@utilix-tech/sdk 0.42.0 → 0.44.0

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.44.0
+- Add `buildPermissionsPolicy`, `parsePermissionsPolicy` (permissions-policy-builder): build a `Permissions-Policy` response header from browser features and their per-feature allowlist with a plain-English note per feature, or parse an existing one into the same shape.
+- Add `calculatePaybackPeriod` (payback-period-calculator): compute the simple and discounted payback period from an initial investment and a series of periodic cash flows.
+
+## 0.43.0
+- Add `validateManifest` (manifest-validator): validate a web app manifest.json against the W3C Web App Manifest spec's installability requirements, including a 512x512 icon and a maskable icon check.
+- Add `lintToolSchema` (tool-schema-linter): lint an LLM tool/function-calling definition (OpenAI, Anthropic, or MCP format) for missing descriptions, invalid names, empty enums, and required/properties mismatches.
+
 ## 0.42.0
 - Add `buildVaryHeader`, `parseVaryHeader` (vary-header-builder): build a `Vary` response header from request-header names with a plain-English caching note per header, or parse an existing Vary header into the same shape.
 

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/sdk
 
-**620 developer utility functions for Node.js: runs locally, no API key required.**
+**626 developer utility functions for Node.js: runs locally, no API key required.**
 
 [![npm version](https://img.shields.io/npm/v/@utilix-tech/sdk?style=flat-square&color=cb3837)](https://www.npmjs.com/package/@utilix-tech/sdk)
 [![npm downloads](https://img.shields.io/npm/dm/@utilix-tech/sdk?style=flat-square)](https://www.npmjs.com/package/@utilix-tech/sdk)
@@ -312,7 +312,7 @@ formatIso8601Duration(90061);        // { iso: "P1DT1H1M1S", ... }
 ### `/units`: Conversions
 
 ```ts
-import { convertBytes, pxToAll, convert, formatValue, validateCardNumber, validateIban, calculateLoan, validateBarcode, calculateTax, calculateCompoundInterest, validateIsbn, calculateTipSplit, calculateSimpleInterest, calculateTimeValue, calculatePercentageChange, convertAprApy, calculateMarginMarkup, calculateDiscount, applySuccessiveDiscounts, calculateBreakEven, calculateVideoBitrate, calculateRuleOf72, calculateEmi, calculateRoi, compareUnitPrices } from "@utilix-tech/sdk/units";
+import { convertBytes, pxToAll, convert, formatValue, validateCardNumber, validateIban, calculateLoan, validateBarcode, calculateTax, calculateCompoundInterest, validateIsbn, calculateTipSplit, calculateSimpleInterest, calculateTimeValue, calculatePercentageChange, convertAprApy, calculateMarginMarkup, calculateDiscount, applySuccessiveDiscounts, calculateBreakEven, calculateVideoBitrate, calculateRuleOf72, calculateEmi, calculateRoi, compareUnitPrices, calculatePaybackPeriod } from "@utilix-tech/sdk/units";
 
 // File sizes
 convertBytes(1073741824, "GB");  // 1
@@ -422,6 +422,10 @@ calculateCashBreakdown(53.75, USD_DENOMINATIONS);
 // Change owed for a payment/tender pair, broken down the same way
 calculateChange(4.65, 5.0, USD_DENOMINATIONS);
 // { changeDue: 0.35, breakdown: [{ denomination: 0.25, count: 1, subtotal: 0.25 }, ...], totalCount: 2 }
+
+// Payback period: simple + discounted, from an initial investment and periodic cash flows
+calculatePaybackPeriod({ initialInvestment: 1000, cashFlows: [400, 400, 400], discountRatePercent: 8 });
+// { paybackPeriod: 2.5, paybackPeriodRounded: 3, recovered: true, discountedPaybackPeriod: 2.9029, ... }
 ```
 
 ---
@@ -433,7 +437,8 @@ import { getStatusCode, isValidIp, isValidIpv4, isValidIpv6,
          searchStatusCodes, buildGeoUrl, countryCodeToFlag,
          parseHar, validateSitemap, validateRobotsTxt,
          parseUserAgent, buildCacheControl, buildReferrerPolicy, parseIpv6Address, buildLinkHeader, checkSetCookieHeader, analyzeEmailHeaders,
-         buildRangeHeader, parseContentRangeHeader, buildVaryHeader, parseVaryHeader } from "@utilix-tech/sdk/network";
+         buildRangeHeader, parseContentRangeHeader, buildVaryHeader, parseVaryHeader, validateManifest,
+         buildPermissionsPolicy, parsePermissionsPolicy } from "@utilix-tech/sdk/network";
 
 getStatusCode(404);
 // { code: 404, text: "Not Found", description: "...", category: "Client Error" }
@@ -504,6 +509,18 @@ buildVaryHeader(["Accept-Encoding", "Accept-Language"]);
 // Parse an existing Vary header value into the same shape
 parseVaryHeader("Vary: Accept-Encoding, Accept-Language");
 // { header: "Vary: Accept-Encoding, Accept-Language", entries: [...], warnings: [] }
+
+// Validate a web app manifest.json against the W3C spec's installability requirements
+validateManifest(JSON.stringify({ name: "My App", start_url: "/", display: "standalone", icons: [{ src: "/icon-512.png", sizes: "512x512", purpose: "any maskable" }] }));
+// { issues: [...], valid: true, summary: { hasMaskableIcon: true, has512Icon: true, ... } }
+
+// Build a Permissions-Policy header from features and their allowlists, with a plain-English note per feature
+buildPermissionsPolicy([{ feature: "camera", allowlist: [] }, { feature: "geolocation", allowlist: ["self"] }]);
+// { header: "Permissions-Policy: camera=(), geolocation=(self)", directives: [...], warnings: [] }
+
+// Parse an existing Permissions-Policy header value into the same shape
+parsePermissionsPolicy("camera=(), geolocation=(self)");
+// { header: "Permissions-Policy: camera=(), geolocation=(self)", directives: [...], warnings: [] }
 ```
 
 ---
@@ -741,14 +758,14 @@ readVideoInfo(new Uint8Array(videoBytes));
 | `@utilix-tech/sdk/data` | CSV, YAML, TOML, XML, INI, NDJSON parse and convert, SRT/WebVTT subtitles, Markdown front matter parser |
 | `@utilix-tech/sdk/generators` | UUID v4/v7, ULID, passwords, strength check, entropy estimator, fake data |
 | `@utilix-tech/sdk/time` | Date diff, timezone convert, cron parse, relative time |
-| `@utilix-tech/sdk/units` | Bytes, CSS px/rem, number bases, currency format, credit card/IBAN/barcode/ISBN validation, loan calculator, EMI calculator, compound/simple interest calculators, VAT/sales tax calculator, tip/bill split calculator, break-even point calculator, Rule of 72 calculator, savings goal calculator, ROI calculator, cash denomination/till calculator |
-| `@utilix-tech/sdk/network` | HTTP status codes, IP validation, country flags, geolocation URLs, HAR file parsing, User-Agent parsing, IPv6 address compress/expand |
+| `@utilix-tech/sdk/units` | Bytes, CSS px/rem, number bases, currency format, credit card/IBAN/barcode/ISBN validation, loan calculator, EMI calculator, compound/simple interest calculators, VAT/sales tax calculator, tip/bill split calculator, break-even point calculator, Rule of 72 calculator, savings goal calculator, ROI calculator, cash denomination/till calculator, payback period calculator |
+| `@utilix-tech/sdk/network` | HTTP status codes, IP validation, country flags, geolocation URLs, HAR file parsing, User-Agent parsing, IPv6 address compress/expand, Permissions-Policy header builder |
 | `@utilix-tech/sdk/api` | cURL build/parse, JWT decode/sign, JWKS parse, CORS headers, CSP header |
 | `@utilix-tech/sdk/code` | SQL format/minify, HTML format/minify, regex tester, GraphQL format, MIME type lookup, GitHub URL parsing, regex ReDoS detector, Conventional Commits linter |
 | `@utilix-tech/sdk/color` | Hex/RGB/HSL/HSV/CMYK convert, palette generation, contrast check |
 | `@utilix-tech/sdk/css` | CSS gradient, box-shadow, border-radius, keyframe animation generators |
 | `@utilix-tech/sdk/misc` | SVG optimize/sanitize, file size format, Unicode inspector |
-| `@utilix-tech/sdk/ai_agent` | Token estimate/trim, chunk text, extract URLs/JSON/keywords, sanitize HTML, flatten/merge JSON, dedupe lines, validate schema, PII/secret/injection detect, vector similarity, few-shot prompt formatter |
+| `@utilix-tech/sdk/ai_agent` | Token estimate/trim, chunk text, extract URLs/JSON/keywords, sanitize HTML, flatten/merge JSON, dedupe lines, validate schema, PII/secret/injection detect, vector similarity, few-shot prompt formatter, tool-definition schema linter |
 | `@utilix-tech/sdk/media` | Image format & dimension reading from raw bytes (PNG, JPEG, GIF, WebP, BMP); PDF metadata reading; PDF page dimension/orientation listing; WAV audio info; ID3 tags; ICO favicon inspection; FLAC metadata reading; MP4/WebM video info |
 
 ---

package/dist/{ai_agent-C1zudGgT.d.cts → ai_agent-CmrVjvYH.d.cts}

@@ -351,6 +351,29 @@ interface FewShotFormatResult {
  * the 'delimiter' format and defaults to '---'.
  */
 declare function formatFewShotExamples(examples: FewShotExample[], format?: FewShotFormat, delimiter?: string): FewShotFormatResult;
+interface ToolSchemaIssue {
+    severity: 'error' | 'warning';
+    tool: string;
+    path: string;
+    message: string;
+}
+interface ToolSchemaLintResult {
+    toolCount: number;
+    issues: ToolSchemaIssue[];
+    valid: boolean;
+}
+/**
+ * Lint an LLM tool/function-calling definition (OpenAI, Anthropic, or MCP
+ * format — a single definition, an array of them, or a `{tools:[...]}`
+ * wrapper) for the mistakes that measurably hurt model accuracy: a missing
+ * or vague description, a name that doesn't match provider naming rules, a
+ * non-object top-level parameter schema, properties missing descriptions,
+ * an empty enum, a `required` entry with no matching property, or duplicate
+ * tool names in the same list.
+ */
+declare function lintToolSchema(jsonText: string): ToolSchemaLintResult | {
+    error: string;
+};
 
 type ai_agent_ChunkStrategy = ChunkStrategy;
 type ai_agent_CompressHtmlResult = CompressHtmlResult;
@@ -393,6 +416,8 @@ type ai_agent_TableResult2 = TableResult2;
 type ai_agent_TextChunk = TextChunk;
 type ai_agent_TokenEstimate = TokenEstimate;
 type ai_agent_TokenEstimateResult = TokenEstimateResult;
+type ai_agent_ToolSchemaIssue = ToolSchemaIssue;
+type ai_agent_ToolSchemaLintResult = ToolSchemaLintResult;
 type ai_agent_TrimResult = TrimResult;
 type ai_agent_TrimStrategy = TrimStrategy;
 type ai_agent_UrlMatch = UrlMatch;
@@ -418,6 +443,7 @@ declare const ai_agent_extractTables: typeof extractTables;
 declare const ai_agent_extractUrls: typeof extractUrls;
 declare const ai_agent_flattenJson: typeof flattenJson;
 declare const ai_agent_formatFewShotExamples: typeof formatFewShotExamples;
+declare const ai_agent_lintToolSchema: typeof lintToolSchema;
 declare const ai_agent_mergeJson: typeof mergeJson;
 declare const ai_agent_redactPii: typeof redactPii;
 declare const ai_agent_repairJson: typeof repairJson;
@@ -430,7 +456,7 @@ declare const ai_agent_unflattenJson: typeof unflattenJson;
 declare const ai_agent_validateJsonSchema: typeof validateJsonSchema;
 declare const ai_agent_vectorSimilarity: typeof vectorSimilarity;
 declare namespace ai_agent {
-  export { type ai_agent_ChunkStrategy as ChunkStrategy, type ai_agent_CompressHtmlResult as CompressHtmlResult, type ai_agent_CompressJsonResult as CompressJsonResult, type ai_agent_CompressMarkdownResult as CompressMarkdownResult, type ai_agent_CostEstimate as CostEstimate, type ai_agent_DedupeResult as DedupeResult, type ai_agent_DedupeStrategy as DedupeStrategy, type ai_agent_DiffEntry2 as DiffEntry2, type ai_agent_DiffOp2 as DiffOp2, type ai_agent_DiffResult2 as DiffResult2, type ai_agent_Entity2 as Entity2, type ai_agent_EntityType2 as EntityType2, type ai_agent_ExtractJsonResult as ExtractJsonResult, type ai_agent_ExtractKeywordsResult as ExtractKeywordsResult, type ai_agent_ExtractUrlsResult as ExtractUrlsResult, type ai_agent_FewShotExample as FewShotExample, type ai_agent_FewShotFormat as FewShotFormat, type ai_agent_FewShotFormatResult as FewShotFormatResult, type ai_agent_InjectionDetectResult as InjectionDetectResult, type ai_agent_InjectionFinding as InjectionFinding, type ai_agent_JsonBlock as JsonBlock, type ai_agent_JsonRepairResult as JsonRepairResult, type ai_agent_Keyword as Keyword, ai_agent_MODEL_PRICING as MODEL_PRICING, type ai_agent_MergeResult as MergeResult, type ai_agent_MergeStrategy as MergeStrategy, type ai_agent_ModelPricing as ModelPricing, type ai_agent_PiiDetectResult as PiiDetectResult, type ai_agent_PiiFinding as PiiFinding, type ai_agent_PiiType as PiiType, type ai_agent_RankedChunk as RankedChunk, type ai_agent_RelevanceResult as RelevanceResult, type ai_agent_SanitizeResult as SanitizeResult, type ai_agent_SecretDetectResult as SecretDetectResult, type ai_agent_SecretFinding as SecretFinding, type ai_agent_SecretType as SecretType, type ai_agent_SummaryResult as SummaryResult, type ai_agent_TableResult2 as TableResult2, type ai_agent_TextChunk as TextChunk, type ai_agent_TokenEstimate as TokenEstimate, type ai_agent_TokenEstimateResult as TokenEstimateResult, type ai_agent_TrimResult as TrimResult, type ai_agent_TrimStrategy as TrimStrategy, type ai_agent_UrlMatch as UrlMatch, type ai_agent_ValidationError as ValidationError, type ai_agent_ValidationResult as ValidationResult, type ai_agent_VectorSimilarityResult as VectorSimilarityResult, ai_agent_chunkText as chunkText, ai_agent_compressHtml as compressHtml, ai_agent_compressJson as compressJson, ai_agent_compressMarkdown as compressMarkdown, ai_agent_deduplicateLines as deduplicateLines, ai_agent_detectPii as detectPii, ai_agent_detectPromptInjection as detectPromptInjection, ai_agent_detectSecrets as detectSecrets, ai_agent_diffJson as diffJson, ai_agent_estimateCost as estimateCost, ai_agent_estimateTokens as estimateTokens, ai_agent_expandQuery as expandQuery, ai_agent_extractEntities as extractEntities, ai_agent_extractJson as extractJson, ai_agent_extractKeywords as extractKeywords, ai_agent_extractTables as extractTables, ai_agent_extractUrls as extractUrls, ai_agent_flattenJson as flattenJson, ai_agent_formatFewShotExamples as formatFewShotExamples, ai_agent_mergeJson as mergeJson, ai_agent_redactPii as redactPii, ai_agent_repairJson as repairJson, ai_agent_rerankChunks as rerankChunks, ai_agent_sanitizeHtml as sanitizeHtml, ai_agent_scoreRelevance as scoreRelevance, ai_agent_summarizeForLlm as summarizeForLlm, ai_agent_trimToTokens as trimToTokens, ai_agent_unflattenJson as unflattenJson, ai_agent_validateJsonSchema as validateJsonSchema, ai_agent_vectorSimilarity as vectorSimilarity };
+  export { type ai_agent_ChunkStrategy as ChunkStrategy, type ai_agent_CompressHtmlResult as CompressHtmlResult, type ai_agent_CompressJsonResult as CompressJsonResult, type ai_agent_CompressMarkdownResult as CompressMarkdownResult, type ai_agent_CostEstimate as CostEstimate, type ai_agent_DedupeResult as DedupeResult, type ai_agent_DedupeStrategy as DedupeStrategy, type ai_agent_DiffEntry2 as DiffEntry2, type ai_agent_DiffOp2 as DiffOp2, type ai_agent_DiffResult2 as DiffResult2, type ai_agent_Entity2 as Entity2, type ai_agent_EntityType2 as EntityType2, type ai_agent_ExtractJsonResult as ExtractJsonResult, type ai_agent_ExtractKeywordsResult as ExtractKeywordsResult, type ai_agent_ExtractUrlsResult as ExtractUrlsResult, type ai_agent_FewShotExample as FewShotExample, type ai_agent_FewShotFormat as FewShotFormat, type ai_agent_FewShotFormatResult as FewShotFormatResult, type ai_agent_InjectionDetectResult as InjectionDetectResult, type ai_agent_InjectionFinding as InjectionFinding, type ai_agent_JsonBlock as JsonBlock, type ai_agent_JsonRepairResult as JsonRepairResult, type ai_agent_Keyword as Keyword, ai_agent_MODEL_PRICING as MODEL_PRICING, type ai_agent_MergeResult as MergeResult, type ai_agent_MergeStrategy as MergeStrategy, type ai_agent_ModelPricing as ModelPricing, type ai_agent_PiiDetectResult as PiiDetectResult, type ai_agent_PiiFinding as PiiFinding, type ai_agent_PiiType as PiiType, type ai_agent_RankedChunk as RankedChunk, type ai_agent_RelevanceResult as RelevanceResult, type ai_agent_SanitizeResult as SanitizeResult, type ai_agent_SecretDetectResult as SecretDetectResult, type ai_agent_SecretFinding as SecretFinding, type ai_agent_SecretType as SecretType, type ai_agent_SummaryResult as SummaryResult, type ai_agent_TableResult2 as TableResult2, type ai_agent_TextChunk as TextChunk, type ai_agent_TokenEstimate as TokenEstimate, type ai_agent_TokenEstimateResult as TokenEstimateResult, type ai_agent_ToolSchemaIssue as ToolSchemaIssue, type ai_agent_ToolSchemaLintResult as ToolSchemaLintResult, type ai_agent_TrimResult as TrimResult, type ai_agent_TrimStrategy as TrimStrategy, type ai_agent_UrlMatch as UrlMatch, type ai_agent_ValidationError as ValidationError, type ai_agent_ValidationResult as ValidationResult, type ai_agent_VectorSimilarityResult as VectorSimilarityResult, ai_agent_chunkText as chunkText, ai_agent_compressHtml as compressHtml, ai_agent_compressJson as compressJson, ai_agent_compressMarkdown as compressMarkdown, ai_agent_deduplicateLines as deduplicateLines, ai_agent_detectPii as detectPii, ai_agent_detectPromptInjection as detectPromptInjection, ai_agent_detectSecrets as detectSecrets, ai_agent_diffJson as diffJson, ai_agent_estimateCost as estimateCost, ai_agent_estimateTokens as estimateTokens, ai_agent_expandQuery as expandQuery, ai_agent_extractEntities as extractEntities, ai_agent_extractJson as extractJson, ai_agent_extractKeywords as extractKeywords, ai_agent_extractTables as extractTables, ai_agent_extractUrls as extractUrls, ai_agent_flattenJson as flattenJson, ai_agent_formatFewShotExamples as formatFewShotExamples, ai_agent_lintToolSchema as lintToolSchema, ai_agent_mergeJson as mergeJson, ai_agent_redactPii as redactPii, ai_agent_repairJson as repairJson, ai_agent_rerankChunks as rerankChunks, ai_agent_sanitizeHtml as sanitizeHtml, ai_agent_scoreRelevance as scoreRelevance, ai_agent_summarizeForLlm as summarizeForLlm, ai_agent_trimToTokens as trimToTokens, ai_agent_unflattenJson as unflattenJson, ai_agent_validateJsonSchema as validateJsonSchema, ai_agent_vectorSimilarity as vectorSimilarity };
 }
 
-export { detectPii as $, type SummaryResult as A, type TextChunk as B, type ChunkStrategy as C, type DedupeResult as D, type Entity2 as E, type FewShotExample as F, type TokenEstimate as G, type TokenEstimateResult as H, type InjectionDetectResult as I, type JsonBlock as J, type Keyword as K, type TrimResult as L, MODEL_PRICING as M, type TrimStrategy as N, type ValidationResult as O, type PiiDetectResult as P, type VectorSimilarityResult as Q, type RankedChunk as R, type SanitizeResult as S, type TableResult2 as T, type UrlMatch as U, type ValidationError as V, chunkText as W, compressHtml as X, compressJson as Y, compressMarkdown as Z, deduplicateLines as _, ai_agent as a, detectPromptInjection as a0, detectSecrets as a1, diffJson as a2, estimateCost as a3, estimateTokens as a4, expandQuery as a5, extractEntities as a6, extractJson as a7, extractKeywords as a8, extractTables as a9, extractUrls as aa, flattenJson as ab, formatFewShotExamples as ac, mergeJson as ad, redactPii as ae, repairJson as af, rerankChunks as ag, sanitizeHtml as ah, scoreRelevance as ai, summarizeForLlm as aj, trimToTokens as ak, unflattenJson as al, validateJsonSchema as am, vectorSimilarity as an, type CompressHtmlResult as b, type CompressJsonResult as c, type CompressMarkdownResult as d, type CostEstimate as e, type DedupeStrategy as f, type DiffEntry2 as g, type DiffOp2 as h, type DiffResult2 as i, type EntityType2 as j, type ExtractJsonResult as k, type ExtractKeywordsResult as l, type ExtractUrlsResult as m, type FewShotFormat as n, type FewShotFormatResult as o, type InjectionFinding as p, type JsonRepairResult as q, type MergeResult as r, type MergeStrategy as s, type ModelPricing as t, type PiiFinding as u, type PiiType as v, type RelevanceResult as w, type SecretDetectResult as x, type SecretFinding as y, type SecretType as z };
+export { compressMarkdown as $, type SummaryResult as A, type TextChunk as B, type ChunkStrategy as C, type DedupeResult as D, type Entity2 as E, type FewShotExample as F, type TokenEstimate as G, type TokenEstimateResult as H, type InjectionDetectResult as I, type JsonBlock as J, type Keyword as K, type ToolSchemaIssue as L, MODEL_PRICING as M, type ToolSchemaLintResult as N, type TrimResult as O, type PiiDetectResult as P, type TrimStrategy as Q, type RankedChunk as R, type SanitizeResult as S, type TableResult2 as T, type UrlMatch as U, type ValidationError as V, type ValidationResult as W, type VectorSimilarityResult as X, chunkText as Y, compressHtml as Z, compressJson as _, ai_agent as a, deduplicateLines as a0, detectPii as a1, detectPromptInjection as a2, detectSecrets as a3, diffJson as a4, estimateCost as a5, estimateTokens as a6, expandQuery as a7, extractEntities as a8, extractJson as a9, extractKeywords as aa, extractTables as ab, extractUrls as ac, flattenJson as ad, formatFewShotExamples as ae, lintToolSchema as af, mergeJson as ag, redactPii as ah, repairJson as ai, rerankChunks as aj, sanitizeHtml as ak, scoreRelevance as al, summarizeForLlm as am, trimToTokens as an, unflattenJson as ao, validateJsonSchema as ap, vectorSimilarity as aq, type CompressHtmlResult as b, type CompressJsonResult as c, type CompressMarkdownResult as d, type CostEstimate as e, type DedupeStrategy as f, type DiffEntry2 as g, type DiffOp2 as h, type DiffResult2 as i, type EntityType2 as j, type ExtractJsonResult as k, type ExtractKeywordsResult as l, type ExtractUrlsResult as m, type FewShotFormat as n, type FewShotFormatResult as o, type InjectionFinding as p, type JsonRepairResult as q, type MergeResult as r, type MergeStrategy as s, type ModelPricing as t, type PiiFinding as u, type PiiType as v, type RelevanceResult as w, type SecretDetectResult as x, type SecretFinding as y, type SecretType as z };

package/dist/{ai_agent-C1zudGgT.d.ts → ai_agent-CmrVjvYH.d.ts}

@@ -351,6 +351,29 @@ interface FewShotFormatResult {
  * the 'delimiter' format and defaults to '---'.
  */
 declare function formatFewShotExamples(examples: FewShotExample[], format?: FewShotFormat, delimiter?: string): FewShotFormatResult;
+interface ToolSchemaIssue {
+    severity: 'error' | 'warning';
+    tool: string;
+    path: string;
+    message: string;
+}
+interface ToolSchemaLintResult {
+    toolCount: number;
+    issues: ToolSchemaIssue[];
+    valid: boolean;
+}
+/**
+ * Lint an LLM tool/function-calling definition (OpenAI, Anthropic, or MCP
+ * format — a single definition, an array of them, or a `{tools:[...]}`
+ * wrapper) for the mistakes that measurably hurt model accuracy: a missing
+ * or vague description, a name that doesn't match provider naming rules, a
+ * non-object top-level parameter schema, properties missing descriptions,
+ * an empty enum, a `required` entry with no matching property, or duplicate
+ * tool names in the same list.
+ */
+declare function lintToolSchema(jsonText: string): ToolSchemaLintResult | {
+    error: string;
+};
 
 type ai_agent_ChunkStrategy = ChunkStrategy;
 type ai_agent_CompressHtmlResult = CompressHtmlResult;
@@ -393,6 +416,8 @@ type ai_agent_TableResult2 = TableResult2;
 type ai_agent_TextChunk = TextChunk;
 type ai_agent_TokenEstimate = TokenEstimate;
 type ai_agent_TokenEstimateResult = TokenEstimateResult;
+type ai_agent_ToolSchemaIssue = ToolSchemaIssue;
+type ai_agent_ToolSchemaLintResult = ToolSchemaLintResult;
 type ai_agent_TrimResult = TrimResult;
 type ai_agent_TrimStrategy = TrimStrategy;
 type ai_agent_UrlMatch = UrlMatch;
@@ -418,6 +443,7 @@ declare const ai_agent_extractTables: typeof extractTables;
 declare const ai_agent_extractUrls: typeof extractUrls;
 declare const ai_agent_flattenJson: typeof flattenJson;
 declare const ai_agent_formatFewShotExamples: typeof formatFewShotExamples;
+declare const ai_agent_lintToolSchema: typeof lintToolSchema;
 declare const ai_agent_mergeJson: typeof mergeJson;
 declare const ai_agent_redactPii: typeof redactPii;
 declare const ai_agent_repairJson: typeof repairJson;
@@ -430,7 +456,7 @@ declare const ai_agent_unflattenJson: typeof unflattenJson;
 declare const ai_agent_validateJsonSchema: typeof validateJsonSchema;
 declare const ai_agent_vectorSimilarity: typeof vectorSimilarity;
 declare namespace ai_agent {
-  export { type ai_agent_ChunkStrategy as ChunkStrategy, type ai_agent_CompressHtmlResult as CompressHtmlResult, type ai_agent_CompressJsonResult as CompressJsonResult, type ai_agent_CompressMarkdownResult as CompressMarkdownResult, type ai_agent_CostEstimate as CostEstimate, type ai_agent_DedupeResult as DedupeResult, type ai_agent_DedupeStrategy as DedupeStrategy, type ai_agent_DiffEntry2 as DiffEntry2, type ai_agent_DiffOp2 as DiffOp2, type ai_agent_DiffResult2 as DiffResult2, type ai_agent_Entity2 as Entity2, type ai_agent_EntityType2 as EntityType2, type ai_agent_ExtractJsonResult as ExtractJsonResult, type ai_agent_ExtractKeywordsResult as ExtractKeywordsResult, type ai_agent_ExtractUrlsResult as ExtractUrlsResult, type ai_agent_FewShotExample as FewShotExample, type ai_agent_FewShotFormat as FewShotFormat, type ai_agent_FewShotFormatResult as FewShotFormatResult, type ai_agent_InjectionDetectResult as InjectionDetectResult, type ai_agent_InjectionFinding as InjectionFinding, type ai_agent_JsonBlock as JsonBlock, type ai_agent_JsonRepairResult as JsonRepairResult, type ai_agent_Keyword as Keyword, ai_agent_MODEL_PRICING as MODEL_PRICING, type ai_agent_MergeResult as MergeResult, type ai_agent_MergeStrategy as MergeStrategy, type ai_agent_ModelPricing as ModelPricing, type ai_agent_PiiDetectResult as PiiDetectResult, type ai_agent_PiiFinding as PiiFinding, type ai_agent_PiiType as PiiType, type ai_agent_RankedChunk as RankedChunk, type ai_agent_RelevanceResult as RelevanceResult, type ai_agent_SanitizeResult as SanitizeResult, type ai_agent_SecretDetectResult as SecretDetectResult, type ai_agent_SecretFinding as SecretFinding, type ai_agent_SecretType as SecretType, type ai_agent_SummaryResult as SummaryResult, type ai_agent_TableResult2 as TableResult2, type ai_agent_TextChunk as TextChunk, type ai_agent_TokenEstimate as TokenEstimate, type ai_agent_TokenEstimateResult as TokenEstimateResult, type ai_agent_TrimResult as TrimResult, type ai_agent_TrimStrategy as TrimStrategy, type ai_agent_UrlMatch as UrlMatch, type ai_agent_ValidationError as ValidationError, type ai_agent_ValidationResult as ValidationResult, type ai_agent_VectorSimilarityResult as VectorSimilarityResult, ai_agent_chunkText as chunkText, ai_agent_compressHtml as compressHtml, ai_agent_compressJson as compressJson, ai_agent_compressMarkdown as compressMarkdown, ai_agent_deduplicateLines as deduplicateLines, ai_agent_detectPii as detectPii, ai_agent_detectPromptInjection as detectPromptInjection, ai_agent_detectSecrets as detectSecrets, ai_agent_diffJson as diffJson, ai_agent_estimateCost as estimateCost, ai_agent_estimateTokens as estimateTokens, ai_agent_expandQuery as expandQuery, ai_agent_extractEntities as extractEntities, ai_agent_extractJson as extractJson, ai_agent_extractKeywords as extractKeywords, ai_agent_extractTables as extractTables, ai_agent_extractUrls as extractUrls, ai_agent_flattenJson as flattenJson, ai_agent_formatFewShotExamples as formatFewShotExamples, ai_agent_mergeJson as mergeJson, ai_agent_redactPii as redactPii, ai_agent_repairJson as repairJson, ai_agent_rerankChunks as rerankChunks, ai_agent_sanitizeHtml as sanitizeHtml, ai_agent_scoreRelevance as scoreRelevance, ai_agent_summarizeForLlm as summarizeForLlm, ai_agent_trimToTokens as trimToTokens, ai_agent_unflattenJson as unflattenJson, ai_agent_validateJsonSchema as validateJsonSchema, ai_agent_vectorSimilarity as vectorSimilarity };
+  export { type ai_agent_ChunkStrategy as ChunkStrategy, type ai_agent_CompressHtmlResult as CompressHtmlResult, type ai_agent_CompressJsonResult as CompressJsonResult, type ai_agent_CompressMarkdownResult as CompressMarkdownResult, type ai_agent_CostEstimate as CostEstimate, type ai_agent_DedupeResult as DedupeResult, type ai_agent_DedupeStrategy as DedupeStrategy, type ai_agent_DiffEntry2 as DiffEntry2, type ai_agent_DiffOp2 as DiffOp2, type ai_agent_DiffResult2 as DiffResult2, type ai_agent_Entity2 as Entity2, type ai_agent_EntityType2 as EntityType2, type ai_agent_ExtractJsonResult as ExtractJsonResult, type ai_agent_ExtractKeywordsResult as ExtractKeywordsResult, type ai_agent_ExtractUrlsResult as ExtractUrlsResult, type ai_agent_FewShotExample as FewShotExample, type ai_agent_FewShotFormat as FewShotFormat, type ai_agent_FewShotFormatResult as FewShotFormatResult, type ai_agent_InjectionDetectResult as InjectionDetectResult, type ai_agent_InjectionFinding as InjectionFinding, type ai_agent_JsonBlock as JsonBlock, type ai_agent_JsonRepairResult as JsonRepairResult, type ai_agent_Keyword as Keyword, ai_agent_MODEL_PRICING as MODEL_PRICING, type ai_agent_MergeResult as MergeResult, type ai_agent_MergeStrategy as MergeStrategy, type ai_agent_ModelPricing as ModelPricing, type ai_agent_PiiDetectResult as PiiDetectResult, type ai_agent_PiiFinding as PiiFinding, type ai_agent_PiiType as PiiType, type ai_agent_RankedChunk as RankedChunk, type ai_agent_RelevanceResult as RelevanceResult, type ai_agent_SanitizeResult as SanitizeResult, type ai_agent_SecretDetectResult as SecretDetectResult, type ai_agent_SecretFinding as SecretFinding, type ai_agent_SecretType as SecretType, type ai_agent_SummaryResult as SummaryResult, type ai_agent_TableResult2 as TableResult2, type ai_agent_TextChunk as TextChunk, type ai_agent_TokenEstimate as TokenEstimate, type ai_agent_TokenEstimateResult as TokenEstimateResult, type ai_agent_ToolSchemaIssue as ToolSchemaIssue, type ai_agent_ToolSchemaLintResult as ToolSchemaLintResult, type ai_agent_TrimResult as TrimResult, type ai_agent_TrimStrategy as TrimStrategy, type ai_agent_UrlMatch as UrlMatch, type ai_agent_ValidationError as ValidationError, type ai_agent_ValidationResult as ValidationResult, type ai_agent_VectorSimilarityResult as VectorSimilarityResult, ai_agent_chunkText as chunkText, ai_agent_compressHtml as compressHtml, ai_agent_compressJson as compressJson, ai_agent_compressMarkdown as compressMarkdown, ai_agent_deduplicateLines as deduplicateLines, ai_agent_detectPii as detectPii, ai_agent_detectPromptInjection as detectPromptInjection, ai_agent_detectSecrets as detectSecrets, ai_agent_diffJson as diffJson, ai_agent_estimateCost as estimateCost, ai_agent_estimateTokens as estimateTokens, ai_agent_expandQuery as expandQuery, ai_agent_extractEntities as extractEntities, ai_agent_extractJson as extractJson, ai_agent_extractKeywords as extractKeywords, ai_agent_extractTables as extractTables, ai_agent_extractUrls as extractUrls, ai_agent_flattenJson as flattenJson, ai_agent_formatFewShotExamples as formatFewShotExamples, ai_agent_lintToolSchema as lintToolSchema, ai_agent_mergeJson as mergeJson, ai_agent_redactPii as redactPii, ai_agent_repairJson as repairJson, ai_agent_rerankChunks as rerankChunks, ai_agent_sanitizeHtml as sanitizeHtml, ai_agent_scoreRelevance as scoreRelevance, ai_agent_summarizeForLlm as summarizeForLlm, ai_agent_trimToTokens as trimToTokens, ai_agent_unflattenJson as unflattenJson, ai_agent_validateJsonSchema as validateJsonSchema, ai_agent_vectorSimilarity as vectorSimilarity };
 }
 
-export { detectPii as $, type SummaryResult as A, type TextChunk as B, type ChunkStrategy as C, type DedupeResult as D, type Entity2 as E, type FewShotExample as F, type TokenEstimate as G, type TokenEstimateResult as H, type InjectionDetectResult as I, type JsonBlock as J, type Keyword as K, type TrimResult as L, MODEL_PRICING as M, type TrimStrategy as N, type ValidationResult as O, type PiiDetectResult as P, type VectorSimilarityResult as Q, type RankedChunk as R, type SanitizeResult as S, type TableResult2 as T, type UrlMatch as U, type ValidationError as V, chunkText as W, compressHtml as X, compressJson as Y, compressMarkdown as Z, deduplicateLines as _, ai_agent as a, detectPromptInjection as a0, detectSecrets as a1, diffJson as a2, estimateCost as a3, estimateTokens as a4, expandQuery as a5, extractEntities as a6, extractJson as a7, extractKeywords as a8, extractTables as a9, extractUrls as aa, flattenJson as ab, formatFewShotExamples as ac, mergeJson as ad, redactPii as ae, repairJson as af, rerankChunks as ag, sanitizeHtml as ah, scoreRelevance as ai, summarizeForLlm as aj, trimToTokens as ak, unflattenJson as al, validateJsonSchema as am, vectorSimilarity as an, type CompressHtmlResult as b, type CompressJsonResult as c, type CompressMarkdownResult as d, type CostEstimate as e, type DedupeStrategy as f, type DiffEntry2 as g, type DiffOp2 as h, type DiffResult2 as i, type EntityType2 as j, type ExtractJsonResult as k, type ExtractKeywordsResult as l, type ExtractUrlsResult as m, type FewShotFormat as n, type FewShotFormatResult as o, type InjectionFinding as p, type JsonRepairResult as q, type MergeResult as r, type MergeStrategy as s, type ModelPricing as t, type PiiFinding as u, type PiiType as v, type RelevanceResult as w, type SecretDetectResult as x, type SecretFinding as y, type SecretType as z };
+export { compressMarkdown as $, type SummaryResult as A, type TextChunk as B, type ChunkStrategy as C, type DedupeResult as D, type Entity2 as E, type FewShotExample as F, type TokenEstimate as G, type TokenEstimateResult as H, type InjectionDetectResult as I, type JsonBlock as J, type Keyword as K, type ToolSchemaIssue as L, MODEL_PRICING as M, type ToolSchemaLintResult as N, type TrimResult as O, type PiiDetectResult as P, type TrimStrategy as Q, type RankedChunk as R, type SanitizeResult as S, type TableResult2 as T, type UrlMatch as U, type ValidationError as V, type ValidationResult as W, type VectorSimilarityResult as X, chunkText as Y, compressHtml as Z, compressJson as _, ai_agent as a, deduplicateLines as a0, detectPii as a1, detectPromptInjection as a2, detectSecrets as a3, diffJson as a4, estimateCost as a5, estimateTokens as a6, expandQuery as a7, extractEntities as a8, extractJson as a9, extractKeywords as aa, extractTables as ab, extractUrls as ac, flattenJson as ad, formatFewShotExamples as ae, lintToolSchema as af, mergeJson as ag, redactPii as ah, repairJson as ai, rerankChunks as aj, sanitizeHtml as ak, scoreRelevance as al, summarizeForLlm as am, trimToTokens as an, unflattenJson as ao, validateJsonSchema as ap, vectorSimilarity as aq, type CompressHtmlResult as b, type CompressJsonResult as c, type CompressMarkdownResult as d, type CostEstimate as e, type DedupeStrategy as f, type DiffEntry2 as g, type DiffOp2 as h, type DiffResult2 as i, type EntityType2 as j, type ExtractJsonResult as k, type ExtractKeywordsResult as l, type ExtractUrlsResult as m, type FewShotFormat as n, type FewShotFormatResult as o, type InjectionFinding as p, type JsonRepairResult as q, type MergeResult as r, type MergeStrategy as s, type ModelPricing as t, type PiiFinding as u, type PiiType as v, type RelevanceResult as w, type SecretDetectResult as x, type SecretFinding as y, type SecretType as z };

package/dist/{chunk-W3J7GZVQ.js → chunk-EKIXOA7B.js}

@@ -23,6 +23,7 @@ __export(ai_agent_exports, {
   extractUrls: () => extractUrls,
   flattenJson: () => flattenJson,
   formatFewShotExamples: () => formatFewShotExamples,
+  lintToolSchema: () => lintToolSchema,
   mergeJson: () => mergeJson,
   redactPii: () => redactPii,
   repairJson: () => repairJson,
@@ -1003,5 +1004,117 @@ Output: ${e.output.trim()}`).join("\n\n");
   }
   return { formatted, exampleCount: valid.length, format };
 }
+var TOOL_NAME_RE = /^[a-zA-Z0-9_-]{1,64}$/;
+function normalizeToolDefs(data) {
+  let rawList;
+  if (Array.isArray(data)) {
+    rawList = data;
+  } else if (data && typeof data === "object" && Array.isArray(data.tools)) {
+    rawList = data.tools;
+  } else {
+    rawList = [data];
+  }
+  const out = [];
+  for (const item of rawList) {
+    if (!item || typeof item !== "object") {
+      return { error: "Each tool definition must be a JSON object" };
+    }
+    const obj = item;
+    if (obj.type === "function" && obj.function && typeof obj.function === "object") {
+      const fn = obj.function;
+      out.push({ name: String(fn.name ?? ""), description: typeof fn.description === "string" ? fn.description : void 0, schema: fn.parameters, format: "openai" });
+    } else if ("input_schema" in obj) {
+      out.push({ name: String(obj.name ?? ""), description: typeof obj.description === "string" ? obj.description : void 0, schema: obj.input_schema, format: "anthropic" });
+    } else if ("inputSchema" in obj) {
+      out.push({ name: String(obj.name ?? ""), description: typeof obj.description === "string" ? obj.description : void 0, schema: obj.inputSchema, format: "mcp" });
+    } else if ("parameters" in obj || "name" in obj) {
+      out.push({ name: String(obj.name ?? ""), description: typeof obj.description === "string" ? obj.description : void 0, schema: obj.parameters, format: "bare" });
+    } else {
+      return { error: 'Unrecognized tool-definition format: expected an OpenAI ({type:"function",function:{...}}), Anthropic ({name,input_schema}), or MCP ({name,inputSchema}) shape' };
+    }
+  }
+  return out;
+}
+function lintToolSchema(jsonText) {
+  if (!jsonText || !jsonText.trim()) return { error: "Input is empty" };
+  let data;
+  try {
+    data = JSON.parse(jsonText);
+  } catch (e) {
+    return { error: `Invalid JSON: ${e.message}` };
+  }
+  const normalized = normalizeToolDefs(data);
+  if ("error" in normalized) return normalized;
+  if (normalized.length === 0) return { error: "No tool definitions found" };
+  const issues = [];
+  const seenNames = /* @__PURE__ */ new Map();
+  for (const tool of normalized) {
+    const label = tool.name || "(unnamed)";
+    seenNames.set(label, (seenNames.get(label) ?? 0) + 1);
+    if (!tool.name) {
+      issues.push({ severity: "error", tool: label, path: "name", message: 'Tool is missing a "name"' });
+    } else if (!TOOL_NAME_RE.test(tool.name)) {
+      issues.push({ severity: "error", tool: label, path: "name", message: `Tool name "${tool.name}" must match ^[a-zA-Z0-9_-]{1,64}$ (letters, digits, underscores, hyphens, max 64 chars) to be accepted by OpenAI/Anthropic function calling` });
+    }
+    if (!tool.description || !tool.description.trim()) {
+      issues.push({ severity: "error", tool: label, path: "description", message: 'Tool is missing a "description" \u2014 the model relies entirely on this text to decide when to call it' });
+    } else {
+      if (tool.description.trim().length < 10) {
+        issues.push({ severity: "warning", tool: label, path: "description", message: "Description is very short; a vague description measurably hurts the model's ability to pick the right tool" });
+      }
+      if (tool.description.length > 1024) {
+        issues.push({ severity: "warning", tool: label, path: "description", message: `Description is ${tool.description.length} characters; long descriptions cost tokens on every request that includes this tool` });
+      }
+    }
+    if (tool.schema === void 0 || tool.schema === null) {
+      issues.push({ severity: "warning", tool: label, path: "parameters", message: "Tool has no parameter schema; only correct if the tool genuinely takes no arguments" });
+      continue;
+    }
+    if (typeof tool.schema !== "object" || Array.isArray(tool.schema)) {
+      issues.push({ severity: "error", tool: label, path: "parameters", message: "Parameter schema must be a JSON Schema object" });
+      continue;
+    }
+    const schema = tool.schema;
+    if (schema.type !== void 0 && schema.type !== "object") {
+      issues.push({ severity: "error", tool: label, path: "parameters.type", message: `Top-level parameter schema type is "${String(schema.type)}"; OpenAI and Anthropic both require "object" at the top level` });
+    }
+    const properties = schema.properties;
+    if (properties !== void 0 && (typeof properties !== "object" || properties === null || Array.isArray(properties))) {
+      issues.push({ severity: "error", tool: label, path: "parameters.properties", message: '"properties" must be an object' });
+    } else if (properties && typeof properties === "object") {
+      const propsObj = properties;
+      const propNames = Object.keys(propsObj);
+      for (const propName of propNames) {
+        const prop = propsObj[propName];
+        const propPath = `parameters.properties.${propName}`;
+        if (!prop || typeof prop !== "object") {
+          issues.push({ severity: "error", tool: label, path: propPath, message: "Property schema must be an object" });
+          continue;
+        }
+        const propObj = prop;
+        if (!propObj.description) {
+          issues.push({ severity: "warning", tool: label, path: propPath, message: `Property "${propName}" has no description; missing per-parameter descriptions measurably hurt model accuracy on which value to pass` });
+        }
+        if (Array.isArray(propObj.enum) && propObj.enum.length === 0) {
+          issues.push({ severity: "error", tool: label, path: propPath, message: `Property "${propName}" has an empty "enum" array` });
+        }
+      }
+      if (Array.isArray(schema.required)) {
+        for (const req of schema.required) {
+          if (typeof req === "string" && !propNames.includes(req)) {
+            issues.push({ severity: "error", tool: label, path: "parameters.required", message: `"required" lists "${req}", which isn't defined in "properties"` });
+          }
+        }
+      }
+    }
+  }
+  for (const [name, count] of seenNames) {
+    if (count > 1 && name !== "(unnamed)") {
+      issues.push({ severity: "error", tool: name, path: "name", message: `Tool name "${name}" is used ${count} times; tool names must be unique within a single request` });
+    }
+  }
+  const valid = !issues.some((i) => i.severity === "error");
+  return { toolCount: normalized.length, issues, valid };
+}
 
-export { MODEL_PRICING, ai_agent_exports, chunkText, compressHtml, compressJson, compressMarkdown, deduplicateLines, detectPii, detectPromptInjection, detectSecrets, diffJson, estimateCost, estimateTokens, expandQuery, extractEntities, extractJson, extractKeywords, extractTables, extractUrls, flattenJson, formatFewShotExamples, mergeJson, redactPii, repairJson, rerankChunks, sanitizeHtml, scoreRelevance, summarizeForLlm, trimToTokens, unflattenJson, validateJsonSchema, vectorSimilarity };
+export { MODEL_PRICING, ai_agent_exports, chunkText, compressHtml, compressJson, compressMarkdown, deduplicateLines, detectPii, detectPromptInjection, detectSecrets, diffJson, estimateCost, estimateTokens, expandQuery, extractEntities, extractJson, extractKeywords, extractTables, extractUrls, flattenJson, formatFewShotExamples, lintToolSchema, mergeJson, redactPii, repairJson, rerankChunks, sanitizeHtml, scoreRelevance, summarizeForLlm, trimToTokens, unflattenJson, validateJsonSchema, vectorSimilarity };

package/dist/{chunk-UD45LBG7.js → chunk-GZBSKZ6F.js}

@@ -6,6 +6,7 @@ __export(network_exports, {
   DNS_RECORD_TYPES: () => DNS_RECORD_TYPES,
   HTTP_HEADERS: () => HTTP_HEADERS,
   LINK_REL_VALUES: () => LINK_REL_VALUES,
+  PERMISSIONS_POLICY_FEATURES: () => PERMISSIONS_POLICY_FEATURES,
   REFERRER_POLICY_VALUES: () => REFERRER_POLICY_VALUES,
   STATUS_CODES: () => STATUS_CODES,
   analyzeEmailHeaders: () => analyzeEmailHeaders,
@@ -14,6 +15,7 @@ __export(network_exports, {
   buildGeoUrl: () => buildGeoUrl,
   buildLinkHeader: () => buildLinkHeader,
   buildMapUrl: () => buildMapUrl,
+  buildPermissionsPolicy: () => buildPermissionsPolicy,
   buildRangeHeader: () => buildRangeHeader,
   buildReferrerPolicy: () => buildReferrerPolicy,
   buildVaryHeader: () => buildVaryHeader,
@@ -37,6 +39,7 @@ __export(network_exports, {
   parseGeoResponse: () => parseGeoResponse,
   parseHar: () => parseHar,
   parseIpv6Address: () => parseIpv6Address,
+  parsePermissionsPolicy: () => parsePermissionsPolicy,
   parseUserAgent: () => parseUserAgent,
   parseVaryHeader: () => parseVaryHeader,
   searchHeaders: () => searchHeaders,
@@ -46,6 +49,7 @@ __export(network_exports, {
   validateDomain: () => validateDomain,
   validateHeaderName: () => validateHeaderName,
   validateHeaderValue: () => validateHeaderValue,
+  validateManifest: () => validateManifest,
   validateRobotsTxt: () => validateRobotsTxt,
   validateSitemap: () => validateSitemap
 });
@@ -2364,5 +2368,212 @@ function parseVaryHeader(raw) {
   const headers = withoutLabel.split(",").map((h) => h.trim()).filter((h) => h.length > 0);
   return buildVaryHeader(headers);
 }
+var VALID_MANIFEST_DISPLAY = /* @__PURE__ */ new Set(["fullscreen", "standalone", "minimal-ui", "browser"]);
+function validateManifest(jsonText) {
+  if (!jsonText || !jsonText.trim()) return { error: "Input is empty" };
+  let manifest;
+  try {
+    manifest = JSON.parse(jsonText);
+  } catch (e) {
+    return { error: `Invalid JSON: ${e.message}` };
+  }
+  if (typeof manifest !== "object" || manifest === null || Array.isArray(manifest)) {
+    return { error: "Manifest must be a JSON object" };
+  }
+  const m = manifest;
+  const issues = [];
+  if (!m.name && !m.short_name) {
+    issues.push({ severity: "error", path: "name", message: 'Manifest must have at least one of "name" or "short_name"' });
+  }
+  if (m.name !== void 0 && typeof m.name !== "string") {
+    issues.push({ severity: "error", path: "name", message: '"name" must be a string' });
+  } else if (typeof m.name === "string" && m.name.length > 45) {
+    issues.push({ severity: "warning", path: "name", message: `"name" is ${m.name.length} characters; keep it under ~45 to avoid truncation in install prompts` });
+  }
+  if (m.short_name !== void 0 && typeof m.short_name !== "string") {
+    issues.push({ severity: "error", path: "short_name", message: '"short_name" must be a string' });
+  } else if (typeof m.short_name === "string" && m.short_name.length > 12) {
+    issues.push({ severity: "warning", path: "short_name", message: `"short_name" is ${m.short_name.length} characters; keep it under ~12 to avoid truncation on home screens` });
+  }
+  if (!m.start_url) {
+    issues.push({ severity: "error", path: "start_url", message: 'Manifest is missing "start_url"' });
+  } else if (typeof m.start_url !== "string") {
+    issues.push({ severity: "error", path: "start_url", message: '"start_url" must be a string' });
+  } else if (m.start_url.startsWith("//")) {
+    issues.push({ severity: "warning", path: "start_url", message: '"start_url" looks protocol-relative; use a relative path (e.g. "/") or a full absolute URL instead' });
+  }
+  if (m.display !== void 0) {
+    if (typeof m.display !== "string" || !VALID_MANIFEST_DISPLAY.has(m.display)) {
+      issues.push({ severity: "error", path: "display", message: `"display" must be one of: ${[...VALID_MANIFEST_DISPLAY].join(", ")}` });
+    }
+  } else {
+    issues.push({ severity: "warning", path: "display", message: 'Missing "display"; it defaults to "browser", which will not open the installed app in its own standalone window' });
+  }
+  const icons = [];
+  let hasMaskableIcon = false;
+  let has512Icon = false;
+  if (!Array.isArray(m.icons) || m.icons.length === 0) {
+    issues.push({ severity: "error", path: "icons", message: 'Manifest must have a non-empty "icons" array' });
+  } else {
+    m.icons.forEach((icon, i) => {
+      const path = `icons[${i}]`;
+      if (!icon || typeof icon !== "object") {
+        issues.push({ severity: "error", path, message: "Icon entry must be an object" });
+        return;
+      }
+      const iconObj = icon;
+      if (!iconObj.src || typeof iconObj.src !== "string") {
+        issues.push({ severity: "error", path, message: 'Icon entry is missing a required "src"' });
+      }
+      if (iconObj.sizes !== void 0) {
+        if (typeof iconObj.sizes !== "string" || iconObj.sizes !== "any" && !/^\d+x\d+(\s+\d+x\d+)*$/i.test(iconObj.sizes)) {
+          issues.push({ severity: "warning", path, message: `"sizes" value "${String(iconObj.sizes)}" doesn't match the expected "WIDTHxHEIGHT" format` });
+        } else if (/(^|\s)512x512(\s|$)/i.test(iconObj.sizes)) {
+          has512Icon = true;
+        }
+      }
+      if (typeof iconObj.purpose === "string" && iconObj.purpose.toLowerCase().includes("maskable")) {
+        hasMaskableIcon = true;
+      }
+      icons.push({
+        src: typeof iconObj.src === "string" ? iconObj.src : "",
+        sizes: typeof iconObj.sizes === "string" ? iconObj.sizes : void 0,
+        type: typeof iconObj.type === "string" ? iconObj.type : void 0,
+        purpose: typeof iconObj.purpose === "string" ? iconObj.purpose : void 0
+      });
+    });
+    if (icons.length > 0) {
+      if (!has512Icon) {
+        issues.push({ severity: "warning", path: "icons", message: "No icon sized 512x512 found; this size is used for splash screens and app store listings" });
+      }
+      if (!hasMaskableIcon) {
+        issues.push({ severity: "warning", path: "icons", message: 'No icon with purpose "maskable" (or "any maskable") found; without one, Android may crop your icon into its adaptive icon mask' });
+      }
+    }
+  }
+  if (m.theme_color !== void 0 && typeof m.theme_color !== "string") {
+    issues.push({ severity: "error", path: "theme_color", message: '"theme_color" must be a CSS color string' });
+  }
+  if (m.background_color !== void 0 && typeof m.background_color !== "string") {
+    issues.push({ severity: "error", path: "background_color", message: '"background_color" must be a CSS color string' });
+  } else if (m.background_color === void 0) {
+    issues.push({ severity: "warning", path: "background_color", message: 'Missing "background_color"; without it the splash screen background defaults to white' });
+  }
+  const valid = !issues.some((i) => i.severity === "error");
+  return {
+    issues,
+    valid,
+    summary: {
+      name: typeof m.name === "string" ? m.name : void 0,
+      shortName: typeof m.short_name === "string" ? m.short_name : void 0,
+      startUrl: typeof m.start_url === "string" ? m.start_url : void 0,
+      display: typeof m.display === "string" ? m.display : void 0,
+      icons,
+      hasMaskableIcon,
+      has512Icon
+    }
+  };
+}
+var PERMISSIONS_POLICY_NOTES = {
+  camera: "Controls access to video capture devices (getUserMedia video).",
+  microphone: "Controls access to audio capture devices (getUserMedia audio).",
+  geolocation: "Controls access to the Geolocation API.",
+  autoplay: "Controls whether media elements can autoplay without a user gesture.",
+  fullscreen: "Controls access to the Fullscreen API (requestFullscreen).",
+  payment: "Controls access to the Payment Request API.",
+  usb: "Controls access to the WebUSB API.",
+  accelerometer: "Controls access to the Accelerometer sensor API.",
+  gyroscope: "Controls access to the Gyroscope sensor API.",
+  magnetometer: "Controls access to the Magnetometer sensor API.",
+  midi: "Controls access to the Web MIDI API.",
+  "picture-in-picture": "Controls whether video elements can enter picture-in-picture mode.",
+  "sync-xhr": "Controls whether synchronous XMLHttpRequest is allowed.",
+  "display-capture": "Controls access to screen/tab capture (getDisplayMedia).",
+  "encrypted-media": "Controls access to the Encrypted Media Extensions API (DRM playback).",
+  "clipboard-read": "Controls read access to the async Clipboard API.",
+  "clipboard-write": "Controls write access to the async Clipboard API.",
+  "screen-wake-lock": "Controls access to the Screen Wake Lock API.",
+  "web-share": "Controls access to the Web Share API.",
+  "xr-spatial-tracking": "Controls access to WebXR device sensors and spatial tracking."
+};
+var PERMISSIONS_POLICY_FEATURES = Object.keys(PERMISSIONS_POLICY_NOTES);
+function _formatPermissionsPolicyAllowlist(allowlist) {
+  if (allowlist.includes("*")) return "*";
+  if (allowlist.length === 0) return "()";
+  return "(" + allowlist.map((o) => o === "self" ? "self" : `"${o}"`).join(" ") + ")";
+}
+function buildPermissionsPolicy(features) {
+  if (!Array.isArray(features) || features.length === 0) return { error: "At least one feature is required" };
+  const warnings = [];
+  const seen = /* @__PURE__ */ new Map();
+  for (const f of features) {
+    if (!f || typeof f.feature !== "string" || f.feature.trim() === "") continue;
+    const name = f.feature.trim().toLowerCase();
+    const allowlist = Array.isArray(f.allowlist) ? f.allowlist.map((o) => typeof o === "string" ? o.trim() : "").filter((o) => o.length > 0) : [];
+    if (seen.has(name)) warnings.push(`duplicate feature "${name}" was merged, the last occurrence wins`);
+    seen.set(name, { feature: name, allowlist });
+  }
+  if (seen.size === 0) return { error: "At least one feature is required" };
+  const directives = [];
+  for (const { feature, allowlist } of seen.values()) {
+    if (!PERMISSIONS_POLICY_NOTES[feature]) {
+      warnings.push(`"${feature}" is not a widely recognized feature name, it will still be included as written`);
+    }
+    if (allowlist.includes("*") && allowlist.length > 1) {
+      warnings.push(`"${feature}" combines "*" with other origins; "*" already allows every origin so the others are redundant`);
+    }
+    const invalidOrigin = allowlist.find((o) => o !== "self" && o !== "*" && !/^https?:\/\//i.test(o));
+    if (invalidOrigin) {
+      warnings.push(`"${invalidOrigin}" on "${feature}" doesn't look like an origin (expected "self", "*", or an http(s):// URL); it will still be quoted as written`);
+    }
+    directives.push({
+      feature,
+      value: _formatPermissionsPolicyAllowlist(allowlist),
+      note: PERMISSIONS_POLICY_NOTES[feature] ?? `Controls access to the "${feature}" feature.`
+    });
+  }
+  const headerValue = directives.map((d) => `${d.feature}=${d.value}`).join(", ");
+  return { header: `Permissions-Policy: ${headerValue}`, headerValue, directives, warnings };
+}
+function _splitPermissionsPolicyTopLevel(input) {
+  const segments = [];
+  let depth = 0;
+  let current = "";
+  for (const ch of input) {
+    if (ch === "(") depth++;
+    if (ch === ")") depth--;
+    if (ch === "," && depth === 0) {
+      if (current.trim()) segments.push(current.trim());
+      current = "";
+    } else {
+      current += ch;
+    }
+  }
+  if (current.trim()) segments.push(current.trim());
+  return segments;
+}
+function _parsePermissionsPolicyAllowlist(rawValue) {
+  if (rawValue === "*") return ["*"];
+  if (rawValue === "()" || rawValue === "") return [];
+  const inner = rawValue.replace(/^\(/, "").replace(/\)$/, "");
+  const tokens = inner.match(/"[^"]*"|\S+/g) ?? [];
+  return tokens.map((t) => t.replace(/^"|"$/g, ""));
+}
+function parsePermissionsPolicy(raw) {
+  if (!raw || raw.trim() === "") return { error: "Input is empty" };
+  const withoutLabel = raw.trim().replace(/^permissions-policy:\s*/i, "");
+  const segments = _splitPermissionsPolicyTopLevel(withoutLabel);
+  if (segments.length === 0) return { error: "No directives found" };
+  const features = [];
+  for (const segment of segments) {
+    const eq = segment.indexOf("=");
+    if (eq === -1) continue;
+    const feature = segment.slice(0, eq).trim();
+    const rawValue = segment.slice(eq + 1).trim();
+    features.push({ feature, allowlist: _parsePermissionsPolicyAllowlist(rawValue) });
+  }
+  if (features.length === 0) return { error: "No directives found" };
+  return buildPermissionsPolicy(features);
+}
 
-export { DNS_RECORD_TYPES, HTTP_HEADERS, LINK_REL_VALUES, REFERRER_POLICY_VALUES, STATUS_CODES, analyzeEmailHeaders, buildCacheControl, buildDnsQueryUrl, buildGeoUrl, buildLinkHeader, buildMapUrl, buildRangeHeader, buildReferrerPolicy, buildVaryHeader, checkSetCookieHeader, countryCodeToFlag, formatCoordinates, formatTtl, getByCategory, getHeader, getHeadersByCategory, getStatusByCategory, getStatusCode, isClientError, isServerError, isSuccess, isValidIp, isValidIpv4, isValidIpv6, network_exports, parseContentRangeHeader, parseDnsResponse, parseGeoResponse, parseHar, parseIpv6Address, parseUserAgent, parseVaryHeader, searchHeaders, searchStatusCodes, statusCodeToText, typeNumberToLabel, validateDomain, validateHeaderName, validateHeaderValue, validateRobotsTxt, validateSitemap };
+export { DNS_RECORD_TYPES, HTTP_HEADERS, LINK_REL_VALUES, PERMISSIONS_POLICY_FEATURES, REFERRER_POLICY_VALUES, STATUS_CODES, analyzeEmailHeaders, buildCacheControl, buildDnsQueryUrl, buildGeoUrl, buildLinkHeader, buildMapUrl, buildPermissionsPolicy, buildRangeHeader, buildReferrerPolicy, buildVaryHeader, checkSetCookieHeader, countryCodeToFlag, formatCoordinates, formatTtl, getByCategory, getHeader, getHeadersByCategory, getStatusByCategory, getStatusCode, isClientError, isServerError, isSuccess, isValidIp, isValidIpv4, isValidIpv6, network_exports, parseContentRangeHeader, parseDnsResponse, parseGeoResponse, parseHar, parseIpv6Address, parsePermissionsPolicy, parseUserAgent, parseVaryHeader, searchHeaders, searchStatusCodes, statusCodeToText, typeNumberToLabel, validateDomain, validateHeaderName, validateHeaderValue, validateManifest, validateRobotsTxt, validateSitemap };