@o-lang/olang 1.2.29 → 1.2.30

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@o-lang/olang",
-  "version": "1.2.29",
+  "version": "1.2.30",
   "author": "Olalekan Ogundipe <info@olang.cloud>",
   "description": "O-Lang: A governance language for user-directed, rule-enforced agent workflows",
   "main": "./src/runtime/index.js",

package/src/runtime/RuntimeAPI.js

@@ -3,7 +3,7 @@ const path = require('path');
 const crypto = require('crypto'); // ✅ CRYPTOGRAPHIC AUDIT LOGS
 
 // ✅ O-Lang Kernel Version (Safety Logic & Governance Rules)
-const KERNEL_VERSION = '1.2.20-alpha'; // 🔁 Update when safety rules change
+const KERNEL_VERSION = '1.2.30-alpha'; // 🔁 Update when safety rules change
 
 class RuntimeAPI {
   constructor({ verbose = false } = {}) {
@@ -878,41 +878,57 @@ class RuntimeAPI {
     if (!output || typeof output !== 'string') return { passed: true };
 
     // ── __verified_intent takes priority ──────────────────────────────────────
-    // If the workflow author has defined intent rules, use those exclusively.
-    // This makes governance dynamic — skip hardcoded patterns entirely.
-    const intent = this.context.__verified_intent;
-    if (intent) {
-      if (intent.prohibited_actions && Array.isArray(intent.prohibited_actions)) {
-        const lower = output.toLowerCase();
-        for (const action of intent.prohibited_actions) {
-          if (lower.includes(action.toLowerCase())) {
-            return {
-              passed: false,
-              reason: `Output violates prohibited action "${action}" defined in __verified_intent`,
-              detected: action,
-              language: 'multi'
-            };
-          }
-        }
+const intent = this.context.__verified_intent;
+if (intent) {
+  if (intent.prohibited_actions && Array.isArray(intent.prohibited_actions)) {
+    const lower = output.toLowerCase();
+    for (const action of intent.prohibited_actions) {
+      if (lower.includes(action.toLowerCase())) {
+        return {
+          passed: false,
+          reason: `Output violates prohibited action "${action}" defined in __verified_intent`,
+          detected: action,
+          language: 'multi'
+        };
       }
+    }
+  }
 
-      if (intent.prohibited_topics && Array.isArray(intent.prohibited_topics)) {
-        const lower = output.toLowerCase();
-        for (const topic of intent.prohibited_topics) {
-          if (lower.includes(topic.toLowerCase())) {
-            return {
-              passed: false,
-              reason: `Output violates prohibited topic "${topic}" defined in __verified_intent`,
-              detected: topic,
-              language: 'multi'
-            };
-          }
+  if (intent.prohibited_topics && Array.isArray(intent.prohibited_topics)) {
+    for (const topic of intent.prohibited_topics) {
+      const isRegex = typeof topic === 'object' && topic.pattern;
+      let matched = false;
+      let detected = '';
+
+      if (isRegex) {
+        try {
+          const re = new RegExp(topic.pattern, topic.flags || 'i');
+          const match = output.match(re);
+          matched = !!match;
+          detected = match ? match[0] : topic.pattern;
+        } catch (e) {
+          this.addWarning(`Invalid prohibited_topic regex: "${topic.pattern}" — ${e.message}`);
+          continue;
         }
+      } else {
+        matched = output.toLowerCase().includes(topic.toLowerCase());
+        detected = topic;
       }
 
-      // __verified_intent present and passed — skip hardcoded patterns
-      return { passed: true };
+      if (matched) {
+        return {
+          passed: false,
+          reason: `Output violates prohibited topic "${isRegex ? topic.pattern : topic}" defined in __verified_intent`,
+          detected,
+          language: 'multi'
+        };
+      }
     }
+  }
+
+  // __verified_intent present and passed — skip hardcoded patterns
+  return { passed: true };
+}
 
     // ── No __verified_intent — fall through to hardcoded patterns ─────────────
     // 🔑 Extract allowed capabilities from workflow allowlist