100% In-Memory

JSON Inspector & Formatter

Format, validate, query, and beautify complex JSON data with zero latency.

Input JSON
Formatted Output Valid JSON
// Formatted JSON will render here...

JWT & Token Debugger

Decode, inspect claims, expirations, and payloads of JSON Web Tokens client-side.

Encoded Token
HEADER Algorithm & Token Type
// Header JSON
PAYLOAD Claims & Expiration
// Payload JSON

Regular Expression Visualizer

Real-time pattern matching, match extraction, and group inspector.

/ /
Test String
Highlighted Matches 0 Matches
Matches will appear highlighted here...

Cryptography, Hash & UUID Suite

Cryptographic hashing via Web Crypto API, UUID generation, and Base64/URL encoding.

🔒 Instant Hash Generator (Web Crypto)

SHA-256
SHA-512
SHA-1

🆔 UUID v4 Generator

Click generate for new UUID

🔤 Base64 & URL Encoder / Decoder

Markdown & Notes Scratchpad

Distraction-free markdown editor with live rendered preview and instant export.

0 words • 0 chars
Markdown Source 💾 Auto-saved
Live Preview

Color Palette & Contrast Studio

Generate harmonious HSL color harmonies with WCAG 2.1 accessibility contrast calculation.

Accessibility Contrast Ratio (WCAG 2.1)

The quick brown fox jumps over the lazy dog.
Ratio: 7.42 : 1
Normal Text: PASS (AA)
Large Text: PASS (AAA)

CSS Glassmorphism & Shadow Lab

Visual UI playground to design glass cards, elevation shadows, and export CSS tokens.

PREVIEW

Modern Glass UI

Harmonious light diffusion and depth elevation crafted with sub-pixel precision.

API & Webhook HTTP Sandbox

Execute client-side HTTP requests, test webhooks, inspect status headers, and format JSON responses.

HTTP Response Status: 200 OK Time: 120ms Size: 840 B
// Click "Send Request" to execute API call...

Text & Code Diff Inspector

Compare two versions of code or text with line-by-line and character-level difference highlighting.

Original (Old Version)
Modified (New Version)
Visual Difference Analysis 0 additions • 0 deletions

Data Converters & Unix Epoch Studio

Convert between JSON, YAML, CSV formats, convert Unix Epoch timestamps, and calculate CSS rem units.

Current Epoch Timestamp (Seconds):
0000000000

Timestamp to Human Date

GMT / UTC
Local Time
Relative

Human Date to Timestamp

Seconds
Millis (ms)
JSON Source
YAML Output
JSON Array
CSV Output

📐 CSS Units (px ↔ rem ↔ em ↔ pt)

px

Mesh Gradient & CSS Canvas Studio

Craft modern multi-point mesh gradients, ambient backdrops, and export pure CSS variables.

Color Nodes

Vibrant Mesh Canvas

Pure mathematical CSS multi-stop blend.

Pomodoro & Focus Ambience

Deep-work interval timer paired with synthesized coffee shop, rain, and fireplace acoustic soundscapes.

25:00

☕ Ambient Soundscape (Web Audio Synthesizer)

Pure mathematical acoustic synthesis — zero external streaming or data consumption.

Espresso Machine & Café
🌧️ Gentle Window Rain
🔥 Cozy Fireplace Hearth

Architecture & System Documentation

Comprehensive technical specification, security architecture, design goals, and execution manual.

01 • OVERVIEW

What is OmniTool Studio?

OmniTool Studio (hosted at project.shubhxlab.xyz) is an all-in-one, privacy-first, zero-latency web power suite built for developers, UI/UX designers, and digital creators.

Crafted with love and fresh coffee by Shubham & Nidhi, OmniTool unifies over 10 essential engineering, design, and focus utilities into a single, cohesive desktop-grade browser interface. Every single algorithm, formatter, parser, and sound synthesizer executes 100% client-side in browser memory with zero server-side telemetry or third-party tracking.

02 • MISSION & VISION

Goals of the Project

🔒 Eradicate Data Leakage

Most online formatters and JWT decoders upload sensitive API payloads, tokens, and code to third-party servers. OmniTool processes everything locally on the user's CPU, keeping proprietary code safe.

⚡ Eliminate Tab Overload & Friction

Instead of keeping 12 individual tabs open for JSON, regex, hashes, color palettes, and timers, OmniTool brings them under one seamless workspace accessible via Ctrl+K.

🎨 Sub-Pixel Aesthetic Standards

Developer tools shouldn't look like raw terminal dumps. OmniTool provides high-contrast, beautiful typography, micro-interactions, and glassmorphic warmth.

📶 100% Offline & Instant Execution

Sub-millisecond compute response. Once loaded, OmniTool functions flawlessly without an active internet connection.

03 • ARCHITECTURE

Implementation Plan & Data Flow

OmniTool follows an event-driven, decoupled client-side architecture:

Step 1 User Input / Action Raw JSON, JWT, Regex pattern, Hex code
Step 2 Client-Side Engine Web Crypto API • Regex Parser • WCAG Math
Step 3 Sanitized DOM Render Explicit text nodes • Zero innerHTML injection
Step 4 Local Persistence Encrypted in localStorage (Client Only)
04 • TECHNOLOGY STACK

Technology Stack Breakdown

Layer Technology Purpose & Implementation
Markup Semantic HTML5 Accessible ARIA roles, high-contrast layouts, zero bloat.
Styling Vanilla CSS3 (Tokens) Custom CSS properties, HSL color system, fluid grid & flexbox, mesh gradients, glassmorphism.
Logic Modern ES6+ JavaScript Zero external NPM dependencies. Self-contained modular tool managers, diff engines, and formatters.
HTTP Sandbox Fetch API & Performance API Client-side HTTP REST requests, header parsing, and sub-millisecond network latency profiling.
Cryptography W3C Web Crypto API Hardware-accelerated SHA-256, SHA-512, SHA-1 and crypto.randomUUID().
Audio Web Audio API Real-time acoustic noise synthesizer (Café, Rain, Fireplace) with zero streaming data.
Server & SSL Apache 2.4 + Let's Encrypt Automated ACME HTTP-01 certificates, HSTS, and custom WAF directives.
05 • DEFENSE IN DEPTH

Enterprise Security Matrix

🔒 Server-Side WAF & Headers

  • HSTS Preload: max-age=63072000; includeSubDomains; preload (2 Years).
  • Anti-Clickjacking: X-Frame-Options: DENY + CSP frame-ancestors 'none'.
  • Anti-MIME Sniffing: X-Content-Type-Options: nosniff.
  • Isolation: COOP (same-origin) and CORP (same-origin).
  • Closed Endpoints: Restricts HTTP methods exclusively to GET, POST, HEAD.
  • Query Firewall: Blocks SQL injection, XSS payloads, and directory traversal with 403 Forbidden.

🥷 Client-Side Hardening

  • Zero Server-Side Storage: Zero database connections; no sensitive data is stored or logged.
  • DOM Sanitization: All dynamic notifications use text nodes to prevent XSS.
  • Framebuster: JavaScript frame-breaker prevents malicious iframe embedding.
  • Silent Anti-Inspect: Intercepts F12, Ctrl+Shift+I/J/C, Ctrl+U, Ctrl+S, and right-click.
  • Console Sanitization: Neutralizes console output to protect execution state.
06 • USE CASES

Daily Workflows & Use Cases

👨‍💻 Software Engineers

Executing API calls, inspecting JWT claims, viewing code diffs, formatting JSON/YAML, and hashing tokens.

🎨 Frontend & UI Designers

Generating color harmonies with WCAG AA/AAA compliance checks, dialing in CSS glassmorphism, and crafting mesh gradients.

⏱️ Creators & Remote Workers

25-minute Pomodoro focus sprints paired with acoustic coffee shop soundscapes and auto-saving Markdown notes.

07 • TECHNICAL INNER WORKINGS

How It Works (Under The Hood)

1. Cryptographic Hash Pipeline

When you input a string, OmniTool converts it to a Uint8Array via TextEncoder, feeds it into crypto.subtle.digest('SHA-256', data), and maps the output byte buffer into a hexadecimal representation in under 0.2 milliseconds.

2. Mathematical Acoustic Synthesis

Rather than downloading MP3 audio loops, OmniTool creates a 2-second white noise buffer via the AudioContext API, applies bandpass and lowpass Butterworth filters (350Hz - 800Hz), and loops it seamlessly to generate ambient rain and café acoustics.

3. WCAG 2.1 Contrast Calculation

Calculates relative luminance \(L = 0.2126R + 0.7152G + 0.0722B\) with gamma expansion, then calculates the contrast ratio \(\frac{L_1 + 0.05}{L_2 + 0.05}\) to evaluate AA (\(\ge 4.5:1\)) and AAA (\(\ge 7.0:1\)) compliance.

08 • COMPETITIVE ADVANTAGE

How OmniTool is Different from Others

Feature Generic Online Tools OmniTool Studio (project.shubhxlab.xyz)
Data Privacy ❌ Uploads data to third-party servers 100% Client-Side In-Memory Only
Third-Party Trackers ❌ Google Analytics, Ads, Cookies Zero Trackers, Zero Ads
Execution Latency ❌ 300ms - 1500ms (Network roundtrips) < 1ms (Instant Local Compute)
Unified Interface ❌ 10+ disjointed website tabs Unified Workspace with Ctrl+K Navigation
Offline Support ❌ Requires continuous internet Fully Functional Offline
Audio & Focus ❌ Not available Synthesized Acoustic Soundscapes + Pomodoro
09 • COMPLETE FEATURE REFERENCE

Exhaustive Feature-by-Feature Engineering Guide

An in-depth breakdown of every single tool in OmniTool Studio: What it is, What it does, and How it works under the hood.

1. { } JSON Inspector & Formatter

• What is it: A client-side JSON syntax validator, structural beautifier, minifier, and path analyzer.

• What it does: Validates raw JSON syntax in real time; beautifies minified JSON with standard 2-space or 4-space indentation; compresses JSON into a single line for API payloads; catches syntax errors with precise error messaging; copies output with 1 click.

• How it does it: Uses recursive client-side AST lexical parsing via native JSON.parse() and JSON.stringify(data, null, indent). Runs inside an isolated JavaScript try-catch boundary to prevent UI crashes, mapping syntax exceptions directly to status badges.

2. 🔐 JWT & Token Debugger

• What is it: An RFC 7519 JSON Web Token security inspector and claims decoder for API tokens and session cookies.

• What it does: Decodes Base64URL-encoded Bearer tokens; splits tokens into Header, Payload, and Signature; extracts signing algorithms (alg), token types (typ), subjects (sub), issuers (iss); calculates real-time expiration dates and active/expired status.

• How it does it: Splits the dot-delimited token (header.payload.signature), converts URL-safe Base64 characters (- to +, _ to /) with modulo-4 padding, decodes the binary byte sequence via window.atob(), parses the resulting UTF-8 JSON object, and converts the UNIX timestamp (exp * 1000) into localized time compared against Date.now().

3. .* Regular Expression Visualizer & Tester

• What is it: A real-time pattern matching playground and syntax verification engine for regular expressions.

• What it does: Compiles custom regex expressions with interactive flags (g, i, m, s, u); scans test strings for matches; highlights matched substrings with color-coded tags; counts total matches; offers 5 production presets (Email, URL, IPv4, Phone, UUID).

• How it does it: Instantiates dynamic regex instances using new RegExp(pattern, flags). Applies HTML entity escaping to sanitize raw input against XSS vulnerabilities, executes String.prototype.replace(reg, match => ...) to inject high-contrast <mark> elements, and displays match statistics.

4. 🔄 API & Webhook HTTP Sandbox

• What is it: A browser-based REST API and webhook testing client with real-time response inspection.

• What it does: Sends HTTP requests using methods (GET, POST, PUT, PATCH, DELETE, HEAD); passes custom request headers and JSON payloads; measures latency in milliseconds; formats and syntax-highlights JSON response bodies; inspects response sizes.

• How it does it: Utilizes the modern browser fetch() API coupled with high-resolution performance timers (performance.now()) to record execution latency. Parses response streams as text/JSON, handles HTTP status codes, and safely prints outputs in preformatted monospace containers.

5. ⚖️ Text & Code Diff Inspector

• What is it: A line-by-line and character-level difference comparator for source code, configuration files, and text.

• What it does: Compares original vs modified text; highlights line additions in emerald green (+) and line deletions in rose red (-); calculates total addition/deletion counts; supports instant text swapping and clearing.

• How it does it: Splits both input buffers into line arrays and computes sequential line diff matrices. Generates dynamic styled DOM line elements with status classes (.diff-line-add, .diff-line-del, .diff-line-same) for instant visual scanning.

6. 🔀 Data Converters & Unix Epoch Studio

• What is it: A multi-format data transformation workspace for JSON, YAML, CSV, Unix timestamps, and CSS units.

• What it does: Converts JSON to YAML and YAML to JSON; converts JSON object arrays to CSV spreadsheets; features a live Unix Epoch clock ticker; converts epoch timestamps to human UTC/Local dates and relative intervals ("3 hours ago"); calculates CSS px to rem / em / pt units.

• How it does it: Recursively serializes JavaScript object trees into YAML indentation strings; splits and maps array properties into CSV comma-separated lines; runs mathematical timestamp calculations using Date epoch arithmetic; and applies font-size scaling ratios (\(rem = px / base\)).

7. #_ Cryptography, SHA Hashing & UUID Suite

• What is it: A hardware-accelerated cryptographic hash generator, UUID v4 generator, and data encoder/decoder.

• What it does: Computes SHA-256, SHA-512, and SHA-1 digests simultaneously in < 0.2ms; generates RFC 4122 v4 cryptographically random UUIDs; encodes and decodes Base64 and URL URI strings.

• How it does it: Calls the W3C Web Crypto API (crypto.subtle.digest(algo, data)) utilizing native CPU cryptographic extensions (AES-NI/SHA). The binary ArrayBuffer is converted to a Uint8Array and formatted into a hexadecimal byte string. UUIDs are generated with crypto.randomUUID() using hardware entropy.

8. 📝 Markdown & Notes Scratchpad

• What is it: A distraction-free, auto-saving live markdown documentation editor and note-taking workspace.

• What it does: Renders GitHub-Flavored Markdown syntax (headers, bold/italic, lists, blockquotes, code blocks) in real time; provides live word and character counts; automatically saves changes in the browser; exports downloadable .md files.

• How it does it: Runs a client-side regex tokenizer on input events; sanitizes markup against XSS; serializes notes into HTML5 localStorage under isolated keys; creates in-memory client Blob URLs (URL.createObjectURL(new Blob([data], {type: 'text/markdown'}))) for 1-click file downloads without server involvement.

9. 🎨 Color Palette & WCAG 2.1 Contrast Studio

• What is it: An HSL chromatic harmony generator and web accessibility validator.

• What it does: Generates 5 harmonious shades (Base, Analogous, Complementary, Triadic 1 & 2); computes relative luminance and exact contrast ratios; validates WCAG 2.1 compliance (Pass AA ≥ 4.5:1 & Pass AAA ≥ 7.0:1).

• How it does it: Projects Hex colors into the 3D cylindrical HSL coordinate space; rotates hue angles (±30°, +180°, +120°, +240°); converts colors to linear sRGB with gamma expansion; computes relative luminance \(L = 0.2126R + 0.7152G + 0.0722B\); and evaluates the contrast ratio \(\frac{L_1 + 0.05}{L_2 + 0.05}\).

10. ✨ CSS Glassmorphism & Elevation Shadow Lab

• What is it: An interactive visual UI laboratory for styling modern glassmorphism cards and elevation depth shadows.

• What it does: Adjusts backdrop blur (0-40px), background opacity (2%-80%), border radius (0-48px), and shadow elevation (0-60px) in real time; previews the card floating over colored diffusion orbs; exports copyable CSS declarations.

• How it does it: Directly connects HTML <input type="range"> event streams to the live card's CSS inline style declarations (backdrop-filter, background-color, border-radius, box-shadow), formatting them into a standard CSS token block for instant clipboard copying.

11. 🌈 Mesh Gradient & CSS Canvas Studio

• What is it: A modern multi-node CSS gradient and ambient canvas backdrop designer.

• What it does: Combines 4 customizable color stops with dynamic angle and radial diffusion controls; renders a live blurred glassmorphic preview stage; offers random harmony generation (🎲 Surprise Me); exports one-click pure CSS gradient code.

• How it does it: Generates multi-stop linear/radial CSS gradients dynamically by binding color picker inputs and range sliders to DOM background properties, computing the angle vector and color stops on the fly.

12. ⏱️ Pomodoro & Web Audio Ambience Synthesizer

• What is it: A deep-work interval timer coupled with a pure mathematical ambient soundscape synthesizer.

• What it does: Runs 25m Pomodoro, 5m short break, and 15m long break cycles with completion chimes; generates synthesized Café, Gentle Rain, and Fireplace acoustics.

• How it does it: Employs high-precision JavaScript timer intervals; connects to the browser's Web Audio API AudioContext to generate procedural white noise buffers in memory; routes them through lowpass and bandpass Butterworth biquad filters (350Hz - 800Hz) and gain envelopes to create organic, zero-bandwidth acoustic soundscapes.

13. ⚡ Global Command Palette (Ctrl+K / Cmd+K)

• What is it: A high-speed keyboard navigation and spotlight search engine.

• What it does: Opens a spotlight search modal from anywhere; searches tools, categories, and actions; allows rapid navigation via Up/Down arrow keys and Enter.

• How it does it: Global keyboard listener traps Ctrl+K, Cmd+K, and Escape; runs fuzzy substring matching across tool metadata arrays; manages keyboard focus trapping inside the modal; seamlessly updates URL hash and switches active workspace tabs in 0ms.

Meet The Builders

Crafted with endless curiosity, late-night codecraft, and fresh coffee by Shubham & Nidhi.

Architect • Systems
👨‍💻

Shubham

Engineering & Core Architecture

“Building zero-latency, privacy-first software that solves real friction for creators everywhere.”
Architecture Security Web APIs Espresso ☕
Creative Lead • UI/UX
👩‍🎨

Nidhi

Design Systems & Motion Craft

“Crafting tactile, humane interfaces where every transition and color choice sparks genuine joy.”
UI/UX Design Tokens Motion Love ❤️