,CAAC,mDAAmD;gBACjE,OAAO,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;YACvC,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO;YAC5B,MAAM,MAAM,GAAiB,EAAE,CAAA;YAC/B,KAAK,IAAI,SAAS,GAAG,MAAM,EAAE,SAAS,GAAG,CAAC,GAAI,CAAC;gBAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;gBAC9C,MAAM,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;gBAClD,SAAS,IAAI,CAAC,CAAA;YAChB,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACxD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/qrandom.d.ts

@@ -0,0 +1,12 @@
+import type { EntropyProvider } from '../types.js';
+export interface QrandomIoOptions {
+    fetch?: typeof fetch;
+    baseUrl?: string;
+}
+/**
+ * qrandom.io — free, keyless QRNG backed by ID Quantique Quantis hardware.
+ * Responses are Falcon-512-signed by the service (signature not verified
+ * here in v1). Anonymous operator: fine in a mix, not as a trust anchor.
+ */
+export declare function qrandomIo(opts?: QrandomIoOptions): EntropyProvider;
+//# sourceMappingURL=qrandom.d.ts.map

package/dist/providers/qrandom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qrandom.d.ts","sourceRoot":"","sources":["../../src/providers/qrandom.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAWrE,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAMD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,GAAE,gBAAqB,GAAG,eAAe,CAqBtE"}

package/dist/providers/qrandom.js

@@ -0,0 +1,39 @@
+import { concatBytes } from '../internal/bytes.js';
+import { fetchJson } from '../internal/http.js';
+import { defineProvider } from '../internal/provider.js';
+import { byteArrayFrom } from '../internal/validate.js';
+const INFO = Object.freeze({
+    name: 'qrandom.io',
+    kind: 'qrng',
+    privacy: 'private',
+});
+// Undocumented cap — stay at a polite request size.
+const MAX_PER_REQUEST = 1000;
+const DEFAULT_BASE_URL = 'https://qrandom.io/api/random/ints';
+/**
+ * qrandom.io — free, keyless QRNG backed by ID Quantique Quantis hardware.
+ * Responses are Falcon-512-signed by the service (signature not verified
+ * here in v1). Anonymous operator: fine in a mix, not as a trust anchor.
+ */
+export function qrandomIo(opts = {}) {
+    const { baseUrl = DEFAULT_BASE_URL, fetch: fetchImpl } = opts;
+    return defineProvider({
+        ...INFO,
+        async getBytes(length, reqOpts) {
+            const chunks = [];
+            for (let remaining = length; remaining > 0;) {
+                const n = Math.min(MAX_PER_REQUEST, remaining);
+                const query = new URLSearchParams({ n: String(n), min: '0', max: '255' });
+                const res = await fetchJson(`${baseUrl}?${query}`, {
+                    provider: INFO.name,
+                    signal: reqOpts?.signal,
+                    fetchImpl,
+                });
+                chunks.push(byteArrayFrom(res?.numbers, n, INFO.name));
+                remaining -= n;
+            }
+            return { bytes: concatBytes(chunks), sources: [INFO] };
+        },
+    });
+}
+//# sourceMappingURL=qrandom.js.map

package/dist/providers/qrandom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qrandom.js","sourceRoot":"","sources":["../../src/providers/qrandom.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAGvD,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;CACnB,CAAC,CAAA;AACF,oDAAoD;AACpD,MAAM,eAAe,GAAG,IAAI,CAAA;AAC5B,MAAM,gBAAgB,GAAG,oCAAoC,CAAA;AAW7D;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,OAAyB,EAAE;IACnD,MAAM,EAAE,OAAO,GAAG,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAE7D,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO;YAC5B,MAAM,MAAM,GAAiB,EAAE,CAAA;YAC/B,KAAK,IAAI,SAAS,GAAG,MAAM,EAAE,SAAS,GAAG,CAAC,GAAI,CAAC;gBAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;gBAC9C,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;gBACzE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAkB,GAAG,OAAO,IAAI,KAAK,EAAE,EAAE;oBAClE,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,SAAS;iBACV,CAAC,CAAA;gBACF,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;gBACtD,SAAS,IAAI,CAAC,CAAA;YAChB,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACxD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}