pwn 0.5.755 → 0.5.757

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '088caeab6962a895018847c637332f41ca7033f69c7e8a547862d219c58b162c'
-  data.tar.gz: b0562e89e6cd08079728c7d5f0b2f640b975f482ed028c1cbe6b27a363361172
+  metadata.gz: a9bcba2a6a58d7e3f7990a1dbbf0cc73a1234efe20bfd7dd0eae786ecc4c4c32
+  data.tar.gz: 252972a638225c5ddd3693839eb4fe7db2311529e3ceb2a32f69f0cc3056fd27
 SHA512:
-  metadata.gz: 2730afce4cd70424a7fb927983bb417c1bb755846cd33113ee522f3b4d1a2e3a227251b7f3e5079b9bf3198224f8d36d5f31bed362acc37b6022fb0da03c417d
-  data.tar.gz: 9ac89ddaeb41583bc8b0db2a98faf9696ae78aae7f8ecc2689f4f8519071e1c284d172245aeb586de4a33c4ad7a81e4dc7ee16a7b849c23f4429e4ee9456e8ca
+  metadata.gz: e581b4c0dd6a4b1e05beccfade96bc635f48bf47c63168209b4900e6fb68a9d8e0b2394b4f6458a5aa96a9373248a0f96adb9ae0dcdeea2210f10f908bae630c
+  data.tar.gz: c87a11936f1cf59e2d6373c2d941ccf33f5aa4edac9e91fa09e1c9b5b871bcf2def227c10a6659131bc4279e05c7b6d85e28eeb23ff701d3ebadb0a3359ba129

data/Gemfile

@@ -18,7 +18,7 @@ gem 'aws-sdk', '3.3.0'
 gem 'barby', '0.7.0'
 gem 'base32', '0.3.4'
 gem 'bitcoin-ruby', '0.0.20'
-gem 'brakeman', '8.0.6'
+gem 'brakeman', '8.1.0'
 gem 'bson', '5.2.0'
 gem 'bundler', '>=4.0.22'
 gem 'bundler-audit', '>=0.9.3'

data/documentation/pwn-ai-Agent.md

@@ -117,7 +117,8 @@ changes only default values, not the configuration schema; no migration is neede
 | Shift+Enter, or trailing `\\` + Enter | Insert a newline. Terminals that cannot distinguish Shift+Enter need `tmux set -s extended-keys on` or the backslash fallback. |
 | Up/Down | In MISSION CONTROL, move the completion highlight while the Command menu is visible (wrapping at either end). Otherwise recall requests from `~/.pwn/pwn_history`, including prior runs; Down past the newest restores the draft and cursor. In SESSION, move one transcript row. Esc closes the menu to resume history recall. |
 | Home/End | In MISSION CONTROL, move the composer cursor to the start or end of the line. In SESSION, jump to the top of the transcript or back to the live bottom. |
-| Ctrl+X | Toggle the active pane between SESSION and MISSION CONTROL. The active title is reversed and marked `active`. Typing or Enter returns to MISSION CONTROL; Enter does not submit while SESSION is active. |
+| Ctrl+T | Toggle the active pane between SESSION and MISSION CONTROL. Ctrl+X still toggles. The active title is reversed and marked `active`. Typing or Enter returns to MISSION CONTROL; Enter does not submit while SESSION is active. |
+| Ctrl+S or Ctrl+G or `/swarm` | Open the draft-preserving swarm workspace; `/swarm dashboard` also opens it. Ctrl+S still saves inside the system-role editor. |
 | Ctrl+P / Ctrl+N | Alternative completion selection keys. In MISSION CONTROL they recall history when no menu is visible. In SESSION they scroll one row. Tab still accepts the highlight. |
 | Tab | Accept the highlighted as-you-type parameter |
 | Ctrl+O or `/status` | Inspect full status/settings, including overflowing header text; Esc or Ctrl+O closes |
@@ -125,7 +126,6 @@ changes only default values, not the configuration schema; no migration is neede
 | Ctrl+R | Incremental reverse search of request history from `~/.pwn/pwn_history`; repeat for an older match, Enter accepts into the draft without sending, Esc cancels and restores the draft/cursor |
 | `/clear` | Clear the session pane only; stored conversation and token totals remain |
 | `/verbose [on|off]` | Toggle compact or full tool/notice output |
-| Ctrl+G or `/swarm` | Open the draft-preserving swarm workspace; `/swarm dashboard` also opens it |
 | `/` + Enter or `/menu` | Open the slash menu |
 | PgUp/PgDn | Scroll the timeline; new output does not pull a scrolled viewport to the bottom |
 | `/model`, `/sessions resume ID` | Show model settings / change the next request's model or session while idle |

data/etc/default_skills/pwn/ai/anthropic/SKILL.md

@@ -36,6 +36,7 @@ PWN::AI::Anthropic.refresh_oauth_bearer_token(opts)
 - `refresh_oauth_bearer_token`
 - `obtain_oauth_bearer_token`
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `chat`
 - `authors`

data/etc/default_skills/pwn/ai/gemini/SKILL.md

@@ -34,6 +34,7 @@ PWN::AI::Gemini.get_models(opts)
 ## Public methods
 
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `chat`
 - `authors`

data/etc/default_skills/pwn/ai/grok/SKILL.md

@@ -36,6 +36,7 @@ PWN::AI::Grok.refresh_oauth_bearer_token(opts)
 - `refresh_oauth_bearer_token`
 - `obtain_oauth_bearer_token`
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `chat`
 - `authors`

data/etc/default_skills/pwn/ai/model_catalog/SKILL.md

@@ -0,0 +1,52 @@
+---
+name: pwn-ai-modelcatalog
+description: Drive PWN::AI::ModelCatalog from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::AI::ModelCatalog
+  source: pwn/ai/model_catalog.rb
+---
+
+# PWN::AI::ModelCatalog
+
+Shared catalog lookup for provider model records. Each provider still fetches its own payload; this only finds one named row without a second network call when the caller already has the list.
+
+## When to use
+
+Call `PWN::AI::ModelCatalog` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/ai/model_catalog.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::AI::ModelCatalog.help
+PWN::AI::ModelCatalog.find_row(opts)
+```
+
+## Public methods
+
+- `find_row`
+- `catalog_rows`
+- `model_row`
+- `parse_row`
+- `lookup_opts`
+- `authors`
+- `help`
+- `model_row?`
+
+## Source
+
+`pwn/ai/model_catalog.rb`
+
+## Verification
+
+`PWN::AI::ModelCatalog.respond_to?(:find_row)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/ai/ollama/SKILL.md

@@ -34,6 +34,7 @@ PWN::AI::Ollama.get_models(opts)
 ## Public methods
 
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `chat`
 - `authors`

data/etc/default_skills/pwn/ai/open_ai/SKILL.md

@@ -36,6 +36,7 @@ PWN::AI::OpenAI.refresh_oauth_bearer_token(opts)
 - `refresh_oauth_bearer_token`
 - `obtain_oauth_bearer_token`
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `api_endpoint`
 - `chat`

data/etc/default_skills/pwn/ai/open_web_ui/SKILL.md

@@ -34,6 +34,7 @@ PWN::AI::OpenWebUI.get_models(opts)
 ## Public methods
 
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `chat`
 - `authors`

data/etc/default_skills/pwn/plugins/repl/ai_console_usage/SKILL.md

@@ -12,7 +12,7 @@ metadata:
 
 # PWN::Plugins::REPL::AIConsoleUsage
 
-Provider-reported token totals and explicitly configured USD estimates.
+Provider-reported token totals. USD comes from the active model's published prices, then from explicitly configured rates. Missing prices stay unavailable.
 
 ## When to use
 

data/lib/pwn/ai/anthropic.rb

@@ -510,6 +510,30 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::Anthropic.get_model(name: 'required - model id')
+      #
+      # The Models API lists id and capabilities. Pricing, when Anthropic
+      # includes it on that record, is passed through unchanged. A missing
+      # price field is not filled from a public price table.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        row = PWN::AI::ModelCatalog.parse_row(raw: anthropic_rest_call(hop.merge(rest_call: "models/#{URI.encode_www_form_component(name)}")))
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = PWN::AI::ModelCatalog.parse_row(raw: anthropic_rest_call(hop.merge(rest_call: 'models')))
+        PWN::AI::ModelCatalog.find_row(models: listed.is_a?(Hash) ? listed[:data] : listed, name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       # ----------------------------------------------------------------------
       # Native tool-calling adapter for PWN::AI::Agent::Loop.
       #
@@ -578,7 +602,7 @@ module PWN
               input_schema: anthropic_input_schema(schema: fn[:parameters] || fn['parameters'])
             }
           end
-          http_body[:tool_choice] = anth_tool_choice(choice: opts[:tool_choice]) if opts[:tool_choice]
+          http_body[:tool_choice] = anth_tool_choice(choice: opts[:tool_choice], model: model) if opts[:tool_choice]
         end
 
         response = anthropic_rest_call(
@@ -794,15 +818,28 @@ module PWN
 
       private_class_method def self.anth_tool_choice(opts = {})
         choice = opts[:choice]
-        case choice
-        when 'none', :none then { type: 'none' }
-        when 'required', :required, 'any', :any then { type: 'any' }
-        when Hash
-          fn = choice[:function] || choice['function'] || choice
-          { type: 'tool', name: fn[:name] || fn['name'] }
-        else # 'auto', :auto, nil, anything else
-          { type: 'auto' }
-        end
+        mapped = case choice
+                 when 'none', :none then { type: 'none' }
+                 when 'required', :required, 'any', :any then { type: 'any' }
+                 when Hash
+                   fn = choice[:function] || choice['function'] || choice
+                   { type: 'tool', name: fn[:name] || fn['name'] }
+                 else
+                   { type: 'auto' }
+                 end
+        return { type: 'auto' } if !forced_tool_choice?(model: opts[:model]) && %w[any tool].include?(mapped[:type].to_s)
+
+        mapped
+      end
+
+      # Claude Mythos 5.1, Fable 5.1, Opus 5.5, and Sonnet 5.5 reject forced tool use.
+      # Mythos 5 still accepts type any/tool, so match the documented ids, not every Mythos model.
+      private_class_method def self.forced_tool_choice?(opts = {})
+        model = opts[:model].to_s
+        return false if model.match?(/claude-(?:mythos|fable)-5-1(?:-|\z)/i)
+        return false if model.match?(/claude-(?:opus|sonnet)-5-5(?:-|\z)/i)
+
+        true
       end
 
       # Supported Method Parameters::
@@ -958,6 +995,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one model record. Pricing is included only when that record publishes it.
+          #{self}.get_model(
+            name: 'required - model id',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips the full catalog when the direct route misses'
+          )
+
           # Native tool-calling adapter for PWN::AI::Agent::Loop
           #{self}.chat_with_tools(
             assistant_message: 'optional - <same hash> }',

data/lib/pwn/ai/gemini.rb

@@ -3,6 +3,7 @@
 require 'json'
 require 'rest-client'
 require 'securerandom'
+require 'uri'
 
 module PWN
   module AI
@@ -134,6 +135,30 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::Gemini.get_model(name: 'required - model id or models/<id>')
+      #
+      # Gemini names models as models/<id> and usually publishes token limits,
+      # not USD rates. A pricing object on the record is kept; none is invented.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        id = name.delete_prefix('models/')
+        row = PWN::AI::ModelCatalog.parse_row(raw: gemini_rest_call(hop.merge(rest_call: "models/#{URI.encode_www_form_component(id)}")))
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = PWN::AI::ModelCatalog.parse_row(raw: gemini_rest_call(hop.merge(rest_call: 'models')))
+        PWN::AI::ModelCatalog.find_row(models: listed.is_a?(Hash) ? listed[:models] : listed, name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       # ----------------------------------------------------------------------
       # Native tool-calling adapter for PWN::AI::Agent::Loop.
       #
@@ -460,6 +485,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one model record. Gemini usually publishes token limits, not USD rates.
+          #{self}.get_model(
+            name: 'required - model id or models/<id>',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips the full catalog when the direct route misses'
+          )
+
           # Native tool-calling adapter for PWN::AI::Agent::Loop
           #{self}.chat_with_tools(
             assistant_message: 'optional - <same hash> }',

data/lib/pwn/ai/grok.rb

@@ -525,6 +525,30 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::Grok.get_model(name: 'required - model id')
+      #
+      # xAI prices are integer USD cents per 100 million tokens on the model
+      # record itself (prompt/completion/cached). Zero means that component
+      # is unpublished, not free.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        row = PWN::AI::ModelCatalog.parse_row(raw: grok_rest_call(hop.merge(rest_call: "models/#{URI.encode_www_form_component(name)}")))
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = PWN::AI::ModelCatalog.parse_row(raw: grok_rest_call(hop.merge(rest_call: 'models')))
+        PWN::AI::ModelCatalog.find_row(models: listed.is_a?(Hash) ? listed[:data] : listed, name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       # Supported Method Parameters::
       # response = PWN::AI::Grok.chat_with_tools(
       #   messages: 'required - full OpenAI-format messages array (system/user/assistant/tool)',
@@ -741,6 +765,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one model record, including published token prices when the provider sends them.
+          #{self}.get_model(
+            name: 'required - model id',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips the full catalog when the direct route misses'
+          )
+
           # Run chat with tools and return its result
           #{self}.chat_with_tools(
             messages: 'required - full OpenAI-format messages array (system/user/assistant/tool)',

data/lib/pwn/ai/model_catalog.rb

@@ -0,0 +1,113 @@
+# frozen_string_literal: true
+
+require 'json'
+
+module PWN
+  module AI
+    # Shared catalog lookup for provider model records. Each provider still
+    # fetches its own payload; this only finds one named row without a second
+    # network call when the caller already has the list.
+    module ModelCatalog
+      # Return the catalog row whose id, slug, name, or model matches name.
+      public_class_method def self.find_row(opts = {})
+        name = opts[:name].to_s.strip
+        return nil if name.empty?
+
+        rows = catalog_rows(models: opts[:models])
+        wanted = name.delete_prefix('models/')
+        rows.find do |row|
+          next false unless row.is_a?(Hash)
+
+          ids = [
+            row[:id], row['id'], row[:slug], row['slug'], row[:name], row['name'],
+            row[:model], row['model'], row[:display_name], row['display_name']
+          ].compact.map { |value| value.to_s.delete_prefix('models/') }
+          aliases = row[:aliases] || row['aliases'] || []
+          ids.concat(Array(aliases).map(&:to_s))
+          ids.any? { |value| value == name || value == wanted }
+        end
+      end
+
+      # Flatten the list shapes get_models already returns.
+      public_class_method def self.catalog_rows(opts = {})
+        raw = opts[:models]
+        case raw
+        when Array then raw
+        when Hash then raw[:data] || raw[:models] || raw['data'] || raw['models'] || []
+        else []
+        end
+      end
+
+      # True when the hash is a model record rather than an error object.
+      public_class_method def self.model_row?(opts = {})
+        row = opts[:row]
+        return false unless row.is_a?(Hash)
+
+        %i[id slug name model].any? { |key| !(row[key] || row[key.to_s]).to_s.strip.empty? }
+      end
+
+      # Parse a REST body into a Hash or Array. Error strings are not catalogs.
+      public_class_method def self.parse_row(opts = {})
+        raw = opts[:raw]
+        return raw if raw.is_a?(Hash) || raw.is_a?(Array)
+        return nil if raw.nil?
+        return nil unless raw.is_a?(String) || raw.respond_to?(:to_str)
+
+        parsed = JSON.parse(raw.to_s, symbolize_names: true)
+        parsed.is_a?(Hash) || parsed.is_a?(Array) ? parsed : nil
+      rescue JSON::ParserError
+        nil
+      end
+
+      # Short, non-interactive hop so a price lookup cannot prompt or retry for minutes.
+      public_class_method def self.lookup_opts(opts = {})
+        timeout = opts[:timeout].to_i
+        timeout = 15 unless timeout.positive?
+        {
+          timeout: timeout,
+          non_interactive: opts.fetch(:non_interactive, true),
+          quiet: true,
+          spinner: false
+        }
+      end
+
+      public_class_method def self.authors
+        'AUTHOR(S): 0day Inc. <support@0dayinc.com>'
+      end
+
+      public_class_method def self.help
+        puts "USAGE:
+          # Find one catalog row by id, slug, name, model, or alias.
+          #{self}.find_row(
+            models: 'required - get_models payload',
+            name: 'required - model id'
+          )
+
+          # Flatten a provider catalog into row hashes.
+          #{self}.catalog_rows(
+            models: 'required - get_models payload'
+          )
+
+          # True when the hash is a model record rather than an error object.
+          #{self}.model_row?(
+            row: 'required - catalog row hash to test'
+          )
+
+          # Parse one REST model body. Error strings are not catalogs.
+          #{self}.parse_row(
+            raw: 'required - response body'
+          )
+
+          # Short non-interactive options for a price lookup.
+          #{self}.lookup_opts(
+            timeout: 'optional - seconds (default 15, one attempt)',
+            non_interactive: 'optional - never prompt (default true)'
+          )
+
+          # Return module authors.
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/ai/ollama.rb

@@ -3,6 +3,7 @@
 require 'json'
 require 'base64'
 require 'securerandom'
+require 'uri'
 
 module PWN
   module AI
@@ -405,6 +406,31 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::Ollama.get_model(name: 'required - tag name')
+      #
+      # Local tags have size and family, not token prices. get_model reads
+      # /api/show for that tag and returns it. Missing pricing stays missing.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        row = PWN::AI::ModelCatalog.parse_row(
+          raw: ollama_rest_call(hop.merge(http_method: :post, rest_call: 'api/show', http_body: { model: name }))
+        )
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = PWN::AI::ModelCatalog.parse_row(raw: ollama_rest_call(hop.merge(rest_call: 'api/tags')))
+        PWN::AI::ModelCatalog.find_row(models: listed.is_a?(Hash) ? listed[:models] : listed, name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       # Coerce OpenAI-wire message history into Ollama-native shapes before
       # POST /api/chat (or Open WebUI /ollama/api/chat):
       # - function.arguments must be a Hash/Array object, not a JSON string
@@ -679,6 +705,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one local tag via /api/show. Missing token prices stay missing.
+          #{self}.get_model(
+            name: 'required - tag name',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips /api/tags when /api/show misses'
+          )
+
           # Run chat with tools and return its result
           #{self}.chat_with_tools(
             messages: 'required - full OpenAI-format messages array (system/user/assistant/tool)',

data/lib/pwn/ai/open_ai.rb

@@ -593,6 +593,32 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::OpenAI.get_model(name: 'required - model id or slug')
+      #
+      # Platform catalogs use data[].id. ChatGPT/Codex catalogs use
+      # models[].slug and may nest pricing under a different key. get_model
+      # returns that one row; it does not invent a USD rate the catalog omitted.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        row = PWN::AI::ModelCatalog.parse_row(raw: open_ai_rest_call(hop.merge(rest_call: "models/#{URI.encode_www_form_component(name)}")))
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = open_ai_rest_call(hop.merge(rest_call: 'models'))
+        return nil if listed.nil?
+
+        PWN::AI::ModelCatalog.find_row(models: catalog_models(raw: listed), name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       private_class_method def self.catalog_models(opts = {})
         raw = opts[:raw]
         raw = JSON.parse(raw, symbolize_names: true) if raw.is_a?(String) || raw.respond_to?(:to_str)
@@ -1517,6 +1543,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one model row by id or slug. A missing price is not invented.
+          #{self}.get_model(
+            name: 'required - model id or slug',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips the full catalog when the direct route misses'
+          )
+
           # Chat Completions vs Responses path for this model (tools may force Responses).
           #{self}.api_endpoint(
             model: 'required - OpenAI model id (e.g. gpt-6-astra or gpt-4o)',

data/lib/pwn/ai/open_web_ui.rb

@@ -3,6 +3,7 @@
 require 'json'
 require 'base64'
 require 'securerandom'
+require 'uri'
 
 module PWN
   module AI
@@ -433,6 +434,35 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::OpenWebUI.get_model(name: 'required - model id')
+      #
+      # Open WebUI mixes OpenAI-compat rows and proxied Ollama tags. A direct
+      # model route is tried first; otherwise the already-fetched catalog row
+      # is returned. Local tags without a price stay unpriced.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        encoded = URI.encode_www_form_component(name)
+        row = PWN::AI::ModelCatalog.parse_row(raw: openwebui_rest_call(hop.merge(rest_call: "api/v1/models/#{encoded}")))
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = PWN::AI::ModelCatalog.parse_row(raw: openwebui_rest_call(hop.merge(rest_call: 'api/v1/models')))
+        found = PWN::AI::ModelCatalog.find_row(models: listed.is_a?(Hash) ? (listed[:data] || listed[:models]) : listed, name: name)
+        return found if found
+
+        tags = PWN::AI::ModelCatalog.parse_row(raw: openwebui_rest_call(hop.merge(rest_call: 'ollama/api/tags')))
+        PWN::AI::ModelCatalog.find_row(models: tags.is_a?(Hash) ? tags[:models] : tags, name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       # Coerce OpenAI-wire message history into Ollama-native shapes before
       # POST /api/chat (or Open WebUI /ollama/api/chat):
       # - function.arguments must be a Hash/Array object, not a JSON string
@@ -705,6 +735,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one catalog row. OpenAI-compat and proxied Ollama tags use different routes.
+          #{self}.get_model(
+            name: 'required - model id',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips the catalog list when the direct route misses'
+          )
+
           # Run chat with tools and return its result
           #{self}.chat_with_tools(
             messages: 'required - full OpenAI-format messages array (system/user/assistant/tool)',

data/lib/pwn/ai.rb

@@ -13,6 +13,7 @@ module PWN
     autoload :Grok, 'pwn/ai/grok'
     autoload :HttpRetry, 'pwn/ai/http_retry'
     autoload :MCP, 'pwn/ai/mcp'
+    autoload :ModelCatalog, 'pwn/ai/model_catalog'
     autoload :Ollama, 'pwn/ai/ollama'
     autoload :OpenAI, 'pwn/ai/open_ai'
     autoload :OpenWebUI, 'pwn/ai/open_web_ui'