@mindpeeker/entropy 0.1.0

package/dist/providers/randao.d.ts

@@ -0,0 +1,14 @@
+import type { EntropyProvider } from '../types.js';
+export interface RandaoOptions {
+    fetch?: typeof fetch;
+    baseUrl?: string;
+    pollIntervalMs?: number;
+}
+/**
+ * Ethereum beacon-chain RANDAO mix via a keyless public node. PUBLIC
+ * crypto-beacon randomness — the block proposer can bias roughly one bit per
+ * slot by withholding, so treat it as auditable public randomness for
+ * commitments and mixing, never as a private entropy source.
+ */
+export declare function randao(opts?: RandaoOptions): EntropyProvider;
+//# sourceMappingURL=randao.d.ts.map

package/dist/providers/randao.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"randao.d.ts","sourceRoot":"","sources":["../../src/providers/randao.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAarE,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAUD;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,IAAI,GAAE,aAAkB,GAAG,eAAe,CA8EhE"}

package/dist/providers/randao.js

@@ -0,0 +1,81 @@
+import { EntropyError } from '../errors.js';
+import { concatBytes } from '../internal/bytes.js';
+import { fetchJson } from '../internal/http.js';
+import { defineProvider } from '../internal/provider.js';
+import { beaconStream } from '../internal/stream.js';
+import { bytesFromHexField } from '../internal/validate.js';
+const INFO = Object.freeze({
+    name: 'randao',
+    kind: 'beacon',
+    privacy: 'public',
+});
+const MIX_BYTES = 32;
+const DEFAULT_BASE_URL = 'https://ethereum-beacon-api.publicnode.com';
+const SLOTS_PER_EPOCH = 32;
+// One slot every 12 seconds.
+const DEFAULT_POLL_INTERVAL_MS = 12_000;
+/**
+ * Ethereum beacon-chain RANDAO mix via a keyless public node. PUBLIC
+ * crypto-beacon randomness — the block proposer can bias roughly one bit per
+ * slot by withholding, so treat it as auditable public randomness for
+ * commitments and mixing, never as a private entropy source.
+ */
+export function randao(opts = {}) {
+    const { baseUrl = DEFAULT_BASE_URL, pollIntervalMs = DEFAULT_POLL_INTERVAL_MS, fetch: fetchImpl, } = opts;
+    async function fetchMix(query, signal) {
+        const res = await fetchJson(`${baseUrl}/eth/v1/beacon/states/head/randao${query}`, { provider: INFO.name, signal, fetchImpl });
+        const randaoHex = res?.data?.randao;
+        if (typeof randaoHex !== 'string' || !randaoHex.startsWith('0x')) {
+            throw new EntropyError('bad_response', 'missing randao mix', { provider: INFO.name });
+        }
+        return { hex: randaoHex, bytes: bytesFromHexField(randaoHex.slice(2), MIX_BYTES, INFO.name) };
+    }
+    async function fetchHeadEpoch(signal) {
+        const res = await fetchJson(`${baseUrl}/eth/v1/beacon/headers/head`, {
+            provider: INFO.name,
+            signal,
+            fetchImpl,
+        });
+        const slot = Number(res?.data?.header?.message?.slot);
+        if (!Number.isInteger(slot)) {
+            throw new EntropyError('bad_response', 'missing head slot', { provider: INFO.name });
+        }
+        return Math.floor(slot / SLOTS_PER_EPOCH);
+    }
+    return defineProvider({
+        ...INFO,
+        defaultChunkBytes: MIX_BYTES,
+        async getBytes(length, reqOpts) {
+            const mixesNeeded = Math.ceil(length / MIX_BYTES);
+            const chunks = [(await fetchMix('', reqOpts?.signal)).bytes];
+            if (mixesNeeded > 1) {
+                // Historical mixes are equally public — walk epochs backwards.
+                const headEpoch = await fetchHeadEpoch(reqOpts?.signal);
+                for (let i = 1; i < mixesNeeded; i++) {
+                    const epoch = headEpoch - i;
+                    if (epoch < 0) {
+                        throw new EntropyError('insufficient_entropy', 'not enough epochs for request', {
+                            provider: INFO.name,
+                        });
+                    }
+                    chunks.push((await fetchMix(`?epoch=${epoch}`, reqOpts?.signal)).bytes);
+                }
+            }
+            return { bytes: concatBytes(chunks).slice(0, length), sources: [INFO] };
+        },
+        stream(streamOpts = {}) {
+            // no numeric round id on this endpoint — dedupe by value change
+            let lastHex = '';
+            let seq = 0;
+            return beaconStream(async (signal) => {
+                const mix = await fetchMix('', signal);
+                if (mix.hex !== lastHex) {
+                    lastHex = mix.hex;
+                    seq++;
+                }
+                return { id: seq, bytes: mix.bytes };
+            }, pollIntervalMs, MIX_BYTES, INFO.name, streamOpts);
+        },
+    });
+}
+//# sourceMappingURL=randao.js.map

package/dist/providers/randao.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"randao.js","sourceRoot":"","sources":["../../src/providers/randao.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAG3D,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,QAAQ;CAClB,CAAC,CAAA;AACF,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,gBAAgB,GAAG,4CAA4C,CAAA;AACrE,MAAM,eAAe,GAAG,EAAE,CAAA;AAC1B,6BAA6B;AAC7B,MAAM,wBAAwB,GAAG,MAAM,CAAA;AAgBvC;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,OAAsB,EAAE;IAC7C,MAAM,EACJ,OAAO,GAAG,gBAAgB,EAC1B,cAAc,GAAG,wBAAwB,EACzC,KAAK,EAAE,SAAS,GACjB,GAAG,IAAI,CAAA;IAER,KAAK,UAAU,QAAQ,CACrB,KAAa,EACb,MAAoB;QAEpB,MAAM,GAAG,GAAG,MAAM,SAAS,CACzB,GAAG,OAAO,oCAAoC,KAAK,EAAE,EACrD,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAC3C,CAAA;QACD,MAAM,SAAS,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,CAAA;QACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,oBAAoB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;IAC/F,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,MAAoB;QAChD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAiB,GAAG,OAAO,6BAA6B,EAAE;YACnF,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM;YACN,SAAS;SACV,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACtF,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,eAAe,CAAC,CAAA;IAC3C,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,iBAAiB,EAAE,SAAS;QAE5B,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO;YAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;YACjD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YAC5D,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,+DAA+D;gBAC/D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;oBACrC,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAA;oBAC3B,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBACd,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,+BAA+B,EAAE;4BAC9E,QAAQ,EAAE,IAAI,CAAC,IAAI;yBACpB,CAAC,CAAA;oBACJ,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBACzE,CAAC;YACH,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACzE,CAAC;QAED,MAAM,CAAC,UAAU,GAAG,EAAE;YACpB,gEAAgE;YAChE,IAAI,OAAO,GAAG,EAAE,CAAA;YAChB,IAAI,GAAG,GAAG,CAAC,CAAA;YACX,OAAO,YAAY,CACjB,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;gBACtC,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;oBACxB,OAAO,GAAG,GAAG,CAAC,GAAG,CAAA;oBACjB,GAAG,EAAE,CAAA;gBACP,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAA;YACtC,CAAC,EACD,cAAc,EACd,SAAS,EACT,IAAI,CAAC,IAAI,EACT,UAAU,CACX,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/random-org.d.ts

@@ -0,0 +1,13 @@
+import type { EntropyProvider } from '../types.js';
+export interface RandomOrgOptions {
+    /** RANDOM.ORG API key (free Developer tier: 1000 req/day, 250k bits/day). */
+    apiKey: string;
+    fetch?: typeof fetch;
+    baseUrl?: string;
+}
+/**
+ * RANDOM.ORG (atmospheric radio noise) via the JSON-RPC 4.0 Basic API's
+ * `generateBlobs`. Honors the server's `advisoryDelay` between requests.
+ */
+export declare function randomOrg(opts: RandomOrgOptions): EntropyProvider;
+//# sourceMappingURL=random-org.d.ts.map

package/dist/providers/random-org.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"random-org.d.ts","sourceRoot":"","sources":["../../src/providers/random-org.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAWrE,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAuBD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,eAAe,CAuDjE"}

package/dist/providers/random-org.js

@@ -0,0 +1,89 @@
+import { EntropyError } from '../errors.js';
+import { base64ToBytes, concatBytes } from '../internal/bytes.js';
+import { fetchJson } from '../internal/http.js';
+import { defineProvider } from '../internal/provider.js';
+import { MinIntervalGate } from '../internal/rate-limit.js';
+const INFO = Object.freeze({
+    name: 'random.org',
+    kind: 'trng',
+    privacy: 'private',
+});
+// generateBlobs caps a request at 2^20 bits total.
+const MAX_BYTES_PER_REQUEST = 131_072;
+const DEFAULT_BASE_URL = 'https://api.random.org/json-rpc/4/invoke';
+function rpcError(error) {
+    const code = error.code ?? 0;
+    const message = `RANDOM.ORG error ${code}: ${error.message ?? 'unknown'}`;
+    // Best-effort mapping of RANDOM.ORG's app-level codes: 400/401 are key
+    // problems, 402/403 are exhausted daily allowances.
+    if (code === 400 || code === 401)
+        return new EntropyError('auth', message, { provider: INFO.name });
+    if (code === 402 || code === 403) {
+        return new EntropyError('rate_limited', message, { provider: INFO.name });
+    }
+    return new EntropyError('bad_response', message, { provider: INFO.name });
+}
+/**
+ * RANDOM.ORG (atmospheric radio noise) via the JSON-RPC 4.0 Basic API's
+ * `generateBlobs`. Honors the server's `advisoryDelay` between requests.
+ */
+export function randomOrg(opts) {
+    if (!opts?.apiKey)
+        throw new TypeError('randomOrg({ apiKey }) requires a non-empty apiKey');
+    const { apiKey, baseUrl = DEFAULT_BASE_URL, fetch: fetchImpl } = opts;
+    const gate = new MinIntervalGate(0);
+    let nextId = 1;
+    return defineProvider({
+        ...INFO,
+        async getBytes(length, reqOpts) {
+            const chunks = [];
+            for (let remaining = length; remaining > 0;) {
+                const n = Math.min(MAX_BYTES_PER_REQUEST, remaining);
+                await gate.wait(reqOpts?.signal);
+                const res = await fetchJson(baseUrl, {
+                    provider: INFO.name,
+                    method: 'POST',
+                    body: {
+                        jsonrpc: '2.0',
+                        method: 'generateBlobs',
+                        params: { apiKey, n: 1, size: n * 8, format: 'base64' },
+                        id: nextId++,
+                    },
+                    signal: reqOpts?.signal,
+                    fetchImpl,
+                });
+                if (res?.error)
+                    throw rpcError(res.error);
+                const advisoryDelay = res?.result?.advisoryDelay;
+                if (typeof advisoryDelay === 'number' && advisoryDelay > 0)
+                    gate.defer(advisoryDelay);
+                const data = res?.result?.random?.data;
+                const blob = Array.isArray(data) ? data[0] : undefined;
+                if (typeof blob !== 'string') {
+                    throw new EntropyError('bad_response', 'missing blob in generateBlobs result', {
+                        provider: INFO.name,
+                    });
+                }
+                let bytes;
+                try {
+                    bytes = base64ToBytes(blob);
+                }
+                catch (error) {
+                    throw new EntropyError('bad_response', 'invalid base64 blob', {
+                        provider: INFO.name,
+                        cause: error,
+                    });
+                }
+                if (bytes.length !== n) {
+                    throw new EntropyError('bad_response', `expected ${n} bytes, got ${bytes.length}`, {
+                        provider: INFO.name,
+                    });
+                }
+                chunks.push(bytes);
+                remaining -= n;
+            }
+            return { bytes: concatBytes(chunks), sources: [INFO] };
+        },
+    });
+}
+//# sourceMappingURL=random-org.js.map

package/dist/providers/random-org.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"random-org.js","sourceRoot":"","sources":["../../src/providers/random-org.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAG3D,MAAM,IAAI,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;CACnB,CAAC,CAAA;AACF,mDAAmD;AACnD,MAAM,qBAAqB,GAAG,OAAO,CAAA;AACrC,MAAM,gBAAgB,GAAG,0CAA0C,CAAA;AAiBnE,SAAS,QAAQ,CAAC,KAA0C;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,CAAA;IAC5B,MAAM,OAAO,GAAG,oBAAoB,IAAI,KAAK,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,CAAA;IACzE,uEAAuE;IACvE,oDAAoD;IACpD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;QAC9B,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACnE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjC,OAAO,IAAI,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,IAAI,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAsB;IAC9C,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAA;IAC3F,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IACrE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,CAAA;IACnC,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO;YAC5B,MAAM,MAAM,GAAiB,EAAE,CAAA;YAC/B,KAAK,IAAI,SAAS,GAAG,MAAM,EAAE,SAAS,GAAG,CAAC,GAAI,CAAC;gBAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAA;gBACpD,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBAChC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAc,OAAO,EAAE;oBAChD,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,eAAe;wBACvB,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE;wBACvD,EAAE,EAAE,MAAM,EAAE;qBACb;oBACD,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,SAAS;iBACV,CAAC,CAAA;gBACF,IAAI,GAAG,EAAE,KAAK;oBAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBACzC,MAAM,aAAa,GAAG,GAAG,EAAE,MAAM,EAAE,aAAa,CAAA;gBAChD,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,GAAG,CAAC;oBAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;gBACrF,MAAM,IAAI,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAA;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACtD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,sCAAsC,EAAE;wBAC7E,QAAQ,EAAE,IAAI,CAAC,IAAI;qBACpB,CAAC,CAAA;gBACJ,CAAC;gBACD,IAAI,KAAiB,CAAA;gBACrB,IAAI,CAAC;oBACH,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;gBAC7B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,qBAAqB,EAAE;wBAC5D,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,KAAK,EAAE,KAAK;qBACb,CAAC,CAAA;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,eAAe,KAAK,CAAC,MAAM,EAAE,EAAE;wBACjF,QAAQ,EAAE,IAAI,CAAC,IAAI;qBACpB,CAAC,CAAA;gBACJ,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBAClB,SAAS,IAAI,CAAC,CAAA;YAChB,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;QACxD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/providers/sdr.d.ts

@@ -0,0 +1,21 @@
+import { type ByteSource } from '../internal/byte-source.js';
+import type { ConditioningOptions } from '../internal/condition.js';
+import type { EntropyProvider } from '../types.js';
+export interface SdrOptions extends ConditioningOptions {
+    /** Raw IQ bytes, e.g. from rtlSdrSource (@mindpeeker/entropy/node). REQUIRED. */
+    source: ByteSource;
+    /** Von Neumann debiasing over the LSB stream (rtl-entropy prior art). Default true. */
+    debias?: boolean;
+    /** IQ bytes discarded at session start while tuner gain settles. Default 4096. */
+    warmupBytes?: number;
+}
+/** The 6 least significant bits of each raw IQ byte (top bits carry signal, not noise). */
+export declare function iqLsbBits(chunk: Uint8Array): number[];
+/**
+ * Software-defined-radio noise (RTL-SDR dongles): front-end thermal noise in
+ * the ADC's low bits, tuned to quiet spectrum at max manual gain. COMMUNITY-
+ * VERIFIED tier — RF injection attacks are demonstrated in the literature,
+ * so treat this as a mixing source, never a sole root of trust.
+ */
+export declare function sdrEntropy(opts: SdrOptions): EntropyProvider;
+//# sourceMappingURL=sdr.d.ts.map

package/dist/providers/sdr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdr.d.ts","sourceRoot":"","sources":["../../src/providers/sdr.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,UAAU,EAAiC,MAAM,4BAA4B,CAAA;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,WAAW,UAAW,SAAQ,mBAAmB;IACrD,iFAAiF;IACjF,MAAM,EAAE,UAAU,CAAA;IAClB,uFAAuF;IACvF,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,2FAA2F;AAC3F,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE,CAMrD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CAmD5D"}

package/dist/providers/sdr.js

@@ -0,0 +1,63 @@
+import { packBits, vonNeumann } from '../internal/bits.js';
+import { iterateBytes, persistentBytes } from '../internal/byte-source.js';
+import { sampledProvider } from '../internal/sampled.js';
+/** The 6 least significant bits of each raw IQ byte (top bits carry signal, not noise). */
+export function iqLsbBits(chunk) {
+    const bits = [];
+    for (const byte of chunk) {
+        for (let b = 5; b >= 0; b--)
+            bits.push((byte >> b) & 1);
+    }
+    return bits;
+}
+/**
+ * Software-defined-radio noise (RTL-SDR dongles): front-end thermal noise in
+ * the ADC's low bits, tuned to quiet spectrum at max manual gain. COMMUNITY-
+ * VERIFIED tier — RF injection attacks are demonstrated in the literature,
+ * so treat this as a mixing source, never a sole root of trust.
+ */
+export function sdrEntropy(opts) {
+    if (!opts?.source) {
+        throw new TypeError('sdrEntropy requires a { source } of raw IQ bytes — in Node use rtlSdrSource from @mindpeeker/entropy/node');
+    }
+    const { source, debias = true, warmupBytes = 4096 } = opts;
+    // The injected source is persistent: sessions read a shared view, warmup
+    // and bit extraction are applied once for the source's lifetime, and
+    // closing a session never closes the dongle stream (its owner does).
+    const shared = persistentBytes((async function* extracted() {
+        let skipped = 0;
+        let leftover = [];
+        for await (const chunk of iterateBytes(source)) {
+            let iq = chunk;
+            if (skipped < warmupBytes) {
+                const need = warmupBytes - skipped;
+                if (chunk.length <= need) {
+                    skipped += chunk.length;
+                    continue;
+                }
+                skipped = warmupBytes;
+                iq = chunk.slice(need);
+            }
+            let bits = iqLsbBits(iq);
+            if (debias)
+                bits = vonNeumann(bits);
+            const [packed, rest] = packBits(leftover.concat(bits));
+            leftover = rest;
+            if (packed.length > 0)
+                yield packed;
+        }
+    })());
+    async function* open(signal) {
+        yield* shared(signal);
+    }
+    return sampledProvider({
+        name: 'sdr',
+        kind: 'trng',
+        privacy: 'private',
+        open,
+        defaultMinEntropyPerSample: 1,
+        defaultSafetyFactor: 4,
+        defaultTimeoutMs: 30_000,
+    }, opts);
+}
+//# sourceMappingURL=sdr.js.map

package/dist/providers/sdr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdr.js","sourceRoot":"","sources":["../../src/providers/sdr.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAmB,YAAY,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE3F,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAYxD,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,SAAS,CACjB,2GAA2G,CAC5G,CAAA;IACH,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,WAAW,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IAE1D,yEAAyE;IACzE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,MAAM,GAAG,eAAe,CAC5B,CAAC,KAAK,SAAS,CAAC,CAAC,SAAS;QACxB,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,IAAI,QAAQ,GAAa,EAAE,CAAA;QAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,IAAI,EAAE,GAAG,KAAK,CAAA;YACd,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,WAAW,GAAG,OAAO,CAAA;gBAClC,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;oBACzB,OAAO,IAAI,KAAK,CAAC,MAAM,CAAA;oBACvB,SAAQ;gBACV,CAAC;gBACD,OAAO,GAAG,WAAW,CAAA;gBACrB,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACxB,CAAC;YACD,IAAI,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;YACxB,IAAI,MAAM;gBAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;YACnC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;YACtD,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,MAAM,CAAA;QACrC,CAAC;IACH,CAAC,CAAC,EAAE,CACL,CAAA;IAED,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,MAAoB;QACvC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC;IAED,OAAO,eAAe,CACpB;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,SAAS;QAClB,IAAI;QACJ,0BAA0B,EAAE,CAAC;QAC7B,mBAAmB,EAAE,CAAC;QACtB,gBAAgB,EAAE,MAAM;KACzB,EACD,IAAI,CACL,CAAA;AACH,CAAC"}

package/dist/providers/sensor.d.ts

@@ -0,0 +1,24 @@
+import type { ConditioningOptions } from '../internal/condition.js';
+import type { EntropyProvider } from '../types.js';
+export interface SensorSource {
+    /** One reading per motion event: available axes, e.g. [ax, ay, az, gx, gy, gz]. */
+    samples(signal?: AbortSignal): AsyncIterable<Float64Array | number[]>;
+    close?(): void | Promise<void>;
+}
+export interface SensorOptions extends ConditioningOptions {
+    /** Injected readings (tests, non-browser runtimes). Default: browser motion sensors. */
+    source?: SensorSource;
+    /** Generic Sensor API frequency hint. Default 60. */
+    frequency?: number;
+    /** Readings discarded at session start. Default 30. */
+    warmupSamples?: number;
+}
+/** One byte per axis: scale the reading and keep the low byte. */
+export declare function sensorReadingBytes(reading: ArrayLike<number>, scale?: number): Uint8Array;
+/**
+ * Motion-sensor noise (accelerometer/gyroscope). Browser readings are
+ * privacy-quantized, so the credited entropy is deliberately tiny — this is a
+ * breadth source for phones/tablets, best mixed via `xorMix`, not a fast one.
+ */
+export declare function sensorEntropy(opts?: SensorOptions): EntropyProvider;
+//# sourceMappingURL=sensor.d.ts.map

package/dist/providers/sensor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensor.d.ts","sourceRoot":"","sources":["../../src/providers/sensor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,WAAW,YAAY;IAC3B,mFAAmF;IACnF,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,YAAY,GAAG,MAAM,EAAE,CAAC,CAAA;IACrE,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/B;AAED,MAAM,WAAW,aAAc,SAAQ,mBAAmB;IACxD,wFAAwF;IACxF,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,uDAAuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,kEAAkE;AAClE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,SAAM,GAAG,UAAU,CAMtF;AAgFD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,GAAE,aAAkB,GAAG,eAAe,CAwCvE"}

package/dist/providers/sensor.js

@@ -0,0 +1,119 @@
+import { packBits } from '../internal/bits.js';
+import { sampledProvider } from '../internal/sampled.js';
+/** One byte per axis: scale the reading and keep the low byte. */
+export function sensorReadingBytes(reading, scale = 100) {
+    const out = new Uint8Array(reading.length);
+    for (let i = 0; i < reading.length; i++) {
+        out[i] = Math.round(reading[i] * scale) & 0xff;
+    }
+    return out;
+}
+function browserSensorSource(frequency) {
+    return {
+        async *samples(signal) {
+            const g = globalThis;
+            const queue = [];
+            let notify = null;
+            const push = (reading) => {
+                queue.push(reading);
+                notify?.();
+            };
+            let cleanup;
+            if (g.Accelerometer) {
+                // Generic Sensor API (Chromium): readings are quantized to 0.1 m/s² /
+                // 0.1 °/s — the conservative credit accounts for that.
+                const sensors = [new g.Accelerometer({ frequency })];
+                if (g.Gyroscope)
+                    sensors.push(new g.Gyroscope({ frequency }));
+                for (const sensor of sensors) {
+                    sensor.addEventListener('reading', () => {
+                        push(sensors.flatMap((s) => [s.x ?? 0, s.y ?? 0, s.z ?? 0]));
+                    });
+                    sensor.start();
+                }
+                cleanup = () => {
+                    for (const sensor of sensors)
+                        sensor.stop();
+                };
+            }
+            else if (typeof g.addEventListener === 'function' && 'DeviceMotionEvent' in g) {
+                // iOS requires an explicit permission request from a user gesture.
+                await g.DeviceMotionEvent?.requestPermission?.();
+                const onMotion = (event) => {
+                    const a = event.accelerationIncludingGravity;
+                    const r = event.rotationRate;
+                    push([a?.x ?? 0, a?.y ?? 0, a?.z ?? 0, r?.alpha ?? 0, r?.beta ?? 0, r?.gamma ?? 0]);
+                };
+                g.addEventListener('devicemotion', onMotion);
+                cleanup = () => g.removeEventListener?.('devicemotion', onMotion);
+            }
+            else {
+                throw new TypeError('sensorEntropy: no motion sensors in this runtime — pass a { source }');
+            }
+            try {
+                while (true) {
+                    if (signal?.aborted)
+                        throw signal.reason;
+                    const reading = queue.shift();
+                    if (reading) {
+                        yield reading;
+                    }
+                    else {
+                        await new Promise((resolve) => {
+                            notify = resolve;
+                        });
+                        notify = null;
+                    }
+                }
+            }
+            finally {
+                cleanup();
+            }
+        },
+    };
+}
+/**
+ * Motion-sensor noise (accelerometer/gyroscope). Browser readings are
+ * privacy-quantized, so the credited entropy is deliberately tiny — this is a
+ * breadth source for phones/tablets, best mixed via `xorMix`, not a fast one.
+ */
+export function sensorEntropy(opts = {}) {
+    const { frequency = 60, warmupSamples = 30 } = opts;
+    const source = opts.source ?? browserSensorSource(frequency);
+    async function* open(signal) {
+        let skipped = 0;
+        let leftover = [];
+        for await (const reading of source.samples(signal)) {
+            if (signal?.aborted)
+                throw signal.reason ?? new DOMException('aborted', 'AbortError');
+            if (skipped < warmupSamples) {
+                skipped++;
+                continue;
+            }
+            const bytes = sensorReadingBytes(reading);
+            const bits = leftover;
+            for (const byte of bytes) {
+                for (let b = 7; b >= 0; b--)
+                    bits.push((byte >> b) & 1);
+            }
+            const [packed, rest] = packBits(bits);
+            leftover = rest;
+            if (packed.length > 0)
+                yield packed;
+        }
+    }
+    return sampledProvider({
+        name: 'sensor',
+        kind: 'trng',
+        privacy: 'private',
+        open,
+        // ≤1 bit per quantized reading (≈6 raw bytes) → 0.25 b/B is already generous
+        defaultMinEntropyPerSample: 0.25,
+        // …but health-test at H=1 so a frozen device's repeating pattern trips
+        // the APT instead of sliding under a disabled cutoff
+        defaultHealthMinEntropyPerSample: 1,
+        defaultSafetyFactor: 4,
+        defaultTimeoutMs: 60_000, // permission prompt + slow accumulation
+    }, opts);
+}
+//# sourceMappingURL=sensor.js.map

package/dist/providers/sensor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensor.js","sourceRoot":"","sources":["../../src/providers/sensor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAkBxD,kEAAkE;AAClE,MAAM,UAAU,kBAAkB,CAAC,OAA0B,EAAE,KAAK,GAAG,GAAG;IACxE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAE,OAAO,CAAC,CAAC,CAAY,GAAG,KAAK,CAAC,GAAG,IAAI,CAAA;IAC5D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAaD,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO;QACL,KAAK,CAAC,CAAC,OAAO,CAAC,MAAoB;YACjC,MAAM,CAAC,GAAG,UAMT,CAAA;YAED,MAAM,KAAK,GAAe,EAAE,CAAA;YAC5B,IAAI,MAAM,GAAwB,IAAI,CAAA;YACtC,MAAM,IAAI,GAAG,CAAC,OAAiB,EAAE,EAAE;gBACjC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACnB,MAAM,EAAE,EAAE,CAAA;YACZ,CAAC,CAAA;YAED,IAAI,OAAmB,CAAA;YACvB,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;gBACpB,sEAAsE;gBACtE,uDAAuD;gBACvD,MAAM,OAAO,GAAwB,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;gBACzE,IAAI,CAAC,CAAC,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;gBAC7D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE;wBACtC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;oBAC9D,CAAC,CAAC,CAAA;oBACF,MAAM,CAAC,KAAK,EAAE,CAAA;gBAChB,CAAC;gBACD,OAAO,GAAG,GAAG,EAAE;oBACb,KAAK,MAAM,MAAM,IAAI,OAAO;wBAAE,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC7C,CAAC,CAAA;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,UAAU,IAAI,mBAAmB,IAAI,CAAC,EAAE,CAAC;gBAChF,mEAAmE;gBACnE,MAAM,CAAC,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,EAAE,CAAA;gBAChD,MAAM,QAAQ,GAAG,CAAC,KAAwB,EAAE,EAAE;oBAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,4BAA4B,CAAA;oBAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,YAAY,CAAA;oBAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAA;gBACrF,CAAC,CAAA;gBACD,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,QAAyB,CAAC,CAAA;gBAC7D,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,cAAc,EAAE,QAAyB,CAAC,CAAA;YACpF,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,SAAS,CAAC,sEAAsE,CAAC,CAAA;YAC7F,CAAC;YAED,IAAI,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;oBACZ,IAAI,MAAM,EAAE,OAAO;wBAAE,MAAM,MAAM,CAAC,MAAM,CAAA;oBACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;oBAC7B,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,OAAO,CAAA;oBACf,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;4BAClC,MAAM,GAAG,OAAO,CAAA;wBAClB,CAAC,CAAC,CAAA;wBACF,MAAM,GAAG,IAAI,CAAA;oBACf,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAsB,EAAE;IACpD,MAAM,EAAE,SAAS,GAAG,EAAE,EAAE,aAAa,GAAG,EAAE,EAAE,GAAG,IAAI,CAAA;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAE5D,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,MAAoB;QACvC,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,IAAI,QAAQ,GAAa,EAAE,CAAA;QAC3B,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;YACrF,IAAI,OAAO,GAAG,aAAa,EAAE,CAAC;gBAC5B,OAAO,EAAE,CAAA;gBACT,SAAQ;YACV,CAAC;YACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;YACzC,MAAM,IAAI,GAAa,QAAQ,CAAA;YAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACzD,CAAC;YACD,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;YACrC,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,MAAM,CAAA;QACrC,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CACpB;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,SAAS;QAClB,IAAI;QACJ,6EAA6E;QAC7E,0BAA0B,EAAE,IAAI;QAChC,uEAAuE;QACvE,qDAAqD;QACrD,gCAAgC,EAAE,CAAC;QACnC,mBAAmB,EAAE,CAAC;QACtB,gBAAgB,EAAE,MAAM,EAAE,wCAAwC;KACnE,EACD,IAAI,CACL,CAAA;AACH,CAAC"}

package/dist/providers/serial.d.ts

@@ -0,0 +1,35 @@
+import { type ByteSource } from '../internal/byte-source.js';
+import type { ConditioningOptions } from '../internal/condition.js';
+import type { EntropyProvider } from '../types.js';
+/** The Web Serial SerialPort surface this provider needs (injectable). */
+export interface SerialPortLike {
+    open(options: {
+        baudRate: number;
+    }): Promise<void>;
+    close(): Promise<void>;
+    readable: ReadableStream<Uint8Array> | null;
+    writable?: WritableStream<Uint8Array> | null;
+}
+export interface SerialOptions extends ConditioningOptions {
+    /** Web Serial port (navigator.serial.requestPort()); opened/closed per session. */
+    port?: SerialPortLike;
+    /** Pre-opened byte stream: Node serialport instance, nodeSerialSource, tests. */
+    source?: ByteSource;
+    /** Default 921_600 — the AetherOnePi ESP32 firmware rate. Only used with `port`. */
+    baudRate?: number;
+    /** Bytes discarded at session start (stale OS buffers). Default 256. */
+    warmupBytes?: number;
+    /** Written once after open — device-init quirk hook (e.g. OneRNG). Needs `port`. */
+    init?: Uint8Array;
+    /** Attribution label, e.g. 'esp32' or 'truerng'. Default 'serial'. */
+    name?: string;
+}
+/**
+ * Hardware TRNG behind a serial byte stream: an ESP32 running the AetherOnePi
+ * firmware (raw 921600-baud stream of esp_fill_random bytes), a TrueRNG v3,
+ * a OneRNG (pass its init command via `init`), or any injected ByteSource.
+ * Device bytes are the raw samples — `conditioning: 'raw'` is a health-tested
+ * passthrough of exactly what the hardware emitted.
+ */
+export declare function serialEntropy(opts: SerialOptions): EntropyProvider;
+//# sourceMappingURL=serial.d.ts.map

package/dist/providers/serial.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serial.d.ts","sourceRoot":"","sources":["../../src/providers/serial.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAiC,MAAM,4BAA4B,CAAA;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;IAC3C,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;CAC7C;AAED,MAAM,WAAW,aAAc,SAAQ,mBAAmB;IACxD,mFAAmF;IACnF,IAAI,CAAC,EAAE,cAAc,CAAA;IACrB,iFAAiF;IACjF,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe,CAwElE"}

package/dist/providers/serial.js

@@ -0,0 +1,78 @@
+import { iterateBytes, persistentBytes } from '../internal/byte-source.js';
+import { sampledProvider } from '../internal/sampled.js';
+/**
+ * Hardware TRNG behind a serial byte stream: an ESP32 running the AetherOnePi
+ * firmware (raw 921600-baud stream of esp_fill_random bytes), a TrueRNG v3,
+ * a OneRNG (pass its init command via `init`), or any injected ByteSource.
+ * Device bytes are the raw samples — `conditioning: 'raw'` is a health-tested
+ * passthrough of exactly what the hardware emitted.
+ */
+export function serialEntropy(opts) {
+    const { port, source, baudRate = 921_600, warmupBytes = 256, init, name = 'serial' } = opts;
+    if ((port === undefined) === (source === undefined)) {
+        throw new TypeError('serialEntropy requires exactly one of { port } or { source }');
+    }
+    if (init && !port) {
+        throw new TypeError('serialEntropy: init commands need a { port } (a raw source has no writer)');
+    }
+    async function* skipWarmup(bytes) {
+        let skipped = 0;
+        for await (const chunk of bytes) {
+            if (skipped < warmupBytes) {
+                const need = warmupBytes - skipped;
+                if (chunk.length <= need) {
+                    skipped += chunk.length;
+                    continue;
+                }
+                skipped = warmupBytes;
+                yield chunk.slice(need);
+            }
+            else {
+                yield chunk;
+            }
+        }
+    }
+    // Injected sources are persistent: sessions read from one shared iterator,
+    // warmup is applied once for the source's lifetime, and closing a session
+    // never closes the source (its owner does). Ports reopen per session.
+    const sharedSource = source
+        ? persistentBytes((async function* warmed() {
+            yield* skipWarmup(iterateBytes(source));
+        })())
+        : null;
+    async function* open(signal) {
+        if (port) {
+            await port.open({ baudRate });
+            try {
+                if (init && port.writable) {
+                    const writer = port.writable.getWriter();
+                    try {
+                        await writer.write(init);
+                    }
+                    finally {
+                        writer.releaseLock();
+                    }
+                }
+                if (!port.readable) {
+                    throw new TypeError('serialEntropy: port has no readable stream after open()');
+                }
+                yield* skipWarmup(iterateBytes(port.readable, signal));
+            }
+            finally {
+                await port.close().catch(() => { });
+            }
+        }
+        else {
+            yield* sharedSource(signal);
+        }
+    }
+    return sampledProvider({
+        name,
+        kind: 'trng',
+        privacy: 'private',
+        open,
+        defaultMinEntropyPerSample: 7,
+        defaultSafetyFactor: 2,
+    }, opts);
+}
+//# sourceMappingURL=serial.js.map

package/dist/providers/serial.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serial.js","sourceRoot":"","sources":["../../src/providers/serial.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,YAAY,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE3F,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AA0BxD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAA;IAC3F,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,SAAS,CAAC,2EAA2E,CAAC,CAAA;IAClG,CAAC;IAED,KAAK,SAAS,CAAC,CAAC,UAAU,CAAC,KAAgC;QACzD,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAChC,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,WAAW,GAAG,OAAO,CAAA;gBAClC,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;oBACzB,OAAO,IAAI,KAAK,CAAC,MAAM,CAAA;oBACvB,SAAQ;gBACV,CAAC;gBACD,OAAO,GAAG,WAAW,CAAA;gBACrB,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACzB,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,YAAY,GAAG,MAAM;QACzB,CAAC,CAAC,eAAe,CACb,CAAC,KAAK,SAAS,CAAC,CAAC,MAAM;YACrB,KAAK,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;QACzC,CAAC,CAAC,EAAE,CACL;QACH,CAAC,CAAC,IAAI,CAAA;IAER,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,MAAoB;QACvC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC7B,IAAI,CAAC;gBACH,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAA;oBACxC,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;oBAC1B,CAAC;4BAAS,CAAC;wBACT,MAAM,CAAC,WAAW,EAAE,CAAA;oBACtB,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACnB,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAA;gBAChF,CAAC;gBACD,KAAK,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;YACxD,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,CAAE,YAAiD,CAAC,MAAM,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CACpB;QACE,IAAI;QACJ,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,SAAS;QAClB,IAAI;QACJ,0BAA0B,EAAE,CAAC;QAC7B,mBAAmB,EAAE,CAAC;KACvB,EACD,IAAI,CACL,CAAA;AACH,CAAC"}

package/dist/providers/solana.d.ts

@@ -0,0 +1,13 @@
+import type { EntropyProvider } from '../types.js';
+export interface SolanaBeaconOptions {
+    fetch?: typeof fetch;
+    url?: string;
+    pollIntervalMs?: number;
+}
+/**
+ * Solana latest blockhash as a PUBLIC crypto-beacon (fast ~400 ms slots).
+ * The slot leader influences block content, so treat it like every other
+ * chain beacon: auditable public randomness, never private entropy.
+ */
+export declare function solanaBeacon(opts?: SolanaBeaconOptions): EntropyProvider;
+//# sourceMappingURL=solana.d.ts.map

package/dist/providers/solana.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana.d.ts","sourceRoot":"","sources":["../../src/providers/solana.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAA;AAYrE,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAMD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,GAAE,mBAAwB,GAAG,eAAe,CAqE5E"}