@utilix-tech/mcp 0.29.0 → 0.31.0

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.31.0
+- Add `json_schema_to_typescript` tool: convert a JSON Schema document into TypeScript interfaces/types, reading `required`/`enum`/`oneOf`/`anyOf`/`allOf`/`$ref` directly instead of inferring from an example payload.
+- Add `estimate_password_entropy` tool: bits of entropy from a password's character pool, a strength label, and crack-time estimates across four guess-rate scenarios.
+
+## 0.30.0
+- Add `read_pdf_page_dimensions` tool: each page's MediaBox width/height (points and inches), rotation, and orientation, walking the Root -> Pages -> Kids tree and inheriting from ancestor nodes, plus a common paper size match (Letter, A4, etc.).
+- Add `parse_ipv6_address` tool: expand an IPv6 address to its full 8-group form or compress it to its RFC 5952 canonical shortest form, classify its address type, and handle an embedded IPv4 suffix or zone ID.
+
 ## 0.29.0
 - Add `read_video_info` tool: duration, resolution, and video/audio codec identifiers from an MP4 (ISO BMFF moov box) or WebM (EBML/Matroska Segment) container header, with no frame decoding or transcoding.
 

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 144 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 148 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -75,7 +75,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 
 ## Tools
 
-### JSON (14 tools)
+### JSON (15 tools)
 | Tool | Description |
 |------|-------------|
 | `format_json` | Pretty-print and validate a JSON string |
@@ -92,6 +92,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `json_to_go` | Generate Go structs from JSON |
 | `json_to_python` | Generate Python dataclasses from JSON |
 | `json_to_zod` | Generate a Zod schema from JSON |
+| `json_schema_to_typescript` | Generate TypeScript interfaces/types from a JSON Schema document (reads required/enum/$ref directly) |
 
 ### Encoding (12 tools)
 | Tool | Description |
@@ -117,12 +118,13 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `bcrypt_hash` | Hash a password using bcrypt |
 | `bcrypt_verify` | Verify a password against a bcrypt hash |
 
-### Generators (5 tools)
+### Generators (6 tools)
 | Tool | Description |
 |------|-------------|
 | `generate_uuid` | Generate UUID v4 or v7 |
 | `generate_ulid` | Generate a ULID |
 | `generate_password` | Generate a secure random password |
+| `estimate_password_entropy` | Estimate a password's entropy in bits, strength label, and crack-time estimates |
 | `generate_qr` | Generate a QR code as an SVG string |
 | `generate_random_data` | Generate random mock data: names, emails, UUIDs, IPs, etc. |
 
@@ -177,7 +179,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `calculate_video_bitrate` | Calculate a video's file size from a bitrate and duration, or the bitrate needed to hit a target file size |
 | `calculate_rule_of_72` | Estimate years to double an investment from a rate, or the rate needed to double in a given number of years, via the Rule of 72 shortcut and the exact logarithmic result |
 
-### API / Network (11 tools)
+### API / Network (12 tools)
 | Tool | Description |
 |------|-------------|
 | `decode_jwt` | Decode a JWT: header, payload, and expiry |
@@ -191,6 +193,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `validate_robots_txt` | Validate a robots.txt file: User-agent groups, rules, and directive syntax |
 | `parse_user_agent` | Parse a browser User-Agent string into browser, engine, OS, and device type |
 | `build_cache_control` | Build and explain an HTTP Cache-Control response header from directives (max-age, no-store, immutable, etc.) |
+| `parse_ipv6_address` | Expand an IPv6 address to its full 8-group form or compress it to its RFC 5952 canonical shortest form, classify its address type, and handle an embedded IPv4 suffix or zone ID |
 
 ### Color (4 tools)
 | Tool | Description |
@@ -274,10 +277,11 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `read_exif_data` | Read camera make/model, orientation, timestamps, exposure settings, and GPS coordinates from a JPEG's EXIF data |
 | `read_ico_info` | Read how many images a .ico file embeds and each one's width, height, color depth, and size from its ICONDIR header |
 
-### PDF (1 tool)
+### PDF (2 tools)
 | Tool | Description |
 |------|-------------|
 | `read_pdf_metadata` | Read title, author, dates, page count, and encryption flag from a PDF's trailer/Info dictionary: no PDF rendering library required |
+| `read_pdf_page_dimensions` | List each page's MediaBox width/height (points and inches), rotation, and orientation, walking the Root -> Pages -> Kids tree: no PDF rendering library required |
 
 ### Audio (3 tools)
 | Tool | Description |

package/dist/index.js

@@ -2592,6 +2592,131 @@ server.tool("read_pdf_metadata", "Read PDF metadata (title, author, dates, page
   if ("error" in result) return errText(result);
   return text(JSON.stringify(result, null, 2));
 });
+var _PDF_COMMON_PAPER_SIZES = [
+  { name: "Letter", widthPt: 612, heightPt: 792 },
+  { name: "Legal", widthPt: 612, heightPt: 1008 },
+  { name: "Tabloid", widthPt: 792, heightPt: 1224 },
+  { name: "A3", widthPt: 842, heightPt: 1191 },
+  { name: "A4", widthPt: 595, heightPt: 842 },
+  { name: "A5", widthPt: 420, heightPt: 595 },
+  { name: "B5", widthPt: 499, heightPt: 709 }
+];
+function _matchPdfPaperSize(widthPt, heightPt) {
+  for (const size of _PDF_COMMON_PAPER_SIZES) {
+    const w = Math.abs(widthPt - size.widthPt) <= 1;
+    const h = Math.abs(heightPt - size.heightPt) <= 1;
+    const wSwapped = Math.abs(widthPt - size.heightPt) <= 1;
+    const hSwapped = Math.abs(heightPt - size.widthPt) <= 1;
+    if (w && h || wSwapped && hSwapped) return size.name;
+  }
+  return null;
+}
+function _parsePdfMediaBox(dict) {
+  const m = dict.match(/\/MediaBox\s*\[\s*(-?[\d.]+)\s+(-?[\d.]+)\s+(-?[\d.]+)\s+(-?[\d.]+)\s*\]/);
+  if (!m) return null;
+  return [Number(m[1]), Number(m[2]), Number(m[3]), Number(m[4])];
+}
+function _parsePdfRotate(dict) {
+  const m = dict.match(/\/Rotate\s+(-?\d+)/);
+  return m ? Number(m[1]) : null;
+}
+function _round2Pdf(n) {
+  return Math.round(n * 100) / 100;
+}
+function _buildPdfPageDimension(pageNumber, mediaBox, rotate) {
+  const rotation = (rotate % 360 + 360) % 360;
+  if (!mediaBox) {
+    return { pageNumber, widthPt: null, heightPt: null, widthIn: null, heightIn: null, rotation, orientation: null, paperSize: null };
+  }
+  const [llx, lly, urx, ury] = mediaBox;
+  let widthPt = Math.abs(urx - llx);
+  let heightPt = Math.abs(ury - lly);
+  if (rotation === 90 || rotation === 270) [widthPt, heightPt] = [heightPt, widthPt];
+  const orientation = widthPt === heightPt ? "square" : widthPt > heightPt ? "landscape" : "portrait";
+  return {
+    pageNumber,
+    widthPt: _round2Pdf(widthPt),
+    heightPt: _round2Pdf(heightPt),
+    widthIn: _round2Pdf(widthPt / 72),
+    heightIn: _round2Pdf(heightPt / 72),
+    rotation,
+    orientation,
+    paperSize: _matchPdfPaperSize(widthPt, heightPt)
+  };
+}
+function _walkPdfPageTree(objMap, nodeBody, inherited, visited, nodeKey, out) {
+  if (visited.has(nodeKey)) return;
+  visited.add(nodeKey);
+  const mediaBox = _parsePdfMediaBox(nodeBody) ?? inherited.mediaBox;
+  const rotateMatch = _parsePdfRotate(nodeBody);
+  const rotate = rotateMatch !== null ? rotateMatch : inherited.rotate;
+  if (/\/Type\s*\/Page(?!s)\b/.test(nodeBody)) {
+    out.push(_buildPdfPageDimension(out.length + 1, mediaBox, rotate));
+    return;
+  }
+  const kidsMatch = nodeBody.match(/\/Kids\s*\[([^\]]*)\]/);
+  if (!kidsMatch) return;
+  const kidRefs = [...kidsMatch[1].matchAll(/(\d+)\s+(\d+)\s+R/g)];
+  for (const ref of kidRefs) {
+    const key = `${ref[1]} ${ref[2]}`;
+    const body = objMap.get(key);
+    if (body) _walkPdfPageTree(objMap, body, { mediaBox, rotate }, visited, key, out);
+  }
+}
+function _readPdfPageDimensions(bytes) {
+  if (bytes.length < 8) return { error: "File too small to be a PDF" };
+  const latin1 = (b) => {
+    let out2 = "";
+    const CHUNK = 32768;
+    for (let i = 0; i < b.length; i += CHUNK) out2 += String.fromCharCode(...b.subarray(i, i + CHUNK));
+    return out2;
+  };
+  const header = latin1(bytes.subarray(0, 16));
+  const versionMatch = header.match(/%PDF-(\d\.\d)/);
+  if (!versionMatch) return { error: "Not a valid PDF file (missing %PDF header)" };
+  const version = versionMatch[1];
+  const text2 = latin1(bytes);
+  const objBlocks = [...text2.matchAll(/(\d+)\s+(\d+)\s+obj([\s\S]*?)endobj/g)];
+  const objMap = /* @__PURE__ */ new Map();
+  for (const b of objBlocks) objMap.set(`${b[1]} ${b[2]}`, b[3]);
+  const out = [];
+  const visited = /* @__PURE__ */ new Set();
+  let pagesRootBody = null;
+  const trailerMatches = [...text2.matchAll(/trailer\s*<<([\s\S]*?)>>/g)];
+  if (trailerMatches.length > 0) {
+    const trailer = trailerMatches[trailerMatches.length - 1][1];
+    const rootRef = trailer.match(/\/Root\s+(\d+)\s+(\d+)\s+R/);
+    if (rootRef) {
+      const catalogBody = objMap.get(`${rootRef[1]} ${rootRef[2]}`);
+      const pagesRef = catalogBody?.match(/\/Pages\s+(\d+)\s+(\d+)\s+R/);
+      if (pagesRef) pagesRootBody = objMap.get(`${pagesRef[1]} ${pagesRef[2]}`) ?? null;
+    }
+  }
+  if (!pagesRootBody) {
+    for (const b of objBlocks) {
+      if (/\/Type\s*\/Pages\b/.test(b[3]) && !/\/Parent\s+\d+\s+\d+\s+R/.test(b[3])) {
+        pagesRootBody = b[3];
+        break;
+      }
+    }
+  }
+  if (pagesRootBody) _walkPdfPageTree(objMap, pagesRootBody, { mediaBox: null, rotate: 0 }, visited, "root", out);
+  if (out.length === 0) {
+    for (const b of objBlocks) {
+      if (/\/Type\s*\/Page(?!s)\b/.test(b[3])) {
+        out.push(_buildPdfPageDimension(out.length + 1, _parsePdfMediaBox(b[3]), _parsePdfRotate(b[3]) ?? 0));
+      }
+    }
+  }
+  if (out.length === 0) return { error: "Could not locate any page objects in this PDF" };
+  return { version, pageCount: out.length, pages: out };
+}
+server.tool("read_pdf_page_dimensions", "List each page's MediaBox width/height (points and inches), rotation, and orientation, in document order, by walking the Root -> Pages -> Kids tree: no PDF rendering library required.", { pdf_base64: z.string().describe("Base64-encoded PDF bytes, optionally prefixed with a data: URL scheme") }, async ({ pdf_base64 }) => {
+  const bytes = new Uint8Array(Buffer.from(pdf_base64.replace(/^data:.*;base64,/, ""), "base64"));
+  const result = _readPdfPageDimensions(bytes);
+  if ("error" in result) return errText(result);
+  return text(JSON.stringify(result, null, 2));
+});
 var _EXIF_ORIENTATION_LABELS = {
   1: "Normal",
   2: "Mirrored horizontal",
@@ -3940,6 +4065,99 @@ server.tool(
     return text(JSON.stringify(result, null, 2));
   }
 );
+function _isValidIpv6HexGroup(g) {
+  return /^[0-9a-fA-F]{1,4}$/.test(g);
+}
+function _isValidIpv6Ipv4Quad(quad) {
+  const parts = quad.split(".");
+  if (parts.length !== 4) return false;
+  return parts.every((p) => /^\d{1,3}$/.test(p) && Number(p) <= 255);
+}
+function _classifyIpv6(groups) {
+  const first = parseInt(groups[0], 16);
+  if (groups.every((g) => g === "0000")) return "unspecified";
+  if (groups.slice(0, 7).every((g) => g === "0000") && groups[7] === "0001") return "loopback";
+  if (groups.slice(0, 4).every((g) => g === "0000") && groups[4] === "0000" && groups[5] === "ffff") return "ipv4-mapped";
+  if (groups[0] === "2001" && groups[1] === "0db8") return "documentation";
+  if ((first & 65280) === 65280) return "multicast";
+  if ((first & 65472) === 65152) return "link-local";
+  if ((first & 65024) === 64512) return "unique-local";
+  return "global-unicast";
+}
+function _compressIpv6Groups(groups) {
+  const short = groups.map((g) => g.replace(/^0+(?=.)/, ""));
+  let bestStart = -1;
+  let bestLen = 0;
+  let curStart = -1;
+  let curLen = 0;
+  for (let i = 0; i < short.length; i++) {
+    if (short[i] === "0") {
+      if (curStart === -1) curStart = i;
+      curLen++;
+      if (curLen > bestLen) {
+        bestLen = curLen;
+        bestStart = curStart;
+      }
+    } else {
+      curStart = -1;
+      curLen = 0;
+    }
+  }
+  if (bestLen < 2) return short.join(":");
+  const before = short.slice(0, bestStart).join(":");
+  const after = short.slice(bestStart + bestLen).join(":");
+  return `${before}::${after}`;
+}
+function _parseIpv6Address(input) {
+  let s = input.trim();
+  if (s.startsWith("[") && s.includes("]")) s = s.slice(1, s.indexOf("]"));
+  let zoneId = null;
+  const pctIdx = s.indexOf("%");
+  if (pctIdx !== -1) {
+    zoneId = s.slice(pctIdx + 1);
+    s = s.slice(0, pctIdx);
+  }
+  if (!s) return { error: "Empty address" };
+  const doubleColonCount = (s.match(/::/g) ?? []).length;
+  if (doubleColonCount > 1) return { error: 'Address contains more than one "::"' };
+  const ipv4Match = s.match(/(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/);
+  if (ipv4Match) {
+    const quad = ipv4Match[1];
+    if (!_isValidIpv6Ipv4Quad(quad)) return { error: `Invalid embedded IPv4 address: ${quad}` };
+    const parts = quad.split(".").map(Number);
+    const hi = (parts[0] << 8 | parts[1]).toString(16);
+    const lo = (parts[2] << 8 | parts[3]).toString(16);
+    s = s.slice(0, s.length - quad.length) + `${hi}:${lo}`;
+  }
+  let groups;
+  if (s.includes("::")) {
+    const [left, right] = s.split("::");
+    const leftGroups = left ? left.split(":") : [];
+    const rightGroups = right ? right.split(":") : [];
+    const missing = 8 - (leftGroups.length + rightGroups.length);
+    if (missing < 1) return { error: 'The "::" shorthand must represent at least one group of zeros' };
+    if (![...leftGroups, ...rightGroups].every(_isValidIpv6HexGroup)) return { error: "Invalid hex group in address" };
+    groups = [...leftGroups, ...Array(missing).fill("0"), ...rightGroups];
+  } else {
+    groups = s.split(":");
+    if (groups.length !== 8) return { error: `Expected 8 groups, got ${groups.length}` };
+    if (!groups.every(_isValidIpv6HexGroup)) return { error: "Invalid hex group in address" };
+  }
+  const expandedGroups = groups.map((g) => g.padStart(4, "0").toLowerCase());
+  const suffix = zoneId ? `%${zoneId}` : "";
+  return {
+    expanded: expandedGroups.join(":") + suffix,
+    compressed: _compressIpv6Groups(expandedGroups) + suffix,
+    groups: expandedGroups,
+    zoneId,
+    addressType: _classifyIpv6(expandedGroups)
+  };
+}
+server.tool("parse_ipv6_address", 'Expand an IPv6 address to its full 8-group form and compress it to its RFC 5952 canonical shortest form, classify its address type (loopback, link-local, unique-local, multicast, IPv4-mapped, documentation, or global unicast), and separate out an optional zone ID. Understands an embedded IPv4 suffix like "::ffff:192.168.1.1".', { address: z.string().describe('The IPv6 address to expand/compress, e.g. "2001:db8::ff00:42:8329"') }, async ({ address }) => {
+  const result = _parseIpv6Address(address);
+  if ("error" in result) return errText(result);
+  return text(JSON.stringify(result, null, 2));
+});
 var _FILLER_WORDS_MCP = ["very", "really", "just", "actually", "basically", "literally", "simply", "totally", "definitely", "certainly", "essentially", "absolutely", "completely", "extremely", "truly", "honestly", "seriously", "obviously", "clearly", "quite", "rather", "somewhat", "fairly", "virtually"];
 var _HEDGE_PHRASES_MCP = ["maybe", "perhaps", "probably", "possibly", "arguably", "kind of", "sort of", "a bit", "a little", "more or less", "in my opinion", "i think", "i believe", "to some extent"];
 var _CLICHE_PHRASES_MCP = ["at the end of the day", "think outside the box", "low-hanging fruit", "move the needle", "circle back", "touch base", "on the same page", "hit the ground running", "paradigm shift", "win-win", "game changer", "best of both worlds", "only time will tell", "back to the drawing board", "the tip of the iceberg", "a perfect storm", "needle in a haystack", "raise the bar", "push the envelope", "the elephant in the room", "boil the ocean", "when it rains it pours"];
@@ -4959,5 +5177,235 @@ server.tool("read_video_info", "Read duration, resolution, and video/audio codec
   if ("error" in result) return errText(result);
   return text(JSON.stringify(result, null, 2));
 });
+function _tsCapitalizeMcp(str) {
+  if (!str) return str;
+  return str.charAt(0).toUpperCase() + str.slice(1);
+}
+function _schemaRefNameMcp(ref) {
+  const parts = ref.split("/");
+  return _tsCapitalizeMcp(parts[parts.length - 1] || "Ref");
+}
+function _schemaLiteralTypeMcp(value) {
+  if (typeof value === "string") return JSON.stringify(value);
+  if (typeof value === "number" || typeof value === "boolean") return String(value);
+  if (value === null) return "null";
+  return JSON.stringify(value);
+}
+function _safePropertyKeyMcp(key) {
+  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? key : JSON.stringify(key);
+}
+function _schemaToTsTypeMcp(schema, name, interfaces) {
+  if (schema.$ref) return _schemaRefNameMcp(schema.$ref);
+  if (schema.const !== void 0) return _schemaLiteralTypeMcp(schema.const);
+  if (schema.enum) return schema.enum.map(_schemaLiteralTypeMcp).join(" | ");
+  if (schema.oneOf) return schema.oneOf.map((s, i) => _schemaToTsTypeMcp(s, `${name}Variant${i}`, interfaces)).join(" | ");
+  if (schema.anyOf) return schema.anyOf.map((s, i) => _schemaToTsTypeMcp(s, `${name}Variant${i}`, interfaces)).join(" | ");
+  if (schema.allOf) return schema.allOf.map((s, i) => _schemaToTsTypeMcp(s, `${name}Part${i}`, interfaces)).join(" & ");
+  const types = Array.isArray(schema.type) ? schema.type : schema.type ? [schema.type] : [];
+  const nullable = types.includes("null");
+  const nonNullTypes = types.filter((t) => t !== "null");
+  const primaryType = nonNullTypes[0] ?? (schema.properties || schema.additionalProperties !== void 0 ? "object" : void 0);
+  let result;
+  switch (primaryType) {
+    case "string":
+      result = "string";
+      break;
+    case "number":
+    case "integer":
+      result = "number";
+      break;
+    case "boolean":
+      result = "boolean";
+      break;
+    case "array": {
+      const itemsSchema = Array.isArray(schema.items) ? schema.items[0] : schema.items;
+      const itemType = itemsSchema ? _schemaToTsTypeMcp(itemsSchema, `${name}Item`, interfaces) : "unknown";
+      result = `${itemType}[]`;
+      break;
+    }
+    case "object": {
+      _buildSchemaInterfaceMcp(schema, name, interfaces);
+      result = name;
+      break;
+    }
+    default:
+      result = "unknown";
+  }
+  return nullable ? `${result} | null` : result;
+}
+function _buildSchemaInterfaceMcp(schema, name, interfaces) {
+  if (interfaces.has(name)) return;
+  const required = new Set(schema.required ?? []);
+  const lines = [`interface ${name} {`];
+  for (const [key, propSchema] of Object.entries(schema.properties ?? {})) {
+    if (propSchema.description) lines.push(`  /** ${propSchema.description} */`);
+    const optional = required.has(key) ? "" : "?";
+    const propType = _schemaToTsTypeMcp(propSchema, _tsCapitalizeMcp(key), interfaces);
+    lines.push(`  ${_safePropertyKeyMcp(key)}${optional}: ${propType};`);
+  }
+  if (schema.additionalProperties === true) {
+    lines.push("  [key: string]: unknown;");
+  } else if (schema.additionalProperties && typeof schema.additionalProperties === "object") {
+    const addType = _schemaToTsTypeMcp(schema.additionalProperties, `${name}Value`, interfaces);
+    lines.push(`  [key: string]: ${addType};`);
+  }
+  lines.push("}");
+  interfaces.set(name, lines.join("\n"));
+}
+function _jsonSchemaToTypescriptMcp(schemaJson, rootName) {
+  let schema;
+  try {
+    schema = JSON.parse(schemaJson);
+  } catch {
+    return { error: "Invalid JSON input" };
+  }
+  if (typeof schema !== "object" || schema === null || Array.isArray(schema)) {
+    return { error: "Schema must be a JSON object" };
+  }
+  const typedSchema = schema;
+  const interfaces = /* @__PURE__ */ new Map();
+  const defs = { ...typedSchema.$defs ?? {}, ...typedSchema.definitions ?? {} };
+  for (const [defName, defSchema] of Object.entries(defs)) {
+    const defTypeName = _tsCapitalizeMcp(defName);
+    const defType = _schemaToTsTypeMcp(defSchema, defTypeName, interfaces);
+    if (!interfaces.has(defTypeName)) {
+      interfaces.set(defTypeName, `type ${defTypeName} = ${defType};`);
+    }
+  }
+  const rootType = _schemaToTsTypeMcp(typedSchema, rootName, interfaces);
+  const parts = [...interfaces.values()];
+  if (!interfaces.has(rootName)) {
+    parts.push(`type ${rootName} = ${rootType};`);
+  }
+  return { output: parts.join("\n\n") };
+}
+server.tool(
+  "json_schema_to_typescript",
+  "Convert a JSON Schema document into TypeScript interfaces/types. Unlike json_to_typescript (which infers types from an example data payload), this reads the schema's declared type/enum/required keywords directly, so optional vs. required fields and enum/union types come through accurately. Understands local $ref into $defs/definitions, items for arrays, additionalProperties, and renders description as a JSDoc comment.",
+  {
+    schema: z.string().describe("The JSON Schema document, as a JSON string"),
+    root_name: z.string().default("Root").describe("Name for the root generated interface/type")
+  },
+  async ({ schema, root_name }) => {
+    const result = _jsonSchemaToTypescriptMcp(schema, root_name);
+    if ("error" in result) return errText(result);
+    return text(result.output);
+  }
+);
+var _SYMBOL_POOL_CHARS_PW = " !\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~";
+var _SYMBOL_POOL_SET_PW = new Set(_SYMBOL_POOL_CHARS_PW.split(""));
+function _hasSymbolCharPw(password) {
+  for (const ch of password) {
+    if (_SYMBOL_POOL_SET_PW.has(ch)) return true;
+  }
+  return false;
+}
+function _hasSequentialRunPw(password, minRun) {
+  let ascRun = 1;
+  let descRun = 1;
+  for (let i = 1; i < password.length; i++) {
+    const prev = password.charCodeAt(i - 1);
+    const curr = password.charCodeAt(i);
+    if (curr === prev + 1) {
+      ascRun++;
+      descRun = 1;
+    } else if (curr === prev - 1) {
+      descRun++;
+      ascRun = 1;
+    } else {
+      ascRun = 1;
+      descRun = 1;
+    }
+    if (ascRun >= minRun || descRun >= minRun) return true;
+  }
+  return false;
+}
+function _formatCrackDurationPw(seconds) {
+  if (!isFinite(seconds)) return "effectively never";
+  if (seconds < 1) return "instantly";
+  const units = [
+    ["century", 315576e4],
+    ["year", 31557600],
+    ["month", 2629800],
+    ["day", 86400],
+    ["hour", 3600],
+    ["minute", 60],
+    ["second", 1]
+  ];
+  for (const [name, unitSeconds] of units) {
+    if (seconds >= unitSeconds) {
+      const value = seconds / unitSeconds;
+      if (name === "century" && value > 1e3) return "longer than the age of the universe";
+      const rounded = value >= 100 ? Math.round(value) : Math.round(value * 10) / 10;
+      const plural = name === "century" ? "centuries" : `${name}s`;
+      return `${rounded} ${rounded === 1 ? name : plural}`;
+    }
+  }
+  return "instantly";
+}
+function _estimatePasswordEntropyMcp(password) {
+  if (!password) return { error: "Password is required" };
+  const hasLowercase = /[a-z]/.test(password);
+  const hasUppercase = /[A-Z]/.test(password);
+  const hasDigits = /[0-9]/.test(password);
+  const hasSymbols = _hasSymbolCharPw(password);
+  const hasOther = /[^\x20-\x7e]/.test(password);
+  let poolSize = 0;
+  if (hasLowercase) poolSize += 26;
+  if (hasUppercase) poolSize += 26;
+  if (hasDigits) poolSize += 10;
+  if (hasSymbols) poolSize += _SYMBOL_POOL_CHARS_PW.length;
+  if (hasOther) poolSize += 100;
+  const entropyBits = Math.round(password.length * Math.log2(poolSize) * 100) / 100;
+  let strength;
+  if (entropyBits < 28) strength = "very-weak";
+  else if (entropyBits < 36) strength = "weak";
+  else if (entropyBits < 60) strength = "fair";
+  else if (entropyBits < 128) strength = "strong";
+  else strength = "very-strong";
+  const averageGuesses = Math.pow(2, entropyBits) / 2;
+  const scenarios = [
+    { scenario: "Online, throttled (100 guesses/hour)", guessesPerSecond: 100 / 3600 },
+    { scenario: "Online, unthrottled (10 guesses/sec)", guessesPerSecond: 10 },
+    { scenario: "Offline, slow hash e.g. bcrypt (10k guesses/sec)", guessesPerSecond: 1e4 },
+    { scenario: "Offline, fast hash / GPU cluster (10B guesses/sec)", guessesPerSecond: 1e10 }
+  ];
+  const crackTimes = scenarios.map((s) => ({
+    scenario: s.scenario,
+    guessesPerSecond: s.guessesPerSecond,
+    humanReadable: _formatCrackDurationPw(averageGuesses / s.guessesPerSecond)
+  }));
+  const warnings = [];
+  if (password.length < 8) {
+    warnings.push("Shorter than 8 characters \u2014 most sites and cracking tools treat this as trivially weak regardless of entropy.");
+  }
+  if (/(.)\1{2,}/.test(password)) {
+    warnings.push('Contains a repeated character run (e.g. "aaa"), which is easier to guess than the entropy figure implies.');
+  }
+  if (_hasSequentialRunPw(password, 3)) {
+    warnings.push('Contains a sequential run (e.g. "abc" or "321"), which is easier to guess than the entropy figure implies.');
+  }
+  if (poolSize <= 26) {
+    warnings.push("Uses only one character class \u2014 mixing in uppercase, digits, or symbols raises the character pool and entropy.");
+  }
+  return {
+    length: password.length,
+    charset: { hasLowercase, hasUppercase, hasDigits, hasSymbols, hasOther, poolSize },
+    entropyBits,
+    strength,
+    crackTimes,
+    warnings
+  };
+}
+server.tool(
+  "estimate_password_entropy",
+  "Estimate a password's entropy in bits from the character classes it actually draws from (lowercase, uppercase, digits, symbols, other/Unicode), using the pool-size x length method. Returns a strength label and crack-time estimates at four guess-rate scenarios, plus warnings for repeated runs, sequential runs, short length, and single-character-class passwords. Measures resistance to brute force over the theoretical character space, not real-world guessability against a breach database.",
+  { password: z.string().describe("The password to analyze") },
+  async ({ password }) => {
+    const result = _estimatePasswordEntropyMcp(password);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 var transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.29.0",
+  "version": "0.31.0",
   "description": "MCP server exposing 143 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",