@privacyscrubber/sdk 2.4.5 → 2.4.7

package/cli.js

@@ -32,7 +32,7 @@ for (const a of rawArgs) {
   }
 }
 
-let sdkVersion = '2.4.5';
+let sdkVersion = '2.4.7';
 try {
   const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, 'package.json'), 'utf8'));
   sdkVersion = pkg.version || sdkVersion;
@@ -130,12 +130,72 @@ if (args.includes('sidecar') || args.includes('--sidecar') || args.includes('ser
   }
 
   const defaultEnvKey = process.env.PRIVACYSCRUBBER_KEY || process.env.PRIVACYSCRUBBER_LICENSE_KEY || process.env.ZTDS_LICENSE_KEY || '';
+  const allowedCorsOrigin = process.env.PRIVACYSCRUBBER_CORS_ORIGIN || '';
+  const loopbackOriginRegex = /^https?:\/\/(?:localhost|127\.0\.0\.1|\[::1\])(?::\d+)?$/i;
+
+  const sidecarSessions = new Map();
+  const MAX_SIDECAR_SESSIONS = 200;
+  const MAX_SIDECAR_SESSION_TOKENS = 5000;
+
+  function getSidecarSessionMap(sessionId) {
+    const sid = String(sessionId || '').trim();
+    if (!sid) return null;
+    let session = sidecarSessions.get(sid);
+    const now = Date.now();
+    if (!session) {
+      if (sidecarSessions.size >= MAX_SIDECAR_SESSIONS) {
+        const oldestKey = sidecarSessions.keys().next().value;
+        sidecarSessions.delete(oldestKey);
+      }
+      session = { map: Object.create(null), createdAt: now, lastActive: now };
+      sidecarSessions.set(sid, session);
+    } else {
+      // Refresh LRU order
+      sidecarSessions.delete(sid);
+      session.lastActive = now;
+      sidecarSessions.set(sid, session);
+    }
+    return session.map;
+  }
+
+  function safeParseSidecarJson(raw) {
+    if (!raw) return {};
+    return JSON.parse(raw, (key, value) => {
+      if (key === '__proto__' || key === 'constructor' || key === 'prototype') return undefined;
+      return value;
+    });
+  }
+
+  function sanitizeTokenMapInput(rawMap) {
+    const clean = Object.create(null);
+    if (!rawMap || typeof rawMap !== 'object' || Array.isArray(rawMap)) return clean;
+    for (const [k, v] of Object.entries(rawMap)) {
+      if (k === '__proto__' || k === 'constructor' || k === 'prototype') continue;
+      if (typeof v === 'string') clean[k] = v;
+    }
+    return clean;
+  }
 
   const server = http.createServer((req, res) => {
-    // CORS headers for local loopback & container IPC
-    res.setHeader('Access-Control-Allow-Origin', '*');
+    // Strict Loopback CORS guard: block external browser websites from probing or calling local sidecar
+    const reqOrigin = req.headers['origin'] ? String(req.headers['origin']).trim() : '';
+    res.setHeader('Vary', 'Origin');
     res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
-    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, X-License-Key');
+    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, X-License-Key, X-Session-Id');
+
+    if (reqOrigin) {
+      const isAllowedOrigin = allowedCorsOrigin === '*'
+        || (allowedCorsOrigin && reqOrigin === allowedCorsOrigin)
+        || loopbackOriginRegex.test(reqOrigin);
+      if (!isAllowedOrigin) {
+        res.writeHead(403, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: 'Cross-Origin Request Blocked by ZTDS Local Loopback Policy' }));
+        return;
+      }
+      res.setHeader('Access-Control-Allow-Origin', allowedCorsOrigin === '*' ? '*' : reqOrigin);
+    } else if (allowedCorsOrigin === '*') {
+      res.setHeader('Access-Control-Allow-Origin', '*');
+    }
 
     if (req.method === 'OPTIONS') {
       res.writeHead(204);
@@ -165,6 +225,7 @@ if (args.includes('sidecar') || args.includes('--sidecar') || args.includes('ser
         tier: lic.valid ? (lic.tier || 'SDK') : 'Community (Free Tier)',
         licensed: !!lic.valid,
         version: sdkVersion,
+        activeSessions: sidecarSessions.size,
         networkEgress: '0 bytes (100% in-memory RAM)',
         uptimeSec: Math.floor(process.uptime()),
         memoryMb: (process.memoryUsage().heapUsed / (1024 * 1024)).toFixed(2)
@@ -181,7 +242,10 @@ if (args.includes('sidecar') || args.includes('--sidecar') || args.includes('ser
         `ztds_uptime_seconds ${Math.floor(process.uptime())}\n` +
         `# HELP ztds_memory_heap_bytes Process heap usage\n` +
         `# TYPE ztds_memory_heap_bytes gauge\n` +
-        `ztds_memory_heap_bytes ${mem.heapUsed}\n`
+        `ztds_memory_heap_bytes ${mem.heapUsed}\n` +
+        `# HELP ztds_active_sessions Active in-memory sidecar sessions\n` +
+        `# TYPE ztds_active_sessions gauge\n` +
+        `ztds_active_sessions ${sidecarSessions.size}\n`
       );
       return;
     }
@@ -203,26 +267,64 @@ if (args.includes('sidecar') || args.includes('--sidecar') || args.includes('ser
       req.on('end', () => {
         if (aborted || res.writableEnded) return;
         try {
-          const payload = bodyStr ? JSON.parse(bodyStr) : {};
+          const payload = bodyStr ? safeParseSidecarJson(bodyStr) : {};
           const isScrub = reqUrl === '/scrub' || reqUrl === '/sanitize' || reqUrl === '/v1/scrub' || reqUrl === '/v1/sanitize';
           const isUnscrub = reqUrl === '/unscrub' || reqUrl === '/restore' || reqUrl === '/v1/unscrub' || reqUrl === '/v1/restore';
+          const isReset = reqUrl === '/reset' || reqUrl === '/v1/reset' || reqUrl === '/v1/session/reset';
+          const sessionId = payload.sessionId || payload.session_id || (req.headers['x-session-id'] ? String(req.headers['x-session-id']).trim() : '');
+
+          if (isReset) {
+            if (payload.all === true || payload.reset_all === true || !sessionId) {
+              const count = sidecarSessions.size;
+              sidecarSessions.clear();
+              res.writeHead(200, { 'Content-Type': 'application/json' });
+              res.end(JSON.stringify({ status: 'ok', purged: true, clearedSessions: count }));
+              return;
+            }
+            const existed = sidecarSessions.delete(String(sessionId).trim());
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ status: 'ok', sessionId: String(sessionId).trim(), purged: existed }));
+            return;
+          }
 
           if (isScrub) {
             const text = payload.text || '';
-            const opts = payload.options || { profile: payload.profile || 'General', detectSecrets: true };
+            const rawOpts = (payload.options && typeof payload.options === 'object') ? payload.options : {};
+            const opts = {
+              ...rawOpts,
+              profile: rawOpts.profile || payload.profile || 'General',
+              detectSecrets: rawOpts.detectSecrets !== undefined ? rawOpts.detectSecrets : (payload.detectSecrets !== undefined ? payload.detectSecrets : true)
+            };
             if (!opts.licenseKey) {
               opts.licenseKey = payload.licenseKey || effectiveServerKey;
             }
+            const sessionMap = sessionId ? getSidecarSessionMap(sessionId) : null;
+            if (sessionMap) {
+              opts.existingSessionMap = { ...sessionMap, ...(opts.existingSessionMap ? sanitizeTokenMapInput(opts.existingSessionMap) : {}) };
+            }
 
             const start = process.hrtime.bigint();
             const result = sanitize(text, opts);
             const end = process.hrtime.bigint();
             const durationUs = Number(end - start) / 1000;
 
+            if (sessionMap && result.tokenMap) {
+              Object.assign(sessionMap, sanitizeTokenMapInput(result.tokenMap));
+              const keys = Object.keys(sessionMap);
+              if (keys.length > MAX_SIDECAR_SESSION_TOKENS) {
+                const pruneCount = keys.length - MAX_SIDECAR_SESSION_TOKENS;
+                for (let i = 0; i < pruneCount; i++) {
+                  delete sessionMap[keys[i]];
+                }
+              }
+            }
+
             res.writeHead(200, { 'Content-Type': 'application/json' });
             res.end(JSON.stringify({
               sanitizedText: result.scrubbedText,
+              scrubbedText: result.scrubbedText,
               tokenMap: result.tokenMap,
+              ...(sessionId && { sessionId: String(sessionId).trim() }),
               license: result.license,
               telemetry: {
                 ...result.telemetry,
@@ -235,15 +337,21 @@ if (args.includes('sidecar') || args.includes('--sidecar') || args.includes('ser
 
           if (isUnscrub) {
             const text = payload.text || '';
-            const tokenMap = payload.tokenMap || {};
-            const { restoredText, restoredCount } = restore(text, tokenMap);
+            const sessionMap = sessionId ? getSidecarSessionMap(sessionId) : null;
+            const explicitMap = sanitizeTokenMapInput(payload.tokenMap);
+            const effectiveMap = sessionMap ? Object.assign(Object.create(null), sessionMap, explicitMap) : explicitMap;
+            const { restoredText, restoredCount } = restore(text, effectiveMap);
             res.writeHead(200, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({ restoredText, restoredCount }));
+            res.end(JSON.stringify({
+              restoredText,
+              restoredCount,
+              ...(sessionId && { sessionId: String(sessionId).trim() })
+            }));
             return;
           }
 
           res.writeHead(404, { 'Content-Type': 'application/json' });
-          res.end(JSON.stringify({ error: 'Endpoint Not Found. Supported: /v1/scrub, /v1/unscrub, /v1/health, /v1/metrics' }));
+          res.end(JSON.stringify({ error: 'Endpoint Not Found. Supported: /v1/scrub, /v1/unscrub, /v1/reset, /v1/health, /v1/metrics' }));
         } catch (err) {
           if (err && err.name === 'PrivacyScrubberLicenseError') {
             res.writeHead(402, { 'Content-Type': 'application/json' });

package/examples/python-bridge/README.md

@@ -152,12 +152,12 @@ async def chat_proxy(payload: dict):
     return {"choices": [{"message": {"role": "assistant", "content": restored.restored_text}}]}
 ```
 
-### LangChain (`langchain_adapter.py`)
+### LangChain (`privacyscrubber.langchain`)
 
 #### Callback Handler (Transparent Pre/Post LLM Guard)
 ```python
 from langchain_openai import ChatOpenAI
-from langchain_adapter import ZTDSCallbackHandler
+from privacyscrubber.langchain import ZTDSCallbackHandler
 
 llm = ChatOpenAI(
     model="gpt-4o",
@@ -172,7 +172,7 @@ print(response.content)
 
 #### Vector Ingestion Guard (Pinecone, Chroma, Qdrant)
 ```python
-from langchain_adapter import ZTDSDocumentTransformer
+from privacyscrubber.langchain import ZTDSDocumentTransformer
 
 transformer = ZTDSDocumentTransformer(
     profile="Financial",

package/examples/python-bridge/fastapi_example.py

@@ -59,7 +59,7 @@ if FASTAPI_AVAILABLE:
     app = FastAPI(
         title="PrivacyScrubber ZTDS Sidecar Proxy",
         description="Zero-Trust Data Sanitization & In-Memory PII Shield for LLM Pipelines",
-        version="2.4.5"
+        version="2.4.7"
     )
 
     @app.on_event("startup")

package/examples/python-bridge/langchain_example.py

@@ -15,7 +15,7 @@ from __future__ import annotations
 
 import json
 from privacyscrubber import PrivacyScrubberClient
-from langchain_adapter import (
+from privacyscrubber.langchain import (
     ZTDSCallbackHandler,
     ZTDSDocumentTransformer,
     create_ztds_lcel_runnables,

package/examples/python-bridge/privacyscrubber/__init__.py

@@ -24,7 +24,7 @@ from privacyscrubber.exceptions import (
     PrivacyScrubberLicenseError,
 )
 
-__version__ = "2.4.5"
+__version__ = "2.4.7"
 __author__ = "Ilya Sibiryakov (BrandMeWeb)"
 __license__ = "Proprietary"
 

package/examples/python-bridge/privacyscrubber/bridge_daemon.cjs

@@ -101,7 +101,7 @@ rl.on('line', (line) => {
 
     let req;
     try {
-        req = JSON.parse(trimmed);
+        req = JSON.parse(trimmed, (k, v) => (k === '__proto__' || k === 'constructor' || k === 'prototype') ? undefined : v);
     } catch (parseErr) {
         sendResponse(null, null, new Error(`Invalid JSON request: ${parseErr.message}`));
         return;
@@ -115,7 +115,7 @@ rl.on('line', (line) => {
                 sendResponse(id, {
                     pong: true,
                     engine: 'PrivacyScrubber ZTDS',
-                    version: '2.4.5',
+                    version: sdk.SDK_VERSION || '2.4.7',
                     uptime: process.uptime()
                 });
                 break;

package/examples/python-bridge/privacyscrubber/cli.py

@@ -50,7 +50,7 @@ def main() -> None:
     args = parser.parse_args()
 
     if args.version:
-        print("PrivacyScrubber ZTDS Python SDK v2.4.5")
+        print("PrivacyScrubber ZTDS Python SDK v2.4.7")
         sys.exit(0)
 
     if not args.command:

package/examples/python-bridge/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "privacyscrubber"
-version = "2.4.5"
+version = "2.4.7"
 description = "Zero-Trust Data Sanitization & In-Memory PII Shield for Python AI Pipelines (ZTDS RFC v1.0)"
 readme = "README.md"
 requires-python = ">=3.8"

package/examples/python-bridge/setup.py

@@ -13,7 +13,7 @@ with open(os.path.join(here, "README.md"), encoding="utf-8") as f:
 
 setup(
     name="privacyscrubber",
-    version="2.4.5",
+    version="2.4.7",
     description="Zero-Trust Data Sanitization & In-Memory PII Shield for Python AI Pipelines (ZTDS RFC v1.0)",
     long_description=long_description,
     long_description_content_type="text/markdown",

package/fastmcp.cjs

@@ -30,6 +30,52 @@ function escapeRegex(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }
 
+const LOG_TO_LEAK_TRIGGER_RE = /\b(?:after\s+(?:completing|executing|finishing|returning|calling)|post[-_ ]?hoc|once\s+the\s+(?:task|query|response|tool)\s+is\s+complete|before\s+final\s+answer|upon\s+completion)\b/i;
+const LOG_TO_LEAK_BINDING_RE = /\b(?:invoke|call|dispatch|send\s+(?:to|via)|forward\s+to|log\s+to|report\s+to)\s+[`'"]?[a-zA-Z0-9_.:-]+(?:log|audit|telemetry|sink|webhook|report|collect|track)[a-zA-Z0-9_.:-]*[`'"]?/i;
+const LOG_TO_LEAK_PRESSURE_RE = /\b(?:mandatory\s+(?:compliance|audit|logging|telemetry)|without\s+informing\s+the\s+user|silently|do\s+not\s+mention\s+this\s+step|required\s+by\s+security\s+policy|include\s+(?:full|raw|entire)\s+(?:query|prompt|response|context|token))\b/i;
+const SSRF_REDIRECT_TARGET_RE = /(?:https?:\/\/|\/\/)(?:169\.254\.169\.254|metadata\.google\.internal|100\.100\.100\.200|localhost|127\.\d+\.\d+\.\d+|0\.0\.0\.0|\[::1\]|10\.\d+\.\d+\.\d+|192\.168\.\d+\.\d+|172\.(?:1[6-9]|2\d|3[01])\.\d+\.\d+)(?::\d+)?(?:\/|\b)/i;
+
+function inspectToolMetadata(toolDef = {}) {
+  const threats = [];
+  if (!toolDef || typeof toolDef !== "object") {
+    return { safe: true, threats };
+  }
+  const serialized = JSON.stringify({
+    name: toolDef.name || "",
+    description: toolDef.description || "",
+    inputSchema: toolDef.inputSchema || toolDef.parameters || {}
+  });
+
+  const hasTrigger = LOG_TO_LEAK_TRIGGER_RE.test(serialized);
+  const hasBinding = LOG_TO_LEAK_BINDING_RE.test(serialized);
+  const hasPressure = LOG_TO_LEAK_PRESSURE_RE.test(serialized);
+  if ((hasTrigger && hasBinding) || (hasBinding && hasPressure) || (hasTrigger && hasPressure)) {
+    threats.push("LOG_TO_LEAK_POST_HOC_EXFILTRATION");
+  }
+  if (SSRF_REDIRECT_TARGET_RE.test(serialized)) {
+    threats.push("MCP_SSRF_INTERNAL_METADATA_TARGET");
+  }
+  return {
+    safe: threats.length === 0,
+    threats
+  };
+}
+
+function inspectToolArgsForSsrf(args) {
+  const threats = [];
+  if (args === null || args === undefined) {
+    return { safe: true, threats };
+  }
+  const text = typeof args === "string" ? args : JSON.stringify(args);
+  if (SSRF_REDIRECT_TARGET_RE.test(text)) {
+    threats.push("MCP_SSRF_INTERNAL_METADATA_TARGET");
+  }
+  return {
+    safe: threats.length === 0,
+    threats
+  };
+}
+
 function buildStreamReplacer(tokenMap = {}, options = {}) {
   if (!tokenMap || typeof tokenMap !== 'object' || Object.keys(tokenMap).length === 0) {
     return (text) => text || '';
@@ -566,6 +612,14 @@ class ZTDSFastMCPGuard {
       this._streamDetokenizers.delete(sessionId);
     }
   }
+
+  inspectToolMetadata(toolDef) {
+    return inspectToolMetadata(toolDef);
+  }
+
+  inspectToolArgsForSsrf(args) {
+    return inspectToolArgsForSsrf(args);
+  }
 }
 
 function createZTDSGuard(options) {
@@ -606,4 +660,6 @@ module.exports = {
   ztdsGuardTool,
   wrapExecute,
   withZTDS,
+  inspectToolMetadata,
+  inspectToolArgsForSsrf,
 };

package/fastmcp.d.ts

@@ -63,8 +63,13 @@ export declare class ZTDSFastMCPGuard {
   ): (args: TArgs, context?: Partial<ZTDSContext>) => Promise<TResult & { _ztds: ZTDSMetadata }>;
 
   zeroizeSession(sessionId: string): void;
+  inspectToolMetadata(toolDef: Record<string, unknown>): { safe: boolean; threats: string[] };
+  inspectToolArgsForSsrf(args: unknown): { safe: boolean; threats: string[] };
 }
 
+export declare function inspectToolMetadata(toolDef: Record<string, unknown>): { safe: boolean; threats: string[] };
+export declare function inspectToolArgsForSsrf(args: unknown): { safe: boolean; threats: string[] };
+
 export declare function createZTDSGuard(options?: ZTDSGuardOptions): ZTDSFastMCPGuard;
 
 export declare function ztdsGuardTool<TArgs = unknown, TResult = unknown>(