@privacyscrubber/mcp-server 1.7.2 → 1.7.6

package/config-schema.json

@@ -0,0 +1,10 @@
+{
+  "type": "object",
+  "properties": {
+    "PRIVACYSCRUBBER_KEY": {
+      "type": "string",
+      "title": "PrivacyScrubber License Key",
+      "description": "Optional PRO or TEAMS license key. Leave blank to run on the Free tier."
+    }
+  }
+}

package/index.js

@@ -37,7 +37,10 @@ const MCP_VERSION = require('./package.json').version;
 // Import the production core engine with 100% parity
 const scrubberCorePath = path.resolve(__dirname, './scrubber-core.cjs');
 const PrivacyScrubberCore = require(scrubberCorePath);
-const LicenseManager = require('./ps-license-manager.js');
+let LicenseManager = require('./ps-license-manager.js');
+if (!LicenseManager || typeof LicenseManager.validate !== 'function') {
+  LicenseManager = global.LicenseManager;
+}
 
 // Initialize core engine
 PrivacyScrubberCore.init();
@@ -83,15 +86,144 @@ function checkLicenseStatus() {
   const result = LicenseManager.validate(key);
   
   if (!result.valid) {
+    mcpLog(`DEBUG: License invalid because: ${result.reason || "Unknown"}`);
     return { isPro: false, type: null, error: result.reason || "Invalid license format or signature." };
   }
 
   return { isPro: true, type: result.tier, error: null };
 }
 
-// ── Session request counter (volatile in-memory) ─────────────────────────────
-let sessionRequestCount = 0;
-const UPSELL_EVERY_N = 10; // show upsell nudge every N free-tier requests
+// ── Free Tier Usage Tracking (Persistent) ─────────────────────────────
+const FREE_TIER_DAILY_LIMIT = 10;
+const STAR_PROMPT_THRESHOLD = 5;
+
+function getUsageFilePath() {
+  const homeDir = process.env.HOME || process.env.USERPROFILE || '';
+  return path.resolve(homeDir, '.privacyscrubber-usage.json');
+}
+
+function getDailyUsage() {
+  const file = getUsageFilePath();
+  const today = new Date().toISOString().split('T')[0];
+  if (!fs.existsSync(file)) return 0;
+  try {
+    const data = JSON.parse(fs.readFileSync(file, 'utf8'));
+    if (data.date === today) {
+      return data.count || 0;
+    }
+  } catch (e) {}
+  return 0;
+}
+
+function incrementDailyUsage() {
+  const file = getUsageFilePath();
+  const today = new Date().toISOString().split('T')[0];
+  let count = 0;
+  if (fs.existsSync(file)) {
+    try {
+      const data = JSON.parse(fs.readFileSync(file, 'utf8'));
+      if (data.date === today) count = data.count || 0;
+    } catch (e) {}
+  }
+  count++;
+  try {
+    fs.writeFileSync(file, JSON.stringify({ date: today, count }), 'utf8');
+  } catch (e) {}
+  return count;
+}
+
+function checkFreeTierLimit(isPro) {
+  if (isPro) return { blocked: false, count: 0 };
+  
+  const count = incrementDailyUsage();
+  // Feedback / Growth loop triggers
+  if (count === 3) {
+    mcpLog(`${colors.cyan}💬 We are building the ultimate privacy tool for developers. What feature should we add next? Let us know: https://privacyscrubber.com/feedback${colors.reset}\n`);
+  }
+  if (count === STAR_PROMPT_THRESHOLD) {
+    mcpLog(`${colors.yellowBold}🔒 PrivacyScrubber is running securely. If this tool saved your PII today, please drop a star on GitHub: https://github.com/moxno/privacyscrubber-mcp${colors.reset}\n`);
+  }
+  
+  if (count >= FREE_TIER_DAILY_LIMIT) {
+    mcpLog(`${colors.redBold}🚫  [PrivacyScrubber] Free tier daily limit exhausted (${FREE_TIER_DAILY_LIMIT} requests). Request BLOCKED.${colors.reset}\n${colors.cyan}👉  Get a PRO key for unlimited use: https://privacyscrubber.com/pricing${colors.reset}\n`);
+    return { blocked: true, count };
+  }
+  
+  return { blocked: false, count };
+}
+
+function buildCisoAuditTelemetry(currentTokenMap = {}) {
+    const entities = {};
+    let totalCount = 0;
+
+    if (currentTokenMap && typeof currentTokenMap === 'object') {
+        const keys = Array.isArray(currentTokenMap) ? currentTokenMap : Object.keys(currentTokenMap);
+        for (const t of keys) {
+            const tokenStr = typeof t === 'string' ? t : (t.token || t.mask || '');
+            const match = tokenStr.match(/\[([A-Z_]+)_\d+\]/);
+            const baseType = match ? match[1] : (tokenStr.replace(/\[|\]/g, '').replace(/_[0-9]+$/, '') || 'CUSTOM');
+            entities[baseType] = (entities[baseType] || 0) + 1;
+            totalCount++;
+        }
+    }
+
+    const types = Object.keys(entities);
+    let riskLevel = 'LOW EXPOSURE';
+
+    if (totalCount > 0) {
+        const hasHighRiskEntities = types.some(t => ['ID', 'SSN', 'CREDIT_CARD', 'PASSPORT', 'BANK', 'API_KEY', 'SECRET', 'PASSWORD', 'MRN', 'KEY'].includes(t));
+        if (hasHighRiskEntities || types.length >= 3 || totalCount >= 10) {
+            riskLevel = 'CRITICAL (HIGH EXPOSURE)';
+        } else if (types.length >= 2 || totalCount >= 3) {
+            riskLevel = 'MODERATE EXPOSURE';
+        } else {
+            riskLevel = 'LOW EXPOSURE';
+        }
+    } else {
+        riskLevel = 'CLEAN (ZERO PII)';
+    }
+
+    const frameworksSet = new Set(['ZTDS Standard']);
+    if (types.includes('NAME') || types.includes('EMAIL') || types.includes('PHONE')) {
+        frameworksSet.add('GDPR (Art. 4)');
+        frameworksSet.add('CCPA/CPRA');
+    }
+    if (types.includes('ID') || types.includes('SSN') || types.includes('PASSPORT')) {
+        frameworksSet.add('SOC 2 Type II');
+        frameworksSet.add('ISO 27001 (A.8.11)');
+    }
+    if (types.some(t => ['CREDIT_CARD', 'BANK', 'IBAN', 'FINANCIAL', 'CARD'].includes(t))) {
+        frameworksSet.add('PCI DSS v4.0');
+    }
+    if (types.some(t => ['MRN', 'HEALTH', 'MEDICAL', 'PATIENT'].includes(t))) {
+        frameworksSet.add('HIPAA §164.514');
+    }
+    if (types.some(t => ['API_KEY', 'SECRET', 'PASSWORD', 'TOKEN', 'KEY'].includes(t))) {
+        frameworksSet.add('NIST SP 800-53');
+    }
+
+    return {
+        totalCount,
+        entities,
+        types,
+        riskLevel,
+        frameworksList: Array.from(frameworksSet)
+    };
+}
+
+function formatAuditReceipt(telemetry) {
+  if (telemetry.totalCount === 0) {
+    return "\\n\\n> 🛡️ **PrivacyScrubber Audit Receipt**: CLEAN (ZERO PII DETECTED)\\n";
+  }
+  
+  const entitiesList = Object.entries(telemetry.entities)
+    .map(([type, count]) => `${count} ${type}`)
+    .join(', ');
+
+  const icon = telemetry.riskLevel.includes('CRITICAL') ? '🔴' : (telemetry.riskLevel.includes('MODERATE') ? '🟠' : '🟢');
+
+  return `\\n\\n> 🛡️ **PrivacyScrubber Audit Receipt**\\n> * **Risk Level:** ${icon} ${telemetry.riskLevel}\\n> * **Compliance Enforced:** ${telemetry.frameworksList.join(', ')}\\n> * **Tokens Masked:** ${telemetry.totalCount} (${entitiesList})\\n`;
+}
 
 // Build a clean upsell content block (Disabled to prevent agent-visible marketing content)
 function buildUpsellBlock(reason) {
@@ -385,7 +517,13 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
       let finalProfile = targetProfile;
       const extraBlocks = [];
 
-      sessionRequestCount++;
+      const limitStatus = checkFreeTierLimit(license.isPro);
+      if (limitStatus.blocked) {
+        return {
+          isError: true,
+          content: [{ type: "text", text: `Error: Free tier daily limit exhausted (${FREE_TIER_DAILY_LIMIT} requests). Please set your PRO license key to continue. Get a key at: https://privacyscrubber.com/pricing` }]
+        };
+      }
 
       const charLimit = (isAdvanced && !license.isPro) ? 5000 : 15000;
       if (isAdvanced && !license.isPro) {
@@ -409,16 +547,14 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         }
       }
 
-      const sanitized = performSanitization(processedText, finalProfile);
-
-      // Periodic soft nudge every N free-tier requests (no trigger event needed)
-      if (!license.isPro && extraBlocks.length === 0 && sessionRequestCount % UPSELL_EVERY_N === 0) {
-        extraBlocks.push(buildUpsellBlock(null));
-      }
+      const { scrubbedText, newTokens } = performSanitization(processedText, finalProfile);
+      
+      const telemetry = buildCisoAuditTelemetry(newTokens);
+      const receiptMd = formatAuditReceipt(telemetry);
 
       return {
         content: [
-          { type: "text", text: sanitized },
+          { type: "text", text: scrubbedText + receiptMd },
           ...extraBlocks.filter(Boolean)
         ]
       };
@@ -532,7 +668,13 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
           let finalProfile = targetProfile;
           const extraBlocks = [];
 
-          sessionRequestCount++;
+          const limitStatus = checkFreeTierLimit(license.isPro);
+          if (limitStatus.blocked) {
+            return {
+              isError: true,
+              content: [{ type: "text", text: `Error: Free tier daily limit exhausted (${FREE_TIER_DAILY_LIMIT} requests). Please set your PRO license key to continue. Get a key at: https://privacyscrubber.com/pricing` }]
+            };
+          }
 
           const charLimit = (isAdvanced && !license.isPro) ? 5000 : 15000;
           if (isAdvanced && !license.isPro) {
@@ -555,14 +697,14 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
           }
 
           const sanitized = performSanitization(processedContent, finalProfile);
-
-          if (!license.isPro && extraBlocks.length === 0 && sessionRequestCount % UPSELL_EVERY_N === 0) {
-            extraBlocks.push(buildUpsellBlock(null));
-          }
+          const { scrubbedText, newTokens } = sanitized;
+          const telemetry = buildCisoAuditTelemetry(newTokens);
+          const receiptMarkdown = formatAuditReceipt(telemetry);
+          const combinedOutput = `${scrubbedText}\n\n${receiptMarkdown}`;
 
           return {
             content: [
-              { type: "text", text: sanitized },
+              { type: "text", text: combinedOutput },
               ...extraBlocks.filter(Boolean)
             ]
           };
@@ -604,7 +746,13 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
             let finalProfile = targetProfile;
             const extraBlocks = [];
 
-            sessionRequestCount++;
+            const limitStatus = checkFreeTierLimit(license.isPro);
+            if (limitStatus.blocked) {
+              return {
+                isError: true,
+                content: [{ type: "text", text: `Error: Free tier daily limit exhausted (${FREE_TIER_DAILY_LIMIT} requests). Please set your PRO license key to continue. Get a key at: https://privacyscrubber.com/pricing` }]
+              };
+            }
 
             const charLimit = (isAdvanced && !license.isPro) ? 5000 : 15000;
             if (isAdvanced && !license.isPro) {
@@ -627,14 +775,14 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
             }
 
             const sanitized = performSanitization(processedContent, finalProfile);
-
-            if (!license.isPro && extraBlocks.length === 0 && sessionRequestCount % UPSELL_EVERY_N === 0) {
-              extraBlocks.push(buildUpsellBlock(null));
-            }
+            const { scrubbedText, newTokens } = sanitized;
+            const telemetry = buildCisoAuditTelemetry(newTokens);
+            const receiptMarkdown = formatAuditReceipt(telemetry);
+            const combinedOutput = `${scrubbedText}\n\n${receiptMarkdown}`;
 
             return {
               content: [
-                { type: "text", text: sanitized },
+                { type: "text", text: combinedOutput },
                 ...extraBlocks.filter(Boolean)
               ]
             };
@@ -663,7 +811,13 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
             let finalProfile = targetProfile;
             const extraBlocks = [];
 
-            sessionRequestCount++;
+            const limitStatus = checkFreeTierLimit(license.isPro);
+            if (limitStatus.blocked) {
+              return {
+                isError: true,
+                content: [{ type: "text", text: `Error: Free tier daily limit exhausted (${FREE_TIER_DAILY_LIMIT} requests). Please set your PRO license key to continue. Get a key at: https://privacyscrubber.com/pricing` }]
+              };
+            }
 
             const charLimit = (isAdvanced && !license.isPro) ? 5000 : 15000;
             if (isAdvanced && !license.isPro) {
@@ -686,14 +840,14 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
             }
 
             const sanitized = performSanitization(processedContent, finalProfile);
-
-            if (!license.isPro && extraBlocks.length === 0 && sessionRequestCount % UPSELL_EVERY_N === 0) {
-              extraBlocks.push(buildUpsellBlock(null));
-            }
+            const { scrubbedText, newTokens } = sanitized;
+            const telemetry = buildCisoAuditTelemetry(newTokens);
+            const receiptMarkdown = formatAuditReceipt(telemetry);
+            const combinedOutput = `${scrubbedText}\n\n${receiptMarkdown}`;
 
             return {
               content: [
-                { type: "text", text: sanitized },
+                { type: "text", text: combinedOutput },
                 ...extraBlocks.filter(Boolean)
               ]
             };
@@ -736,7 +890,13 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
       let finalProfile = targetProfile;
       const extraBlocks = [];
 
-      sessionRequestCount++;
+      const limitStatus = checkFreeTierLimit(license.isPro);
+      if (limitStatus.blocked) {
+        return {
+          isError: true,
+          content: [{ type: "text", text: `Error: Free tier daily limit exhausted (${FREE_TIER_DAILY_LIMIT} requests). Please set your PRO license key to continue. Get a key at: https://privacyscrubber.com/pricing` }]
+        };
+      }
 
       const charLimit = (isAdvanced && !license.isPro) ? 5000 : 15000;
       if (isAdvanced && !license.isPro) {
@@ -758,15 +918,13 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         }
       }
 
-      const sanitized = performSanitization(processedContent2, finalProfile);
-
-      if (!license.isPro && extraBlocks.length === 0 && sessionRequestCount % UPSELL_EVERY_N === 0) {
-        extraBlocks.push(buildUpsellBlock(null));
-      }
+      const { scrubbedText, newTokens } = performSanitization(processedContent2, finalProfile);
+      const telemetry = buildCisoAuditTelemetry(newTokens);
+      const receiptMd = formatAuditReceipt(telemetry);
 
       return {
         content: [
-          { type: "text", text: sanitized },
+          { type: "text", text: scrubbedText + receiptMd },
           ...extraBlocks.filter(Boolean)
         ]
       };
@@ -793,6 +951,14 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         const customRules = loadCustomRules();
         const normalizedProfile = (profile || "general").trim().toLowerCase();
         const license = checkLicenseStatus();
+        
+        const limitStatus = checkFreeTierLimit(license.isPro);
+        if (limitStatus.blocked) {
+          return {
+            isError: true,
+            content: [{ type: "text", text: `Error: Free tier daily limit exhausted (${FREE_TIER_DAILY_LIMIT} requests). Please set your PRO license key to continue. Get a key at: https://privacyscrubber.com/pricing` }]
+          };
+        }
         const localSessionMap = {};
         
         const result = PrivacyScrubberCore.scrubText(content, customRules, {}, normalizedProfile, localSessionMap, license.isPro);
@@ -943,7 +1109,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         `║       PrivacyScrubber MCP Server v${MCP_VERSION.padEnd(10)}          ║`,
         '╠══════════════════════════════════════════════════╣',
         `║  ${tierIcon} Tier: ${tier.padEnd(43)}║`,
-        `║  📊 Session requests: ${String(sessionRequestCount).padEnd(27)}║`,
+        `║  📊 Session requests: ${String(getDailyUsage()).padEnd(27)}║`,
         `║  📁 Input size limit: ${sizeLimit.padEnd(27)}║`,
         '╠══════════════════════════════════════════════════╣',
         `║  🏷️  Profiles: ${profileList.substring(0,35).padEnd(35)}║`,
@@ -1013,20 +1179,30 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
       const customRules = loadCustomRules();
       const normalizedProfile = (profile || "general").trim().toLowerCase();
       const license = checkLicenseStatus();
+      
+      const limitStatus = checkFreeTierLimit(license.isPro);
+      if (limitStatus.blocked) {
+        return {
+          isError: true,
+          content: [{ type: "text", text: `Error: Free tier daily limit exhausted (${FREE_TIER_DAILY_LIMIT} requests). Please set your PRO license key to continue. Get a key at: https://privacyscrubber.com/pricing` }]
+        };
+      }
 
+      let totalTokensForDirectory = {};
       for (const file of filesToScan) {
         try {
           const stat = await fs.promises.stat(file);
           if (stat.size > 10 * 1024 * 1024) continue; // skip >10MB
 
           const buffer = fs.readFileSync(file);
-          // basic binary check
           if (buffer.indexOf(0) !== -1) continue; 
           const content = buffer.toString('utf8');
 
           const localSessionMap = {};
           const result = PrivacyScrubberCore.scrubText(content, customRules, {}, normalizedProfile, localSessionMap, license.isPro);
           
+          Object.assign(totalTokensForDirectory, localSessionMap);
+          
           let isSecretLeak = false;
           if (!license.isPro && result.tokenMap) {
             Object.entries(result.tokenMap).forEach(([token, original]) => {
@@ -1062,8 +1238,11 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         reportLines.push("✅ Clean. No PII or secrets detected in the scanned files.");
       }
 
+      const telemetry = buildCisoAuditTelemetry(totalTokensForDirectory);
+      const receiptMd = formatAuditReceipt(telemetry);
+      
       return {
-        content: [{ type: "text", text: reportLines.join('\n') }]
+        content: [{ type: "text", text: reportLines.join('\n') + receiptMd }]
       };
     }
 
@@ -1166,14 +1345,16 @@ function performSanitization(text, profile) {
   const license = checkLicenseStatus();
   const result = PrivacyScrubberCore.scrubText(text, customRules, {}, normalizedProfile, sessionMap, license.isPro);
 
+  const newTokens = {};
   // Update our volatile map with new matches
   if (result.tokenMap) {
     Object.entries(result.tokenMap).forEach(([token, original]) => {
       sessionMap[token] = original;
+      newTokens[token] = original;
     });
   }
 
-  return result.scrubbedText;
+  return { scrubbedText: result.scrubbedText, newTokens };
 }
 
 function truncateIfFree(text, isPro, charLimit = 15000) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@privacyscrubber/mcp-server",
-  "version": "1.7.2",
+  "version": "1.7.6",
   "mcpName": "io.github.moxno/privacyscrubber-mcp",
   "description": "CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Prevent API leaks and comply with HIPAA/SOC 2 locally.",
   "main": "index.js",
@@ -13,6 +13,10 @@
     "install.js",
     "pii-masking-run.js",
     "scrubber-core.cjs",
+    "ps-license-manager.js",
+    "ps-pii-engine.cjs",
+    "ps-pii-engine.js",
+    "config-schema.json",
     "smithery.yaml",
     "server.json",
     "manifest.json",