@utilix-tech/mcp 0.83.0 → 0.84.0

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.84.0
+- Add `find_cron_overlaps` tool: walk minute-by-minute over a window of days and flag every minute where two or more cron schedules fire at once, listing which expressions collided.
+- Add `lint_dockerfile` tool: lint a Dockerfile for an unpinned or `:latest` base image, a final stage missing WORKDIR or USER, and ADD used on a plain local file where COPY would do.
+
 ## 0.83.0
 - Add `extract_markdown_link_references` tool: extract reference-style Markdown links (`[text][ref]`, the `[text][]` shortcut, and `![alt][ref]` image references) and match them against their `[ref]: url` definitions, flagging unresolved references and unused definitions.
 - Add `extract_prompt_template_variables` tool: extract `{{variable}}`-style placeholders from a prompt template, report occurrence counts, flag duplicates, and optionally cross-check against a list of provided variable names.

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 260 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 262 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -162,6 +162,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `unix_timestamp` | Convert a Unix timestamp to human-readable date |
 | `parse_cron` | Parse a cron expression into a readable description |
 | `cron_next_runs` | Show the next N scheduled run times for a cron expression |
+| `find_cron_overlaps` | Find simultaneous fire times across two or more cron schedules |
 | `date_diff` | Calculate the difference between two dates |
 | `convert_timezone` | Convert a date/time between timezones |
 | `convert_iso8601_duration` | Parse an ISO 8601 duration into components and total seconds, or format seconds into a duration string |
@@ -292,6 +293,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `format_graphql` | Format or minify a GraphQL query or schema |
 | `parse_env` | Parse a .env file and return all key-value pairs |
 | `parse_docker_image` | Parse a Docker image reference into its components |
+| `lint_dockerfile` | Lint a Dockerfile for an unpinned base image, missing WORKDIR/USER, and misused ADD |
 | `lookup_mime` | Look up the MIME type for a file extension, or the extension(s) for a MIME type |
 | `parse_github_url` | Parse a github.com URL (repo, pull request, issue, commit, file, or release) into structured components |
 | `detect_redos` | Statically flag catastrophic-backtracking (ReDoS) risk in a regex: nested quantifiers, overlapping alternation, adjacent overlapping quantifiers |

package/dist/index.js

@@ -13258,6 +13258,268 @@ function _extractPromptTemplateVariablesMcp(template, providedVars) {
   }
   return { variableCount: order.length, variables, duplicates, missing, unused };
 }
+var _CRON_MONTH_NAMES_MCP = {
+  JAN: 1,
+  FEB: 2,
+  MAR: 3,
+  APR: 4,
+  MAY: 5,
+  JUN: 6,
+  JUL: 7,
+  AUG: 8,
+  SEP: 9,
+  OCT: 10,
+  NOV: 11,
+  DEC: 12
+};
+var _CRON_WEEKDAY_NAMES_MCP = {
+  SUN: 0,
+  MON: 1,
+  TUE: 2,
+  WED: 3,
+  THU: 4,
+  FRI: 5,
+  SAT: 6
+};
+function _resolveCronNamedValueMcp(token, nameMap) {
+  const upper = token.toUpperCase();
+  if (upper in nameMap) return nameMap[upper];
+  const num = parseInt(token, 10);
+  if (!isNaN(num)) return num;
+  return null;
+}
+function _parseCronFieldPartMcp(part, min, max, nameMap) {
+  if (part.startsWith("*/")) {
+    const step = parseInt(part.slice(2), 10);
+    if (isNaN(step) || step < 1) return { error: `Invalid step in "${part}"` };
+    const vals = [];
+    for (let i = min; i <= max; i += step) vals.push(i);
+    return vals;
+  }
+  if (part.includes("-")) {
+    const stepSplit = part.split("/");
+    const rangePart = stepSplit[0];
+    const step = stepSplit.length > 1 ? parseInt(stepSplit[1], 10) : 1;
+    if (isNaN(step) || step < 1) return { error: `Invalid step in "${part}"` };
+    const [startStr, endStr] = rangePart.split("-");
+    const start = _resolveCronNamedValueMcp(startStr, nameMap);
+    const end = _resolveCronNamedValueMcp(endStr, nameMap);
+    if (start === null || end === null) return { error: `Invalid range in "${part}"` };
+    if (start < min || end > max || start > end) return { error: `Range out of bounds in "${part}"` };
+    const vals = [];
+    for (let i = start; i <= end; i += step) vals.push(i);
+    return vals;
+  }
+  if (part.includes("/")) {
+    const [startStr, stepStr] = part.split("/");
+    const start = _resolveCronNamedValueMcp(startStr, nameMap);
+    const step = parseInt(stepStr, 10);
+    if (start === null || isNaN(step) || step < 1) return { error: `Invalid expression "${part}"` };
+    if (start < min || start > max) return { error: `Value out of bounds in "${part}"` };
+    const vals = [];
+    for (let i = start; i <= max; i += step) vals.push(i);
+    return vals;
+  }
+  const val = _resolveCronNamedValueMcp(part, nameMap);
+  if (val === null) return { error: `Invalid value "${part}"` };
+  if (val < min || val > max) return { error: `Value ${val} out of bounds [${min}-${max}]` };
+  return [val];
+}
+function _parseCronFieldMcp(raw, min, max, nameMap = {}) {
+  if (raw === "*") {
+    const values2 = [];
+    for (let i = min; i <= max; i++) values2.push(i);
+    return { raw, values: values2, min, max };
+  }
+  const parts = raw.split(",");
+  const allValues = /* @__PURE__ */ new Set();
+  for (const part of parts) {
+    const result = _parseCronFieldPartMcp(part.trim(), min, max, nameMap);
+    if (typeof result === "object" && "error" in result) return result;
+    for (const v of result) allValues.add(v);
+  }
+  const values = Array.from(allValues).sort((a, b) => a - b);
+  return { raw, values, min, max };
+}
+function _parseCronExpressionMcp(expr) {
+  const trimmed = expr.trim();
+  const fields = trimmed.split(/\s+/);
+  if (fields.length < 5) return { error: "Cron expression must have exactly 5 fields" };
+  if (fields.length > 5) return { error: "Cron expression must have exactly 5 fields (6+ field expressions not supported)" };
+  const [minRaw, hourRaw, domRaw, monRaw, dowRaw] = fields;
+  const minute = _parseCronFieldMcp(minRaw, 0, 59, {});
+  if (typeof minute === "object" && "error" in minute) return { error: `Minute field: ${minute.error}` };
+  const hour = _parseCronFieldMcp(hourRaw, 0, 23, {});
+  if (typeof hour === "object" && "error" in hour) return { error: `Hour field: ${hour.error}` };
+  const dayOfMonth = _parseCronFieldMcp(domRaw, 1, 31, {});
+  if (typeof dayOfMonth === "object" && "error" in dayOfMonth) return { error: `Day-of-month field: ${dayOfMonth.error}` };
+  const month = _parseCronFieldMcp(monRaw, 1, 12, _CRON_MONTH_NAMES_MCP);
+  if (typeof month === "object" && "error" in month) return { error: `Month field: ${month.error}` };
+  const dayOfWeek = _parseCronFieldMcp(dowRaw, 0, 6, _CRON_WEEKDAY_NAMES_MCP);
+  if (typeof dayOfWeek === "object" && "error" in dayOfWeek) return { error: `Day-of-week field: ${dayOfWeek.error}` };
+  return {
+    minute,
+    hour,
+    dayOfMonth,
+    month,
+    dayOfWeek
+  };
+}
+function _matchesCronMcp(date, parsed) {
+  const min = date.getMinutes();
+  const hour = date.getHours();
+  const dom = date.getDate();
+  const month = date.getMonth() + 1;
+  const dow = date.getDay();
+  if (!parsed.minute.values.includes(min)) return false;
+  if (!parsed.hour.values.includes(hour)) return false;
+  if (!parsed.month.values.includes(month)) return false;
+  const domWild = parsed.dayOfMonth.raw === "*";
+  const dowWild = parsed.dayOfWeek.raw === "*";
+  if (domWild && dowWild) return true;
+  if (domWild) return parsed.dayOfWeek.values.includes(dow);
+  if (dowWild) return parsed.dayOfMonth.values.includes(dom);
+  return parsed.dayOfMonth.values.includes(dom) || parsed.dayOfWeek.values.includes(dow);
+}
+var _MAX_CRON_OVERLAPS_MCP = 200;
+function _findCronOverlapsMcp(expressions, windowDays) {
+  if (expressions.length < 2) return { error: "Provide at least two cron expressions to check for overlaps" };
+  if (expressions.length > 10) return { error: "Provide 10 or fewer cron expressions" };
+  if (windowDays < 1 || windowDays > 365) return { error: "windowDays must be between 1 and 365" };
+  const parsedList = [];
+  for (let i = 0; i < expressions.length; i++) {
+    const parsed = _parseCronExpressionMcp(expressions[i]);
+    if (typeof parsed === "object" && "error" in parsed) {
+      return { error: `Expression ${i + 1} ("${expressions[i]}"): ${parsed.error}` };
+    }
+    parsedList.push(parsed);
+  }
+  const cursor = /* @__PURE__ */ new Date();
+  cursor.setSeconds(0, 0);
+  cursor.setMinutes(cursor.getMinutes() + 1);
+  const endTime = cursor.getTime() + windowDays * 24 * 60 * 60 * 1e3;
+  const overlaps = [];
+  let truncated = false;
+  while (cursor.getTime() < endTime) {
+    const matched = [];
+    for (let i = 0; i < parsedList.length; i++) {
+      if (_matchesCronMcp(cursor, parsedList[i])) matched.push(i);
+    }
+    if (matched.length >= 2) {
+      if (overlaps.length >= _MAX_CRON_OVERLAPS_MCP) {
+        truncated = true;
+        break;
+      }
+      overlaps.push({ date: new Date(cursor).toISOString(), expressionIndexes: matched });
+    }
+    cursor.setMinutes(cursor.getMinutes() + 1);
+  }
+  return { overlaps, windowDays, truncated };
+}
+function _parseDockerfileInstructionsMcp(content) {
+  const rawLines = content.replace(/\r\n/g, "\n").split("\n");
+  const instructions = [];
+  let buffer = "";
+  let bufferStartLine = 0;
+  for (let i = 0; i < rawLines.length; i++) {
+    const lineNo = i + 1;
+    const line = rawLines[i];
+    const trimmed = line.trim();
+    if (buffer === "") {
+      if (trimmed === "" || trimmed.startsWith("#")) continue;
+      bufferStartLine = lineNo;
+      buffer = line.trimEnd();
+    } else {
+      buffer += "\n" + line.trimEnd();
+    }
+    if (buffer.endsWith("\\")) {
+      buffer = buffer.slice(0, -1);
+      continue;
+    }
+    const match = buffer.trim().match(/^([A-Za-z]+)\s*([\s\S]*)$/);
+    if (match) {
+      instructions.push({ instruction: match[1].toUpperCase(), args: match[2].trim(), line: bufferStartLine });
+    }
+    buffer = "";
+  }
+  return instructions;
+}
+var _DOCKERFILE_TAR_RE_MCP = /\.(tar(\.(gz|bz2|xz))?|tgz|tbz2|txz)$/i;
+function _lintDockerfileMcp(content) {
+  if (!content || !content.trim()) return { error: "Dockerfile content is required" };
+  const instructions = _parseDockerfileInstructionsMcp(content);
+  if (instructions.length === 0) return { error: "No Dockerfile instructions found" };
+  const fromInstructions = instructions.filter((i) => i.instruction === "FROM");
+  if (fromInstructions.length === 0) return { error: "No FROM instruction found; this does not look like a valid Dockerfile" };
+  const stageNames = /* @__PURE__ */ new Set();
+  const stages = fromInstructions.map((inst, idx) => {
+    const asMatch = inst.args.match(/^(\S+)(?:\s+AS\s+(\S+))?/i);
+    const baseImage = asMatch ? asMatch[1] : inst.args.split(/\s+/)[0];
+    const name = asMatch && asMatch[2] ? asMatch[2] : null;
+    if (name) stageNames.add(name.toLowerCase());
+    return { index: idx, name, baseImage, fromLine: inst.line };
+  });
+  const findings = [];
+  for (const stage of stages) {
+    const base = stage.baseImage;
+    if (base.toLowerCase() === "scratch") continue;
+    if (stageNames.has(base.toLowerCase())) continue;
+    const withoutDigest = base.split("@")[0];
+    const hasTag = withoutDigest.includes(":");
+    const tag = hasTag ? withoutDigest.split(":").pop() : null;
+    if (!hasTag) {
+      findings.push({ rule: "unpinned-base-image", severity: "warning", line: stage.fromLine, message: `FROM ${base} has no tag, so it resolves to ":latest", which can silently change what gets built on a future run. Pin an explicit version tag instead.` });
+    } else if (tag === "latest") {
+      findings.push({ rule: "unpinned-base-image", severity: "warning", line: stage.fromLine, message: `FROM ${base} is explicitly pinned to the "latest" tag, which is a moving target rather than a fixed version. Pin an explicit version tag instead.` });
+    }
+  }
+  const finalStage = stages[stages.length - 1];
+  const finalStageInstructions = instructions.filter((i) => i.line >= finalStage.fromLine);
+  if (!finalStageInstructions.some((i) => i.instruction === "WORKDIR")) {
+    findings.push({ rule: "missing-workdir", severity: "warning", line: finalStage.fromLine, message: 'No WORKDIR instruction in the final stage, so RUN/CMD/ENTRYPOINT execute from "/" by default. Set an explicit WORKDIR.' });
+  }
+  if (!finalStageInstructions.some((i) => i.instruction === "USER")) {
+    findings.push({ rule: "running-as-root", severity: "warning", line: finalStage.fromLine, message: "No USER instruction in the final stage, so the container runs as root by default. Add a non-root USER unless root is genuinely required." });
+  }
+  for (const inst of instructions) {
+    if (inst.instruction !== "ADD") continue;
+    const parts = inst.args.split(/\s+/).filter(Boolean).filter((p) => !p.startsWith("--"));
+    if (parts.length < 2) continue;
+    for (const src of parts.slice(0, -1)) {
+      const isUrl = /^https?:\/\//i.test(src);
+      const isTar = _DOCKERFILE_TAR_RE_MCP.test(src);
+      if (!isUrl && !isTar) {
+        findings.push({ rule: "add-vs-copy", severity: "info", line: inst.line, message: `ADD ${src} copies a local file/directory, not a URL or an auto-extracting archive. Use COPY instead, since ADD's extra behavior (remote fetch, tar auto-extract) doesn't apply here.` });
+      }
+    }
+  }
+  return { findings, stages };
+}
+server.tool(
+  "lint_dockerfile",
+  "Lint a Dockerfile for 4 common mistakes: a base image with no tag or pinned to `:latest`, a final stage with no WORKDIR, a final stage with no USER (running as root), and ADD used on a plain local file/directory where COPY would do. Returns a list of findings plus the parsed build stages.",
+  {
+    content: z.string().min(1).describe("The full Dockerfile text")
+  },
+  async ({ content }) => {
+    const result = _lintDockerfileMcp(content);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+server.tool(
+  "find_cron_overlaps",
+  "Given two or more standard 5-field cron expressions, find every minute over the next N days where two or more of them fire at the same time, for example a nightly backup job colliding with a report job. Returns each colliding minute with the zero-based indexes of every expression that matched.",
+  {
+    expressions: z.array(z.string()).min(2).max(10).describe("Two to ten standard 5-field cron expressions to check against each other"),
+    windowDays: z.number().min(1).max(365).optional().describe("How many days ahead to check, default 30")
+  },
+  async ({ expressions, windowDays }) => {
+    const result = _findCronOverlapsMcp(expressions, windowDays ?? 30);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 server.tool(
   "extract_prompt_template_variables",
   "Extract every {{variable}}-style placeholder from a prompt template, reporting each unique variable's occurrence count and flagging ones used more than once. Optionally cross-check against a providedVars list to flag variables the template uses that are missing, and provided names the template never references.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.83.0",
+  "version": "0.84.0",
   "description": "MCP server exposing 198 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",