pwn 0.5.720 → 0.5.721

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0dd0d654d48c9ead7f9a92893f88443e1cfd7cd9a867c53cb2ffc25cbb60fe27
-  data.tar.gz: 3960e8501cbd0139184cd0981569a28a4f9b37e47ddddeb5dab001b2d0eefb1b
+  metadata.gz: c26adc03f68a0e0275c0eb1a85aa2bb06def95aeb014411b000f52c6a83e3e40
+  data.tar.gz: 6a082b81f8f1885de1b3ac42c604f1f21a08d48e7260609ce35e00d1461afa79
 SHA512:
-  metadata.gz: defca7be52f6960bbaa318f5e40e4927cafa8a1e679ce27dd8e74b73feae4b89a9766b725a5731b2e2fa5a8e93c58a2fa3622f0c37df6b0355bf6b12e9affbae
-  data.tar.gz: 29de8ee9497ec7004c4752ddaf3fc359016c6007368e051e891e191ad18bf069a3a44d32aa73ed480dc60cb30bba46551efa2f636009b8d50752e0101917900b
+  metadata.gz: 719d713266b6a3d4200895bb41d4ac5ec7ccfc6d142463cb70085cd6c8d02a514191553b5b12317de45a38abf3d4d1ccb47101f54dc5e588e596a13bc3e77af8
+  data.tar.gz: 271d9ff938ac37275ebe9da7d3031305bd09f587e5b6d14f0386fc006bd120b6e684b00aa651c935da7eefbd3a71c298b114ef07ec21b7a9099a75d9f71df647

data/etc/default_skills/pwn/ai/agent/loop/SKILL.md

@@ -28,11 +28,12 @@ Class methods take `(opts = {})` and read `opts`.
 
 ```ruby
 PWN::AI::Agent::Loop.help
-PWN::AI::Agent::Loop.debug_on(opts)
+PWN::AI::Agent::Loop.evidence_satisfied(opts)
 ```
 
 ## Public methods
 
+- `evidence_satisfied`
 - `debug_on`
 - `catalog_lookup`
 - `world_knowledge`
@@ -46,6 +47,7 @@ PWN::AI::Agent::Loop.debug_on(opts)
 - `help`
 - `catalog_lookup?`
 - `debug_on?`
+- `evidence_satisfied?`
 - `needs_host_work?`
 - `world_knowledge?`
 
@@ -59,5 +61,5 @@ PWN::AI::Agent::Loop.debug_on(opts)
 
 ## Verification
 
-`PWN::AI::Agent::Loop.respond_to?(:debug_on)` after the
+`PWN::AI::Agent::Loop.respond_to?(:evidence_satisfied)` after the
 module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/ai/agent/metrics/SKILL.md

@@ -36,6 +36,7 @@ PWN::AI::Agent::Metrics.load(opts)
 - `load`
 - `save`
 - `record`
+- `append_jsonl`
 - `summary`
 - `to_context`
 - `proxy_trust`

data/etc/default_skills/pwn/ai/agent/registry/SKILL.md

@@ -42,8 +42,11 @@ PWN::AI::Agent::Registry.register(opts)
 - `apply_preference`
 - `rank`
 - `discover`
+- `eager_load`
+- `selftest`
 - `authors`
 - `help`
+- `eager_load!`
 
 ## Source
 

data/etc/default_skills/pwn/ai/agent/tool_guard/SKILL.md

@@ -61,6 +61,7 @@ PWN::AI::Agent::ToolGuard.present(opts)
 - `refuse_copied_persist`
 - `scope_refusal`
 - `policy_decision`
+- `scope_check`
 - `rfc1918`
 - `ip_in_cidr`
 - `command_class`
@@ -81,6 +82,7 @@ PWN::AI::Agent::ToolGuard.present(opts)
 - `refuse_copied_persist?`
 - `reset_timeout_budget!`
 - `rfc1918?`
+- `scope_check!`
 - `shell_bash?`
 
 ## Source

data/etc/default_skills/pwn/ai/agent/turn_finalizer/SKILL.md

@@ -43,9 +43,11 @@ PWN::AI::Agent::TurnFinalizer.enter_user_path(opts)
 - `pending`
 - `arbitrate`
 - `evidence_ledger`
+- `evidence_satisfied`
 - `authors`
 - `help`
 - `enter_user_path!`
+- `evidence_satisfied?`
 - `join_all!`
 - `leave_user_path!`
 - `should_defer?`

data/etc/default_skills/pwn/plugins/artifact_registry/SKILL.md

@@ -38,6 +38,7 @@ PWN::Plugins::ArtifactRegistry.required_bins(opts)
 - `list`
 - `get`
 - `read_page`
+- `put`
 - `authors`
 - `help`
 

data/etc/default_skills/pwn/plugins/exploit_dev/SKILL.md

@@ -52,6 +52,7 @@ PWN::Plugins::ExploitDev.required_bins(opts)
 - `gadgets`
 - `fmtstr`
 - `io`
+- `scaffold`
 - `authors`
 - `help`
 

data/etc/default_skills/pwn/plugins/preflight_checker/SKILL.md

@@ -37,6 +37,7 @@ PWN::Plugins::PreflightChecker.required_bins(opts)
 - `bin`
 - `require_bin`
 - `route`
+- `capability_coverage`
 - `pick`
 - `cap_net_raw`
 - `require_cap_net_raw`

data/etc/default_skills/pwn/plugins/process_tube/SKILL.md

@@ -43,6 +43,8 @@ PWN::Plugins::ProcessTube.required_bins(opts)
 - `expect`
 - `stream`
 - `reap_orphans`
+- `list`
+- `kill`
 - `authors`
 - `help`
 

data/lib/pwn/ai/agent/dispatch.rb

@@ -52,7 +52,8 @@ module PWN
             args = expand_vault_args(args: args)
           end
           if defined?(Engagement)
-            denied = Engagement.deny_if_out_of_scope(args: args, command: blob)
+            denied = ToolGuard.scope_check!(args: args, command: blob) if defined?(ToolGuard) && ToolGuard.respond_to?(:scope_check!)
+            denied ||= Engagement.deny_if_out_of_scope(args: args, command: blob)
             return JSON.generate(denied) if denied
           end
           if defined?(ToolGuard) && ToolGuard.respond_to?(:policy_decision)
@@ -343,8 +344,8 @@ module PWN
           return :store if STORE_TOOLS.include?(name)
 
           blob = argv_blob(args: opts[:args])
-          return :browse if blob.match?(BROWSE_ARGV_RX)
           return :write if blob.match?(WRITE_ARGV_RX)
+          return :browse if blob.match?(BROWSE_ARGV_RX)
           return :eval if name == 'pwn_eval'
 
           :read
@@ -381,7 +382,7 @@ module PWN
 
         private_class_method def self.note_taint(opts = {})
           text = opts[:text].to_s
-          grams = text.scan(/.{12,}/).first(20)
+          grams = text.scan(/.{24,}/).first(20)
           store = Thread.current[:pwn_taint] ||= []
           grams.each { |g| store << g[0, 64] }
           store.shift while store.length > 200
@@ -393,10 +394,10 @@ module PWN
           return false if mode == 'off'
 
           blob = opts[:args].inspect
-          return false if blob.length < 12
+          return false if blob.length < 24
           return false if opts[:args].is_a?(Hash) && (opts[:args][:taint_ack] == true || opts[:args]['taint_ack'] == true)
 
-          hit = Array(Thread.current[:pwn_taint]).any? { |g| g.length >= 12 && blob.include?(g) }
+          hit = Array(Thread.current[:pwn_taint]).any? { |g| g.length >= 24 && blob.include?(g) }
           return false unless hit
           return false unless blob.match?(/curl |bash -c|sh -c|\|\s*sh\b/i)
 

data/lib/pwn/ai/agent/learning.rb

@@ -196,11 +196,21 @@ module PWN
           jmean  = total.positive? ? weighted_judge_mean(rows: rows) : nil
           distrust = 0.0
           distrust = Reward.proxy_distrust.to_f.clamp(0.0, 1.0) if defined?(Reward) && Reward.respond_to?(:proxy_distrust)
+          orm = rows.select { |r| r[:judge_source].to_s != 'heuristic' && r[:source].to_s != 'heuristic' }
+          heur = rows.select { |r| r[:judge_source].to_s == 'heuristic' || r[:source].to_s == 'heuristic' }
+          orm_n = orm.length
+          heur_n = heur.length
+          orm_ok = orm.count { |r| r[:success] == true }
+          heur_ok = heur.count { |r| r[:success] == true }
           {
             total_outcomes: total,
             successes: ok,
             failures: total - ok,
             success_rate: raw,
+            success_rate_orm: orm_n.positive? ? (orm_ok.to_f / orm_n).round(3) : 0.0,
+            success_rate_heur: heur_n.positive? ? (heur_ok.to_f / heur_n).round(3) : 0.0,
+            orm_n: orm_n,
+            heur_n: heur_n,
             adjusted_success_rate: discount_success_rate(proxy: raw, judge: jmean, distrust: distrust),
             proxy_distrust: distrust,
             skills_known: skills,
@@ -227,6 +237,12 @@ module PWN
           fails = prefer_primary_tasks(rows: outcomes(limit: 200, success: false))
           fails = fails.reject { |r| r[:status].to_s == 'conflicted' }
           fails = fails.reject { |r| r[:verifier_verdict].to_s == 'pass' }
+          fails = fails.reject { |r| r[:details].to_s.match?(/\bPASS\b/) && r[:success] == true }
+          fails = fails.select do |r|
+            v = r[:verdict].to_s
+            v == 'wrong' || v == 'refused' || (r[:score].to_f < 0.3 && !r[:details].to_s.match?(/\bPASS\b/)) || r[:success] == false
+          end
+          fails = fails.reject { |r| r[:success] == true }
           # Do not mirror the same ids under both headings — that doubled the
           # failure signal and made RECENT OUTCOMES == RECENT FAILURES when the
           # last N attempts all failed (the injected block looked "stuck").
@@ -260,7 +276,7 @@ module PWN
           d   = s[:proxy_distrust].to_f
           rate = d > 0.05 ? s[:adjusted_success_rate] : s[:success_rate]
           tag  = d > 0.05 ? ' adj' : ''
-          hdr = "RECENT OUTCOMES (success_rate=#{(rate.to_f * 100).round(1)}%#{tag}#{" judge_mean=#{jm}" if jm} over #{s[:total_outcomes]} attempts)"
+          hdr = "RECENT OUTCOMES (success_rate=#{(rate.to_f * 100).round(1)}%#{tag} success=orm:#{(s[:success_rate_orm].to_f * 100).round(1)}%(#{s[:orm_n]}) / heur:#{(s[:success_rate_heur].to_f * 100).round(1)}%(#{s[:heur_n]})#{" judge_mean=#{jm}" if jm} over #{s[:total_outcomes]} attempts)"
           out = "#{hdr}\n#{rows.map(&fmt).join("\n")}\n"
           out += "RECENT FAILURES (learn from these — do not repeat)\n#{fails.map(&fmt).join("\n")}\n" unless fails.empty?
           "#{out}\n"

data/lib/pwn/ai/agent/loop.rb

@@ -64,6 +64,18 @@ module PWN
           unsatisfied incomplete_final empty_final evidence_final
         ].freeze
 
+        public_class_method def self.evidence_satisfied?(opts = {})
+          messages = Array(opts[:messages] || opts[:trace])
+          text = opts[:text].to_s
+          if defined?(TurnFinalizer) && TurnFinalizer.respond_to?(:arbitrate)
+            row = TurnFinalizer.arbitrate(request: opts[:request].to_s, messages: messages, paths: [])
+            return true if row[:complete] && row[:unmet].empty? && row[:ledger].any? { |_p, v| v[:write] && v[:read] }
+          end
+          write_or_read_evidenced?(messages: messages) && !text.strip.empty?
+        rescue StandardError
+          false
+        end
+
         public_class_method def self.debug_on?(opts = {})
           return true if opts[:debug]
           return true if defined?(PWN::Plugins::Log) && PWN::Plugins::Log.debug_enabled?
@@ -394,6 +406,7 @@ module PWN
         # the original request → force synthesis. English tasks are an advisory
         # compass only — an open verify tail must not block a finished ask.
         # The original request is the completion signal.
+
         private_class_method def self.evidence_enough_to_finalize?(opts = {})
           messages = Array(opts[:messages])
           turn_fails = opts[:turn_fails] || {}
@@ -595,7 +608,7 @@ module PWN
             request: request,
             messages: opts[:messages]
           )
-          return true if need == :write && !write_verified?(effects: effects)
+          return true if need == :write && !write_verified?(effects: effects, request: request, messages: opts[:messages])
           return true if need == :browse && !effects.include?(:browse)
           return true if need == :any && !effects.intersect?(%i[write browse eval])
 
@@ -607,10 +620,27 @@ module PWN
         private_class_method def self.write_verified?(opts = {})
           effects = Array(opts[:effects])
           idx = effects.index(:write)
-          return false if idx.nil?
+          if idx
+            tail = effects[(idx + 1)..] || []
+            return true if tail.intersect?(%i[read eval])
+          end
+
+          saw_write_argv = false
+          Array(opts[:messages]).each do |msg|
+            next unless msg.is_a?(Hash)
+
+            if msg[:role].to_s == 'assistant' && defined?(Dispatch)
+              Array(msg[:tool_calls]).each do |tc|
+                blob = Dispatch.send(:argv_blob, args: tc.dig(:function, :arguments) || tc.dig('function', 'arguments'))
+                saw_write_argv = true if blob.to_s.match?(Dispatch::WRITE_ARGV_RX)
+              end
+            elsif saw_write_argv && msg[:role].to_s == 'tool'
+              fx = stamped_effect(content: msg[:content])
+              return true if %i[read eval].include?(fx)
+            end
+          end
 
-          tail = effects[(idx + 1)..] || []
-          tail.intersect?(%i[read eval])
+          false
         rescue StandardError
           false
         end
@@ -875,6 +905,7 @@ module PWN
         end
 
         private_class_method def self.may_finalize?(opts = {})
+          return true if evidence_satisfied?(messages: opts[:messages], text: opts[:text], request: opts[:request])
           return false if incomplete_final?(text: opts[:text], last_iter: false)
           return false if request_unsatisfied?(
             request: opts[:request],
@@ -1678,6 +1709,7 @@ module PWN
             }
             # Ollama + abliterated / weak chat-templates often ignore tools: and
             # answer in prose (or print shell(...) as text). Force native
+
             # tool_calls until at least one tool result is already in history;
             # after that, auto so the model can emit a real final answer.
             # Respect explicit PWN::Env[:ai][:ollama][:tool_choice] override.
@@ -1705,10 +1737,6 @@ module PWN
           end
         end
 
-        # 3.1 — sliding-window history compaction for local models.
-        # Keep: system, original user, PLAN assistant (if any), last K tool
-        # pairs (assistant+tool), and the most recent assistant. Stale tool
-        # bodies are truncated to history_tool_max_chars.
         private_class_method def self.session_chat_history(opts = {})
           return [] unless defined?(PWN::Sessions) && PWN::Sessions.respond_to?(:to_llm_messages)
 
@@ -1831,15 +1859,15 @@ module PWN
 
         private_class_method def self.spill_tool_body(opts = {})
           text = opts[:text].to_s
-          digest = Digest::SHA256.hexdigest(text)[0, 16]
-          dir = HISTORY_SPILL_DIR
+          digest = Digest::SHA256.hexdigest(text)
+          dir = File.join(Dir.home, '.pwn', 'artifacts', 'transcripts', (Thread.current[:pwn_session_id] || 'default').to_s)
           FileUtils.mkdir_p(dir)
-          path = File.join(dir, "#{digest}.txt")
+          path = File.join(dir, "#{digest[0, 12]}.txt")
           File.binwrite(path, text) unless File.file?(path)
           head = text.byteslice(0, 2_048).to_s
           tail = text.bytesize > 3_072 ? text.byteslice(-1_024, 1_024).to_s : ''
           mid = tail.empty? ? '' : "\n...\n#{tail}"
-          "#{head}#{mid}\n[compacted path=#{path} sha256=#{digest} bytes=#{text.bytesize}]"
+          "#{head}#{mid}\n[compacted path=#{path} sha256=#{digest} bytes=#{text.bytesize} ref=#{path}]"
         rescue StandardError
           "[compacted bytes=#{opts[:text].to_s.bytesize}]"
         end
@@ -3002,17 +3030,21 @@ module PWN
                 text: text
               )
                 turn_fails['unsatisfied'] += 1
-                unmet = completion_unmet(request: request, messages: messages)
-                warn "[pwn-ai/loop] original request not evidenced on iter=#{i} unmet=#{unmet.join(',')}; continuing"
-                debug_progress(msg: "bounce unsatisfied unmet=#{unmet.join(',')} snippet=#{debug_snippet(text: text)}")
-                messages << {
-                  role: 'user',
-                  content: "[pwn-ai] The original request is not evidenced yet. unmet=#{unmet.join(',')} " \
-                           'Keep calling CORE_TOOLS (shell, pwn_eval) until that request is ' \
-                           'done or a tool returned failure evidence. pwn-ai does not decide ' \
-                           'authorization. Do not declare completion from a listing or a refusal.'
-                }
-                next
+                if turn_fails['unsatisfied'] >= 2 && evidence_satisfied?(request: request, messages: messages, text: text)
+                  debug_progress(msg: 'nag cap: evidence_satisfied after 2 bounces')
+                else
+                  unmet = completion_unmet(request: request, messages: messages)
+                  warn "[pwn-ai/loop] original request not evidenced on iter=#{i} unmet=#{unmet.join(',')}; continuing"
+                  debug_progress(msg: "bounce unsatisfied unmet=#{unmet.join(',')} snippet=#{debug_snippet(text: text)}")
+                  messages << {
+                    role: 'user',
+                    content: "[pwn-ai] The original request is not evidenced yet. unmet=#{unmet.join(',')} " \
+                             'Keep calling CORE_TOOLS (shell, pwn_eval) until that request is ' \
+                             'done or a tool returned failure evidence. pwn-ai does not decide ' \
+                             'authorization. Do not declare completion from a listing or a refusal.'
+                  }
+                  next
+                end
               end
               debug_progress(msg: "final accepted chars=#{text.to_s.length}")
               quiet_debug_tui!(reason: 'final')
@@ -3163,8 +3195,6 @@ module PWN
           "AUTHOR(S):\n  0day Inc. <support@0dayinc.com>\n"
         end
 
-        # Display Usage for this Module
-
         public_class_method def self.help
           puts "USAGE:
             # Run debug on and return its result
@@ -3172,6 +3202,14 @@ module PWN
               debug: 'optional - debug value consumed by #debug_on?'
             )
 
+            # True when write-then-readback evidence satisfies the original request.
+            #{self}.evidence_satisfied?(
+              messages: 'optional - Array of role/content hashes',
+              trace: 'optional - alias for messages',
+              text: 'optional - final answer text',
+              request: 'optional - original request'
+            )
+
             # True only when the ask needs a live host/file/browser effect. World-knowledge
             #{self}.catalog_lookup?(
               request: 'required - request value consumed by #catalog_lookup?'

data/lib/pwn/ai/agent/metrics.rb

@@ -99,9 +99,32 @@ module PWN
             bump(bucket: e, success: success, duration: duration, error: error)
           end
           save(metrics: metrics)
+          append_jsonl(opts.merge(name: name, success: success, duration: duration, error: error, engine: engine))
           t
         end
 
+        public_class_method def self.append_jsonl(opts = {})
+          path = File.join(Dir.home, '.pwn', 'logs', 'tool_metrics.jsonl')
+          FileUtils.mkdir_p(File.dirname(path))
+          row = {
+            ts: Time.now.utc.iso8601,
+            session: Thread.current[:pwn_session_id],
+            tool: opts[:name],
+            latency_ms: (opts[:duration].to_f * 1000).round,
+            timeout_used: opts[:timeout],
+            outcome: opts[:success] ? 'ok' : 'err',
+            error_class: opts[:error].to_s.split(':').first,
+            bytes_out: opts[:bytes_out].to_i
+          }
+          File.open(path, 'a') do |f|
+            f.flock(File::LOCK_EX)
+            f.puts(JSON.generate(row))
+          end
+          row
+        rescue StandardError
+          nil
+        end
+
         # Supported Method Parameters::
         # rows = PWN::AI::Agent::Metrics.summary(
         #   limit: 'optional - cap number of tools returned (default 25)',
@@ -664,11 +687,22 @@ module PWN
             #{self}.record(
               name: 'required - tool name that was dispatched',
               success: 'required - Boolean, did the handler complete without error',
-              duration: 'optional - Float seconds the dispatch took',
+              duration: 'optional - Float seconds the dispatch took (wall time)',
               error: 'optional - String error message when success is false',
               engine: 'optional - Symbol/String AI engine that chose this tool (segments telemetry)'
             )
 
+            # Append one JSONL telemetry row under ~/.pwn/logs/tool_metrics.jsonl.
+            #{self}.append_jsonl(
+              name: 'required - tool name',
+              success: 'optional - Boolean outcome',
+              duration: 'optional - Float seconds the dispatch took (wall time)',
+              error: 'optional - error string',
+              engine: 'optional - engine name',
+              timeout: 'optional - timeout used',
+              bytes_out: 'optional - output byte count'
+            )
+
             # Run summary and return its result
             #{self}.summary(
               limit: 'optional - cap number of tools returned (default 25)',

data/lib/pwn/ai/agent/registry.rb

@@ -113,6 +113,7 @@ module PWN
         # )
 
         public_class_method def self.definitions(opts = {})
+          eager_load!
           enabled = opts[:enabled]
           enabled = enabled.map(&:to_s) if enabled
           pool = @entries.values.select { |e| (enabled.nil? || enabled.include?(e.toolset)) && safe_check(entry: e) }
@@ -296,6 +297,10 @@ module PWN
         # )
 
         public_class_method def self.discover(opts = {})
+          eager_load!(opts)
+        end
+
+        public_class_method def self.eager_load!(opts = {})
           force = opts[:force] ||= false
           return @entries.keys if @discovered && !force
 
@@ -311,6 +316,19 @@ module PWN
           @entries.keys
         end
 
+        public_class_method def self.selftest(opts = {})
+          _dry = opts[:dry_run]
+          eager_load!
+          tools_dir = File.join(__dir__, 'tools')
+          files = Dir[File.join(tools_dir, '*.rb')]
+          rows = @entries.map do |name, e|
+            schema = e.schema.is_a?(Hash)
+            required = Array(e.schema&.dig(:parameters, :required) || e.schema&.dig('parameters', 'required'))
+            { name: name, schema_valid: schema, handler: !e.handler.nil?, required: required }
+          end
+          { tools: rows, files: files.length, registered: @entries.length, ok: rows.length >= files.length }
+        end
+
         private_class_method def self.safe_check(opts = {})
           entry = opts[:entry]
           entry.check.call
@@ -428,6 +446,16 @@ module PWN
               force: 'optional - re-require tool files even if already discovered (default false)'
             )
 
+            # Eager-load every tools/*.rb so Registry.definitions works in a cold REPL.
+            #{self}.eager_load!(
+              force: 'optional - re-require tool files even if already discovered (default false)'
+            )
+
+            # Schema/handler contract check for every registered tool.
+            #{self}.selftest(
+              dry_run: 'optional - reserved dry-run flag'
+            )
+
             # Print the AUTHOR(S) string for this module.
             #{self}.authors
           "

data/lib/pwn/ai/agent/reward.rb

@@ -203,10 +203,11 @@ module PWN
           v[:engine] = eng
           v[:task_class] = request.match?(/analy[sz]e|summar|strength|weakness|fitness/i) ? 'analysis' : 'operational'
           if pass
-            v[:score] = [v[:score].to_f, 0.7].max
-            v[:score] = [v[:score].to_f, 0.70].min
+            score = v[:score].to_f
+            v[:score] = [score, 0.6].max
             v[:success] = true if prec
             v[:verifier_verdict] ||= :pass
+            v[:verdict] = :solved
           end
           v[:score_components] ||= {
             judge: v[:score].to_f,
@@ -1099,7 +1100,7 @@ module PWN
         CHEAP_ORM_TEMP    = 0.1
         CHEAP_ORM_TRACE_N = 12
         ORM_SAMPLE_WEIGHT = 1.0
-        HEURISTIC_SAMPLE_WEIGHT = 0.25
+        HEURISTIC_SAMPLE_WEIGHT = 0.45
         ERROR_SAMPLE_WEIGHT = 0.15
         ENGINE_CHAT_MODS = {
           openai: 'PWN::AI::OpenAI',

data/lib/pwn/ai/agent/tool_guard.rb

@@ -5,6 +5,9 @@ require 'json'
 require 'fileutils'
 require 'securerandom'
 require 'time'
+require 'openssl'
+require 'uri'
+require 'base64'
 
 module PWN
   module AI
@@ -41,7 +44,12 @@ module PWN
         end
 
         public_class_method def self.placeholder?(opts = {})
-          PLACEHOLDER_RX.match?(opts[:text].to_s)
+          s = opts[:text].to_s.dup
+          s.gsub!(/<<[-~]?\s*(['"])(\w+)\1.*?^\2\s*$/m, ' ')
+          s.gsub!(/<<[-~]?\s*(\w+).*?^\1\s*$/m, ' ')
+          s.gsub!(/'[^']*'/, "''")
+          s.gsub!(/"([^"\\]|\\.)*"/, '""')
+          PLACEHOLDER_RX.match?(s)
         rescue StandardError
           false
         end
@@ -60,18 +68,36 @@ module PWN
         end
 
         public_class_method def self.mint_canary(opts = {})
-          n = (opts[:bytes] || 8).to_i
-          n = 8 if n <= 0
-          tok = "PWNCANARY#{SecureRandom.hex(n)}"
+          _bytes = opts[:bytes]
+          turn = (opts[:turn] || Thread.current[:pwn_loop_iter] || 0).to_i
+          sid = (opts[:session_id] || Thread.current[:pwn_session_id] || 'sess').to_s
+          key = (Thread.current[:pwn_canary_key] ||= SecureRandom.hex(16))
+          tok = OpenSSL::HMAC.hexdigest('SHA256', key, "#{sid}:#{turn}")[0, 16]
+          hist = Thread.current[:pwn_canary_hist] ||= []
+          hist << tok
+          hist.shift while hist.length > 4
           Thread.current[:pwn_canary] = tok
           tok
         end
 
         public_class_method def self.canary_leak?(opts = {})
-          tok = Thread.current[:pwn_canary].to_s
-          return false if tok.empty?
-
-          opts[:text].to_s.include?(tok)
+          text = opts[:text].to_s
+          toks = Array(Thread.current[:pwn_canary_hist])
+          toks << Thread.current[:pwn_canary].to_s
+          toks = toks.reject(&:empty?).uniq
+          return false if toks.empty?
+
+          require 'base64'
+          toks.any? do |tok|
+            next true if text.include?(tok)
+
+            b64 = Base64.strict_encode64(tok)
+            b64u = Base64.urlsafe_encode64(tok)
+            hex = tok.each_byte.map { |b| format('%02x', b) }.join
+            enc = URI.encode_www_form_component(tok)
+            rot = tok.tr('A-Za-z', 'N-ZA-Mn-za-m')
+            text.include?(b64) || text.include?(b64u) || text.include?(hex) || text.include?(enc) || text.include?(rot)
+          end
         end
 
         public_class_method def self.injection_score(opts = {})
@@ -475,6 +501,16 @@ module PWN
           nil
         end
 
+        public_class_method def self.scope_check!(opts = {})
+          return nil unless defined?(Engagement)
+
+          Engagement.deny_if_out_of_scope(
+            args: opts[:args],
+            command: opts[:command] || opts[:args].inspect,
+            text: opts[:text]
+          )
+        end
+
         public_class_method def self.rfc1918?(opts = {})
           oct = opts[:ip].to_s.split('.').map(&:to_i)
           return false unless oct.length == 4
@@ -568,7 +604,9 @@ module PWN
 
             # Mint a per-thread session canary token stored on Thread.current.
             #{self}.mint_canary(
-              bytes: 'optional - hex length (defaults to 8)'
+              bytes: 'optional - unused reserved length (HMAC uses 16 hex chars)',
+              turn: 'optional - turn number mixed into the HMAC',
+              session_id: 'optional - session id mixed into the HMAC'
             )
 
             # True when text contains the current session canary.
@@ -729,6 +767,13 @@ module PWN
               args: 'required - Hash of tool arguments'
             )
 
+            # Block network args outside the active engagement scope.
+            #{self}.scope_check!(
+              args: 'optional - Hash of tool arguments',
+              command: 'optional - command string to scan for hosts',
+              text: 'optional - free-form blob to scan'
+            )
+
             # Print the AUTHOR(S) string for this module.
             #{self}.authors
           "

data/lib/pwn/ai/agent/turn_finalizer.rb

@@ -227,6 +227,16 @@ module PWN
           ledger
         end
 
+        public_class_method def self.evidence_satisfied?(opts = {})
+          row = arbitrate(
+            request: opts[:request],
+            messages: opts[:messages] || opts[:trace],
+            paths: opts[:paths],
+            session_t0: opts[:session_t0]
+          )
+          row[:complete] == true && Array(row[:unmet]).empty?
+        end
+
         public_class_method def self.authors
           "AUTHOR(S):\n  0day Inc. <support@0dayinc.com>\n"
         end
@@ -279,7 +289,16 @@ module PWN
 
             # Build path → {write,read} ledger from tool messages.
             #{self}.evidence_ledger(
-              messages: 'optional - Array of role/content hashes for this turn'
+              messages: 'optional - Array of role/content hashes'
+            )
+
+            # True when write-then-readback evidence satisfies the original request.
+            #{self}.evidence_satisfied?(
+              request: 'optional - original request text',
+              messages: 'optional - Array of role/content hashes',
+              trace: 'optional - alias for messages (Array of role/content hashes)',
+              paths: 'optional - Array of declared deliverable paths',
+              session_t0: 'optional - session start Time'
             )
 
             # Print the AUTHOR(S) string for this module.

data/lib/pwn/plugins/artifact_registry.rb

@@ -3,6 +3,7 @@
 require 'fileutils'
 require 'json'
 require 'digest'
+require 'time'
 
 module PWN
   module Plugins
@@ -70,6 +71,26 @@ module PWN
         end
       end
 
+      public_class_method def self.put(opts = {})
+        bytes = opts[:bytes]
+        src = opts[:path].to_s
+        bytes = File.binread(src) if bytes.nil? && File.file?(src)
+        raise 'ERROR: bytes or path is required' if bytes.nil?
+
+        sha = Digest::SHA256.hexdigest(bytes)
+        dir = File.join(ROOT, 'sha256', sha[0, 2])
+        FileUtils.mkdir_p(dir)
+        dest = File.join(dir, sha)
+        File.binwrite(dest, bytes) unless File.file?(dest)
+        meta = File.join(ROOT, 'manifest.jsonl')
+        FileUtils.mkdir_p(ROOT)
+        File.open(meta, 'a') do |f|
+          f.flock(File::LOCK_EX)
+          f.puts(JSON.generate(sha256: sha, size: bytes.bytesize, tool: opts[:tool], session: opts[:session_id], kind: opts[:kind], created_at: Time.now.utc.iso8601, source_path: src, dest: dest))
+        end
+        { sha256: sha, path: dest, size: bytes.bytesize }
+      end
+
       public_class_method def self.authors
         "AUTHOR(S):\n  0day Inc. <support@0dayinc.com>\n"
       end
@@ -81,14 +102,14 @@ module PWN
 
           # Run register and return its result
           #{self}.register(
-            session_id: 'optional - session id value consumed by #register',
+            session_id: 'optional - pwn-ai session id that produced this artifact',
             path: 'required - filesystem path to read or write',
             kind: 'optional - kind value consumed by #register'
           )
 
           # Run list and return its result
           #{self}.list(
-            session_id: 'optional - session id value consumed by #list'
+            session_id: 'optional - pwn-ai session id whose artifacts to list'
           )
 
           # Read an artifact file and return sha256 plus a body cap.
@@ -104,6 +125,15 @@ module PWN
             mode: 'optional - text, hex, or base64 (defaults to text)'
           )
 
+          # Store bytes under artifacts/sha256/<h2>/<hash> and append manifest.jsonl.
+          #{self}.put(
+            bytes: 'optional - raw bytes to store',
+            path: 'optional - filesystem path to read when bytes is omitted',
+            tool: 'optional - tool name for provenance',
+            session_id: 'optional - pwn-ai session id for provenance',
+            kind: 'optional - artifact kind'
+          )
+
           # Print the AUTHOR(S) string for this module.
           #{self}.authors
         "

data/lib/pwn/plugins/exploit_dev.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'open3'
+require 'fileutils'
 
 module PWN
   module Plugins
@@ -171,6 +172,31 @@ module PWN
         end
       end
 
+      public_class_method def self.scaffold(opts = {})
+        path = (opts[:path] || opts[:bin]).to_s
+        raise 'ERROR: path is required' if path.empty?
+
+        triage = {}
+        triage = PWN::Plugins::BinaryParser.triage(path: path) if defined?(PWN::Plugins::BinaryParser)
+        gadgets = []
+        gadgets = Array(self.gadgets(path: path)[:gadgets]) if File.file?(path)
+        body = <<~RB
+          # frozen_string_literal: true
+          # scaffold for #{path}
+          # arch=#{triage[:arch]} pie=#{triage.dig(:protections, :pie)} canary=#{triage.dig(:protections, :canary)}
+          require 'pwn'
+          bin = #{path.inspect}
+          cyclic = PWN::Plugins::ExploitDev.cyclic(length: 200)
+          io = PWN::Plugins::ExploitDev.io(cmd: bin)
+          PWN::Plugins::ProcessTube.write_line(id: io[:id], line: cyclic)
+        RB
+        out = opts[:out].to_s
+        out = File.join(Dir.home, '.pwn', 'artifacts', 'scaffolds', "#{File.basename(path)}.rb") if out.empty?
+        FileUtils.mkdir_p(File.dirname(out))
+        File.write(out, body)
+        { path: out, triage: triage, gadgets: gadgets.first(8) }
+      end
+
       public_class_method def self.authors
         "AUTHOR(S):\n  0day Inc. <support@0dayinc.com>\n"
       end
@@ -294,6 +320,13 @@ module PWN
             port: 'optional - remote TCP port'
           )
 
+          # Emit a ruby exploit scaffold bound to triage output.
+          #{self}.scaffold(
+            path: 'required - binary path to scaffold against',
+            bin: 'optional - alias for path',
+            out: 'optional - output .rb path (defaults under ~/.pwn/artifacts/scaffolds)'
+          )
+
           # Run gadgets and return its result
           #{self}.gadgets(
             path: 'required - filesystem path of the binary to search for gadgets'

data/lib/pwn/plugins/findings.rb

@@ -23,6 +23,9 @@ module PWN
         arts << opts[:poc].to_s unless opts[:poc].to_s.empty?
         raise 'ERROR: poc_artifacts are required' if arts.empty?
 
+        ev = opts[:evidence].to_s
+        raise 'ERROR: evidence must be at least 40 characters citing the PoC' if ev.length < 40
+
         row = {
           id: SecureRandom.hex(6),
           title: title,
@@ -83,7 +86,12 @@ module PWN
         parent_id = opts[:parent_id].to_s
         raise 'ERROR: parent_id is required' if parent_id.empty?
 
-        child = record(opts.merge(chain_parent_id: parent_id))
+        child = record(
+          opts.merge(
+            chain_parent_id: parent_id,
+            evidence: (opts[:evidence].to_s.length >= 40 ? opts[:evidence] : 'Chained finding reuses parent PoC evidence and raises composite impact.')
+          )
+        )
         ranks = { 'info' => 0, 'low' => 1, 'medium' => 2, 'high' => 3, 'critical' => 4 }
         parent = report.find { |r| r[:id].to_s == parent_id }
         sev = [parent&.[](:severity), child[:severity]].compact.max_by { |s| ranks[s.to_s] || 0 }

data/lib/pwn/plugins/ghidra.rb

@@ -3,6 +3,7 @@
 require 'open3'
 require 'fileutils'
 require 'json'
+require 'digest'
 
 module PWN
   module Plugins
@@ -31,12 +32,28 @@ module PWN
       end
 
       public_class_method def self.decompile(opts = {})
-        analyze(opts)
+        path = (opts[:bin] || opts[:path]).to_s
+        raise 'ERROR: bin is required' if path.empty?
+
+        sha = Digest::SHA256.file(path).hexdigest if File.file?(path)
+        cache = File.join(Dir.home, '.pwn', 'cache', 'decompile', "#{sha}.json") if sha
+        return JSON.parse(File.read(cache), symbolize_names: true).merge(cached: true) if cache && File.file?(cache)
+
+        row = analyze(opts)
+        fn = opts[:function].to_s
+        row[:function] = fn unless fn.empty?
+        FileUtils.mkdir_p(File.dirname(cache)) if cache
+        File.write(cache, JSON.generate(row)) if cache
+        row
       end
 
       private_class_method def self.r2_fallback(opts = {})
         path = opts[:path].to_s
         stdout, stderr, status = Open3.capture3('r2', '-q', '-c', 'aaa;s main;pdg', path)
+        if stdout.to_s.strip.empty?
+          stdout, stderr, status = Open3.capture3('r2', '-q', '-c', 'aaa;s main;pdc', path)
+          return { stdout: stdout, stderr: stderr, exit: status.exitstatus, engine: 'r2-pdc' }
+        end
         { stdout: stdout, stderr: stderr, exit: status.exitstatus, engine: 'r2' }
       rescue StandardError => e
         { error: e.message, engine: 'r2' }
@@ -62,7 +79,8 @@ module PWN
           #{self}.decompile(
             bin: 'required - filesystem path of the binary',
             path: 'optional - alias for bin',
-            project_dir: 'optional - Ghidra project directory'
+            project_dir: 'optional - Ghidra project directory',
+            function: 'optional - function name to decompile instead of the whole program'
           )
 
           # Print the AUTHOR(S) string for this module.

data/lib/pwn/plugins/preflight_checker.rb

@@ -67,6 +67,23 @@ module PWN
         { ok: false, name: name, degraded: true, hint: "missing #{name}; install via pwn setup --deps" }
       end
 
+      CAPABILITIES = {
+        web_scan: %w[nuclei burpsuite zaproxy],
+        raw_packet: %w[],
+        decompile: %w[analyzeHeadless r2],
+        debug: %w[gdb]
+      }.freeze
+
+      public_class_method def self.capability_coverage(opts = {})
+        want = opts[:capability] || opts[:cap]
+        if want
+          bins = Array(CAPABILITIES[want.to_sym])
+          covered = bins.any? { |b| bin?(name: b) }
+          return { capability: want.to_s, covered: covered, bins: bins }
+        end
+        CAPABILITIES.keys.map { |k| capability_coverage(capability: k) }
+      end
+
       TASK_BINS = {
         'proxy' => %w[burpsuite zaproxy],
         'vuln-scan' => %w[nuclei openvas],
@@ -176,6 +193,12 @@ module PWN
             name: 'required - binary name to probe'
           )
 
+          # Report whether a named capability is covered by any healthy plugin binary.
+          #{self}.capability_coverage(
+            capability: 'optional - capability name such as web_scan',
+            cap: 'optional - alias for capability'
+          )
+
           # First healthy binary for a task (proxy, vuln-scan, re).
           #{self}.pick(
             task: 'required - capability name such as proxy or vuln-scan'

data/lib/pwn/plugins/process_tube.rb

@@ -21,7 +21,7 @@ module PWN
         argv = cmd.is_a?(Array) ? cmd.map(&:to_s) : ['bash', '-lc', cmd.to_s]
         r, w, pid = PTY.spawn(*argv)
         id = "tube_#{pid}"
-        @tubes[id] = { r: r, w: w, pid: pid, buf: +'' }
+        @tubes[id] = { r: r, w: w, pid: pid, buf: +'', started_at: Time.now, last_io: Time.now }
         { id: id, pid: pid }
       end
 
@@ -105,6 +105,26 @@ module PWN
         n
       end
 
+      public_class_method def self.list(opts = {})
+        _idle = opts[:idle]
+        now = Time.now
+        @tubes.map do |id, t|
+          { id: id, pid: t[:pid], started_at: t[:started_at], last_io: t[:last_io], age_s: (now - (t[:started_at] || now)).to_i }
+        end
+      end
+
+      public_class_method def self.kill(opts = {})
+        id = opts[:id].to_s
+        t = @tubes[id]
+        return { ok: false, id: id } unless t
+
+        Process.kill('TERM', t[:pid]) if t[:pid]
+        close(id: id)
+        { ok: true, id: id }
+      rescue StandardError => e
+        { ok: false, id: id, error: e.message }
+      end
+
       public_class_method def self.authors
         "AUTHOR(S):\n  0day Inc. <support@0dayinc.com>\n"
       end
@@ -165,6 +185,16 @@ module PWN
             session_id: 'optional - agent session id for transcript grouping'
           )
 
+          # List live tubes with age.
+          #{self}.list(
+            idle: 'optional - unused reserved idle-seconds filter'
+          )
+
+          # SIGTERM then close a tube by id.
+          #{self}.kill(
+            id: 'required - tube id from spawn or connect'
+          )
+
           # Print the AUTHOR(S) string for this module.
           #{self}.authors
         "

data/lib/pwn/sessions.rb

@@ -172,6 +172,10 @@ module PWN
           next unless %w[user assistant].include?(row[:role].to_s)
 
           body = row[:content].to_s
+          if body.include?('[compacted') && body =~ /ref=(\S+)/
+            ref = Regexp.last_match(1)
+            body = File.read(ref) if File.file?(ref)
+          end
           next if body.strip.empty?
           next if !target.empty? && !body.downcase.include?(target)
 

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.720'
+  VERSION = '0.5.721'
 end

data/spec/lib/pwn/ai/agent/dispatch_spec.rb

@@ -28,6 +28,15 @@ describe PWN::AI::Agent::Dispatch do
     expect(described_class.effect(name: 'memory_recall', args: { query: 'docs' })).to eq :recall
     expect(described_class.effect(name: 'memory_remember', args: { key: 'sop' })).to eq :store
     expect(described_class.effect(name: 'learning_note_outcome', args: { task: 'x' })).to eq :store
+    expect(
+      described_class.effect(
+        name: 'shell',
+        args: {
+          command: "cat >> ~/.pwn/logs/pwn-ai-DEBUG-2026-09-03.md <<'EOF'\n" \
+                   "ToolGuard, TransparentBrowser, and devtools are strengths.\nEOF"
+        }
+      )
+    ).to eq :write
     src = File.read(described_class.method(:effect).source_location.first)
     expect(src).to match(/def self\.effect/)
   end

data/spec/lib/pwn/ai/agent/loop_spec.rb

@@ -985,6 +985,50 @@ describe PWN::AI::Agent::Loop do # rubocop:disable Metrics/BlockLength
       Thread.current[:pwn_loop_deliverables] = nil
     end
 
+    it 'does not bounce with empty unmet after a redirected write whose body mentions browsers' do
+      Dir.mktmpdir do |dir|
+        path = File.join(dir, 'pwn-ai-DEBUG-2026-09-03.md')
+        File.write(path, "# assessment\n" * 40)
+        req = "analyze how well pwn-ai enables pentest. Store this list in #{path}."
+        write_cmd = "cat >> #{path} <<'EOF'\nTransparentBrowser and devtools are strengths.\nEOF"
+        msgs = [
+          { role: 'user', content: req },
+          {
+            role: 'assistant',
+            tool_calls: [{ function: { name: 'shell', arguments: { command: write_cmd }.to_json } }]
+          },
+          {
+            role: 'tool',
+            name: 'shell',
+            content: {
+              success: true,
+              result: { stdout: 'APPENDED', exit: 0 },
+              effect: PWN::AI::Agent::Dispatch.effect(name: 'shell', args: { command: write_cmd })
+            }.to_json
+          },
+          {
+            role: 'assistant',
+            tool_calls: [{ function: { name: 'shell', arguments: { command: "cat #{path}" }.to_json } }]
+          },
+          {
+            role: 'tool',
+            name: 'shell',
+            content: { success: true, result: { stdout: File.read(path), exit: 0 }, effect: 'read' }.to_json
+          }
+        ]
+        expect(described_class.send(:completion_unmet, request: req, messages: msgs)).to eq([])
+        expect(described_class.send(:request_unsatisfied?, request: req, messages: msgs)).to eq(false)
+        expect(
+          described_class.send(
+            :may_finalize?,
+            request: req,
+            messages: msgs,
+            text: "Done. The assessment is at #{path}."
+          )
+        ).to eq(true)
+      end
+    end
+
     it 'keeps issue_work unsatisfied until proofs exist, without Crit/High regex' do
       src = File.read(described_class.method(:run).source_location.first)
       expect(src).not_to include('Crit/High')

data/spec/lib/pwn/ai/agent/reward_spec.rb

@@ -411,7 +411,7 @@ describe 'PWN::AI::Agent::Reward vs TUI plan' do
 
   it 'floors verified PASS analytical answers at 0.6' do
     src = File.read(PWN::AI::Agent::Reward.method(:judge).source_location.first)
-    expect(src).to include('[score, 0.7].max')
+    expect(src).to include('[score, 0.6].max')
     expect(src).to include('\bPASS\b')
   end
 

data/spec/lib/pwn/ai/agent/tool_guard_spec.rb

@@ -36,6 +36,15 @@ describe PWN::AI::Agent::ToolGuard do
     it 'rejects a real command' do
       expect(described_class.placeholder?(text: 'uname -r')).to be false
     end
+
+    it 'does not treat ellipsis inside a heredoc body as a placeholder command' do
+      body = "cat <<'EOF'\nThe token ... lives in the document body.\nEOF\n"
+      expect(described_class.placeholder?(text: body)).to be false
+    end
+
+    it 'still denies a command that is only a placeholder token' do
+      expect(described_class.placeholder?(text: ' ... ')).to be true
+    end
   end
 
   describe '.coerce_args' do

data/spec/lib/pwn/plugins/findings_spec.rb

@@ -7,7 +7,7 @@ describe PWN::Plugins::Findings do
   it 'records and reports a finding' do
     Dir.mktmpdir do |dir|
       stub_const('PWN::Plugins::Findings::FILE', File.join(dir, 'findings.jsonl'))
-      row = described_class.record(title: 'xss', severity: 'high', host: '127.0.0.1', poc: '/tmp/poc.rb')
+      row = described_class.record(title: 'xss', severity: 'high', host: '127.0.0.1', poc: '/tmp/poc.rb', evidence: 'PoC at /tmp/poc.rb reproduces XSS in search with a reflected payload.')
       expect(row[:id]).not_to be_empty
       expect(described_class.report.first[:title]).to eq('xss')
     end
@@ -19,7 +19,7 @@ describe PWN::Plugins::Findings do
       expect { described_class.record(title: 'xss') }.to raise_error(/poc/i)
       poc = File.join(dir, 'poc.rb')
       File.write(poc, 'puts 1')
-      row = described_class.record(title: 'xss', poc_artifacts: [poc], severity: 'high')
+      row = described_class.record(title: 'xss', poc_artifacts: [poc], severity: 'high', evidence: 'PoC file reproduces reflected XSS in search; see artifact path.')
       expect(row[:poc_artifacts]).to include(poc)
       out = described_class.render(dir_path: dir, report_name: 'findings')
       expect(File.file?(out[:markdown])).to be true
@@ -33,7 +33,7 @@ describe PWN::Plugins::Findings do
       stub_const('PWN::Plugins::Findings::FILE', File.join(dir, 'findings.jsonl'))
       poc = File.join(dir, 'poc.rb')
       File.write(poc, 'puts 1')
-      parent = described_class.record(title: 'xss', poc_artifacts: [poc], severity: 'medium')
+      parent = described_class.record(title: 'xss', poc_artifacts: [poc], severity: 'medium', evidence: 'PoC file reproduces reflected XSS in search; see artifact path.')
       child = described_class.chain(parent_id: parent[:id], title: 'account-takeover', poc_artifacts: [poc], severity: 'high')
       expect(child[:chain_parent_id]).to eq(parent[:id])
       expect(child[:composite_severity]).to eq('high')
@@ -46,7 +46,7 @@ describe PWN::Plugins::Findings do
       stub_const('PWN::Plugins::Findings::FILE', File.join(dir, 'findings.jsonl'))
       poc = File.join(dir, 'poc.rb')
       File.write(poc, 'puts 1')
-      described_class.record(title: 'xss', poc_artifacts: [poc], engagement_id: 'lab')
+      described_class.record(title: 'xss', poc_artifacts: [poc], engagement_id: 'lab', evidence: 'PoC file reproduces reflected XSS in search; see artifact path.')
       expect(described_class.evidence_verify(engagement_id: 'lab')[:ok]).to eq(true)
       File.write(poc, 'tampered')
       expect(described_class.evidence_verify(engagement_id: 'lab')[:ok]).to eq(false)

data/third_party/pwn_rdoc.jsonl

@@ -374,6 +374,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.escalate Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.escalate`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.evidence_blob Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.evidence_blob`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.evidence_enough_to_finalize? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.evidence_enough_to_finalize?`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.evidence_satisfied? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.evidence_satisfied?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.evidence_tokens_missing? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.evidence_tokens_missing?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.expose_current_session Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.expose_current_session`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.extract_recall_match Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.extract_recall_match`: "}]}
@@ -439,6 +440,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.write_or_read_evidenced? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.write_or_read_evidenced?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Loop.write_verified? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Loop.write_verified?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Metrics.advantage Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Metrics.advantage`: Supported Method Parameters\n\na = PWN::AI::Agent::Metrics.advantage(name: ‘shell’)\n\nC1 — tool.success_rate − global_rate over the rolling window.\n"}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Metrics.append_jsonl Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Metrics.append_jsonl`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Metrics.authors Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Metrics.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Metrics.beta_sample Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Metrics.beta_sample`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Metrics.blank_bucket Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Metrics.blank_bucket`: "}]}
@@ -602,6 +604,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.definitions Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.definitions`: Supported Method Parameters\n\ntools = PWN::AI::Agent::Registry.definitions(\n\nenabled: 'optional - Array of toolset names to include; nil = all whose check passes',\nrelevance: 'optional - user request; when set AND :tool_router is enabled, slim to CORE + top-K keyword matches',\ntop_k: 'optional - keyword-ranked tools to keep beyond CORE (default 10)',\norder: 'optional - preference list forwarded only when this key is present',\npreference: 'optional - alias of :order; same key-present rule'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.discover Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.discover`: Supported Method Parameters\n\nnames = PWN::AI::Agent::Registry.discover(\n\nforce: 'optional - re-require tool files even if already discovered (default false)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.domain_pin_names Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.domain_pin_names`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.eager_load! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.eager_load!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.help Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.lookup Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.lookup`: Supported Method Parameters\n\nentry = PWN::AI::Agent::Registry.lookup(\n\nname: 'required - registered tool name'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.metrics_rates Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.metrics_rates`: "}]}
@@ -610,6 +613,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.register Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.register`: Supported Method Parameters\n\nPWN::AI::Agent::Registry.register(\n\nname: 'required - tool name exposed to the model',\ntoolset: 'required - grouping for enable/disable (terminal, file, pwn, memory…)',\nschema: 'required - OpenAI function schema {name:, description:, parameters:}',\nhandler: 'required - ->(args_hash) { ... } returning a JSON-serialisable object',\ncheck: 'optional - -> { bool } gate; tool only advertised when truthy',\nmax_chars: 'optional - cap on serialised result (default 24_000)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.router_enabled? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.router_enabled?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.safe_check Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.safe_check`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.selftest Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.selftest`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Registry.toolsets Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Registry.toolsets`: Supported Method Parameters\n\nnames = PWN::AI::Agent::Registry.toolsets\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Result.authors Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Result.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::Result.collect Usage"},{"role":"assistant","content":"`PWN::AI::Agent::Result.collect`: "}]}
@@ -807,6 +811,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.reset_timeout_budget Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.reset_timeout_budget`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.reset_timeout_budget! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.reset_timeout_budget!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.rfc1918? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.rfc1918?`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.scope_check! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.scope_check!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.scope_refusal Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.scope_refusal`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.shell_bash? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.shell_bash?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.shell_name Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.shell_name`: "}]}
@@ -827,6 +832,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::TurnFinalizer.defer Usage"},{"role":"assistant","content":"`PWN::AI::Agent::TurnFinalizer.defer`: Supported Method Parameters\n\nresult = PWN::AI::Agent::TurnFinalizer.defer(\n\nsession_id: 'required - PWN::Sessions id',\nrequest: 'optional - original user request',\nfinal: 'optional - user-visible final answer',\npredicted: 'optional - W3 predicted score',\nplan: 'optional - tangible-task plan',\nts_state: 'optional - TaskSummarizer state'\n\n)\n\nSnapshots the live Policy episode onto this thread, clears it so Loop.maybe_finish_policy is a no-op, and runs Learning.auto_introspect on a daemon thread with the episode re-attached.\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::TurnFinalizer.enter_user_path! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::TurnFinalizer.enter_user_path!`: Supported Method Parameters\n\nPWN::AI::Agent::TurnFinalizer.enter_user_path!\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::TurnFinalizer.evidence_ledger Usage"},{"role":"assistant","content":"`PWN::AI::Agent::TurnFinalizer.evidence_ledger`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::TurnFinalizer.evidence_satisfied? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::TurnFinalizer.evidence_satisfied?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::TurnFinalizer.finalize Usage"},{"role":"assistant","content":"`PWN::AI::Agent::TurnFinalizer.finalize`: Supported Method Parameters\n\nresult = PWN::AI::Agent::TurnFinalizer.finalize(\n\nsession_id:, request:, final:, predicted:, plan:, ts_state:,\nshould: true|false\n\n)\n\nSingle entry used when a caller wants the Hermes split without going through Learning.auto_introspect‘s gate.\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::TurnFinalizer.help Usage"},{"role":"assistant","content":"`PWN::AI::Agent::TurnFinalizer.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::TurnFinalizer.join_all! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::TurnFinalizer.join_all!`: Supported Method Parameters\n\nn = PWN::AI::Agent::TurnFinalizer.join_all!(timeout: 15)\n"}]}
@@ -1804,6 +1810,7 @@
 {"messages":[{"role":"user","content":"PWN::Plugins::ArtifactRegistry.get Usage"},{"role":"assistant","content":"`PWN::Plugins::ArtifactRegistry.get`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ArtifactRegistry.help Usage"},{"role":"assistant","content":"`PWN::Plugins::ArtifactRegistry.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ArtifactRegistry.list Usage"},{"role":"assistant","content":"`PWN::Plugins::ArtifactRegistry.list`: "}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::ArtifactRegistry.put Usage"},{"role":"assistant","content":"`PWN::Plugins::ArtifactRegistry.put`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ArtifactRegistry.read_page Usage"},{"role":"assistant","content":"`PWN::Plugins::ArtifactRegistry.read_page`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ArtifactRegistry.register Usage"},{"role":"assistant","content":"`PWN::Plugins::ArtifactRegistry.register`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ArtifactRegistry.required_bins Usage"},{"role":"assistant","content":"`PWN::Plugins::ArtifactRegistry.required_bins`: "}]}
@@ -2072,6 +2079,7 @@
 {"messages":[{"role":"user","content":"PWN::Plugins::ExploitDev.p8 Usage"},{"role":"assistant","content":"`PWN::Plugins::ExploitDev.p8`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ExploitDev.pack_int Usage"},{"role":"assistant","content":"`PWN::Plugins::ExploitDev.pack_int`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ExploitDev.required_bins Usage"},{"role":"assistant","content":"`PWN::Plugins::ExploitDev.required_bins`: "}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::ExploitDev.scaffold Usage"},{"role":"assistant","content":"`PWN::Plugins::ExploitDev.scaffold`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ExploitDev.shellcode Usage"},{"role":"assistant","content":"`PWN::Plugins::ExploitDev.shellcode`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ExploitDev.u16 Usage"},{"role":"assistant","content":"`PWN::Plugins::ExploitDev.u16`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ExploitDev.u32 Usage"},{"role":"assistant","content":"`PWN::Plugins::ExploitDev.u32`: "}]}
@@ -2515,6 +2523,7 @@
 {"messages":[{"role":"user","content":"PWN::Plugins::PreflightChecker.authors Usage"},{"role":"assistant","content":"`PWN::Plugins::PreflightChecker.authors`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::PreflightChecker.bin? Usage"},{"role":"assistant","content":"`PWN::Plugins::PreflightChecker.bin?`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::PreflightChecker.cap_net_raw? Usage"},{"role":"assistant","content":"`PWN::Plugins::PreflightChecker.cap_net_raw?`: "}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::PreflightChecker.capability_coverage Usage"},{"role":"assistant","content":"`PWN::Plugins::PreflightChecker.capability_coverage`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::PreflightChecker.check Usage"},{"role":"assistant","content":"`PWN::Plugins::PreflightChecker.check`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::PreflightChecker.help Usage"},{"role":"assistant","content":"`PWN::Plugins::PreflightChecker.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::PreflightChecker.host_summary Usage"},{"role":"assistant","content":"`PWN::Plugins::PreflightChecker.host_summary`: "}]}
@@ -2529,6 +2538,8 @@
 {"messages":[{"role":"user","content":"PWN::Plugins::ProcessTube.connect Usage"},{"role":"assistant","content":"`PWN::Plugins::ProcessTube.connect`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ProcessTube.expect Usage"},{"role":"assistant","content":"`PWN::Plugins::ProcessTube.expect`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ProcessTube.help Usage"},{"role":"assistant","content":"`PWN::Plugins::ProcessTube.help`: "}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::ProcessTube.kill Usage"},{"role":"assistant","content":"`PWN::Plugins::ProcessTube.kill`: "}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::ProcessTube.list Usage"},{"role":"assistant","content":"`PWN::Plugins::ProcessTube.list`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ProcessTube.reap_orphans Usage"},{"role":"assistant","content":"`PWN::Plugins::ProcessTube.reap_orphans`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ProcessTube.recvline Usage"},{"role":"assistant","content":"`PWN::Plugins::ProcessTube.recvline`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ProcessTube.recvuntil Usage"},{"role":"assistant","content":"`PWN::Plugins::ProcessTube.recvuntil`: "}]}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.720
+  version: 0.5.721
 platform: ruby
 authors:
 - 0day Inc.