pwn 0.5.794 → 0.5.795

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2d7f95442e7e518256ffa6e9f9ce4e6856559430d475621446b07192f22088ad
-  data.tar.gz: 3030f3616da6d651f08eae290b4a979633074904d001c3bfd16c6ddd81c20de5
+  metadata.gz: 7b3dcfffe5307553d194d351676ac3eaf1691d7342fc6464b95e85703cdbbeb4
+  data.tar.gz: 1401f535f0537335601e31705528478e4e4db31ffa8a174aadc8daa79c8add88
 SHA512:
-  metadata.gz: ed97966a4b047588627e1e3864471171a565e8095fc2c9091b418756d8dcb02ead69db214d18d8d4db2b470ac6e1455dc9307c37ffddcc0b4f36feb45ae93a0e
-  data.tar.gz: 1c349c364aeed6a41a3ec8b25f21bc4cbadd100e5312df2fc9c0b5ed8916c3410602ad4f5d2ebe6a3edb3dcd8e51aa8ab0d58782679f7822c32a8b498351bfb5
+  metadata.gz: e1bd1c31a8df2a4e9c4ced9164dd404aa434d24a1858f037a7f4cbd44a2c50859504fd509776333f99834caa103f4e4f4f90b63cabf117643ea63ab3db6c715f
+  data.tar.gz: c229d034c61e8b5ad91e6082d4a3831fbe9f7323b396296e58ceab991fadb15996d624a29d446949d65d2ffa50fe8056806911cb9385b5d3f69b34267c2b197b

data/Gemfile

@@ -22,7 +22,7 @@ gem 'brakeman', '8.1.0'
 gem 'bson', '5.2.0'
 gem 'bundler', '>=4.0.24'
 gem 'bundler-audit', '>=0.9.3'
-gem 'bunny', '3.5.0'
+gem 'bunny', '3.6.0'
 gem 'colorize', '1.1.0'
 gem 'credit_card_validations', '10.0.0'
 gem 'curses', '1.7.0'

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.794'
+  VERSION = '0.5.795'
 end

data/spec/integration/spec_sandbox_isolation_spec.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'offline spec mission isolation' do
+  before do
+    @outside = Dir.mktmpdir('pwn-outside-mission-')
+    stub_const('PWN::AI::Agent::Mission::ROOT', File.join(@outside, 'missions'))
+    stub_const('PWN::AI::Agent::OpenGoal::GOAL_FILE', File.join(@outside, 'open_goal.json'))
+    PWN::AI::Agent::Mission.begin!(id: 'outside', request: 'Unrelated active mission fixture', unattended: true)
+    PWN::AI::Agent::Mission.note_job!(id: 'outside', job_id: 'outside-job', command: 'fixture')
+    PWN::AI::Agent::OpenGoal.begin!(request: 'Unrelated active mission fixture', mission_id: 'outside')
+    @outside_files = Dir.glob(File.join(@outside, '**', '*')).select { |path| File.file?(path) }.to_h { |path| [path, File.binread(path)] }
+    allow(PWN::Plugins::Jobs).to receive(:status).and_call_original
+    allow(PWN::Plugins::Jobs).to receive(:status).with(id: 'outside-job').and_return(id: 'outside-job', status: 'RUNNING')
+  end
+
+  after { FileUtils.remove_entry(@outside) if @outside && Dir.exist?(@outside) }
+
+  context 'with the shared persistence sandbox' do
+    include_context 'pwn tmp sandbox'
+
+    it 'answers through the provider without consulting or modifying an outside live mission' do
+      allow(Dir).to receive(:home).and_return(@tmp)
+      allow(PWN::AI::Agent::PromptBuilder).to receive(:build).and_return('Offline fixture')
+      allow(PWN::AI::Agent::TaskSummarizer).to receive(:enabled?).and_return(false)
+      allow(PWN::AI::Agent::Loop).to receive(:maybe_refresh_extro_snapshot!)
+      allow(PWN::AI::Agent::Loop).to receive(:may_finalize?).and_return(true)
+      allow(PWN::AI::Agent::Loop).to receive(:should_auto_introspect?).and_return(false)
+      PWN::Env[:ai][:active] = :openai
+      PWN::Env[:ai][:openai] = { model: 'offline-fixture' }
+      allow(PWN::AI::OpenAI).to receive(:chat_with_tools).and_return(choices: [{ message: { role: 'assistant', content: 'Fixture answer.', tool_calls: [] } }])
+      sid = PWN::Sessions.create(title: 'Isolation fixture')[:id]
+      answer = PWN::AI::Agent::Loop.run(request: 'what color is a lemon?', session_id: sid, enabled_toolsets: [])
+      expect(answer).to eq('Fixture answer.')
+      expect(PWN::AI::OpenAI).to have_received(:chat_with_tools).once
+      expect(PWN::AI::Agent::Mission::ROOT).to eq(File.join(@tmp, 'missions'))
+      expect(PWN::AI::Agent::OpenGoal::GOAL_FILE).to eq(File.join(@tmp, 'open_goal.json'))
+      expect(PWN::Plugins::Jobs).not_to have_received(:status).with(id: 'outside-job')
+      @outside_files.each { |path, bytes| expect(File.binread(path)).to eq(bytes) }
+    end
+  end
+end

data/spec/lib/pwn/plugins/repl/ai_console_spec.rb

@@ -530,7 +530,9 @@ describe 'pwn-ai curses launch' do # rubocop:disable Metrics/BlockLength -- publ
         PWN::Plugins::REPL::AIConsole.run(pry: @pry, input: input, output: output, curses: screen, getch: reader)
       end
     rescue expired
-      raise expired, "execution expired phase=#{@launch_phase.inspect} session=#{@pry.config.pwn_ai_session_id} paint=#{@paint.join[-240]}"
+      timeline = @console&.instance_variable_get(:@timeline).to_a.last(8).map { |type, text| [type, text.to_s[0, 400]] }
+      paint = @paint.last(120).join
+      raise expired, "execution expired phase=#{@launch_phase.inspect} session=#{@pry.config.pwn_ai_session_id} timeline=#{timeline.inspect} paint=#{paint[-240, 240] || paint}"
     end
     expect([$stdin, $stdout]).to eq(previous.take(2))
     expect(PWN::Plugins::Log.raw_stderr).to equal(previous[2])
@@ -2678,34 +2680,51 @@ describe 'pwn-ai curses launch' do # rubocop:disable Metrics/BlockLength -- publ
     PWN::Sessions.append(session_id: sid, role: 'user', content: 'Previous fixture question')
     PWN::Sessions.append(session_id: sid, role: 'assistant', content: 'Previous fixture answer')
     allow(PWN::Plugins::REPL).to receive(:persist_ai_selection).and_return(false)
+    seen = File.join(@tmp, 'curses-provider-call.json')
+    recorded = false
     allow(PWN::AI::OpenAI).to receive(:chat_with_tools) do |opts|
-      expect(PWN::Env.dig(:ai, :openai, :model)).to eq('console-fixture')
-      expect(opts[:messages]).to include(hash_including(role: 'user', content: 'Previous fixture question'), hash_including(role: 'assistant', content: 'Previous fixture answer'))
+      unless recorded
+        recorded = true
+        messages = Array(opts[:messages]).map { |row| { role: row[:role] || row['role'], content: (row[:content] || row['content']).to_s } }
+        File.write(seen, JSON.generate(model: PWN::Env.dig(:ai, :openai, :model), call_model: opts[:model], messages: messages))
+      end
       { choices: [{ message: { role: 'assistant', content: 'Selected route.', tool_calls: [] } }] }
     end
+    allow(PWN::AI::Router).to receive(:summarize).and_return('{"title":"Resumed console","summary":"Fixture summary."}')
     keys = "/model openai console-fixture\n".chars
     phase = :model
     launch(keys) do
       @launch_phase = phase
       idle = @console && !@console.send(:busy?)
+      prompt = @console&.instance_variable_get(:@model_prompt)
       case phase
       when :model
-        if idle && @paint.join.include?('model=console-fixture')
+        if idle && !prompt && @paint.join.include?('model=console-fixture') && PWN::Env.dig(:ai, :openai, :model) == 'console-fixture'
           phase = :resume
           keys.concat("/sessions resume resumed console\n".chars)
         end
         nil
       when :resume
-        if idle && @pry.config.pwn_ai_session_id == sid
+        if idle && !prompt && @pry.config.pwn_ai_session_id == sid && PWN::Env.dig(:ai, :openai, :model) == 'console-fixture'
           phase = :ask
           keys.concat("what color is a lemon?\n".chars)
         end
         nil
       else
-        "\u0004" if @paint.join.include?('Selected route.')
+        "\u0004" if idle
       end
     end
     expect(@pry.config.pwn_ai_session_id).to eq(sid)
+    expect(File).to exist(seen), "Mission finished without calling the provider: #{@console.instance_variable_get(:@timeline).inspect}"
+    observed = JSON.parse(File.read(seen), symbolize_names: true)
+    expect(observed[:model]).to eq('console-fixture')
+    expect(observed[:call_model]).to eq('console-fixture')
+    expect(observed[:messages]).to include(
+      hash_including(role: 'user', content: 'Previous fixture question'),
+      hash_including(role: 'assistant', content: 'Previous fixture answer'),
+      hash_including(role: 'user', content: 'what color is a lemon?')
+    )
+    expect(@paint.join).to include('Selected route.')
     expect(PWN::Sessions.load(session_id: sid).map { |row| row[:content] }.join).to include('Selected route.')
   end
 

data/spec/lib/pwn/plugins/repl/ai_legacy_containment_spec.rb

@@ -27,6 +27,37 @@ describe 'regex-ReAct mission containment' do
     Pry.config.hooks.get_hook(:after_read, :pwn_ai_hook).call(request, pry)
   end
 
+  def wait_for_descendant_pid(marker)
+    Timeout.timeout(10) do
+      loop do
+        text = File.read(marker) if File.file?(marker)
+        pid = text.to_s[/^NSpid:[ \t]+([1-9]\d*)(?:[ \t]+\d+)+\n/, 1]
+        return pid.to_i if pid
+
+        sleep 0.01
+      end
+    end
+  end
+
+  it 'waits for the descendant PID contents rather than an empty readiness file' do
+    marker = File.join(@tmp, 'partial-ready')
+    File.write(marker, '')
+    read_empty = Queue.new
+    writer = Thread.new do
+      read_empty.pop
+      File.write(marker, "NSpid:\t12345\t1\n")
+    end
+    allow(File).to receive(:read).and_call_original
+    allow(File).to receive(:read).with(marker).and_wrap_original do |original, path|
+      text = original.call(path)
+      read_empty << true if text.empty?
+      text
+    end
+    expect(wait_for_descendant_pid(marker)).to eq(12_345)
+  ensure
+    writer&.kill&.join
+  end
+
   it 'fails closed before calling a provider when mission containment is unavailable' do
     allow(PWN::Plugins::AISandbox::MissionProcess).to receive(:new).and_raise(PWN::Plugins::AISandbox::NotStarted, 'enable user/PID namespaces')
     expect(PWN::AI::Ollama).not_to receive(:chat)
@@ -137,8 +168,7 @@ describe 'regex-ReAct mission containment' do
       nil
     end
     marker = File.join(@tmp, '.pwn', 'workspaces', 'runtime', 'pty-ready')
-    Timeout.timeout(10) { sleep 0.01 until File.exist?(marker) }
-    host_pid = File.read(marker)[/^NSpid:\s+(\d+)/, 1].to_i
+    host_pid = wait_for_descendant_pid(marker)
     writer.write("\x03")
     Timeout.timeout(10) { sleep 0.01 until output.include?('CANCELLED READY') }
     expect { Process.kill(0, host_pid) }.to raise_error(Errno::ESRCH)
@@ -179,8 +209,7 @@ describe 'regex-ReAct mission containment' do
       rescue Interrupt
         :cancelled
       end
-      Timeout.timeout(10) { sleep 0.01 until File.exist?(marker) }
-      host_pid = File.read(marker)[/^NSpid:\s+(\d+)/, 1].to_i
+      host_pid = wait_for_descendant_pid(marker)
       worker.raise(Interrupt)
       expect(Timeout.timeout(10) { worker.value }).to eq(:cancelled)
       expect(repl).to have_received(:ready_tty!)

data/spec/support/sandbox.rb

@@ -47,7 +47,9 @@ RSpec.shared_context 'pwn tmp sandbox' do
       'PWN::AI::Agent::Policy::TRAJECTORY_FILE' => 'policy_traj.jsonl',
       'PWN::AI::Agent::Extrospection::EXTRO_FILE' => 'extrospection.json',
       'PWN::AI::Agent::Swarm::AGENTS_FILE' => 'agents.yml',
-      'PWN::AI::Agent::Swarm::SWARM_ROOT' => 'swarm'
+      'PWN::AI::Agent::Swarm::SWARM_ROOT' => 'swarm',
+      'PWN::AI::Agent::Mission::ROOT' => 'missions',
+      'PWN::AI::Agent::OpenGoal::GOAL_FILE' => 'open_goal.json'
     }.each do |const, rel|
       owner = const.split('::')[0..-2].join('::')
       stub_const(const, File.join(@tmp, rel)) if Object.const_defined?(owner)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.794
+  version: 0.5.795
 platform: ruby
 authors:
 - 0day Inc.
@@ -169,14 +169,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.0
+        version: 3.6.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.0
+        version: 3.6.0
 - !ruby/object:Gem::Dependency
   name: colorize
   requirement: !ruby/object:Gem::Requirement
@@ -6714,6 +6714,7 @@ files:
 - spec/integration/reports_spec.rb
 - spec/integration/result_condition_spec.rb
 - spec/integration/sast_functional_spec.rb
+- spec/integration/spec_sandbox_isolation_spec.rb
 - spec/integration/tool_registry_spec.rb
 - spec/integration/web_cache_deception_yubikey_spec.rb
 - spec/lib/pwn/ai/agent/assembly_spec.rb