@compilr-dev/sdk 0.9.17 → 0.9.19

package/dist/agent.js

@@ -3,6 +3,7 @@
  */
 import { Agent, ContextManager, createSuggestTool, } from '@compilr-dev/agents';
 import { createCompressorHook } from './compressors/index.js';
+import { createInjectionDetectionHook } from '@compilr-dev/agents';
 import { resolveProvider } from './provider.js';
 import { resolvePreset } from './presets/index.js';
 import { assembleTools, deduplicateTools } from './tools.js';
@@ -242,13 +243,17 @@ class CompilrAgentImpl {
                 : [];
             mergedHooks.beforeLLM = [...existingHooks, ...capabilityHooks];
         }
-        // Add output compressor as the first afterTool hook (runs before delegation)
+        // Add output compressor and injection detection as afterTool hooks
         const existingAfterTool = config?.hooks?.afterTool
             ? Array.isArray(config.hooks.afterTool)
                 ? config.hooks.afterTool
                 : [config.hooks.afterTool]
             : [];
-        mergedHooks.afterTool = [createCompressorHook(), ...existingAfterTool];
+        mergedHooks.afterTool = [
+            createCompressorHook(),
+            createInjectionDetectionHook(), // Scan tool results for prompt injection
+            ...existingAfterTool,
+        ];
         // Build observation mask config — SDK defaults include platform tools
         const observationMask = config?.context?.observationMask !== false
             ? {

package/dist/entitlements/cache.js

@@ -65,7 +65,14 @@ export class EntitlementCache {
      */
     checkLimit(field, currentCount) {
         if (!this.entitlements) {
-            return { allowed: true }; // No entitlements loaded yet — allow (fail open during init)
+            // No entitlements loaded — use offline fallback limits (fail closed, not open)
+            const fallbackLimit = OFFLINE_FALLBACK_LIMITS[field];
+            if (fallbackLimit === UNLIMITED)
+                return { allowed: true };
+            if (currentCount >= fallbackLimit) {
+                return { allowed: false, reason: 'Entitlements not loaded', current: currentCount, limit: fallbackLimit };
+            }
+            return { allowed: true, current: currentCount, limit: fallbackLimit };
         }
         const limit = this.entitlements.limits[field];
         // Unlimited
@@ -169,7 +176,10 @@ export class EntitlementCache {
                     const age = Date.now() - parsed.fetchedAtWall;
                     if (age < this.offlineGraceMs) {
                         this.entitlements = parsed.response;
-                        this.fetchedAtMonotonic = process.hrtime.bigint(); // Reset monotonic to now
+                        // Compute monotonic offset from wall-clock age so isWithinOfflineGrace()
+                        // returns the correct remaining time (not a fresh 24h window on every restart)
+                        const ageNs = BigInt(age) * 1000000n;
+                        this.fetchedAtMonotonic = process.hrtime.bigint() - ageNs;
                         this.fetchedAtWall = parsed.fetchedAtWall;
                         return this.entitlements.limits;
                     }
@@ -180,6 +190,20 @@ export class EntitlementCache {
             }
         }
         // 3. Offline grace expired or no store — degrade to minimal fallback
+        // MUST set this.entitlements so checkLimit() doesn't fail open
+        this.entitlements = {
+            tier: 'free',
+            beta: false,
+            limits: OFFLINE_FALLBACK_LIMITS,
+            pendingPayment: false,
+            trialEndsAt: null,
+            features: {},
+            issuedAt: new Date().toISOString(),
+            userId: '',
+            signature: '',
+        };
+        this.fetchedAtMonotonic = process.hrtime.bigint();
+        this.fetchedAtWall = Date.now();
         return OFFLINE_FALLBACK_LIMITS;
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@compilr-dev/sdk",
-  "version": "0.9.17",
+  "version": "0.9.19",
   "description": "Universal agent runtime for building AI-powered applications",
   "type": "module",
   "main": "dist/index.js",
@@ -53,7 +53,7 @@
     "node": ">=22.0.0"
   },
   "dependencies": {
-    "@compilr-dev/agents": "^0.5.1",
+    "@compilr-dev/agents": "^0.5.4",
     "@compilr-dev/logger": "^0.1.0",
     "ajv": "^6.14.0"
   },