@privacyscrubber/mcp-server 1.0.1 → 1.0.3

package/.well-known/mcp/server-card.json

@@ -0,0 +1,60 @@
+{
+  "serverInfo": {
+    "name": "privacyscrubber/pii-masking-mcp",
+    "version": "1.0.3"
+  },
+  "tools": [
+    {
+      "name": "sanitize_text",
+      "description": "Locally scrubs PII, secrets, and credentials (like API keys, passwords, emails, phones, names) from code, logs, or text. Replaces them with safe placeholders (e.g., [EMAIL_1], [API_KEY_1]). Keep your data secure before passing it to any LLM.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "text": {
+            "type": "string",
+            "description": "The raw text, code, or logs to sanitize."
+          },
+          "profile": {
+            "type": "string",
+            "description": "The detection profile to use. Available: 'General' (Free), or PRO profiles. Defaults to 'General'."
+          }
+        },
+        "required": ["text"]
+      }
+    },
+    {
+      "name": "reveal_text",
+      "description": "Replaces masked tokens (e.g., [EMAIL_1], [API_KEY_1]) in the LLM's response back with the original private data from the local volatile RAM-only session map.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "text": {
+            "type": "string",
+            "description": "The AI generated response containing placeholders to restore."
+          }
+        },
+        "required": ["text"]
+      }
+    },
+    {
+      "name": "sanitize_file",
+      "description": "Reads a local file, sanitizes its contents using the selected profile, and outputs the safe version for AI analysis. Securely keeps original identifiers in memory.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "file_path": {
+            "type": "string",
+            "description": "Absolute path to the file to sanitize."
+          },
+          "profile": {
+            "type": "string",
+            "description": "The detection profile to use. Available: 'General' (Free), or PRO profiles. Defaults to 'General'."
+          }
+        },
+        "required": ["file_path"]
+      }
+    }
+  ],
+  "resources": [],
+  "prompts": []
+}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ilya Sibiryakov (BrandMeWeb)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,35 +1,28 @@
-# @privacyscrubber/mcp-server
+# PrivacyScrubber MCP Server v1.0.3
 
-**Zero-Trust Data Sanitization (ZTDS) Model Context Protocol (MCP) Server.**
-Locally scrubs PII, secrets, credentials, and custom patterns from files and text contexts before sending them to LLMs.
+Zero-Trust Data Sanitization (ZTDS) Model Context Protocol (MCP) server for local PII and secrets masking.
 
----
+## What's New in v1.0.3
+- **Robust Configuration Parsing**: Protected Smithery integration hooks from undefined configuration objects, ensuring reliable initialization across all MCP clients (Claude Desktop, Cursor, Windsurf).
+- **Microsoft Word (.docx) Support**: Enhanced the `sanitize_file` tool to parse and redact sensitive information from Word documents locally.
+- **Unified Branding & Metadata**: Corrected repository fields and aligned server identity across NPM, Smithery, and Glama registries.
+- **Enhanced Scanner Discovery**: Implemented static `server-card.json` configurations to support automated registry scanning.
 
-## 🔒 Security & Privacy Guarantees
+## Key Features & Security Guarantees
+- **100% Local Processing**: All regex scanning, PII tokenization, and reverse-scrubbing occur directly in your machine's RAM.
+- **Airplane Mode Verified**: Fully operational without an internet connection after the initial download.
+- **Zero Server Logs**: No data, credentials, or prompts are sent to external APIs or remote databases.
 
-*   **100% Offline / Local Execution:** All PII detection, regex matching, and tokenization happen entirely inside your local machine's RAM. No prompt context or file data is ever sent to any remote servers.
-*   **Volatile In-Memory Mapping:** The token replacement map (`sessionMap`) is kept in volatile RAM only. It is never persisted to disk, cookies, or database storage.
-*   **Support for Reverse-Scrubbing (Reveal):** Replaces tokens in LLM responses back with original values securely inside your local context.
-
----
-
-## 🚀 Installation & Usage
-
-### 1. Instant Run with NPX
-You can run the MCP server directly using `npx`:
+## Quick Start
+Run the server instantly without local installation:
 ```bash
-npx @privacyscrubber/mcp-server
+npx -y @privacyscrubber/mcp-server
 ```
 
----
-
-## ⚙️ Client Integrations
+## Client Integration Examples
 
 ### Claude Desktop
-Add the server configuration to your Claude Desktop config file:
-*   **macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`
-*   **Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
-
+Add to your `claude_desktop_config.json`:
 ```json
 {
   "mcpServers": {
@@ -37,7 +30,7 @@ Add the server configuration to your Claude Desktop config file:
       "command": "npx",
       "args": ["-y", "@privacyscrubber/mcp-server"],
       "env": {
-        "PRIVACYSCRUBBER_KEY": "YOUR_OPTIONAL_PRO_OR_TEAMS_KEY"
+        "PRIVACYSCRUBBER_KEY": "YOUR_OPTIONAL_PRO_LICENSE_KEY"
       }
     }
   }
@@ -45,22 +38,13 @@ Add the server configuration to your Claude Desktop config file:
 ```
 
 ### Cursor / Windsurf
-1. Open settings (Settings -> Features -> MCP).
-2. Add new MCP server:
-    *   **Name:** `privacyscrubber`
-    *   **Type:** `command`
-    *   **Command:** `npx -y @privacyscrubber/mcp-server`
-3. If you have a PRO key, add `PRIVACYSCRUBBER_KEY` as an environment variable in your system shell or configure it locally.
-
----
-
-## 🛠️ Provided Tools
-
-1.  `sanitize_text` — Sanitizes a raw string using the selected detection profile.
-2.  `reveal_text` — Detokenizes a response containing PII tokens back to the original text.
-3.  `sanitize_file` — Reads a local file, sanitizes its contents, and outputs the safe version (supports up to 10MB).
-
----
-
-## 📄 License & Commercial Key
-Standard use includes the **Free Tier** (limits to the `General` PII profile). To unlock 22+ specialized industry profiles (DevOps, Medical, Legal, Finance) and custom regex rules, acquire a license at [privacyscrubber.com/pricing](https://privacyscrubber.com/pricing).
+Add a new command-type MCP server:
+- **Name**: `privacyscrubber`
+- **Command**: `npx -y @privacyscrubber/mcp-server`
+
+## Useful Links
+- **Official Website**: https://privacyscrubber.com
+- **Chrome Web Store Extension**: https://chromewebstore.google.com/detail/privacyscrubber-%E2%80%94-pii-red/pimoejgefeilajmmbpghifdmhdlkgjol
+- **MCP Documentation**: https://privacyscrubber.com/pii-mcp/
+- **Pricing & Licensing**: https://privacyscrubber.com/pricing/
+- **GitHub Repository**: https://github.com/moxno/privacyscrubber-mcp

package/index.js

@@ -83,8 +83,8 @@ function checkLicenseStatus() {
 // Create the MCP server
 const server = new Server(
   {
-    name: "privacyscrubber-mcp",
-    version: "1.0.0",
+    name: "privacyscrubber/pii-masking-mcp",
+    version: "1.0.3",
   },
   {
     capabilities: {
@@ -135,7 +135,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
         inputSchema: {
           type: "object",
           properties: {
-            filePath: {
+            file_path: {
               type: "string",
               description: "Absolute path to the file to sanitize."
             },
@@ -144,7 +144,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
               description: "The detection profile to use. Available: 'General' (Free), or PRO profiles: 'Dev' (Engineering/Code), 'Medical', 'Pharma', 'Legal', 'Compliance', 'CCPA', 'Finance', 'Bizops', 'Sales', 'WealthMgmt', 'Insurance', 'Accounting', 'HR', 'Security', 'Marketing', 'Support', 'RealEstate', 'Agents', 'Academic', 'Creative', 'Tech', 'Personal'. Defaults to 'General'."
             }
           },
-          required: ["filePath"]
+          required: ["file_path"]
         }
       }
     ]
@@ -169,7 +169,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
           content: [
             {
               type: "text",
-              text: `⚠️ [PrivacyScrubber] Advanced profile '${targetProfile}' is locked in the FREE tier. Falling back to 'General' profile.${reason}\nTo unlock 22+ advanced industry profiles, custom regex, and unlimited logs protection, set PRIVACYSCRUBBER_KEY to your PRO license key.\nGet a key at: https://privacyscrubber.com/pricing\n\n--- Sanitized Output (General Profile) ---\n`
+              text: `⚠️ [PrivacyScrubber] Advanced profile '${targetProfile}' is locked in the FREE tier. Falling back to 'General' profile.${reason}\nTo unlock 22+ advanced industry profiles, custom regex, and unlimited logs protection, set PRIVACYSCRUBBER_KEY to your PRO license key.\nGet a key at: https://privacyscrubber.com/pricing\nBrowser Extension: https://chromewebstore.google.com/detail/privacyscrubber-%E2%80%94-pii-red/pimoejgefeilajmmbpghifdmhdlkgjol\n\n--- Sanitized Output (General Profile) ---\n`
             },
             {
               type: "text",
@@ -204,7 +204,20 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
     }
 
     if (name === "sanitize_file") {
-      const { filePath, profile = "General" } = args;
+      const rawPath = args.file_path || args.filePath;
+      if (!rawPath) {
+        return {
+          isError: true,
+          content: [
+            {
+              type: "text",
+              text: "Error: Missing required parameter 'file_path'."
+            }
+          ]
+        };
+      }
+      const { profile = "General" } = args;
+      const filePath = rawPath;
       
       const resolvedPath = path.resolve(filePath);
       if (!fs.existsSync(resolvedPath)) {
@@ -246,7 +259,71 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         };
       }
 
-      const content = fs.readFileSync(resolvedPath, "utf8");
+      if (resolvedPath.toLowerCase().endsWith(".docx")) {
+        try {
+          const mammoth = require('mammoth');
+          const result = await mammoth.extractRawText({ path: resolvedPath });
+          const content = result.value;
+          const targetProfile = profile.trim();
+          const isAdvanced = targetProfile.toLowerCase() !== "general";
+          const license = checkLicenseStatus();
+
+          let prefix = "";
+          let finalProfile = targetProfile;
+
+          if (isAdvanced && !license.isPro) {
+            const reason = license.error ? ` (${license.error})` : "";
+            prefix = `⚠️ [PrivacyScrubber] Advanced profile '${targetProfile}' is locked in the FREE tier. Falling back to 'General' profile.${reason}\nGet a PRO key at: https://privacyscrubber.com/pricing\nBrowser Extension: https://chromewebstore.google.com/detail/privacyscrubber-%E2%80%94-pii-red/pimoejgefeilajmmbpghifdmhdlkgjol\n\n`;
+            finalProfile = "General";
+          }
+
+          const sanitized = performSanitization(content, finalProfile);
+          return {
+            content: [
+              {
+                type: "text",
+                text: `${prefix}${sanitized}`
+              }
+            ]
+          };
+        } catch (docxError) {
+          return {
+            isError: true,
+            content: [
+              {
+                type: "text",
+                text: `Error: Failed to parse DOCX file: ${docxError.message}`
+              }
+            ]
+          };
+        }
+      }
+
+      const buffer = fs.readFileSync(resolvedPath);
+      
+      // Check for null bytes in the first 8KB to detect binary files
+      let isBinary = false;
+      const checkLen = Math.min(buffer.length, 8000);
+      for (let i = 0; i < checkLen; i++) {
+        if (buffer[i] === 0) {
+          isBinary = true;
+          break;
+        }
+      }
+
+      if (isBinary) {
+        return {
+          isError: true,
+          content: [
+            {
+              type: "text",
+              text: `Error: Binary file format detected. The local MCP server only supports plain text files (e.g., source code, logs, CSV, markdown, JSON). To sanitize complex formats like PDF or DOCX, please use the web interface at: https://privacyscrubber.com/`
+            }
+          ]
+        };
+      }
+
+      const content = buffer.toString("utf8");
       const targetProfile = profile.trim();
       const isAdvanced = targetProfile.toLowerCase() !== "general";
       const license = checkLicenseStatus();
@@ -256,7 +333,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 
       if (isAdvanced && !license.isPro) {
         const reason = license.error ? ` (${license.error})` : "";
-        prefix = `⚠️ [PrivacyScrubber] Advanced profile '${targetProfile}' is locked in the FREE tier. Falling back to 'General' profile.${reason}\nGet a PRO key at: https://privacyscrubber.com/pricing\n\n`;
+        prefix = `⚠️ [PrivacyScrubber] Advanced profile '${targetProfile}' is locked in the FREE tier. Falling back to 'General' profile.${reason}\nGet a PRO key at: https://privacyscrubber.com/pricing\nBrowser Extension: https://chromewebstore.google.com/detail/privacyscrubber-%E2%80%94-pii-red/pimoejgefeilajmmbpghifdmhdlkgjol\n\n`;
         finalProfile = "General";
       }
 

package/manifest.json

@@ -0,0 +1,28 @@
+{
+  "manifest_version": "0.3",
+  "name": "privacyscrubber/pii-masking-mcp",
+  "version": "1.0.3",
+  "description": "Zero-Trust Data Sanitization (ZTDS) MCP Server for AI IDEs and Claude Desktop. Locally scrubs PII, secrets, and credentials before sending context to LLMs.",
+  "author": {
+    "name": "PrivacyScrubber",
+    "email": "legal@privacyscrubber.com"
+  },
+  "server": {
+    "type": "node",
+    "entry_point": "index.js",
+    "mcp_config": {
+      "command": "node",
+      "args": ["${__dirname}/index.js"],
+      "env": {
+        "PRIVACYSCRUBBER_KEY": "${user_config.PRIVACYSCRUBBER_KEY}"
+      }
+    }
+  },
+  "user_config": {
+    "PRIVACYSCRUBBER_KEY": {
+      "type": "string",
+      "title": "PrivacyScrubber License Key",
+      "description": "Optional PRO or TEAMS license key. Leave blank to use the Free tier."
+    }
+  }
+}

package/package.json

@@ -1,9 +1,22 @@
 {
   "name": "@privacyscrubber/mcp-server",
-  "version": "1.0.1",
+  "version": "1.0.3",
+  "mcpName": "io.github.moxno/privacyscrubber-mcp",
   "description": "Zero-Trust Data Sanitization (ZTDS) MCP Server for AI IDEs and Claude Desktop. Locally scrubs PII, secrets, and credentials before sending context to LLMs.",
   "main": "index.js",
   "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "index.js",
+    "scrubber-core.cjs",
+    "smithery.yaml",
+    "server.json",
+    "manifest.json",
+    "bundle.mcpb",
+    ".well-known"
+  ],
   "bin": {
     "mcp-server": "index.js",
     "privacyscrubber-mcp": "index.js"
@@ -12,7 +25,8 @@
     "start": "node index.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^0.6.0"
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "mammoth": "^1.8.0"
   },
   "keywords": [
     "mcp",
@@ -26,6 +40,14 @@
     "claude-desktop",
     "cursor"
   ],
-  "author": "Ilya Sibiryakov (Brand Me Web)",
-  "license": "MIT"
+  "author": "Ilya Sibiryakov (BrandMeWeb)",
+  "license": "MIT",
+  "homepage": "https://privacyscrubber.com/pii-mcp/",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/moxno/privacyscrubber-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/moxno/privacyscrubber-mcp/issues"
+  }
 }

package/server.json

@@ -0,0 +1,29 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "privacyscrubber/pii-masking-mcp",
+  "description": "Zero-Trust PII & secrets sanitizer. Locally scrubs data in-memory before sending context to LLMs.",
+  "repository": {
+    "url": "https://github.com/moxno/privacyscrubber-mcp",
+    "source": "github"
+  },
+  "version": "1.0.3",
+  "packages": [
+    {
+      "registryType": "npm",
+      "identifier": "@privacyscrubber/mcp-server",
+      "version": "1.0.3",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "description": "Optional PRO or TEAMS license key to unlock specialized detection profiles.",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": true,
+          "name": "PRIVACYSCRUBBER_KEY"
+        }
+      ]
+    }
+  ]
+}

package/smithery.yaml

@@ -0,0 +1,12 @@
+# Smithery.ai configuration for PrivacyScrubber MCP Server
+startCommand:
+  type: "stdio"
+  commandFunction: |-
+    (config) => ({
+      command: 'node',
+      args: ['./index.js'],
+      env: {
+        PRIVACYSCRUBBER_KEY: (config && config.PRIVACYSCRUBBER_KEY) || ''
+      }
+    })
+exampleConfig: {}

package/test-mcp.js

@@ -1,114 +0,0 @@
-/**
- * Complete Cryptographic Verification Test Suite for @privacyscrubber/mcp-server
- */
-
-import { createRequire } from 'module';
-import path from 'path';
-import { fileURLToPath } from 'url';
-
-const require = createRequire(import.meta.url);
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-const scrubberCorePath = path.resolve(__dirname, '../chrome-extension/scrubber-core.js');
-const mcpServerIndex = path.resolve(__dirname, 'index.js');
-
-console.log("Loading modules for verification test...");
-try {
-  const PrivacyScrubberCore = require(scrubberCorePath);
-  PrivacyScrubberCore.init();
-
-  // Load index.js to test its internal validate functions
-  // We can simulate its checkLicenseStatus by mocking environment variables
-  const indexModule = await import('./index.js?update=' + Date.now());
-
-  // Test Case 1: No license key
-  console.log("\n[Test 1] Testing with no license key (Free tier)...");
-  process.env.PRIVACYSCRUBBER_KEY = "";
-  const t1 = global.checkLicenseStatus ? global.checkLicenseStatus() : mockCheckLicenseStatus();
-  console.log("Status:", t1);
-  if (t1.isPro) {
-    console.error("❌ Test 1 failed: keyless state should not be PRO.");
-    process.exit(1);
-  }
-  console.log("✅ Test 1 passed.");
-
-  // Test Case 2: Expired trial key
-  console.log("\n[Test 2] Testing with expired signed trial key...");
-  // Expired key generated by generate-license.js
-  const expiredKey = "eyJ0eXBlIjoidHJpYWwiLCJleHBpcmVzIjoxNzgzMjcwMTgzLCJpc3N1ZWRBdCI6MTc4MzcwMjE4Mywibm9uY2UiOiIzYzRkYzEwNmRkOGJiZjczIn0=.Wc1cPwvRpEQxG3BarmedBYm9sUsGdwznboh8Gx3a7qQZm2I+Dha8lk1CtzmaaBt5O8pQszGuTCHapASFwZX2Ku8uZxkGipPI+tbNI39KK7cM6wA+Txc0Ufec/lnDE/27WelBswStSIMgR5LPVScfamMO5BK6jvJ9RgOrEdJeqJPcpab0mwy4jzZwSATyZ1JOS61i8ZlJ+n99zppBrrMZQQo/FJ5t70RpqZiZoMuyNbeDJB9UWGDEAELiJLBkaGeYgBo65zp7fRcTuyjmoZjINnOhCcXmKsmeB1vkHdjPg8jXaGVWFN7bJryeV7j/OkpNqO2q74x3hXDvNwlGtg4PUg==";
-  process.env.PRIVACYSCRUBBER_KEY = expiredKey;
-  const t2 = mockCheckLicenseStatus();
-  console.log("Status:", t2);
-  if (t2.isPro || !t2.error.includes("expired")) {
-    console.error("❌ Test 2 failed: expired key should be blocked with expiration reason.");
-    process.exit(1);
-  }
-  console.log("✅ Test 2 passed.");
-
-  // Test Case 3: Valid signed PRO key
-  console.log("\n[Test 3] Testing with valid signed PRO key...");
-  // Valid key generated in this session
-  const validKey = "eyJ0eXBlIjoicHJvIiwiZXhwaXJlcyI6MjA5OTA2MjE3NCwiaXNzdWVkQXQiOjE3ODM3MDIxNzQsIm5vbmNlIjoiMmI4MTllN2ZmM2ZmOTFmYiJ9.ZmhaKDGf9vG0nTH0nyOy3EInsuUmzjBOk9IOyiqzt6Y5s3UG+2yRExuKBoeXWymbpJt3NIJNM9sVxxl+lcop5wqbi2LNtPY4MuwBRA7pO4nn3Bes5R0lxLbEYVE8Iiw3zbfK4uVYQ53BJ7El6JCeFKPJ5WbKUsPLsjb1Lr2iQzW3ODOMaM5jKdgAGcNpuWQ373D7SW7I03Jec9kvP5hL7j3u4DV8ZzuQFzy2Nh+uMH54suydg2sNIpxrRQyxpGv7rZjTO1KT+xzzqnjqX4Pein0e6GrC5E4JUEggADtXPFMKW5SEiWzeeirB5RUPMO/F927S5fFuOYHAfuar2FqErA==";
-  process.env.PRIVACYSCRUBBER_KEY = validKey;
-  const t3 = mockCheckLicenseStatus();
-  console.log("Status:", t3);
-  if (!t3.isPro) {
-    console.error("❌ Test 3 failed: valid key was not accepted.");
-    process.exit(1);
-  }
-  console.log("✅ Test 3 passed.");
-
-  console.log("\n🎉 All local cryptographic validation tests passed!");
-  process.exit(0);
-
-} catch (error) {
-  console.error("❌ Test run crashed:", error);
-  process.exit(1);
-}
-
-// Mock checker mapping index.js logic locally for direct assertion
-function mockCheckLicenseStatus() {
-  const crypto = require('crypto');
-  const PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3f37srO402PU4++Baf8
-FG8LY4l/IA3NKLlBnYmNHRTjfI/O/w5PDZn1xPcUQevojA1J+A5moKcjXsJ5b21X
-hJoYSkE4vLpcVYOt1FhRwEHs1APDSyss0HixboLz2eW2XQf2NbwajWtNlyxvgczO
-KE6ClnLomtsaKywwqB4alzdYnnnFJttFPjwmgPSO7D9AgN9sYaVkXOaOFrIZ90Ng
-TRhSHUeL7ReltWlCHwz9xf5m2FrKtxr2VBlEoyPjsFzalHMey1EX+yXe81zM7IIi
-t1Z8agLzo7WIfNBAIWmRlerTplaFFZrQgdF5g/Y0n8IIMZOtadgoY8E855psDNZV
-7wIDAQAB
------END PUBLIC KEY-----`;
-
-  const key = (process.env.PRIVACYSCRUBBER_KEY || "").trim();
-  if (!key) return { isPro: false, type: null, error: "No license key provided." };
-
-  try {
-    const [payloadBase64, signatureBase64] = key.split('.');
-    if (!payloadBase64 || !signatureBase64) {
-      return { isPro: false, type: null, error: "Invalid license key structure." };
-    }
-
-    const verifier = crypto.createVerify('SHA256');
-    verifier.update(payloadBase64);
-    const isVerified = verifier.verify(PUBLIC_KEY, signatureBase64, 'base64');
-    
-    if (!isVerified) {
-      return { isPro: false, type: null, error: "Signature verification failed." };
-    }
-
-    const payload = JSON.parse(Buffer.from(payloadBase64, 'base64').toString('utf8'));
-    
-    if (payload.expires && payload.expires < Math.floor(Date.now() / 1000)) {
-      return { 
-        isPro: false, 
-        type: payload.type, 
-        error: `License expired on ${new Date(payload.expires * 1000).toLocaleDateString()}` 
-      };
-    }
-
-    return { isPro: true, type: payload.type, error: null };
-  } catch (e) {
-    return { isPro: false, type: null, error: "Error parsing license: " + e.message };
-  }
-}