pwn 0.5.705 → 0.5.707

data/spec/lib/pwn/ai/agent/policy_spec.rb

@@ -131,13 +131,23 @@ describe PWN::AI::Agent::Policy do
     grind = described_class.observe_step(
       action: 'shell', ok: true, session_id: 'en_credit', ts_state: ts
     )
-    ts[:plan_idx] = 1
-    ts[:evidence_blob] = 'rg hit locate the source lib/task_summarizer.rb patched later'
+    poc = "/tmp/pwn-policy-#{Process.pid}.poc"
+    File.write(poc, 'poc')
+    Thread.current[:pwn_loop_deliverables] = {
+      paths: [],
+      min_seconds: 0,
+      skills: [],
+      proofs: [poc],
+      hosts: [],
+      techniques: []
+    }
     advance = described_class.observe_step(
       action: 'shell', ok: true, session_id: 'en_credit', ts_state: ts
     )
     expect(advance[:reward].to_f).to be > grind[:reward].to_f
   ensure
+    FileUtils.rm_f(poc) if defined?(poc)
+    Thread.current[:pwn_loop_deliverables] = nil
     described_class.reset
     FileUtils.remove_entry(tmp) if tmp && Dir.exist?(tmp)
   end

data/spec/lib/pwn/ai/agent/reward_spec.rb

@@ -328,3 +328,75 @@ describe PWN::AI::Agent::Reward do
     expect(src).to include('quiet: true')
   end
 end
+
+describe 'PWN::AI::Agent::Reward vs TUI plan' do
+  it 'does not let a TUI plan_cover_low haircut a high-evidence original-request answer' do
+    stub_const('PWN::AI::Agent::Reward::SENTINEL_FILE', File.join(Dir.mktmpdir, 's.json'))
+    allow(PWN::AI::Agent::Reward).to receive(:reflect_available?).and_return(false)
+    plan = [
+      'Load and review rules of engagement, submission criteria, and the full in-scope subdomain list',
+      'Inventory applicable unauthenticated testing skills and techniques',
+      'Enumerate and resolve all in-scope subdomains and map reachable services',
+      'Fingerprint stacks, configurations, and exposure on every subdomain',
+      'Run exhaustive unauthenticated analysis across the full attack surface',
+      'Prioritize and deep-dive each promising lead to confirm exploitability',
+      'Develop evidence-backed proof-of-concept demonstrations',
+      'Combine related weaknesses into higher-impact attack chains',
+      'Assign evidence-backed severity and filter to submission-eligible issues',
+      'Use graphical applications where they improve validation',
+      'Compile submission-ready writeups with reproduction steps',
+      'Re-verify each finding still reproduces and present the final set'
+    ]
+    final = <<~TXT
+      Path-backed answer for the original request. Hosts scanned: 10.9.8.7 and 10.9.8.8.
+      Verified complete. Evidence in /tmp/pwn-eval-hosts.json. 12 hosts live. rspec passed.
+    TXT
+    klass = PWN::AI::Agent::Reward
+    v = klass.judge(
+      request: 'what live hosts can you find on this box and write /tmp/pwn-eval-hosts.json',
+      final: final,
+      plan: plan,
+      trace: [
+        '{"success":true,"result":{"stdout":"10.9.8.7 up","exit":0},"effect":"eval"}',
+        '{"success":true,"result":{"stdout":"wrote /tmp/pwn-eval-hosts.json","exit":0},"effect":"write"}'
+      ],
+      commit: false
+    )
+    expect(v[:source].to_s).to eq 'heuristic'
+    expect(v[:score]).to be >= 0.6
+    expect(v[:verdict].to_s).to eq 'solved'
+    args = {
+      request: 'what live hosts can you find on this box and write /tmp/pwn-eval-hosts.json',
+      final: final,
+      trace: [
+        '{"success":true,"result":{"stdout":"10.9.8.7 up","exit":0},"effect":"eval"}',
+        '{"success":true,"result":{"stdout":"wrote /tmp/pwn-eval-hosts.json","exit":0},"effect":"write"}'
+      ]
+    }
+    base = klass.send(:evidence_prior, **args)
+    mixed = klass.send(:evidence_prior, **args, plan: plan)
+    expect(mixed[:score]).to eq(base[:score])
+  end
+
+  it 'always grades the original request even when a stub compass or TUI plan is supplied' do
+    stub_const('PWN::AI::Agent::Reward::SENTINEL_FILE', File.join(Dir.mktmpdir, 's.json'))
+    allow(PWN::AI::Agent::Reward).to receive(:reflect_available?).and_return(false)
+    klass = PWN::AI::Agent::Reward
+    src = File.read(klass.method(:judge).source_location.first)
+    expect(src).not_to include('llm_judge(request: request, final: final, trace: trace, plan: opts[:plan])')
+    expect(src).not_to include('heuristic_judge(request: request, final: final, trace: trace, plan: opts[:plan])')
+    request = 'using hping3 what live hosts can you find in this subnet and write /tmp/x.json'
+    final = 'Live hosts: 10.1.2.3. Verified. Wrote /tmp/x.json. 4 hosts up. rspec passed.'
+    trace = [
+      '{"success":true,"result":{"stdout":"10.1.2.3 up","exit":0},"effect":"eval"}',
+      '{"success":true,"result":{"stdout":"wrote /tmp/x.json","exit":0},"effect":"write"}'
+    ]
+    a = klass.judge(request: request, final: final, trace: trace, commit: false)
+    b = klass.judge(request: request, final: final, trace: trace, plan: ['Carry out the core work'], commit: false)
+    c = klass.judge(request: request, final: final, trace: trace, plan: ['Enumerate subdomains', 'Compile writeups'], commit: false)
+    expect(a[:score]).to eq(b[:score])
+    expect(b[:score]).to eq(c[:score])
+    expect(a[:score]).to be >= 0.6
+    expect(a[:verdict].to_s).to eq('solved')
+  end
+end

data/spec/lib/pwn/reports/csv_spec.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Reports::CSV do
+  it 'should display information for authors' do
+    authors_response = PWN::Reports::CSV
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Reports::CSV
+    expect(help_response).to respond_to :help
+  end
+
+  it 'should respond to generate' do
+    expect(PWN::Reports::CSV).to respond_to :generate
+  end
+end

data/spec/lib/pwn/reports/formats_spec.rb

@@ -0,0 +1,90 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require 'json'
+require 'csv'
+require 'tmpdir'
+
+describe 'PWN::Reports format generators' do
+  let(:payload) do
+    {
+      title: 'PWN Format Spec',
+      report_name: 'pwn_format_spec',
+      executive_summary: 'One finding.',
+      findings: [
+        {
+          id: 'CFG-001',
+          title: 'Missing Security Headers',
+          severity: 'Low',
+          cvss: 4.3,
+          description: 'No X-Frame-Options',
+          poc: 'GET /',
+          recommendation: 'Add headers'
+        }
+      ]
+    }
+  end
+
+  {
+    PDF: { ext: 'pdf', const: 'PDF' },
+    HTML: { ext: 'html', const: 'HTML' },
+    Markdown: { ext: 'md', const: 'Markdown' },
+    XML: { ext: 'xml', const: 'XML' },
+    CSV: { ext: 'csv', const: 'CSV' },
+    JSON: { ext: 'json', const: 'JSON' }
+  }.each do |label, meta|
+    describe "PWN::Reports::#{meta[:const]}" do
+      it 'responds to generate, authors, and help' do
+        klass = PWN::Reports.const_get(meta[:const])
+        expect(klass).to respond_to(:generate)
+        expect(klass).to respond_to(:authors)
+        expect(klass).to respond_to(:help)
+      end
+
+      it "writes a .#{meta[:ext]} report via generate" do
+        klass = PWN::Reports.const_get(meta[:const])
+        Dir.mktmpdir('pwn_report_fmt') do |dir|
+          path = klass.generate(
+            dir_path: dir,
+            report_name: 'pwn_format_spec',
+            results_hash: payload
+          )
+          expect(path).to eq(File.join(dir, "pwn_format_spec.#{meta[:ext]}"))
+          expect(File.file?(path)).to eq(true)
+          expect(File.size(path)).to be > 0
+          body = File.binread(path)
+          case label
+          when :PDF
+            expect(body.start_with?('%PDF')).to eq(true)
+          when :HTML
+            expect(body).to match(/<!DOCTYPE html>/i)
+            expect(body).to include('Missing Security Headers')
+          when :Markdown
+            expect(body).to include('# PWN Format Spec')
+            expect(body).to include('Missing Security Headers')
+          when :XML
+            expect(body).to include('<?xml')
+            expect(body).to include('Missing Security Headers')
+          when :CSV
+            rows = CSV.parse(body)
+            expect(rows.first).to include('title')
+            expect(body).to include('Missing Security Headers')
+          when :JSON
+            parsed = JSON.parse(body)
+            expect(parsed['title']).to eq('PWN Format Spec')
+            expect(parsed['findings'].first['id']).to eq('CFG-001')
+          end
+        end
+      end
+    end
+  end
+
+  it 'honours an explicit path: override' do
+    Dir.mktmpdir('pwn_report_path') do |dir|
+      out = File.join(dir, 'custom.json')
+      path = PWN::Reports::JSON.generate(path: out, results_hash: payload)
+      expect(path).to eq(out)
+      expect(JSON.parse(File.read(out))['title']).to eq('PWN Format Spec')
+    end
+  end
+end

data/spec/lib/pwn/reports/html_spec.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Reports::HTML do
+  it 'should display information for authors' do
+    authors_response = PWN::Reports::HTML
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Reports::HTML
+    expect(help_response).to respond_to :help
+  end
+
+  it 'should respond to generate' do
+    expect(PWN::Reports::HTML).to respond_to :generate
+  end
+end

data/spec/lib/pwn/reports/json_spec.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Reports::JSON do
+  it 'should display information for authors' do
+    authors_response = PWN::Reports::JSON
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Reports::JSON
+    expect(help_response).to respond_to :help
+  end
+
+  it 'should respond to generate' do
+    expect(PWN::Reports::JSON).to respond_to :generate
+  end
+end

data/spec/lib/pwn/reports/markdown_spec.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Reports::Markdown do
+  it 'should display information for authors' do
+    authors_response = PWN::Reports::Markdown
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Reports::Markdown
+    expect(help_response).to respond_to :help
+  end
+
+  it 'should respond to generate' do
+    expect(PWN::Reports::Markdown).to respond_to :generate
+  end
+end

data/spec/lib/pwn/reports/pdf_spec.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Reports::PDF do
+  it 'should display information for authors' do
+    authors_response = PWN::Reports::PDF
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Reports::PDF
+    expect(help_response).to respond_to :help
+  end
+
+  it 'should respond to generate' do
+    expect(PWN::Reports::PDF).to respond_to :generate
+  end
+end

data/spec/lib/pwn/reports/xml_spec.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Reports::XML do
+  it 'should display information for authors' do
+    authors_response = PWN::Reports::XML
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Reports::XML
+    expect(help_response).to respond_to :help
+  end
+
+  it 'should respond to generate' do
+    expect(PWN::Reports::XML).to respond_to :generate
+  end
+end

data/third_party/pwn_rdoc.jsonl

@@ -40,6 +40,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Curriculum.ollama_create Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Curriculum.ollama_create`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Curriculum.practice Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Curriculum.practice`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Curriculum.practice_kpi Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Curriculum.practice_kpi`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Curriculum.practice_poc_ok? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Curriculum.practice_poc_ok?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Curriculum.practice_skip? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Curriculum.practice_skip?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Curriculum.preference_balance Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Curriculum.preference_balance`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Curriculum.preference_diet_gate Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Curriculum.preference_diet_gate`: "}]}
@@ -309,6 +310,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Learning.update_skill Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Learning.update_skill`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Learning.verdict_for_score Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Learning.verdict_for_score`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Learning.weighted_judge_mean Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Learning.weighted_judge_mean`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.abs_paths Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.abs_paths`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.active_engine Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.active_engine`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.agent_flag Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.agent_flag`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.answer_greeting Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.answer_greeting`: "}]}
@@ -327,6 +329,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.call_engine Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.call_engine`: Supported Method Parameters\n\nmsg = PWN::AI::Agent::Loop.call_engine(\n\nmessages: 'required - OpenAI-format messages array',\ntools: 'optional - OpenAI tools array'\n\n)\n\nReturns a normalised assistant message hash:\n\n{ role: 'assistant', content: String|nil,\n  tool_calls: [ {id:, type:'function', function:{name:, arguments:}} ],\n  _native_content: <provider raw>  (when adapter needs round-trip) }\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.catalog_lookup? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.catalog_lookup?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.chat_response_history Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.chat_response_history`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.checkpoint_result Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.checkpoint_result`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.compact_history! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.compact_history!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.debug_final_text! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.debug_final_text!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.debug_msgs_line Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.debug_msgs_line`: "}]}
@@ -335,8 +338,15 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.debug_snippet Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.debug_snippet`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.debug_tool_io! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.debug_tool_io!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.debug_tools_line Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.debug_tools_line`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.declared_contract Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.declared_contract`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.declared_contract_unsatisfied? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.declared_contract_unsatisfied?`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.declared_deliverables Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.declared_deliverables`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.declared_hosts_missing? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.declared_hosts_missing?`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.declared_min_seconds Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.declared_min_seconds`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.declared_skills_missing? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.declared_skills_missing?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.default_interactive_toolsets Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.default_interactive_toolsets`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.degrade_text_only Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.degrade_text_only`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.deliverable_missing? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.deliverable_missing?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.dispatch_fail_n Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.dispatch_fail_n`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.duration_unsatisfied? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.duration_unsatisfied?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.emit_task_summary Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.emit_task_summary`: "}]}
@@ -349,6 +359,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.guard_repeated_failure Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.guard_repeated_failure`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.help Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.incomplete_final? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.incomplete_final?`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.infer_deliverables Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.infer_deliverables`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.inject_task_focus! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.inject_task_focus!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.local_engine? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.local_engine?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.loud_debug_tui! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.loud_debug_tui!`: "}]}
@@ -361,12 +372,14 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.mistake_ts Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.mistake_ts`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.needs_host_work? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.needs_host_work?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.no_progress_result Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.no_progress_result`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.normalize_contract Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.normalize_contract`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.normalize_llm Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.normalize_llm`: Supported Method Parameters\n\nmsg = PWN::AI::Agent::Loop.normalize_llm(\n\nresponse: 'required - chat_with_tools response Hash from any provider'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.note_same_payload! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.note_same_payload!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.ollama_wire_messages Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.ollama_wire_messages`: Supported Method Parameters\n\nwire = PWN::AI::Agent::Loop.ollama_wire_messages(\n\nmessages: 'required - in-memory OpenAI-ish messages (may have String args)'\n\n)\n\nReturns a deep-copied array safe for Ollama / Open WebUI ollama/api/chat:\n\nparses JSON-string function.arguments into Hash/Array objects\n\ncoerces nil assistant content to ” when tool_calls present (Open WebUI GenerateChatCompletionForm rejects content:null alone)\n\ndrops _native_content / _text_tool_coerced / thinking private keys\n\nstringifies Hash/Array message content (tool results) to JSON text\n\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.ollama_wire_tool_call Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.ollama_wire_tool_call`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.openai_wire_messages Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.openai_wire_messages`: Supported Method Parameters\n\nwire = PWN::AI::Agent::Loop.openai_wire_messages(\n\nmessages: 'required - in-memory OpenAI-ish messages (may have Hash args / internal keys)'\n\n)\n\nReturns a deep-copied array safe for OpenAI / xAI chat.completions:\n\ndrops _native_content / _text_tool_coerced / thinking private keys\n\nstringifies function.arguments maps\n\ncoerces Hash/non-string content to JSON/string (nil kept for assistant tool turns)\n\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.openai_wire_tool_call Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.openai_wire_tool_call`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.parse_contract Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.parse_contract`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.parse_tool_arguments Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.parse_tool_arguments`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.payload_sig Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.payload_sig`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.plan_first Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.plan_first`: "}]}
@@ -381,6 +394,8 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.run Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.run`: Supported Method Parameters\n\nfinal = PWN::AI::Agent::Loop.run(\n\nrequest: 'required - what the human typed',\nsession_id: 'optional - PWN::Sessions id (transcript is appended to it)',\nenabled_toolsets: 'optional - subset of Registry.toolsets, or nil for all',\non_tool: 'optional - ->(name, args, result) callback for live UI',\nsystem_role_content: 'optional - override default system prompt (built from session_id if not provided)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.session_chat_history Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.session_chat_history`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.should_auto_introspect? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.should_auto_introspect?`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.spill_tool_body Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.spill_tool_body`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.spill_tool_history! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.spill_tool_history!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.stamped_effect Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.stamped_effect`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.start_debug_session Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.start_debug_session`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.stringify_tool_arguments Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.stringify_tool_arguments`: "}]}
@@ -468,6 +483,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Policy.bump_visit! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Policy.bump_visit!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Policy.cold? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Policy.cold?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Policy.completeness_bin Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Policy.completeness_bin`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Policy.contract_fields_met Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Policy.contract_fields_met`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Policy.current_episode Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Policy.current_episode`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Policy.current_state Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Policy.current_state`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Policy.detach_episode! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Policy.detach_episode!`: "}]}
@@ -2467,20 +2483,45 @@
 {"messages":[{"role":"user","content":"PWN::Plugins::Zaproxy.stop Usage"},{"role":"assistant","content":"`PWN::Plugins::Zaproxy.stop`: Supported Method Parameters\n\nPWN::Plugins::Zaproxy.stop(\n\nzap_obj: 'required - zap_obj returned from #open method'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::Zaproxy.tamper Usage"},{"role":"assistant","content":"`PWN::Plugins::Zaproxy.tamper`: Supported Method Parameters\n\nPWN::Plugins::Zaproxy.tamper(\n\nzap_obj: 'required - zap_obj returned from #open method',\ndomain: 'required - FQDN to tamper (e.g. test.domain.local)',\nenabled: 'optional - boolean (defaults to true)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::Zaproxy.zap_rest_call Usage"},{"role":"assistant","content":"`PWN::Plugins::Zaproxy.zap_rest_call`: Supported Method Parameters\n\nzap_rest_call(\n\nzap_obj: 'required zap_obj returned from #start method',\nrest_call: 'required rest call to make per the schema',\nhttp_method: 'optional HTTP method (defaults to GET)\nhttp_body: 'optional HTTP body sent in HTTP methods that support it e.g. POST'\n\n)\n"}]}
-{"messages":[{"role":"user","content":"PWN::Reports.authors Usage"},{"role":"assistant","content":"`PWN::Reports.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
+{"messages":[{"role":"user","content":"PWN::Reports.authors Usage"},{"role":"assistant","content":"`PWN::Reports.authors`: "}]}
 {"messages":[{"role":"user","content":"PWN::Reports.help Usage"},{"role":"assistant","content":"`PWN::Reports.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports.report_payload Usage"},{"role":"assistant","content":"`PWN::Reports.report_payload`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports.resolve_path Usage"},{"role":"assistant","content":"`PWN::Reports.resolve_path`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports.stringify_keys Usage"},{"role":"assistant","content":"`PWN::Reports.stringify_keys`: "}]}
 {"messages":[{"role":"user","content":"PWN::Reports::AIRedTeam.authors Usage"},{"role":"assistant","content":"`PWN::Reports::AIRedTeam.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::AIRedTeam.generate Usage"},{"role":"assistant","content":"`PWN::Reports::AIRedTeam.generate`: Supported Method Parameters\n\nPWN::Reports::AIRedTeam.generate(\n\ndir_path: 'optional - Directory path to save the report (defaults to .)',\nresults_hash: 'optional - Hash containing the results of the AI RedTeam analysis (defaults to empty hash structure)',\nreport_name: 'optional - Name of the report file (defaults to current directory name)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::AIRedTeam.help Usage"},{"role":"assistant","content":"`PWN::Reports::AIRedTeam.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::CSV.authors Usage"},{"role":"assistant","content":"`PWN::Reports::CSV.authors`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::CSV.generate Usage"},{"role":"assistant","content":"`PWN::Reports::CSV.generate`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::CSV.help Usage"},{"role":"assistant","content":"`PWN::Reports::CSV.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Fuzz.authors Usage"},{"role":"assistant","content":"`PWN::Reports::Fuzz.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Fuzz.generate Usage"},{"role":"assistant","content":"`PWN::Reports::Fuzz.generate`: Supported Method Parameters\n\nPWN::Reports::Fuzz.generate(\n\ndir_path: dir_path,\nresults_hash: results_hash,\nchar_encoding: 'optional - character encoding returned by PWN::Plugins::Char.list_encoders (defaults to UTF-8)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Fuzz.help Usage"},{"role":"assistant","content":"`PWN::Reports::Fuzz.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::HTML.authors Usage"},{"role":"assistant","content":"`PWN::Reports::HTML.authors`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::HTML.generate Usage"},{"role":"assistant","content":"`PWN::Reports::HTML.generate`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::HTML.h Usage"},{"role":"assistant","content":"`PWN::Reports::HTML.h`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::HTML.help Usage"},{"role":"assistant","content":"`PWN::Reports::HTML.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::HTML.summary_html Usage"},{"role":"assistant","content":"`PWN::Reports::HTML.summary_html`: "}]}
 {"messages":[{"role":"user","content":"PWN::Reports::HTMLFooter.authors Usage"},{"role":"assistant","content":"`PWN::Reports::HTMLFooter.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::HTMLFooter.generate Usage"},{"role":"assistant","content":"`PWN::Reports::HTMLFooter.generate`: Supported Method Parameters\n\nPWN::Reports::HTMLFooter.generate(\n\ncolumn_names: 'required - array of column names to use in the report table',\ndriver_src_uri: 'required - pwn driver source code uri',\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::HTMLFooter.help Usage"},{"role":"assistant","content":"`PWN::Reports::HTMLFooter.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Reports::HTMLHeader.authors Usage"},{"role":"assistant","content":"`PWN::Reports::HTMLHeader.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::HTMLHeader.generate Usage"},{"role":"assistant","content":"`PWN::Reports::HTMLHeader.generate`: Supported Method Parameters\n\nPWN::Reports::HTMLHeader.generate(\n\ncolumn_names: 'required - array of column names to use in the report table',\ndriver_src_uri: 'required - pwn driver source code uri',\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::HTMLHeader.help Usage"},{"role":"assistant","content":"`PWN::Reports::HTMLHeader.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::JSON.authors Usage"},{"role":"assistant","content":"`PWN::Reports::JSON.authors`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::JSON.generate Usage"},{"role":"assistant","content":"`PWN::Reports::JSON.generate`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::JSON.help Usage"},{"role":"assistant","content":"`PWN::Reports::JSON.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::Markdown.authors Usage"},{"role":"assistant","content":"`PWN::Reports::Markdown.authors`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::Markdown.generate Usage"},{"role":"assistant","content":"`PWN::Reports::Markdown.generate`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::Markdown.help Usage"},{"role":"assistant","content":"`PWN::Reports::Markdown.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::PDF.assemble_pdf Usage"},{"role":"assistant","content":"`PWN::Reports::PDF.assemble_pdf`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::PDF.authors Usage"},{"role":"assistant","content":"`PWN::Reports::PDF.authors`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::PDF.generate Usage"},{"role":"assistant","content":"`PWN::Reports::PDF.generate`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::PDF.help Usage"},{"role":"assistant","content":"`PWN::Reports::PDF.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::PDF.pdf_escape Usage"},{"role":"assistant","content":"`PWN::Reports::PDF.pdf_escape`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::PDF.pdf_stream Usage"},{"role":"assistant","content":"`PWN::Reports::PDF.pdf_stream`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::PDF.render_pdf Usage"},{"role":"assistant","content":"`PWN::Reports::PDF.render_pdf`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::PDF.wrap_line Usage"},{"role":"assistant","content":"`PWN::Reports::PDF.wrap_line`: "}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.authors Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.generate Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.generate`: Supported Method Parameters\n\nPWN::Reports::Phone.generate(\n\ndir_path: dir_path,\nresults_hash: results_hash\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.help Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.help`: "}]}
@@ -2490,6 +2531,10 @@
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.authors Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.generate Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.generate`: Supported Method Parameters\n\nPWN::Reports::URIBuster.generate(\n\ndir_path: dir_path,\nresults_hash: results_hash\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.help Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::XML.authors Usage"},{"role":"assistant","content":"`PWN::Reports::XML.authors`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::XML.generate Usage"},{"role":"assistant","content":"`PWN::Reports::XML.generate`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::XML.help Usage"},{"role":"assistant","content":"`PWN::Reports::XML.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Reports::XML.safe_tag Usage"},{"role":"assistant","content":"`PWN::Reports::XML.safe_tag`: "}]}
 {"messages":[{"role":"user","content":"PWN::SAST.authors Usage"},{"role":"assistant","content":"`PWN::SAST.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::SAST.help Usage"},{"role":"assistant","content":"`PWN::SAST.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::SAST::AMQPConnectAsGuest.authors Usage"},{"role":"assistant","content":"`PWN::SAST::AMQPConnectAsGuest.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.705
+  version: 0.5.707
 platform: ruby
 authors:
 - 0day Inc.
@@ -505,14 +505,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.3.0
+        version: 1.4.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.3.0
+        version: 1.4.0
 - !ruby/object:Gem::Dependency
   name: meshtastic
   requirement: !ruby/object:Gem::Requirement
@@ -5264,11 +5264,16 @@ files:
 - etc/default_skills/pwn/reports/SKILL.md
 - etc/default_skills/pwn/reports/ai_red_team/SKILL.md
 - etc/default_skills/pwn/reports/ai_red_team/references/urls.md
+- etc/default_skills/pwn/reports/csv/SKILL.md
 - etc/default_skills/pwn/reports/fuzz/SKILL.md
 - etc/default_skills/pwn/reports/fuzz/references/urls.md
+- etc/default_skills/pwn/reports/html/SKILL.md
 - etc/default_skills/pwn/reports/html_footer/SKILL.md
 - etc/default_skills/pwn/reports/html_header/SKILL.md
 - etc/default_skills/pwn/reports/html_header/references/urls.md
+- etc/default_skills/pwn/reports/json/SKILL.md
+- etc/default_skills/pwn/reports/markdown/SKILL.md
+- etc/default_skills/pwn/reports/pdf/SKILL.md
 - etc/default_skills/pwn/reports/phone/SKILL.md
 - etc/default_skills/pwn/reports/phone/references/urls.md
 - etc/default_skills/pwn/reports/references/urls.md
@@ -5276,6 +5281,7 @@ files:
 - etc/default_skills/pwn/reports/sast/references/urls.md
 - etc/default_skills/pwn/reports/uri_buster/SKILL.md
 - etc/default_skills/pwn/reports/uri_buster/references/urls.md
+- etc/default_skills/pwn/reports/xml/SKILL.md
 - etc/default_skills/pwn/sast/SKILL.md
 - etc/default_skills/pwn/sast/amqp_connect_as_guest/SKILL.md
 - etc/default_skills/pwn/sast/amqp_connect_as_guest/references/security.md
@@ -6086,12 +6092,18 @@ files:
 - lib/pwn/plugins/zaproxy.rb
 - lib/pwn/reports.rb
 - lib/pwn/reports/ai_red_team.rb
+- lib/pwn/reports/csv.rb
 - lib/pwn/reports/fuzz.rb
+- lib/pwn/reports/html.rb
 - lib/pwn/reports/html_footer.rb
 - lib/pwn/reports/html_header.rb
+- lib/pwn/reports/json.rb
+- lib/pwn/reports/markdown.rb
+- lib/pwn/reports/pdf.rb
 - lib/pwn/reports/phone.rb
 - lib/pwn/reports/sast.rb
 - lib/pwn/reports/uri_buster.rb
+- lib/pwn/reports/xml.rb
 - lib/pwn/sast.rb
 - lib/pwn/sast/amqp_connect_as_guest.rb
 - lib/pwn/sast/apache_file_system_util_api.rb
@@ -6572,12 +6584,19 @@ files:
 - spec/lib/pwn/plugins/zaproxy_spec.rb
 - spec/lib/pwn/plugins_spec.rb
 - spec/lib/pwn/reports/ai_red_team_spec.rb
+- spec/lib/pwn/reports/csv_spec.rb
+- spec/lib/pwn/reports/formats_spec.rb
 - spec/lib/pwn/reports/fuzz_spec.rb
 - spec/lib/pwn/reports/html_footer_spec.rb
 - spec/lib/pwn/reports/html_header_spec.rb
+- spec/lib/pwn/reports/html_spec.rb
+- spec/lib/pwn/reports/json_spec.rb
+- spec/lib/pwn/reports/markdown_spec.rb
+- spec/lib/pwn/reports/pdf_spec.rb
 - spec/lib/pwn/reports/phone_spec.rb
 - spec/lib/pwn/reports/sast_spec.rb
 - spec/lib/pwn/reports/uri_buster_spec.rb
+- spec/lib/pwn/reports/xml_spec.rb
 - spec/lib/pwn/reports_spec.rb
 - spec/lib/pwn/sast/amqp_connect_as_guest_spec.rb
 - spec/lib/pwn/sast/apache_file_system_util_api_spec.rb