@o-lang/olang 1.2.4 → 1.2.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@o-lang/olang",
-  "version": "1.2.4",
+  "version": "1.2.6",
   "author": "Olalekan Ogundipe <info@workfily.com>",
   "description": "O-Lang: A governance language for user-directed, rule-enforced agent workflows",
   "main": "./src/index.js",

package/src/runtime/RuntimeAPI.js

@@ -1,4 +1,3 @@
-// src/runtime/RuntimeAPI.js
 const fs = require('fs');
 const path = require('path');
 
@@ -332,6 +331,40 @@ class RuntimeAPI {
     });
   }
 
+  // -----------------------------
+  // ✅ KERNEL-LEVEL LLM HALLUCINATION PREVENTION (ZERO WORKFLOW CHANGES)
+  // -----------------------------
+  _validateLLMOutput(output, actionContext) {
+    if (!output || typeof output !== 'string') return { passed: true };
+
+    // 🔑 CRITICAL: Extract ONLY allowed capabilities from workflow allowlist
+    const allowedCapabilities = Array.from(this.allowedResolvers)
+      .filter(name => !name.startsWith('llm-') && name !== 'builtInMathResolver')
+      .map(name => name.replace('@o-lang/', '').replace(/-resolver$/, ''));
+
+    // 🔒 Block capability hallucinations (claims to do things outside allowlist)
+    const forbiddenPatterns = [
+      { pattern: /\b(transfer|send|wire|pay|withdraw|deposit)\b/i, capability: 'transfer' },
+      { pattern: /\b(create|open|close|delete)\s+(account|profile)\b/i, capability: 'account_management' },
+      { pattern: /\bI (can|will|am able to)\s+(transfer|pay|send)/i, capability: 'unauthorized_action' }
+    ];
+
+    for (const { pattern, capability } of forbiddenPatterns) {
+      if (pattern.test(output)) {
+        // ✅ Only block if capability NOT in allowlist
+        if (!allowedCapabilities.some(c => c.includes(capability) || c.includes('transfer'))) {
+          return {
+            passed: false,
+            reason: `Hallucinated "${capability}" capability (not in workflow allowlist: ${allowedCapabilities.join(', ') || 'none'})`,
+            detected: output.match(pattern)?.[0] || 'unknown'
+          };
+        }
+      }
+    }
+
+    return { passed: true };
+  }
+
   // -----------------------------
   // ✅ CRITICAL FIX: Resolver output unwrapping helper
   // -----------------------------
@@ -538,7 +571,7 @@ class RuntimeAPI {
         }
       });
       if (!hasDocs) {
-        errorMessage += `    → Visit https://www.npmjs.com/search?q=%40o-lang   for resolver packages\n`;  // ✅ FIXED
+        errorMessage += `    → Visit https://www.npmjs.com/search?q=%40o-lang     for resolver packages\n`;  // ✅ FIXED
       }
 
       errorMessage += `\n🛑 Workflow halted to prevent unsafe data propagation to LLMs.`;
@@ -552,7 +585,7 @@ class RuntimeAPI {
         break;
       }
 
-       case 'action': {
+    case 'action': {
   // 🔒 Interpolate workflow variables first
   let action = this._safeInterpolate(
     step.actionRaw,
@@ -600,6 +633,60 @@ class RuntimeAPI {
   const rawResult = await runResolvers(action);
   const unwrapped = this._unwrapResolverResult(rawResult);
 
+// 🔒 KERNEL-ENFORCED: Block LLM hallucinations BEFORE saving to context
+// Detect LLM resolver by action pattern (comprehensive coverage)
+const isLLMAction = action.toLowerCase().includes('groq') || 
+                    action.toLowerCase().includes('openai') ||
+                    action.toLowerCase().includes('anthropic') ||
+                    action.toLowerCase().includes('claude') ||
+                    action.toLowerCase().includes('gpt') ||
+                    action.toLowerCase().includes('gemini') ||
+                    action.toLowerCase().includes('google') ||
+                    action.toLowerCase().includes('llama') ||
+                    action.toLowerCase().includes('meta') ||
+                    action.toLowerCase().includes('mistral') ||
+                    action.toLowerCase().includes('mixtral') ||
+                    action.toLowerCase().includes('cohere') ||
+                    action.toLowerCase().includes('huggingface') ||
+                    action.toLowerCase().includes('hugging-face') ||
+                    action.toLowerCase().includes('together') ||
+                    action.toLowerCase().includes('perplexity') ||
+                    action.toLowerCase().includes('fireworks') ||
+                    action.toLowerCase().includes('bedrock') ||
+                    action.toLowerCase().includes('azure') ||
+                    action.toLowerCase().includes('ollama') ||
+                    action.toLowerCase().includes('replicate') ||
+                    action.toLowerCase().includes('deepseek') ||
+                    action.toLowerCase().includes('qwen') ||
+                    action.toLowerCase().includes('falcon') ||
+                    action.toLowerCase().includes('phi') ||
+                    action.toLowerCase().includes('gemma') ||
+                    action.toLowerCase().includes('stablelm') ||
+                    action.toLowerCase().includes('yi') ||
+                    action.toLowerCase().includes('dbrx') ||
+                    action.toLowerCase().includes('command') ||
+                    action.toLowerCase().includes('llm');  // Catch-all fallback
+  
+  // Extract actual text from resolver output (your llm-groq returns { response: "...", ... })
+  const llmText = unwrapped?.response ||          // ✅ Primary field for @o-lang/llm-groq
+                  unwrapped?.text || 
+                  unwrapped?.content || 
+                  unwrapped?.answer || 
+                  (typeof unwrapped === 'string' ? unwrapped : null);
+  
+  if (isLLMAction && typeof llmText === 'string') {
+    const safetyCheck = this._validateLLMOutput(llmText, action);
+    if (!safetyCheck.passed) {
+      throw new Error(
+        `[O-Lang SAFETY] LLM hallucinated unauthorized capability:\n` +
+        `  → Detected: "${safetyCheck.detected}"\n` +
+        `  → Reason: ${safetyCheck.reason}\n` +
+        `  → Workflow allowlist: ${Array.from(this.allowedResolvers).join(', ')}\n` +
+        `\n🛑 Halting to prevent deceptive user experience.`
+      );
+    }
+  }
+
   if (step.saveAs) {
     this.context[step.saveAs] = unwrapped;
   }
@@ -627,6 +714,20 @@ class RuntimeAPI {
   const rawResult = await runResolvers(`Action ${target}`);
   const unwrapped = this._unwrapResolverResult(rawResult);
 
+  // 🔒 KERNEL-ENFORCED: Block LLM hallucinations BEFORE saving to context
+  if (typeof unwrapped?.output === 'string') {
+    const safetyCheck = this._validateLLMOutput(unwrapped.output, target);
+    if (!safetyCheck.passed) {
+      throw new Error(
+        `[O-Lang SAFETY] LLM hallucinated unauthorized capability:\n` +
+        `  → Detected: "${safetyCheck.detected}"\n` +
+        `  → Reason: ${safetyCheck.reason}\n` +
+        `  → Workflow allowlist: ${Array.from(this.allowedResolvers).join(', ')}\n` +
+        `\n🛑 Halting to prevent deceptive user experience.`
+      );
+    }
+  }
+
   if (step.saveAs) this.context[step.saveAs] = unwrapped;
   break;
 }