pwn 0.5.698 → 0.5.699

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c333795b07ea88fb7ea338e6b01faf768c62bd07757328fc1698972d43a6c5e8
-  data.tar.gz: 0cfbe454002f7ffc79571162a96367aaf3d69017d997cb024c4a475ac3bbab7b
+  metadata.gz: 5d7edeea1940ad56143190285565ba9bd76f4d78a47294238eafaad1d002686f
+  data.tar.gz: c3a594906ca8d239b8f5dfc3fe3343ec718bf1a71e3c85334b3b6db7e852b5fe
 SHA512:
-  metadata.gz: 7a699a8308cb00f04bdf85869647ec381009daf04fe4d8c972c62d5ed57b819b4b719672fe4ad64966c316520a2496bdeb4914c002f526e886b877f7b5d11928
-  data.tar.gz: 5b2d1fa1f979bc4852304ed09b7122817a71689114f4c4f6a1a46798b01e9d3bb186b8af28aa8d08288c470b01d323735fb252ccc9c45426835d8b717ca8e382
+  metadata.gz: fee1edba85d565609b592498feff5eaf38bc01a4771af2a2e22f3719d1eac7faaf54c8f8772837358cf5cbf18db59736aee90fe4a7114c1e6353be423d42e2e8
+  data.tar.gz: 4ad32cb15b7bd78d0fa150cf63379ecf61184b84a902426a3581a558b48b17b0a7bc23048a2d2576155b538403e9472a1ebe542a8154eece95a36e4106e352f9

data/lib/pwn/ai/agent/loop.rb

@@ -1427,8 +1427,10 @@ module PWN
           messages = opts[:messages]
           return messages unless messages.is_a?(Array) && messages.length > 12
 
-          keep_pairs = (agent_flag(key: :history_keep_tool_pairs, default: 6) || 6).to_i
-          max_chars  = (agent_flag(key: :history_tool_max_chars, default: 2_000) || 2_000).to_i
+          keep_pairs = opts[:keep_pairs]
+          keep_pairs = (agent_flag(key: :history_keep_tool_pairs, default: 6) || 6).to_i if keep_pairs.nil?
+          max_chars = opts[:max_chars]
+          max_chars = (agent_flag(key: :history_tool_max_chars, default: 2_000) || 2_000).to_i if max_chars.nil?
 
           head = []
           rest = messages.dup
@@ -2491,8 +2493,9 @@ module PWN
           i = 0
           loop do
             i += 1
-            # 3.1 — compact history on local so tool dumps don't fill num_ctx
-            compact_history!(messages: messages) if local
+            # 3.1 — compact fat tool dumps so remote ReadTimeout hops do not
+            # retry the same 70-message payload (R1 201215 Anthropic 180s×5).
+            compact_history!(messages: messages)
             # English-task-as-primary: when plan_idx advanced, tell the model
             # which plain-English task is active before the next tool batch.
             inject_task_focus!(messages: messages, state: ts_state, request: request) unless skip_compass
@@ -2510,6 +2513,7 @@ module PWN
                   final_chars = txt.length
                   return txt
                 end
+                compact_history!(messages: messages, keep_pairs: 3, max_chars: 800)
                 messages << {
                   role: 'user',
                   content: '[pwn-ai] engine hop failed (transient). Keep calling CORE_TOOLS. ' \

data/lib/pwn/ai/agent/task_summarizer.rb

@@ -661,6 +661,17 @@ module PWN
             ]
           end
 
+          artifact = goal_text[%r{(?:/(?:tmp|var|home|opt|usr)/\S+\.(?:pdf|html|md|json|txt|csv)|~/\S+\.(?:pdf|html|md|json|txt|csv))}i]
+          if artifact && goal_lc.match?(/\b(analy[sz]e|test|scan|report|generat|store|write|export)\b/)
+            tasks << 'Carry out the requested analysis using the named skills and live evidence'
+            tasks << "Write the requested report to #{artifact}"
+            if goal_lc.match?(/\b(json|ya?ml|table|csv|tsv)\b/)
+              fmt = goal_lc[/\b(json|ya?ml|table|csv|tsv)\b/]
+              tasks << "Present the results in #{fmt} format"
+            end
+            return tasks
+          end
+
           tasks << "Understand the request: #{truncate_goal(goal: goal_text)}"
           tasks << "Carry out the core work for: #{truncate_goal(goal: goal_text)}"
 

data/lib/pwn/ai/agent/tool_guard.rb

@@ -24,6 +24,7 @@ module PWN
         # Conservative bash-only constructs. POSIX `$(())` is allowed.
         BASHISM_RX = /
           \bPIPESTATUS\b
+          |\$\{?RANDOM\}?\b
           |\[\[(?:\s|\z)
           |(?:^|[\s;|&])source\s+\S
           |<\([^)]

data/lib/pwn/ai/agent/tools/shell.rb

@@ -65,7 +65,7 @@ PWN::AI::Agent::Registry.register(
 
     if PWN::AI::Agent::ToolGuard.bashism?(text: cmd) && !PWN::AI::Agent::ToolGuard.shell_bash?
       return PWN::AI::Agent::ToolGuard.invalid_payload(
-        hint: 'Command uses bash-only syntax (PIPESTATUS, [[ ]], process substitution, ' \
+        hint: 'Command uses bash-only syntax (PIPESTATUS, $RANDOM, [[ ]], process substitution, ' \
               'source, &>). This handler runs /bin/sh (dash) unless ' \
               'PWN::Env[:ai][:agent][:shell_bash]=true. Rewrite as POSIX or opt in to bash.'
       )

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.698'
+  VERSION = '0.5.699'
 end

data/spec/lib/pwn/ai/agent/loop_spec.rb

@@ -434,6 +434,33 @@ describe PWN::AI::Agent::Loop do # rubocop:disable Metrics/BlockLength
       expect(src).to match(/engine hop failed|engine_blip/)
     end
 
+    it 'compacts tool history for every engine, not only local' do
+      src = File.read(described_class.method(:run).source_location.first)
+      expect(src).to match(/compact_history!\(messages: messages\)/)
+      expect(src).not_to match(/compact_history!\(messages: messages\) if local/)
+    end
+
+    it 'shrinks tool bodies when history is fat' do
+      msgs = [
+        { role: 'system', content: 'sys' },
+        { role: 'user', content: 'goal' }
+      ]
+      8.times do |n|
+        msgs << { role: 'assistant', content: '', tool_calls: [{ id: "c#{n}" }] }
+        msgs << { role: 'tool', tool_call_id: "c#{n}", name: 'shell', content: ('x' * 4_000) }
+      end
+      out = described_class.send(:compact_history!, messages: msgs)
+      tool_bodies = out.select { |m| m[:role].to_s == 'tool' }
+      expect(tool_bodies.length).to be <= 6
+      expect(tool_bodies.map { |m| m[:content].to_s.length }.max).to be <= 2_100
+    end
+
+    it 'compacts again after a transient engine hop before retrying' do
+      src = File.read(described_class.method(:run).source_location.first)
+      hop = src[/if engine_transient\?.*?raise/m]
+      expect(hop).to match(/compact_history!/)
+    end
+
     it 'records a timeout increment mistake instead of treating success:true as ok' do
       tmp = Dir.mktmpdir
       stub_const('PWN::AI::Agent::Mistakes::MISTAKES_FILE', File.join(tmp, 'mistakes.json'))

data/spec/lib/pwn/ai/agent/signal_hygiene_spec.rb

@@ -36,6 +36,14 @@ describe 'P0 signal hygiene (handler + inbox + policy-cold + calibrate)' do
     expect(r[:hint].to_s).to match(/bash-only/i)
   end
 
+  it 'rejects $RANDOM under /bin/sh so the model rewrites instead of getting USER=' do
+    expect(PWN::AI::Agent::ToolGuard.bashism?(text: 'U="p4tester$RANDOM"; echo $U')).to eq(true)
+    handler = PWN::AI::Agent::Registry.lookup(name: 'shell').handler
+    r = handler.call(command: 'U="p4tester$RANDOM"; echo $U')
+    expect(r[:error]).to eq('invalid_payload')
+    expect(r[:hint].to_s).to match(/RANDOM|bash-only|POSIX/i)
+  end
+
   it 'does not refuse pwn_eval host-discovery as unauthorized' do
     src = File.read('/opt/pwn/lib/pwn/ai/agent/tools/ruby_eval.rb')
     expect(src).not_to match(/recon_blocked/)

data/spec/lib/pwn/ai/agent/task_summarizer_spec.rb

@@ -425,6 +425,16 @@ describe PWN::AI::Agent::TaskSummarizer do
       )
     end
 
+    it 'splits analyze-plus-artifact goals instead of pasting the full request twice' do
+      goal = 'Exhaustively analyze the running application for vulnerabilities. ' \
+             'Once complete, generate a complete PDF report and store in /tmp/container_pentest-p4.pdf'
+      tasks = described_class.fallback_decompose(goal: goal)
+      expect(tasks.length).to be >= 2
+      expect(tasks.join("\n")).to include('/tmp/container_pentest-p4.pdf')
+      expect(tasks.grep(/Understand the request:/).length).to eq(0)
+      expect(tasks.grep(/Carry out the core work for:/).length).to eq(0)
+    end
+
     it 'accepts injected :tasks / :llm_tasks without network I/O' do
       custom = ['step alpha', 'step beta', 'verify completion']
       tasks = described_class.plan(request: 'anything at all', tasks: custom)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.698
+  version: 0.5.699
 platform: ruby
 authors:
 - 0day Inc.