@privacyscrubber/sdk 2.4.4 → 2.4.6

package/cli.js

@@ -32,7 +32,7 @@ for (const a of rawArgs) {
   }
 }
 
-let sdkVersion = '2.4.4';
+let sdkVersion = '2.4.6';
 try {
   const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, 'package.json'), 'utf8'));
   sdkVersion = pkg.version || sdkVersion;
@@ -130,12 +130,72 @@ if (args.includes('sidecar') || args.includes('--sidecar') || args.includes('ser
   }
 
   const defaultEnvKey = process.env.PRIVACYSCRUBBER_KEY || process.env.PRIVACYSCRUBBER_LICENSE_KEY || process.env.ZTDS_LICENSE_KEY || '';
+  const allowedCorsOrigin = process.env.PRIVACYSCRUBBER_CORS_ORIGIN || '';
+  const loopbackOriginRegex = /^https?:\/\/(?:localhost|127\.0\.0\.1|\[::1\])(?::\d+)?$/i;
+
+  const sidecarSessions = new Map();
+  const MAX_SIDECAR_SESSIONS = 200;
+  const MAX_SIDECAR_SESSION_TOKENS = 5000;
+
+  function getSidecarSessionMap(sessionId) {
+    const sid = String(sessionId || '').trim();
+    if (!sid) return null;
+    let session = sidecarSessions.get(sid);
+    const now = Date.now();
+    if (!session) {
+      if (sidecarSessions.size >= MAX_SIDECAR_SESSIONS) {
+        const oldestKey = sidecarSessions.keys().next().value;
+        sidecarSessions.delete(oldestKey);
+      }
+      session = { map: Object.create(null), createdAt: now, lastActive: now };
+      sidecarSessions.set(sid, session);
+    } else {
+      // Refresh LRU order
+      sidecarSessions.delete(sid);
+      session.lastActive = now;
+      sidecarSessions.set(sid, session);
+    }
+    return session.map;
+  }
+
+  function safeParseSidecarJson(raw) {
+    if (!raw) return {};
+    return JSON.parse(raw, (key, value) => {
+      if (key === '__proto__' || key === 'constructor' || key === 'prototype') return undefined;
+      return value;
+    });
+  }
+
+  function sanitizeTokenMapInput(rawMap) {
+    const clean = Object.create(null);
+    if (!rawMap || typeof rawMap !== 'object' || Array.isArray(rawMap)) return clean;
+    for (const [k, v] of Object.entries(rawMap)) {
+      if (k === '__proto__' || k === 'constructor' || k === 'prototype') continue;
+      if (typeof v === 'string') clean[k] = v;
+    }
+    return clean;
+  }
 
   const server = http.createServer((req, res) => {
-    // CORS headers for local loopback & container IPC
-    res.setHeader('Access-Control-Allow-Origin', '*');
+    // Strict Loopback CORS guard: block external browser websites from probing or calling local sidecar
+    const reqOrigin = req.headers['origin'] ? String(req.headers['origin']).trim() : '';
+    res.setHeader('Vary', 'Origin');
     res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
-    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, X-License-Key');
+    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, X-License-Key, X-Session-Id');
+
+    if (reqOrigin) {
+      const isAllowedOrigin = allowedCorsOrigin === '*'
+        || (allowedCorsOrigin && reqOrigin === allowedCorsOrigin)
+        || loopbackOriginRegex.test(reqOrigin);
+      if (!isAllowedOrigin) {
+        res.writeHead(403, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: 'Cross-Origin Request Blocked by ZTDS Local Loopback Policy' }));
+        return;
+      }
+      res.setHeader('Access-Control-Allow-Origin', allowedCorsOrigin === '*' ? '*' : reqOrigin);
+    } else if (allowedCorsOrigin === '*') {
+      res.setHeader('Access-Control-Allow-Origin', '*');
+    }
 
     if (req.method === 'OPTIONS') {
       res.writeHead(204);
@@ -165,6 +225,7 @@ if (args.includes('sidecar') || args.includes('--sidecar') || args.includes('ser
         tier: lic.valid ? (lic.tier || 'SDK') : 'Community (Free Tier)',
         licensed: !!lic.valid,
         version: sdkVersion,
+        activeSessions: sidecarSessions.size,
         networkEgress: '0 bytes (100% in-memory RAM)',
         uptimeSec: Math.floor(process.uptime()),
         memoryMb: (process.memoryUsage().heapUsed / (1024 * 1024)).toFixed(2)
@@ -181,7 +242,10 @@ if (args.includes('sidecar') || args.includes('--sidecar') || args.includes('ser
         `ztds_uptime_seconds ${Math.floor(process.uptime())}\n` +
         `# HELP ztds_memory_heap_bytes Process heap usage\n` +
         `# TYPE ztds_memory_heap_bytes gauge\n` +
-        `ztds_memory_heap_bytes ${mem.heapUsed}\n`
+        `ztds_memory_heap_bytes ${mem.heapUsed}\n` +
+        `# HELP ztds_active_sessions Active in-memory sidecar sessions\n` +
+        `# TYPE ztds_active_sessions gauge\n` +
+        `ztds_active_sessions ${sidecarSessions.size}\n`
       );
       return;
     }
@@ -203,26 +267,64 @@ if (args.includes('sidecar') || args.includes('--sidecar') || args.includes('ser
       req.on('end', () => {
         if (aborted || res.writableEnded) return;
         try {
-          const payload = bodyStr ? JSON.parse(bodyStr) : {};
+          const payload = bodyStr ? safeParseSidecarJson(bodyStr) : {};
           const isScrub = reqUrl === '/scrub' || reqUrl === '/sanitize' || reqUrl === '/v1/scrub' || reqUrl === '/v1/sanitize';
           const isUnscrub = reqUrl === '/unscrub' || reqUrl === '/restore' || reqUrl === '/v1/unscrub' || reqUrl === '/v1/restore';
+          const isReset = reqUrl === '/reset' || reqUrl === '/v1/reset' || reqUrl === '/v1/session/reset';
+          const sessionId = payload.sessionId || payload.session_id || (req.headers['x-session-id'] ? String(req.headers['x-session-id']).trim() : '');
+
+          if (isReset) {
+            if (payload.all === true || payload.reset_all === true || !sessionId) {
+              const count = sidecarSessions.size;
+              sidecarSessions.clear();
+              res.writeHead(200, { 'Content-Type': 'application/json' });
+              res.end(JSON.stringify({ status: 'ok', purged: true, clearedSessions: count }));
+              return;
+            }
+            const existed = sidecarSessions.delete(String(sessionId).trim());
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ status: 'ok', sessionId: String(sessionId).trim(), purged: existed }));
+            return;
+          }
 
           if (isScrub) {
             const text = payload.text || '';
-            const opts = payload.options || { profile: payload.profile || 'General', detectSecrets: true };
+            const rawOpts = (payload.options && typeof payload.options === 'object') ? payload.options : {};
+            const opts = {
+              ...rawOpts,
+              profile: rawOpts.profile || payload.profile || 'General',
+              detectSecrets: rawOpts.detectSecrets !== undefined ? rawOpts.detectSecrets : (payload.detectSecrets !== undefined ? payload.detectSecrets : true)
+            };
             if (!opts.licenseKey) {
               opts.licenseKey = payload.licenseKey || effectiveServerKey;
             }
+            const sessionMap = sessionId ? getSidecarSessionMap(sessionId) : null;
+            if (sessionMap) {
+              opts.existingSessionMap = { ...sessionMap, ...(opts.existingSessionMap ? sanitizeTokenMapInput(opts.existingSessionMap) : {}) };
+            }
 
             const start = process.hrtime.bigint();
             const result = sanitize(text, opts);
             const end = process.hrtime.bigint();
             const durationUs = Number(end - start) / 1000;
 
+            if (sessionMap && result.tokenMap) {
+              Object.assign(sessionMap, sanitizeTokenMapInput(result.tokenMap));
+              const keys = Object.keys(sessionMap);
+              if (keys.length > MAX_SIDECAR_SESSION_TOKENS) {
+                const pruneCount = keys.length - MAX_SIDECAR_SESSION_TOKENS;
+                for (let i = 0; i < pruneCount; i++) {
+                  delete sessionMap[keys[i]];
+                }
+              }
+            }
+
             res.writeHead(200, { 'Content-Type': 'application/json' });
             res.end(JSON.stringify({
               sanitizedText: result.scrubbedText,
+              scrubbedText: result.scrubbedText,
               tokenMap: result.tokenMap,
+              ...(sessionId && { sessionId: String(sessionId).trim() }),
               license: result.license,
               telemetry: {
                 ...result.telemetry,
@@ -235,15 +337,21 @@ if (args.includes('sidecar') || args.includes('--sidecar') || args.includes('ser
 
           if (isUnscrub) {
             const text = payload.text || '';
-            const tokenMap = payload.tokenMap || {};
-            const { restoredText, restoredCount } = restore(text, tokenMap);
+            const sessionMap = sessionId ? getSidecarSessionMap(sessionId) : null;
+            const explicitMap = sanitizeTokenMapInput(payload.tokenMap);
+            const effectiveMap = sessionMap ? Object.assign(Object.create(null), sessionMap, explicitMap) : explicitMap;
+            const { restoredText, restoredCount } = restore(text, effectiveMap);
             res.writeHead(200, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({ restoredText, restoredCount }));
+            res.end(JSON.stringify({
+              restoredText,
+              restoredCount,
+              ...(sessionId && { sessionId: String(sessionId).trim() })
+            }));
             return;
           }
 
           res.writeHead(404, { 'Content-Type': 'application/json' });
-          res.end(JSON.stringify({ error: 'Endpoint Not Found. Supported: /v1/scrub, /v1/unscrub, /v1/health, /v1/metrics' }));
+          res.end(JSON.stringify({ error: 'Endpoint Not Found. Supported: /v1/scrub, /v1/unscrub, /v1/reset, /v1/health, /v1/metrics' }));
         } catch (err) {
           if (err && err.name === 'PrivacyScrubberLicenseError') {
             res.writeHead(402, { 'Content-Type': 'application/json' });

package/examples/python-bridge/README.md

@@ -152,12 +152,12 @@ async def chat_proxy(payload: dict):
     return {"choices": [{"message": {"role": "assistant", "content": restored.restored_text}}]}
 ```
 
-### LangChain (`langchain_adapter.py`)
+### LangChain (`privacyscrubber.langchain`)
 
 #### Callback Handler (Transparent Pre/Post LLM Guard)
 ```python
 from langchain_openai import ChatOpenAI
-from langchain_adapter import ZTDSCallbackHandler
+from privacyscrubber.langchain import ZTDSCallbackHandler
 
 llm = ChatOpenAI(
     model="gpt-4o",
@@ -172,7 +172,7 @@ print(response.content)
 
 #### Vector Ingestion Guard (Pinecone, Chroma, Qdrant)
 ```python
-from langchain_adapter import ZTDSDocumentTransformer
+from privacyscrubber.langchain import ZTDSDocumentTransformer
 
 transformer = ZTDSDocumentTransformer(
     profile="Financial",

package/examples/python-bridge/fastapi_example.py

@@ -59,7 +59,7 @@ if FASTAPI_AVAILABLE:
     app = FastAPI(
         title="PrivacyScrubber ZTDS Sidecar Proxy",
         description="Zero-Trust Data Sanitization & In-Memory PII Shield for LLM Pipelines",
-        version="2.4.4"
+        version="2.4.6"
     )
 
     @app.on_event("startup")

package/examples/python-bridge/langchain_example.py

@@ -15,7 +15,7 @@ from __future__ import annotations
 
 import json
 from privacyscrubber import PrivacyScrubberClient
-from langchain_adapter import (
+from privacyscrubber.langchain import (
     ZTDSCallbackHandler,
     ZTDSDocumentTransformer,
     create_ztds_lcel_runnables,

package/examples/python-bridge/privacyscrubber/__init__.py

@@ -24,7 +24,7 @@ from privacyscrubber.exceptions import (
     PrivacyScrubberLicenseError,
 )
 
-__version__ = "2.4.4"
+__version__ = "2.4.6"
 __author__ = "Ilya Sibiryakov (BrandMeWeb)"
 __license__ = "Proprietary"
 

package/examples/python-bridge/privacyscrubber/bridge_daemon.cjs

@@ -101,7 +101,7 @@ rl.on('line', (line) => {
 
     let req;
     try {
-        req = JSON.parse(trimmed);
+        req = JSON.parse(trimmed, (k, v) => (k === '__proto__' || k === 'constructor' || k === 'prototype') ? undefined : v);
     } catch (parseErr) {
         sendResponse(null, null, new Error(`Invalid JSON request: ${parseErr.message}`));
         return;
@@ -115,7 +115,7 @@ rl.on('line', (line) => {
                 sendResponse(id, {
                     pong: true,
                     engine: 'PrivacyScrubber ZTDS',
-                    version: '2.4.4',
+                    version: sdk.SDK_VERSION || '2.4.6',
                     uptime: process.uptime()
                 });
                 break;

package/examples/python-bridge/privacyscrubber/cli.py

@@ -50,7 +50,7 @@ def main() -> None:
     args = parser.parse_args()
 
     if args.version:
-        print("PrivacyScrubber ZTDS Python SDK v2.4.4")
+        print("PrivacyScrubber ZTDS Python SDK v2.4.6")
         sys.exit(0)
 
     if not args.command:

package/examples/python-bridge/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "privacyscrubber"
-version = "2.4.4"
+version = "2.4.6"
 description = "Zero-Trust Data Sanitization & In-Memory PII Shield for Python AI Pipelines (ZTDS RFC v1.0)"
 readme = "README.md"
 requires-python = ">=3.8"

package/examples/python-bridge/setup.py

@@ -13,7 +13,7 @@ with open(os.path.join(here, "README.md"), encoding="utf-8") as f:
 
 setup(
     name="privacyscrubber",
-    version="2.4.4",
+    version="2.4.6",
     description="Zero-Trust Data Sanitization & In-Memory PII Shield for Python AI Pipelines (ZTDS RFC v1.0)",
     long_description=long_description,
     long_description_content_type="text/markdown",