pwn 0.5.729 → 0.5.732

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '04697e334aa79768d74f64b19c7e90c8a8b0372899abdf68d83bcfd4f2dcf96b'
-  data.tar.gz: 8e8934c327d039dbfaad46d62837d1e6241af718b915deba0ed3aac240ded64b
+  metadata.gz: f2cdd80d1b4ca26e89b583dbf7d8ad326f1a2a0d9217eabcf0856e57edfd2f80
+  data.tar.gz: 7dad008aa8906f6179687c13af204b60e6b8c7ae654cd82b6c6e033adeacef70
 SHA512:
-  metadata.gz: 68965dcb416fa10c340a8aaa4345409313f8949de2ea17529fbe570b35022e0eaa782639941f5d1ed873542dc6d1432a20372c0c16c1365ff32c199635829921
-  data.tar.gz: cb5176d386d0d26308ad52ac292714ddb11134fe384cf994ce275326a6d6dffbfa628f5616af99b7f6d44c9cf7df0add18a4f4d9669805e85278851da1b32a17
+  metadata.gz: c56ac381842f7264fd01780860b2133a8b23364909cd80b0195758bdcec71d7785d6c7e7f6ed0ff9253d1bc689415b9979381daa8fd909533f1b81a1717cd644
+  data.tar.gz: 8dd6752b81448de9a92d173b56c5ddab6b50480faeb24a2442c6d3c03a450ae6f0d3e073eace4a7bf50d4301b39de8cff8e016f88054a9068fd5d5b68e7a74f2

data/Gemfile

@@ -50,9 +50,9 @@ gem 'libusb', '0.8.0'
 gem 'luhn', '3.0.0'
 gem 'mail', '2.9.1'
 gem 'mcp', '1.5.1'
-gem 'meshtastic', '0.0.175'
+gem 'meshtastic', '0.0.178'
 gem 'metasm', '1.0.6'
-gem 'mongo', '2.25.0'
+gem 'mongo', '2.26.0'
 gem 'msfrpc-client', '1.1.2'
 gem 'netaddr', '2.0.6'
 gem 'net-ldap', '0.20.0'
@@ -81,7 +81,7 @@ gem 'rmagick', '7.1.4'
 gem 'rqrcode', '3.2.0'
 gem 'rspec', '3.13.2'
 gem 'rtesseract', '3.1.4'
-gem 'rubocop', '1.90.0'
+gem 'rubocop', '1.91.0'
 gem 'rubocop-rake', '0.7.1'
 gem 'rubocop-rspec', '3.10.2'
 gem 'ruby-audio', '1.6.1'

data/documentation/Agent-Tool-Registry.md

@@ -13,6 +13,7 @@ toolsets; the JSON-Schema for each tool is what the model actually sees.
 | `http` | `http_proxy_start` · `http_proxy_stop` · `http_proxy_entries` · `http_proxy_rules` · `http_replay` | `PWN::Plugins::MitmProxy`: native HTTP HAR capture/replay; opaque CONNECT tunnels |
 | `terminal` | `shell` | `Open3.capture3` on the host, after `PWN::AI::Agent::ToolGuard` |
 | `pwn` | `pwn_eval` | `TOPLEVEL_BINDING.eval` in the live REPL process, after `ToolGuard` |
+| `mcp` | `mcp` | `PWN::AI::MCP` session broker → any `PWN::AI::MCP::*` stdio client |
 | `memory` | `memory_remember` · `memory_recall` · `memory_forget` · `memory_clear` · **`memory_lean`** | `PWN::Memory` → `~/.pwn/memory.json` |
 | `skills` | `skills_consolidate` · **`skills_recall`** · `skill_list` · `skill_view` · `skill_create` · `skill_add_reference` · `skill_delete` · `skill_migrate_legacy` | `~/.pwn/skills/<name>/SKILL.md` (**[agentskills.io](https://agentskills.io) spec**; legacy flat `*.md` auto-migrated) |
 | `sessions` | **`session_recall`** · `sessions_list` · `sessions_view` · `sessions_current` · `sessions_delete` · `sessions_stats` · **`sessions_lean`** | `PWN::Sessions` → `~/.pwn/sessions/` |

data/documentation/Contributing.md

@@ -60,6 +60,67 @@ An already-true `stop:` callback raises cancellation before spawning either clie
 Invalid inputs still raise `ArgumentError`; native decoding never silently falls
 back to another decoder or a detector.
 
+### Optional Liquid and radare2 integration tests
+
+Native Liquid DSP examples and the real radare2 JSON replay are also explicit
+opt-ins, even when the backends happen to be installed. The default gate excludes
+`liquid_integration` and `radare2_integration` metadata rather than marking tests
+pending. Liquid interface checks, missing-library errors, pure-Ruby DSP fallback,
+radare2 argument validation, and binutils fallback coverage still run by default.
+The binary fallback tests require the existing binutils tools and `/bin/true`.
+
+```bash
+PWN_TEST_LIQUID=1 bundle exec rspec spec/lib/pwn/ffi/liquid_spec.rb
+PWN_TEST_RADARE2=1 bundle exec rspec spec/lib/pwn/plugins/binary_analysis_spec.rb
+# Enable both in the full gate:
+PWN_TEST_LIQUID=1 PWN_TEST_RADARE2=1 bundle exec rake
+```
+
+Liquid opt-in requires the liquid-dsp shared library (`libliquid`) visible to the
+dynamic loader. Radare2 opt-in requires `r2` and a C compiler named `cc` on PATH.
+The radare2 example compiles a small unstripped C fixture in a temporary directory,
+checks real JSON disassembly for its known `main` symbol, and removes the fixture
+afterward. It does not assume the host's stripped `/bin/true` has a discoverable
+`main`. Opt-in runs fail with installation guidance when a prerequisite is absent;
+they never skip or accept a degraded backend as native success. The tests install
+nothing and require no radio hardware or network access.
+
+### Optional FFTW, Volk, and SDR shared-library tests
+
+The default gate also excludes real FFTW/Volk computations and radio-library
+integration checks, regardless of what is installed. Missing-library behavior,
+mocked device inventory and stream lifecycle tests, and Ruby DSP fallbacks run
+without these shared libraries and produce no pending examples.
+
+| Environment opt-in | RSpec metadata | Loader prerequisite / coverage |
+| --- | --- | --- |
+| `PWN_TEST_FFTW=1` | `fftw_integration` | `libfftw3f`; native impulse FFT |
+| `PWN_TEST_VOLK=1` | `volk_integration` | `libvolk`; native conversion, accumulation, DSP dispatch |
+| `PWN_TEST_RTL_SDR=1` | `rtl_sdr_integration` | `librtlsdr`; binding resolution only, no USB scan |
+| `PWN_TEST_ADALM_PLUTO=1` | `adalm_pluto_integration` | Compatible `libiio`; library version only |
+| `PWN_TEST_SOAPY_SDR=1` | `soapy_sdr_integration` | `libSoapySDR`; library/API version only |
+| `PWN_TEST_HACK_RF=1` | `hack_rf_integration` | `libhackrf`; library version only |
+
+For example:
+
+```bash
+PWN_TEST_FFTW=1 bundle exec rspec spec/lib/pwn/ffi/fftw_spec.rb
+PWN_TEST_VOLK=1 bundle exec rspec spec/lib/pwn/ffi/volk_spec.rb spec/lib/pwn/sdr/decoder/dsp_spec.rb
+PWN_TEST_ADALM_PLUTO=1 bundle exec rspec spec/lib/pwn/ffi/adalm_pluto_spec.rb
+PWN_TEST_LIQUID=1 bundle exec rspec spec/lib/pwn/ffi/liquid_spec.rb spec/lib/pwn/sdr/decoder/dsp_spec.rb
+```
+
+Each opt-in fails with installation guidance if its library cannot load. Native
+DSP integration tests assert real backend dispatch, not just a matching fallback.
+None of these library opt-ins opens, tunes, receives from, or transmits through a
+radio. Pluto URI discovery is mocked, including scan cleanup.
+
+Actual RTL-SDR USB enumeration has a separate `rtl_sdr_hardware` tag, enabled
+only by `PWN_TEST_RTL_SDR_HARDWARE=1`. It requires a connected RTL-SDR and USB
+permissions, and fails on an empty inventory. Do not enable it in unattended
+upgrade gates; library opt-ins do not enable hardware tests. It performs inventory
+only, not tuning or reception. The test suite installs no dependencies.
+
 ## Adding a plugin
 
 1. `lib/pwn/plugins/my_thing.rb` following the conventions above.
@@ -103,3 +164,17 @@ When you change code under `/opt/pwn`:
    filler, no internal agent backlog codes).
 
 Do not commit doc refreshes while lint or tests are still red.
+
+### Optional combo.nation MCP integration tests
+
+The default `bundle exec rake` does not launch `/opt/combo.nation/combo.nation`.
+Protocol, menu-ID, and hardware-gate coverage uses an in-process fake MCP server.
+The real stdio binary is excluded with `combo_nation_mcp` metadata unless:
+
+```bash
+PWN_TEST_COMBO_NATION_MCP=1 bundle exec rspec spec/lib/pwn/ai/mcp/combo_nation_spec.rb
+```
+
+That opt-in never passes `--mcp-allow-hardware` and never opens devices. It fails
+if the executable is missing rather than skipping pending.
+

data/etc/default_skills/pwn/ai/agent/tools/mcp/SKILL.md

@@ -0,0 +1,45 @@
+---
+name: pwn-ai-agent-tools-mcp
+description: Drive PWN::Ai::Agent::Tools::Mcp from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Ai::Agent::Tools::Mcp
+  source: pwn/ai/agent/tools/mcp.rb
+---
+
+# PWN::Ai::Agent::Tools::Mcp
+
+Public API for PWN::Ai::Agent::Tools::Mcp.
+
+## When to use
+
+Call `PWN::Ai::Agent::Tools::Mcp` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/ai/agent/tools/mcp.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Ai::Agent::Tools::Mcp.help
+PWN::Ai::Agent::Tools::Mcp.help(opts)
+```
+
+## Public methods
+
+- _(no public class methods parsed)_
+
+## Source
+
+`pwn/ai/agent/tools/mcp.rb`
+
+## Verification
+
+`PWN::Ai::Agent::Tools::Mcp.respond_to?(:help)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/ai/mcp/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: pwn-ai-mcp
+description: Drive PWN::AI::MCP from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::AI::MCP
+  source: pwn/ai/mcp.rb
+---
+
+# PWN::AI::MCP
+
+Autoload MCP client modules that speak JSON-RPC 2.0 to local MCP servers. Session state lives here so pwn-ai Registry tools persist across turns.
+
+## When to use
+
+Call `PWN::AI::MCP` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/ai/mcp.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::AI::MCP.help
+PWN::AI::MCP.backends(opts)
+```
+
+## Public methods
+
+- `backends`
+- `resolve`
+- `use`
+- `current`
+- `connect`
+- `disconnect`
+- `ping`
+- `list_tools`
+- `call_tool`
+- `poll_until`
+- `invoke`
+- `reset`
+- `authors`
+- `help`
+- `reset!`
+
+## Source
+
+`pwn/ai/mcp.rb`
+
+## Verification
+
+`PWN::AI::MCP.respond_to?(:backends)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/ai/mcp/combo_nation/SKILL.md

@@ -0,0 +1,65 @@
+---
+name: pwn-ai-mcp-combonation
+description: Drive PWN::AI::MCP::ComboNation from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::AI::MCP::ComboNation
+  source: pwn/ai/mcp/combo_nation.rb
+---
+
+# PWN::AI::MCP::ComboNation
+
+JSON-RPC 2.0 / MCP 2024-11-05 stdio client for combo.nation. Speaks the native menu-oriented tools over newline-delimited JSON; it does not scrape a terminal or enable hardware unless requested.
+
+## When to use
+
+Call `PWN::AI::MCP::ComboNation` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/ai/mcp/combo_nation.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::AI::MCP::ComboNation.help
+PWN::AI::MCP::ComboNation.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `argv`
+- `connect`
+- `disconnect`
+- `request`
+- `notify`
+- `ping`
+- `list_tools`
+- `call_tool`
+- `menu_catalog`
+- `menu_main`
+- `menu_dial_calibration`
+- `menu_guess`
+- `hardware_connect`
+- `operation_status`
+- `operation_answer`
+- `operation_cancel`
+- `servo_pause`
+- `poll_until`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/ai/mcp/combo_nation.rb`
+
+## Verification
+
+`PWN::AI::MCP::ComboNation.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/repl/SKILL.md

@@ -62,6 +62,7 @@ PWN::Plugins::REPL.ready_tty(opts)
 - `pwn_ai_run_memory`
 - `pwn_ai_run_learning`
 - `pwn_ai_run_skills`
+- `pwn_ai_run_mcp`
 - `enable_autocomplete`
 - `start`
 - `authors`

data/lib/pwn/ai/agent/tools/mcp.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+require 'pwn/ai/agent/registry'
+require 'pwn/ai/mcp'
+
+PWN::AI::Agent::Registry.register(
+  name: 'mcp',
+  toolset: 'mcp',
+  schema: {
+    name: 'mcp',
+    description: 'Talk to local MCP servers through any PWN::AI::MCP::* client. ' \
+                 'action=backends lists clients. action=use selects one. ' \
+                 'connect/list_tools/call_tool/ping/status/disconnect operate on ' \
+                 'that backend; session state persists across turns. ' \
+                 'allow_hardware is connect-only and default false. ' \
+                 'Pass tool arguments as a JSON object; keep string IDs as strings.',
+    parameters: {
+      type: 'object',
+      properties: {
+        action: {
+          type: 'string',
+          description: 'backends | use | current | connect | disconnect | ping | list_tools | call_tool | poll_until | status'
+        },
+        backend: { type: 'string', description: 'Snake_case PWN::AI::MCP client name from action=backends.' },
+        session_id: { type: 'string', description: 'Optional session key. Defaults to the backend name.' },
+        name: { type: 'string', description: 'MCP tool name for call_tool, from list_tools on the selected backend.' },
+        arguments: { type: 'object', description: 'JSON object passed to tools/call. String IDs stay strings.' },
+        allow_hardware: { type: 'boolean', description: 'Only for connect. Default false. Never implied.' },
+        command: { type: 'string', description: 'Optional executable path for connect.' },
+        timeout: { type: 'integer', description: 'Seconds for handshake, reads, or poll_until.' },
+        states: { type: 'array', items: { type: 'string' }, description: 'poll_until terminal states if the backend implements it.' },
+        interval: { type: 'number', description: 'Seconds between poll_until status reads.' }
+      },
+      required: %w[action]
+    }
+  },
+  handler: lambda { |args|
+    PWN::AI::MCP.invoke(args)
+  }
+)