@privacyscrubber/sdk 2.4.4 → 2.4.6

package/vercel-ai.cjs

@@ -33,24 +33,34 @@ const tokenMapsWeakMap = new WeakMap();
  * @param {Record<string, string>} sessionTokenMap - Volatile map populated with detected tokens.
  * @returns {any} Sanitized prompt with tokens replacing authentic PII.
  */
-function sanitizeDeepValue(val, engine, sessionTokenMap) {
+const DANGEROUS_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+
+function sanitizeDeepValue(val, engine, sessionTokenMap, seen = new WeakMap()) {
   if (val === null || val === undefined) return val;
   if (typeof val === 'string') {
     if (!val.trim()) return val;
-    const res = engine.sanitize(val, { existingSessionMap: sessionTokenMap });
+    const res = engine.sanitize(val, { existingSessionMap: sessionTokenMap, persistSession: false });
     Object.assign(sessionTokenMap, res.tokenMap);
     return res.scrubbedText;
   }
-  if (Array.isArray(val)) {
-    return val.map(item => sanitizeDeepValue(item, engine, sessionTokenMap));
-  }
   if (val instanceof Date || val instanceof RegExp || val instanceof Uint8Array || (typeof Buffer !== 'undefined' && Buffer.isBuffer(val))) {
     return val;
   }
   if (typeof val === 'object') {
+    if (seen.has(val)) return seen.get(val);
+    if (Array.isArray(val)) {
+      const arr = [];
+      seen.set(val, arr);
+      for (const item of val) {
+        arr.push(sanitizeDeepValue(item, engine, sessionTokenMap, seen));
+      }
+      return arr;
+    }
     const out = {};
+    seen.set(val, out);
     for (const [k, v] of Object.entries(val)) {
-      out[k] = sanitizeDeepValue(v, engine, sessionTokenMap);
+      if (DANGEROUS_KEYS.has(k)) continue;
+      out[k] = sanitizeDeepValue(v, engine, sessionTokenMap, seen);
     }
     return out;
   }
@@ -61,7 +71,7 @@ function sanitizePromptParts(prompt, engine, sessionTokenMap) {
   if (!prompt) return prompt;
 
   if (typeof prompt === 'string') {
-    const res = engine.sanitize(prompt, { existingSessionMap: sessionTokenMap });
+    const res = engine.sanitize(prompt, { existingSessionMap: sessionTokenMap, persistSession: false });
     Object.assign(sessionTokenMap, res.tokenMap);
     return res.scrubbedText;
   }
@@ -73,7 +83,7 @@ function sanitizePromptParts(prompt, engine, sessionTokenMap) {
 
     // Standard string content: { role: 'user', content: 'Contact john@example.com' }
     if (typeof msg.content === 'string') {
-      const res = engine.sanitize(msg.content, { existingSessionMap: sessionTokenMap });
+      const res = engine.sanitize(msg.content, { existingSessionMap: sessionTokenMap, persistSession: false });
       Object.assign(sessionTokenMap, res.tokenMap);
       return { ...msg, content: res.scrubbedText };
     }
@@ -82,13 +92,13 @@ function sanitizePromptParts(prompt, engine, sessionTokenMap) {
     if (Array.isArray(msg.content)) {
       const newContent = msg.content.map(part => {
         if (part && (part.type === 'text' || part.type === 'reasoning') && typeof part.text === 'string') {
-          const res = engine.sanitize(part.text, { existingSessionMap: sessionTokenMap });
+          const res = engine.sanitize(part.text, { existingSessionMap: sessionTokenMap, persistSession: false });
           Object.assign(sessionTokenMap, res.tokenMap);
           return { ...part, text: res.scrubbedText };
         }
         if (part && part.type === 'tool-result') {
           if (typeof part.result === 'string') {
-            const res = engine.sanitize(part.result, { existingSessionMap: sessionTokenMap });
+            const res = engine.sanitize(part.result, { existingSessionMap: sessionTokenMap, persistSession: false });
             Object.assign(sessionTokenMap, res.tokenMap);
             return { ...part, result: res.scrubbedText };
           }
@@ -126,16 +136,29 @@ function sanitizePromptParts(prompt, engine, sessionTokenMap) {
 function createPrivacyMiddleware(options = {}) {
   const sanitizeInputs = options.sanitizeInputs !== false;
   const sanitizeOutputs = options.sanitizeOutputs !== false;
+  const sharedEngine = options.engine || new PrivacyScrubberEngine(options);
+  const sharedSessionMap = {};
 
   return {
+    specificationVersion: options.specificationVersion || 'v1',
+
     async transformParams({ type, params }) {
       if (!sanitizeInputs || !params) {
         return params;
       }
 
-      const engine = options.engine || new PrivacyScrubberEngine(options);
-      const sessionTokenMap = {};
+      const engine = sharedEngine;
+      const sessionTokenMap = options.persistSession ? { ...sharedSessionMap } : {};
+      if (!options.persistSession && params.prompt && Object.keys(sharedSessionMap).length > 0) {
+        const promptSerialized = typeof params.prompt === 'string' ? params.prompt : JSON.stringify(params.prompt);
+        for (const [tok, orig] of Object.entries(sharedSessionMap)) {
+          if (promptSerialized.includes(tok)) {
+            sessionTokenMap[tok] = orig;
+          }
+        }
+      }
       const sanitizedPrompt = sanitizePromptParts(params.prompt, engine, sessionTokenMap);
+      Object.assign(sharedSessionMap, sessionTokenMap);
       const sanitizedParams = {
         ...params,
         prompt: sanitizedPrompt
@@ -182,9 +205,26 @@ function createPrivacyMiddleware(options = {}) {
             if (tc && typeof tc.args === 'string') {
               return { ...tc, args: detokenizeText(tc.args, tokenMap) };
             }
+            if (tc && typeof tc.input === 'string') {
+              return { ...tc, input: detokenizeText(tc.input, tokenMap) };
+            }
             return tc;
           });
         }
+        if (Array.isArray(result.content)) {
+          result.content = result.content.map(part => {
+            if (part && (part.type === 'text' || part.type === 'reasoning') && typeof part.text === 'string') {
+              return { ...part, text: detokenizeText(part.text, tokenMap) };
+            }
+            if (part && part.type === 'tool-call') {
+              const nextPart = { ...part };
+              if (typeof nextPart.args === 'string') nextPart.args = detokenizeText(nextPart.args, tokenMap);
+              if (typeof nextPart.input === 'string') nextPart.input = detokenizeText(nextPart.input, tokenMap);
+              return nextPart;
+            }
+            return part;
+          });
+        }
       }
 
       return result;
@@ -197,40 +237,77 @@ function createPrivacyMiddleware(options = {}) {
       if (sanitizeOutputs && result && result.stream && Object.keys(tokenMap).length > 0) {
         const detok = new StreamingDetokenizer(tokenMap, options.streamingOptions);
         const originalStream = result.stream;
+        let usesV2Delta = false;
 
         if (typeof originalStream.pipeThrough === 'function' && typeof TransformStream !== 'undefined') {
           result.stream = originalStream.pipeThrough(new TransformStream({
             transform(chunk, controller) {
-              if (chunk && chunk.type === 'text-delta' && typeof chunk.textDelta === 'string') {
-                const restored = detok.feed(chunk.textDelta);
-                if (restored) controller.enqueue({ ...chunk, textDelta: restored });
-              } else if (chunk && chunk.type === 'reasoning' && typeof chunk.textDelta === 'string') {
-                const restored = detok.feed(chunk.textDelta);
-                if (restored) controller.enqueue({ ...chunk, textDelta: restored });
-              } else {
-                controller.enqueue(chunk);
+              if (chunk && (chunk.type === 'text-delta' || chunk.type === 'reasoning' || chunk.type === 'reasoning-delta')) {
+                if (typeof chunk.textDelta === 'string') {
+                  const restored = detok.feed(chunk.textDelta);
+                  if (restored) {
+                    controller.enqueue({
+                      ...chunk,
+                      textDelta: restored,
+                      ...(typeof chunk.delta === 'string' ? { delta: restored } : {})
+                    });
+                  }
+                  return;
+                }
+                if (typeof chunk.delta === 'string') {
+                  usesV2Delta = true;
+                  const restored = detok.feed(chunk.delta);
+                  if (restored) {
+                    controller.enqueue({ ...chunk, delta: restored, textDelta: restored });
+                  }
+                  return;
+                }
               }
+              controller.enqueue(chunk);
             },
             flush(controller) {
               const rem = detok.flush();
-              if (rem) controller.enqueue({ type: 'text-delta', textDelta: rem });
+              if (rem) {
+                controller.enqueue(
+                  usesV2Delta
+                    ? { type: 'text-delta', delta: rem, textDelta: rem }
+                    : { type: 'text-delta', textDelta: rem, delta: rem }
+                );
+              }
             }
           }));
         } else if (typeof originalStream[Symbol.asyncIterator] === 'function') {
           async function* wrappedAsync() {
             for await (const chunk of originalStream) {
-              if (chunk && chunk.type === 'text-delta' && typeof chunk.textDelta === 'string') {
-                const restored = detok.feed(chunk.textDelta);
-                if (restored) yield { ...chunk, textDelta: restored };
-              } else if (chunk && chunk.type === 'reasoning' && typeof chunk.textDelta === 'string') {
-                const restored = detok.feed(chunk.textDelta);
-                if (restored) yield { ...chunk, textDelta: restored };
-              } else {
-                yield chunk;
+              if (chunk && (chunk.type === 'text-delta' || chunk.type === 'reasoning' || chunk.type === 'reasoning-delta')) {
+                if (typeof chunk.textDelta === 'string') {
+                  const restored = detok.feed(chunk.textDelta);
+                  if (restored) {
+                    yield {
+                      ...chunk,
+                      textDelta: restored,
+                      ...(typeof chunk.delta === 'string' ? { delta: restored } : {})
+                    };
+                  }
+                  continue;
+                }
+                if (typeof chunk.delta === 'string') {
+                  usesV2Delta = true;
+                  const restored = detok.feed(chunk.delta);
+                  if (restored) {
+                    yield { ...chunk, delta: restored, textDelta: restored };
+                  }
+                  continue;
+                }
               }
+              yield chunk;
             }
             const rem = detok.flush();
-            if (rem) yield { type: 'text-delta', textDelta: rem };
+            if (rem) {
+              yield usesV2Delta
+                ? { type: 'text-delta', delta: rem, textDelta: rem }
+                : { type: 'text-delta', textDelta: rem, delta: rem };
+            }
           }
           result.stream = wrappedAsync();
         }
@@ -338,6 +415,7 @@ function createDetokenizerTransformStream(tokenMap = {}, options = {}) {
     throw new Error('[PrivacyScrubber] TransformStream is not supported in this runtime.');
   }
   let isObjectStream = false;
+  let usesV2Delta = false;
   return new TransformStream({
     transform(chunk, controller) {
       if (typeof chunk === 'string') {
@@ -346,7 +424,12 @@ function createDetokenizerTransformStream(tokenMap = {}, options = {}) {
       } else if (chunk && typeof chunk === 'object' && typeof chunk.textDelta === 'string') {
         isObjectStream = true;
         const out = detok.feed(chunk.textDelta);
-        if (out) controller.enqueue({ ...chunk, textDelta: out });
+        if (out) controller.enqueue({ ...chunk, textDelta: out, ...(typeof chunk.delta === 'string' ? { delta: out } : {}) });
+      } else if (chunk && typeof chunk === 'object' && typeof chunk.delta === 'string') {
+        isObjectStream = true;
+        usesV2Delta = true;
+        const out = detok.feed(chunk.delta);
+        if (out) controller.enqueue({ ...chunk, delta: out, textDelta: out });
       } else {
         controller.enqueue(chunk);
       }
@@ -355,7 +438,7 @@ function createDetokenizerTransformStream(tokenMap = {}, options = {}) {
       const rem = detok.flush();
       if (rem) {
         if (isObjectStream) {
-          controller.enqueue({ type: 'text-delta', textDelta: rem });
+          controller.enqueue(usesV2Delta ? { type: 'text-delta', delta: rem, textDelta: rem } : { type: 'text-delta', textDelta: rem, delta: rem });
         } else {
           controller.enqueue(rem);
         }
@@ -376,6 +459,7 @@ function createDetokenizerTransformStream(tokenMap = {}, options = {}) {
 async function* detokenizeStream(stream, tokenMap = {}, options = {}) {
   const detok = new StreamingDetokenizer(tokenMap, options);
   let isObjectStream = false;
+  let usesV2Delta = false;
   for await (const chunk of stream) {
     if (typeof chunk === 'string') {
       const out = detok.feed(chunk);
@@ -383,7 +467,12 @@ async function* detokenizeStream(stream, tokenMap = {}, options = {}) {
     } else if (chunk && typeof chunk === 'object' && typeof chunk.textDelta === 'string') {
       isObjectStream = true;
       const out = detok.feed(chunk.textDelta);
-      if (out) yield { ...chunk, textDelta: out };
+      if (out) yield { ...chunk, textDelta: out, ...(typeof chunk.delta === 'string' ? { delta: out } : {}) };
+    } else if (chunk && typeof chunk === 'object' && typeof chunk.delta === 'string') {
+      isObjectStream = true;
+      usesV2Delta = true;
+      const out = detok.feed(chunk.delta);
+      if (out) yield { ...chunk, delta: out, textDelta: out };
     } else {
       yield chunk;
     }
@@ -391,7 +480,7 @@ async function* detokenizeStream(stream, tokenMap = {}, options = {}) {
   const rem = detok.flush();
   if (rem) {
     if (isObjectStream) {
-      yield { type: 'text-delta', textDelta: rem };
+      yield usesV2Delta ? { type: 'text-delta', delta: rem, textDelta: rem } : { type: 'text-delta', textDelta: rem, delta: rem };
     } else {
       yield rem;
     }

package/vercel-ai.d.ts

@@ -57,9 +57,16 @@ export interface PrivacyMiddlewareOptions {
    * Custom user-defined regex rules to run in addition to the selected profile.
    */
   customRules?: Array<{ name: string; pattern: RegExp; tokenType: string }>;
+
+  /**
+   * Vercel AI SDK Middleware specification version ('v1' | 'v2' | 'v3').
+   * Default: 'v1'
+   */
+  specificationVersion?: 'v1' | 'v2' | 'v3' | string;
 }
 
 export interface PrivacyMiddleware {
+  specificationVersion?: string;
   transformParams: (options: {
     type: 'generate' | 'stream';
     params: any;

package/benchmark.js

@@ -1,355 +0,0 @@
-/**
- * @privacyscrubber/sdk Micro-benchmarks & Performance Harness
- * 
- * Measures in-process PII sanitization and detokenization latency,
- * throughput, and memory consumption across varying payload sizes.
- * Validates the sub-millisecond (<1ms) Zero-Trust Data Sanitization (ZTDS) SLA.
- * 
- * Usage:
- *   node benchmark.js                      # Standard terminal output
- *   node benchmark.js --json               # Machine-readable JSON output
- *   node benchmark.js --markdown           # Markdown table for documentation/memos
- *   node benchmark.js --assert-sla         # Exits with code 1 if 10KB p50 >= 1.0ms
- *   node benchmark.js --profile=financial  # Benchmark specific industry profile
- */
-
-import os from 'node:os';
-import process from 'node:process';
-import { sanitize, restore } from './index.js';
-
-// Configuration & CLI Arguments
-const args = process.argv.slice(2);
-const IS_JSON = args.includes('--json');
-const IS_MARKDOWN = args.includes('--markdown');
-const ASSERT_SLA = args.includes('--assert-sla');
-
-function getArgValue(prefix, defaultValue) {
-    const match = args.find(a => a.startsWith(prefix));
-    return match ? match.split('=')[1] : defaultValue;
-}
-
-const REQUESTED_PROFILE = getArgValue('--profile=', 'General');
-const ITERATIONS_OVERRIDE = parseInt(getArgValue('--iterations=', '0'), 10);
-
-// Hardware & Environment Metadata
-const ENV_INFO = {
-    runtime: `Node.js ${process.version}`,
-    platform: `${os.type()} ${os.release()} (${os.arch()})`,
-    cpu: os.cpus()[0]?.model || 'Generic CPU',
-    cores: os.cpus().length,
-    v8Version: process.versions.v8,
-    memoryTotalMB: Math.round(os.totalmem() / (1024 * 1024))
-};
-
-// Synthetic Workload Generator with Non-trivial Mixed PII & Realistic Prose
-function generateRealisticWorkload(targetBytes) {
-    const enterpriseProse = [
-        (i) => `Internal engineering escalation incident #INC-${28490 + i}: The infrastructure operations team investigated intermittent connection timeouts during automated microservice synchronization. Distributed tracing logs demonstrated that while ingress volume remained within standard operational thresholds, the upstream webhook dispatcher encountered resource saturation under peak traffic. Automated remediation scripts rebalanced cluster routing, and all pods were confirmed healthy. `,
-        (i) => `Enterprise architectural security assessment and data governance review. Pursuant to SOC 2 Type II controls and GDPR Article 32 technical safeguards, all customer communication channels, RAG knowledge retrieval databases, and LLM prompt ingress boundaries must execute strict in-memory sanitization before data transmission to external artificial intelligence models. `,
-        (i) => `Customer support ticket follow-up regarding transactional webhook retries and billing reconciliation. Our technical platform team reviewed the diagnostic transaction records and confirmed that webhook events were delivered successfully with HTTP 200 responses. Telemetry receipts and session audit proofs have been recorded for customer reference. `
-    ];
-
-    const piiTemplates = [
-        (i) => `Employee profile: Johnathan Doe_${i} (DOB 1985-04-12, SSN: 123-45-${String(1000 + (i % 9000))}). Contact email: john.doe.${i}@enterprise-corp.internal, personal phone +1-415-555-${String(1000 + (i % 9000))}. `,
-        (i) => `Patient clinical record: Jane E. Roe_${i}, MRN: MRN-${String(100000 + (i % 900000))}, emergency contact Dr. Robert Smith at +1-212-555-${String(2000 + (i % 8000))}. Insurance ID: INS-MED-${String(5000 + (i % 5000))}. `,
-        (i) => `Financial billing ledger: Cardholder Michael Chang_${i} billed on Visa PAN 4532-${String(1000 + (i % 9000))}-5678-9010, IBAN GB29XAAA01012345678901, routing account #09283741. Dispatched invoice to m.chang_${i}@fintech-capital.co.uk. `,
-        (i) => `DevOps security event log: Internal service pod deployed at IPv4 10.240.${i % 250}.${(i * 3) % 250} and IPv6 2001:0db8:85a3:0000:0000:8a2e:0370:${String(1000 + (i % 9000))}. Authorization failed for Bearer token eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c. `,
-        (i) => `Infrastructure secret rotation: AWS Key ID AKIAIOSFODNN7EXAMPLE_${i} accessed by administrator Sarah Connor_${i} via remote bastion host 192.168.1.${i % 250}. Github token ghp_39CharactersAlphanumericSecretKey${String(1000 + (i % 9000))} revoked. `
-    ];
-
-    let content = "";
-    let i = 0;
-    while (Buffer.byteLength(content, 'utf8') < targetBytes) {
-        content += enterpriseProse[i % enterpriseProse.length](i);
-        content += piiTemplates[i % piiTemplates.length](i);
-        i++;
-    }
-
-    // Trim to exact target bytes boundary
-    const buf = Buffer.from(content, 'utf8').subarray(0, targetBytes);
-    return buf.toString('utf8');
-}
-
-// Statistical Metrics Calculator
-function computeStats(timingsMs, payloadSizeBytes) {
-    timingsMs.sort((a, b) => a - b);
-    const n = timingsMs.length;
-
-    const min = timingsMs[0];
-    const max = timingsMs[n - 1];
-    const sum = timingsMs.reduce((acc, v) => acc + v, 0);
-    const mean = sum / n;
-
-    const p50 = timingsMs[Math.floor(n * 0.50)];
-    const p90 = timingsMs[Math.floor(n * 0.90)];
-    const p95 = timingsMs[Math.floor(n * 0.95)];
-    const p99 = timingsMs[Math.floor(n * 0.99)];
-
-    const variance = timingsMs.reduce((acc, v) => acc + Math.pow(v - mean, 2), 0) / n;
-    const stdDev = Math.sqrt(variance);
-
-    // Throughput in MB/s (MegaBytes per second)
-    const payloadMB = payloadSizeBytes / (1024 * 1024);
-    const meanSeconds = mean / 1000;
-    const throughputMBs = meanSeconds > 0 ? (payloadMB / meanSeconds) : 0;
-    const opsPerSec = meanSeconds > 0 ? (1 / meanSeconds) : 0;
-
-    return {
-        iterations: n,
-        min: Number(min.toFixed(4)),
-        mean: Number(mean.toFixed(4)),
-        p50: Number(p50.toFixed(4)),
-        p90: Number(p90.toFixed(4)),
-        p95: Number(p95.toFixed(4)),
-        p99: Number(p99.toFixed(4)),
-        max: Number(max.toFixed(4)),
-        stdDev: Number(stdDev.toFixed(4)),
-        throughputMBs: Number(throughputMBs.toFixed(2)),
-        opsPerSec: Math.round(opsPerSec)
-    };
-}
-
-// Single Benchmark Suite Runner
-function benchmarkWorkload(label, targetBytes, warmupCount, measurementCount, profile, targetSlaMs = 1.0) {
-    const rawPayload = generateRealisticWorkload(targetBytes);
-    const actualBytes = Buffer.byteLength(rawPayload, 'utf8');
-
-    // Optional commercial evaluation license key from environment (defaults to Community tier)
-    const licenseKey = process.env.PRIVACYSCRUBBER_KEY || undefined;
-
-    // Warm-up phase (V8 TurboFan JIT optimization)
-    let warmupResult;
-    for (let w = 0; w < warmupCount; w++) {
-        warmupResult = sanitize(rawPayload, { profile, licenseKey });
-        restore(warmupResult.scrubbedText, warmupResult.tokenMap);
-    }
-
-    // Verify Zero Data Loss Fidelity on the payload
-    const verification = sanitize(rawPayload, { profile, licenseKey });
-    const restored = restore(verification.scrubbedText, verification.tokenMap);
-    const isFidelityPreserved = (restored.restoredText === rawPayload);
-    const entityCount = verification.count || 0;
-
-    if (!isFidelityPreserved) {
-        throw new Error(`CRITICAL: Zero Data Loss check failed for ${label}! Plaintext mismatch after restore().`);
-    }
-
-    // Benchmark Phase 1: Inbound Sanitization (Tokenization)
-    const sanitizeTimings = [];
-    for (let m = 0; m < measurementCount; m++) {
-        const start = process.hrtime.bigint();
-        sanitize(rawPayload, { profile, licenseKey });
-        const end = process.hrtime.bigint();
-        const durationMs = Number(end - start) / 1e6;
-        sanitizeTimings.push(durationMs);
-    }
-    const sanitizeStats = computeStats(sanitizeTimings, actualBytes);
-
-    // Benchmark Phase 2: Outbound Restoration (Detokenization)
-    const restoreTimings = [];
-    const scrubbedSample = verification.scrubbedText;
-    const tokenMapSample = verification.tokenMap;
-    for (let m = 0; m < measurementCount; m++) {
-        const start = process.hrtime.bigint();
-        restore(scrubbedSample, tokenMapSample);
-        const end = process.hrtime.bigint();
-        const durationMs = Number(end - start) / 1e6;
-        restoreTimings.push(durationMs);
-    }
-    const restoreStats = computeStats(restoreTimings, actualBytes);
-
-    // Benchmark Phase 3: Combined End-to-End Roundtrip
-    const roundtripTimings = [];
-    for (let m = 0; m < measurementCount; m++) {
-        const start = process.hrtime.bigint();
-        const res = sanitize(rawPayload, { profile, licenseKey });
-        restore(res.scrubbedText, res.tokenMap);
-        const end = process.hrtime.bigint();
-        const durationMs = Number(end - start) / 1e6;
-        roundtripTimings.push(durationMs);
-    }
-    const roundtripStats = computeStats(roundtripTimings, actualBytes);
-
-    return {
-        label,
-        sizeBytes: actualBytes,
-        sizeKB: Number((actualBytes / 1024).toFixed(1)),
-        entityCount,
-        fidelityPassed: isFidelityPreserved,
-        targetSlaMs,
-        slaPassed: sanitizeStats.p50 <= targetSlaMs,
-        sanitize: sanitizeStats,
-        restore: restoreStats,
-        roundtrip: roundtripStats
-    };
-}
-
-// Master Execution Function
-export function runBenchmarks(options = {}) {
-    const profile = options.profile || REQUESTED_PROFILE;
-    const itersOverride = options.iterations || ITERATIONS_OVERRIDE;
-
-    const hasCommercialKey = Boolean(process.env.PRIVACYSCRUBBER_KEY);
-    const suites = [
-        {
-            label: '1 KB (Short Agentic Tool Call / Chat Turn)',
-            bytes: 1 * 1024,
-            warmup: 50,
-            iterations: itersOverride > 0 ? itersOverride : 500,
-            targetSlaMs: 0.8
-        },
-        {
-            label: '2 KB (Interactive LLM Chat Prompt)',
-            bytes: 2 * 1024,
-            warmup: 50,
-            iterations: itersOverride > 0 ? itersOverride : 500,
-            targetSlaMs: 1.0 // Sub-millisecond ZTDS SLA invariant
-        },
-        {
-            label: '4 KB (Multi-Entity Solid Pod / Clinical Note)',
-            bytes: 4 * 1024,
-            warmup: 30,
-            iterations: itersOverride > 0 ? itersOverride : 300,
-            targetSlaMs: 2.5
-        },
-        {
-            label: '10 KB (Enterprise Support Ticket / Incident)',
-            bytes: 10 * 1024,
-            warmup: 30,
-            iterations: itersOverride > 0 ? itersOverride : 250,
-            targetSlaMs: 5.0
-        },
-        ...(hasCommercialKey ? [
-            {
-                label: '50 KB (RAG Context Chunk / Knowledge Retrieval)',
-                bytes: 50 * 1024,
-                warmup: 15,
-                iterations: itersOverride > 0 ? itersOverride : 100,
-                targetSlaMs: 25.0
-            },
-            {
-                label: '250 KB (Batch Processing / Multi-Page Document)',
-                bytes: 250 * 1024,
-                warmup: 5,
-                iterations: itersOverride > 0 ? itersOverride : 30,
-                targetSlaMs: 150.0
-            }
-        ] : [])
-    ];
-
-    const results = [];
-    for (const suite of suites) {
-        const result = benchmarkWorkload(
-            suite.label,
-            suite.bytes,
-            suite.warmup,
-            suite.iterations,
-            profile,
-            suite.targetSlaMs
-        );
-        results.push(result);
-    }
-
-    return {
-        timestamp: new Date().toISOString(),
-        environment: ENV_INFO,
-        profile,
-        results
-    };
-}
-
-// Output Formatting: Text Table (Zero Emojis)
-function printTextReport(report) {
-    console.log("===============================================================================");
-    console.log("PrivacyScrubber Developer SDK (@privacyscrubber/sdk) Performance Benchmark");
-    console.log("Zero-Trust Data Sanitization (ZTDS) In-Memory Latency & SLA Verification");
-    console.log("===============================================================================");
-    console.log(`Runtime:     ${report.environment.runtime} | V8: ${report.environment.v8Version}`);
-    console.log(`Platform:    ${report.environment.platform}`);
-    console.log(`CPU:         ${report.environment.cpu} (${report.environment.cores} cores)`);
-    console.log(`Profile:     ${report.profile}`);
-    console.log(`Timestamp:   ${report.timestamp}`);
-    console.log("-------------------------------------------------------------------------------\n");
-
-    for (const res of report.results) {
-        console.log(`[Payload: ${res.label}]`);
-        console.log(`  Size: ${res.sizeKB} KB (${res.sizeBytes} bytes) | Entities Masked: ${res.entityCount}`);
-        console.log(`  Fidelity (Zero Data Loss): ${res.fidelityPassed ? 'PASS (100% exact match)' : 'FAIL'}`);
-        console.log(`  SLA Target: < ${res.targetSlaMs.toFixed(1)} ms | SLA Status: ${res.slaPassed ? 'PASSED' : 'FAILED'}`);
-        console.log("");
-
-        console.log("  Operation    | p50 (Median) | p90      | p95      | p99      | Mean     | Throughput");
-        console.log("  -------------+--------------+----------+----------+----------+----------+-----------");
-        
-        const fmt = (v) => `${v.toFixed(3)} ms`.padEnd(8);
-        const tp = (t) => `${t.toFixed(1)} MB/s`.padEnd(10);
-
-        console.log(`  Sanitize     | ${fmt(res.sanitize.p50)}     | ${fmt(res.sanitize.p90)} | ${fmt(res.sanitize.p95)} | ${fmt(res.sanitize.p99)} | ${fmt(res.sanitize.mean)} | ${tp(res.sanitize.throughputMBs)}`);
-        console.log(`  Restore      | ${fmt(res.restore.p50)}     | ${fmt(res.restore.p90)} | ${fmt(res.restore.p95)} | ${fmt(res.restore.p99)} | ${fmt(res.restore.mean)} | ${tp(res.restore.throughputMBs)}`);
-        console.log(`  Roundtrip    | ${fmt(res.roundtrip.p50)}     | ${fmt(res.roundtrip.p90)} | ${fmt(res.roundtrip.p95)} | ${fmt(res.roundtrip.p99)} | ${fmt(res.roundtrip.mean)} | ${tp(res.roundtrip.throughputMBs)}`);
-        console.log("");
-    }
-
-    console.log("===============================================================================");
-    const interactivePayload = report.results.find(r => r.sizeBytes === 2 * 1024) || report.results[0];
-    let allSlasPassed = true;
-    if (interactivePayload) {
-        const p50 = interactivePayload.sanitize.p50;
-        const slaPassed = p50 < interactivePayload.targetSlaMs;
-        if (!slaPassed) allSlasPassed = false;
-        console.log(`ZTDS SUB-MILLISECOND SLA VERIFICATION (2KB Interactive Prompt < 1.00 ms):`);
-        console.log(`  Measured p50: ${p50.toFixed(3)} ms -> ${slaPassed ? 'PASSED (Sub-millisecond SLA verified)' : 'FAILED'}`);
-    }
-    
-    for (const res of report.results) {
-        if (!res.slaPassed) allSlasPassed = false;
-    }
-
-    const allFidelityPassed = report.results.every(r => r.fidelityPassed);
-    console.log(`ZERO DATA LOSS FIDELITY (Bidirectional Plaintext Recovery):`);
-    console.log(`  All Payloads: ${allFidelityPassed ? 'PASSED (100% exact round-trip match)' : 'FAILED'}`);
-    console.log("===============================================================================\n");
-    return allSlasPassed && allFidelityPassed;
-}
-
-// Output Formatting: Markdown Table (for Documentation / Procurement Memos)
-function printMarkdownReport(report) {
-    console.log(`## PrivacyScrubber SDK In-Memory Performance Benchmark Report\n`);
-    console.log(`- **Audit Timestamp:** \`${report.timestamp}\``);
-    console.log(`- **Host Runtime:** \`${report.environment.runtime}\` on \`${report.environment.platform}\``);
-    console.log(`- **CPU Architecture:** \`${report.environment.cpu}\` (${report.environment.cores} vCPUs)`);
-    console.log(`- **Sanitization Profile:** \`${report.profile}\`\n`);
-
-    console.log(`| Workload | Payload | Entities | Sanitize (p50) | Sanitize (p99) | Restore (p50) | Throughput | Target SLA | Status | Fidelity |`);
-    console.log(`| :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- |`);
-
-    for (const r of report.results) {
-        const sla = `< ${r.targetSlaMs} ms`;
-        const status = r.slaPassed ? 'PASS' : 'FAILED';
-        const fidelity = r.fidelityPassed ? 'PASS (100%)' : 'FAIL';
-        console.log(`| ${r.label} | ${r.sizeKB} KB | ${r.entityCount} | **${r.sanitize.p50} ms** | ${r.sanitize.p99} ms | **${r.restore.p50} ms** | **${r.sanitize.throughputMBs} MB/s** | ${sla} | **${status}** | ${fidelity} |`);
-    }
-    console.log("");
-}
-
-// Direct Execution Entrypoint
-if (process.argv[1] && process.argv[1].endsWith('benchmark.js')) {
-    try {
-        const report = runBenchmarks();
-        
-        if (IS_JSON) {
-            console.log(JSON.stringify(report, null, 2));
-        } else if (IS_MARKDOWN) {
-            printMarkdownReport(report);
-        } else {
-            const passed = printTextReport(report);
-            if (ASSERT_SLA && !passed) {
-                console.error("ERROR: SLA assertion failed. Latency or fidelity bounds exceeded.");
-                process.exit(1);
-            }
-        }
-    } catch (err) {
-        console.error("Benchmark Execution Error:", err);
-        process.exit(1);
-    }
-}