pwn 0.5.615 → 0.5.617

data/documentation/diagrams/dot/code-scanning-sast.dot

@@ -1,21 +1,49 @@
-digraph "PWN Code Scanning & SAST" {
-  rankdir=LR;
-  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+digraph "PWN_SAST" {
+  graph [
+    label=<<B>PWN::SAST — Static Application Security Testing</B><BR/><FONT POINT-SIZE="11" COLOR="#94a3b8">48 rules · multi-language · bin/pwn_sast · Reports::SAST</FONT>>,
+    labelloc=t, fontsize=20, fontname="Helvetica",
+    rankdir=LR, splines=spline, nodesep=0.4, ranksep=1.2,
+    bgcolor="#0f172a", fontcolor="#e2e8f0", pad=0.6, newrank=true
+  ];
+  node [fontname="Helvetica", fontsize=10, style="filled,rounded",
+        shape=box, penwidth=1.3, color="#334155", fontcolor="#0f172a"];
+  edge [fontname="Helvetica", fontsize=9, color="#94a3b8",
+        fontcolor="#cbd5e1", penwidth=1.3, arrowsize=0.8];
 
-  Source [label="Source Code\n(Git, Local Dir)", shape=box];
-  SAST [label="PWN::SAST\n(analyze, testgen)", shape=ellipse, fillcolor=lightgreen];
-  Static [label="Static Analysis\n(RuboCop, Brakeman,\nSemgrep, custom rules)"];
-  TestGen [label="Test Case Gen\n(unit/integration fuzz)"];
-  Findings [label="Vulns / Findings\n(CWE mapped)", shape=box];
-  Reports [label="PWN::Reports\n(generate PDF/MD/JSON)", shape=ellipse, fillcolor=lightgreen];
-  REPL [label="REPL / Agent\n(inspect findings)"];
+  Src [label="📁  Source Tree\ngit clone / repo", fillcolor="#7dd3fc"];
 
-  Source -> SAST;
-  SAST -> Static;
-  SAST -> TestGen;
-  Static -> Findings;
-  TestGen -> Findings;
-  Findings -> Reports;
-  Reports -> REPL;
-  REPL -> Source [label="patch & re-scan"];
+  subgraph cluster_engine {
+    label="SAST Engine"; fontcolor="#a7f3d0"; style=rounded;
+    color="#047857"; bgcolor="#022c22";
+    Factory [label="SAST::Factory\nrule loader",       fillcolor="#6ee7b7"];
+    TCE     [label="TestCaseEngine\ngenerate probes",   fillcolor="#6ee7b7"];
+  }
+  subgraph cluster_rules {
+    label="Rule Families (48)"; fontcolor="#fde68a"; style=rounded;
+    color="#a16207"; bgcolor="#422006";
+    Cmd  [label="cmd_execution_*\njava · py · ruby · go · scala", fillcolor="#fcd34d"];
+    Web  [label="csrf · redirect · redos\ninner/outer_html · location_hash", fillcolor="#fcd34d"];
+    Cryp [label="md5 · ssl · keystore\npadding_oracle · private_key", fillcolor="#fcd34d"];
+    Data [label="sql · eval · deserial_java\nlog4j · php_type_juggling", fillcolor="#fcd34d"];
+    Mem  [label="banned_c_calls\nuse_after_free",                       fillcolor="#fcd34d"];
+  }
+  subgraph cluster_out {
+    label="Output"; fontcolor="#ddd6fe"; style=rounded;
+    color="#6d28d9"; bgcolor="#2e1065";
+    Report [label="Reports::SAST\nHTML + JSON",   fillcolor="#c4b5fd"];
+    DD     [label="DefectDojo\nimport / reimport", fillcolor="#c4b5fd"];
+  }
+
+  Src -> Factory [color="#38bdf8"];
+  Src -> TCE     [color="#38bdf8"];
+  Factory -> Cmd  [color="#f59e0b"];
+  Factory -> Web  [color="#f59e0b"];
+  Factory -> Cryp [color="#f59e0b"];
+  TCE     -> Data [color="#f59e0b"];
+  TCE     -> Mem  [color="#f59e0b"];
+  Cmd  -> Report [color="#a78bfa"];
+  Web  -> Report [color="#a78bfa"];
+  Cryp -> Report [color="#a78bfa"];
+  Data -> DD     [color="#a78bfa"];
+  Mem  -> DD     [color="#a78bfa"];
 }

data/documentation/diagrams/dot/cron-scheduling.dot

@@ -0,0 +1,40 @@
+digraph "PWN_Cron" {
+  graph [
+    label=<<B>PWN::Cron — Scheduled Autonomous Jobs</B><BR/><FONT POINT-SIZE="11" COLOR="#94a3b8">prompt · ruby · script → jobs.yml → crontab → pwn-ai</FONT>>,
+    labelloc=t, fontsize=20, fontname="Helvetica",
+    rankdir=LR, splines=spline, nodesep=0.5, ranksep=1.3,
+    bgcolor="#0f172a", fontcolor="#e2e8f0", pad=0.6, newrank=true
+  ];
+  node [fontname="Helvetica", fontsize=11, style="filled,rounded",
+        shape=box, penwidth=1.4, color="#334155", fontcolor="#0f172a"];
+  edge [fontname="Helvetica", fontsize=9, color="#94a3b8",
+        fontcolor="#cbd5e1", penwidth=1.3, arrowsize=0.8];
+
+  Create [label="cron_create\nname · schedule\nprompt | ruby | script", fillcolor="#7dd3fc"];
+  Jobs   [label="~/.pwn/cron/jobs.yml", shape=cylinder, fillcolor="#fcd34d"];
+  Crontab[label="system crontab\n(install_crontab: true)", fillcolor="#fda4af"];
+  Runner [label="PWN::Cron.run(id)", fillcolor="#c4b5fd"];
+
+  subgraph cluster_kinds {
+    label="Job Kinds"; fontcolor="#a7f3d0"; style=rounded;
+    color="#047857"; bgcolor="#022c22"; penwidth=2;
+    Prompt [label=":prompt\n→ pwn-ai one-shot", fillcolor="#6ee7b7"];
+    Ruby   [label=":ruby\n→ TOPLEVEL_BINDING.eval", fillcolor="#6ee7b7"];
+    Script [label=":script\n→ exec external file", fillcolor="#6ee7b7"];
+  }
+  {rank=same; Prompt; Ruby; Script}
+
+  Log [label="~/.pwn/cron/log/<id>.log\nlast_run · last_status", shape=cylinder, fillcolor="#fcd34d"];
+
+  Create  -> Jobs    [label="write", color="#38bdf8"];
+  Create  -> Crontab [label="append", color="#fb7185"];
+  Crontab -> Runner  [label="fire on schedule", color="#fb7185", penwidth=2];
+  Jobs    -> Runner  [label="load job", color="#f59e0b"];
+  Runner  -> Prompt  [color="#34d399"];
+  Runner  -> Ruby    [color="#34d399"];
+  Runner  -> Script  [color="#34d399"];
+  Prompt  -> Log     [color="#f59e0b"];
+  Ruby    -> Log     [color="#f59e0b"];
+  Script  -> Log     [color="#f59e0b"];
+  Log     -> Jobs    [label="update status", style=dashed, color="#fbbf24", constraint=false];
+}

data/documentation/diagrams/dot/driver-framework.dot

@@ -1,17 +1,39 @@
-digraph "PWN Driver Framework" {
-  rankdir=LR;
-  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+digraph "PWN_Driver" {
+  graph [
+    label=<<B>Driver Anatomy — bin/pwn_*</B><BR/><FONT POINT-SIZE="11" COLOR="#94a3b8">52 shipped drivers · thin CLI over PWN::Plugins</FONT>>,
+    labelloc=t, fontsize=20, fontname="Helvetica",
+    rankdir=LR, splines=spline, nodesep=0.5, ranksep=1.3,
+    bgcolor="#0f172a", fontcolor="#e2e8f0", pad=0.6, newrank=true
+  ];
+  node [fontname="Helvetica", fontsize=10, style="filled,rounded",
+        shape=box, penwidth=1.3, color="#334155", fontcolor="#0f172a"];
+  edge [fontname="Helvetica", fontsize=9, color="#94a3b8",
+        fontcolor="#cbd5e1", penwidth=1.3, arrowsize=0.8];
 
-  Parser [label="PWN::Driver::Parser\n(OptionParser + auto_opts)"];
-  Script [label="Driver Script\n(bin/pwn_* or custom)"];
-  PWNLoad [label="require 'pwn'\nFull namespace"];
-  Orchestrate [label="Orchestration Logic\n(plugins + AI + loops)"];
-  Outputs [label="Reports, Logs,\nFindings"];
+  Sh [label="$ pwn_burp_suite_pro_active_scan \\ \n    -t https://target -o out/", fillcolor="#7dd3fc"];
 
-  Script -> Parser;
-  Parser -> Script;
-  Script -> PWNLoad;
-  PWNLoad -> Orchestrate;
-  Orchestrate -> Outputs;
-  Script -> "standalone | cron | pwn-ai";
+  subgraph cluster_d {
+    label="Driver Body"; fontcolor="#a7f3d0"; style=rounded;
+    color="#047857"; bgcolor="#022c22";
+    Opt  [label="OptionParser\nARGV → opts{}", fillcolor="#6ee7b7"];
+    Req  [label="require 'pwn'",               fillcolor="#6ee7b7"];
+    Call [label="PWN::Plugins::X.method(opts)", fillcolor="#6ee7b7"];
+  }
+  {rank=same; Opt; Req; Call}
+
+  subgraph cluster_o {
+    label="Output"; fontcolor="#ddd6fe"; style=rounded;
+    color="#6d28d9"; bgcolor="#2e1065";
+    Std [label="STDOUT / STDERR", fillcolor="#c4b5fd"];
+    Rep [label="PWN::Reports",    fillcolor="#c4b5fd"];
+    Ex  [label="exit code",       fillcolor="#c4b5fd"];
+  }
+
+  Sh -> Opt [color="#38bdf8"];
+  Sh -> Req [color="#38bdf8"];
+  Opt -> Call [color="#34d399"];
+  Req -> Call [color="#34d399"];
+  Call -> Std [color="#a78bfa"];
+  Call -> Rep [color="#a78bfa"];
+  Call -> Ex  [color="#a78bfa"];
 }

data/documentation/diagrams/dot/extrospection-world-awareness.dot

@@ -0,0 +1,55 @@
+digraph "PWN_Extrospection" {
+  graph [
+    label=<<B>PWN::AI::Agent::Extrospection — World Awareness</B><BR/><FONT POINT-SIZE="11" COLOR="#94a3b8">snapshot · drift · observe · intel · correlate</FONT>>,
+    labelloc=t, fontsize=20, fontname="Helvetica",
+    rankdir=LR, splines=spline, nodesep=0.5, ranksep=1.3,
+    bgcolor="#0f172a", fontcolor="#e2e8f0", pad=0.6, newrank=true
+  ];
+  node [fontname="Helvetica", fontsize=11, style="filled,rounded",
+        shape=box, penwidth=1.4, color="#334155", fontcolor="#0f172a"];
+  edge [fontname="Helvetica", fontsize=9, color="#94a3b8",
+        fontcolor="#cbd5e1", penwidth=1.3, arrowsize=0.8];
+
+  /* col 0 ─ world */
+  subgraph cluster_world {
+    label="Outside World"; fontcolor="#fecaca"; style="rounded,dashed";
+    color="#b91c1c"; bgcolor="#450a0a";
+    Host  [label="host\nuname · distro · arch",     fillcolor="#fda4af"];
+    Net   [label="net\ninterfaces · listening ports", fillcolor="#fda4af"];
+    Tool  [label="toolchain\nnmap · burp · msf · git", fillcolor="#fda4af"];
+    Repo  [label="repo\nHEAD · dirty · branch",      fillcolor="#fda4af"];
+    Feeds [label="intel feeds\nNVD · CIRCL · Exploit-DB", fillcolor="#fda4af"];
+  }
+  {rank=same; Host; Net; Tool; Repo; Feeds}
+
+  /* col 1 ─ engine */
+  subgraph cluster_eng {
+    label="Extrospection Engine"; fontcolor="#fde68a"; style=rounded;
+    color="#a16207"; bgcolor="#422006"; penwidth=2;
+    Snap  [label="extro_snapshot\nfingerprint host",   fillcolor="#fcd34d"];
+    Drift [label="extro_drift\ndelta vs baseline",     fillcolor="#fcd34d"];
+    Obs   [label="extro_observe\nrecord recon fact",   fillcolor="#fcd34d"];
+    Intel [label="extro_intel\nCVE / exploit lookup",  fillcolor="#fcd34d"];
+    Corr  [label="extro_correlate\njoin with Learning", fillcolor="#fcd34d", penwidth=2];
+  }
+  {rank=same; Snap; Drift; Obs; Intel; Corr}
+
+  /* col 2 ─ store + prompt */
+  Store  [label="~/.pwn/\nextrospection.json", shape=cylinder, fillcolor="#fcd34d"];
+  Prompt [label="EXTROSPECTION\nblock in system prompt", fillcolor="#c4b5fd"];
+  {rank=same; Store; Prompt}
+
+  Host  -> Snap  [color="#fb7185"];
+  Net   -> Snap  [color="#fb7185"];
+  Tool  -> Drift [color="#fb7185"];
+  Repo  -> Drift [color="#fb7185"];
+  Feeds -> Intel [color="#fb7185"];
+
+  Snap  -> Store [color="#f59e0b"];
+  Drift -> Store [color="#f59e0b"];
+  Obs   -> Store [color="#f59e0b"];
+  Intel -> Store [label="record:true", color="#f59e0b"];
+  Corr  -> Prompt[label="findings", color="#a78bfa", penwidth=2];
+  Store -> Prompt[label="inject", style=dashed, color="#fbbf24"];
+  Store -> Corr  [style=dashed, color="#fbbf24", constraint=false];
+}

data/documentation/diagrams/dot/fuzzing-workflow.dot

@@ -1,27 +1,47 @@
-digraph "PWN Fuzzing Workflows" {
-  rankdir=LR;
-  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+digraph "PWN_Fuzz" {
+  graph [
+    label=<<B>Fuzzing with PWN</B><BR/><FONT POINT-SIZE="11" COLOR="#94a3b8">Plugins::Fuzz · Sock · Packet · Reports::Fuzz</FONT>>,
+    labelloc=t, fontsize=20, fontname="Helvetica",
+    rankdir=LR, splines=spline, nodesep=0.45, ranksep=1.2,
+    bgcolor="#0f172a", fontcolor="#e2e8f0", pad=0.6, newrank=true
+  ];
+  node [fontname="Helvetica", fontsize=10, style="filled,rounded",
+        shape=box, penwidth=1.3, color="#334155", fontcolor="#0f172a"];
+  edge [fontname="Helvetica", fontsize=9, color="#94a3b8",
+        fontcolor="#cbd5e1", penwidth=1.3, arrowsize=0.8];
 
-  Input [label="Input Corpus\n(Seeds, Mutators)", shape=box];
-  FuzzProto [label="Protocol Fuzz\n(pwn_fuzz_net_app_proto)"];
-  FuzzFile [label="File / Format Fuzz"];
-  FuzzNet [label="Network Service Fuzz"];
-  FuzzWeb [label="Web App Fuzz\n(XSS vectors, etc.)"];
-  PWNfuzz [label="PWN::Plugins::Fuzz", shape=ellipse];
-  Monitor [label="Monitor Crashes\n(PS, logging, core dumps)"];
-  Corpus [label="Interesting Inputs\n(saved for replay)", shape=cylinder];
-  Crash [label="Crash Analysis\n(identify root cause)", shape=ellipse];
+  Seed [label="Seed corpus /\nprotocol grammar", fillcolor="#7dd3fc"];
 
-  Input -> PWNfuzz;
-  PWNfuzz -> FuzzProto;
-  PWNfuzz -> FuzzFile;
-  PWNfuzz -> FuzzNet;
-  PWNfuzz -> FuzzWeb;
-  FuzzProto -> Monitor;
-  FuzzFile -> Monitor;
-  FuzzNet -> Monitor;
-  FuzzWeb -> Monitor;
-  Monitor -> Corpus;
-  Monitor -> Crash;
-  Crash -> Input [label="refine mutators"];
+  subgraph cluster_gen {
+    label="Generate"; fontcolor="#a7f3d0"; style=rounded;
+    color="#047857"; bgcolor="#022c22";
+    Fuzz [label="Plugins::Fuzz\nmutate · generate", fillcolor="#6ee7b7"];
+    Char [label="Plugins::Char\nencodings",         fillcolor="#6ee7b7"];
+  }
+  subgraph cluster_deliver {
+    label="Deliver"; fontcolor="#fde68a"; style=rounded;
+    color="#a16207"; bgcolor="#422006";
+    Sock   [label="Plugins::Sock\nTCP/UDP",           fillcolor="#fcd34d"];
+    Packet [label="Plugins::Packet\nraw L2/L3",       fillcolor="#fcd34d"];
+    NetApp [label="pwn_fuzz_net_app_proto\nCLI driver", fillcolor="#fcd34d"];
+  }
+  subgraph cluster_mon {
+    label="Monitor"; fontcolor="#fecaca"; style=rounded;
+    color="#b91c1c"; bgcolor="#450a0a";
+    PS  [label="Plugins::PS\nprocess health", fillcolor="#fda4af"];
+    Log [label="Plugins::Log\ncrash detect",   fillcolor="#fda4af"];
+  }
+  Report [label="Reports::Fuzz\ncrash triage", fillcolor="#7dd3fc"];
+
+  Seed -> Fuzz [color="#38bdf8"];
+  Seed -> Char [color="#38bdf8"];
+  Fuzz -> Sock   [color="#f59e0b"];
+  Fuzz -> Packet [color="#f59e0b"];
+  Char -> NetApp [color="#f59e0b"];
+  Sock   -> PS  [color="#fb7185"];
+  Packet -> Log [color="#fb7185"];
+  NetApp -> Log [color="#fb7185"];
+  PS  -> Report [color="#38bdf8"];
+  Log -> Report [color="#38bdf8"];
+  Log -> Fuzz [label="minimise + reseed", style=dashed, color="#fbbf24", constraint=false];
 }

data/documentation/diagrams/dot/history-to-drivers.dot

@@ -1,20 +1,34 @@
-digraph "History Command to Driver Generation" {
-  rankdir=TB;
-  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+digraph "PWN_HistToDriver" {
+  graph [
+    label=<<B>From REPL History → Reusable Driver / Skill</B><BR/><FONT POINT-SIZE="11" COLOR="#94a3b8">explore → history → bin/pwn_* driver → distill_skill</FONT>>,
+    labelloc=t, fontsize=20, fontname="Helvetica",
+    rankdir=LR, splines=spline, nodesep=0.5, ranksep=1.2,
+    bgcolor="#0f172a", fontcolor="#e2e8f0", pad=0.6, newrank=true
+  ];
+  node [fontname="Helvetica", fontsize=10, style="filled,rounded",
+        shape=box, penwidth=1.3, color="#334155", fontcolor="#0f172a"];
+  edge [fontname="Helvetica", fontsize=9, color="#94a3b8",
+        fontcolor="#cbd5e1", penwidth=1.3, arrowsize=0.8];
 
-  User [label="User in REPL"];
-  Pry [label="PWN REPL\n(history, edit, save)"];
-  HistoryFile [label="~/.pry_history\n(raw commands)", shape=cylinder, fillcolor=lightyellow];
-  Script [label="Prototype Script\n(.rb or bin/)", shape=box];
-  Driver [label="PWN Driver\n(/opt/pwn/bin/ example\nor PWN::Driver::Parser)", shape=box];
-  Skill [label="Distilled Skill\n(~/.pwn/skills/)", shape=cylinder, fillcolor=lightyellow];
-  Agent [label="pwn-ai Agent\n(future automation)"];
+  Explore [label="🐚  Explore in REPL\ncall PWN::Plugins::*", fillcolor="#7dd3fc"];
+  Hist    [label="~/.pwn_history\nPry `history` cmd", shape=cylinder, fillcolor="#fcd34d"];
+  Extract [label="copy working lines", fillcolor="#6ee7b7"];
 
-  User -> Pry [label="run exploration cmds"];
-  Pry -> HistoryFile [label="appends each line"];
-  Pry -> Script [label="history | grep > my_proto.rb\nor edit -n"];
-  Script -> Driver [label="wrap in PWN::Driver\nadd opts, orchestration"];
-  Script -> Skill [label="manually or via\ndistill_skill after success"];
-  Driver -> Agent [label="invoked by agent\nor cron"];
-  Skill -> Agent [label="loaded in prompt context"];
+  subgraph cluster_out {
+    label="Reusable Artefacts"; fontcolor="#ddd6fe"; style=rounded;
+    color="#6d28d9"; bgcolor="#2e1065";
+    Driver [label="bin/pwn_<name>\nOptionParser + PWN calls", fillcolor="#c4b5fd"];
+    Skill  [label="~/.pwn/skills/<name>.md\nlearning_distill_skill",  fillcolor="#c4b5fd"];
+    Cron   [label="cron_create\nprompt: | ruby:",              fillcolor="#c4b5fd"];
+  }
+  CI [label="⚙️  CI / CD\nheadless run", fillcolor="#7dd3fc"];
+
+  Explore -> Hist    [label="auto-log", color="#38bdf8"];
+  Hist    -> Extract [color="#f59e0b"];
+  Extract -> Driver  [color="#a78bfa"];
+  Extract -> Skill   [color="#a78bfa"];
+  Extract -> Cron    [color="#a78bfa"];
+  Driver  -> CI      [color="#38bdf8", penwidth=2];
+  Skill   -> CI      [label="pwn --ai", color="#38bdf8"];
+  Cron    -> CI      [color="#38bdf8"];
 }

data/documentation/diagrams/dot/memory-skills-detailed.dot

@@ -1,28 +1,60 @@
-digraph "PWN Memory & Skills Detailed Data Flow" {
-  rankdir=TB;
-  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+digraph "PWN_MemorySkills" {
+  graph [
+    label=<<B>Persistent Knowledge — Memory · Skills · Sessions</B><BR/><FONT POINT-SIZE="11" COLOR="#94a3b8">everything under ~/.pwn/ that shapes future prompts</FONT>>,
+    labelloc=t, fontsize=20, fontname="Helvetica",
+    rankdir=TB, splines=spline, nodesep=0.55, ranksep=0.95,
+    bgcolor="#0f172a", fontcolor="#e2e8f0", pad=0.6, newrank=true
+  ];
+  node [fontname="Helvetica", fontsize=10, style="filled,rounded",
+        shape=box, penwidth=1.3, color="#334155", fontcolor="#0f172a"];
+  edge [fontname="Helvetica", fontsize=9, color="#94a3b8",
+        fontcolor="#cbd5e1", penwidth=1.3, arrowsize=0.8];
 
-  Input [label="Successful Task\nOutcome in Agent"];
-  Learn [label="PWN::AI::Agent::Learning\nnote_outcome"];
-  Metrics [label="Metrics (success/duration)"];
-  Introspect [label="learning_reflect\n+ LLM introspection"];
-  Distill [label="learning_distill_skill"];
-  SkillCreate [label="skill_create / edit"];
-  SkillStore [label="~/.pwn/skills/*.md\n(YAML frontmatter\n+ markdown + references)", shape=cylinder, fillcolor=lightyellow];
-  MemStore [label="~/.pwn/memory.json", shape=cylinder, fillcolor=lightyellow];
-  SkillList [label="skill_list / skill_view"];
-  AgentPrompt [label="Agent System Prompt\n(injects skills + memory)"];
-  Recall [label="memory_recall"];
+  subgraph cluster_write {
+    label="Write-Side Tools"; fontcolor="#a7f3d0"; style=rounded;
+    color="#047857"; bgcolor="#022c22";
+    Rem    [label="memory_remember\nkey · value · category",   fillcolor="#6ee7b7"];
+    Skc    [label="skill_create\nskill_add_reference",           fillcolor="#6ee7b7"];
+    Note   [label="learning_note_outcome\nlearning_reflect",     fillcolor="#6ee7b7"];
+    Dist   [label="learning_distill_skill\n(session → skill)",   fillcolor="#6ee7b7"];
+  }
+  {rank=same; Rem; Skc; Note; Dist}
 
-  Input -> Learn;
-  Learn -> Metrics;
-  Learn -> Introspect;
-  Introspect -> Distill;
-  Distill -> SkillCreate;
-  SkillCreate -> SkillStore;
-  SkillStore -> SkillList;
-  SkillList -> AgentPrompt;
-  Input -> MemStore [label="remember key facts"];
-  Recall -> AgentPrompt;
-  MemStore -> Recall;
+  subgraph cluster_files {
+    label="~/.pwn/"; fontcolor="#fde68a"; style=rounded;
+    color="#a16207"; bgcolor="#422006";
+    Fmem [label="memory.json\nfact · pref · lesson · env", shape=cylinder, fillcolor="#fcd34d"];
+    Fskl [label="skills/*.md\nYAML front-matter refs",       shape=cylinder, fillcolor="#fcd34d"];
+    Flrn [label="learning.jsonl\noutcome log",               shape=cylinder, fillcolor="#fcd34d"];
+    Fses [label="sessions/*.jsonl\ntranscripts",              shape=cylinder, fillcolor="#fcd34d"];
+  }
+  {rank=same; Fmem; Fskl; Flrn; Fses}
+
+  subgraph cluster_read {
+    label="Read-Side / Injection"; fontcolor="#ddd6fe"; style=rounded;
+    color="#6d28d9"; bgcolor="#2e1065";
+    Rec  [label="memory_recall",       fillcolor="#c4b5fd"];
+    Skv  [label="skill_list · view",   fillcolor="#c4b5fd"];
+    Out  [label="learning_outcomes\nlearning_stats", fillcolor="#c4b5fd"];
+    Sesv [label="sessions_view\nsessions_current",   fillcolor="#c4b5fd"];
+  }
+  {rank=same; Rec; Skv; Out; Sesv}
+
+  Prompt [label="PromptBuilder\nMEMORY + SKILLS + LEARNING blocks", fillcolor="#7dd3fc", penwidth=2];
+
+  Rem  -> Fmem [color="#f59e0b"];
+  Skc  -> Fskl [color="#f59e0b"];
+  Note -> Flrn [color="#f59e0b"];
+  Dist -> Fskl [color="#f59e0b"];
+  Dist -> Fses [dir=back, style=dashed, color="#fbbf24", label="mine"];
+
+  Fmem -> Rec  [color="#a78bfa"];
+  Fskl -> Skv  [color="#a78bfa"];
+  Flrn -> Out  [color="#a78bfa"];
+  Fses -> Sesv [color="#a78bfa"];
+
+  Rec  -> Prompt [color="#38bdf8"];
+  Skv  -> Prompt [color="#38bdf8"];
+  Out  -> Prompt [color="#38bdf8"];
+  Sesv -> Prompt [color="#38bdf8"];
 }

data/documentation/diagrams/dot/network-infra-testing.dot

@@ -1,22 +1,54 @@
-digraph "Network & Infrastructure Testing with PWN" {
-  rankdir=TB;
-  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+digraph "PWN_Network" {
+  graph [
+    label=<<B>Network &amp; Infrastructure Testing</B><BR/><FONT POINT-SIZE="11" COLOR="#94a3b8">discovery → service enum → auth attacks → cloud / CI</FONT>>,
+    labelloc=t, fontsize=20, fontname="Helvetica",
+    rankdir=LR, splines=spline, nodesep=0.45, ranksep=1.2,
+    bgcolor="#0f172a", fontcolor="#e2e8f0", pad=0.6, newrank=true
+  ];
+  node [fontname="Helvetica", fontsize=10, style="filled,rounded",
+        shape=box, penwidth=1.3, color="#334155", fontcolor="#0f172a"];
+  edge [fontname="Helvetica", fontsize=9, color="#94a3b8",
+        fontcolor="#cbd5e1", penwidth=1.3, arrowsize=0.8];
 
-  Targets [label="Targets\n(IPs, Domains, ASNs)", shape=box];
-  Discovery [label="Discovery\n(NmapIt, pwn_nmap_discover,\nShodan, IPInfo, crt.sh)"];
-  Enum [label="Service Enum\n(portscan, version, scripts)"];
-  Auth [label="Auth Testing\n(basic_auth, DAOs,\ncredential spray)"];
-  VulnScan [label="Vuln Scanning\n(NessusCloud, OpenVAS,\nNexpose, Zaproxy)"];
-  Packet [label="Packet Crafting\n(PWN::Plugins::Packet,\nSock, Tor)"];
-  Infra [label="Infra Specific\n(AWS, Jenkins, Jira,\nVsphere, RabbitMQ)"];
-  ExploitNet [label="Network Exploits"];
+  CIDR [label="CIDR / ASN\nscope", fillcolor="#7dd3fc"];
 
-  Targets -> Discovery;
-  Discovery -> Enum;
-  Enum -> Auth;
-  Auth -> VulnScan;
-  VulnScan -> Packet;
-  Packet -> ExploitNet;
-  VulnScan -> Infra;
-  Infra -> ExploitNet;
+  subgraph cluster_disc {
+    label="Discover"; fontcolor="#a7f3d0"; style=rounded;
+    color="#047857"; bgcolor="#022c22";
+    Nmap   [label="NmapIt\npwn_nmap_discover_tcp_udp", fillcolor="#6ee7b7"];
+    Packet [label="Plugins::Packet\nraw craft / sniff", fillcolor="#6ee7b7"];
+  }
+  subgraph cluster_svc {
+    label="Service Enum"; fontcolor="#fde68a"; style=rounded;
+    color="#a16207"; bgcolor="#422006";
+    Sock [label="Plugins::Sock\nbanner grab", fillcolor="#fcd34d"];
+    DAO  [label="DAO::LDAP · Mongo\nPostgres · SQLite3", fillcolor="#fcd34d"];
+    MQ   [label="RabbitMQ\nSlack · IRC · Mail", fillcolor="#fcd34d"];
+  }
+  subgraph cluster_auth {
+    label="Auth / Exploit"; fontcolor="#fecaca"; style=rounded;
+    color="#b91c1c"; bgcolor="#450a0a";
+    MSF  [label="Metasploit\nmsf_postgres_login", fillcolor="#fda4af"];
+    Auth [label="BasicAuth · OAuth2\nAuthenticationHelper", fillcolor="#fda4af"];
+  }
+  subgraph cluster_cloud {
+    label="Cloud / CI"; fontcolor="#ddd6fe"; style=rounded;
+    color="#6d28d9"; bgcolor="#2e1065";
+    AWS  [label="PWN::AWS::*\n90 services",  fillcolor="#c4b5fd"];
+    Jenk [label="Plugins::Jenkins\nvSphere · Vault", fillcolor="#c4b5fd"];
+  }
+  Report [label="Reports · DefectDojo", fillcolor="#7dd3fc"];
+
+  CIDR   -> Nmap   [color="#38bdf8"];
+  CIDR   -> Packet [color="#38bdf8"];
+  Nmap   -> Sock   [color="#f59e0b"];
+  Nmap   -> DAO    [color="#f59e0b"];
+  Packet -> MQ     [color="#f59e0b"];
+  Sock   -> MSF    [color="#fb7185"];
+  DAO    -> Auth   [color="#fb7185"];
+  MQ     -> Auth   [color="#fb7185"];
+  MSF    -> AWS    [color="#a78bfa"];
+  Auth   -> Jenk   [color="#a78bfa"];
+  AWS    -> Report [color="#38bdf8"];
+  Jenk   -> Report [color="#38bdf8"];
 }