Test: random string distribution bias

[danielgavrilov]

The random string generator is using a naive method and has a bias. It's probably best to use a library for this (like nanoid) but up to you how you'd like to handle it (I'm not sure if nanoid supports all the environments you need to support).

I have added some (Claude-generated) chi-squared distribution tests to demonstrate the bias (the tests pass when using nanoid).

To switch to nanoid:

pnpm install nanoid

+import { customAlphabet } from "nanoid"

+		return customAlphabet(characterSet)(length);
-
-		const charArray = new Uint8Array(length);
-		getRandomValues(charArray);
-
-		let result = "";
-		for (let i = 0; i < length; i++) {
-			const index = charArray[i] % charSetLength;
-			result += characterSet[index];
-		}
-
-		return result;