pwn 0.5.702 → 0.5.703

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5e0f1934072cdfc2dd334d22bcd15774e5756a0bd02bb68962759ceb2e436b98
-  data.tar.gz: b092c265b35a9000293ce787252452c8045c4604677a3bd5416a2e4e732c2cce
+  metadata.gz: c7cea05c0bbdbb5df99c258d696c234071a44592665732086943b8e85a23e047
+  data.tar.gz: 9991f785d11bfe591e4391615e5898f7f5e6a16c0c51de732db9e6f172bdd282
 SHA512:
-  metadata.gz: 61bdd9c6f370aa44f1cb3e5b00a928cd57acb5f1a40154769079ecec39ac4f0d8ce81c8daac5c5a1f5040b96cff7b7503de230645920531a854f10762bf75058
-  data.tar.gz: bc978a06cf9dd7e109696b6e95bfba64dcbc73d3092a9fbdcfe19cdf488dcec0b3c463866a90703050705fdf01bdd0f6a34e93c5f02812631682669499632461
+  metadata.gz: 319e5f02eba56e735bbf1497347750f3bbedc906919d2d96e6313c89c87dd2f439c100317f6d2c19a86b47ff8d390c15581b44b6de8ad1b45629245e4f5acb24
+  data.tar.gz: 899c8e1bc7374a8a8fbee9c940a4650bfed391a7c787ce9e59b3a1a5ba2d2a2978b24629df31d1d35ed067445f95ced484f04cfc85093212065ac96fde60f338

data/etc/default_skills/pwn/ai/agent/tool_guard/SKILL.md

@@ -39,6 +39,7 @@ PWN::AI::Agent::ToolGuard.present(opts)
 - `shell_bash`
 - `shell_name`
 - `protect_http`
+- `protect_core_constants`
 - `coerce_args`
 - `invalid_payload`
 - `host_load`

data/lib/pwn/ai/agent/loop.rb

@@ -934,10 +934,14 @@ module PWN
           nil
         end
 
+        PAYLOAD_SHA256 = Digest::SHA256
+
         private_class_method def self.payload_sig(opts = {})
-          Digest::SHA256.hexdigest("#{opts[:name]}|#{opts[:args]}")[0, 16]
+          blob = "#{opts[:name]}|#{opts[:args]}"
+          PAYLOAD_SHA256.hexdigest(blob)[0, 16]
         rescue StandardError
-          "nosig-#{opts[:name]}"
+          key = "#{opts[:name]}|#{opts[:args]}"
+          "#{opts[:name]}-#{key.hash.abs.to_s(16)[0, 12]}"
         end
 
         private_class_method def self.note_same_payload!(opts = {})

data/lib/pwn/ai/agent/tool_guard.rb

@@ -60,23 +60,34 @@ module PWN
         end
 
         # RestClient uses HTTP::CookieJar. pwn_eval in TOPLEVEL_BINDING can
-        # assign HTTP = "/path/http" (a mkdir) and then every provider hop
-        # TypeErrors: "path is not a class/module".
+        # assign HTTP = "/path/http" or Digest = "(self.we" and then every
+        # provider hop / payload_sig TypeErrors.
+        CORE_CONSTS = %i[HTTP Digest JSON URI Timeout].freeze
+
         public_class_method def self.protect_http!
-          if Object.const_defined?(:HTTP, false)
-            cur = Object.const_get(:HTTP)
-            @http_mod = cur if cur.is_a?(Module) && @http_mod.nil?
-            return cur if cur.is_a?(Module)
+          protect_core_constants!
+        end
+
+        public_class_method def self.protect_core_constants!
+          @core_mods ||= {}
+          CORE_CONSTS.each do |name|
+            if Object.const_defined?(name, false)
+              cur = Object.const_get(name, false)
+              @core_mods[name] = cur if cur.is_a?(Module) && @core_mods[name].nil?
+              next if cur.is_a?(Module)
+
+              Object.send(:remove_const, name)
+            end
+            next unless @core_mods[name].is_a?(Module)
+            next if Object.const_defined?(name, false) && Object.const_get(name, false).equal?(@core_mods[name])
 
-            Object.send(:remove_const, :HTTP)
+            Object.const_set(name, @core_mods[name])
           end
-          if @http_mod.is_a?(Module)
-            Object.const_set(:HTTP, @http_mod)
-            return @http_mod
+          unless Object.const_defined?(:HTTP, false) && Object.const_get(:HTTP, false).is_a?(Module)
+            require 'http/cookie_jar'
+            @core_mods[:HTTP] = Object.const_get(:HTTP) if Object.const_defined?(:HTTP) && Object.const_get(:HTTP).is_a?(Module)
           end
-          require 'http/cookie_jar'
-          @http_mod = Object.const_get(:HTTP) if Object.const_defined?(:HTTP) && Object.const_get(:HTTP).is_a?(Module)
-          @http_mod
+          @core_mods
         rescue StandardError
           nil
         end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.702'
+  VERSION = '0.5.703'
 end

data/spec/lib/pwn/ai/agent/tools/ruby_eval_spec.rb

@@ -48,6 +48,19 @@ describe 'PWN::AI::Agent::Tools ruby_eval' do
     expect { HTTP::CookieJar }.not_to raise_error
   end
 
+  it 'restores Digest if the payload assigns Digest so later payload_sig still hashes' do
+    entry = PWN::AI::Agent::Registry.lookup(name: 'pwn_eval')
+    result = entry.handler.call(code: 'Digest = "(self.we"')
+    expect(result[:error]).to be_nil
+    expect(Digest).to be_a(Module)
+    expect(Digest::SHA256.hexdigest('x')).to be_a(String)
+    a = PWN::AI::Agent::Loop.send(:payload_sig, name: 'pwn_eval', args: '{"code":"1"}')
+    b = PWN::AI::Agent::Loop.send(:payload_sig, name: 'pwn_eval', args: '{"code":"2"}')
+    expect(a).not_to eq(b)
+    expect(a).not_to match(/nosig-/)
+    expect(b).not_to match(/nosig-/)
+  end
+
   it 'enforces a timeout on pwn_eval and reports timeout after Ns' do
     tmp = Dir.mktmpdir
     stub_const('PWN::AI::Agent::Mistakes::MISTAKES_FILE', File.join(tmp, 'mistakes.json'))

data/third_party/pwn_rdoc.jsonl

@@ -729,6 +729,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.payload_spent Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.payload_spent`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.placeholder? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.placeholder?`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.present? Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.present?`: "}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.protect_core_constants! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.protect_core_constants!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.protect_http! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.protect_http!`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.reset_timeout_budget Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.reset_timeout_budget`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::ToolGuard.reset_timeout_budget! Usage"},{"role":"assistant","content":"`PWN::AI::Agent::ToolGuard.reset_timeout_budget!`: "}]}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.702
+  version: 0.5.703
 platform: ruby
 authors:
 - 0day Inc.