@kernel.chat/kbot 3.99.23 → 3.99.25

package/dist/agent.js

@@ -42,6 +42,7 @@ import { TelemetryEmitter } from './telemetry.js';
 import { loadSkills } from './skills-loader.js';
 import { getSelfAwarenessPrompt } from './self-awareness.js';
 import { buildMathGuardBlock } from './math-guard.js';
+import { buildIdentityGuardBlock } from './identity-guard.js';
 import { queueSignal, getCollectiveRecommendation, isCollectiveEnabled } from './collective.js';
 import { subscribeToBlackboard } from './agent-protocol.js';
 import { ActiveInferenceEngine } from './free-energy.js';
@@ -948,6 +949,7 @@ export async function runAgent(message, options = {}) {
     const skillsSnippet = loadSkills(process.cwd(), message);
     const selfAwarenessSnippet = getSelfAwarenessPrompt();
     const mathGuardSnippet = buildMathGuardBlock(message);
+    const identityGuardSnippet = buildIdentityGuardBlock(message);
     const memorySnippet = getMemoryPrompt();
     const learningContext = buildFullLearningContext(message, process.cwd());
     const synthesisSnippet = getSynthesisContext(8); // Three-tier memory: reflection layer insights
@@ -1067,7 +1069,7 @@ Always quote file paths that contain spaces. Never reference internal system nam
     const promptSections = createPromptSections({
         persona: PERSONA,
         matrixPrompt: matrixPrompt || undefined,
-        contextSnippet: (contextSnippet || '') + repoMapSnippet + graphSnippet + skillsSnippet + skillLibrarySnippet + '\n\n' + selfAwarenessSnippet + (mathGuardSnippet ? '\n\n' + mathGuardSnippet : '') || undefined,
+        contextSnippet: (contextSnippet || '') + repoMapSnippet + graphSnippet + skillsSnippet + skillLibrarySnippet + '\n\n' + selfAwarenessSnippet + (mathGuardSnippet ? '\n\n' + mathGuardSnippet : '') + (identityGuardSnippet ? '\n\n' + identityGuardSnippet : '') || undefined,
         memorySnippet: (memorySnippet || '') + getDreamPrompt(8) + reflectionSnippet || undefined,
         learningContext: ((learningContext || '') + (synthesisSnippet ? '\n\n' + synthesisSnippet : '') + (correctionsSnippet ? '\n\n' + correctionsSnippet : '')) || undefined,
     });
@@ -1329,10 +1331,15 @@ Always quote file paths that contain spaces. Never reference internal system nam
                 description: t.description,
                 input_schema: t.input_schema,
             }));
-            // Build messages with RLM-style context management
+            // Build messages with RLM-style context management. Guards (math,
+            // identity) are also injected into the system context for long-turn
+            // coherence, but we repeat them here because small local models
+            // (4B-class) ignore system context for deterministic queries.
+            const guardPreamble = mathGuardSnippet + (mathGuardSnippet && identityGuardSnippet ? '\n' : '') + identityGuardSnippet;
+            const guardedUserContent = guardPreamble ? guardPreamble + '\n' + message : message;
             const rawMessages = [
                 ...getPreviousMessages(memSession),
-                { role: 'user', content: message },
+                { role: 'user', content: guardedUserContent },
                 ...loopMessages,
             ];
             // Auto-compact conversation history — entropy-aware compression

package/dist/identity-guard.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Identity guard — injects ground-truth self-facts into the user message
+ * when the message is a self-query.
+ *
+ * Reality probes (2026-04-20) showed that with a small local model
+ * (gemma4:latest, 4B-class), "what version are you?" returns a different
+ * fabricated version number on each invocation — v3.99.14, v3.99.12, etc.
+ * The self-awareness system-context block exists and is injected, but
+ * small models ignore system context for identity queries.
+ *
+ * This module mirrors math-guard: detect the query in the USER message and
+ * prepend a ground-truth block to the context snippet. Local models respect
+ * user-message content more than system prompts, so the answer shows up
+ * directly in the input the model conditions on.
+ *
+ * Scope: version, product name, provider, model. Not capabilities — those
+ * belong to self-awareness.ts and its 200-token budget.
+ */
+export type IdentityQueryKind = 'version' | 'product' | 'provider' | 'model';
+export declare function detectIdentityQuery(message: string): Set<IdentityQueryKind>;
+/**
+ * Build the ground-truth preamble for a user message. Returns empty string
+ * when the message is not a self-query, so callers can concatenate
+ * unconditionally.
+ */
+export declare function buildIdentityGuardBlock(message: string): string;
+//# sourceMappingURL=identity-guard.d.ts.map

package/dist/identity-guard.js

@@ -0,0 +1,106 @@
+/**
+ * Identity guard — injects ground-truth self-facts into the user message
+ * when the message is a self-query.
+ *
+ * Reality probes (2026-04-20) showed that with a small local model
+ * (gemma4:latest, 4B-class), "what version are you?" returns a different
+ * fabricated version number on each invocation — v3.99.14, v3.99.12, etc.
+ * The self-awareness system-context block exists and is injected, but
+ * small models ignore system context for identity queries.
+ *
+ * This module mirrors math-guard: detect the query in the USER message and
+ * prepend a ground-truth block to the context snippet. Local models respect
+ * user-message content more than system prompts, so the answer shows up
+ * directly in the input the model conditions on.
+ *
+ * Scope: version, product name, provider, model. Not capabilities — those
+ * belong to self-awareness.ts and its 200-token budget.
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+import { getByokProvider, getProvider, getProviderModel } from './auth.js';
+const QUERY_PATTERNS = [
+    { re: /\bwhat\s+version\b/i, kinds: ['version', 'product'] },
+    { re: /\bwhich\s+version\b/i, kinds: ['version', 'product'] },
+    { re: /\byour\s+version\b/i, kinds: ['version'] },
+    { re: /\bversion\s+(are|is)\s+you\b/i, kinds: ['version'] },
+    { re: /\bwho\s+are\s+you\b/i, kinds: ['product', 'version'] },
+    { re: /\bwhat\s+are\s+you\b/i, kinds: ['product', 'provider', 'model'] },
+    { re: /\bwhat\s+(model|LLM)\b/i, kinds: ['model', 'provider'] },
+    { re: /\bwhich\s+(model|LLM)\b/i, kinds: ['model', 'provider'] },
+    { re: /\bwhat\s+provider\b/i, kinds: ['provider', 'model'] },
+];
+export function detectIdentityQuery(message) {
+    const kinds = new Set();
+    if (!message)
+        return kinds;
+    for (const p of QUERY_PATTERNS) {
+        if (p.re.test(message)) {
+            for (const k of p.kinds)
+                kinds.add(k);
+        }
+    }
+    return kinds;
+}
+function readPackageVersion() {
+    try {
+        const here = dirname(fileURLToPath(import.meta.url));
+        const pkgPath = join(here, '..', 'package.json');
+        const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+        return pkg.version ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+function collectFacts() {
+    const facts = {
+        version: readPackageVersion(),
+        product: '@kernel.chat/kbot',
+        provider: null,
+        model: null,
+    };
+    try {
+        const provId = getByokProvider();
+        facts.provider = getProvider(provId).name;
+        facts.model = getProviderModel(provId, 'default');
+    }
+    catch {
+        // Provider config unreadable — leave null; caller formats gracefully.
+    }
+    return facts;
+}
+/**
+ * Build the ground-truth preamble for a user message. Returns empty string
+ * when the message is not a self-query, so callers can concatenate
+ * unconditionally.
+ */
+export function buildIdentityGuardBlock(message) {
+    const kinds = detectIdentityQuery(message);
+    if (kinds.size === 0)
+        return '';
+    const facts = collectFacts();
+    const lines = [
+        '[IDENTITY GUARD — the user is asking about your identity. Use these values VERBATIM. Do not invent version numbers, providers, or model names.]',
+    ];
+    if (kinds.has('product') || kinds.has('version')) {
+        if (facts.version) {
+            lines.push(`  product: ${facts.product} v${facts.version}`);
+        }
+        else {
+            lines.push(`  product: ${facts.product}`);
+        }
+    }
+    if (kinds.has('version') && facts.version) {
+        lines.push(`  version: v${facts.version} (exact string — no other number is correct)`);
+    }
+    if (kinds.has('provider') && facts.provider) {
+        lines.push(`  provider: ${facts.provider}`);
+    }
+    if (kinds.has('model') && facts.model) {
+        lines.push(`  model: ${facts.model}`);
+    }
+    return lines.join('\n') + '\n';
+}
+//# sourceMappingURL=identity-guard.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kernel.chat/kbot",
-  "version": "3.99.23",
+  "version": "3.99.25",
   "description": "Open-source terminal AI agent. 787+ tools, 35 agents, 20 providers. Dreams, learns, watches your system. Controls your phone. Fully local, fully sovereign. MIT.",
   "type": "module",
   "repository": {