VSCode Password Generator

Purpose & User Intent: The VSCode Password Generator solves the need for quick, secure, project-scoped credentials in development environments. Target users include developers, DevOps engineers, and CI workflows requiring non-replicable passwords for configs, extensions, or local secrets. When to use: prior to configuring a new project or updating credentials in source-controlled files. Core Logic & Features: Domain capabilities include length control, charset selection, and optional exclusion of ambiguous characters. Required features: length between 8–128, at least one character from each selected class when enforced, cryptographic randomness. Optional/advanced features: enforcement of minimum counts per class, password history, and export to clipboard or config-ready formats. Inputs & Outputs: Inputs include length (integer, units: characters), include_upper (bool), include_lower (bool), include_digits (bool), include_symbols (bool), exclude_ambiguous (bool). Output: generated_password (string), entropy_estimate (optional number, bits). Validation: at least one class selected; length must be within bounds. Algorithms & Calculations: Uses cryptographically secure RNG: for browsers, window.crypto.getRandomValues; for Node, crypto.randomBytes; builds allowed charset string; if policy requires, ensures at least one char from each selected class; applies rejection sampling to satisfy constraints; computes approximate Shannon entropy. Error & Edge Cases: If no classes selected, or length outside 8–128, returns a domain error; if runtime RNG is unavailable, falls back to non-crypto RNG with warning; no data storage; no external data. Industry/Region & Localization: Works with ASCII, suitable for internationalized environments; not tied to specific locale; units: character count; no currency rules. Assumptions & Exclusions: Assumes client can securely handle generated values; does not integrate with vaults, SSO, or enterprise secret stores; no persistent storage or sharing of passwords.