@voicelayer/sdk 0.1.4 → 0.1.5

package/dist/index.js

@@ -9265,15 +9265,24 @@ function partialMask(value) {
   const tail = trimmed.length >= 8 ? 4 : 2;
   return "*".repeat(trimmed.length - tail) + trimmed.slice(-tail);
 }
+var DEFAULT_SAFE_RESPONSE = "Sorry, I lost you for a second there. Go ahead \u2014 I'm listening.";
 var InputGuard = class _InputGuard {
   // Classic prompt-injection patterns. ~0.2ms regex.
+  //
+  // Every alternative is word-bounded — an unanchored /DAN/i once matched the
+  // caller NAME "Jordan" mid-call and spoke the safe-fallback at an innocent
+  // caller (found live, 2026-07-24). "DAN" is an acronym jailbreak: it must
+  // match as a standalone word next to jailbreak context words, not as a
+  // substring of Jordan/sedan/dance. Same hardening for the phrase patterns:
+  // "act as" only fires with a persona object after it ("act as a/an/if"),
+  // not inside "exact as" or a bare "act as" fragment.
   static INJECTION = [
-    /ignore (previous|prior|all) instructions/i,
-    /you are now|pretend you are|act as/i,
-    /DAN|developer mode|unrestricted/i,
-    /skip (this step|verification|confirmation)/i,
-    /transfer me (without|directly|now)/i,
-    /system prompt|reveal your (rules|instructions|prompt)/i
+    /\bignore (previous|prior|all) instructions\b/i,
+    /\byou are now\b|\bpretend (you are|to be)\b|\bact as (a|an|if)\b/i,
+    /\bDAN mode\b|\bjailbreak\b|\bdeveloper mode\b|\bunrestricted mode\b/i,
+    /\bskip (this step|verification|confirmation)\b/i,
+    /\btransfer me (without|directly|now)\b/i,
+    /\bsystem prompt\b|\breveal your (rules|instructions|prompt)\b/i
   ];
   check(utterance) {
     for (const pattern of _InputGuard.INJECTION) {
@@ -9285,7 +9294,7 @@ var InputGuard = class _InputGuard {
           reason: "injection_pattern",
           // Keep the response neutral and redirect back to the insured's need
           // without revealing detection details (§B.2).
-          safeResponse: "I'm here to help with your claim. Please tell me what happened, and I'll keep documenting the details."
+          safeResponse: DEFAULT_SAFE_RESPONSE
         };
       }
     }
@@ -9763,7 +9772,7 @@ var SecurityPrimitive = class extends BasePrimitive {
       this.recordBudget(ctx.callId, nowUs() - t0);
       return {
         kind: "blocked",
-        safeResponse: inputDecision.safeResponse ?? mergedInput.safeResponse ?? "I'm here to help with your claim. Please tell me what happened, and I'll keep documenting the details."
+        safeResponse: inputDecision.safeResponse ?? mergedInput.safeResponse ?? DEFAULT_SAFE_RESPONSE
       };
     }
     const effectiveUtterance = inputDecision.rewrittenText ?? mergedInput.sanitizedText ?? utterance;
@@ -9790,7 +9799,7 @@ var SecurityPrimitive = class extends BasePrimitive {
       this.recordBudget(ctx.callId, nowUs() - t0);
       return {
         kind: "blocked",
-        safeResponse: promptDecision.safeResponse ?? "I'm here to help with your claim. Please tell me what happened, and I'll keep documenting the details."
+        safeResponse: promptDecision.safeResponse ?? DEFAULT_SAFE_RESPONSE
       };
     }
     this.recordBudget(ctx.callId, nowUs() - t0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voicelayer/sdk",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Official SDK for VoiceLayer — define, run, and orchestrate voice AI agents on the VoiceLayer control plane.",
   "license": "Apache-2.0",
   "author": "VoiceLayer",
@@ -79,16 +79,16 @@
     "tsup": "^8.5.1",
     "typescript": "^5.6.0",
     "vitest": "^4.1.5",
-    "@voicelayer/observability": "0.1.0",
     "@voicelayer/contracts": "0.1.0",
+    "@voicelayer/observability": "0.1.0",
     "@voicelayer/primitive-audio-experience": "0.1.0",
-    "@voicelayer/primitive-audio-routing": "0.1.0",
     "@voicelayer/primitive-process-schema": "0.1.0",
     "@voicelayer/primitive-security": "0.1.0",
     "@voicelayer/agents-plugin-deepgram": "1.0.0",
+    "@voicelayer/agents-plugin-openai": "1.0.0",
     "@voicelayer/agents-plugin-livekit": "1.0.0",
     "@voicelayer/agents-plugin-silero": "1.0.0",
-    "@voicelayer/agents-plugin-openai": "1.0.0"
+    "@voicelayer/primitive-audio-routing": "0.1.0"
   },
   "scripts": {
     "typecheck": "tsc -b --pretty false",