pwn 0.5.733 → 0.5.734

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b64f724a6d7fa420f4a252521269532cf4aa40700b7153a605595909fe0834e7
-  data.tar.gz: dd488cc0a1f6a824802cbeceb95a253d1c7de219baa15ae0a2773f9a9946454d
+  metadata.gz: 35f85751c76226260916fb5b417180f8c10a1fe53eb8913295895aec83da8eaa
+  data.tar.gz: 7808ea07ce71dd2576b168acf9cb1c429c0f9f4dc098570c13ffa81d416e6ffc
 SHA512:
-  metadata.gz: 76ba4fd11ead7ac047accf43f8aebaf32a34b7848f241e6966adb77edd736415a797a899161ddf8dba3c81911d1fa9b1708956c7524b008586af7be3c7c591b6
-  data.tar.gz: 49a67ddd31148ca211806ff3389484af19227efc5ceb789d216218160563b3b81a79e4f9a6fd6a93f6e3aa45e7ad1d68812dbb45f09d7b93a2fec6dce3e12fc1
+  metadata.gz: 933f35d3a0d28a1dfdb87eb826874e88b150738b333bfb2518a9366f61cd72b24c5fb7e64fe30e73a92086320d6d3df8bfb88b3d8047f9565eab9dd995780087
+  data.tar.gz: 5384de39a95c61302cd37f6a6bcdfbcd54f1f9b047a7588c990afef5b89a8e572007dab3abab3e35547d8dc35c6a43d4f2ec72997122e70ea86ea0a3cb21fc7d

data/.rubocop_todo.yml

@@ -18,6 +18,11 @@ Layout/TrailingWhitespace:
 Lint/NestedMethodDefinition:
   Exclude:
     - 'lib/pwn/plugins/repl.rb'
+    - 'lib/pwn/plugins/repl/ai.rb'
+    - 'lib/pwn/plugins/repl/asm.rb'
+    - 'lib/pwn/plugins/repl/irc.rb'
+    - 'lib/pwn/plugins/repl/mesh.rb'
+    - 'lib/pwn/plugins/repl/vault.rb'
 
 # Offense count: 8
 # This cop supports safe autocorrection (--autocorrect).

data/Gemfile

@@ -45,7 +45,7 @@ gem 'js-beautify', '0.1.8'
 gem 'json', '>=2.13.2'
 gem 'jsonpath', '1.1.5'
 gem 'json_schemer', '2.5.0'
-gem 'jwt', '3.2.0'
+gem 'jwt', '3.3.0'
 gem 'libusb', '0.8.0'
 gem 'luhn', '3.0.0'
 gem 'mail', '2.9.1'

data/documentation/Agent-Tool-Registry.md

@@ -24,7 +24,7 @@ toolsets; the JSON-Schema for each tool is what the model actually sees.
 | `policy` | **`policy_stats`** · **`policy_evaluate`** · **`policy_recommend`** | `PWN::AI::Agent::Policy` → `~/.pwn/policy.json` + `~/.pwn/policy_traj.jsonl` |
 | `extrospection` | `extro_snapshot` · `extro_drift` · `extro_observe` · `extro_observations` · `extro_intel` · **`extro_watch`** · **`extro_verify`** · **`extro_rf_tune`** · **`extro_osint`** · **`extro_serial`** · **`extro_telecomm`** · **`extro_packet`** · **`extro_vision`** · **`extro_voice`** · `extro_correlate` · `extro_stats` · `extro_reset` · `extro_auto_toggle` | `PWN::AI::Agent::Extrospection` (+ Serial/Packet/OCR/Voice/BareSIP/TransparentBrowser/GQRX) → `~/.pwn/extrospection.json` |
 | `cron` | `cron_list` · `cron_create` · `cron_run` · `cron_enable` · `cron_disable` · `cron_remove` | `PWN::Cron` → `~/.pwn/cron/jobs.yml` |
-| `swarm` | `agent_list` · `agent_spawn` · `agent_ask` · `agent_debate` · `agent_broadcast` · `swarm_bus` · `swarm_list` | `PWN::AI::Agent::Swarm` → `~/.pwn/agents.yml` + `~/.pwn/swarm/` |
+| `swarm` | `agent_list` · `agent_spawn` · `agent_ask` · `agent_debate` · `agent_broadcast` · `swarm_bus` · `swarm_list` · `agent_roster` | `PWN::AI::Agent::Swarm` → `~/.pwn/agents.yml` + `~/.pwn/swarm/` |
 | `manifest` | `host_os_type` | YAML tool declarations in `lib/pwn/ai/tools/*.yaml` via `PWN::AI::Agent::Manifest` |
 
 The `learning` toolset is deliberately large: **Mistakes** (negative feedback),

data/documentation/Configuration.md

@@ -203,18 +203,29 @@ plugins:
     token: ...                       # Jira Personal Access Token for PWN::Plugins::JiraDataCenter. Redacted.
   meshtastic:
     admin_key: ...                   # Public key authorised to send admin messages to mesh nodes via `pwn-mesh`.
+    transport: auto                  # auto | serial | bluetooth | tcp | mqtt — `auto` probes serial → bluetooth → tcp → mqtt; `/transport` pins one.
+    dispatch_to_pwn_ai: false        # `/toggle-dispatch-to-pwn-ai` — encrypted + ai_whitelist + `@ai` prefix → pwn-ai via Env ai.active; DMs if the channel is on ai_whitelist.
+    ai_whitelist: []                 # Channel names pwn-ai may answer on (e.g. LongFast). Empty = none.
     serial:
-      port: /dev/ttyUSB0           # Serial device path for a locally-attached Meshtastic node.
+      port: /dev/ttyACM0           # Serial device path (`Meshtastic::Serial.connect` block_dev).
       baud: 115200                 # Serial baud rate.
-      bits: 8                      # Serial data bits.
-      stop: 1                      # Serial stop bits.
+      bits: 8                      # Serial data bits (`data_bits`).
+      stop: 1                      # Serial stop bits (`stop_bits`).
       parity: none                 # Serial parity (none | even | odd).
+    bluetooth:
+      address: AA:BB:CC:DD:EE:FF   # BLE MAC/address for `Meshtastic::Bluetooth.connect`.
+    tcp:
+      host: 127.0.0.1              # IP/hostname for `Meshtastic::TCP.connect`.
+      port: 4403                   # TCP port for a Meshtastic node (default 4403).
     mqtt:
       host: mqtt.meshtastic.org    # MQTT broker hostname for Meshtastic-over-MQTT.
       port: 1883                   # MQTT broker port (8883 for TLS).
       tls: false                   # Use TLS to the MQTT broker.
       user: meshdev                # MQTT username (public Meshtastic broker default shown).
       pass: large4cats             # MQTT password (public Meshtastic broker default shown). Redacted.
+      client_id:                   # Optional MQTT client id (`Meshtastic::MQTT.connect`).
+      keep_alive: 60               # Optional MQTT keep-alive seconds.
+      ack_timeout: 5               # Optional MQTT ack timeout seconds.
     channel:
       active: LongFast             # Which named channel block below `pwn-mesh` uses for TX/RX.
       LongFast:                    # Channel definition - name is arbitrary, referenced by `active:` above.
@@ -367,16 +378,25 @@ PWN::Config.refresh_env
 | `plugins.jira_data_center.base_uri` | String | - | `PWN::Plugins::JiraDataCenter` | Jira DC REST base (e.g. `https://jira.company.com/rest/api/latest`). |
 | `plugins.jira_data_center.token` | String | - | `PWN::Plugins::JiraDataCenter` | Jira Personal Access Token. |
 | `plugins.meshtastic.admin_key` | String | - | `PWN::Plugins::REPL` (`pwn-mesh`) | Public key authorised to send admin messages to mesh nodes. |
-| `plugins.meshtastic.serial.port` | String | `/dev/ttyUSB0` | `pwn-mesh` (serial) | Serial device path for a locally-attached Meshtastic node. |
+| `plugins.meshtastic.transport` | String | `auto` | `pwn-mesh` | `auto` probes serial → bluetooth → tcp → mqtt. Pin with `/transport <kind>`. |
+| `plugins.meshtastic.dispatch_to_pwn_ai` | Boolean | `false` | `pwn-mesh` `/toggle-dispatch-to-pwn-ai` | When true, pwn-ai may answer TEXT_MESSAGE_APP on a securely encrypted channel that is listed in `ai_whitelist` and whose text begins with `@ai`. DMs are allowed when they reside on a whitelisted channel. |
+| `plugins.meshtastic.ai_whitelist` | Array | `[]` | `pwn-mesh` dispatch | Channel names pwn-ai is allowed to answer on. Empty means none. |
+| `plugins.meshtastic.serial.port` | String | `/dev/ttyACM0` | `pwn-mesh` → `Meshtastic::Serial.connect` `block_dev` | Serial device path. |
 | `plugins.meshtastic.serial.baud` | Integer | `115200` | `pwn-mesh` (serial) | Serial baud rate. |
-| `plugins.meshtastic.serial.bits` | Integer | `8` | `pwn-mesh` (serial) | Serial data bits. |
-| `plugins.meshtastic.serial.stop` | Integer | `1` | `pwn-mesh` (serial) | Serial stop bits. |
+| `plugins.meshtastic.serial.bits` | Integer | `8` | `pwn-mesh` (serial) `data_bits` | Serial data bits. |
+| `plugins.meshtastic.serial.stop` | Integer | `1` | `pwn-mesh` (serial) `stop_bits` | Serial stop bits. |
 | `plugins.meshtastic.serial.parity` | Symbol | `:none` | `pwn-mesh` (serial) | Serial parity. |
+| `plugins.meshtastic.bluetooth.address` | String | - | `pwn-mesh` → `Meshtastic::Bluetooth.connect` | BLE MAC/address of the node. |
+| `plugins.meshtastic.tcp.host` | String | `127.0.0.1` | `pwn-mesh` → `Meshtastic::TCP.connect` | TCP host of the node. |
+| `plugins.meshtastic.tcp.port` | Integer | `4403` | `pwn-mesh` (tcp) | TCP port of the node. |
 | `plugins.meshtastic.mqtt.host` | String | `mqtt.meshtastic.org` | `pwn-mesh` → `Meshtastic::MQTT.connect` | MQTT broker hostname. |
 | `plugins.meshtastic.mqtt.port` | Integer | `1883` | `pwn-mesh` | MQTT broker port. |
 | `plugins.meshtastic.mqtt.tls` | Boolean | `false` | `pwn-mesh` | Use TLS to the MQTT broker. |
 | `plugins.meshtastic.mqtt.user` | String | `meshdev` | `pwn-mesh` | MQTT username. |
 | `plugins.meshtastic.mqtt.pass` | String | `large4cats` | `pwn-mesh` | MQTT password. |
+| `plugins.meshtastic.mqtt.client_id` | String | - | `pwn-mesh` | Optional MQTT client id. |
+| `plugins.meshtastic.mqtt.keep_alive` | Integer | `60` | `pwn-mesh` | Optional MQTT keep-alive seconds. |
+| `plugins.meshtastic.mqtt.ack_timeout` | Integer | `5` | `pwn-mesh` | Optional MQTT ack timeout seconds. |
 | `plugins.meshtastic.channel.active` | String | `LongFast` | `pwn-mesh` | Which named channel block below is used for TX/RX. |
 | `plugins.meshtastic.channel.<NAME>.psk` | String (b64) | `AQ==` | `pwn-mesh` | Channel pre-shared key. |
 | `plugins.meshtastic.channel.<NAME>.region` | String | - | `pwn-mesh` | LoRa region tag (e.g. `US/UT`). |

data/documentation/General-PWN-Usage.md

@@ -39,7 +39,7 @@ history                             # what you've typed → copy into a driver
 |---|---|
 | `pwn-ai` | Enter the agent TUI (SHIFT+ENTER = newline, ENTER = submit) |
 | `pwn-asm` | Multi-line assembly ↔ opcode workbench |
-| `pwn-mesh` | Meshtastic serial / MQTT client (Ruby ≥ 4.0) |
+| `pwn-mesh` | Meshtastic serial / bluetooth / TCP / MQTT client (Ruby ≥ 4.0) |
 | `pwn-vault` | Decrypt → edit `~/.pwn/pwn.yaml` in `$EDITOR` → re-encrypt |
 | `pwn-ai-memory` | Inspect / edit `~/.pwn/memory.json` |
 | `pwn-ai-sessions` | List / view / delete transcripts |

data/documentation/Recon-Findings-API.md

@@ -24,6 +24,10 @@ Use `affected_asset: asset[:id]` and `evidence_paths: asset[:evidence_paths]` in
 
 Legacy `Findings.record`, query/report, chain, render, and SARIF output remain callable; legacy record is not the strict API. Agent record and chain operations are strict. Existing query/export tool operations remain available. Accepted structured rows mark `verification_status: not_executed`; evidence hashes prove captured bytes, not exploit execution. Severity is derived from the validated score. No automatic escalation for linked findings.
 
+`Findings.verify` / `finding_record op=verify` attests a working PoC from HTTP request/response files or a script execution log. The impact marker must appear in that evidence or the row stays `failed`. `Findings.retest` replays the same path after a fix (`still_open` vs `fixed`). `Findings.chain_impact` may raise combined severity only when a combined-impact file names every finding id. Issue work is unfinished while recorded findings remain `not_executed` (`issue_work_unverified`).
+
+`PWN::AI::Agent::Swarm.ensure_specialists` / `agent_roster` writes recon, authz, injection, xss, and business_logic personas. SARIF export is `Findings.render`; `PWN::Plugins::Github.open_fix_pr` opens a remediation PR (tests stub the GitHub API).
+
 Markdown/HTML/JSON report payloads compose connected explicit references into attack-chain sections, preserving all finding fields. Combined severity is maximum recorded constituent severity with a rationale explicitly disclaiming escalation and combined exploitability. This is not a computed CVSS chain score.
 
 ## Verification boundaries

data/documentation/pwn-REPL.md

@@ -21,7 +21,7 @@ commands.
 | `pwn-ai` | `Agent::Loop` | Enter the AI agent TUI |
 | `pwn-vault` | `PWN::Plugins::Vault` | Decrypt, edit `~/.pwn/pwn.yaml`, re-encrypt. Stays in the editor until `PWN::Config` accepts the file. |
 | `pwn-asm` | `Plugins::Assembly` | Multiline asm ↔ opcodes workbench |
-| `pwn-mesh` | `Meshtastic` gem | Meshtastic serial / MQTT client (Ruby ≥ 4.0; installed via `pwn setup`) |
+| `pwn-mesh` | `Meshtastic` gem | Meshtastic serial / bluetooth / TCP / MQTT client (Ruby ≥ 4.0; `plugins.meshtastic.transport`). Inside the mesh TUI, leading-slash menus (`/channel`, `/transport`, `/device`, `/status`, `/help`, `/back`) configure the session locally and are not sent as mesh text. TAB completes those commands. |
 | `pwn-ai-memory` | `PWN::Memory` | View/edit persistent memory |
 | `pwn-ai-sessions` | `PWN::Sessions` | List/view/delete transcripts |
 | `pwn-ai-cron` | `PWN::Cron` | List/run/toggle scheduled jobs |
@@ -34,6 +34,26 @@ commands.
 | `toggle-pager` | Pry | Page long output on/off |
 | `back` | - | Leave `pwn-ai` / `pwn-asm` / `pwn-mesh` sub-REPL |
 
+## pwn-mesh slash commands
+
+Typed at the mesh TX prompt (leading `/`). `/` or `/menu` opens a boxed curses menu (arrows/j/k, Enter, Esc). `/channel`, `/transport`, and `/device` without an argument open the same kind of list. Explicit `/channel LongFast` still jumps without a menu. Commands are local — they are not published as Meshtastic text. Changes update `PWN::Env[:plugins][:meshtastic]` and persist to `~/.pwn/pwn.yaml` when the vault decryptor is available; a live session reconnects so RX follows the new channel or radio.
+
+| Command | Purpose |
+|---|---|
+| `/help` | List mesh slash commands |
+| `/status` | Show active transport, device, and channel |
+| `/channel list` | List named `plugins.meshtastic.channel` blocks (`*` = active) |
+| `/channel <name>` | Switch the active channel (e.g. `LongFast`) |
+| `/transport list` | List `auto` / `serial` / `bluetooth` / `tcp` / `mqtt` |
+| `/transport <kind>` | Pin a connection type (`auto` re-enables serial → bluetooth → tcp → mqtt probe) |
+| `/device list` | List serial ports, BLE Meshtastic addresses, or the configured TCP/MQTT host |
+| `/device <id>` | Switch radio for the active transport (`/dev/ttyACM0`, BLE MAC, `host:port`) |
+| `/msg [!nodeid|channel] <text>` | Send a DM to `!nodeid`, or a broadcast on a named channel. Omit the target to reuse the last incoming DM sender or channel. A compose line without `/msg` goes to the active channel. Also `@!aabbccdd text` on a normal send. |
+| `/toggle-dispatch-to-pwn-ai` | Off by default. When on, pwn-ai answers only if the source channel is encrypted, listed in `plugins.meshtastic.ai_whitelist`, and the text begins with `@ai`. DMs are allowed when they reside on a whitelisted channel. Uses `PWN::Env[:ai][:active]`. |
+| `/back` | Leave pwn-mesh (same as `back` / CTRL+D) |
+
+Typing `/` shows matching commands in the TX pane (ncurses hides Reline's dropdown). TAB still completes `/…` commands, channel names, transports, and device ids.
+
 ## Multi-line input
 
 `pwn-ai` and `pwn-asm` use a custom `PWNMultiLineInput` reader. Plain

data/etc/default_skills/pwn/ai/agent/swarm/SKILL.md

@@ -48,6 +48,8 @@ PWN::AI::Agent::Swarm.personas(opts)
 - `facts_prompt`
 - `claim`
 - `pack_specialist`
+- `specialist_roles`
+- `ensure_specialists`
 - `child_inbox`
 - `child_honesty`
 - `honesty_unmet`

data/etc/default_skills/pwn/plugins/findings/SKILL.md

@@ -41,6 +41,10 @@ PWN::Plugins::Findings.required_bins(opts)
 - `query`
 - `chain`
 - `chain_score`
+- `verify`
+- `retest`
+- `chain_impact`
+- `issue_work_gaps`
 - `render`
 - `authors`
 - `help`

data/etc/default_skills/pwn/plugins/github/SKILL.md

@@ -37,6 +37,7 @@ PWN::Plugins::Github.download_all_gists(opts)
 - `workflow_runs`
 - `workflow_run_jobs`
 - `job_log`
+- `open_fix_pr`
 - `api`
 - `gh`
 - `authors`

data/etc/default_skills/pwn/plugins/repl/SKILL.md

@@ -38,38 +38,42 @@ PWN::Plugins::REPL.ready_tty(opts)
 - `refresh_ps1_proc`
 - `add_commands`
 - `add_hooks`
-- `pwn_ai_complete_kind`
+- `leave_special_mode`
+- `enable_autocomplete`
+- `start`
+- `authors`
+- `help`
+- `install_pwn_ai_completer!`
+- `install_pwn_mesh_completer!`
+- `leave_special_mode!`
+- `mesh_menu_pick`
+- `mesh_reset_input!`
+- `persist_ai_selection`
+- `persist_mesh_env`
+- `pwn_ai_activation_session`
 - `pwn_ai_complete`
 - `pwn_ai_complete_command`
+- `pwn_ai_complete_kind`
 - `pwn_ai_complete_path`
 - `pwn_ai_complete_ruby`
-- `install_pwn_ai_completer`
-- `restore_pwn_ai_completer`
-- `leave_special_mode`
-- `pwn_ai_activation_session`
-- `pwn_ai_profile_command`
-- `pwn_ai_memory_command`
-- `pwn_ai_dispatch_slash`
+- `pwn_ai_dispatch_slash!`
+- `pwn_ai_engine_model`
 - `pwn_ai_engines`
-- `pwn_ai_provider_class`
-- `pwn_ai_model_ids`
 - `pwn_ai_list_llms`
-- `pwn_ai_engine_model`
-- `pwn_ai_run_model`
-- `persist_ai_selection`
+- `pwn_ai_memory_command`
+- `pwn_ai_model_ids`
+- `pwn_ai_profile_command`
+- `pwn_ai_provider_class`
 - `pwn_ai_run_cron`
-- `pwn_ai_run_sessions`
-- `pwn_ai_run_memory`
 - `pwn_ai_run_learning`
-- `pwn_ai_run_skills`
 - `pwn_ai_run_mcp`
-- `enable_autocomplete`
-- `start`
-- `authors`
-- `help`
-- `install_pwn_ai_completer!`
-- `leave_special_mode!`
-- `pwn_ai_dispatch_slash!`
+- `pwn_ai_run_memory`
+- `pwn_ai_run_model`
+- `pwn_ai_run_sessions`
+- `pwn_ai_run_skills`
+- `pwn_mesh_complete`
+- `pwn_mesh_dispatch_slash!`
+- `pwn_mesh_menu_rows`
 - `ready_tty!`
 - `restore_pwn_ai_completer!`
 

data/etc/default_skills/pwn/plugins/repl/ai/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: pwn-plugins-repl-ai
+description: Drive PWN::Plugins::REPL::AI from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::REPL::AI
+  source: pwn/plugins/repl/ai.rb
+---
+
+# PWN::Plugins::REPL::AI
+
+pwn-ai REPL mode.
+
+## When to use
+
+Call `PWN::Plugins::REPL::AI` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/repl/ai.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::REPL::AI.help
+PWN::Plugins::REPL::AI.add_commands(opts)
+```
+
+## Public methods
+
+- `add_commands`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/repl/ai.rb`
+
+## Verification
+
+`PWN::Plugins::REPL::AI.respond_to?(:add_commands)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/repl/asm/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: pwn-plugins-repl-asm
+description: Drive PWN::Plugins::REPL::ASM from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::REPL::ASM
+  source: pwn/plugins/repl/asm.rb
+---
+
+# PWN::Plugins::REPL::ASM
+
+pwn-asm REPL mode.
+
+## When to use
+
+Call `PWN::Plugins::REPL::ASM` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/repl/asm.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::REPL::ASM.help
+PWN::Plugins::REPL::ASM.add_commands(opts)
+```
+
+## Public methods
+
+- `add_commands`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/repl/asm.rb`
+
+## Verification
+
+`PWN::Plugins::REPL::ASM.respond_to?(:add_commands)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/repl/irc/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: pwn-plugins-repl-irc
+description: Drive PWN::Plugins::REPL::IRC from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::REPL::IRC
+  source: pwn/plugins/repl/irc.rb
+---
+
+# PWN::Plugins::REPL::IRC
+
+pwn-irc REPL mode.
+
+## When to use
+
+Call `PWN::Plugins::REPL::IRC` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/repl/irc.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::REPL::IRC.help
+PWN::Plugins::REPL::IRC.add_commands(opts)
+```
+
+## Public methods
+
+- `add_commands`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/repl/irc.rb`
+
+## Verification
+
+`PWN::Plugins::REPL::IRC.respond_to?(:add_commands)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/repl/mesh/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: pwn-plugins-repl-mesh
+description: Drive PWN::Plugins::REPL::Mesh from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::REPL::Mesh
+  source: pwn/plugins/repl/mesh.rb
+---
+
+# PWN::Plugins::REPL::Mesh
+
+pwn-mesh REPL mode.
+
+## When to use
+
+Call `PWN::Plugins::REPL::Mesh` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/repl/mesh.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::REPL::Mesh.help
+PWN::Plugins::REPL::Mesh.add_commands(opts)
+```
+
+## Public methods
+
+- `add_commands`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/repl/mesh.rb`
+
+## Verification
+
+`PWN::Plugins::REPL::Mesh.respond_to?(:add_commands)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/repl/vault/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: pwn-plugins-repl-vault
+description: Drive PWN::Plugins::REPL::Vault from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::REPL::Vault
+  source: pwn/plugins/repl/vault.rb
+---
+
+# PWN::Plugins::REPL::Vault
+
+pwn-vault REPL mode.
+
+## When to use
+
+Call `PWN::Plugins::REPL::Vault` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/repl/vault.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::REPL::Vault.help
+PWN::Plugins::REPL::Vault.add_commands(opts)
+```
+
+## Public methods
+
+- `add_commands`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/repl/vault.rb`
+
+## Verification
+
+`PWN::Plugins::REPL::Vault.respond_to?(:add_commands)` after the
+module is loaded. Read the source for parameter names.

data/lib/pwn/ai/agent/loop.rb

@@ -705,6 +705,11 @@ module PWN
           artifact[:unmet].each { |row| unmet << "#{row[:criterion]}:#{row[:detail]}" }
           trace_files = session_files(messages: opts[:messages])
           unmet << 'issue_work_proofs' if contract[:issue_work] && Array(contract[:proofs]).empty? && files.empty? && trace_files.empty?
+          if contract[:issue_work] && defined?(PWN::Plugins::Findings)
+            gaps = PWN::Plugins::Findings.issue_work_gaps(session_id: Thread.current[:pwn_session_id].to_s)
+            unmet << 'issue_work_unverified' if Array(gaps[:recorded]).any? && Array(gaps[:reproduced]).empty?
+            unmet << 'issue_work_unchained' if gaps[:unchained]
+          end
           unmet << 'skills' if declared_skills_missing?(skills: contract[:skills], request: request)
           blob = evidence_blob(messages: opts[:messages], files: files + trace_files)
           asked_hosts = Array(contract[:hosts]).select { |host| request.downcase.include?(host.to_s.downcase) }
@@ -2787,7 +2792,8 @@ module PWN
           bound = operator_bound_refusal(from: opts[:from] || opts[:account])
           return bound if bound
 
-          engine = active_engine
+          engine = opts[:engine]
+          engine = engine.to_s.empty? ? active_engine : engine.to_s.downcase.to_sym
           local  = local_engine?(engine: engine)
 
           # Cheap intent/kind FIRST - before PromptBuilder / Registry / TaskSummarizer
@@ -3366,6 +3372,7 @@ module PWN
               account: 'optional - operator account id to bind',
               force_tools: 'optional - force tools value consumed by #run',
               nested: 'optional - true for Swarm/child Loop.run (skip RN footer)',
+              engine: 'optional - provider name; defaults to PWN::Env ai.active',
               core_only: 'optional - restrict to CORE_TOOLS when true',
               trace: 'optional - enable TracePoint debug for this run',
               debug_tee: 'optional - IO to tee debug logs'

data/lib/pwn/ai/agent/swarm.rb

@@ -34,6 +34,33 @@ module PWN
         DEFAULT_TAIL    = 12
         DEFAULT_TOOLSET = %w[terminal pwn memory skills sessions learning
                              metrics extrospection].freeze
+        SPECIALIST_ROLES = {
+          recon: {
+            role: 'Map the operator-named target. Record assets and working probes. Do not invent hosts.',
+            skills: %w[osint penetration-testing],
+            toolsets: %w[pwn terminal extrospection http]
+          },
+          authz: {
+            role: 'Test authorization and IDOR on discovered assets. Reproduce with request/response PoCs.',
+            skills: %w[web-application-penetration-testing],
+            toolsets: %w[pwn terminal http]
+          },
+          injection: {
+            role: 'Test injection on discovered inputs. Attach a working PoC, not a scanner signature.',
+            skills: %w[web-application-penetration-testing deep-exploitation],
+            toolsets: %w[pwn terminal http]
+          },
+          xss: {
+            role: 'Test XSS and CSRF in a real browser session. Evidence is a reproduced payload, not a pattern hit.',
+            skills: %w[web-application-penetration-testing],
+            toolsets: %w[pwn terminal http]
+          },
+          business_logic: {
+            role: 'Chain authorization, injection, and workflow flaws into one evidenced impact path.',
+            skills: %w[web-application-penetration-testing bug-bounty-hunting],
+            toolsets: %w[pwn terminal http]
+          }
+        }.freeze
 
         # ------------------------------------------------------------------
         # Persona registry (~/.pwn/agents.yml)
@@ -524,6 +551,33 @@ module PWN
           { name: name, skills: skills, toolsets: toolsets }
         end
 
+        # Catalog of lead-spawned offensive specialists (recon through business logic).
+
+        public_class_method def self.specialist_roles(opts = {})
+          name = opts[:name].to_s
+          return SPECIALIST_ROLES.fetch(name.to_sym) unless name.empty?
+
+          SPECIALIST_ROLES
+        end
+
+        # Write ephemeral specialist personas for a swarm without running Loop.
+
+        public_class_method def self.ensure_specialists(opts = {})
+          sid = opts[:swarm_id].to_s
+          raise ArgumentError, 'swarm_id is required' if sid.empty?
+
+          SPECIALIST_ROLES.map do |name, spec|
+            spawn(
+              name: name.to_s,
+              role: spec[:role],
+              skills: spec[:skills],
+              toolsets: spec[:toolsets],
+              swarm_id: sid,
+              ephemeral: true
+            )
+          end
+        end
+
         public_class_method def self.child_inbox(opts = {})
           sid = opts[:session_id].to_s
           findings = if defined?(PWN::Plugins::Findings)
@@ -737,6 +791,16 @@ module PWN
               orchestrator: 'optional - true to keep the swarm toolset'
             )
 
+            # Catalog of lead-spawned specialists (recon, authz, injection, xss, business_logic).
+            #{self}.specialist_roles(
+              name: 'optional - one role name; omit to return the full catalog'
+            )
+
+            # Write ephemeral specialist personas for a swarm without running Loop.
+            #{self}.ensure_specialists(
+              swarm_id: 'required - swarm id from #create'
+            )
+
             # World-object inbox for a child session (finding ids, artifact shas).
             #{self}.child_inbox(
               session_id: 'optional - child PWN::Sessions id',

data/lib/pwn/ai/agent/tools/finding_record.rb

@@ -28,9 +28,18 @@ PWN::AI::Agent::Registry.register(
         poc: { type: 'string' },
         poc_artifacts: { type: 'array', items: { type: 'string' } },
         session_id: { type: 'string' },
-        op: { type: 'string' },
+        op: { type: 'string', enum: %w[query export chain record verify retest chain_impact gaps] },
         parent_id: { type: 'string' },
-        engagement_id: { type: 'string' }
+        engagement_id: { type: 'string' },
+        kind: { type: 'string', enum: %w[http script] },
+        impact: { type: 'string' },
+        request_path: { type: 'string' },
+        response_path: { type: 'string' },
+        execution_log: { type: 'string' },
+        ids: { type: 'array', items: { type: 'string' } },
+        combined_impact_path: { type: 'string' },
+        escalate: { type: 'boolean' },
+        combined_severity: { type: 'string' }
       },
       required: %w[],
       anyOf: [
@@ -52,6 +61,14 @@ PWN::AI::Agent::Registry.register(
       PWN::Plugins::Findings.record_structured(args.merge(attack_chain_refs: (Array(args[:attack_chain_refs]) + [parent]).uniq))
     when 'export'
       PWN::Plugins::Findings.render(args)
+    when 'verify'
+      PWN::Plugins::Findings.verify(args)
+    when 'retest'
+      PWN::Plugins::Findings.retest(args)
+    when 'chain_impact'
+      PWN::Plugins::Findings.chain_impact(args)
+    when 'gaps'
+      PWN::Plugins::Findings.issue_work_gaps(args)
     when 'record'
       PWN::Plugins::Findings.record_structured(args)
     else