@utilix-tech/sdk 0.73.0 → 0.75.0

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.75.0
+- Add `verifyWebhookSignature` (webhook-signature-verifier): recompute an HMAC over a raw webhook payload and compare it to a provided signature, supporting the `sha256=` prefix style (Stripe/GitHub-style webhooks) plus raw hex or base64 encoding.
+- Add `calculateTransferTime` and `calculateRequiredBandwidth` (data-transfer-time-estimator): estimate the theoretical time to transfer a file over a connection of a given speed, or the reverse: the bandwidth required to hit a target time.
+
+## 0.74.0
+- Add `calculateLoanPrepaymentPenalty` (loan-prepayment-penalty-calculator): compute the dollar penalty cost of paying a loan off early, given its payoff balance and a prepayment penalty structure (a flat percent of balance, or a fixed number of months of interest).
+- Add `validateAria` (aria-validator): check every role and aria-* attribute in an HTML snippet against a curated WAI-ARIA 1.2 role table, flagging unknown roles, disallowed attributes, and missing required states.
+
 ## 0.73.0
 - Add `calculateMortgagePoints` (mortgage-points-calculator): compare a loan with no discount points against the same loan at a reduced rate bought with points, and compute the monthly savings and break-even month.
 - Add `calculateCookieSizeBudget` (cookie-size-budget-calculator): parse a Cookie header's name=value pairs and compute each cookie's and the total header's byte size against RFC 6265's per-cookie limit and a configurable budget.

package/README.md

@@ -1,6 +1,6 @@
 # @utilix-tech/sdk
 
-**696 developer utility functions for Node.js: runs locally, no API key required.**
+**702 developer utility functions for Node.js: runs locally, no API key required.**
 
 [![npm version](https://img.shields.io/npm/v/@utilix-tech/sdk?style=flat-square&color=cb3837)](https://www.npmjs.com/package/@utilix-tech/sdk)
 [![npm downloads](https://img.shields.io/npm/dm/@utilix-tech/sdk?style=flat-square)](https://www.npmjs.com/package/@utilix-tech/sdk)
@@ -343,7 +343,7 @@ formatIso8601Duration(90061);        // { iso: "P1DT1H1M1S", ... }
 ### `/units`: Conversions
 
 ```ts
-import { convertBytes, pxToAll, convert, formatValue, validateCardNumber, validateIban, calculateLoan, validateBarcode, calculateTax, calculateCompoundInterest, validateIsbn, calculateTipSplit, calculateSimpleInterest, calculateTimeValue, calculatePercentageChange, convertAprApy, calculateMarginMarkup, calculateDiscount, applySuccessiveDiscounts, calculateBreakEven, calculateVideoBitrate, calculateRuleOf72, calculateEmi, calculateRoi, compareUnitPrices, calculatePaybackPeriod, calculateCdMaturity, calculateDepreciationSchedule, calculateCashRounding, calculateMovingAverages, calculateGpa, calculateCreditUtilization, calculateDebtToIncomeRatio, calculateBlendedLoanRate, calculateFreelancerRate, calculateExtraPaymentPayoff, calculateLoanRefinance, validateVin, validateIsin } from "@utilix-tech/sdk/units";
+import { convertBytes, pxToAll, convert, formatValue, validateCardNumber, validateIban, calculateLoan, validateBarcode, calculateTax, calculateCompoundInterest, validateIsbn, calculateTipSplit, calculateSimpleInterest, calculateTimeValue, calculatePercentageChange, convertAprApy, calculateMarginMarkup, calculateDiscount, applySuccessiveDiscounts, calculateBreakEven, calculateVideoBitrate, calculateRuleOf72, calculateEmi, calculateRoi, compareUnitPrices, calculatePaybackPeriod, calculateCdMaturity, calculateDepreciationSchedule, calculateCashRounding, calculateMovingAverages, calculateGpa, calculateCreditUtilization, calculateDebtToIncomeRatio, calculateBlendedLoanRate, calculateFreelancerRate, calculateExtraPaymentPayoff, calculateLoanRefinance, validateVin, validateIsin, calculateLoanPrepaymentPenalty } from "@utilix-tech/sdk/units";
 
 // File sizes
 convertBytes(1073741824, "GB");  // 1
@@ -513,6 +513,10 @@ validateIsin("US0378331005");
 // Mortgage discount points break-even: monthly savings and the month the points cost is recouped
 calculateMortgagePoints(300000, 6.5, 360, 1, 0.25);
 // { pointsCost: 3000, monthlySavings: 49.05, breakEvenMonths: 62, totalInterestSavings: 17660.91, ... }
+
+// Loan prepayment penalty: dollar cost of paying a loan off early
+calculateLoanPrepaymentPenalty(10000, "percent-of-balance", { penaltyPercent: 2 });
+// { payoffBalance: 10000, penaltyAmount: 200, effectivePenaltyPercent: 2, totalPayoffCost: 10200 }
 ```
 
 ---
@@ -822,6 +826,11 @@ parseCommitTrailers("Fix bug\n\nSigned-off-by: A <a@example.com>");
 import { extractMarkdownFootnotes } from "@utilix-tech/sdk/code";
 extractMarkdownFootnotes("A claim[^1].\n\n[^1]: The source.");
 // { definitionCount: 1, referenceCount: 1, definitions: [{ label: "1", text: "The source." }], unresolvedReferences: [], unusedDefinitions: [] }
+
+// Validate every role and aria-* attribute in an HTML snippet against a curated WAI-ARIA 1.2 role table
+import { validateAria } from "@utilix-tech/sdk/code";
+validateAria('<div role="checkbox">Opt in</div>');
+// { elementCount: 1, elementsWithRoleOrAria: 1, valid: false, issues: [{ severity: "error", message: 'role="checkbox" is missing required attribute aria-checked', ... }] }
 ```
 
 ---
@@ -986,10 +995,10 @@ readMidiInfo(new Uint8Array(midiBytes));
 | `@utilix-tech/sdk/data` | CSV, YAML, TOML, XML, INI, NDJSON parse and convert, NDJSON record deduplicator, SRT/WebVTT subtitles, Markdown front matter parser, YAML anchor/alias resolver, CSV column type inferencer, Markdown table column aligner |
 | `@utilix-tech/sdk/generators` | UUID v4/v7, ULID, passwords, strength check, entropy estimator, fake data, CSP nonce generator |
 | `@utilix-tech/sdk/time` | Date diff, timezone convert, cron parse, relative time |
-| `@utilix-tech/sdk/units` | Bytes, CSS px/rem, number bases, currency format, credit card/IBAN/barcode/ISBN validation, loan calculator, EMI calculator, compound/simple interest calculators, VAT/sales tax calculator, tip/bill split calculator, break-even point calculator, Rule of 72 calculator, savings goal calculator, ROI calculator, cash denomination/till calculator, payback period calculator, CD maturity calculator, debt-to-income ratio calculator, freelancer hourly rate calculator, debt snowball/avalanche payoff planner, tax-equivalent yield calculator, mortgage discount points break-even calculator |
+| `@utilix-tech/sdk/units` | Bytes, CSS px/rem, number bases, currency format, credit card/IBAN/barcode/ISBN/VIN/ISIN validation, loan calculator, EMI calculator, compound/simple interest calculators, VAT/sales tax calculator, tip/bill split calculator, break-even point calculator, Rule of 72 calculator, savings goal calculator, ROI calculator, cash denomination/till calculator, payback period calculator, CD maturity calculator, debt-to-income ratio calculator, freelancer hourly rate calculator, debt snowball/avalanche payoff planner, tax-equivalent yield calculator, mortgage discount points break-even calculator, loan prepayment penalty calculator, data transfer time / required bandwidth estimator |
 | `@utilix-tech/sdk/network` | HTTP status codes, IP validation, country flags, geolocation URLs, HAR file parsing, User-Agent parsing, IPv6 address compress/expand, Permissions-Policy header builder, Client Hints header builder/parser, Content-Disposition header builder/parser, X-Content-Type-Options header builder/risk assessor, sitemap.xml validator, sitemap index splitter, Prefer header builder/parser (RFC 7240), Retry-After header builder/parser (RFC 9110), Priority header builder/parser (RFC 9218), WebSocket close code reference/lookup, Strict-Transport-Security (HSTS) header builder/parser, X-Robots-Tag header builder/parser, WebSocket frame opcode reference/lookup, robots meta tag builder/parser, Cookie header byte-size budget calculator |
-| `@utilix-tech/sdk/api` | cURL build/parse, JWT decode/sign, JWKS parse, CORS headers, CSP header, TOTP/HOTP code generator |
-| `@utilix-tech/sdk/code` | SQL format/minify, HTML format/minify, regex tester, GraphQL format, MIME type lookup, GitHub URL parsing, regex ReDoS detector, Conventional Commits linter, package.json exports field validator, package.json dependency range auditor, regex capture group/backreference visualizer, SVG sprite symbol extractor |
+| `@utilix-tech/sdk/api` | cURL build/parse, JWT decode/sign, JWKS parse, CORS headers, CSP header, TOTP/HOTP code generator, webhook HMAC signature verifier |
+| `@utilix-tech/sdk/code` | SQL format/minify, HTML format/minify, regex tester, GraphQL format, MIME type lookup, GitHub URL parsing, regex ReDoS detector, Conventional Commits linter, package.json exports field validator, package.json dependency range auditor, regex capture group/backreference visualizer, SVG sprite symbol extractor, ARIA role & attribute validator |
 | `@utilix-tech/sdk/color` | Hex/RGB/HSL/HSV/CMYK convert, palette generation, contrast check |
 | `@utilix-tech/sdk/css` | CSS gradient, box-shadow, border-radius, keyframe animation generators |
 | `@utilix-tech/sdk/misc` | SVG optimize/sanitize, file size format, Unicode inspector |

package/dist/{api-C8rImfka.d.cts → api-CQnIUrVB.d.cts}

@@ -14,6 +14,7 @@
  *                      encodeUrlComponent, decodeUrlComponent, isValidUrl, normalizeUrl
  *  - og-meta         : parseMetaTags, validateOgTags, generateMetaHtml
  *  - totp-hotp-generator : generateHotp, generateTotp
+ *  - webhook-signature-verifier : verifyWebhookSignature
  *
  * Node 18+ only. All crypto uses node:crypto; no browser-only APIs.
  */
@@ -333,6 +334,26 @@ interface TotpResult {
 declare function generateTotp(secret: string, options?: TotpOptions): TotpResult | {
     error: string;
 };
+type WebhookHashAlgorithm = 'sha1' | 'sha256' | 'sha512';
+interface WebhookSignatureResult {
+    valid: boolean;
+    algorithm: WebhookHashAlgorithm;
+    expectedHex: string;
+    expectedBase64: string;
+    providedSignature: string;
+    matchedEncoding: 'hex' | 'base64' | null;
+}
+/**
+ * Recomputes an HMAC over a raw webhook payload and compares it to a
+ * provided signature, the check every webhook receiver (Stripe, GitHub,
+ * Shopify, etc.) has to do before trusting a request. Accepts a signature
+ * with or without the common `sha256=` prefix style, and matches against
+ * either hex or base64 encoding since providers differ on which they send.
+ * Comparison is constant-time to avoid leaking timing information.
+ */
+declare function verifyWebhookSignature(payload: string, secret: string, signature: string, algorithm?: WebhookHashAlgorithm): WebhookSignatureResult | {
+    error: string;
+};
 
 declare const api_COMMON_HEADERS: typeof COMMON_HEADERS;
 declare const api_COMMON_PRESETS: typeof COMMON_PRESETS;
@@ -378,6 +399,8 @@ type api_TargetLanguage = TargetLanguage;
 type api_TotpOptions = TotpOptions;
 type api_TotpResult = TotpResult;
 type api_TwitterTags = TwitterTags;
+type api_WebhookHashAlgorithm = WebhookHashAlgorithm;
+type api_WebhookSignatureResult = WebhookSignatureResult;
 declare const api_addParam: typeof addParam;
 declare const api_base64urlDecode: typeof base64urlDecode;
 declare const api_base64urlEncode: typeof base64urlEncode;
@@ -414,8 +437,9 @@ declare const api_signJwt: typeof signJwt;
 declare const api_validateCorsConfig: typeof validateCorsConfig;
 declare const api_validateCspConfig: typeof validateCspConfig;
 declare const api_validateOgTags: typeof validateOgTags;
+declare const api_verifyWebhookSignature: typeof verifyWebhookSignature;
 declare namespace api {
-  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HotpResult as HotpResult, type api_HttpMethod as HttpMethod, type api_JwkSummary as JwkSummary, type api_JwkThumbprintErrorResult as JwkThumbprintErrorResult, type api_JwkThumbprintHash as JwkThumbprintHash, type api_JwkThumbprintOutcome as JwkThumbprintOutcome, type api_JwkThumbprintResult as JwkThumbprintResult, type api_JwksError as JwksError, type api_JwksParseResult as JwksParseResult, type api_JwksResult as JwksResult, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_OtpAlgorithm as OtpAlgorithm, type api_OtpOptions as OtpOptions, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TotpOptions as TotpOptions, type api_TotpResult as TotpResult, type api_TwitterTags as TwitterTags, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_computeJwkThumbprint as computeJwkThumbprint, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateHotp as generateHotp, api_generateMetaHtml as generateMetaHtml, api_generateTotp as generateTotp, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseJwks as parseJwks, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags };
+  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HotpResult as HotpResult, type api_HttpMethod as HttpMethod, type api_JwkSummary as JwkSummary, type api_JwkThumbprintErrorResult as JwkThumbprintErrorResult, type api_JwkThumbprintHash as JwkThumbprintHash, type api_JwkThumbprintOutcome as JwkThumbprintOutcome, type api_JwkThumbprintResult as JwkThumbprintResult, type api_JwksError as JwksError, type api_JwksParseResult as JwksParseResult, type api_JwksResult as JwksResult, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_OtpAlgorithm as OtpAlgorithm, type api_OtpOptions as OtpOptions, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TotpOptions as TotpOptions, type api_TotpResult as TotpResult, type api_TwitterTags as TwitterTags, type api_WebhookHashAlgorithm as WebhookHashAlgorithm, type api_WebhookSignatureResult as WebhookSignatureResult, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_computeJwkThumbprint as computeJwkThumbprint, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateHotp as generateHotp, api_generateMetaHtml as generateMetaHtml, api_generateTotp as generateTotp, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseJwks as parseJwks, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags, api_verifyWebhookSignature as verifyWebhookSignature };
 }
 
-export { decodeJwt as $, type JwtPart as A, type JwtResult as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, type JwtSignOptions as E, type FormatResult as F, type OtpAlgorithm as G, HTTP_METHODS as H, type OtpOptions as I, type JwkSummary as J, type TotpOptions as K, type TotpResult as L, type MetaTags as M, type TwitterTags as N, type OgTags as O, type ParsedUrl as P, addParam as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, base64urlDecode as U, base64urlEncode as V, buildCurl as W, buildCurlMultiline as X, buildUrl as Y, computeJwkThumbprint as Z, convertToCode as _, api as a, decodeUrlComponent as a0, detectFormat as a1, encodeUrlComponent as a2, extractJsonPaths as a3, formatJwtJson as a4, formatResponse as a5, generateCors as a6, generateCspHeader as a7, generateFullHeader as a8, generateHotp as a9, generateMetaHtml as aa, generateTotp as ab, getParam as ac, getStats as ad, isValidUrl as ae, normalizeUrl as af, parseCspHeader as ag, parseCurl as ah, parseCurlCommand as ai, parseJwks as aj, parseMetaTags as ak, parseUrl as al, removeParam as am, signJwt as an, validateCorsConfig as ao, validateCspConfig as ap, validateOgTags as aq, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HotpResult as n, type HttpMethod as o, type JwkThumbprintErrorResult as p, type JwkThumbprintHash as q, type JwkThumbprintOutcome as r, type JwkThumbprintResult as s, type JwksError as t, type JwksParseResult as u, type JwksResult as v, type JwtAlgorithm as w, type JwtDecodeError as x, type JwtDecodeResult as y, type JwtExpiry as z };
+export { computeJwkThumbprint as $, type JwtPart as A, type JwtResult as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, type JwtSignOptions as E, type FormatResult as F, type OtpAlgorithm as G, HTTP_METHODS as H, type OtpOptions as I, type JwkSummary as J, type TotpOptions as K, type TotpResult as L, type MetaTags as M, type TwitterTags as N, type OgTags as O, type ParsedUrl as P, type WebhookSignatureResult as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, addParam as U, base64urlDecode as V, type WebhookHashAlgorithm as W, base64urlEncode as X, buildCurl as Y, buildCurlMultiline as Z, buildUrl as _, api as a, convertToCode as a0, decodeJwt as a1, decodeUrlComponent as a2, detectFormat as a3, encodeUrlComponent as a4, extractJsonPaths as a5, formatJwtJson as a6, formatResponse as a7, generateCors as a8, generateCspHeader as a9, generateFullHeader as aa, generateHotp as ab, generateMetaHtml as ac, generateTotp as ad, getParam as ae, getStats as af, isValidUrl as ag, normalizeUrl as ah, parseCspHeader as ai, parseCurl as aj, parseCurlCommand as ak, parseJwks as al, parseMetaTags as am, parseUrl as an, removeParam as ao, signJwt as ap, validateCorsConfig as aq, validateCspConfig as ar, validateOgTags as as, verifyWebhookSignature as at, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HotpResult as n, type HttpMethod as o, type JwkThumbprintErrorResult as p, type JwkThumbprintHash as q, type JwkThumbprintOutcome as r, type JwkThumbprintResult as s, type JwksError as t, type JwksParseResult as u, type JwksResult as v, type JwtAlgorithm as w, type JwtDecodeError as x, type JwtDecodeResult as y, type JwtExpiry as z };

package/dist/{api-C8rImfka.d.ts → api-CQnIUrVB.d.ts}

@@ -14,6 +14,7 @@
  *                      encodeUrlComponent, decodeUrlComponent, isValidUrl, normalizeUrl
  *  - og-meta         : parseMetaTags, validateOgTags, generateMetaHtml
  *  - totp-hotp-generator : generateHotp, generateTotp
+ *  - webhook-signature-verifier : verifyWebhookSignature
  *
  * Node 18+ only. All crypto uses node:crypto; no browser-only APIs.
  */
@@ -333,6 +334,26 @@ interface TotpResult {
 declare function generateTotp(secret: string, options?: TotpOptions): TotpResult | {
     error: string;
 };
+type WebhookHashAlgorithm = 'sha1' | 'sha256' | 'sha512';
+interface WebhookSignatureResult {
+    valid: boolean;
+    algorithm: WebhookHashAlgorithm;
+    expectedHex: string;
+    expectedBase64: string;
+    providedSignature: string;
+    matchedEncoding: 'hex' | 'base64' | null;
+}
+/**
+ * Recomputes an HMAC over a raw webhook payload and compares it to a
+ * provided signature, the check every webhook receiver (Stripe, GitHub,
+ * Shopify, etc.) has to do before trusting a request. Accepts a signature
+ * with or without the common `sha256=` prefix style, and matches against
+ * either hex or base64 encoding since providers differ on which they send.
+ * Comparison is constant-time to avoid leaking timing information.
+ */
+declare function verifyWebhookSignature(payload: string, secret: string, signature: string, algorithm?: WebhookHashAlgorithm): WebhookSignatureResult | {
+    error: string;
+};
 
 declare const api_COMMON_HEADERS: typeof COMMON_HEADERS;
 declare const api_COMMON_PRESETS: typeof COMMON_PRESETS;
@@ -378,6 +399,8 @@ type api_TargetLanguage = TargetLanguage;
 type api_TotpOptions = TotpOptions;
 type api_TotpResult = TotpResult;
 type api_TwitterTags = TwitterTags;
+type api_WebhookHashAlgorithm = WebhookHashAlgorithm;
+type api_WebhookSignatureResult = WebhookSignatureResult;
 declare const api_addParam: typeof addParam;
 declare const api_base64urlDecode: typeof base64urlDecode;
 declare const api_base64urlEncode: typeof base64urlEncode;
@@ -414,8 +437,9 @@ declare const api_signJwt: typeof signJwt;
 declare const api_validateCorsConfig: typeof validateCorsConfig;
 declare const api_validateCspConfig: typeof validateCspConfig;
 declare const api_validateOgTags: typeof validateOgTags;
+declare const api_verifyWebhookSignature: typeof verifyWebhookSignature;
 declare namespace api {
-  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HotpResult as HotpResult, type api_HttpMethod as HttpMethod, type api_JwkSummary as JwkSummary, type api_JwkThumbprintErrorResult as JwkThumbprintErrorResult, type api_JwkThumbprintHash as JwkThumbprintHash, type api_JwkThumbprintOutcome as JwkThumbprintOutcome, type api_JwkThumbprintResult as JwkThumbprintResult, type api_JwksError as JwksError, type api_JwksParseResult as JwksParseResult, type api_JwksResult as JwksResult, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_OtpAlgorithm as OtpAlgorithm, type api_OtpOptions as OtpOptions, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TotpOptions as TotpOptions, type api_TotpResult as TotpResult, type api_TwitterTags as TwitterTags, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_computeJwkThumbprint as computeJwkThumbprint, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateHotp as generateHotp, api_generateMetaHtml as generateMetaHtml, api_generateTotp as generateTotp, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseJwks as parseJwks, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags };
+  export { api_COMMON_HEADERS as COMMON_HEADERS, api_COMMON_PRESETS as COMMON_PRESETS, api_CORS_COMMON_HEADERS as CORS_COMMON_HEADERS, type api_CorsConfig as CorsConfig, type api_CorsOutput as CorsOutput, type api_CspConfig as CspConfig, type api_CspDirective as CspDirective, type api_CspSource as CspSource, type api_CurlCommand as CurlCommand, type api_CurlConfig as CurlConfig, api_DEFAULT_CORS_CONFIG as DEFAULT_CORS_CONFIG, api_DIRECTIVE_DESCRIPTIONS as DIRECTIVE_DESCRIPTIONS, type api_DirectiveConfig as DirectiveConfig, type api_FormatResult as FormatResult, api_HTTP_METHODS as HTTP_METHODS, type api_Header as Header, type api_HotpResult as HotpResult, type api_HttpMethod as HttpMethod, type api_JwkSummary as JwkSummary, type api_JwkThumbprintErrorResult as JwkThumbprintErrorResult, type api_JwkThumbprintHash as JwkThumbprintHash, type api_JwkThumbprintOutcome as JwkThumbprintOutcome, type api_JwkThumbprintResult as JwkThumbprintResult, type api_JwksError as JwksError, type api_JwksParseResult as JwksParseResult, type api_JwksResult as JwksResult, type api_JwtAlgorithm as JwtAlgorithm, type api_JwtDecodeError as JwtDecodeError, type api_JwtDecodeResult as JwtDecodeResult, type api_JwtExpiry as JwtExpiry, type api_JwtPart as JwtPart, type api_JwtResult as JwtResult, type api_JwtSignOptions as JwtSignOptions, type api_MetaTags as MetaTags, type api_OgTags as OgTags, type api_OtpAlgorithm as OtpAlgorithm, type api_OtpOptions as OtpOptions, type api_ParsedUrl as ParsedUrl, type api_ResponseFormat as ResponseFormat, api_SUPPORTED_LANGUAGES as SUPPORTED_LANGUAGES, type api_TargetLanguage as TargetLanguage, type api_TotpOptions as TotpOptions, type api_TotpResult as TotpResult, type api_TwitterTags as TwitterTags, type api_WebhookHashAlgorithm as WebhookHashAlgorithm, type api_WebhookSignatureResult as WebhookSignatureResult, api_addParam as addParam, api_base64urlDecode as base64urlDecode, api_base64urlEncode as base64urlEncode, api_buildCurl as buildCurl, api_buildCurlMultiline as buildCurlMultiline, api_buildUrl as buildUrl, api_computeJwkThumbprint as computeJwkThumbprint, api_convertToCode as convertToCode, api_decodeJwt as decodeJwt, api_decodeUrlComponent as decodeUrlComponent, api_detectFormat as detectFormat, api_encodeUrlComponent as encodeUrlComponent, api_extractJsonPaths as extractJsonPaths, api_formatJwtJson as formatJwtJson, api_formatResponse as formatResponse, api_generateCors as generateCors, api_generateCspHeader as generateCspHeader, api_generateFullHeader as generateFullHeader, api_generateHotp as generateHotp, api_generateMetaHtml as generateMetaHtml, api_generateTotp as generateTotp, api_getParam as getParam, api_getStats as getStats, api_isValidUrl as isValidUrl, api_normalizeUrl as normalizeUrl, api_parseCspHeader as parseCspHeader, api_parseCurl as parseCurl, api_parseCurlCommand as parseCurlCommand, api_parseJwks as parseJwks, api_parseMetaTags as parseMetaTags, api_parseUrl as parseUrl, api_removeParam as removeParam, api_signJwt as signJwt, api_validateCorsConfig as validateCorsConfig, api_validateCspConfig as validateCspConfig, api_validateOgTags as validateOgTags, api_verifyWebhookSignature as verifyWebhookSignature };
 }
 
-export { decodeJwt as $, type JwtPart as A, type JwtResult as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, type JwtSignOptions as E, type FormatResult as F, type OtpAlgorithm as G, HTTP_METHODS as H, type OtpOptions as I, type JwkSummary as J, type TotpOptions as K, type TotpResult as L, type MetaTags as M, type TwitterTags as N, type OgTags as O, type ParsedUrl as P, addParam as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, base64urlDecode as U, base64urlEncode as V, buildCurl as W, buildCurlMultiline as X, buildUrl as Y, computeJwkThumbprint as Z, convertToCode as _, api as a, decodeUrlComponent as a0, detectFormat as a1, encodeUrlComponent as a2, extractJsonPaths as a3, formatJwtJson as a4, formatResponse as a5, generateCors as a6, generateCspHeader as a7, generateFullHeader as a8, generateHotp as a9, generateMetaHtml as aa, generateTotp as ab, getParam as ac, getStats as ad, isValidUrl as ae, normalizeUrl as af, parseCspHeader as ag, parseCurl as ah, parseCurlCommand as ai, parseJwks as aj, parseMetaTags as ak, parseUrl as al, removeParam as am, signJwt as an, validateCorsConfig as ao, validateCspConfig as ap, validateOgTags as aq, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HotpResult as n, type HttpMethod as o, type JwkThumbprintErrorResult as p, type JwkThumbprintHash as q, type JwkThumbprintOutcome as r, type JwkThumbprintResult as s, type JwksError as t, type JwksParseResult as u, type JwksResult as v, type JwtAlgorithm as w, type JwtDecodeError as x, type JwtDecodeResult as y, type JwtExpiry as z };
+export { computeJwkThumbprint as $, type JwtPart as A, type JwtResult as B, COMMON_HEADERS as C, DEFAULT_CORS_CONFIG as D, type JwtSignOptions as E, type FormatResult as F, type OtpAlgorithm as G, HTTP_METHODS as H, type OtpOptions as I, type JwkSummary as J, type TotpOptions as K, type TotpResult as L, type MetaTags as M, type TwitterTags as N, type OgTags as O, type ParsedUrl as P, type WebhookSignatureResult as Q, type ResponseFormat as R, SUPPORTED_LANGUAGES as S, type TargetLanguage as T, addParam as U, base64urlDecode as V, type WebhookHashAlgorithm as W, base64urlEncode as X, buildCurl as Y, buildCurlMultiline as Z, buildUrl as _, api as a, convertToCode as a0, decodeJwt as a1, decodeUrlComponent as a2, detectFormat as a3, encodeUrlComponent as a4, extractJsonPaths as a5, formatJwtJson as a6, formatResponse as a7, generateCors as a8, generateCspHeader as a9, generateFullHeader as aa, generateHotp as ab, generateMetaHtml as ac, generateTotp as ad, getParam as ae, getStats as af, isValidUrl as ag, normalizeUrl as ah, parseCspHeader as ai, parseCurl as aj, parseCurlCommand as ak, parseJwks as al, parseMetaTags as am, parseUrl as an, removeParam as ao, signJwt as ap, validateCorsConfig as aq, validateCspConfig as ar, validateOgTags as as, verifyWebhookSignature as at, COMMON_PRESETS as b, CORS_COMMON_HEADERS as c, type CorsConfig as d, type CorsOutput as e, type CspConfig as f, type CspDirective as g, type CspSource as h, type CurlCommand as i, type CurlConfig as j, DIRECTIVE_DESCRIPTIONS as k, type DirectiveConfig as l, type Header as m, type HotpResult as n, type HttpMethod as o, type JwkThumbprintErrorResult as p, type JwkThumbprintHash as q, type JwkThumbprintOutcome as r, type JwkThumbprintResult as s, type JwksError as t, type JwksParseResult as u, type JwksResult as v, type JwtAlgorithm as w, type JwtDecodeError as x, type JwtDecodeResult as y, type JwtExpiry as z };

package/dist/{chunk-XOUKIGJ4.js → chunk-RP574L5Z.js}

@@ -37,12 +37,14 @@ __export(units_exports, {
   calculateFreelancerRate: () => calculateFreelancerRate,
   calculateGpa: () => calculateGpa,
   calculateLoan: () => calculateLoan,
+  calculateLoanPrepaymentPenalty: () => calculateLoanPrepaymentPenalty,
   calculateLoanRefinance: () => calculateLoanRefinance,
   calculateMarginMarkup: () => calculateMarginMarkup,
   calculateMortgagePoints: () => calculateMortgagePoints,
   calculateMovingAverages: () => calculateMovingAverages,
   calculatePaybackPeriod: () => calculatePaybackPeriod,
   calculatePercentageChange: () => calculatePercentageChange,
+  calculateRequiredBandwidth: () => calculateRequiredBandwidth,
   calculateRoi: () => calculateRoi,
   calculateRuleOf72: () => calculateRuleOf72,
   calculateSavingsGoal: () => calculateSavingsGoal,
@@ -51,6 +53,7 @@ __export(units_exports, {
   calculateTaxEquivalentYield: () => calculateTaxEquivalentYield,
   calculateTimeValue: () => calculateTimeValue,
   calculateTipSplit: () => calculateTipSplit,
+  calculateTransferTime: () => calculateTransferTime,
   calculateVideoBitrate: () => calculateVideoBitrate,
   compareSemver: () => compareSemver,
   compareUnitPrices: () => compareUnitPrices,
@@ -2662,5 +2665,102 @@ function calculateMortgagePoints(loanAmount, baseRatePercent, termMonths, points
     totalInterestSavings: round2(withoutPoints.totalInterest - withPoints.totalInterest)
   };
 }
+function calculateLoanPrepaymentPenalty(payoffBalance, penaltyType, params) {
+  if (!Number.isFinite(payoffBalance) || payoffBalance <= 0) {
+    return { error: "Payoff balance must be a positive number" };
+  }
+  if (penaltyType !== "percent-of-balance" && penaltyType !== "months-of-interest") {
+    return { error: 'penaltyType must be "percent-of-balance" or "months-of-interest"' };
+  }
+  let penaltyAmount;
+  if (penaltyType === "percent-of-balance") {
+    const penaltyPercent = params.penaltyPercent;
+    if (!Number.isFinite(penaltyPercent) || penaltyPercent < 0) {
+      return { error: "penaltyPercent must be zero or a positive number" };
+    }
+    penaltyAmount = round2(payoffBalance * (penaltyPercent / 100));
+  } else {
+    const monthsOfInterest = params.monthsOfInterest;
+    const annualRatePercent = params.annualRatePercent;
+    if (!Number.isFinite(monthsOfInterest) || monthsOfInterest < 0) {
+      return { error: "monthsOfInterest must be zero or a positive number" };
+    }
+    if (!Number.isFinite(annualRatePercent) || annualRatePercent < 0) {
+      return { error: "annualRatePercent must be zero or a positive number" };
+    }
+    const monthlyInterest = payoffBalance * (annualRatePercent / 100 / 12);
+    penaltyAmount = round2(monthlyInterest * monthsOfInterest);
+  }
+  return {
+    payoffBalance: round2(payoffBalance),
+    penaltyType,
+    penaltyAmount,
+    effectivePenaltyPercent: round2(penaltyAmount / payoffBalance * 100),
+    totalPayoffCost: round2(payoffBalance + penaltyAmount)
+  };
+}
+var FILE_SIZE_UNIT_BYTES = {
+  B: 1,
+  KB: 1e3,
+  MB: 1e6,
+  GB: 1e9,
+  TB: 1e12
+};
+var SPEED_UNIT_BITS_PER_SECOND = {
+  Kbps: 1e3,
+  Mbps: 1e6,
+  Gbps: 1e9,
+  KBps: 1e3 * 8,
+  MBps: 1e6 * 8,
+  GBps: 1e9 * 8
+};
+function formatDurationSeconds(totalSeconds) {
+  if (totalSeconds < 1) return `${(totalSeconds * 1e3).toFixed(0)}ms`;
+  if (totalSeconds < 60) {
+    const decimals = totalSeconds < 10 && totalSeconds % 1 !== 0 ? 1 : 0;
+    return `${totalSeconds.toFixed(decimals)}s`;
+  }
+  const days = Math.floor(totalSeconds / 86400);
+  const hours = Math.floor(totalSeconds % 86400 / 3600);
+  const minutes = Math.floor(totalSeconds % 3600 / 60);
+  const seconds = Math.round(totalSeconds % 60);
+  const parts = [];
+  if (days > 0) parts.push(`${days}d`);
+  if (hours > 0) parts.push(`${hours}h`);
+  if (minutes > 0) parts.push(`${minutes}m`);
+  if (seconds > 0 || parts.length === 0) parts.push(`${seconds}s`);
+  return parts.join(" ");
+}
+function calculateTransferTime(fileSize, fileSizeUnit, speed, speedUnit) {
+  if (!Number.isFinite(fileSize) || fileSize <= 0) return { error: "File size must be a positive number" };
+  if (!Number.isFinite(speed) || speed <= 0) return { error: "Connection speed must be a positive number" };
+  if (!(fileSizeUnit in FILE_SIZE_UNIT_BYTES)) return { error: `Unsupported file size unit: ${fileSizeUnit}` };
+  if (!(speedUnit in SPEED_UNIT_BITS_PER_SECOND)) return { error: `Unsupported speed unit: ${speedUnit}` };
+  const fileSizeBytes = fileSize * FILE_SIZE_UNIT_BYTES[fileSizeUnit];
+  const speedBitsPerSecond = speed * SPEED_UNIT_BITS_PER_SECOND[speedUnit];
+  const transferTimeSeconds = fileSizeBytes * 8 / speedBitsPerSecond;
+  return {
+    fileSizeBytes,
+    speedBitsPerSecond,
+    transferTimeSeconds,
+    formattedTime: formatDurationSeconds(transferTimeSeconds)
+  };
+}
+function calculateRequiredBandwidth(fileSize, fileSizeUnit, targetSeconds) {
+  if (!Number.isFinite(fileSize) || fileSize <= 0) return { error: "File size must be a positive number" };
+  if (!Number.isFinite(targetSeconds) || targetSeconds <= 0) {
+    return { error: "Target time must be a positive number of seconds" };
+  }
+  if (!(fileSizeUnit in FILE_SIZE_UNIT_BYTES)) return { error: `Unsupported file size unit: ${fileSizeUnit}` };
+  const fileSizeBytes = fileSize * FILE_SIZE_UNIT_BYTES[fileSizeUnit];
+  const requiredBitsPerSecond = fileSizeBytes * 8 / targetSeconds;
+  return {
+    fileSizeBytes,
+    targetSeconds,
+    requiredBitsPerSecond,
+    requiredMbps: requiredBitsPerSecond / 1e6,
+    requiredMBps: requiredBitsPerSecond / 8 / 1e6
+  };
+}
 
-export { BASE_LABELS, BASE_PREFIXES, BYTE_UNITS, COMMON_CURRENCIES, COMMON_LOCALES, COMMON_PERMISSIONS, COMMON_RATIOS, COMMON_SIZES, COMMON_TAX_RATES, COMMON_TIP_PERCENTAGES, COMMON_VIEWPORTS, GPA_GRADE_POINTS, USD_DENOMINATIONS, applySuccessiveDiscounts, autoFormat, bumpVersion, calcAspectRatio, calcSubnet, calculateBlendedLoanRate, calculateBreakEven, calculateCashBreakdown, calculateCashRounding, calculateCdMaturity, calculateChange, calculateCompoundInterest, calculateCreditUtilization, calculateDebtToIncomeRatio, calculateDepreciationSchedule, calculateDiscount, calculateEmi, calculateExtraPaymentPayoff, calculateFreelancerRate, calculateGpa, calculateLoan, calculateLoanRefinance, calculateMarginMarkup, calculateMortgagePoints, calculateMovingAverages, calculatePaybackPeriod, calculatePercentageChange, calculateRoi, calculateRuleOf72, calculateSavingsGoal, calculateSimpleInterest, calculateTax, calculateTaxEquivalentYield, calculateTimeValue, calculateTipSplit, calculateVideoBitrate, compareSemver, compareUnitPrices, convert, convertAprApy, convertBytes, convertIp, coverBox, decimalToIp, decimalToIpCidr, describePermissions, fitIntoBox, formatNumber, formatValue, formatVwValue, formatWithSeparator, gcd, ipFromBinary, ipFromDecimal, ipFromHex, ipToBinary, ipToDecimal, ipToDecimalCidr, ipToHex, ipToOctal, isValid, isValidCidr, isValidIp, isValidIpv4, marginToMarkup, markupToMargin, octalToPermissions, parseFileSize, parseInput, parseNumberString, parseSemver, permissionsToChmod, permissionsToOctal, permissionsToSymbolic, planDebtPayoff, ptToPx, pxToAll, pxToViewport, remToPx, satisfiesRange, scaleByHeight, scaleByWidth, sortVersions, splitSubnet, symbolicToPermissions, units_exports, validateBarcode, validateCardNumber, validateIban, validateIsbn, validateIsin, validateVin, viewportToPx };
+export { BASE_LABELS, BASE_PREFIXES, BYTE_UNITS, COMMON_CURRENCIES, COMMON_LOCALES, COMMON_PERMISSIONS, COMMON_RATIOS, COMMON_SIZES, COMMON_TAX_RATES, COMMON_TIP_PERCENTAGES, COMMON_VIEWPORTS, GPA_GRADE_POINTS, USD_DENOMINATIONS, applySuccessiveDiscounts, autoFormat, bumpVersion, calcAspectRatio, calcSubnet, calculateBlendedLoanRate, calculateBreakEven, calculateCashBreakdown, calculateCashRounding, calculateCdMaturity, calculateChange, calculateCompoundInterest, calculateCreditUtilization, calculateDebtToIncomeRatio, calculateDepreciationSchedule, calculateDiscount, calculateEmi, calculateExtraPaymentPayoff, calculateFreelancerRate, calculateGpa, calculateLoan, calculateLoanPrepaymentPenalty, calculateLoanRefinance, calculateMarginMarkup, calculateMortgagePoints, calculateMovingAverages, calculatePaybackPeriod, calculatePercentageChange, calculateRequiredBandwidth, calculateRoi, calculateRuleOf72, calculateSavingsGoal, calculateSimpleInterest, calculateTax, calculateTaxEquivalentYield, calculateTimeValue, calculateTipSplit, calculateTransferTime, calculateVideoBitrate, compareSemver, compareUnitPrices, convert, convertAprApy, convertBytes, convertIp, coverBox, decimalToIp, decimalToIpCidr, describePermissions, fitIntoBox, formatNumber, formatValue, formatVwValue, formatWithSeparator, gcd, ipFromBinary, ipFromDecimal, ipFromHex, ipToBinary, ipToDecimal, ipToDecimalCidr, ipToHex, ipToOctal, isValid, isValidCidr, isValidIp, isValidIpv4, marginToMarkup, markupToMargin, octalToPermissions, parseFileSize, parseInput, parseNumberString, parseSemver, permissionsToChmod, permissionsToOctal, permissionsToSymbolic, planDebtPayoff, ptToPx, pxToAll, pxToViewport, remToPx, satisfiesRange, scaleByHeight, scaleByWidth, sortVersions, splitSubnet, symbolicToPermissions, units_exports, validateBarcode, validateCardNumber, validateIban, validateIsbn, validateIsin, validateVin, viewportToPx };

package/dist/{chunk-4S63T7Y4.js → chunk-U2HREMZU.js}

@@ -46,7 +46,8 @@ __export(api_exports, {
   signJwt: () => signJwt,
   validateCorsConfig: () => validateCorsConfig,
   validateCspConfig: () => validateCspConfig,
-  validateOgTags: () => validateOgTags
+  validateOgTags: () => validateOgTags,
+  verifyWebhookSignature: () => verifyWebhookSignature
 });
 function escapeShell(value) {
   return `'${value.replace(/'/g, "'\\''")}'`;
@@ -1379,5 +1380,39 @@ function generateTotp(secret, options = {}) {
   const secondsRemaining = periodSeconds - timestamp % periodSeconds;
   return { ...hotp, periodSeconds, secondsRemaining };
 }
+var WEBHOOK_HASH_ALGORITHMS = ["sha1", "sha256", "sha512"];
+function constantTimeEqual(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+function verifyWebhookSignature(payload, secret, signature, algorithm = "sha256") {
+  if (!payload) return { error: "Payload is required" };
+  if (!secret) return { error: "Secret is required" };
+  if (!signature || !signature.trim()) return { error: "Signature is required" };
+  if (!WEBHOOK_HASH_ALGORITHMS.includes(algorithm)) {
+    return { error: "Algorithm must be one of sha1, sha256, sha512" };
+  }
+  const trimmedSignature = signature.trim();
+  const prefixMatch = trimmedSignature.match(/^(sha1|sha256|sha512)=(.+)$/i);
+  const providedSignature = prefixMatch ? prefixMatch[2].trim() : trimmedSignature;
+  const expectedHex = createHmac(algorithm, secret).update(payload, "utf8").digest("hex");
+  const expectedBase64 = createHmac(algorithm, secret).update(payload, "utf8").digest("base64");
+  let matchedEncoding = null;
+  if (constantTimeEqual(providedSignature.toLowerCase(), expectedHex.toLowerCase())) {
+    matchedEncoding = "hex";
+  } else if (constantTimeEqual(providedSignature, expectedBase64)) {
+    matchedEncoding = "base64";
+  }
+  return {
+    valid: matchedEncoding !== null,
+    algorithm,
+    expectedHex,
+    expectedBase64,
+    providedSignature: trimmedSignature,
+    matchedEncoding
+  };
+}
 
-export { COMMON_HEADERS, COMMON_PRESETS, CORS_COMMON_HEADERS, DEFAULT_CORS_CONFIG, DIRECTIVE_DESCRIPTIONS, HTTP_METHODS, SUPPORTED_LANGUAGES, addParam, api_exports, base64urlDecode, base64urlEncode, buildCurl, buildCurlMultiline, buildUrl, computeJwkThumbprint, convertToCode, decodeJwt, decodeUrlComponent, detectFormat, encodeUrlComponent, extractJsonPaths, formatJwtJson, formatResponse, generateCors, generateCspHeader, generateFullHeader, generateHotp, generateMetaHtml, generateTotp, getParam, getStats, isValidUrl, normalizeUrl, parseCspHeader, parseCurl, parseCurlCommand, parseJwks, parseMetaTags, parseUrl, removeParam, signJwt, validateCorsConfig, validateCspConfig, validateOgTags };
+export { COMMON_HEADERS, COMMON_PRESETS, CORS_COMMON_HEADERS, DEFAULT_CORS_CONFIG, DIRECTIVE_DESCRIPTIONS, HTTP_METHODS, SUPPORTED_LANGUAGES, addParam, api_exports, base64urlDecode, base64urlEncode, buildCurl, buildCurlMultiline, buildUrl, computeJwkThumbprint, convertToCode, decodeJwt, decodeUrlComponent, detectFormat, encodeUrlComponent, extractJsonPaths, formatJwtJson, formatResponse, generateCors, generateCspHeader, generateFullHeader, generateHotp, generateMetaHtml, generateTotp, getParam, getStats, isValidUrl, normalizeUrl, parseCspHeader, parseCurl, parseCurlCommand, parseJwks, parseMetaTags, parseUrl, removeParam, signJwt, validateCorsConfig, validateCspConfig, validateOgTags, verifyWebhookSignature };

package/dist/{chunk-DAD2ZOTJ.js → chunk-XT2BQWXT.js}

@@ -60,6 +60,7 @@ __export(code_exports, {
   testGitignorePatterns: () => testGitignorePatterns,
   testPattern: () => testPattern,
   testRegex: () => testRegex,
+  validateAria: () => validateAria,
   validateEditorConfig: () => validateEditorConfig,
   validateEnvKey: () => validateEnvKey,
   validatePackageExports: () => validatePackageExports,
@@ -3714,5 +3715,166 @@ function extractMarkdownFootnotes(markdown) {
   }
   return { definitionCount: definitions.length, referenceCount, definitions, references, unresolvedReferences, unusedDefinitions };
 }
+var ARIA_GLOBAL_ATTRS = /* @__PURE__ */ new Set([
+  "aria-atomic",
+  "aria-busy",
+  "aria-controls",
+  "aria-current",
+  "aria-describedby",
+  "aria-details",
+  "aria-disabled",
+  "aria-dropeffect",
+  "aria-errormessage",
+  "aria-flowto",
+  "aria-grabbed",
+  "aria-haspopup",
+  "aria-hidden",
+  "aria-invalid",
+  "aria-keyshortcuts",
+  "aria-label",
+  "aria-labelledby",
+  "aria-live",
+  "aria-owns",
+  "aria-relevant",
+  "aria-roledescription"
+]);
+var ARIA_ROLE_TABLE = {
+  alert: { supported: ["aria-live", "aria-atomic"] },
+  alertdialog: { supported: ["aria-modal"] },
+  article: {},
+  banner: {},
+  button: { supported: ["aria-pressed", "aria-expanded", "aria-disabled"] },
+  checkbox: { required: ["aria-checked"], supported: ["aria-readonly"] },
+  columnheader: { supported: ["aria-sort", "aria-selected", "aria-readonly"] },
+  combobox: { required: ["aria-expanded"], supported: ["aria-controls", "aria-autocomplete", "aria-activedescendant"] },
+  complementary: {},
+  contentinfo: {},
+  dialog: { supported: ["aria-modal"] },
+  form: {},
+  grid: { supported: ["aria-multiselectable", "aria-activedescendant", "aria-level", "aria-readonly"] },
+  gridcell: { supported: ["aria-selected", "aria-readonly", "aria-expanded"] },
+  group: { supported: ["aria-activedescendant", "aria-disabled"] },
+  heading: { required: ["aria-level"] },
+  img: {},
+  link: { supported: ["aria-disabled", "aria-expanded"] },
+  list: {},
+  listbox: { supported: ["aria-multiselectable", "aria-activedescendant", "aria-orientation"] },
+  listitem: { supported: ["aria-level", "aria-posinset", "aria-setsize"] },
+  log: { supported: ["aria-live", "aria-atomic"] },
+  main: {},
+  marquee: {},
+  menu: { supported: ["aria-orientation", "aria-activedescendant"] },
+  menubar: { supported: ["aria-orientation", "aria-activedescendant"] },
+  menuitem: { supported: ["aria-disabled"] },
+  menuitemcheckbox: { required: ["aria-checked"] },
+  menuitemradio: { required: ["aria-checked"] },
+  meter: { required: ["aria-valuenow"], supported: ["aria-valuemin", "aria-valuemax", "aria-valuetext"] },
+  navigation: {},
+  none: {},
+  option: { supported: ["aria-selected", "aria-checked", "aria-posinset", "aria-setsize"] },
+  presentation: {},
+  progressbar: { supported: ["aria-valuenow", "aria-valuemin", "aria-valuemax", "aria-valuetext"] },
+  radio: { required: ["aria-checked"] },
+  radiogroup: { supported: ["aria-activedescendant"] },
+  region: {},
+  row: { supported: ["aria-selected", "aria-level", "aria-expanded"] },
+  rowheader: { supported: ["aria-sort", "aria-selected", "aria-readonly"] },
+  scrollbar: { required: ["aria-valuenow", "aria-controls"], supported: ["aria-valuemin", "aria-valuemax", "aria-orientation"] },
+  search: {},
+  searchbox: { supported: ["aria-multiline", "aria-placeholder", "aria-readonly", "aria-required", "aria-activedescendant", "aria-autocomplete"] },
+  separator: { supported: ["aria-orientation", "aria-valuenow", "aria-valuemin", "aria-valuemax"] },
+  slider: { required: ["aria-valuenow"], supported: ["aria-valuemin", "aria-valuemax", "aria-valuetext", "aria-orientation"] },
+  spinbutton: { supported: ["aria-valuenow", "aria-valuemin", "aria-valuemax", "aria-valuetext", "aria-required"] },
+  status: { supported: ["aria-live", "aria-atomic"] },
+  switch: { required: ["aria-checked"] },
+  tab: { supported: ["aria-selected", "aria-controls", "aria-disabled"] },
+  table: { supported: ["aria-colcount", "aria-rowcount"] },
+  tablist: { supported: ["aria-orientation", "aria-activedescendant", "aria-level"] },
+  tabpanel: {},
+  textbox: { supported: ["aria-multiline", "aria-placeholder", "aria-readonly", "aria-required", "aria-activedescendant", "aria-autocomplete"] },
+  timer: {},
+  toolbar: { supported: ["aria-orientation"] },
+  tooltip: {},
+  tree: { supported: ["aria-multiselectable", "aria-activedescendant", "aria-orientation"] },
+  treegrid: { supported: ["aria-multiselectable", "aria-activedescendant", "aria-orientation", "aria-level", "aria-readonly"] },
+  treeitem: { supported: ["aria-expanded", "aria-selected", "aria-checked", "aria-level"] }
+};
+var ARIA_ALL_KNOWN_ATTRS = new Set(ARIA_GLOBAL_ATTRS);
+for (const entry of Object.values(ARIA_ROLE_TABLE)) {
+  for (const a of entry.required ?? []) ARIA_ALL_KNOWN_ATTRS.add(a);
+  for (const a of entry.supported ?? []) ARIA_ALL_KNOWN_ATTRS.add(a);
+}
+var TAG_REGEX = /<([a-zA-Z][a-zA-Z0-9]*)\b((?:[^>"'/]|"[^"]*"|'[^']*')*)\/?>/g;
+var ATTR_REGEX = /([a-zA-Z][a-zA-Z0-9-]*)\s*=\s*(?:"([^"]*)"|'([^']*)')/g;
+function parseElements(html) {
+  const elements = [];
+  let match;
+  TAG_REGEX.lastIndex = 0;
+  while ((match = TAG_REGEX.exec(html)) !== null) {
+    const tag = match[1].toLowerCase();
+    if (tag === "script" || tag === "style" || tag === "!--") continue;
+    const attrsStr = match[2] ?? "";
+    const attrs = {};
+    let attrMatch;
+    ATTR_REGEX.lastIndex = 0;
+    while ((attrMatch = ATTR_REGEX.exec(attrsStr)) !== null) {
+      const name = attrMatch[1].toLowerCase();
+      const value = attrMatch[2] ?? attrMatch[3] ?? "";
+      attrs[name] = value;
+    }
+    elements.push({ tag, attrs, raw: match[0].length > 80 ? match[0].slice(0, 77) + "..." : match[0] });
+  }
+  return elements;
+}
+function validateAria(html) {
+  if (!html || !html.trim()) return { error: "Input is empty" };
+  const elements = parseElements(html);
+  if (elements.length === 0) return { error: "No HTML elements found" };
+  const issues = [];
+  let elementsWithRoleOrAria = 0;
+  for (const el of elements) {
+    const roleAttr = el.attrs["role"];
+    const ariaAttrNames = Object.keys(el.attrs).filter((a) => a.startsWith("aria-"));
+    if (roleAttr === void 0 && ariaAttrNames.length === 0) continue;
+    elementsWithRoleOrAria++;
+    const roles = roleAttr !== void 0 ? roleAttr.trim().split(/\s+/).filter(Boolean) : [];
+    const knownRoles = roles.filter((r) => Object.prototype.hasOwnProperty.call(ARIA_ROLE_TABLE, r));
+    const unknownRoles = roles.filter((r) => !Object.prototype.hasOwnProperty.call(ARIA_ROLE_TABLE, r));
+    for (const r of unknownRoles) {
+      issues.push({ element: el.raw, role: r, severity: "error", message: `Unknown ARIA role "${r}"` });
+    }
+    const primaryRole = knownRoles[0];
+    const roleDef = primaryRole ? ARIA_ROLE_TABLE[primaryRole] : void 0;
+    if (roleDef?.required) {
+      for (const req of roleDef.required) {
+        if (el.attrs[req] === void 0) {
+          issues.push({ element: el.raw, role: primaryRole, severity: "error", message: `role="${primaryRole}" is missing required attribute ${req}` });
+        }
+      }
+    }
+    for (const attrName of ariaAttrNames) {
+      if (ARIA_GLOBAL_ATTRS.has(attrName)) continue;
+      if (roleDef) {
+        const allowed = /* @__PURE__ */ new Set([...roleDef.required ?? [], ...roleDef.supported ?? []]);
+        if (!allowed.has(attrName)) {
+          issues.push({
+            element: el.raw,
+            role: primaryRole ?? null,
+            severity: "error",
+            message: primaryRole ? `${attrName} is not permitted on role="${primaryRole}"` : `${attrName} is not a global aria-* attribute`
+          });
+        }
+      } else if (!ARIA_ALL_KNOWN_ATTRS.has(attrName)) {
+        issues.push({ element: el.raw, role: null, severity: "warning", message: `${attrName} is not a recognized aria-* attribute (possible typo)` });
+      }
+    }
+  }
+  return {
+    elementCount: elements.length,
+    elementsWithRoleOrAria,
+    issues,
+    valid: issues.every((i) => i.severity !== "error")
+  };
+}
 
-export { ALL_FLAGS, CHEATSHEET, DEFAULT_COMMIT_TYPES, MIME_TABLE, OPERATIONS, SQL_DEFAULT_OPTIONS, analyzeRegexGroups, auditDependencyRanges, buildDockerPull, buildDockerRun, buildGitCommand, code_exports, collapseHtmlWhitespace, collapseJsWhitespace, countProperties, countRules, detectDialect, detectOperationType, detectRedos, envToExport, envToJson, extractMarkdownFootnotes, extractSvgSpriteSymbols, formatCss, formatGql, formatHtml, formatSql, getEndpointsByTag, getHtmlStats, getJsStats, getMethodColor, isValidTag, lintConventionalCommit, lookupMime, minifyCss, minifyGql, minifyHtml, minifyJs, minifySql, normalizeRef, parseCommitTrailers, parseDockerImage, parseEnv, parseGitCommand, parseGithubUrl, parseSpec, removeConsoleCalls, removeEmptyAttributes, removeHtmlComments, removeJsComments, removeRedundantAttributes, searchCheatsheet, searchEndpoints, splitStatements, testGitignorePatterns, testPattern, testRegex, validateEditorConfig, validateEnvKey, validatePackageExports, validateTsconfig };
+export { ALL_FLAGS, CHEATSHEET, DEFAULT_COMMIT_TYPES, MIME_TABLE, OPERATIONS, SQL_DEFAULT_OPTIONS, analyzeRegexGroups, auditDependencyRanges, buildDockerPull, buildDockerRun, buildGitCommand, code_exports, collapseHtmlWhitespace, collapseJsWhitespace, countProperties, countRules, detectDialect, detectOperationType, detectRedos, envToExport, envToJson, extractMarkdownFootnotes, extractSvgSpriteSymbols, formatCss, formatGql, formatHtml, formatSql, getEndpointsByTag, getHtmlStats, getJsStats, getMethodColor, isValidTag, lintConventionalCommit, lookupMime, minifyCss, minifyGql, minifyHtml, minifyJs, minifySql, normalizeRef, parseCommitTrailers, parseDockerImage, parseEnv, parseGitCommand, parseGithubUrl, parseSpec, removeConsoleCalls, removeEmptyAttributes, removeHtmlComments, removeJsComments, removeRedundantAttributes, searchCheatsheet, searchEndpoints, splitStatements, testGitignorePatterns, testPattern, testRegex, validateAria, validateEditorConfig, validateEnvKey, validatePackageExports, validateTsconfig };