pwn 0.5.756 → 0.5.758

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7fac5f5a9f5b01e9c4ce830db72a7e454f1a2dce37b44e57f98e290c154cfbbf
-  data.tar.gz: 1c508a671f0eb88f704bd38e58b7f3ad7154eca3e0e8d6b4d62852c7bf217a1b
+  metadata.gz: 004ad4f77955698492a48591db3dad3f54d141fb94ddb7952211e86dc4945526
+  data.tar.gz: 5c76e0a2f71fdc1afd13f8af828c2027cb8183f3e73612d81f220b864b6df636
 SHA512:
-  metadata.gz: 311ad0755488c66ad2c92c10751c52c5b86b4b725aae976fa697b0f206fb3c88afc954371d8ec8628fcc9431449fe58b71948f4ec2e3ad73b189e88165bcf3b4
-  data.tar.gz: e0055f29efafc74e550e84fd504debb71400acbfaf768eb1be82caa1d57cc1d79d49addfb78bb31608fdd0fd2716a4f68277b0d88272960e6b4dffb990b829f9
+  metadata.gz: ffe44c731211488e5d07938e29dc1c503307801de30d0c2effc55d139d0f00b0a40a7deeda375f05b581ea88e379b9b82f031b589236bd5a08edd590078b3511
+  data.tar.gz: 9c8275fd41e044aed262bcbe7fcf9fe00694b43227030ba1ce90d907c6e68b54efa53dacd3c3cb712890acc159005f5ecd4c9cf1caf065de8032cfc4123041de

data/Gemfile

@@ -18,7 +18,7 @@ gem 'aws-sdk', '3.3.0'
 gem 'barby', '0.7.0'
 gem 'base32', '0.3.4'
 gem 'bitcoin-ruby', '0.0.20'
-gem 'brakeman', '8.0.6'
+gem 'brakeman', '8.1.0'
 gem 'bson', '5.2.0'
 gem 'bundler', '>=4.0.22'
 gem 'bundler-audit', '>=0.9.3'

data/documentation/pwn-ai-Agent.md

@@ -117,7 +117,8 @@ changes only default values, not the configuration schema; no migration is neede
 | Shift+Enter, or trailing `\\` + Enter | Insert a newline. Terminals that cannot distinguish Shift+Enter need `tmux set -s extended-keys on` or the backslash fallback. |
 | Up/Down | In MISSION CONTROL, move the completion highlight while the Command menu is visible (wrapping at either end). Otherwise recall requests from `~/.pwn/pwn_history`, including prior runs; Down past the newest restores the draft and cursor. In SESSION, move one transcript row. Esc closes the menu to resume history recall. |
 | Home/End | In MISSION CONTROL, move the composer cursor to the start or end of the line. In SESSION, jump to the top of the transcript or back to the live bottom. |
-| Ctrl+X | Toggle the active pane between SESSION and MISSION CONTROL. The active title is reversed and marked `active`. Typing or Enter returns to MISSION CONTROL; Enter does not submit while SESSION is active. |
+| Ctrl+T | Toggle the active pane between SESSION and MISSION CONTROL. Ctrl+X still toggles. The active title is reversed and marked `active`. Typing or Enter returns to MISSION CONTROL; Enter does not submit while SESSION is active. |
+| Ctrl+S or Ctrl+G or `/swarm` | Open the draft-preserving swarm workspace; `/swarm dashboard` also opens it. Ctrl+S still saves inside the system-role editor. |
 | Ctrl+P / Ctrl+N | Alternative completion selection keys. In MISSION CONTROL they recall history when no menu is visible. In SESSION they scroll one row. Tab still accepts the highlight. |
 | Tab | Accept the highlighted as-you-type parameter |
 | Ctrl+O or `/status` | Inspect full status/settings, including overflowing header text; Esc or Ctrl+O closes |
@@ -125,7 +126,6 @@ changes only default values, not the configuration schema; no migration is neede
 | Ctrl+R | Incremental reverse search of request history from `~/.pwn/pwn_history`; repeat for an older match, Enter accepts into the draft without sending, Esc cancels and restores the draft/cursor |
 | `/clear` | Clear the session pane only; stored conversation and token totals remain |
 | `/verbose [on|off]` | Toggle compact or full tool/notice output |
-| Ctrl+G or `/swarm` | Open the draft-preserving swarm workspace; `/swarm dashboard` also opens it |
 | `/` + Enter or `/menu` | Open the slash menu |
 | PgUp/PgDn | Scroll the timeline; new output does not pull a scrolled viewport to the bottom |
 | `/model`, `/sessions resume ID` | Show model settings / change the next request's model or session while idle |

data/etc/default_skills/pwn/ai/anthropic/SKILL.md

@@ -36,6 +36,7 @@ PWN::AI::Anthropic.refresh_oauth_bearer_token(opts)
 - `refresh_oauth_bearer_token`
 - `obtain_oauth_bearer_token`
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `chat`
 - `authors`

data/etc/default_skills/pwn/ai/gemini/SKILL.md

@@ -34,6 +34,7 @@ PWN::AI::Gemini.get_models(opts)
 ## Public methods
 
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `chat`
 - `authors`

data/etc/default_skills/pwn/ai/grok/SKILL.md

@@ -36,6 +36,7 @@ PWN::AI::Grok.refresh_oauth_bearer_token(opts)
 - `refresh_oauth_bearer_token`
 - `obtain_oauth_bearer_token`
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `chat`
 - `authors`

data/etc/default_skills/pwn/ai/model_catalog/SKILL.md

@@ -0,0 +1,52 @@
+---
+name: pwn-ai-modelcatalog
+description: Drive PWN::AI::ModelCatalog from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::AI::ModelCatalog
+  source: pwn/ai/model_catalog.rb
+---
+
+# PWN::AI::ModelCatalog
+
+Shared catalog lookup for provider model records. Each provider still fetches its own payload; this only finds one named row without a second network call when the caller already has the list.
+
+## When to use
+
+Call `PWN::AI::ModelCatalog` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/ai/model_catalog.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::AI::ModelCatalog.help
+PWN::AI::ModelCatalog.find_row(opts)
+```
+
+## Public methods
+
+- `find_row`
+- `catalog_rows`
+- `model_row`
+- `parse_row`
+- `lookup_opts`
+- `authors`
+- `help`
+- `model_row?`
+
+## Source
+
+`pwn/ai/model_catalog.rb`
+
+## Verification
+
+`PWN::AI::ModelCatalog.respond_to?(:find_row)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/ai/ollama/SKILL.md

@@ -34,6 +34,7 @@ PWN::AI::Ollama.get_models(opts)
 ## Public methods
 
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `chat`
 - `authors`

data/etc/default_skills/pwn/ai/open_ai/SKILL.md

@@ -36,6 +36,7 @@ PWN::AI::OpenAI.refresh_oauth_bearer_token(opts)
 - `refresh_oauth_bearer_token`
 - `obtain_oauth_bearer_token`
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `api_endpoint`
 - `chat`

data/etc/default_skills/pwn/ai/open_web_ui/SKILL.md

@@ -34,6 +34,7 @@ PWN::AI::OpenWebUI.get_models(opts)
 ## Public methods
 
 - `get_models`
+- `get_model`
 - `chat_with_tools`
 - `chat`
 - `authors`

data/etc/default_skills/pwn/plugins/repl/ai_console_usage/SKILL.md

@@ -12,7 +12,7 @@ metadata:
 
 # PWN::Plugins::REPL::AIConsoleUsage
 
-Provider-reported token totals and explicitly configured USD estimates.
+Provider-reported token totals. USD comes from the active model's published prices, then from explicitly configured rates. Missing prices stay unavailable.
 
 ## When to use
 

data/lib/pwn/ai/anthropic.rb

@@ -510,6 +510,30 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::Anthropic.get_model(name: 'required - model id')
+      #
+      # The Models API lists id and capabilities. Pricing, when Anthropic
+      # includes it on that record, is passed through unchanged. A missing
+      # price field is not filled from a public price table.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        row = PWN::AI::ModelCatalog.parse_row(raw: anthropic_rest_call(hop.merge(rest_call: "models/#{URI.encode_www_form_component(name)}")))
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = PWN::AI::ModelCatalog.parse_row(raw: anthropic_rest_call(hop.merge(rest_call: 'models')))
+        PWN::AI::ModelCatalog.find_row(models: listed.is_a?(Hash) ? listed[:data] : listed, name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       # ----------------------------------------------------------------------
       # Native tool-calling adapter for PWN::AI::Agent::Loop.
       #
@@ -971,6 +995,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one model record. Pricing is included only when that record publishes it.
+          #{self}.get_model(
+            name: 'required - model id',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips the full catalog when the direct route misses'
+          )
+
           # Native tool-calling adapter for PWN::AI::Agent::Loop
           #{self}.chat_with_tools(
             assistant_message: 'optional - <same hash> }',

data/lib/pwn/ai/gemini.rb

@@ -3,6 +3,7 @@
 require 'json'
 require 'rest-client'
 require 'securerandom'
+require 'uri'
 
 module PWN
   module AI
@@ -134,6 +135,30 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::Gemini.get_model(name: 'required - model id or models/<id>')
+      #
+      # Gemini names models as models/<id> and usually publishes token limits,
+      # not USD rates. A pricing object on the record is kept; none is invented.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        id = name.delete_prefix('models/')
+        row = PWN::AI::ModelCatalog.parse_row(raw: gemini_rest_call(hop.merge(rest_call: "models/#{URI.encode_www_form_component(id)}")))
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = PWN::AI::ModelCatalog.parse_row(raw: gemini_rest_call(hop.merge(rest_call: 'models')))
+        PWN::AI::ModelCatalog.find_row(models: listed.is_a?(Hash) ? listed[:models] : listed, name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       # ----------------------------------------------------------------------
       # Native tool-calling adapter for PWN::AI::Agent::Loop.
       #
@@ -460,6 +485,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one model record. Gemini usually publishes token limits, not USD rates.
+          #{self}.get_model(
+            name: 'required - model id or models/<id>',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips the full catalog when the direct route misses'
+          )
+
           # Native tool-calling adapter for PWN::AI::Agent::Loop
           #{self}.chat_with_tools(
             assistant_message: 'optional - <same hash> }',

data/lib/pwn/ai/grok.rb

@@ -525,6 +525,30 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::Grok.get_model(name: 'required - model id')
+      #
+      # xAI prices are integer USD cents per 100 million tokens on the model
+      # record itself (prompt/completion/cached). Zero means that component
+      # is unpublished, not free.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        row = PWN::AI::ModelCatalog.parse_row(raw: grok_rest_call(hop.merge(rest_call: "models/#{URI.encode_www_form_component(name)}")))
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = PWN::AI::ModelCatalog.parse_row(raw: grok_rest_call(hop.merge(rest_call: 'models')))
+        PWN::AI::ModelCatalog.find_row(models: listed.is_a?(Hash) ? listed[:data] : listed, name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       # Supported Method Parameters::
       # response = PWN::AI::Grok.chat_with_tools(
       #   messages: 'required - full OpenAI-format messages array (system/user/assistant/tool)',
@@ -741,6 +765,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one model record, including published token prices when the provider sends them.
+          #{self}.get_model(
+            name: 'required - model id',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips the full catalog when the direct route misses'
+          )
+
           # Run chat with tools and return its result
           #{self}.chat_with_tools(
             messages: 'required - full OpenAI-format messages array (system/user/assistant/tool)',

data/lib/pwn/ai/model_catalog.rb

@@ -0,0 +1,113 @@
+# frozen_string_literal: true
+
+require 'json'
+
+module PWN
+  module AI
+    # Shared catalog lookup for provider model records. Each provider still
+    # fetches its own payload; this only finds one named row without a second
+    # network call when the caller already has the list.
+    module ModelCatalog
+      # Return the catalog row whose id, slug, name, or model matches name.
+      public_class_method def self.find_row(opts = {})
+        name = opts[:name].to_s.strip
+        return nil if name.empty?
+
+        rows = catalog_rows(models: opts[:models])
+        wanted = name.delete_prefix('models/')
+        rows.find do |row|
+          next false unless row.is_a?(Hash)
+
+          ids = [
+            row[:id], row['id'], row[:slug], row['slug'], row[:name], row['name'],
+            row[:model], row['model'], row[:display_name], row['display_name']
+          ].compact.map { |value| value.to_s.delete_prefix('models/') }
+          aliases = row[:aliases] || row['aliases'] || []
+          ids.concat(Array(aliases).map(&:to_s))
+          ids.any? { |value| value == name || value == wanted }
+        end
+      end
+
+      # Flatten the list shapes get_models already returns.
+      public_class_method def self.catalog_rows(opts = {})
+        raw = opts[:models]
+        case raw
+        when Array then raw
+        when Hash then raw[:data] || raw[:models] || raw['data'] || raw['models'] || []
+        else []
+        end
+      end
+
+      # True when the hash is a model record rather than an error object.
+      public_class_method def self.model_row?(opts = {})
+        row = opts[:row]
+        return false unless row.is_a?(Hash)
+
+        %i[id slug name model].any? { |key| !(row[key] || row[key.to_s]).to_s.strip.empty? }
+      end
+
+      # Parse a REST body into a Hash or Array. Error strings are not catalogs.
+      public_class_method def self.parse_row(opts = {})
+        raw = opts[:raw]
+        return raw if raw.is_a?(Hash) || raw.is_a?(Array)
+        return nil if raw.nil?
+        return nil unless raw.is_a?(String) || raw.respond_to?(:to_str)
+
+        parsed = JSON.parse(raw.to_s, symbolize_names: true)
+        parsed.is_a?(Hash) || parsed.is_a?(Array) ? parsed : nil
+      rescue JSON::ParserError
+        nil
+      end
+
+      # Short, non-interactive hop so a price lookup cannot prompt or retry for minutes.
+      public_class_method def self.lookup_opts(opts = {})
+        timeout = opts[:timeout].to_i
+        timeout = 15 unless timeout.positive?
+        {
+          timeout: timeout,
+          non_interactive: opts.fetch(:non_interactive, true),
+          quiet: true,
+          spinner: false
+        }
+      end
+
+      public_class_method def self.authors
+        'AUTHOR(S): 0day Inc. <support@0dayinc.com>'
+      end
+
+      public_class_method def self.help
+        puts "USAGE:
+          # Find one catalog row by id, slug, name, model, or alias.
+          #{self}.find_row(
+            models: 'required - get_models payload',
+            name: 'required - model id'
+          )
+
+          # Flatten a provider catalog into row hashes.
+          #{self}.catalog_rows(
+            models: 'required - get_models payload'
+          )
+
+          # True when the hash is a model record rather than an error object.
+          #{self}.model_row?(
+            row: 'required - catalog row hash to test'
+          )
+
+          # Parse one REST model body. Error strings are not catalogs.
+          #{self}.parse_row(
+            raw: 'required - response body'
+          )
+
+          # Short non-interactive options for a price lookup.
+          #{self}.lookup_opts(
+            timeout: 'optional - seconds (default 15, one attempt)',
+            non_interactive: 'optional - never prompt (default true)'
+          )
+
+          # Return module authors.
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/ai/ollama.rb

@@ -3,6 +3,7 @@
 require 'json'
 require 'base64'
 require 'securerandom'
+require 'uri'
 
 module PWN
   module AI
@@ -405,11 +406,39 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::Ollama.get_model(name: 'required - tag name')
+      #
+      # Local tags have size and family, not token prices. get_model reads
+      # /api/show for that tag and returns it. Missing pricing stays missing.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        row = PWN::AI::ModelCatalog.parse_row(
+          raw: ollama_rest_call(hop.merge(http_method: :post, rest_call: 'api/show', http_body: { model: name }))
+        )
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = PWN::AI::ModelCatalog.parse_row(raw: ollama_rest_call(hop.merge(rest_call: 'api/tags')))
+        PWN::AI::ModelCatalog.find_row(models: listed.is_a?(Hash) ? listed[:models] : listed, name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       # Coerce OpenAI-wire message history into Ollama-native shapes before
       # POST /api/chat (or Open WebUI /ollama/api/chat):
       # - function.arguments must be a Hash/Array object, not a JSON string
       #   (string args → HTTP 400 "can't find closing '}' symbol")
       # - assistant content nil + tool_calls → "" (Open WebUI form validation)
+      # - system/developer rows after the first message are merged into one
+      #   leading system message. Qwen-style templates raise HTTP 500
+      #   "System message must be at the beginning" otherwise.
       private_class_method def self.parse_tool_arguments_object(opts = {})
         raw = opts[:arguments]
         case raw
@@ -432,7 +461,7 @@ module PWN
       end
 
       private_class_method def self.normalize_messages_for_ollama(opts = {})
-        Array(opts[:messages]).filter_map do |m|
+        rows = Array(opts[:messages]).filter_map do |m|
           next unless m.is_a?(Hash)
 
           role = (m[:role] || m['role']).to_s
@@ -482,6 +511,71 @@ module PWN
 
           out
         end
+        lead_system(messages: rows, fold_into_user: opts[:fold_into_user])
+      end
+
+      # One system role is only safe when the server does not already prepend one.
+      # Models whose template raises "System message must be at the beginning"
+      # already carry a Modelfile SYSTEM prompt. Fold client system text into
+      # the first user message instead of sending a second system role.
+      private_class_method def self.lead_system(opts = {})
+        parts = []
+        rest = []
+        Array(opts[:messages]).each do |row|
+          next unless row.is_a?(Hash)
+
+          role = (row[:role] || row['role']).to_s
+          if %w[system developer].include?(role)
+            text = (row.key?(:content) ? row[:content] : row['content']).to_s
+            parts << text unless text.strip.empty?
+          else
+            rest << row
+          end
+        end
+        return rest if parts.empty?
+
+        text = parts.join("\n\n")
+        return [{ role: 'system', content: text }] + rest unless opts[:fold_into_user]
+
+        user = rest.find { |row| (row[:role] || row['role']).to_s == 'user' }
+        if user
+          body = (user.key?(:content) ? user[:content] : user['content']).to_s
+          user[:content] = "#{text}\n\n#{body}"
+          user.delete('content')
+          rest
+        else
+          [{ role: 'user', content: text }] + rest
+        end
+      end
+
+      private_class_method def self.strict_system_template?(opts = {})
+        name = opts[:model].to_s.strip
+        return false if name.empty?
+
+        @strict_system_cache ||= {}
+        return @strict_system_cache[name] if @strict_system_cache.key?(name)
+
+        @strict_system_cache[name] = template_rejects_later_system?(model: name)
+      rescue StandardError
+        false
+      end
+
+      private_class_method def self.template_rejects_later_system?(opts = {})
+        name = opts[:model].to_s
+        names = [name]
+        names << "#{name}:latest" unless name.include?(':')
+        names.each do |candidate|
+          raw = ollama_rest_call(
+            http_method: :post, rest_call: 'api/show',
+            http_body: { model: candidate }, timeout: 8, quiet: true, non_interactive: true
+          )
+          template = PWN::AI::ModelCatalog.parse_row(raw: raw)
+          text = template.is_a?(Hash) ? (template[:template] || template['template']).to_s : ''
+          return true if text.include?('System message must be at the beginning')
+        end
+        false
+      rescue StandardError
+        false
       end
 
       # Supported Method Parameters::
@@ -500,13 +594,16 @@ module PWN
       # NDJSON chunks back into a single response.
 
       public_class_method def self.chat_with_tools(opts = {})
-        engine   = PWN::Env[:ai][:ollama]
-        messages = normalize_messages_for_ollama(messages: opts[:messages])
-        raise 'ERROR: messages array is required' if messages.nil? || messages.empty?
-
+        engine = PWN::Env[:ai][:ollama]
         model = opts[:model] ||= engine[:model]
         raise 'ERROR: Model is required.  Call #get_models method for details' if model.nil?
 
+        messages = normalize_messages_for_ollama(
+          messages: opts[:messages],
+          fold_into_user: strict_system_template?(model: model)
+        )
+        raise 'ERROR: messages array is required' if messages.nil? || messages.empty?
+
         temp = opts[:temp].to_f
         temp = engine[:temp].to_f.nonzero? || 1 if temp.zero?
 
@@ -630,6 +727,10 @@ module PWN
         end
 
         http_body[:messages].push(user_role)
+        http_body[:messages] = lead_system(
+          messages: http_body[:messages],
+          fold_into_user: strict_system_template?(model: model)
+        )
 
         timeout = opts[:timeout]
         spinner = opts[:spinner]
@@ -679,6 +780,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one local tag via /api/show. Missing token prices stay missing.
+          #{self}.get_model(
+            name: 'required - tag name',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips /api/tags when /api/show misses'
+          )
+
           # Run chat with tools and return its result
           #{self}.chat_with_tools(
             messages: 'required - full OpenAI-format messages array (system/user/assistant/tool)',

data/lib/pwn/ai/open_ai.rb

@@ -593,6 +593,32 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # model = PWN::AI::OpenAI.get_model(name: 'required - model id or slug')
+      #
+      # Platform catalogs use data[].id. ChatGPT/Codex catalogs use
+      # models[].slug and may nest pricing under a different key. get_model
+      # returns that one row; it does not invent a USD rate the catalog omitted.
+
+      public_class_method def self.get_model(opts = {})
+        name = opts[:name].to_s.strip
+        raise 'ERROR: Model name is required' if name.empty?
+
+        hop = PWN::AI::ModelCatalog.lookup_opts(opts)
+        row = PWN::AI::ModelCatalog.parse_row(raw: open_ai_rest_call(hop.merge(rest_call: "models/#{URI.encode_www_form_component(name)}")))
+        return row if PWN::AI::ModelCatalog.model_row?(row: row)
+        return nil if opts[:fallback] == false
+
+        listed = open_ai_rest_call(hop.merge(rest_call: 'models'))
+        return nil if listed.nil?
+
+        PWN::AI::ModelCatalog.find_row(models: catalog_models(raw: listed), name: name)
+      rescue StandardError => e
+        raise e if name.empty?
+
+        nil
+      end
+
       private_class_method def self.catalog_models(opts = {})
         raw = opts[:raw]
         raw = JSON.parse(raw, symbolize_names: true) if raw.is_a?(String) || raw.respond_to?(:to_str)
@@ -1517,6 +1543,13 @@ module PWN
           # Run get models and return its result
           #{self}.get_models
 
+          # Return one model row by id or slug. A missing price is not invented.
+          #{self}.get_model(
+            name: 'required - model id or slug',
+            timeout: 'optional - seconds (default 15)',
+            fallback: 'optional - false skips the full catalog when the direct route misses'
+          )
+
           # Chat Completions vs Responses path for this model (tools may force Responses).
           #{self}.api_endpoint(
             model: 'required - OpenAI model id (e.g. gpt-6-astra or gpt-4o)',