@utilix-tech/sdk 0.68.0 → 0.70.0

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.70.0
+- Add `generateHotp`, `generateTotp` (totp-hotp-generator): generate an HOTP code (RFC 4226) for a counter value, or the current TOTP code (RFC 6238) plus seconds until rotation, from a base32-encoded shared secret, supporting SHA-1/SHA-256/SHA-512 and 6-8 digit codes.
+- Add `calculateTaxEquivalentYield` (tax-equivalent-yield-calculator): convert between a tax-free municipal bond yield and its taxable equivalent given a marginal federal (plus optional state) tax rate, in both directions.
+
+## 0.69.0
+- Add `parseCommitTrailers` (git-commit-trailer-parser): parse a commit message's trailer block (Co-authored-by, Signed-off-by, Fixes, Reviewed-by, etc.) per git's RFC 822-style trailer convention, returning each trailer's key and value plus the body with the trailer block removed.
+- Add `extractMarkdownFootnotes` (markdown-footnote-extractor): extract every Markdown-Extra-style footnote reference and definition from a document, flagging references with no matching definition and definitions that are never referenced.
+
 ## 0.68.0
 - Add `buildRobotsMetaTag`, `parseRobotsMetaTag` (robots-meta-tag-builder): build a `<meta name="robots" content="...">` tag from the same directive vocabulary as X-Robots-Tag, optionally scoped to a crawler via the name attribute, or parse an existing tag into the same shape.
 - Add `extractSvgSpriteSymbols` (svg-sprite-symbol-extractor): parse an SVG sprite sheet's `<symbol>` definitions and list each one's id, viewBox, width, and height, alongside a ready-to-paste `<use href="#id"></use>` usage snippet.

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/sdk
 
-**686 developer utility functions for Node.js: runs locally, no API key required.**
+**691 developer utility functions for Node.js: runs locally, no API key required.**
 
 [![npm version](https://img.shields.io/npm/v/@utilix-tech/sdk?style=flat-square&color=cb3837)](https://www.npmjs.com/package/@utilix-tech/sdk)
 [![npm downloads](https://img.shields.io/npm/dm/@utilix-tech/sdk?style=flat-square)](https://www.npmjs.com/package/@utilix-tech/sdk)
@@ -796,6 +796,16 @@ auditDependencyRanges(JSON.stringify({ dependencies: { lodash: "^4.17.21", "left
 import { extractSvgSpriteSymbols } from "@utilix-tech/sdk/code";
 extractSvgSpriteSymbols('<svg><symbol id="icon-home" viewBox="0 0 24 24"></symbol></svg>');
 // { symbolCount: 1, symbols: [{ id: "icon-home", viewBox: "0 0 24 24", width: null, height: null, usageSnippet: '<svg><use href="#icon-home"></use></svg>' }], skippedCount: 0 }
+
+// Parse a commit message's trailer block (Co-authored-by, Signed-off-by, Fixes, etc.) into key/value pairs plus the remaining body
+import { parseCommitTrailers } from "@utilix-tech/sdk/code";
+parseCommitTrailers("Fix bug\n\nSigned-off-by: A <a@example.com>");
+// { trailers: [{ key: "Signed-off-by", value: "A <a@example.com>" }], body: "Fix bug", hasTrailers: true }
+
+// Extract Markdown footnote references and definitions, flagging unresolved references and unused definitions
+import { extractMarkdownFootnotes } from "@utilix-tech/sdk/code";
+extractMarkdownFootnotes("A claim[^1].\n\n[^1]: The source.");
+// { definitionCount: 1, referenceCount: 1, definitions: [{ label: "1", text: "The source." }], unresolvedReferences: [], unusedDefinitions: [] }
 ```
 
 ---
@@ -952,9 +962,9 @@ inspectGifFrames(new Uint8Array(gifBytes));
 | `@utilix-tech/sdk/data` | CSV, YAML, TOML, XML, INI, NDJSON parse and convert, NDJSON record deduplicator, SRT/WebVTT subtitles, Markdown front matter parser, YAML anchor/alias resolver, CSV column type inferencer, Markdown table column aligner |
 | `@utilix-tech/sdk/generators` | UUID v4/v7, ULID, passwords, strength check, entropy estimator, fake data, CSP nonce generator |
 | `@utilix-tech/sdk/time` | Date diff, timezone convert, cron parse, relative time |
-| `@utilix-tech/sdk/units` | Bytes, CSS px/rem, number bases, currency format, credit card/IBAN/barcode/ISBN validation, loan calculator, EMI calculator, compound/simple interest calculators, VAT/sales tax calculator, tip/bill split calculator, break-even point calculator, Rule of 72 calculator, savings goal calculator, ROI calculator, cash denomination/till calculator, payback period calculator, CD maturity calculator, debt-to-income ratio calculator, freelancer hourly rate calculator, debt snowball/avalanche payoff planner |
+| `@utilix-tech/sdk/units` | Bytes, CSS px/rem, number bases, currency format, credit card/IBAN/barcode/ISBN validation, loan calculator, EMI calculator, compound/simple interest calculators, VAT/sales tax calculator, tip/bill split calculator, break-even point calculator, Rule of 72 calculator, savings goal calculator, ROI calculator, cash denomination/till calculator, payback period calculator, CD maturity calculator, debt-to-income ratio calculator, freelancer hourly rate calculator, debt snowball/avalanche payoff planner, tax-equivalent yield calculator |
 | `@utilix-tech/sdk/network` | HTTP status codes, IP validation, country flags, geolocation URLs, HAR file parsing, User-Agent parsing, IPv6 address compress/expand, Permissions-Policy header builder, Client Hints header builder/parser, Content-Disposition header builder/parser, X-Content-Type-Options header builder/risk assessor, sitemap.xml validator, sitemap index splitter, Prefer header builder/parser (RFC 7240), Retry-After header builder/parser (RFC 9110), Priority header builder/parser (RFC 9218), WebSocket close code reference/lookup, Strict-Transport-Security (HSTS) header builder/parser, X-Robots-Tag header builder/parser, WebSocket frame opcode reference/lookup, robots meta tag builder/parser |
-| `@utilix-tech/sdk/api` | cURL build/parse, JWT decode/sign, JWKS parse, CORS headers, CSP header |
+| `@utilix-tech/sdk/api` | cURL build/parse, JWT decode/sign, JWKS parse, CORS headers, CSP header, TOTP/HOTP code generator |
 | `@utilix-tech/sdk/code` | SQL format/minify, HTML format/minify, regex tester, GraphQL format, MIME type lookup, GitHub URL parsing, regex ReDoS detector, Conventional Commits linter, package.json exports field validator, package.json dependency range auditor, regex capture group/backreference visualizer, SVG sprite symbol extractor |
 | `@utilix-tech/sdk/color` | Hex/RGB/HSL/HSV/CMYK convert, palette generation, contrast check |
 | `@utilix-tech/sdk/css` | CSS gradient, box-shadow, border-radius, keyframe animation generators |

package/dist/{api-DmTNE4c1.d.cts → api-C8rImfka.d.cts}

@@ -13,6 +13,7 @@
  *  - url-parser      : parseUrl, buildUrl, addParam, removeParam, getParam,
  *                      encodeUrlComponent, decodeUrlComponent, isValidUrl, normalizeUrl
  *  - og-meta         : parseMetaTags, validateOgTags, generateMetaHtml
+ *  - totp-hotp-generator : generateHotp, generateTotp
  *
  * Node 18+ only. All crypto uses node:crypto; no browser-only APIs.
  */
@@ -287,6 +288,51 @@ declare function validateOgTags(tags: OgTags): {
     missing: string[];
 };
 declare function generateMetaHtml(tags: Partial<OgTags & TwitterTags>): string;
+type OtpAlgorithm = 'SHA1' | 'SHA256' | 'SHA512';
+interface OtpOptions {
+    digits?: number;
+    algorithm?: OtpAlgorithm;
+}
+interface HotpResult {
+    code: string;
+    counter: number;
+    digits: number;
+    algorithm: OtpAlgorithm;
+}
+/**
+ * Generates an HOTP code (RFC 4226) for a given counter value from a
+ * base32-encoded shared secret. Supports 6-8 digit codes and
+ * SHA-1/SHA-256/SHA-512 (SHA-1 is the default per the RFC and what most
+ * authenticator apps expect). The secret is never stored, only used for
+ * this one HMAC computation.
+ */
+declare function generateHotp(secret: string, counter: number, options?: OtpOptions): HotpResult | {
+    error: string;
+};
+interface TotpOptions extends OtpOptions {
+    periodSeconds?: number;
+    /** Unix timestamp in seconds. Defaults to the current time; pass an
+     *  explicit value for deterministic/testable output. */
+    timestamp?: number;
+}
+interface TotpResult {
+    code: string;
+    counter: number;
+    digits: number;
+    algorithm: OtpAlgorithm;
+    periodSeconds: number;
+    secondsRemaining: number;
+}
+/**
+ * Generates the current TOTP code (RFC 6238) from a base32-encoded shared
+ * secret, plus how many seconds remain before it rotates. TOTP is HOTP
+ * where the counter is the number of `periodSeconds` windows elapsed since
+ * the Unix epoch. Defaults (30s period, 6 digits, SHA-1) match what
+ * Google Authenticator and most other authenticator apps use.
+ */
+declare function generateTotp(secret: string, options?: TotpOptions): TotpResult | {
+    error: string;
+};
 
 declare const api_COMMON_HEADERS: typeof COMMON_HEADERS;
 declare const api_COMMON_PRESETS: typeof COMMON_PRESETS;
@@ -304,6 +350,7 @@ type api_DirectiveConfig = DirectiveConfig;
 type api_FormatResult = FormatResult;
 declare const api_HTTP_METHODS: typeof HTTP_METHODS;
 type api_Header = Header;
+type api_HotpResult = HotpResult;
 type api_HttpMethod = HttpMethod;
 type api_JwkSummary = JwkSummary;
 type api_JwkThumbprintErrorResult = JwkThumbprintErrorResult;
@@ -322,10 +369,14 @@ type api_JwtResult = JwtResult;
 type api_JwtSignOptions = JwtSignOptions;
 type api_MetaTags = MetaTags;
 type api_OgTags = OgTags;
+type api_OtpAlgorithm = OtpAlgorithm;
+type api_OtpOptions = OtpOptions;
 type api_ParsedUrl = ParsedUrl;
 type api_ResponseFormat = ResponseFormat;
 declare const api_SUPPORTED_LANGUAGES: typeof SUPPORTED_LANGUAGES;
 type api_TargetLanguage = TargetLanguage;
+type api_TotpOptions = TotpOptions;
+type api_TotpResult = TotpResult;
 type api_TwitterTags = TwitterTags;
 declare const api_addParam: typeof addParam;
 declare const api_base64urlDecode: typeof base64urlDecode;
@@ -345,7 +396,9 @@ declare const api_formatResponse: typeof formatResponse;
 declare const api_generateCors: typeof generateCors;
 declare const api_generateCspHeader: typeof generateCspHeader;
 declare const api_generateFullHeader: typeof generateFullHeader;
+declare const api_generateHotp: typeof generateHotp;
 declare const api_generateMetaHtml: typeof generateMetaHtml;
+declare const api_generateTotp: typeof generateTotp;
 declare const api_getParam: typeof getParam;
 declare const api_getStats: typeof getStats;
 declare const api_isValidUrl: typeof isValidUrl;
@@ -362,7 +415,7 @@ declare const api_validateCorsConfig: typeof validateCorsConfig;
 declare const api_validateCspConfig: typeof validateCspConfig;
 declare const api_validateOgTags: typeof validateOgTags;
 declare namespace api {
-  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HttpMethod as HttpMethod, type api_JwkSummary as JwkSummary, type api_JwkThumbprintErrorResult as JwkThumbprintErrorResult, type api_JwkThumbprintHash as JwkThumbprintHash, type api_JwkThumbprintOutcome as JwkThumbprintOutcome, type api_JwkThumbprintResult as JwkThumbprintResult, type api_JwksError as JwksError, type api_JwksParseResult as JwksParseResult, type api_JwksResult as JwksResult, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TwitterTags as TwitterTags, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_computeJwkThumbprint as computeJwkThumbprint, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateMetaHtml as generateMetaHtml, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseJwks as parseJwks, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags };
+  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HotpResult as HotpResult, type api_HttpMethod as HttpMethod, type api_JwkSummary as JwkSummary, type api_JwkThumbprintErrorResult as JwkThumbprintErrorResult, type api_JwkThumbprintHash as JwkThumbprintHash, type api_JwkThumbprintOutcome as JwkThumbprintOutcome, type api_JwkThumbprintResult as JwkThumbprintResult, type api_JwksError as JwksError, type api_JwksParseResult as JwksParseResult, type api_JwksResult as JwksResult, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_OtpAlgorithm as OtpAlgorithm, type api_OtpOptions as OtpOptions, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TotpOptions as TotpOptions, type api_TotpResult as TotpResult, type api_TwitterTags as TwitterTags, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_computeJwkThumbprint as computeJwkThumbprint, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateHotp as generateHotp, api_generateMetaHtml as generateMetaHtml, api_generateTotp as generateTotp, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseJwks as parseJwks, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags };
 }
 
-export { formatJwtJson as $, type JwtResult as A, type JwtSignOptions as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, type TwitterTags as E, type FormatResult as F, addParam as G, HTTP_METHODS as H, base64urlDecode as I, type JwkSummary as J, base64urlEncode as K, buildCurl as L, type MetaTags as M, buildCurlMultiline as N, type OgTags as O, type ParsedUrl as P, buildUrl as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, computeJwkThumbprint as U, convertToCode as V, decodeJwt as W, decodeUrlComponent as X, detectFormat as Y, encodeUrlComponent as Z, extractJsonPaths as _, api as a, formatResponse as a0, generateCors as a1, generateCspHeader as a2, generateFullHeader as a3, generateMetaHtml as a4, getParam as a5, getStats as a6, isValidUrl as a7, normalizeUrl as a8, parseCspHeader as a9, parseCurl as aa, parseCurlCommand as ab, parseJwks as ac, parseMetaTags as ad, parseUrl as ae, removeParam as af, signJwt as ag, validateCorsConfig as ah, validateCspConfig as ai, validateOgTags as aj, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HttpMethod as n, type JwkThumbprintErrorResult as o, type JwkThumbprintHash as p, type JwkThumbprintOutcome as q, type JwkThumbprintResult as r, type JwksError as s, type JwksParseResult as t, type JwksResult as u, type JwtAlgorithm as v, type JwtDecodeError as w, type JwtDecodeResult as x, type JwtExpiry as y, type JwtPart as z };
+export { decodeJwt as $, type JwtPart as A, type JwtResult as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, type JwtSignOptions as E, type FormatResult as F, type OtpAlgorithm as G, HTTP_METHODS as H, type OtpOptions as I, type JwkSummary as J, type TotpOptions as K, type TotpResult as L, type MetaTags as M, type TwitterTags as N, type OgTags as O, type ParsedUrl as P, addParam as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, base64urlDecode as U, base64urlEncode as V, buildCurl as W, buildCurlMultiline as X, buildUrl as Y, computeJwkThumbprint as Z, convertToCode as _, api as a, decodeUrlComponent as a0, detectFormat as a1, encodeUrlComponent as a2, extractJsonPaths as a3, formatJwtJson as a4, formatResponse as a5, generateCors as a6, generateCspHeader as a7, generateFullHeader as a8, generateHotp as a9, generateMetaHtml as aa, generateTotp as ab, getParam as ac, getStats as ad, isValidUrl as ae, normalizeUrl as af, parseCspHeader as ag, parseCurl as ah, parseCurlCommand as ai, parseJwks as aj, parseMetaTags as ak, parseUrl as al, removeParam as am, signJwt as an, validateCorsConfig as ao, validateCspConfig as ap, validateOgTags as aq, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HotpResult as n, type HttpMethod as o, type JwkThumbprintErrorResult as p, type JwkThumbprintHash as q, type JwkThumbprintOutcome as r, type JwkThumbprintResult as s, type JwksError as t, type JwksParseResult as u, type JwksResult as v, type JwtAlgorithm as w, type JwtDecodeError as x, type JwtDecodeResult as y, type JwtExpiry as z };

package/dist/{api-DmTNE4c1.d.ts → api-C8rImfka.d.ts}

@@ -13,6 +13,7 @@
  *  - url-parser      : parseUrl, buildUrl, addParam, removeParam, getParam,
  *                      encodeUrlComponent, decodeUrlComponent, isValidUrl, normalizeUrl
  *  - og-meta         : parseMetaTags, validateOgTags, generateMetaHtml
+ *  - totp-hotp-generator : generateHotp, generateTotp
  *
  * Node 18+ only. All crypto uses node:crypto; no browser-only APIs.
  */
@@ -287,6 +288,51 @@ declare function validateOgTags(tags: OgTags): {
     missing: string[];
 };
 declare function generateMetaHtml(tags: Partial<OgTags & TwitterTags>): string;
+type OtpAlgorithm = 'SHA1' | 'SHA256' | 'SHA512';
+interface OtpOptions {
+    digits?: number;
+    algorithm?: OtpAlgorithm;
+}
+interface HotpResult {
+    code: string;
+    counter: number;
+    digits: number;
+    algorithm: OtpAlgorithm;
+}
+/**
+ * Generates an HOTP code (RFC 4226) for a given counter value from a
+ * base32-encoded shared secret. Supports 6-8 digit codes and
+ * SHA-1/SHA-256/SHA-512 (SHA-1 is the default per the RFC and what most
+ * authenticator apps expect). The secret is never stored, only used for
+ * this one HMAC computation.
+ */
+declare function generateHotp(secret: string, counter: number, options?: OtpOptions): HotpResult | {
+    error: string;
+};
+interface TotpOptions extends OtpOptions {
+    periodSeconds?: number;
+    /** Unix timestamp in seconds. Defaults to the current time; pass an
+     *  explicit value for deterministic/testable output. */
+    timestamp?: number;
+}
+interface TotpResult {
+    code: string;
+    counter: number;
+    digits: number;
+    algorithm: OtpAlgorithm;
+    periodSeconds: number;
+    secondsRemaining: number;
+}
+/**
+ * Generates the current TOTP code (RFC 6238) from a base32-encoded shared
+ * secret, plus how many seconds remain before it rotates. TOTP is HOTP
+ * where the counter is the number of `periodSeconds` windows elapsed since
+ * the Unix epoch. Defaults (30s period, 6 digits, SHA-1) match what
+ * Google Authenticator and most other authenticator apps use.
+ */
+declare function generateTotp(secret: string, options?: TotpOptions): TotpResult | {
+    error: string;
+};
 
 declare const api_COMMON_HEADERS: typeof COMMON_HEADERS;
 declare const api_COMMON_PRESETS: typeof COMMON_PRESETS;
@@ -304,6 +350,7 @@ type api_DirectiveConfig = DirectiveConfig;
 type api_FormatResult = FormatResult;
 declare const api_HTTP_METHODS: typeof HTTP_METHODS;
 type api_Header = Header;
+type api_HotpResult = HotpResult;
 type api_HttpMethod = HttpMethod;
 type api_JwkSummary = JwkSummary;
 type api_JwkThumbprintErrorResult = JwkThumbprintErrorResult;
@@ -322,10 +369,14 @@ type api_JwtResult = JwtResult;
 type api_JwtSignOptions = JwtSignOptions;
 type api_MetaTags = MetaTags;
 type api_OgTags = OgTags;
+type api_OtpAlgorithm = OtpAlgorithm;
+type api_OtpOptions = OtpOptions;
 type api_ParsedUrl = ParsedUrl;
 type api_ResponseFormat = ResponseFormat;
 declare const api_SUPPORTED_LANGUAGES: typeof SUPPORTED_LANGUAGES;
 type api_TargetLanguage = TargetLanguage;
+type api_TotpOptions = TotpOptions;
+type api_TotpResult = TotpResult;
 type api_TwitterTags = TwitterTags;
 declare const api_addParam: typeof addParam;
 declare const api_base64urlDecode: typeof base64urlDecode;
@@ -345,7 +396,9 @@ declare const api_formatResponse: typeof formatResponse;
 declare const api_generateCors: typeof generateCors;
 declare const api_generateCspHeader: typeof generateCspHeader;
 declare const api_generateFullHeader: typeof generateFullHeader;
+declare const api_generateHotp: typeof generateHotp;
 declare const api_generateMetaHtml: typeof generateMetaHtml;
+declare const api_generateTotp: typeof generateTotp;
 declare const api_getParam: typeof getParam;
 declare const api_getStats: typeof getStats;
 declare const api_isValidUrl: typeof isValidUrl;
@@ -362,7 +415,7 @@ declare const api_validateCorsConfig: typeof validateCorsConfig;
 declare const api_validateCspConfig: typeof validateCspConfig;
 declare const api_validateOgTags: typeof validateOgTags;
 declare namespace api {
-  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HttpMethod as HttpMethod, type api_JwkSummary as JwkSummary, type api_JwkThumbprintErrorResult as JwkThumbprintErrorResult, type api_JwkThumbprintHash as JwkThumbprintHash, type api_JwkThumbprintOutcome as JwkThumbprintOutcome, type api_JwkThumbprintResult as JwkThumbprintResult, type api_JwksError as JwksError, type api_JwksParseResult as JwksParseResult, type api_JwksResult as JwksResult, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TwitterTags as TwitterTags, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_computeJwkThumbprint as computeJwkThumbprint, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateMetaHtml as generateMetaHtml, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseJwks as parseJwks, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags };
+  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HotpResult as HotpResult, type api_HttpMethod as HttpMethod, type api_JwkSummary as JwkSummary, type api_JwkThumbprintErrorResult as JwkThumbprintErrorResult, type api_JwkThumbprintHash as JwkThumbprintHash, type api_JwkThumbprintOutcome as JwkThumbprintOutcome, type api_JwkThumbprintResult as JwkThumbprintResult, type api_JwksError as JwksError, type api_JwksParseResult as JwksParseResult, type api_JwksResult as JwksResult, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_OtpAlgorithm as OtpAlgorithm, type api_OtpOptions as OtpOptions, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TotpOptions as TotpOptions, type api_TotpResult as TotpResult, type api_TwitterTags as TwitterTags, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_computeJwkThumbprint as computeJwkThumbprint, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateHotp as generateHotp, api_generateMetaHtml as generateMetaHtml, api_generateTotp as generateTotp, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseJwks as parseJwks, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags };
 }
 
-export { formatJwtJson as $, type JwtResult as A, type JwtSignOptions as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, type TwitterTags as E, type FormatResult as F, addParam as G, HTTP_METHODS as H, base64urlDecode as I, type JwkSummary as J, base64urlEncode as K, buildCurl as L, type MetaTags as M, buildCurlMultiline as N, type OgTags as O, type ParsedUrl as P, buildUrl as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, computeJwkThumbprint as U, convertToCode as V, decodeJwt as W, decodeUrlComponent as X, detectFormat as Y, encodeUrlComponent as Z, extractJsonPaths as _, api as a, formatResponse as a0, generateCors as a1, generateCspHeader as a2, generateFullHeader as a3, generateMetaHtml as a4, getParam as a5, getStats as a6, isValidUrl as a7, normalizeUrl as a8, parseCspHeader as a9, parseCurl as aa, parseCurlCommand as ab, parseJwks as ac, parseMetaTags as ad, parseUrl as ae, removeParam as af, signJwt as ag, validateCorsConfig as ah, validateCspConfig as ai, validateOgTags as aj, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HttpMethod as n, type JwkThumbprintErrorResult as o, type JwkThumbprintHash as p, type JwkThumbprintOutcome as q, type JwkThumbprintResult as r, type JwksError as s, type JwksParseResult as t, type JwksResult as u, type JwtAlgorithm as v, type JwtDecodeError as w, type JwtDecodeResult as x, type JwtExpiry as y, type JwtPart as z };
+export { decodeJwt as $, type JwtPart as A, type JwtResult as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, type JwtSignOptions as E, type FormatResult as F, type OtpAlgorithm as G, HTTP_METHODS as H, type OtpOptions as I, type JwkSummary as J, type TotpOptions as K, type TotpResult as L, type MetaTags as M, type TwitterTags as N, type OgTags as O, type ParsedUrl as P, addParam as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, base64urlDecode as U, base64urlEncode as V, buildCurl as W, buildCurlMultiline as X, buildUrl as Y, computeJwkThumbprint as Z, convertToCode as _, api as a, decodeUrlComponent as a0, detectFormat as a1, encodeUrlComponent as a2, extractJsonPaths as a3, formatJwtJson as a4, formatResponse as a5, generateCors as a6, generateCspHeader as a7, generateFullHeader as a8, generateHotp as a9, generateMetaHtml as aa, generateTotp as ab, getParam as ac, getStats as ad, isValidUrl as ae, normalizeUrl as af, parseCspHeader as ag, parseCurl as ah, parseCurlCommand as ai, parseJwks as aj, parseMetaTags as ak, parseUrl as al, removeParam as am, signJwt as an, validateCorsConfig as ao, validateCspConfig as ap, validateOgTags as aq, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HotpResult as n, type HttpMethod as o, type JwkThumbprintErrorResult as p, type JwkThumbprintHash as q, type JwkThumbprintOutcome as r, type JwkThumbprintResult as s, type JwksError as t, type JwksParseResult as u, type JwksResult as v, type JwtAlgorithm as w, type JwtDecodeError as x, type JwtDecodeResult as y, type JwtExpiry as z };

package/dist/{chunk-52ZDKSIX.js → chunk-4S63T7Y4.js}

@@ -29,7 +29,9 @@ __export(api_exports, {
   generateCors: () => generateCors,
   generateCspHeader: () => generateCspHeader,
   generateFullHeader: () => generateFullHeader,
+  generateHotp: () => generateHotp,
   generateMetaHtml: () => generateMetaHtml,
+  generateTotp: () => generateTotp,
   getParam: () => getParam,
   getStats: () => getStats,
   isValidUrl: () => isValidUrl,
@@ -1308,5 +1310,74 @@ function generateMetaHtml(tags) {
   }
   return lines.join("\n");
 }
+var OTP_ALG_TO_NODE_HASH = {
+  SHA1: "sha1",
+  SHA256: "sha256",
+  SHA512: "sha512"
+};
+function decodeBase32Secret(secret) {
+  const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
+  const cleaned = secret.toUpperCase().replace(/[\s=]/g, "");
+  if (!cleaned) {
+    return { error: "Secret must not be empty" };
+  }
+  const bytes = [];
+  let buffer = 0;
+  let bitsLeft = 0;
+  for (const char of cleaned) {
+    const val = alphabet.indexOf(char);
+    if (val === -1) {
+      return { error: `Invalid base32 character '${char}' in secret` };
+    }
+    buffer = buffer << 5 | val;
+    bitsLeft += 5;
+    if (bitsLeft >= 8) {
+      bitsLeft -= 8;
+      bytes.push(buffer >> bitsLeft & 255);
+    }
+  }
+  return Buffer.from(bytes);
+}
+function hotpFromCounter(keyBytes, counter, digits, algorithm) {
+  const counterBuffer = Buffer.alloc(8);
+  counterBuffer.writeUInt32BE(Math.floor(counter / 4294967296), 0);
+  counterBuffer.writeUInt32BE(counter % 4294967296, 4);
+  const hmac = createHmac(OTP_ALG_TO_NODE_HASH[algorithm], keyBytes).update(counterBuffer).digest();
+  const offset = hmac[hmac.length - 1] & 15;
+  const binCode = (hmac[offset] & 127) << 24 | (hmac[offset + 1] & 255) << 16 | (hmac[offset + 2] & 255) << 8 | hmac[offset + 3] & 255;
+  const code = (binCode % 10 ** digits).toString().padStart(digits, "0");
+  return code;
+}
+function generateHotp(secret, counter, options = {}) {
+  const digits = options.digits ?? 6;
+  const algorithm = options.algorithm ?? "SHA1";
+  if (!Number.isInteger(counter) || counter < 0) {
+    return { error: "Counter must be a non-negative whole number" };
+  }
+  if (!Number.isInteger(digits) || digits < 6 || digits > 8) {
+    return { error: "Digits must be an integer between 6 and 8" };
+  }
+  if (!(algorithm in OTP_ALG_TO_NODE_HASH)) {
+    return { error: "Algorithm must be one of SHA1, SHA256, SHA512" };
+  }
+  const keyBytes = decodeBase32Secret(secret);
+  if ("error" in keyBytes) return keyBytes;
+  return { code: hotpFromCounter(keyBytes, counter, digits, algorithm), counter, digits, algorithm };
+}
+function generateTotp(secret, options = {}) {
+  const periodSeconds = options.periodSeconds ?? 30;
+  const timestamp = options.timestamp ?? Math.floor(Date.now() / 1e3);
+  if (!Number.isFinite(periodSeconds) || periodSeconds <= 0) {
+    return { error: "Period must be a positive number of seconds" };
+  }
+  if (!Number.isFinite(timestamp) || timestamp < 0) {
+    return { error: "Timestamp must be a non-negative number of seconds" };
+  }
+  const counter = Math.floor(timestamp / periodSeconds);
+  const hotp = generateHotp(secret, counter, options);
+  if ("error" in hotp) return hotp;
+  const secondsRemaining = periodSeconds - timestamp % periodSeconds;
+  return { ...hotp, periodSeconds, secondsRemaining };
+}
 
-export { COMMON_HEADERS, COMMON_PRESETS, CORS_COMMON_HEADERS, DEFAULT_CORS_CONFIG, DIRECTIVE_DESCRIPTIONS, HTTP_METHODS, SUPPORTED_LANGUAGES, addParam, api_exports, base64urlDecode, base64urlEncode, buildCurl, buildCurlMultiline, buildUrl, computeJwkThumbprint, convertToCode, decodeJwt, decodeUrlComponent, detectFormat, encodeUrlComponent, extractJsonPaths, formatJwtJson, formatResponse, generateCors, generateCspHeader, generateFullHeader, generateMetaHtml, getParam, getStats, isValidUrl, normalizeUrl, parseCspHeader, parseCurl, parseCurlCommand, parseJwks, parseMetaTags, parseUrl, removeParam, signJwt, validateCorsConfig, validateCspConfig, validateOgTags };
+export { COMMON_HEADERS, COMMON_PRESETS, CORS_COMMON_HEADERS, DEFAULT_CORS_CONFIG, DIRECTIVE_DESCRIPTIONS, HTTP_METHODS, SUPPORTED_LANGUAGES, addParam, api_exports, base64urlDecode, base64urlEncode, buildCurl, buildCurlMultiline, buildUrl, computeJwkThumbprint, convertToCode, decodeJwt, decodeUrlComponent, detectFormat, encodeUrlComponent, extractJsonPaths, formatJwtJson, formatResponse, generateCors, generateCspHeader, generateFullHeader, generateHotp, generateMetaHtml, generateTotp, getParam, getStats, isValidUrl, normalizeUrl, parseCspHeader, parseCurl, parseCurlCommand, parseJwks, parseMetaTags, parseUrl, removeParam, signJwt, validateCorsConfig, validateCspConfig, validateOgTags };

package/dist/{chunk-4HNHEOJL.js → chunk-653HDWXW.js}

@@ -47,6 +47,7 @@ __export(units_exports, {
   calculateSavingsGoal: () => calculateSavingsGoal,
   calculateSimpleInterest: () => calculateSimpleInterest,
   calculateTax: () => calculateTax,
+  calculateTaxEquivalentYield: () => calculateTaxEquivalentYield,
   calculateTimeValue: () => calculateTimeValue,
   calculateTipSplit: () => calculateTipSplit,
   calculateVideoBitrate: () => calculateVideoBitrate,
@@ -2503,5 +2504,44 @@ function calculateLoanRefinance(currentBalance, currentRatePercent, currentRemai
     totalInterestSavings: round2(current.totalInterest - refinanced.totalInterest)
   };
 }
+function calculateTaxEquivalentYield(inputYieldPercent, federalTaxRatePercent, stateTaxRatePercent = 0, direction) {
+  if (!Number.isFinite(inputYieldPercent) || inputYieldPercent < 0) {
+    return { error: "Yield must be zero or a positive number" };
+  }
+  if (!Number.isFinite(federalTaxRatePercent) || federalTaxRatePercent < 0 || federalTaxRatePercent >= 100) {
+    return { error: "Federal tax rate must be a percentage between 0 and 100 (exclusive of 100)" };
+  }
+  if (!Number.isFinite(stateTaxRatePercent) || stateTaxRatePercent < 0 || stateTaxRatePercent >= 100) {
+    return { error: "State tax rate must be a percentage between 0 and 100 (exclusive of 100)" };
+  }
+  if (direction !== "tax-free-to-taxable" && direction !== "taxable-to-tax-free") {
+    return { error: 'Direction must be "tax-free-to-taxable" or "taxable-to-tax-free"' };
+  }
+  const combinedTaxRatePercent = federalTaxRatePercent + stateTaxRatePercent;
+  if (combinedTaxRatePercent >= 100) {
+    return { error: "Combined federal and state tax rate must be less than 100%" };
+  }
+  const round6 = (n) => Math.round(n * 1e6) / 1e6;
+  const combinedRateDecimal = combinedTaxRatePercent / 100;
+  let taxFreeYield;
+  let taxableYield;
+  if (direction === "tax-free-to-taxable") {
+    taxFreeYield = inputYieldPercent;
+    taxableYield = taxFreeYield / (1 - combinedRateDecimal);
+  } else {
+    taxableYield = inputYieldPercent;
+    taxFreeYield = taxableYield * (1 - combinedRateDecimal);
+  }
+  return {
+    direction,
+    inputYield: round6(inputYieldPercent),
+    federalTaxRatePercent: round6(federalTaxRatePercent),
+    stateTaxRatePercent: round6(stateTaxRatePercent),
+    combinedTaxRatePercent: round6(combinedTaxRatePercent),
+    taxFreeYield: round6(taxFreeYield),
+    taxableYield: round6(taxableYield),
+    yieldDifference: round6(taxableYield - taxFreeYield)
+  };
+}
 
-export { BASE_LABELS, BASE_PREFIXES, BYTE_UNITS, COMMON_CURRENCIES, COMMON_LOCALES, COMMON_PERMISSIONS, COMMON_RATIOS, COMMON_SIZES, COMMON_TAX_RATES, COMMON_TIP_PERCENTAGES, COMMON_VIEWPORTS, GPA_GRADE_POINTS, USD_DENOMINATIONS, applySuccessiveDiscounts, autoFormat, bumpVersion, calcAspectRatio, calcSubnet, calculateBlendedLoanRate, calculateBreakEven, calculateCashBreakdown, calculateCashRounding, calculateCdMaturity, calculateChange, calculateCompoundInterest, calculateCreditUtilization, calculateDebtToIncomeRatio, calculateDepreciationSchedule, calculateDiscount, calculateEmi, calculateExtraPaymentPayoff, calculateFreelancerRate, calculateGpa, calculateLoan, calculateLoanRefinance, calculateMarginMarkup, calculateMovingAverages, calculatePaybackPeriod, calculatePercentageChange, calculateRoi, calculateRuleOf72, calculateSavingsGoal, calculateSimpleInterest, calculateTax, calculateTimeValue, calculateTipSplit, calculateVideoBitrate, compareSemver, compareUnitPrices, convert, convertAprApy, convertBytes, convertIp, coverBox, decimalToIp, decimalToIpCidr, describePermissions, fitIntoBox, formatNumber, formatValue, formatVwValue, formatWithSeparator, gcd, ipFromBinary, ipFromDecimal, ipFromHex, ipToBinary, ipToDecimal, ipToDecimalCidr, ipToHex, ipToOctal, isValid, isValidCidr, isValidIp, isValidIpv4, marginToMarkup, markupToMargin, octalToPermissions, parseFileSize, parseInput, parseNumberString, parseSemver, permissionsToChmod, permissionsToOctal, permissionsToSymbolic, planDebtPayoff, ptToPx, pxToAll, pxToViewport, remToPx, satisfiesRange, scaleByHeight, scaleByWidth, sortVersions, splitSubnet, symbolicToPermissions, units_exports, validateBarcode, validateCardNumber, validateIban, validateIsbn, viewportToPx };
+export { BASE_LABELS, BASE_PREFIXES, BYTE_UNITS, COMMON_CURRENCIES, COMMON_LOCALES, COMMON_PERMISSIONS, COMMON_RATIOS, COMMON_SIZES, COMMON_TAX_RATES, COMMON_TIP_PERCENTAGES, COMMON_VIEWPORTS, GPA_GRADE_POINTS, USD_DENOMINATIONS, applySuccessiveDiscounts, autoFormat, bumpVersion, calcAspectRatio, calcSubnet, calculateBlendedLoanRate, calculateBreakEven, calculateCashBreakdown, calculateCashRounding, calculateCdMaturity, calculateChange, calculateCompoundInterest, calculateCreditUtilization, calculateDebtToIncomeRatio, calculateDepreciationSchedule, calculateDiscount, calculateEmi, calculateExtraPaymentPayoff, calculateFreelancerRate, calculateGpa, calculateLoan, calculateLoanRefinance, calculateMarginMarkup, calculateMovingAverages, calculatePaybackPeriod, calculatePercentageChange, calculateRoi, calculateRuleOf72, calculateSavingsGoal, calculateSimpleInterest, calculateTax, calculateTaxEquivalentYield, calculateTimeValue, calculateTipSplit, calculateVideoBitrate, compareSemver, compareUnitPrices, convert, convertAprApy, convertBytes, convertIp, coverBox, decimalToIp, decimalToIpCidr, describePermissions, fitIntoBox, formatNumber, formatValue, formatVwValue, formatWithSeparator, gcd, ipFromBinary, ipFromDecimal, ipFromHex, ipToBinary, ipToDecimal, ipToDecimalCidr, ipToHex, ipToOctal, isValid, isValidCidr, isValidIp, isValidIpv4, marginToMarkup, markupToMargin, octalToPermissions, parseFileSize, parseInput, parseNumberString, parseSemver, permissionsToChmod, permissionsToOctal, permissionsToSymbolic, planDebtPayoff, ptToPx, pxToAll, pxToViewport, remToPx, satisfiesRange, scaleByHeight, scaleByWidth, sortVersions, splitSubnet, symbolicToPermissions, units_exports, validateBarcode, validateCardNumber, validateIban, validateIsbn, viewportToPx };

package/dist/{chunk-COL3IM7U.js → chunk-DAD2ZOTJ.js}

@@ -24,6 +24,7 @@ __export(code_exports, {
   detectRedos: () => detectRedos,
   envToExport: () => envToExport,
   envToJson: () => envToJson,
+  extractMarkdownFootnotes: () => extractMarkdownFootnotes,
   extractSvgSpriteSymbols: () => extractSvgSpriteSymbols,
   formatCss: () => formatCss,
   formatGql: () => formatGql,
@@ -42,6 +43,7 @@ __export(code_exports, {
   minifyJs: () => minifyJs,
   minifySql: () => minifySql,
   normalizeRef: () => normalizeRef,
+  parseCommitTrailers: () => parseCommitTrailers,
   parseDockerImage: () => parseDockerImage,
   parseEnv: () => parseEnv,
   parseGitCommand: () => parseGitCommand,
@@ -3625,5 +3627,92 @@ function extractSvgSpriteSymbols(svg) {
   }
   return { symbolCount: symbols.length, symbols, skippedCount };
 }
+var TRAILER_LINE_REGEX = /^([A-Za-z][A-Za-z0-9-]*): (.+)$/;
+var TRAILER_CONTINUATION_REGEX = /^[ \t]+\S/;
+function parseCommitTrailers(message) {
+  const lines = message.replace(/\r\n/g, "\n").split("\n");
+  while (lines.length > 0 && lines[lines.length - 1].trim() === "") lines.pop();
+  if (lines.length === 0) return { error: "Empty input" };
+  let start = 0;
+  for (let i = lines.length - 1; i >= 0; i--) {
+    if (lines[i].trim() === "") {
+      start = i + 1;
+      break;
+    }
+  }
+  const paragraph = lines.slice(start);
+  const trailers = [];
+  let valid = true;
+  for (const line of paragraph) {
+    const m = line.match(TRAILER_LINE_REGEX);
+    if (m) {
+      trailers.push({ key: m[1], value: m[2].trim() });
+    } else if (TRAILER_CONTINUATION_REGEX.test(line) && trailers.length > 0) {
+      trailers[trailers.length - 1].value += " " + line.trim();
+    } else {
+      valid = false;
+      break;
+    }
+  }
+  if (!valid || trailers.length === 0) {
+    return { trailers: [], body: lines.join("\n").trim(), hasTrailers: false };
+  }
+  const body = lines.slice(0, start).join("\n").trim();
+  return { trailers, body, hasTrailers: true };
+}
+var FOOTNOTE_DEFINITION_LINE_REGEX = /^\[\^([^\]]+)\]:\s?(.*)$/;
+var FOOTNOTE_CONTINUATION_REGEX = /^(?: {4}|\t)/;
+var FOOTNOTE_REFERENCE_REGEX = /\[\^([^\]]+)\]/g;
+function extractMarkdownFootnotes(markdown) {
+  const trimmed = markdown.trim();
+  if (!trimmed) return { error: "Empty input" };
+  if (!trimmed.includes("[^")) return { error: "No footnote references or definitions found" };
+  const lines = markdown.replace(/\r\n/g, "\n").split("\n");
+  const definitions = [];
+  const definedLabels = /* @__PURE__ */ new Set();
+  const consumed = new Array(lines.length).fill(false);
+  let i = 0;
+  while (i < lines.length) {
+    const match = lines[i].match(FOOTNOTE_DEFINITION_LINE_REGEX);
+    if (!match) {
+      i++;
+      continue;
+    }
+    const label = match[1];
+    const textLines = [match[2]];
+    consumed[i] = true;
+    let j = i + 1;
+    while (j < lines.length && (FOOTNOTE_CONTINUATION_REGEX.test(lines[j]) || lines[j].trim() === "" && j + 1 < lines.length && FOOTNOTE_CONTINUATION_REGEX.test(lines[j + 1]))) {
+      textLines.push(lines[j].trim() === "" ? "" : lines[j].replace(FOOTNOTE_CONTINUATION_REGEX, ""));
+      consumed[j] = true;
+      j++;
+    }
+    if (!definedLabels.has(label)) {
+      definedLabels.add(label);
+      definitions.push({ label, text: textLines.join("\n").trim() });
+    }
+    i = j;
+  }
+  const referenceScanText = lines.filter((_, idx) => !consumed[idx]).join("\n");
+  const refOrder = [];
+  const refCounts = /* @__PURE__ */ new Map();
+  for (const m of referenceScanText.matchAll(FOOTNOTE_REFERENCE_REGEX)) {
+    const label = m[1];
+    if (!refCounts.has(label)) {
+      refCounts.set(label, 0);
+      refOrder.push(label);
+    }
+    refCounts.set(label, (refCounts.get(label) ?? 0) + 1);
+  }
+  const references = refOrder.map((label) => ({ label, count: refCounts.get(label) ?? 0 }));
+  const referencedSet = new Set(refOrder);
+  const unresolvedReferences = refOrder.filter((label) => !definedLabels.has(label));
+  const unusedDefinitions = definitions.filter((d) => !referencedSet.has(d.label)).map((d) => d.label);
+  const referenceCount = refOrder.reduce((sum, label) => sum + (refCounts.get(label) ?? 0), 0);
+  if (definitions.length === 0 && references.length === 0) {
+    return { error: "No footnote references or definitions found" };
+  }
+  return { definitionCount: definitions.length, referenceCount, definitions, references, unresolvedReferences, unusedDefinitions };
+}
 
-export { ALL_FLAGS, CHEATSHEET, DEFAULT_COMMIT_TYPES, MIME_TABLE, OPERATIONS, SQL_DEFAULT_OPTIONS, analyzeRegexGroups, auditDependencyRanges, buildDockerPull, buildDockerRun, buildGitCommand, code_exports, collapseHtmlWhitespace, collapseJsWhitespace, countProperties, countRules, detectDialect, detectOperationType, detectRedos, envToExport, envToJson, extractSvgSpriteSymbols, formatCss, formatGql, formatHtml, formatSql, getEndpointsByTag, getHtmlStats, getJsStats, getMethodColor, isValidTag, lintConventionalCommit, lookupMime, minifyCss, minifyGql, minifyHtml, minifyJs, minifySql, normalizeRef, parseDockerImage, parseEnv, parseGitCommand, parseGithubUrl, parseSpec, removeConsoleCalls, removeEmptyAttributes, removeHtmlComments, removeJsComments, removeRedundantAttributes, searchCheatsheet, searchEndpoints, splitStatements, testGitignorePatterns, testPattern, testRegex, validateEditorConfig, validateEnvKey, validatePackageExports, validateTsconfig };
+export { ALL_FLAGS, CHEATSHEET, DEFAULT_COMMIT_TYPES, MIME_TABLE, OPERATIONS, SQL_DEFAULT_OPTIONS, analyzeRegexGroups, auditDependencyRanges, buildDockerPull, buildDockerRun, buildGitCommand, code_exports, collapseHtmlWhitespace, collapseJsWhitespace, countProperties, countRules, detectDialect, detectOperationType, detectRedos, envToExport, envToJson, extractMarkdownFootnotes, extractSvgSpriteSymbols, formatCss, formatGql, formatHtml, formatSql, getEndpointsByTag, getHtmlStats, getJsStats, getMethodColor, isValidTag, lintConventionalCommit, lookupMime, minifyCss, minifyGql, minifyHtml, minifyJs, minifySql, normalizeRef, parseCommitTrailers, parseDockerImage, parseEnv, parseGitCommand, parseGithubUrl, parseSpec, removeConsoleCalls, removeEmptyAttributes, removeHtmlComments, removeJsComments, removeRedundantAttributes, searchCheatsheet, searchEndpoints, splitStatements, testGitignorePatterns, testPattern, testRegex, validateEditorConfig, validateEnvKey, validatePackageExports, validateTsconfig };