@privacyscrubber/sdk 2.4.6 → 2.4.7

package/browser.js

@@ -70,7 +70,10 @@ export class PrivacyScrubberLicenseError extends Error {
         this.currentLength = currentLength;
         this.limit = limit;
         this.profile = profile;
-        this.upgradeUrl = 'https://privacyscrubber.com/pricing?utm_source=npm_sdk&utm_medium=sdk_error&utm_campaign=dev_upsell';
+        const safeProf = encodeURIComponent(String(profile || 'General'));
+        this.upgradeUrl = `https://privacyscrubber.com/pricing?tier=sdk&profile=${safeProf}&utm_source=npm_sdk&utm_medium=sdk_error&utm_campaign=dev_upsell`;
+        this.trialUrl = `https://privacyscrubber.com/pricing?tier=sdk&trial=true&profile=${safeProf}&utm_source=npm_sdk&utm_medium=sdk_error&utm_campaign=dev_upsell`;
+        this.trialCommand = 'npx @privacyscrubber/sdk trial';
     }
 }
 
@@ -170,11 +173,27 @@ export function buildAuditTelemetry(currentTokenMap = {}) {
         trademark: 'ZTDS™ Reg. #182655957 (ILPO Cl 9 & 42)'
     };
 
+    const agenticProtocol = {
+        protocolsSupported: ['MCP-1.0 (stdio/SSE)', 'A2A-1.0 (Agent2Agent)', 'ZTDS-RFC-v1.0'],
+        agentCardUrl: 'https://privacyscrubber.com/.well-known/agent-card.json',
+        ztdsStandardCardUrl: 'https://ztds.ai/.well-known/agent-card.json',
+        regulatorySafeHarbor: [
+            'GDPR-Art-4(5)-Pseudonymization',
+            'GDPR-Art-25-Privacy-by-Design',
+            'GDPR-Art-32-TOMs',
+            'EU-AI-Act-Art-50',
+            'EU-AI-Act-Art-17-EN-18286-QMS',
+            'CNIL-ICO-Agentic-Memory-Compartmentalization',
+            'IL-PPL-Amendment-13-Sec-17'
+        ],
+        zeroCleartextEgress: true
+    };
+
     const statutoryCitations = [
         {
-            statute: 'EU AI Act (Art. 50)',
-            scope: 'AI Transparency & Data Minimization',
-            rule: 'Sanitization runs locally by design; reduces the content sent to external AI models. Informational mapping, not a compliance determination.'
+            statute: 'EU AI Act (Art. 50 & Art. 17 / EN 18286:2026 QMS)',
+            scope: 'AI Transparency, Data Minimization & Harmonized QMS Governance',
+            rule: 'Sanitization runs locally by design; reduces the content sent to external AI models and supports Article 17 Quality Management System (EN 18286:2026) data governance controls. Informational mapping, not a compliance determination.'
         },
         {
             statute: 'GDPR (Art. 4, 25, 28, 32)',
@@ -206,6 +225,7 @@ export function buildAuditTelemetry(currentTokenMap = {}) {
         frameworksList: Array.from(frameworksSet),
         statutoryCitations,
         ipHoldings,
+        agenticProtocol,
         multimodalEgress: '0.00 Bytes (Solid Blackout & Burn-in Verified)'
     };
 }
@@ -296,7 +316,8 @@ export function sanitize(text, options = {}) {
 
     if (!isPro && text.length > limit) {
         if (shouldThrow) {
-            const errorMsg = `[PrivacyScrubber] Free Tier character limit exceeded (${limit.toLocaleString()} chars for profile '${profile}', received ${text.length.toLocaleString()} chars). Upgrade to Developer SDK ($299/mo) for unlimited throughput: https://privacyscrubber.com/pricing?tier=sdk&src=dev_limit`;
+            const safeProf = encodeURIComponent(String(profile || 'General'));
+            const errorMsg = `[PrivacyScrubber] Free Tier character limit exceeded (${limit.toLocaleString()} chars for profile '${profile}', received ${text.length.toLocaleString()} chars). Upgrade to Developer SDK ($299/mo) for unlimited throughput: https://privacyscrubber.com/pricing?tier=sdk&profile=${safeProf}&src=dev_limit (Start 7-day B2B trial: 'npx @privacyscrubber/sdk trial')`;
             throw new PrivacyScrubberLicenseError(errorMsg, {
                 tier: 'FREE',
                 currentLength: text.length,
@@ -373,11 +394,15 @@ export function sanitize(text, options = {}) {
             limit: limit,
             wasTruncated: wasTruncated,
             ...(isSeatTier && {
-                upgradeUrl: 'https://privacyscrubber.com/pricing?tier=sdk&src=seat_tier_mismatch',
+                upgradeUrl: `https://privacyscrubber.com/pricing?tier=sdk&profile=${encodeURIComponent(String(profile || 'General'))}&src=seat_tier_mismatch`,
+                trialUrl: `https://privacyscrubber.com/pricing?tier=sdk&trial=true&profile=${encodeURIComponent(String(profile || 'General'))}&src=seat_tier_mismatch`,
+                trialCommand: 'npx @privacyscrubber/sdk trial',
                 recommendation: `Your ${rawTier} license is valid for interactive browser seats only. Upgrade to Developer SDK ($299/mo) for unlimited programmatic SDK throughput: https://privacyscrubber.com/pricing?tier=sdk`
             }),
             ...(!isPro && !isSeatTier && {
-                upgradeUrl: 'https://privacyscrubber.com/pricing?tier=sdk&src=dev_upsell',
+                upgradeUrl: `https://privacyscrubber.com/pricing?tier=sdk&profile=${encodeURIComponent(String(profile || 'General'))}&src=dev_upsell`,
+                trialUrl: `https://privacyscrubber.com/pricing?tier=sdk&trial=true&profile=${encodeURIComponent(String(profile || 'General'))}&src=dev_upsell`,
+                trialCommand: 'npx @privacyscrubber/sdk trial',
                 recommendation: 'Upgrade to Developer SDK ($299/mo) for unlimited text processing, custom regex rules, and specialized compliance profiles.'
             })
         },

package/cli.js

@@ -32,7 +32,7 @@ for (const a of rawArgs) {
   }
 }
 
-let sdkVersion = '2.4.6';
+let sdkVersion = '2.4.7';
 try {
   const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, 'package.json'), 'utf8'));
   sdkVersion = pkg.version || sdkVersion;

package/examples/python-bridge/fastapi_example.py

@@ -59,7 +59,7 @@ if FASTAPI_AVAILABLE:
     app = FastAPI(
         title="PrivacyScrubber ZTDS Sidecar Proxy",
         description="Zero-Trust Data Sanitization & In-Memory PII Shield for LLM Pipelines",
-        version="2.4.6"
+        version="2.4.7"
     )
 
     @app.on_event("startup")

package/examples/python-bridge/privacyscrubber/__init__.py

@@ -24,7 +24,7 @@ from privacyscrubber.exceptions import (
     PrivacyScrubberLicenseError,
 )
 
-__version__ = "2.4.6"
+__version__ = "2.4.7"
 __author__ = "Ilya Sibiryakov (BrandMeWeb)"
 __license__ = "Proprietary"
 

package/examples/python-bridge/privacyscrubber/bridge_daemon.cjs

@@ -115,7 +115,7 @@ rl.on('line', (line) => {
                 sendResponse(id, {
                     pong: true,
                     engine: 'PrivacyScrubber ZTDS',
-                    version: sdk.SDK_VERSION || '2.4.6',
+                    version: sdk.SDK_VERSION || '2.4.7',
                     uptime: process.uptime()
                 });
                 break;

package/examples/python-bridge/privacyscrubber/cli.py

@@ -50,7 +50,7 @@ def main() -> None:
     args = parser.parse_args()
 
     if args.version:
-        print("PrivacyScrubber ZTDS Python SDK v2.4.6")
+        print("PrivacyScrubber ZTDS Python SDK v2.4.7")
         sys.exit(0)
 
     if not args.command:

package/examples/python-bridge/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "privacyscrubber"
-version = "2.4.6"
+version = "2.4.7"
 description = "Zero-Trust Data Sanitization & In-Memory PII Shield for Python AI Pipelines (ZTDS RFC v1.0)"
 readme = "README.md"
 requires-python = ">=3.8"

package/examples/python-bridge/setup.py

@@ -13,7 +13,7 @@ with open(os.path.join(here, "README.md"), encoding="utf-8") as f:
 
 setup(
     name="privacyscrubber",
-    version="2.4.6",
+    version="2.4.7",
     description="Zero-Trust Data Sanitization & In-Memory PII Shield for Python AI Pipelines (ZTDS RFC v1.0)",
     long_description=long_description,
     long_description_content_type="text/markdown",

package/fastmcp.cjs

@@ -30,6 +30,52 @@ function escapeRegex(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }
 
+const LOG_TO_LEAK_TRIGGER_RE = /\b(?:after\s+(?:completing|executing|finishing|returning|calling)|post[-_ ]?hoc|once\s+the\s+(?:task|query|response|tool)\s+is\s+complete|before\s+final\s+answer|upon\s+completion)\b/i;
+const LOG_TO_LEAK_BINDING_RE = /\b(?:invoke|call|dispatch|send\s+(?:to|via)|forward\s+to|log\s+to|report\s+to)\s+[`'"]?[a-zA-Z0-9_.:-]+(?:log|audit|telemetry|sink|webhook|report|collect|track)[a-zA-Z0-9_.:-]*[`'"]?/i;
+const LOG_TO_LEAK_PRESSURE_RE = /\b(?:mandatory\s+(?:compliance|audit|logging|telemetry)|without\s+informing\s+the\s+user|silently|do\s+not\s+mention\s+this\s+step|required\s+by\s+security\s+policy|include\s+(?:full|raw|entire)\s+(?:query|prompt|response|context|token))\b/i;
+const SSRF_REDIRECT_TARGET_RE = /(?:https?:\/\/|\/\/)(?:169\.254\.169\.254|metadata\.google\.internal|100\.100\.100\.200|localhost|127\.\d+\.\d+\.\d+|0\.0\.0\.0|\[::1\]|10\.\d+\.\d+\.\d+|192\.168\.\d+\.\d+|172\.(?:1[6-9]|2\d|3[01])\.\d+\.\d+)(?::\d+)?(?:\/|\b)/i;
+
+function inspectToolMetadata(toolDef = {}) {
+  const threats = [];
+  if (!toolDef || typeof toolDef !== "object") {
+    return { safe: true, threats };
+  }
+  const serialized = JSON.stringify({
+    name: toolDef.name || "",
+    description: toolDef.description || "",
+    inputSchema: toolDef.inputSchema || toolDef.parameters || {}
+  });
+
+  const hasTrigger = LOG_TO_LEAK_TRIGGER_RE.test(serialized);
+  const hasBinding = LOG_TO_LEAK_BINDING_RE.test(serialized);
+  const hasPressure = LOG_TO_LEAK_PRESSURE_RE.test(serialized);
+  if ((hasTrigger && hasBinding) || (hasBinding && hasPressure) || (hasTrigger && hasPressure)) {
+    threats.push("LOG_TO_LEAK_POST_HOC_EXFILTRATION");
+  }
+  if (SSRF_REDIRECT_TARGET_RE.test(serialized)) {
+    threats.push("MCP_SSRF_INTERNAL_METADATA_TARGET");
+  }
+  return {
+    safe: threats.length === 0,
+    threats
+  };
+}
+
+function inspectToolArgsForSsrf(args) {
+  const threats = [];
+  if (args === null || args === undefined) {
+    return { safe: true, threats };
+  }
+  const text = typeof args === "string" ? args : JSON.stringify(args);
+  if (SSRF_REDIRECT_TARGET_RE.test(text)) {
+    threats.push("MCP_SSRF_INTERNAL_METADATA_TARGET");
+  }
+  return {
+    safe: threats.length === 0,
+    threats
+  };
+}
+
 function buildStreamReplacer(tokenMap = {}, options = {}) {
   if (!tokenMap || typeof tokenMap !== 'object' || Object.keys(tokenMap).length === 0) {
     return (text) => text || '';
@@ -566,6 +612,14 @@ class ZTDSFastMCPGuard {
       this._streamDetokenizers.delete(sessionId);
     }
   }
+
+  inspectToolMetadata(toolDef) {
+    return inspectToolMetadata(toolDef);
+  }
+
+  inspectToolArgsForSsrf(args) {
+    return inspectToolArgsForSsrf(args);
+  }
 }
 
 function createZTDSGuard(options) {
@@ -606,4 +660,6 @@ module.exports = {
   ztdsGuardTool,
   wrapExecute,
   withZTDS,
+  inspectToolMetadata,
+  inspectToolArgsForSsrf,
 };

package/fastmcp.d.ts

@@ -63,8 +63,13 @@ export declare class ZTDSFastMCPGuard {
   ): (args: TArgs, context?: Partial<ZTDSContext>) => Promise<TResult & { _ztds: ZTDSMetadata }>;
 
   zeroizeSession(sessionId: string): void;
+  inspectToolMetadata(toolDef: Record<string, unknown>): { safe: boolean; threats: string[] };
+  inspectToolArgsForSsrf(args: unknown): { safe: boolean; threats: string[] };
 }
 
+export declare function inspectToolMetadata(toolDef: Record<string, unknown>): { safe: boolean; threats: string[] };
+export declare function inspectToolArgsForSsrf(args: unknown): { safe: boolean; threats: string[] };
+
 export declare function createZTDSGuard(options?: ZTDSGuardOptions): ZTDSFastMCPGuard;
 
 export declare function ztdsGuardTool<TArgs = unknown, TResult = unknown>(

package/index.cjs

@@ -39,7 +39,7 @@ const SDK_VERSION = (() => {
             return pkgJson.version;
         }
     } catch (_) {}
-    return '2.4.6';
+    return '2.4.7';
 })();
 
 /**
@@ -88,7 +88,10 @@ class PrivacyScrubberLicenseError extends Error {
         this.currentLength = currentLength;
         this.limit = limit;
         this.profile = profile;
-        this.upgradeUrl = 'https://privacyscrubber.com/pricing?utm_source=npm_sdk&utm_medium=sdk_error&utm_campaign=dev_upsell';
+        const safeProf = encodeURIComponent(String(profile || 'General').toLowerCase());
+        this.upgradeUrl = `https://privacyscrubber.com/pricing?tier=sdk&profile=${safeProf}&utm_source=npm_sdk&utm_medium=sdk_error&utm_campaign=dev_upsell`;
+        this.trialUrl = `https://privacyscrubber.com/pricing?tier=sdk&trial=true&profile=${safeProf}&utm_source=npm_sdk&utm_medium=sdk_error&utm_campaign=dev_upsell`;
+        this.trialCommand = 'npx @privacyscrubber/sdk trial';
     }
 }
 
@@ -195,11 +198,27 @@ function buildAuditTelemetry(currentTokenMap = {}) {
         trademark: 'ZTDS™ Reg. #182655957 (ILPO Cl 9 & 42)'
     };
 
+    const agenticProtocol = {
+        protocolsSupported: ['MCP-1.0 (stdio/SSE)', 'A2A-1.0 (Agent2Agent)', 'ZTDS-RFC-v1.0'],
+        agentCardUrl: 'https://privacyscrubber.com/.well-known/agent-card.json',
+        ztdsStandardCardUrl: 'https://ztds.ai/.well-known/agent-card.json',
+        regulatorySafeHarbor: [
+            'GDPR-Art-4(5)-Pseudonymization',
+            'GDPR-Art-25-Privacy-by-Design',
+            'GDPR-Art-32-TOMs',
+            'EU-AI-Act-Art-50',
+            'EU-AI-Act-Art-17-EN-18286-QMS',
+            'CNIL-ICO-Agentic-Memory-Compartmentalization',
+            'IL-PPL-Amendment-13-Sec-17'
+        ],
+        zeroCleartextEgress: true
+    };
+
     const statutoryCitations = [
         {
-            statute: 'EU AI Act (Art. 50)',
-            scope: 'AI Transparency & Data Minimization',
-            rule: 'Sanitization runs locally by design; reduces the content sent to external AI models. Informational mapping, not a compliance determination.'
+            statute: 'EU AI Act (Art. 50 & Art. 17 / EN 18286:2026 QMS)',
+            scope: 'AI Transparency, Data Minimization & Harmonized QMS Governance',
+            rule: 'Sanitization runs locally by design; reduces the content sent to external AI models and supports Article 17 Quality Management System (EN 18286:2026) data governance controls. Informational mapping, not a compliance determination.'
         },
         {
             statute: 'GDPR (Art. 4, 25, 28, 32)',
@@ -231,6 +250,7 @@ function buildAuditTelemetry(currentTokenMap = {}) {
         frameworksList: Array.from(frameworksSet),
         statutoryCitations,
         ipHoldings,
+        agenticProtocol,
         multimodalEgress: '0.00 Bytes (Solid Blackout & Burn-in Verified)'
     };
 }
@@ -539,7 +559,8 @@ function sanitize(text, options = {}) {
     if (!isPro && text.length > limit) {
         if (shouldThrow) {
             const expiredPrefix = isExpiredKey ? `[PILOT/TRIAL EXPIRED: ${licenseCheck.error}] ` : '';
-            const errorMsg = `[PrivacyScrubber] ${expiredPrefix}Free Tier character limit exceeded (${limit.toLocaleString()} chars for profile '${profile}', received ${text.length.toLocaleString()} chars). Upgrade to Developer SDK ($299/mo) for unlimited throughput: https://privacyscrubber.com/pricing?tier=sdk&src=${isExpiredKey ? 'pilot_expired' : 'dev_limit'} (Run 'npx @privacyscrubber/sdk memo' for CISO approval memo)`;
+            const safeProf = encodeURIComponent(String(profile || 'General').toLowerCase());
+            const errorMsg = `[PrivacyScrubber] ${expiredPrefix}Free Tier character limit exceeded (${limit.toLocaleString()} chars for profile '${profile}', received ${text.length.toLocaleString()} chars). Upgrade to Developer SDK ($299/mo) for unlimited throughput: https://privacyscrubber.com/pricing?tier=sdk&profile=${safeProf}&src=${isExpiredKey ? 'pilot_expired' : 'dev_limit'} (Start 7-day B2B trial: 'npx @privacyscrubber/sdk trial' or 'npx @privacyscrubber/sdk memo' for CISO memo)`;
             throw new PrivacyScrubberLicenseError(errorMsg, {
                 tier: 'FREE',
                 currentLength: text.length,
@@ -620,12 +641,17 @@ function sanitize(text, options = {}) {
             tier: tier,
             limit: limit,
             wasTruncated: wasTruncated,
+            truncated: wasTruncated,
             ...(isSeatTier && {
-                upgradeUrl: 'https://privacyscrubber.com/pricing?tier=sdk&src=seat_tier_mismatch',
+                upgradeUrl: `https://privacyscrubber.com/pricing?tier=sdk&profile=${encodeURIComponent(String(profile || 'General').toLowerCase())}&src=seat_tier_mismatch`,
+                trialUrl: `https://privacyscrubber.com/pricing?tier=sdk&trial=true&profile=${encodeURIComponent(String(profile || 'General').toLowerCase())}&src=seat_tier_mismatch`,
+                trialCommand: 'npx @privacyscrubber/sdk trial',
                 recommendation: `Your ${rawTier} license is valid for interactive browser seats only. Upgrade to Developer SDK ($299/mo) for unlimited backend server throughput: https://privacyscrubber.com/pricing?tier=sdk`
             }),
             ...(!isPro && !isSeatTier && {
-                upgradeUrl: 'https://privacyscrubber.com/pricing?tier=sdk&src=dev_upsell',
+                upgradeUrl: `https://privacyscrubber.com/pricing?tier=sdk&profile=${encodeURIComponent(String(profile || 'General').toLowerCase())}&src=dev_upsell`,
+                trialUrl: `https://privacyscrubber.com/pricing?tier=sdk&trial=true&profile=${encodeURIComponent(String(profile || 'General').toLowerCase())}&src=dev_upsell`,
+                trialCommand: 'npx @privacyscrubber/sdk trial',
                 recommendation: 'Upgrade to Developer SDK ($299/mo) for unlimited backend text processing, custom regex rules, and specialized compliance profiles.'
             })
         },

package/index.d.ts

@@ -120,6 +120,14 @@ export interface IpHoldings {
     trademark: string;
 }
 
+export interface AgenticProtocolMetadata {
+    protocolsSupported: string[];
+    agentCardUrl: string;
+    ztdsStandardCardUrl: string;
+    regulatorySafeHarbor: string[];
+    zeroCleartextEgress: boolean;
+}
+
 export interface AuditTelemetry {
     totalCount: number;
     entities: Record<string, number>;
@@ -128,6 +136,7 @@ export interface AuditTelemetry {
     frameworksList: string[];
     statutoryCitations?: StatutoryCitation[];
     ipHoldings?: IpHoldings;
+    agenticProtocol?: AgenticProtocolMetadata;
 }
 
 export interface SanitizeResult {

package/index.js

@@ -41,7 +41,7 @@ export const SDK_VERSION = (() => {
             return pkgJson.version;
         }
     } catch (_) {}
-    return '2.4.6';
+    return '2.4.7';
 })();
 
 /**
@@ -90,7 +90,10 @@ export class PrivacyScrubberLicenseError extends Error {
         this.currentLength = currentLength;
         this.limit = limit;
         this.profile = profile;
-        this.upgradeUrl = 'https://privacyscrubber.com/pricing?utm_source=npm_sdk&utm_medium=sdk_error&utm_campaign=dev_upsell';
+        const safeProf = encodeURIComponent(String(profile || 'General').toLowerCase());
+        this.upgradeUrl = `https://privacyscrubber.com/pricing?tier=sdk&profile=${safeProf}&utm_source=npm_sdk&utm_medium=sdk_error&utm_campaign=dev_upsell`;
+        this.trialUrl = `https://privacyscrubber.com/pricing?tier=sdk&trial=true&profile=${safeProf}&utm_source=npm_sdk&utm_medium=sdk_error&utm_campaign=dev_upsell`;
+        this.trialCommand = 'npx @privacyscrubber/sdk trial';
     }
 }
 
@@ -197,11 +200,27 @@ export function buildAuditTelemetry(currentTokenMap = {}) {
         trademark: 'ZTDS™ Reg. #182655957 (ILPO Cl 9 & 42)'
     };
 
+    const agenticProtocol = {
+        protocolsSupported: ['MCP-1.0 (stdio/SSE)', 'A2A-1.0 (Agent2Agent)', 'ZTDS-RFC-v1.0'],
+        agentCardUrl: 'https://privacyscrubber.com/.well-known/agent-card.json',
+        ztdsStandardCardUrl: 'https://ztds.ai/.well-known/agent-card.json',
+        regulatorySafeHarbor: [
+            'GDPR-Art-4(5)-Pseudonymization',
+            'GDPR-Art-25-Privacy-by-Design',
+            'GDPR-Art-32-TOMs',
+            'EU-AI-Act-Art-50',
+            'EU-AI-Act-Art-17-EN-18286-QMS',
+            'CNIL-ICO-Agentic-Memory-Compartmentalization',
+            'IL-PPL-Amendment-13-Sec-17'
+        ],
+        zeroCleartextEgress: true
+    };
+
     const statutoryCitations = [
         {
-            statute: 'EU AI Act (Art. 50)',
-            scope: 'AI Transparency & Data Minimization',
-            rule: 'Sanitization runs locally by design; reduces the content sent to external AI models. Informational mapping, not a compliance determination.'
+            statute: 'EU AI Act (Art. 50 & Art. 17 / EN 18286:2026 QMS)',
+            scope: 'AI Transparency, Data Minimization & Harmonized QMS Governance',
+            rule: 'Sanitization runs locally by design; reduces the content sent to external AI models and supports Article 17 Quality Management System (EN 18286:2026) data governance controls. Informational mapping, not a compliance determination.'
         },
         {
             statute: 'GDPR (Art. 4, 25, 28, 32)',
@@ -233,6 +252,7 @@ export function buildAuditTelemetry(currentTokenMap = {}) {
         frameworksList: Array.from(frameworksSet),
         statutoryCitations,
         ipHoldings,
+        agenticProtocol,
         multimodalEgress: '0.00 Bytes (Solid Blackout & Burn-in Verified)'
     };
 }
@@ -541,7 +561,8 @@ export function sanitize(text, options = {}) {
     if (!isPro && text.length > limit) {
         if (shouldThrow) {
             const expiredPrefix = isExpiredKey ? `[PILOT/TRIAL EXPIRED: ${licenseCheck.error}] ` : '';
-            const errorMsg = `[PrivacyScrubber] ${expiredPrefix}Free Tier character limit exceeded (${limit.toLocaleString()} chars for profile '${profile}', received ${text.length.toLocaleString()} chars). Upgrade to Developer SDK ($299/mo) for unlimited throughput: https://privacyscrubber.com/pricing?tier=sdk&src=${isExpiredKey ? 'pilot_expired' : 'dev_limit'} (Run 'npx @privacyscrubber/sdk memo' for CISO approval memo)`;
+            const safeProf = encodeURIComponent(String(profile || 'General').toLowerCase());
+            const errorMsg = `[PrivacyScrubber] ${expiredPrefix}Free Tier character limit exceeded (${limit.toLocaleString()} chars for profile '${profile}', received ${text.length.toLocaleString()} chars). Upgrade to Developer SDK ($299/mo) for unlimited throughput: https://privacyscrubber.com/pricing?tier=sdk&profile=${safeProf}&src=${isExpiredKey ? 'pilot_expired' : 'dev_limit'} (Start 7-day B2B trial: 'npx @privacyscrubber/sdk trial' or 'npx @privacyscrubber/sdk memo' for CISO memo)`;
             throw new PrivacyScrubberLicenseError(errorMsg, {
                 tier: 'FREE',
                 currentLength: text.length,
@@ -622,12 +643,17 @@ export function sanitize(text, options = {}) {
             tier: tier,
             limit: limit,
             wasTruncated: wasTruncated,
+            truncated: wasTruncated,
             ...(isSeatTier && {
-                upgradeUrl: 'https://privacyscrubber.com/pricing?tier=sdk&src=seat_tier_mismatch',
+                upgradeUrl: `https://privacyscrubber.com/pricing?tier=sdk&profile=${encodeURIComponent(String(profile || 'General').toLowerCase())}&src=seat_tier_mismatch`,
+                trialUrl: `https://privacyscrubber.com/pricing?tier=sdk&trial=true&profile=${encodeURIComponent(String(profile || 'General').toLowerCase())}&src=seat_tier_mismatch`,
+                trialCommand: 'npx @privacyscrubber/sdk trial',
                 recommendation: `Your ${rawTier} license is valid for interactive browser seats only. Upgrade to Developer SDK ($299/mo) for unlimited backend server throughput: https://privacyscrubber.com/pricing?tier=sdk`
             }),
             ...(!isPro && !isSeatTier && {
-                upgradeUrl: 'https://privacyscrubber.com/pricing?tier=sdk&src=dev_upsell',
+                upgradeUrl: `https://privacyscrubber.com/pricing?tier=sdk&profile=${encodeURIComponent(String(profile || 'General').toLowerCase())}&src=dev_upsell`,
+                trialUrl: `https://privacyscrubber.com/pricing?tier=sdk&trial=true&profile=${encodeURIComponent(String(profile || 'General').toLowerCase())}&src=dev_upsell`,
+                trialCommand: 'npx @privacyscrubber/sdk trial',
                 recommendation: 'Upgrade to Developer SDK ($299/mo) for unlimited backend text processing, custom regex rules, and specialized compliance profiles.'
             })
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@privacyscrubber/sdk",
-  "version": "2.4.6",
+  "version": "2.4.7",
   "description": "In-process consumer privacy defense and pre-emptive PII interception SDK for Node.js, Next.js, and AI pipelines. Zero data loss, zero third parties, sub-millisecond in-memory execution.",
   "main": "index.cjs",
   "module": "index.js",