@utilix-tech/mcp 0.38.0 → 0.40.0

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.40.0
+- Add `generate_sri_hash` tool: compute SHA-256/384/512 Subresource Integrity hashes for a script or stylesheet's content, formatted as the `<algorithm>-<base64>` string an HTML `integrity` attribute expects.
+- Add `analyze_email_headers` tool: parse a raw email header block into structured From/To/Subject fields, the Received hop chain in order, and SPF/DKIM/DMARC results from an Authentication-Results header.
+
+## 0.39.0
+- Add `compare_unit_prices` tool: compare two or more package options by price and quantity to find the true cost per unit, flag the cheapest, and report how much more expensive each other option is by percentage.
+- Add `csv_to_sql_insert` tool: convert CSV data with a header row into parameterless SQL INSERT statements, with basic type inference (numbers/booleans unquoted, empty cells NULL) and ANSI/MySQL identifier quoting.
+
 ## 0.38.0
 - Add `check_set_cookie_header` tool: parse a Set-Cookie header value and validate its attribute combination, flagging SameSite=None missing Secure, __Host-/__Secure- prefix violations, a missing Secure attribute, and a Max-Age past 400 days.
 - Add `test_gitignore_patterns` tool: test a list of paths against a .gitignore file's patterns, following git's last-match-wins and negation rules, and report which pattern and line number decided each path's outcome.

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 161 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 165 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -110,13 +110,14 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `base62_encode` | Encode text as Base62 (alphanumeric, URL-safe) |
 | `base62_decode` | Decode a Base62 string back to text |
 
-### Hashing (4 tools)
+### Hashing (5 tools)
 | Tool | Description |
 |------|-------------|
 | `hash` | Hash a string with MD5, SHA-1, SHA-256, SHA-384, or SHA-512 |
 | `hash_all` | Hash a string with all algorithms at once |
 | `bcrypt_hash` | Hash a password using bcrypt |
 | `bcrypt_verify` | Verify a password against a bcrypt hash |
+| `generate_sri_hash` | Compute a Subresource Integrity hash (SHA-256/384/512) for a script or stylesheet's content, formatted for an HTML `integrity` attribute |
 
 ### Generators (6 tools)
 | Tool | Description |
@@ -157,7 +158,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `convert_timezone` | Convert a date/time between timezones |
 | `convert_iso8601_duration` | Parse an ISO 8601 duration into components and total seconds, or format seconds into a duration string |
 
-### Units (23 tools)
+### Units (24 tools)
 | Tool | Description |
 |------|-------------|
 | `convert_bytes` | Convert between B, KB, MB, GB, TB, KiB, MiB, GiB, TiB |
@@ -183,8 +184,9 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `calculate_emi` | Compute the Equated Monthly Installment for a loan from principal, annual rate, and tenure in years or months, with a year-by-year principal/interest breakdown |
 | `calculate_savings_goal` | Solve for months to reach a savings goal at a fixed monthly contribution, or the monthly contribution required to hit a goal by a target month count |
 | `calculate_roi` | Compute return on investment percent from an initial and final value, plus the annualized (CAGR) return given an optional holding period in years |
+| `compare_unit_prices` | Compare two or more package options by price and quantity to find the true cost per unit, flag the cheapest, and report how much more expensive each other option is |
 
-### API / Network (15 tools)
+### API / Network (16 tools)
 | Tool | Description |
 |------|-------------|
 | `decode_jwt` | Decode a JWT: header, payload, and expiry |
@@ -202,6 +204,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `parse_ipv6_address` | Expand an IPv6 address to its full 8-group form or compress it to its RFC 5952 canonical shortest form, classify its address type, and handle an embedded IPv4 suffix or zone ID |
 | `build_link_header` | Build and explain an HTTP Link response header from URL/rel pairs (preload, preconnect, prefetch, canonical, pagination, etc.) |
 | `check_set_cookie_header` | Parse a Set-Cookie header and validate its attribute combination: SameSite=None requires Secure, __Host-/__Secure- prefix rules, missing Secure, overly long Max-Age |
+| `analyze_email_headers` | Parse a raw email header block into structured fields, the Received hop chain, and SPF/DKIM/DMARC results from an Authentication-Results header |
 
 ### Color (4 tools)
 | Tool | Description |
@@ -227,7 +230,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `lint_conventional_commit` | Lint a commit message against the Conventional Commits v1.0.0 spec: header format, blank-line separation, footer tokens, and BREAKING CHANGE casing |
 | `test_gitignore_patterns` | Test a list of paths against a .gitignore file's patterns, following git's last-match-wins and negation rules |
 
-### Data (8 tools)
+### Data (9 tools)
 | Tool | Description |
 |------|-------------|
 | `validate_yaml` | Validate YAML syntax |
@@ -238,6 +241,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `diff_env_example` | Diff a .env file against its .env.example template: flags keys missing from either side, plus empty placeholder values |
 | `parse_markdown_front_matter` | Split a Markdown document into its YAML front matter fields and body content |
 | `generate_markdown_toc` | Scan a Markdown document's ATX headings and build a nested table of contents with GitHub-style anchor slugs |
+| `csv_to_sql_insert` | Convert CSV data with a header row into parameterless SQL INSERT statements, with basic type inference and ANSI/MySQL identifier quoting |
 
 ### CSS (2 tools)
 | Tool | Description |

package/dist/index.js

@@ -6596,5 +6596,239 @@ server.tool(
     return text(JSON.stringify(result, null, 2));
   }
 );
+function _compareUnitPricesMcp(items) {
+  if (!Array.isArray(items) || items.length < 2) {
+    return { error: "At least 2 items are required to compare" };
+  }
+  for (const item of items) {
+    if (!item.label || typeof item.label !== "string") {
+      return { error: "Each item must have a non-empty label" };
+    }
+    if (typeof item.price !== "number" || !Number.isFinite(item.price) || item.price <= 0) {
+      return { error: `Item "${item.label}" must have a price greater than zero` };
+    }
+    if (typeof item.quantity !== "number" || !Number.isFinite(item.quantity) || item.quantity <= 0) {
+      return { error: `Item "${item.label}" must have a quantity greater than zero` };
+    }
+  }
+  const round4 = (n) => Math.round(n * 1e4) / 1e4;
+  const unitPrices = items.map((item) => item.price / item.quantity);
+  const bestUnitPrice = Math.min(...unitPrices);
+  const results = items.map((item, i) => ({
+    label: item.label,
+    price: round4(item.price),
+    quantity: round4(item.quantity),
+    unitPrice: round4(unitPrices[i]),
+    isBest: unitPrices[i] === bestUnitPrice,
+    percentMoreThanBest: round4((unitPrices[i] - bestUnitPrice) / bestUnitPrice * 100)
+  }));
+  const bestLabel = results.find((r) => r.isBest).label;
+  return { items: results, bestLabel };
+}
+server.tool(
+  "compare_unit_prices",
+  "Compare two or more package options by price and quantity to find the true cost per unit (price / quantity) for each, flag the cheapest, and report how much more expensive each other option is by percentage. Unit-agnostic: pass quantity in whatever unit makes the options comparable (grams, litres, item count, etc.), no conversion is done.",
+  {
+    items: z.array(z.object({
+      label: z.string().describe("Name for this option"),
+      price: z.number().describe("Total price of this option (must be greater than zero)"),
+      quantity: z.number().describe("Quantity in whatever unit makes options comparable (must be greater than zero)")
+    })).min(2).describe("Two or more package options to compare")
+  },
+  async ({ items }) => {
+    const result = _compareUnitPricesMcp(items);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+function _parseCsvRowForSqlMcp(line, delimiter) {
+  const fields = [];
+  let cur = "";
+  let inQuote = false;
+  for (let i = 0; i < line.length; i++) {
+    if (line[i] === '"') {
+      if (inQuote && line[i + 1] === '"') {
+        cur += '"';
+        i++;
+      } else inQuote = !inQuote;
+    } else if (line[i] === delimiter && !inQuote) {
+      fields.push(cur);
+      cur = "";
+    } else {
+      cur += line[i];
+    }
+  }
+  fields.push(cur);
+  return fields;
+}
+function _quoteSqlIdentifierMcp(name, dialect) {
+  if (dialect === "mysql") return "`" + name.replace(/`/g, "``") + "`";
+  return '"' + name.replace(/"/g, '""') + '"';
+}
+function _formatSqlValueMcp(raw) {
+  const trimmed = raw.trim();
+  if (trimmed === "") return "NULL";
+  if (/^-?\d+(\.\d+)?$/.test(trimmed)) return trimmed;
+  if (/^(true|false)$/i.test(trimmed)) return trimmed.toLowerCase();
+  return "'" + trimmed.replace(/'/g, "''") + "'";
+}
+function _csvToSqlInsertMcp(input, tableName, dialect, batchSize) {
+  if (!input || input.trim() === "") return { error: "Input is empty" };
+  const lines = input.replace(/\r\n/g, "\n").split("\n").filter((l) => l.trim() !== "");
+  if (lines.length === 0) return { error: "No data found" };
+  const allRows = lines.map((l) => _parseCsvRowForSqlMcp(l, ","));
+  const headers = allRows[0].map((h) => h.trim());
+  const rows = allRows.slice(1);
+  const table = (tableName ?? "").trim() || "my_table";
+  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(table)) {
+    return { error: "tableName must start with a letter or underscore and contain only letters, digits, and underscores" };
+  }
+  const dial = dialect === "mysql" ? "mysql" : "ansi";
+  const batch = batchSize !== void 0 && Number.isFinite(batchSize) && batchSize > 0 ? Math.floor(batchSize) : 1;
+  const quotedTable = _quoteSqlIdentifierMcp(table, dial);
+  const quotedColumns = headers.map((h) => _quoteSqlIdentifierMcp(h, dial)).join(", ");
+  const statements = [];
+  for (let i = 0; i < rows.length; i += batch) {
+    const chunk = rows.slice(i, i + batch);
+    const tuples = chunk.map((row) => "(" + headers.map((_, idx) => _formatSqlValueMcp(row[idx] ?? "")).join(", ") + ")");
+    statements.push(`INSERT INTO ${quotedTable} (${quotedColumns}) VALUES ${tuples.join(", ")};`);
+  }
+  return {
+    sql: statements.join("\n"),
+    rowCount: rows.length,
+    columnCount: headers.length,
+    columns: headers
+  };
+}
+server.tool(
+  "csv_to_sql_insert",
+  "Paste CSV data and get parameterless SQL INSERT statements back, with basic type inference: unquoted for integers/decimals and true/false, NULL for empty cells, single-quoted (with '' escaping) for everything else. Column and table identifiers are quoted per the chosen dialect so reserved words and mixed-case names round-trip safely.",
+  {
+    csv: z.string().describe("CSV data with a header row"),
+    tableName: z.string().optional().describe('Target table name, must be a valid SQL identifier (default "my_table")'),
+    dialect: z.enum(["ansi", "mysql"]).optional().describe('Identifier quoting style: ANSI double quotes or MySQL backticks (default "ansi")'),
+    batchSize: z.number().optional().describe("Rows per INSERT statement (default 1, one statement per row)")
+  },
+  async ({ csv, tableName, dialect, batchSize }) => {
+    const result = _csvToSqlInsertMcp(csv, tableName, dialect, batchSize);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+var _SRI_ALGORITHMS_MCP = ["SHA-256", "SHA-384", "SHA-512"];
+var _SRI_NODE_ALG_MAP_MCP = {
+  "SHA-256": "sha256",
+  "SHA-384": "sha384",
+  "SHA-512": "sha512"
+};
+function _generateSriAllMcp(content) {
+  if (!content) return { error: "Content is required" };
+  const results = _SRI_ALGORITHMS_MCP.map((algorithm) => {
+    const nodeAlg = _SRI_NODE_ALG_MAP_MCP[algorithm];
+    const base64 = createHash(nodeAlg).update(content, "utf8").digest("base64");
+    return { algorithm, base64, integrity: `${nodeAlg}-${base64}` };
+  });
+  return { results };
+}
+server.tool(
+  "generate_sri_hash",
+  "Compute a Subresource Integrity (SRI) hash for a script or stylesheet's content: digest it with SHA-256, SHA-384, and SHA-512 and return each as the `<algorithm>-<base64>` string an HTML `integrity` attribute expects. Returns all three algorithms at once.",
+  {
+    content: z.string().min(1).describe("The exact file/script content to hash, byte-for-byte")
+  },
+  async ({ content }) => {
+    const result = _generateSriAllMcp(content);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+function _analyzeEmailHeadersMcp(raw) {
+  if (!raw || !raw.trim()) return { error: "Raw email header text is required" };
+  const normalized = raw.replace(/\r\n/g, "\n");
+  const blockEnd = normalized.indexOf("\n\n");
+  const headerBlock = blockEnd === -1 ? normalized : normalized.slice(0, blockEnd);
+  const rawLines = headerBlock.split("\n");
+  const unfolded = [];
+  for (const line of rawLines) {
+    if (/^[ \t]/.test(line) && unfolded.length > 0) {
+      unfolded[unfolded.length - 1] += " " + line.trim();
+    } else if (line.trim() !== "") {
+      unfolded.push(line);
+    }
+  }
+  const headers = [];
+  for (const line of unfolded) {
+    const colonIdx = line.indexOf(":");
+    if (colonIdx === -1) continue;
+    const name = line.slice(0, colonIdx).trim();
+    const value = line.slice(colonIdx + 1).trim();
+    if (!name) continue;
+    headers.push({ name, value });
+  }
+  if (headers.length === 0) {
+    return { error: 'No parseable headers found \u2014 expected lines like "From: ..." or "Received: ..."' };
+  }
+  const findFirst = (name) => headers.find((h) => h.name.toLowerCase() === name.toLowerCase())?.value ?? null;
+  const findAll = (name) => headers.filter((h) => h.name.toLowerCase() === name.toLowerCase());
+  const receivedHops = findAll("received").map((h, i) => {
+    const fromMatch = h.value.match(/from\s+([^\s;]+(?:\s*\([^)]*\))?)/i);
+    const byMatch = h.value.match(/\bby\s+([^\s;]+)/i);
+    const segments = h.value.split(";");
+    const date = segments.length > 1 ? segments[segments.length - 1].trim() : null;
+    return {
+      index: i + 1,
+      raw: h.value,
+      from: fromMatch ? fromMatch[1].trim() : null,
+      by: byMatch ? byMatch[1].trim() : null,
+      date: date || null
+    };
+  });
+  const authResultsHeader = findFirst("authentication-results");
+  const authResults = [];
+  if (authResultsHeader) {
+    const re = /\b(spf|dkim|dmarc)=(\w+)/gi;
+    let m;
+    while ((m = re.exec(authResultsHeader)) !== null) {
+      authResults.push({ mechanism: m[1].toLowerCase(), result: m[2].toLowerCase() });
+    }
+  }
+  const findAuth = (mechanism) => authResults.find((a) => a.mechanism === mechanism)?.result ?? null;
+  const warnings = [];
+  if (receivedHops.length === 0) {
+    warnings.push("No Received headers found \u2014 this may be a partial header block rather than a full raw source.");
+  }
+  if (!authResultsHeader) {
+    warnings.push("No Authentication-Results header found \u2014 SPF/DKIM/DMARC cannot be determined from this header block alone.");
+  }
+  return {
+    headers,
+    from: findFirst("from"),
+    to: findFirst("to"),
+    subject: findFirst("subject"),
+    date: findFirst("date"),
+    messageId: findFirst("message-id"),
+    returnPath: findFirst("return-path"),
+    replyTo: findFirst("reply-to"),
+    receivedHops,
+    hopCount: receivedHops.length,
+    authResults,
+    spf: findAuth("spf"),
+    dkim: findAuth("dkim"),
+    dmarc: findAuth("dmarc"),
+    warnings
+  };
+}
+server.tool(
+  "analyze_email_headers",
+  `Parse a raw email header block (e.g. Gmail's "Show original", or the headers from a .eml file) into structured fields, the Received hop chain in the order they appear, and any SPF/DKIM/DMARC verdicts already present in an Authentication-Results header. Never performs a live DNS/SPF/DKIM check, it only reports what the pasted headers already claim.`,
+  {
+    headers: z.string().min(1).describe("The raw email header block (From/To/Received/Authentication-Results/...)")
+  },
+  async ({ headers }) => {
+    const result = _analyzeEmailHeadersMcp(headers);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 var transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.38.0",
+  "version": "0.40.0",
   "description": "MCP server exposing 152 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",