pwn 0.5.634 → 0.5.636

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8632bee6e87072a40fbd993834156ad06e1c448918b2922125d592debd7c033d
-  data.tar.gz: 399687f4f6ea85666f9e7d8e4c0450998be2949218b45d68b061e8c20c452010
+  metadata.gz: 41a8a5c5d750508d4f3904d7a05151719e2c86fa4cf20001a3aab0985910963d
+  data.tar.gz: 7af0757b53bdfa6c97d86a9415a2cbf41ca9447b3f9e438b95b2424f5d835cbf
 SHA512:
-  metadata.gz: 964a576117407e3e5907a302106c2a0f657bedc9a4ebd59167ca360f7f89dbcb3975aec4b6c036e3cc2f138461044f162371f8b2e62d05e5f0ca1c498fa852b4
-  data.tar.gz: 8cae2ebdeb246fc190c49aed8b5a787372a482e2eecc3027116eab1bca985b33d9451cd22df4f158f1d4e0e8dc4314f6b1754f4e3b42f68dd8f7c1808b7ea3e6
+  metadata.gz: 8053f31ef3138368e50c1b6920fa7804945f508daabc31191ba2a9578f3c31f7e6629e1ca901a409ec82e4cefdf3a824fa48bcfe4fdcd8ab4a1a9da0f168e1da
+  data.tar.gz: 592bfb24c2c2a610813fcd5b8431478d4774ef312405f446393db9cbb305c2c223b129a0714b9b464adc9976e682b1754a4e5d760d0ca28b00ba99778df21d7a

data/.github/workflows/install-matrix.yml

@@ -105,7 +105,13 @@ jobs:
         # "detected dubious ownership" and the gem builds with ZERO files.
         run: git config --global --add safe.directory "$PWD"
       - name: build & install gem from checkout (git-checkout path in doc)
+        # `gem update --system` first: distro rubies ship RubyGems 3.x whose
+        # Molinillo resolver crashes with `undefined method 'request' for nil`
+        # (rubygems/rubygems#6215) instead of naming the unsatisfiable dep
+        # when a runtime dependency's required_ruby_version excludes this ruby.
+        # A modern RubyGems prints the real conflict.
         run: |
+          gem update --system --no-document || true
           gem build pwn.gemspec
           gem install --no-document ./pwn-*.gem
           gem install --no-document rspec
@@ -139,6 +145,7 @@ jobs:
 
       - name: build & install gem from checkout
         run: |
+          gem update --system --no-document || true
           gem build pwn.gemspec
           gem install --no-document ./pwn-*.gem
           gem install --no-document rspec

data/Rakefile

@@ -16,7 +16,13 @@ if defined?(RDoc::Task)
   RDoc::Task.new do |rdoc|
     rdoc.rdoc_files.include('lib/**/*.rb')
     rdoc.rdoc_dir = 'rdoc'
+    rdoc.options << '--quiet'
   end
+  # RDoc::Task's default :clobber_rdoc uses Rake's verbose FileUtils, which
+  # echoes "rm -r rdoc" to STDOUT on every `rake` (via :rerdoc). Replace it
+  # with a silent rm_rf so the default task emits only spec/rubocop output.
+  Rake::Task[:clobber_rdoc].clear_actions
+  task(:clobber_rdoc) { FileUtils.rm_rf('rdoc') }
 end
 
 default_tasks = %i[spec rubocop]

data/bin/pwn_setup

@@ -29,6 +29,16 @@ pwn_driver = PWN::Driver::Parser.new do |options|
     opts[:list] = o
   end
 
+  options.on('-m', '--migrate',
+             '<Optional - Verify ~/.pwn state files are compatible with this pwn version; apply schema migrations>') do |o|
+    opts[:migrate] = o
+  end
+
+  options.on('-f', '--fix',
+             '<Optional - With --migrate: also autofix incompatible files (backup taken first)>') do |o|
+    opts[:fix] = o
+  end
+
   options.on('-y', '--yes',
              '<Optional - Assume yes; non-interactive (CI-friendly)>') do |o|
     opts[:yes] = o
@@ -45,6 +55,12 @@ pwn_driver.parse!
 begin
   if opts[:list]
     PWN::Setup.list_profiles
+  elsif opts[:migrate]
+    r = PWN::Setup.migrate(
+      fix: opts[:fix] || opts[:yes],
+      dry_run: opts[:dry_run]
+    )
+    exit 1 unless r && r[:after] && r[:after][:incompatible].empty?
   elsif opts[:deps] || opts[:profile]
     PWN::Setup.deps(
       profile: opts[:profile],

data/documentation/Home.md

@@ -17,7 +17,7 @@
 | [What is PWN](What-is-PWN.md) | One-paragraph elevator pitch |
 | [Why PWN](Why-PWN.md) | Design philosophy - why another framework |
 | [How PWN Works](How-PWN-Works.md) | The five layers, with the architecture diagram |
-| [Installation](Installation.md) | `gem install pwn` → `pwn setup` doctor/provisioner · capability profiles |
+| [Installation](Installation.md) | `gem install pwn` → `pwn setup` doctor/provisioner · capability profiles · `--migrate` state doctor |
 | [General Usage](General-PWN-Usage.md) | Day-one cheat sheet |
 | [Configuration](Configuration.md) | `~/.pwn/pwn.yaml` (encrypted) - engines, keys, agent options · `pwn-vault` |
 | **[All Data-Flow Diagrams](Diagrams.md)** | **27 SVGs** in one scrollable page |
@@ -36,13 +36,14 @@
 | | |
 |---|---|
 | [AI / LLM Integration](AI-Integration.md) | OpenAI · Anthropic · Grok (OAuth) · Gemini · Ollama |
-| [Agent Tool Registry](Agent-Tool-Registry.md) | 10 toolsets · 61 LLM-callable tools |
+| [Agent Tool Registry](Agent-Tool-Registry.md) | 10 toolsets · **71** LLM-callable tools |
 | [Memory · Skills · Learning](Skills-Memory-Learning.md) | Introspection - the self-improvement loop |
 | [Mistakes](Mistakes.md) | **Negative feedback** - fingerprint failures · do-NOT-repeat · `[REPEATING]`/`[REGRESSED]` · inline self-correction |
-| [Extrospection](Extrospection.md) | World-awareness - snapshot · drift · intel · **watch** · **verify** · **rf_tune** · correlate · **rf** · **web** |
+| [Reinforcement Learning](Reinforcement-Learning.md) | **`Reward` + `Curriculum`** - ORM/PRM judge · sentinel · HER · self-play · DPO export · **regression-gated LoRA** |
+| [Extrospection](Extrospection.md) | World-awareness - snapshot · drift · intel · **watch** · **verify** · **rf_tune** · **osint** · serial · telecomm · packet · vision · voice · correlate |
 | [Swarm (Multi-Agent)](Swarm.md) | Personas · ask · debate · broadcast · shared bus |
 | [Sessions](Sessions.md) | Transcript persistence + reflection |
-| [Cron](Cron.md) | Scheduled autonomous jobs |
+| [Cron](Cron.md) | Scheduled autonomous jobs (nightly self-play + weekly weight-loop seeded by default) |
 
 ## 🧩 Capability Namespaces  (`lib/pwn/*`)
 
@@ -62,14 +63,14 @@
 | [Blockchain](Blockchain.md) | BTC · ETH helpers |
 | [Bounty](Bounty.md) | Lifecycle / auth-replay tooling |
 | [Reports](Reporting.md) | HTML/JSON output + DefectDojo/Jira |
-| [FFI](FFI.md) | Native DSP/RF backends (Volk · Liquid · FFTW · HackRF · RTL-SDR · SoapySDR) |
+| [FFI](FFI.md) | Native DSP/RF backends (Volk · Liquid · FFTW · HackRF · RTL-SDR · **AdalmPluto** · SoapySDR · Stdio) |
 | [Banner](Banner.md) | 15 startup banners |
 
 ## 🛠️ Meta
 
 | | |
 |---|---|
-| [`~/.pwn/` Filesystem Map](Persistence.md) | Every file PWN writes and why |
+| [`~/.pwn/` Filesystem Map](Persistence.md) | Every file PWN writes and why · `PWN::Migrate` state doctor |
 | [Troubleshooting](Troubleshooting.md) | Common errors and fixes |
 | [Contributing](Contributing.md) | Conventions, RuboCop, spec rules |
 

data/documentation/Installation.md

@@ -208,7 +208,8 @@ row as `MISSING` until a key is set.
 Everything above is a thin CLI over one autoloaded module:
 
 ```ruby
-PWN::Setup.check                          # → { ok:, native_gems_missing:, toolchain_missing:, pkg_manager:, os:, arch: }
+PWN::Setup.check                          # → { ok:, native_gems_missing:, toolchain_missing:, state:, pkg_manager:, os:, arch: }
+PWN::Setup.migrate(fix: true)             # verify + autofix ~/.pwn state files (see PWN::Migrate)
 PWN::Setup.deps(profile: :web, yes: true) # install, then re-check
 PWN::Setup.list_profiles
 PWN::Setup.pkg_manager                    # → { key: :apt, install: 'sudo apt-get install -y', sudo: true }
@@ -237,3 +238,27 @@ pwn[CURRENT_VERSION]:004 >>> pwn-ai                         # launches agent TUI
 **Next:** [Configuration](Configuration.md) · [General Usage](General-PWN-Usage.md)
 
 [← Home](Home.md)
+
+---
+
+## Upgrading — `~/.pwn` state migration
+
+After `gem update pwn`, run the state doctor to verify (and autofix)
+every persisted file under `~/.pwn` against the new release:
+
+```bash
+pwn setup --migrate            # verify + apply schema migrations (backup taken)
+pwn setup --migrate --fix      # also autofix incompatible files
+pwn setup --migrate --dry-run  # report only, write nothing
+```
+
+`PWN::Migrate` (autoloaded) stamps `~/.pwn/.schema` with the release
+schema number, checks each state file (`memory.json`, `metrics.json`,
+`mistakes.json`, `learning.jsonl`, `agents.yml`, `cron/jobs.yml`,
+`skills/`, …) against its owning module's loader, and — with `--fix` —
+deep-merges any keys the current `PWN::Config.env_template` added into
+your encrypted `~/.pwn/pwn.yaml` **without overwriting your values**.
+Every run takes a timestamped backup under `~/.pwn/backup/<ts>/` first.
+
+The plain `pwn` launcher will also print a one-line drift warning on
+startup whenever `~/.pwn/.schema` predates the running gem.

data/lib/pwn/config.rb

@@ -7,26 +7,16 @@ module PWN
   # Used to manage PWN configuration settings within PWN drivers.
   module Config
     # Supported Method Parameters::
-    # env = PWN::Config.default_env(
-    #   pwn_env_path: 'optional - Path to pwn.yaml file.  Defaults to ~/.pwn/pwn.yaml'
-    # )
-    public_class_method def self.default_env(opts = {})
-      pwn_env_path = opts[:pwn_env_path]
-      pwn_dec_path = "#{pwn_env_path}.decryptor"
-
-      puts "
-        [*] NOTICE:
-        1. Writing minimal PWN::Env to:
-           #{pwn_env_path}
-        2. Your decryptor file will be written to:
-           #{pwn_dec_path}
-        3. Use the pwn-vault command in the pwn prototyping driver to update:
-           #{pwn_env_path}
-        4. For optimal security, it's recommended to move:
-           #{pwn_dec_path}
-           to a secure location and use the --pwn-dec parameter for PWN drivers.
-      "
-      env = {
+    # tmpl = PWN::Config.env_template
+    #
+    # The canonical current-release ~/.pwn/pwn.yaml shape as a pure Hash
+    # (no I/O, no vault write, no puts).  Single source of truth used by:
+    #   * PWN::Config.default_env      — seed a fresh ~/.pwn/pwn.yaml
+    #   * PWN::Migrate.vault_drift     — diff a user vault against this release
+    #   * PWN::Migrate.backfill_vault  — deep-merge missing keys UNDER the
+    #     user values on `pwn setup --migrate --fix`
+    public_class_method def self.env_template
+      {
         ai: {
           active: 'grok',
           module_reflection: false,
@@ -174,6 +164,31 @@ module PWN
           provider: 'yaml'
         }
       }
+    rescue StandardError => e
+      raise e
+    end
+
+    # Supported Method Parameters::
+    # env = PWN::Config.default_env(
+    #   pwn_env_path: 'optional - Path to pwn.yaml file.  Defaults to ~/.pwn/pwn.yaml'
+    # )
+    public_class_method def self.default_env(opts = {})
+      pwn_env_path = opts[:pwn_env_path]
+      pwn_dec_path = "#{pwn_env_path}.decryptor"
+
+      puts "
+        [*] NOTICE:
+        1. Writing minimal PWN::Env to:
+           #{pwn_env_path}
+        2. Your decryptor file will be written to:
+           #{pwn_dec_path}
+        3. Use the pwn-vault command in the pwn prototyping driver to update:
+           #{pwn_env_path}
+        4. For optimal security, it's recommended to move:
+           #{pwn_dec_path}
+           to a secure location and use the --pwn-dec parameter for PWN drivers.
+      "
+      env = env_template
 
       # Remove beginning colon from key names
 
@@ -393,6 +408,13 @@ module PWN
       Pry.config.refresh_pwn_env = false if defined?(Pry)
 
       puts "[*] PWN::Env loaded via: #{pwn_env_path}\n"
+
+      # Upgrade drift — cheap schema-stamp check only (no per-file probes).
+      if defined?(PWN::Migrate) && PWN::Migrate.needed?
+        puts "[!] ~/.pwn state predates pwn #{PWN::VERSION} (schema " \
+             "#{PWN::Migrate.installed_schema} < #{PWN::Migrate::SCHEMA_VERSION}). " \
+             'Run `pwn setup --migrate --fix` to autofix (backup taken first).'
+      end
     rescue StandardError => e
       raise e
     end