@utilix-tech/mcp 0.92.0 → 0.94.0

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.94.0
+- Add `build_alt_svc_header`/`parse_alt_svc_header` tools: build an `Alt-Svc` response header (RFC 7838) from one or more alternative services with a plain-English note per protocol-id, flagging outdated HTTP/3 draft protocol-ids, or parse an existing header back into its alternatives, including the special `clear` value.
+
+## 0.93.0
+- Add `find_duplicate_lockfile_versions` tool: parse an npm, yarn, or pnpm lockfile and report every package installed at more than one resolved version, with a count of install locations per version.
+- Add `summarize_git_diff_stat` tool: parse `git diff --stat` / `git log --stat` output into structured per-file insertion/deletion counts plus overall totals, flagging a scaled-down bar's split as approximate.
+
 ## 0.92.0
 - Add `build_clear_site_data_header`/`parse_clear_site_data_header` tools: build a `Clear-Site-Data` response header from directives (cache, cookies, storage, executionContexts, or `*` for all of them), flagging redundant directives alongside the wildcard, or parse an existing header back into its directives.
 - Add `summarize_csv_column_stats` tool: parse CSV/TSV data and compute per-column null/unique counts plus min/max/mean/median/standard deviation for numeric columns, or the most common value for categorical ones.

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/mcp
 
-MCP server exposing 277 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
+MCP server exposing 281 developer utility tools to Claude, Cursor, VS Code Copilot, and any [Model Context Protocol](https://modelcontextprotocol.io) compatible AI assistant.
 
 No API key required. All tools run locally. Requires Node.js 18 or later.
 
@@ -224,7 +224,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `calculate_sales_commission` | Compute a sales commission from either a flat percent rate applied to the whole sale amount, or a tiered (marginal) rate structure where each tier applies only to the slice of sales within it, plus an optional base salary added to the total payout |
 | `intersect_semver_ranges` | Determine whether two semver ranges overlap and, if so, the intersecting range, supporting the same caret/tilde/comparison-operator/exact-version syntax as the semver tool |
 
-### API / Network (53 tools)
+### API / Network (55 tools)
 | Tool | Description |
 |------|-------------|
 | `decode_jwt` | Decode a JWT: header, payload, and expiry |
@@ -283,6 +283,8 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `score_security_headers` | Score a pasted block of raw HTTP response headers against commonly recommended security headers (CSP, HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, Cross-Origin-*), with an overall 0-100 score and A-F letter grade |
 | `build_clear_site_data_header` | Build a Clear-Site-Data response header from directives (cache, cookies, storage, executionContexts, or * for all of them), flagging redundant directives alongside the wildcard |
 | `parse_clear_site_data_header` | Parse an existing Clear-Site-Data header value into its individual directives |
+| `build_alt_svc_header` | Build an Alt-Svc response header (RFC 7838) from one or more alternative services (protocol-id, authority, max-age, persist), with a plain-English note per protocol-id |
+| `parse_alt_svc_header` | Parse an existing Alt-Svc header value into its individual alternatives, including the special "clear" value |
 
 ### Color (4 tools)
 | Tool | Description |
@@ -292,7 +294,7 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `color_palette` | Generate a color palette from a base color |
 | `color_shades` | Generate shades or tints from a base color |
 
-### Code (27 tools)
+### Code (29 tools)
 | Tool | Description |
 |------|-------------|
 | `format_sql` | Format a SQL query with proper indentation |
@@ -323,6 +325,8 @@ claude mcp add utilix -- npx -y @utilix-tech/mcp
 | `count_sql_placeholders` | Count positional (`?`, `$1`) and named (`:name`, `@name`) parameter placeholders in a SQL query, flagging mixed styles and numbered-sequence gaps or duplicates |
 | `extract_markdown_link_references` | Extract every reference-style Markdown link ([text][ref], [text][], ![alt][ref]) and match it against its [ref]: url definition, flagging unresolved references and unused definitions |
 | `build_character_class` | Assemble a [...] regex character class from named building blocks (lowercase, uppercase, digits, whitespace), custom ranges, and literal custom characters, with optional negation |
+| `find_duplicate_lockfile_versions` | Parse an npm, yarn, or pnpm lockfile and report every package installed at more than one resolved version, with a count of install locations per version |
+| `summarize_git_diff_stat` | Parse `git diff --stat` / `git log --stat` output into structured per-file insertion/deletion counts plus overall totals |
 
 ### Data (21 tools)
 | Tool | Description |

package/dist/index.js

@@ -14732,5 +14732,363 @@ server.tool(
     return text(JSON.stringify(result, null, 2));
   }
 );
+function _detectLockfileFormatMcp(input) {
+  const trimmed = input.trim();
+  if (trimmed.startsWith("{")) return "npm";
+  if (/^lockfileVersion:/m.test(trimmed) || /^packages:\s*$/m.test(trimmed)) return "pnpm";
+  if (/yarn lockfile v\d/i.test(trimmed)) return "yarn";
+  if (/^\s*version\s+"[^"]+"/m.test(trimmed) && /@[^\s",]+["']?\s*:?\s*$/m.test(trimmed)) return "yarn";
+  return null;
+}
+function _parseNpmLockfileMcp(input) {
+  const data = JSON.parse(input);
+  const entries = [];
+  const packages = data.packages;
+  if (packages && typeof packages === "object" && !Array.isArray(packages)) {
+    for (const [path, metaRaw] of Object.entries(packages)) {
+      if (path === "" || !metaRaw || typeof metaRaw !== "object") continue;
+      const meta = metaRaw;
+      if (typeof meta.version !== "string") continue;
+      const idx = path.lastIndexOf("node_modules/");
+      const name = idx === -1 ? path : path.slice(idx + "node_modules/".length);
+      entries.push({ name, version: meta.version });
+    }
+    return entries;
+  }
+  const dependencies = data.dependencies;
+  if (dependencies && typeof dependencies === "object" && !Array.isArray(dependencies)) {
+    const walk = (deps) => {
+      for (const [name, metaRaw] of Object.entries(deps)) {
+        if (!metaRaw || typeof metaRaw !== "object") continue;
+        const meta = metaRaw;
+        if (typeof meta.version === "string") entries.push({ name, version: meta.version });
+        if (meta.dependencies && typeof meta.dependencies === "object") walk(meta.dependencies);
+      }
+    };
+    walk(dependencies);
+  }
+  return entries;
+}
+function _splitYarnKeyMcp(key) {
+  const trimmedKey = key.trim().replace(/^"|"$/g, "");
+  const idx = trimmedKey.lastIndexOf("@");
+  if (idx <= 0) return null;
+  return { name: trimmedKey.slice(0, idx), range: trimmedKey.slice(idx + 1) };
+}
+function _parseYarnLockfileMcp(input) {
+  const entries = [];
+  const blocks = input.replace(/\r\n/g, "\n").split(/\n\n+/);
+  for (const block of blocks) {
+    const lines = block.split("\n");
+    const headerLines = [];
+    let i = 0;
+    while (i < lines.length && lines[i].trim() !== "" && !lines[i].startsWith(" ") && !lines[i].startsWith("#")) {
+      headerLines.push(lines[i]);
+      i++;
+    }
+    if (headerLines.length === 0) continue;
+    const header = headerLines.join(" ").replace(/:\s*$/, "");
+    const keys = header.split(",").map((k) => k.trim()).filter(Boolean);
+    const versionLine = lines.find((l) => /^\s+version\s+"/.test(l));
+    if (!versionLine) continue;
+    const versionMatch = versionLine.match(/version\s+"([^"]+)"/);
+    if (!versionMatch) continue;
+    const version = versionMatch[1];
+    const names = /* @__PURE__ */ new Set();
+    for (const key of keys) {
+      const split = _splitYarnKeyMcp(key);
+      if (split) names.add(split.name);
+    }
+    for (const name of names) entries.push({ name, version });
+  }
+  return entries;
+}
+function _parsePnpmPackageKeyMcp(rawKey) {
+  let key = rawKey.trim();
+  if (key.startsWith("/")) key = key.slice(1);
+  const parenIdx = key.indexOf("(");
+  if (parenIdx !== -1) key = key.slice(0, parenIdx);
+  const idx = key.lastIndexOf("@");
+  if (idx <= 0) return null;
+  const name = key.slice(0, idx);
+  const version = key.slice(idx + 1).trim();
+  if (!version) return null;
+  return { name, version };
+}
+function _parsePnpmLockfileMcp(input) {
+  const data = yaml.load(input);
+  const entries = [];
+  const packages = data?.packages;
+  if (!packages || typeof packages !== "object" || Array.isArray(packages)) return entries;
+  for (const rawKey of Object.keys(packages)) {
+    const parsed = _parsePnpmPackageKeyMcp(rawKey);
+    if (parsed) entries.push(parsed);
+  }
+  return entries;
+}
+function _findDuplicateLockfileVersionsMcp(input, format) {
+  if (!input || !input.trim()) return { error: "Input is empty" };
+  const detected = format ?? _detectLockfileFormatMcp(input);
+  if (!detected) {
+    return { error: "Could not detect lockfile format; expected an npm package-lock.json, a yarn.lock, or a pnpm-lock.yaml" };
+  }
+  let rawEntries;
+  try {
+    if (detected === "npm") rawEntries = _parseNpmLockfileMcp(input);
+    else if (detected === "yarn") rawEntries = _parseYarnLockfileMcp(input);
+    else rawEntries = _parsePnpmLockfileMcp(input);
+  } catch (e) {
+    return { error: `Failed to parse ${detected} lockfile: ${e.message}` };
+  }
+  if (rawEntries.length === 0) {
+    return { error: `No packages found in ${detected} lockfile. If this is a pnpm lockfile older than v6 (slash-separated versions instead of "name@version"), re-generate it with a current pnpm version first.` };
+  }
+  const byName = /* @__PURE__ */ new Map();
+  for (const { name, version } of rawEntries) {
+    let versions = byName.get(name);
+    if (!versions) {
+      versions = /* @__PURE__ */ new Map();
+      byName.set(name, versions);
+    }
+    versions.set(version, (versions.get(version) ?? 0) + 1);
+  }
+  const packages = [];
+  for (const [name, versions] of byName) {
+    const versionList = [...versions.entries()].map(([version, count]) => ({ version, count })).sort((a, b) => b.count - a.count || a.version.localeCompare(b.version));
+    packages.push({ name, versions: versionList, isDuplicate: versionList.length > 1 });
+  }
+  packages.sort((a, b) => a.name.localeCompare(b.name));
+  const duplicatePackages = packages.filter((p) => p.isDuplicate);
+  return { format: detected, totalPackages: packages.length, duplicatePackages, packages };
+}
+server.tool(
+  "find_duplicate_lockfile_versions",
+  "Parse an npm (package-lock.json), yarn (yarn.lock), or pnpm (pnpm-lock.yaml) lockfile and report every package installed at more than one resolved version, with a count of how many install locations resolve to each version. Format is auto-detected from content unless given explicitly.",
+  {
+    lockfile: z.string().min(1).describe("The full lockfile contents"),
+    format: z.enum(["npm", "yarn", "pnpm"]).optional().describe("Force a format instead of auto-detecting it from content")
+  },
+  async ({ lockfile, format }) => {
+    const result = _findDuplicateLockfileVersionsMcp(lockfile, format);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+var _GIT_DIFF_STAT_FILE_RE_MCP = /^\s*(.+?)\s*\|\s*(Bin|\d+)\s*(.*)$/;
+var _GIT_DIFF_STAT_SUMMARY_RE_MCP = /^\s*(\d+)\s+files?\s+changed(?:,\s*(\d+)\s+insertions?\(\+\))?(?:,\s*(\d+)\s+deletions?\(-\))?/;
+function _summarizeGitDiffStatMcp(input) {
+  if (!input || !input.trim()) return { error: "Input is empty" };
+  const lines = input.replace(/\r\n/g, "\n").split("\n");
+  const files = [];
+  let summaryMatch = null;
+  for (const line of lines) {
+    if (!line.trim()) continue;
+    const sm = line.match(_GIT_DIFF_STAT_SUMMARY_RE_MCP);
+    if (sm) {
+      summaryMatch = sm;
+      continue;
+    }
+    const m = line.match(_GIT_DIFF_STAT_FILE_RE_MCP);
+    if (!m) continue;
+    const rawName = m[1];
+    const countRaw = m[2];
+    const bar = m[3];
+    let file = rawName;
+    let oldFile;
+    const renameMatch = rawName.match(/^(.*?)\s*=>\s*(.*)$/);
+    if (renameMatch) {
+      oldFile = renameMatch[1].trim();
+      file = renameMatch[2].trim();
+    }
+    if (countRaw === "Bin") {
+      files.push({ file, oldFile, changes: null, insertions: null, deletions: null, binary: true, approximate: false });
+      continue;
+    }
+    const changes = parseInt(countRaw, 10);
+    const plusCount = (bar.match(/\+/g) ?? []).length;
+    const minusCount = (bar.match(/-/g) ?? []).length;
+    const barTotal = plusCount + minusCount;
+    let insertions;
+    let deletions;
+    let approximate = false;
+    if (barTotal === changes) {
+      insertions = plusCount;
+      deletions = minusCount;
+    } else if (barTotal > 0) {
+      approximate = true;
+      insertions = Math.round(changes * plusCount / barTotal);
+      deletions = changes - insertions;
+    } else if (changes === 0) {
+      insertions = 0;
+      deletions = 0;
+    } else {
+      approximate = true;
+      insertions = null;
+      deletions = null;
+    }
+    files.push({ file, oldFile, changes, insertions, deletions, binary: false, approximate });
+  }
+  if (files.length === 0) {
+    return { error: "No file stat lines found; expected output from `git diff --stat` or `git log --stat`" };
+  }
+  let filesChanged = files.length;
+  let totalInsertions = files.reduce((sum, f) => sum + (f.insertions ?? 0), 0);
+  let totalDeletions = files.reduce((sum, f) => sum + (f.deletions ?? 0), 0);
+  if (summaryMatch) {
+    filesChanged = parseInt(summaryMatch[1], 10);
+    if (summaryMatch[2]) totalInsertions = parseInt(summaryMatch[2], 10);
+    if (summaryMatch[3]) totalDeletions = parseInt(summaryMatch[3], 10);
+  }
+  return { files, filesChanged, totalInsertions, totalDeletions };
+}
+server.tool(
+  "summarize_git_diff_stat",
+  "Parse the per-file lines and trailing summary line of `git diff --stat` or `git log --stat` output into structured per-file insertion/deletion counts plus overall totals. Once a diff is wide enough that git scales the bar down, the per-file split is a proportional estimate (flagged via approximate) rather than an exact count, though the overall totals stay exact.",
+  {
+    diffStat: z.string().min(1).describe("Output of `git diff --stat` or `git log --stat`")
+  },
+  async ({ diffStat }) => {
+    const result = _summarizeGitDiffStatMcp(diffStat);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+var _ALT_SVC_DEPRECATED_H3_DRAFTS_MCP = /* @__PURE__ */ new Set(["h3-29", "h3-27", "h3-25", "h3-24", "h3-23", "h3-22"]);
+var _ALT_SVC_PROTOCOL_NOTES_MCP = {
+  "h3": "HTTP/3 over QUIC, the current protocol ID clients should be offered.",
+  "h3-29": 'An outdated HTTP/3 draft version (draft-29); modern clients only match "h3".',
+  "h3-27": 'An outdated HTTP/3 draft version (draft-27); modern clients only match "h3".',
+  "h3-25": 'An outdated HTTP/3 draft version (draft-25); modern clients only match "h3".',
+  "h2": "HTTP/2 over TLS.",
+  "h2c": "HTTP/2 over cleartext TCP; rarely advertised via Alt-Svc since it needs an out-of-band upgrade rather than ALPN negotiation.",
+  "http/1.1": "Plain HTTP/1.1; advertising it via Alt-Svc is unusual since it is already the universal fallback."
+};
+function _buildAltSvcHeaderMcp(alternatives) {
+  if (!Array.isArray(alternatives) || alternatives.length === 0) {
+    return { error: "At least one alternative service is required" };
+  }
+  const warnings = [];
+  const entries = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const alt of alternatives) {
+    const protocolId = typeof alt.protocolId === "string" ? alt.protocolId.trim() : "";
+    if (!protocolId) return { error: 'Each alternative needs a protocol-id (e.g. "h3")' };
+    if (!Number.isInteger(alt.port) || alt.port < 1 || alt.port > 65535) {
+      return { error: `Each alternative needs a valid port (1-65535), got ${JSON.stringify(alt.port)}` };
+    }
+    const host = alt.host?.trim();
+    const authority = `${host ?? ""}:${alt.port}`;
+    const maxAge = alt.maxAge !== void 0 ? alt.maxAge : 86400;
+    if (!Number.isFinite(maxAge) || maxAge < 0) return { error: "maxAge must be a non-negative number of seconds" };
+    const persist = alt.persist === true;
+    const dedupeKey = `${protocolId.toLowerCase()}|${authority.toLowerCase()}`;
+    if (seen.has(dedupeKey)) {
+      warnings.push(`duplicate alternative "${protocolId}=${JSON.stringify(authority)}" was removed`);
+      continue;
+    }
+    seen.add(dedupeKey);
+    if (maxAge === 0) warnings.push(`"${protocolId}" has ma=0, so clients should treat it as already expired`);
+    if (persist && maxAge === 0) warnings.push(`"${protocolId}" sets persist=1 with ma=0, which is contradictory: the entry expires immediately`);
+    if (_ALT_SVC_DEPRECATED_H3_DRAFTS_MCP.has(protocolId.toLowerCase())) {
+      warnings.push(`"${protocolId}" is an outdated HTTP/3 draft protocol-id; modern clients only match "h3"`);
+    }
+    const note = _ALT_SVC_PROTOCOL_NOTES_MCP[protocolId.toLowerCase()] ?? `Advertises "${protocolId}" as an alternative protocol clients may switch to for this authority.`;
+    entries.push({ protocolId, authority, maxAge, persist, note });
+  }
+  if (entries.length === 0) return { error: "At least one alternative service is required" };
+  const headerValue = entries.map((e) => {
+    let s = `${e.protocolId}="${e.authority}"; ma=${e.maxAge}`;
+    if (e.persist) s += "; persist=1";
+    return s;
+  }).join(", ");
+  return { header: `Alt-Svc: ${headerValue}`, headerValue, entries, cleared: false, warnings };
+}
+function _altSvcSplitTopLevelMcp(s, sep) {
+  const out = [];
+  let inQuotes = false;
+  let current = "";
+  for (const ch of s) {
+    if (ch === '"') inQuotes = !inQuotes;
+    if (ch === sep && !inQuotes) {
+      out.push(current);
+      current = "";
+    } else {
+      current += ch;
+    }
+  }
+  out.push(current);
+  return out;
+}
+function _parseAltSvcHeaderMcp(raw) {
+  if (!raw || raw.trim() === "") return { error: "Input is empty" };
+  const withoutLabel = raw.trim().replace(/^alt-svc:\s*/i, "");
+  if (withoutLabel.toLowerCase() === "clear") {
+    return { header: "Alt-Svc: clear", headerValue: "clear", entries: [], cleared: true, warnings: [] };
+  }
+  const parts = _altSvcSplitTopLevelMcp(withoutLabel, ",");
+  const alternatives = [];
+  for (const part of parts) {
+    const trimmedPart = part.trim();
+    if (!trimmedPart) continue;
+    const eq = trimmedPart.indexOf("=");
+    if (eq === -1) return { error: `Could not parse alternative: "${trimmedPart}"` };
+    const protocolId = trimmedPart.slice(0, eq).trim();
+    const rest = trimmedPart.slice(eq + 1).trim();
+    const segments = _altSvcSplitTopLevelMcp(rest, ";").map((s) => s.trim());
+    const authorityMatch = segments[0]?.match(/^"(.*)"$/);
+    if (!authorityMatch) return { error: `Alternative "${protocolId}" is missing a quoted authority (e.g. ":443")` };
+    const authority = authorityMatch[1];
+    const colonIdx = authority.lastIndexOf(":");
+    if (colonIdx === -1) return { error: `Alternative "${protocolId}" has an authority with no port: "${authority}"` };
+    const host = authority.slice(0, colonIdx) || void 0;
+    const portStr = authority.slice(colonIdx + 1);
+    const port = Number(portStr);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) return { error: `Alternative "${protocolId}" has an invalid port: "${portStr}"` };
+    let maxAge;
+    let persist = false;
+    for (const seg of segments.slice(1)) {
+      const sepIdx = seg.indexOf("=");
+      if (sepIdx === -1) continue;
+      const key = seg.slice(0, sepIdx).trim().toLowerCase();
+      const value = seg.slice(sepIdx + 1).trim();
+      if (key === "ma") maxAge = Number(value);
+      if (key === "persist") persist = value === "1";
+    }
+    if (maxAge !== void 0 && !Number.isFinite(maxAge)) return { error: `Alternative "${protocolId}" has a non-numeric ma value` };
+    alternatives.push({ protocolId, host, port, maxAge, persist });
+  }
+  if (alternatives.length === 0) return { error: "No alternative services found" };
+  return _buildAltSvcHeaderMcp(alternatives);
+}
+server.tool(
+  "build_alt_svc_header",
+  'Build an Alt-Svc response-header value (RFC 7838) from one or more alternative services, each a protocol-id (e.g. "h3"), optional host, port, max-age in seconds, and an optional persist flag, attaching a plain-English note for each well-known protocol-id.',
+  {
+    alternatives: z.array(z.object({
+      protocolId: z.string().min(1).describe('ALPN protocol-id, e.g. "h3" or "h2"'),
+      host: z.string().optional().describe("Alternative host; omit to mean the same host"),
+      port: z.number().int().min(1).max(65535),
+      maxAge: z.number().min(0).optional().describe("Seconds the alternative stays valid (default 86400)"),
+      persist: z.boolean().optional().describe("Whether the entry should survive a network configuration change")
+    })).min(1).describe("Alternative services to advertise")
+  },
+  async ({ alternatives }) => {
+    const result = _buildAltSvcHeaderMcp(alternatives);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
+server.tool(
+  "parse_alt_svc_header",
+  'Parse an existing Alt-Svc header value (with or without a leading "Alt-Svc:" label), including the special "clear" value, into its individual alternative services with plain-English protocol notes.',
+  {
+    header: z.string().min(1).describe("The Alt-Svc header value to parse")
+  },
+  async ({ header }) => {
+    const result = _parseAltSvcHeaderMcp(header);
+    if ("error" in result) return errText(result);
+    return text(JSON.stringify(result, null, 2));
+  }
+);
 var transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@utilix-tech/mcp",
-  "version": "0.92.0",
-  "description": "MCP server exposing 277 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
+  "version": "0.94.0",
+  "description": "MCP server exposing 279 Utilix developer tools to Claude, Cursor, VS Code Copilot, and any MCP-compatible AI assistant.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",
   "homepage": "https://utilix.tech/mcp",