@privacyscrubber/sdk 2.2.2 → 2.2.3

package/LICENSE.md

@@ -0,0 +1,21 @@
+# PrivacyScrubber Developer SDK License Agreement
+
+**Copyright (c) 2026 Ilya Sibiryakov (BrandMeWeb). All Rights Reserved.**
+
+### 1. Grant of License — Community / Development Tier
+Subject to the terms and conditions of this Agreement, BrandMeWeb grants you a personal, non-exclusive, non-transferable license to install and use the PrivacyScrubber Developer SDK (`@privacyscrubber/sdk`) for local software development, evaluation, and test suites under published Free Tier quotas (15,000 characters baseline / 5,000 characters specialized profiles).
+
+### 2. Commercial & Enterprise Production Deployment
+Deploying this SDK in production servers, cloud microservices, customer-facing applications, RAG pipelines, or autonomous AI agent clusters beyond Free Tier quotas requires a valid commercial license:
+- **Developer Pro**: Up to 5 backend microservice nodes ($199/mo or $1,990/yr).
+- **Enterprise Air-Gapped**: Up to 5 production nodes, AWS Nitro Enclaves / SCIF offline deployment, full 30 Specialized Industry Profiles, SOC 2 Evidence Binder ($12,000/yr).
+
+Licensing and key activation: https://privacyscrubber.com/pricing
+
+### 3. Intellectual Property & Prohibited Uses
+The proprietary finite-state machines, entity resolution algorithms, and 30 specialized industry regex taxonomies constitute confidential trade secrets and intellectual property of BrandMeWeb:
+- You may not reverse-engineer, decompile, or harvest the pattern taxonomy to build competing products or train AI models.
+- Standalone redistribution of the core engine outside authorized SDK wrapper dependencies is strictly prohibited.
+
+### 4. Disclaimer of Warranties
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY ARISING FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -9,10 +9,19 @@
 [![Patent Pending](https://img.shields.io/badge/Patent-Pending%20(ILPO%20331905)-06b6d4.svg)](https://privacyscrubber.com/patents/)
 [![GitHub Stars](https://img.shields.io/github/stars/moxno/privacyscrubber-mcp?style=social)](https://github.com/moxno/privacyscrubber-mcp)
 
-> **Zero-Trust Data Sanitization (ZTDS) & PII Redaction Engine**  
-> 100% In-Memory Execution. Zero Remote Network Calls. Zero Disk Writes. Sub-millisecond Latency.
+> **In-Process Consumer Privacy Defense & Pre-Emptive Interception Engine**  
+> 100% In-Memory Execution. Zero Third-Party Subprocessors. Zero Data Loss. Sub-Millisecond Latency.
 
-The official Node.js / TypeScript programmatic SDK for [PrivacyScrubber.com](https://privacyscrubber.com). Provides enterprise-grade PII sanitization, cloud secrets detection, compliance audit receipts, and deterministic token restoration for AI pipelines (OpenAI, Anthropic, LangChain, LlamaIndex, RAG vector stores).
+The official Node.js / TypeScript programmatic SDK for [PrivacyScrubber.com](https://privacyscrubber.com). Acting as an autonomous in-process consumer data fiduciary, `@privacyscrubber/sdk` intercepts and neutralizes consumer PII and infrastructure secrets at your application boundary before transmission to external AI models or persistent storage—enforcing GDPR, CCPA/CPRA, and HIPAA Safe Harbor compliance without introducing third-party subprocessors or sacrificing LLM reasoning fidelity.
+
+---
+
+## 🏛️ The 4 Strategic Pillars of In-Process Privacy
+
+1. **Active Consumer Privacy Defense (Fiduciary)**: Act systematically on behalf of end-users at the application boundary, protecting their statutory rights (GDPR, CCPA, State Privacy Acts) automatically without requiring end-user intervention.
+2. **Pre-Emptive Interception**: Quash sensitive customer identifiers and cloud credentials *before* ingestion, vector embedding, or LLM inference, preventing permanent data leaks at the perimeter.
+3. **Zero Data Loss**: Syntax-preserving deterministic tokenization (`[NAME_1]`, `[EMAIL_1]`, `[FINANCIAL_1]`) retains 100% semantic context for LLMs, with instant in-memory detokenization (`restore()`) in local RAM.
+4. **Zero Third Parties**: Pure in-process execution inside your Node.js runtime. Completely eliminates external DLP proxies (Skyflow, Nightfall, Lakera, AWS Comprehend), DPA renegotiations, and third-party data egress liability.
 
 ---
 
@@ -22,9 +31,10 @@ The official Node.js / TypeScript programmatic SDK for [PrivacyScrubber.com](htt
 | :--- | :--- | :--- | :--- | :--- |
 | **Execution Model** | **Local In-Memory (<1ms)** | Self-hosted Python (~35ms) | Cloud API Proxy (180–400ms) | Cloud API Proxy (200–500ms) |
 | **Network Egress** | **0 Bytes (Air-gapped)** | 0 Bytes (Internal hop) | Full unencrypted payload | Full unencrypted payload |
+| **Third-Party Subprocessors** | **0 (Zero DPA / Vendor Risk)** | 0 (Self-managed compute) | +1 Subprocessor (Google) | +1 Subprocessor (AWS) |
+| **Context & Data Loss** | **0 Loss (Reversible in RAM)** | High (Manual vault needed) | High (Lossy masking / hash) | High (Lossy masking) |
 | **Runtime Footprint** | **~150KB (0 dependencies)** | ~500MB (Python + spaCy) | Cloud SDK | Cloud SDK |
 | **OpenAI 1-Line Drop-in** | **Yes (`wrapOpenAI`)** | Custom wrapper required | Custom pipeline | Custom pipeline |
-| **Deterministic Reverse** | **Built-in (`restore`)** | Manual token map logic | Manual vault mapping | Manual token mapping |
 | **DevOps Secrets Scanning** | **Built-in (AWS, JWT, DBs)** | Custom regex rules | Custom detectors | Custom classifiers |
 | **Cost Predictability** | **Free Tier / Flat $199/mo** | DevOps server maintenance | Pay-per-GB cloud fees | Pay-per-unit API fees |
 
@@ -37,6 +47,7 @@ The official Node.js / TypeScript programmatic SDK for [PrivacyScrubber.com](htt
 | **1 Leaked AWS Key in Cloud LLM Logs** | **$18,400+** (Emergency key rotation, forensic audit, incident response) | **$0 / $199 flat**: Masked to `[AWS_KEY_1]` in local RAM before leaving your node |
 | **50k Customer Records in Vector DB** | **$4.45M** (Average data breach cost, IBM Security Report) | **<1ms latency**: Sanitize streams on-the-fly before embedding vectors |
 | **Cloud DLP Egress Fees & Latency** | **$1,500–$4,000/mo** + 350ms added prompt delay | **0 egress bytes**: Pure in-memory execution, 0 network dependencies |
+| **Third-Party Subprocessor Vendor Audit** | **$25,000+** per enterprise vendor review (SOC 2, DPA, Legal) | **0 Subprocessors**: No third party touches data; zero security review backlog |
 
 ---
 
@@ -420,8 +431,8 @@ console.log(result.scrubbedText);
 ## 🔑 Licensing & Commercial Tiers
 
 PrivacyScrubber works free out-of-the-box with standard developer limits:
-- **Free Tier ($0)**: Up to 15,000 characters per request for General profile; 5,000 characters trial quota for specialized industry profiles. Ideal for prototyping and CI testing.
-- **Developer SDK License ($199/mo or $1,990/yr)**: Unlimited character throughput, all 25 specialized compliance profiles, unrestricted RAG & microservice batch pipelines, zero quota errors.
+- **Free Tier ($0)**: Up to 15,000 characters per request for General profile; 5,000 characters free quota for specialized industry profiles. Built-in quota for local dev and CI testing without credit card or sign-up.
+- **Developer SDK License ($199/mo or $1,990/yr)**: Unlimited character throughput across all 30 specialized compliance profiles, unrestricted RAG & microservice batch pipelines, zero quota limits.
 
 ### Activating Your Commercial License