@utilix-tech/sdk 0.4.0 → 0.5.0

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/sdk
 
-**140+ developer utility functions for Node.js: runs locally, no API key required.**
+**523 developer utility functions for Node.js: runs locally, no API key required.**
 
 [![npm version](https://img.shields.io/npm/v/@utilix-tech/sdk?style=flat-square&color=cb3837)](https://www.npmjs.com/package/@utilix-tech/sdk)
 [![npm downloads](https://img.shields.io/npm/dm/@utilix-tech/sdk?style=flat-square)](https://www.npmjs.com/package/@utilix-tech/sdk)
@@ -285,7 +285,7 @@ parseHar(har);
 ### `/api`: cURL, JWT, CORS, HTTP
 
 ```ts
-import { buildCurl, parseCurlCommand, decodeJwt, signJwt,
+import { buildCurl, parseCurlCommand, decodeJwt, signJwt, parseJwks,
          generateCors, generateCspHeader } from "@utilix-tech/sdk/api";
 
 buildCurl({
@@ -305,6 +305,10 @@ parseCurlCommand('curl -X GET https://api.example.com -H "Authorization: Bearer
 decodeJwt("eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...");
 // { header: {...}, payload: {...}, isExpired: false, expiresIn: "2h" }
 
+// JWKS: parse a key set (or a single bare JWK) — inspection only, no verification
+parseJwks('{"keys":[{"kty":"RSA","use":"sig","kid":"1","n":"...","e":"AQAB"}]}');
+// { ok: true, keys: [{ kty: "RSA", kid: "1", keySize: 2048, ... }], count: 1, duplicateKids: [] }
+
 // Generate CORS headers
 generateCors({ origins: ["https://myapp.com"], methods: ["GET", "POST"] });
 
@@ -412,16 +416,22 @@ analyzeString("café");          // { length: 4, codePoints: [...], ... }
 
 ---
 
-### `/media`: Image Header Parsing
+### `/media`: Image Header Parsing & PDF Metadata
 
 ```ts
-import { readImageInfo } from "@utilix-tech/sdk/media";
+import { readImageInfo, readPdfMetadata } from "@utilix-tech/sdk/media";
 
 // Reads format, dimensions, bit depth, and alpha channel straight from
 // file bytes: no decoding, no canvas, no image library.
 const bytes = await fs.promises.readFile("photo.png");
 readImageInfo(new Uint8Array(bytes));
 // { format: "png", width: 1920, height: 1080, bitDepth: 8, colorType: "rgba", hasAlpha: true }
+
+// Reads title, author, dates, page count, and encryption flag from a PDF's
+// trailer/Info dictionary: no pdf.js or other PDF library required.
+const pdfBytes = await fs.promises.readFile("report.pdf");
+readPdfMetadata(new Uint8Array(pdfBytes));
+// { version: "1.7", pageCount: 12, title: "Q3 Report", author: "Jane Doe", ... }
 ```
 
 Supports PNG, JPEG, GIF, WebP, and BMP.
@@ -441,13 +451,13 @@ Supports PNG, JPEG, GIF, WebP, and BMP.
 | `@utilix-tech/sdk/time` | Date diff, timezone convert, cron parse, relative time |
 | `@utilix-tech/sdk/units` | Bytes, CSS px/rem, number bases, currency format |
 | `@utilix-tech/sdk/network` | HTTP status codes, IP validation, country flags, geolocation URLs, HAR file parsing |
-| `@utilix-tech/sdk/api` | cURL build/parse, JWT decode/sign, CORS headers, CSP header |
+| `@utilix-tech/sdk/api` | cURL build/parse, JWT decode/sign, JWKS parse, CORS headers, CSP header |
 | `@utilix-tech/sdk/code` | SQL format/minify, HTML format/minify, regex tester, GraphQL format |
 | `@utilix-tech/sdk/color` | Hex/RGB/HSL/HSV/CMYK convert, palette generation, contrast check |
 | `@utilix-tech/sdk/css` | CSS gradient, box-shadow, border-radius, keyframe animation generators |
 | `@utilix-tech/sdk/misc` | SVG optimize/sanitize, file size format, Unicode inspector |
 | `@utilix-tech/sdk/ai_agent` | Token estimate/trim, chunk text, extract URLs/JSON/keywords, sanitize HTML, flatten/merge JSON, dedupe lines, validate schema, PII/secret/injection detect |
-| `@utilix-tech/sdk/media` | Image format & dimension reading from raw bytes: PNG, JPEG, GIF, WebP, BMP |
+| `@utilix-tech/sdk/media` | Image format & dimension reading from raw bytes (PNG, JPEG, GIF, WebP, BMP); PDF metadata reading |
 
 ---
 

package/dist/{api-8aZtWhSj.d.cts → api-Xl7OzIgq.d.cts}

@@ -4,6 +4,7 @@
  *  - curl-builder    : buildCurl, buildCurlMultiline, parseCurl
  *  - curl-to-code    : parseCurlCommand, convertToCode
  *  - jwt-decoder     : decodeJwt, formatJwtJson
+ *  - jwk-viewer      : parseJwks
  *  - jwt-signer      : base64urlEncode, base64urlDecode, signJwt
  *  - cors-builder    : validateCorsConfig, generateCors
  *  - csp-builder     : generateCspHeader, generateFullHeader, parseCspHeader, validateCspConfig
@@ -78,6 +79,33 @@ interface JwtDecodeError {
 type JwtResult = JwtDecodeResult | JwtDecodeError;
 declare function decodeJwt(token: string): JwtResult;
 declare function formatJwtJson(obj: Record<string, unknown>): string;
+interface JwkSummary {
+    kty: string;
+    use?: string;
+    keyOps?: string[];
+    alg?: string;
+    kid?: string;
+    keySize: number | null;
+    curve?: string;
+    raw: Record<string, unknown>;
+}
+interface JwksResult {
+    ok: true;
+    keys: JwkSummary[];
+    count: number;
+    duplicateKids: string[];
+}
+interface JwksError {
+    ok: false;
+    error: string;
+}
+type JwksParseResult = JwksResult | JwksError;
+/**
+ * Parse a JSON Web Key Set (or a single bare JWK) and summarize each key's
+ * type, use, algorithm, key ID, and approximate size. Does not verify or
+ * use the keys cryptographically: this is inspection only.
+ */
+declare function parseJwks(input: string): JwksParseResult;
 type JwtAlgorithm = 'HS256' | 'HS384' | 'HS512';
 interface JwtSignOptions {
     algorithm?: JwtAlgorithm;
@@ -255,6 +283,10 @@ type api_FormatResult = FormatResult;
 declare const api_HTTP_METHODS: typeof HTTP_METHODS;
 type api_Header = Header;
 type api_HttpMethod = HttpMethod;
+type api_JwkSummary = JwkSummary;
+type api_JwksError = JwksError;
+type api_JwksParseResult = JwksParseResult;
+type api_JwksResult = JwksResult;
 type api_JwtAlgorithm = JwtAlgorithm;
 type api_JwtDecodeError = JwtDecodeError;
 type api_JwtDecodeResult = JwtDecodeResult;
@@ -294,6 +326,7 @@ declare const api_normalizeUrl: typeof normalizeUrl;
 declare const api_parseCspHeader: typeof parseCspHeader;
 declare const api_parseCurl: typeof parseCurl;
 declare const api_parseCurlCommand: typeof parseCurlCommand;
+declare const api_parseJwks: typeof parseJwks;
 declare const api_parseMetaTags: typeof parseMetaTags;
 declare const api_parseUrl: typeof parseUrl;
 declare const api_removeParam: typeof removeParam;
@@ -302,7 +335,7 @@ declare const api_validateCorsConfig: typeof validateCorsConfig;
 declare const api_validateCspConfig: typeof validateCspConfig;
 declare const api_validateOgTags: typeof validateOgTags;
 declare namespace api {
-  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HttpMethod as HttpMethod, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TwitterTags as TwitterTags, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateMetaHtml as generateMetaHtml, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags };
+  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HttpMethod as HttpMethod, type api_JwkSummary as JwkSummary, type api_JwksError as JwksError, type api_JwksParseResult as JwksParseResult, type api_JwksResult as JwksResult, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TwitterTags as TwitterTags, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateMetaHtml as generateMetaHtml, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseJwks as parseJwks, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags };
 }
 
-export { normalizeUrl as $, buildUrl as A, convertToCode as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, decodeJwt as E, type FormatResult as F, decodeUrlComponent as G, HTTP_METHODS as H, detectFormat as I, type JwtAlgorithm as J, encodeUrlComponent as K, extractJsonPaths as L, type MetaTags as M, formatJwtJson as N, type OgTags as O, type ParsedUrl as P, formatResponse as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, generateCors as U, generateCspHeader as V, generateFullHeader as W, generateMetaHtml as X, getParam as Y, getStats as Z, isValidUrl as _, api as a, parseCspHeader as a0, parseCurl as a1, parseCurlCommand as a2, parseMetaTags as a3, parseUrl as a4, removeParam as a5, signJwt as a6, validateCorsConfig as a7, validateCspConfig as a8, validateOgTags as a9, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HttpMethod as n, type JwtDecodeError as o, type JwtDecodeResult as p, type JwtExpiry as q, type JwtPart as r, type JwtResult as s, type JwtSignOptions as t, type TwitterTags as u, addParam as v, base64urlDecode as w, base64urlEncode as x, buildCurl as y, buildCurlMultiline as z };
+export { generateMetaHtml as $, base64urlDecode as A, base64urlEncode as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, buildCurl as E, type FormatResult as F, buildCurlMultiline as G, HTTP_METHODS as H, buildUrl as I, type JwkSummary as J, convertToCode as K, decodeJwt as L, type MetaTags as M, decodeUrlComponent as N, type OgTags as O, type ParsedUrl as P, detectFormat as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, encodeUrlComponent as U, extractJsonPaths as V, formatJwtJson as W, formatResponse as X, generateCors as Y, generateCspHeader as Z, generateFullHeader as _, api as a, getParam as a0, getStats as a1, isValidUrl as a2, normalizeUrl as a3, parseCspHeader as a4, parseCurl as a5, parseCurlCommand as a6, parseJwks as a7, parseMetaTags as a8, parseUrl as a9, removeParam as aa, signJwt as ab, validateCorsConfig as ac, validateCspConfig as ad, validateOgTags as ae, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HttpMethod as n, type JwksError as o, type JwksParseResult as p, type JwksResult as q, type JwtAlgorithm as r, type JwtDecodeError as s, type JwtDecodeResult as t, type JwtExpiry as u, type JwtPart as v, type JwtResult as w, type JwtSignOptions as x, type TwitterTags as y, addParam as z };

package/dist/{api-8aZtWhSj.d.ts → api-Xl7OzIgq.d.ts}

@@ -4,6 +4,7 @@
  *  - curl-builder    : buildCurl, buildCurlMultiline, parseCurl
  *  - curl-to-code    : parseCurlCommand, convertToCode
  *  - jwt-decoder     : decodeJwt, formatJwtJson
+ *  - jwk-viewer      : parseJwks
  *  - jwt-signer      : base64urlEncode, base64urlDecode, signJwt
  *  - cors-builder    : validateCorsConfig, generateCors
  *  - csp-builder     : generateCspHeader, generateFullHeader, parseCspHeader, validateCspConfig
@@ -78,6 +79,33 @@ interface JwtDecodeError {
 type JwtResult = JwtDecodeResult | JwtDecodeError;
 declare function decodeJwt(token: string): JwtResult;
 declare function formatJwtJson(obj: Record<string, unknown>): string;
+interface JwkSummary {
+    kty: string;
+    use?: string;
+    keyOps?: string[];
+    alg?: string;
+    kid?: string;
+    keySize: number | null;
+    curve?: string;
+    raw: Record<string, unknown>;
+}
+interface JwksResult {
+    ok: true;
+    keys: JwkSummary[];
+    count: number;
+    duplicateKids: string[];
+}
+interface JwksError {
+    ok: false;
+    error: string;
+}
+type JwksParseResult = JwksResult | JwksError;
+/**
+ * Parse a JSON Web Key Set (or a single bare JWK) and summarize each key's
+ * type, use, algorithm, key ID, and approximate size. Does not verify or
+ * use the keys cryptographically: this is inspection only.
+ */
+declare function parseJwks(input: string): JwksParseResult;
 type JwtAlgorithm = 'HS256' | 'HS384' | 'HS512';
 interface JwtSignOptions {
     algorithm?: JwtAlgorithm;
@@ -255,6 +283,10 @@ type api_FormatResult = FormatResult;
 declare const api_HTTP_METHODS: typeof HTTP_METHODS;
 type api_Header = Header;
 type api_HttpMethod = HttpMethod;
+type api_JwkSummary = JwkSummary;
+type api_JwksError = JwksError;
+type api_JwksParseResult = JwksParseResult;
+type api_JwksResult = JwksResult;
 type api_JwtAlgorithm = JwtAlgorithm;
 type api_JwtDecodeError = JwtDecodeError;
 type api_JwtDecodeResult = JwtDecodeResult;
@@ -294,6 +326,7 @@ declare const api_normalizeUrl: typeof normalizeUrl;
 declare const api_parseCspHeader: typeof parseCspHeader;
 declare const api_parseCurl: typeof parseCurl;
 declare const api_parseCurlCommand: typeof parseCurlCommand;
+declare const api_parseJwks: typeof parseJwks;
 declare const api_parseMetaTags: typeof parseMetaTags;
 declare const api_parseUrl: typeof parseUrl;
 declare const api_removeParam: typeof removeParam;
@@ -302,7 +335,7 @@ declare const api_validateCorsConfig: typeof validateCorsConfig;
 declare const api_validateCspConfig: typeof validateCspConfig;
 declare const api_validateOgTags: typeof validateOgTags;
 declare namespace api {
-  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HttpMethod as HttpMethod, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TwitterTags as TwitterTags, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateMetaHtml as generateMetaHtml, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags };
+  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HttpMethod as HttpMethod, type api_JwkSummary as JwkSummary, type api_JwksError as JwksError, type api_JwksParseResult as JwksParseResult, type api_JwksResult as JwksResult, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TwitterTags as TwitterTags, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateMetaHtml as generateMetaHtml, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseJwks as parseJwks, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags };
 }
 
-export { normalizeUrl as $, buildUrl as A, convertToCode as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, decodeJwt as E, type FormatResult as F, decodeUrlComponent as G, HTTP_METHODS as H, detectFormat as I, type JwtAlgorithm as J, encodeUrlComponent as K, extractJsonPaths as L, type MetaTags as M, formatJwtJson as N, type OgTags as O, type ParsedUrl as P, formatResponse as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, generateCors as U, generateCspHeader as V, generateFullHeader as W, generateMetaHtml as X, getParam as Y, getStats as Z, isValidUrl as _, api as a, parseCspHeader as a0, parseCurl as a1, parseCurlCommand as a2, parseMetaTags as a3, parseUrl as a4, removeParam as a5, signJwt as a6, validateCorsConfig as a7, validateCspConfig as a8, validateOgTags as a9, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HttpMethod as n, type JwtDecodeError as o, type JwtDecodeResult as p, type JwtExpiry as q, type JwtPart as r, type JwtResult as s, type JwtSignOptions as t, type TwitterTags as u, addParam as v, base64urlDecode as w, base64urlEncode as x, buildCurl as y, buildCurlMultiline as z };
+export { generateMetaHtml as $, base64urlDecode as A, base64urlEncode as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, buildCurl as E, type FormatResult as F, buildCurlMultiline as G, HTTP_METHODS as H, buildUrl as I, type JwkSummary as J, convertToCode as K, decodeJwt as L, type MetaTags as M, decodeUrlComponent as N, type OgTags as O, type ParsedUrl as P, detectFormat as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, encodeUrlComponent as U, extractJsonPaths as V, formatJwtJson as W, formatResponse as X, generateCors as Y, generateCspHeader as Z, generateFullHeader as _, api as a, getParam as a0, getStats as a1, isValidUrl as a2, normalizeUrl as a3, parseCspHeader as a4, parseCurl as a5, parseCurlCommand as a6, parseJwks as a7, parseMetaTags as a8, parseUrl as a9, removeParam as aa, signJwt as ab, validateCorsConfig as ac, validateCspConfig as ad, validateOgTags as ae, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HttpMethod as n, type JwksError as o, type JwksParseResult as p, type JwksResult as q, type JwtAlgorithm as r, type JwtDecodeError as s, type JwtDecodeResult as t, type JwtExpiry as u, type JwtPart as v, type JwtResult as w, type JwtSignOptions as x, type TwitterTags as y, addParam as z };

package/dist/{chunk-HFRTZE7T.js → chunk-Q3B3YWOA.js}

@@ -36,6 +36,7 @@ __export(api_exports, {
   parseCspHeader: () => parseCspHeader,
   parseCurl: () => parseCurl,
   parseCurlCommand: () => parseCurlCommand,
+  parseJwks: () => parseJwks,
   parseMetaTags: () => parseMetaTags,
   parseUrl: () => parseUrl,
   removeParam: () => removeParam,
@@ -485,6 +486,55 @@ function decodeJwt(token) {
 function formatJwtJson(obj) {
   return JSON.stringify(obj, null, 2);
 }
+function base64urlByteLength(s) {
+  const clean = s.replace(/=+$/, "");
+  return Math.floor(clean.length * 6 / 8);
+}
+function parseJwks(input) {
+  const trimmed = input.trim();
+  if (!trimmed) return { ok: false, error: "No input provided" };
+  let data;
+  try {
+    data = JSON.parse(trimmed);
+  } catch (e) {
+    return { ok: false, error: `Invalid JSON: ${e instanceof Error ? e.message : String(e)}` };
+  }
+  let rawKeys;
+  if (data && typeof data === "object" && Array.isArray(data.keys)) {
+    rawKeys = data.keys;
+  } else if (data && typeof data === "object" && typeof data.kty === "string") {
+    rawKeys = [data];
+  } else {
+    return { ok: false, error: 'Input must be a JWKS object with a "keys" array, or a single JWK object with a "kty" field' };
+  }
+  const keys = rawKeys.map((k) => {
+    const key = k ?? {};
+    const kty = typeof key.kty === "string" ? key.kty : "unknown";
+    let keySize = null;
+    let curve;
+    if (kty === "RSA" && typeof key.n === "string") {
+      keySize = base64urlByteLength(key.n) * 8;
+    } else if ((kty === "EC" || kty === "OKP") && typeof key.crv === "string") {
+      curve = key.crv;
+    } else if (kty === "oct" && typeof key.k === "string") {
+      keySize = base64urlByteLength(key.k) * 8;
+    }
+    return {
+      kty,
+      use: typeof key.use === "string" ? key.use : void 0,
+      keyOps: Array.isArray(key.key_ops) ? key.key_ops.filter((x) => typeof x === "string") : void 0,
+      alg: typeof key.alg === "string" ? key.alg : void 0,
+      kid: typeof key.kid === "string" ? key.kid : void 0,
+      keySize,
+      curve,
+      raw: key
+    };
+  });
+  const kidCounts = /* @__PURE__ */ new Map();
+  for (const k of keys) if (k.kid) kidCounts.set(k.kid, (kidCounts.get(k.kid) ?? 0) + 1);
+  const duplicateKids = [...kidCounts.entries()].filter(([, c]) => c > 1).map(([kid]) => kid);
+  return { ok: true, keys, count: keys.length, duplicateKids };
+}
 var ALG_TO_NODE_HASH = {
   HS256: "sha256",
   HS384: "sha384",
@@ -1216,4 +1266,4 @@ function generateMetaHtml(tags) {
   return lines.join("\n");
 }
 
-export { COMMON_HEADERS, COMMON_PRESETS, CORS_COMMON_HEADERS, DEFAULT_CORS_CONFIG, DIRECTIVE_DESCRIPTIONS, HTTP_METHODS, SUPPORTED_LANGUAGES, addParam, api_exports, base64urlDecode, base64urlEncode, buildCurl, buildCurlMultiline, buildUrl, convertToCode, decodeJwt, decodeUrlComponent, detectFormat, encodeUrlComponent, extractJsonPaths, formatJwtJson, formatResponse, generateCors, generateCspHeader, generateFullHeader, generateMetaHtml, getParam, getStats, isValidUrl, normalizeUrl, parseCspHeader, parseCurl, parseCurlCommand, parseMetaTags, parseUrl, removeParam, signJwt, validateCorsConfig, validateCspConfig, validateOgTags };
+export { COMMON_HEADERS, COMMON_PRESETS, CORS_COMMON_HEADERS, DEFAULT_CORS_CONFIG, DIRECTIVE_DESCRIPTIONS, HTTP_METHODS, SUPPORTED_LANGUAGES, addParam, api_exports, base64urlDecode, base64urlEncode, buildCurl, buildCurlMultiline, buildUrl, convertToCode, decodeJwt, decodeUrlComponent, detectFormat, encodeUrlComponent, extractJsonPaths, formatJwtJson, formatResponse, generateCors, generateCspHeader, generateFullHeader, generateMetaHtml, getParam, getStats, isValidUrl, normalizeUrl, parseCspHeader, parseCurl, parseCurlCommand, parseJwks, parseMetaTags, parseUrl, removeParam, signJwt, validateCorsConfig, validateCspConfig, validateOgTags };

package/dist/chunk-WWKPLYEP.js

@@ -0,0 +1,277 @@
+import { __export } from './chunk-MLKGABMK.js';
+
+// src/tools/media.ts
+var media_exports = {};
+__export(media_exports, {
+  readImageInfo: () => readImageInfo,
+  readPdfMetadata: () => readPdfMetadata
+});
+function readU32BE(bytes, offset) {
+  return (bytes[offset] << 24 | bytes[offset + 1] << 16 | bytes[offset + 2] << 8 | bytes[offset + 3]) >>> 0;
+}
+function readI32LE(bytes, offset) {
+  return bytes[offset] | bytes[offset + 1] << 8 | bytes[offset + 2] << 16 | bytes[offset + 3] << 24;
+}
+var PNG_COLOR_TYPES = {
+  0: "grayscale",
+  2: "rgb",
+  3: "palette",
+  4: "grayscale+alpha",
+  6: "rgba"
+};
+function readPng(bytes) {
+  if (bytes.length < 33) return { error: "Truncated PNG file" };
+  const width = readU32BE(bytes, 16);
+  const height = readU32BE(bytes, 20);
+  const bitDepth = bytes[24];
+  const colorTypeNum = bytes[25];
+  const colorType = PNG_COLOR_TYPES[colorTypeNum] ?? "unknown";
+  const hasAlpha = colorTypeNum === 4 || colorTypeNum === 6;
+  return { format: "png", width, height, bitDepth, colorType, hasAlpha };
+}
+function readGif(bytes) {
+  if (bytes.length < 10) return { error: "Truncated GIF file" };
+  const width = bytes[6] | bytes[7] << 8;
+  const height = bytes[8] | bytes[9] << 8;
+  return { format: "gif", width, height };
+}
+function readBmp(bytes) {
+  if (bytes.length < 30) return { error: "Truncated BMP file" };
+  const width = readI32LE(bytes, 18);
+  const heightRaw = readI32LE(bytes, 22);
+  const bitDepth = bytes[28] | bytes[29] << 8;
+  return { format: "bmp", width: Math.abs(width), height: Math.abs(heightRaw), bitDepth };
+}
+function readWebp(bytes) {
+  if (bytes.length < 16) return { error: "Truncated WebP file" };
+  const fourCC = String.fromCharCode(bytes[12], bytes[13], bytes[14], bytes[15]);
+  if (fourCC === "VP8 ") {
+    if (bytes.length < 30) return { error: "Truncated WebP file" };
+    const width = (bytes[26] | bytes[27] << 8) & 16383;
+    const height = (bytes[28] | bytes[29] << 8) & 16383;
+    return { format: "webp", width, height };
+  }
+  if (fourCC === "VP8L") {
+    if (bytes.length < 25) return { error: "Truncated WebP file" };
+    const bits = bytes[21] | bytes[22] << 8 | bytes[23] << 16 | bytes[24] << 24;
+    const width = (bits & 16383) + 1;
+    const height = (bits >>> 14 & 16383) + 1;
+    const hasAlpha = !!(bits >>> 28 & 1);
+    return { format: "webp", width, height, hasAlpha };
+  }
+  if (fourCC === "VP8X") {
+    if (bytes.length < 30) return { error: "Truncated WebP file" };
+    const flags = bytes[20];
+    const hasAlpha = !!(flags & 16);
+    const width = (bytes[24] | bytes[25] << 8 | bytes[26] << 16) + 1;
+    const height = (bytes[27] | bytes[28] << 8 | bytes[29] << 16) + 1;
+    return { format: "webp", width, height, hasAlpha };
+  }
+  return { error: "Unrecognized WebP chunk format" };
+}
+var JPEG_SOF_MARKERS = /* @__PURE__ */ new Set([
+  192,
+  193,
+  194,
+  195,
+  197,
+  198,
+  199,
+  201,
+  202,
+  203,
+  205,
+  206,
+  207
+]);
+function readJpeg(bytes) {
+  let offset = 2;
+  while (offset < bytes.length - 1) {
+    if (bytes[offset] !== 255) {
+      offset++;
+      continue;
+    }
+    const marker = bytes[offset + 1];
+    if (marker === 216 || marker === 1 || marker >= 208 && marker <= 215) {
+      offset += 2;
+      continue;
+    }
+    if (marker === 217) break;
+    if (offset + 3 >= bytes.length) break;
+    const segmentLength = bytes[offset + 2] << 8 | bytes[offset + 3];
+    if (JPEG_SOF_MARKERS.has(marker)) {
+      if (offset + 9 >= bytes.length) return { error: "Truncated JPEG SOF segment" };
+      const bitDepth = bytes[offset + 4];
+      const height = bytes[offset + 5] << 8 | bytes[offset + 6];
+      const width = bytes[offset + 7] << 8 | bytes[offset + 8];
+      const components = bytes[offset + 9];
+      const colorType = components === 1 ? "grayscale" : components === 3 ? "rgb" : components === 4 ? "cmyk" : "unknown";
+      return { format: "jpeg", width, height, bitDepth, colorType };
+    }
+    offset += 2 + segmentLength;
+  }
+  return { error: "No SOF marker found in JPEG (file may be corrupt)" };
+}
+function readImageInfo(bytes) {
+  if (bytes.length < 10) return { error: "File too small to determine format" };
+  if (bytes[0] === 137 && bytes[1] === 80 && bytes[2] === 78 && bytes[3] === 71 && bytes[4] === 13 && bytes[5] === 10 && bytes[6] === 26 && bytes[7] === 10) {
+    return readPng(bytes);
+  }
+  if (bytes[0] === 71 && bytes[1] === 73 && bytes[2] === 70) {
+    return readGif(bytes);
+  }
+  if (bytes[0] === 66 && bytes[1] === 77) {
+    return readBmp(bytes);
+  }
+  if (bytes[0] === 82 && bytes[1] === 73 && bytes[2] === 70 && bytes[3] === 70 && bytes[8] === 87 && bytes[9] === 69 && bytes[10] === 66 && bytes[11] === 80) {
+    return readWebp(bytes);
+  }
+  if (bytes[0] === 255 && bytes[1] === 216) {
+    return readJpeg(bytes);
+  }
+  return { error: "Unrecognized image format. Supported formats: PNG, JPEG, GIF, WebP, BMP" };
+}
+function bytesToLatin1(bytes) {
+  let out = "";
+  const CHUNK = 32768;
+  for (let i = 0; i < bytes.length; i += CHUNK) {
+    out += String.fromCharCode(...bytes.subarray(i, i + CHUNK));
+  }
+  return out;
+}
+function decodePdfString(raw, isHex) {
+  const bytes = [];
+  if (isHex) {
+    const hex = raw.replace(/\s+/g, "");
+    const padded = hex.length % 2 === 0 ? hex : hex + "0";
+    for (let i = 0; i < padded.length; i += 2) bytes.push(parseInt(padded.slice(i, i + 2), 16));
+  } else {
+    const s = raw.replace(/\\\r\n|\\\r|\\\n/g, "");
+    for (let i = 0; i < s.length; i++) {
+      const ch = s[i];
+      if (ch === "\\" && i + 1 < s.length) {
+        const next = s[i + 1];
+        if (next === "n") {
+          bytes.push(10);
+          i++;
+        } else if (next === "r") {
+          bytes.push(13);
+          i++;
+        } else if (next === "t") {
+          bytes.push(9);
+          i++;
+        } else if (next === "b") {
+          bytes.push(8);
+          i++;
+        } else if (next === "f") {
+          bytes.push(12);
+          i++;
+        } else if (next === "(" || next === ")" || next === "\\") {
+          bytes.push(next.charCodeAt(0));
+          i++;
+        } else if (/[0-7]/.test(next)) {
+          let oct = next;
+          i++;
+          for (let k = 0; k < 2 && i + 1 < s.length && /[0-7]/.test(s[i + 1]); k++) {
+            i++;
+            oct += s[i];
+          }
+          bytes.push(parseInt(oct, 8) & 255);
+        } else {
+          bytes.push(next.charCodeAt(0));
+          i++;
+        }
+      } else {
+        bytes.push(ch.charCodeAt(0) & 255);
+      }
+    }
+  }
+  if (bytes.length >= 2 && bytes[0] === 254 && bytes[1] === 255) {
+    let out = "";
+    for (let i = 2; i + 1 < bytes.length; i += 2) out += String.fromCharCode(bytes[i] << 8 | bytes[i + 1]);
+    return out;
+  }
+  return bytes.map((b) => String.fromCharCode(b)).join("");
+}
+function extractDictField(dict, key) {
+  const litMatch = dict.match(new RegExp(`/${key}\\s*\\(((?:\\\\.|[^\\\\()])*)\\)`));
+  if (litMatch) return decodePdfString(litMatch[1], false);
+  const hexMatch = dict.match(new RegExp(`/${key}\\s*<([0-9A-Fa-f\\s]*)>`));
+  if (hexMatch) return decodePdfString(hexMatch[1], true);
+  return null;
+}
+function findObject(text, objNum, gen) {
+  const m = text.match(new RegExp(`(?:^|[^0-9])${objNum}\\s+${gen}\\s+obj([\\s\\S]*?)endobj`));
+  return m ? m[1] : null;
+}
+function parsePdfDate(raw) {
+  const m = raw.match(/^D:(\d{4})(\d{2})?(\d{2})?(\d{2})?(\d{2})?(\d{2})?([Z+-])?(\d{2})?'?(\d{2})?'?/);
+  if (!m) return null;
+  const [, y, mo = "01", d = "01", h = "00", mi = "00", s = "00", tz, tzh, tzm] = m;
+  let iso = `${y}-${mo}-${d}T${h}:${mi}:${s}`;
+  if (tz === "Z") iso += "Z";
+  else if (tz === "+" || tz === "-") iso += `${tz}${tzh ?? "00"}:${tzm ?? "00"}`;
+  return iso;
+}
+function readPdfMetadata(bytes) {
+  if (bytes.length < 8) return { error: "File too small to be a PDF" };
+  const header = bytesToLatin1(bytes.subarray(0, 16));
+  const versionMatch = header.match(/%PDF-(\d\.\d)/);
+  if (!versionMatch) return { error: "Not a valid PDF file (missing %PDF header)" };
+  const version = versionMatch[1];
+  const text = bytesToLatin1(bytes);
+  const trailerMatches = [...text.matchAll(/trailer\s*<<([\s\S]*?)>>/g)];
+  let infoDict = null;
+  let encrypted = false;
+  if (trailerMatches.length > 0) {
+    const trailer = trailerMatches[trailerMatches.length - 1][1];
+    encrypted = /\/Encrypt\s+\d+\s+\d+\s+R/.test(trailer);
+    const infoRef = trailer.match(/\/Info\s+(\d+)\s+(\d+)\s+R/);
+    if (infoRef) infoDict = findObject(text, Number(infoRef[1]), Number(infoRef[2]));
+  }
+  const objBlocks = [...text.matchAll(/(\d+)\s+(\d+)\s+obj([\s\S]*?)endobj/g)];
+  if (!infoDict) {
+    for (const b of objBlocks) {
+      if (/\/(Title|Author|Producer|Creator|CreationDate)\b/.test(b[3]) && !/\/Type\s*\/(Page|Pages|Catalog|Font)\b/.test(b[3])) {
+        infoDict = b[3];
+        break;
+      }
+    }
+  }
+  const title = infoDict ? extractDictField(infoDict, "Title") : null;
+  const author = infoDict ? extractDictField(infoDict, "Author") : null;
+  const subject = infoDict ? extractDictField(infoDict, "Subject") : null;
+  const keywords = infoDict ? extractDictField(infoDict, "Keywords") : null;
+  const creator = infoDict ? extractDictField(infoDict, "Creator") : null;
+  const producer = infoDict ? extractDictField(infoDict, "Producer") : null;
+  const creationDateRaw = infoDict ? extractDictField(infoDict, "CreationDate") : null;
+  const modDateRaw = infoDict ? extractDictField(infoDict, "ModDate") : null;
+  let pageCount = null;
+  for (const b of objBlocks) {
+    if (!/\/Type\s*\/Pages\b/.test(b[3])) continue;
+    const countMatch = b[3].match(/\/Count\s+(\d+)/);
+    if (countMatch) {
+      const c = Number(countMatch[1]);
+      if (pageCount === null || c > pageCount) pageCount = c;
+    }
+  }
+  if (pageCount === null) {
+    const pageMatches = text.match(/\/Type\s*\/Page(?!s)\b/g);
+    if (pageMatches) pageCount = pageMatches.length;
+  }
+  return {
+    version,
+    pageCount,
+    title,
+    author,
+    subject,
+    keywords,
+    creator,
+    producer,
+    creationDate: creationDateRaw ? parsePdfDate(creationDateRaw) ?? creationDateRaw : null,
+    modDate: modDateRaw ? parsePdfDate(modDateRaw) ?? modDateRaw : null,
+    encrypted
+  };
+}
+
+export { media_exports, readImageInfo, readPdfMetadata };