icoa-cli 1.2.0 → 1.3.0

package/dist/index.js

@@ -29,7 +29,7 @@ ${chalk.cyan('║')}                                                          ${
 ${chalk.cyan('║')}   ${chalk.green.bold('AI4CTF')} ${chalk.gray('Use AI to solve challenges')}                      ${chalk.cyan('║')}
 ${chalk.cyan('║')}   ${chalk.red.bold('CTF4AI')} ${chalk.gray('Hack, attack & evaluate AI systems')}              ${chalk.cyan('║')}
 ${chalk.cyan('║')}                                                          ${chalk.cyan('║')}
-${chalk.cyan('║')}   ${chalk.gray('CLI-Native Competition Terminal  v1.2.0')}                ${chalk.cyan('║')}
+${chalk.cyan('║')}   ${chalk.gray('CLI-Native Competition Terminal  v1.3.0')}                ${chalk.cyan('║')}
 ${chalk.cyan('║')}                                                          ${chalk.cyan('║')}
 ${chalk.cyan('╚══════════════════════════════════════════════════════════╝')}
 `;
@@ -50,13 +50,14 @@ process.on('unhandledRejection', (reason) => {
 const program = new Command();
 program
     .name('icoa')
-    .version('1.0.0')
+    .version('1.2.0')
     .description('ICOA CLI — CLI-Native CTF Competition Terminal')
-    .action(() => {
+    .option('--resume', 'Resume previous session')
+    .action((opts) => {
     console.log(BANNER);
-    // If running interactively (no extra args), start REPL
-    if (process.argv.length <= 2) {
-        startRepl(program);
+    // If running interactively (no extra args or --resume), start REPL
+    if (process.argv.length <= 2 || opts.resume) {
+        startRepl(program, !!opts.resume);
         return;
     }
 });

package/dist/lib/access.d.ts

@@ -0,0 +1,19 @@
+export declare function validateToken(token: string): boolean;
+export declare function isActivated(): boolean;
+export declare function activateToken(token: string): boolean;
+export declare function isFreeCommand(cmd: string): boolean;
+interface SessionState {
+    startedAt: string;
+    lastExitAt: string | null;
+    lastResumeAt: string | null;
+    exitCount: number;
+    totalAwaySeconds: number;
+}
+export declare function getSession(): SessionState;
+export declare function saveSession(session: Partial<SessionState>): void;
+export declare function recordExit(): void;
+export declare function recordResume(): {
+    awaySeconds: number;
+    exitCount: number;
+} | null;
+export {};

package/dist/lib/access.js

@@ -0,0 +1,174 @@
+import { createHash } from 'node:crypto';
+import { getConfig, saveConfig, getIcoaDir } from './config.js';
+import { readFileSync, writeFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+// SHA-256 hashes of 100 pre-generated access tokens (ICOA-XXXX-XXXX-XXXX)
+const TOKEN_HASHES = new Set([
+    "93490bf664679467b4ab5af12e240175364b7af988b72cb7d000e309b7c68c15",
+    "cba7a6f075a4bd8c2fc973336cc0b1966669fc481381a065ce670730bbe0b7d3",
+    "f6773f614341acb8d2c35e8f466f2876095a2c8026a207e77de621050fa64559",
+    "d060ab36056fdac449a561fd3340c4b79ad4cde10c9a21c3397aa74574583a2b",
+    "523c11774e103298c15eb9d138872295194078f2d29486d0a6bd210436a592c3",
+    "1e16864067470f0a97088f067d8df4b655753ff498a91353b5f9b75989b6be39",
+    "f1031aac52879c776d4db5ba43eb25bb40f1a841b91304f8adf65a838fb8c666",
+    "bcd9e25014633ec6556345ab43d0cd213c454bb10d4ea0bd5be5ba02e1a6622c",
+    "9239ba9c3db74eadbb6dd05949c2a3cbe1b22e14e375ab3ca93d050e2e2ce38b",
+    "80fc0a899ed4d37138ae3172dafd466de2d3b1ce9630d67e6b00bec9315964d7",
+    "33ed35ce028824519d3a013ca326d6a58b1ca3723ec182527a7367e1ffc2712b",
+    "7e90933e760ce5e8df48bdb6bab0e95962bdc1098fceedecf617c0dac37b2a11",
+    "33fa6e3639a691b217ed0f927a8e2e2aef5eaa15eab7bd90c57874c2df2a28ac",
+    "67013663fb4536a47f6ea46b434fb7a00574bd4fc4f579e9439ba07f748db31b",
+    "10c83ad26fc965fcb1d228018f6b54d331e4a2e6087603920b75b500e191c5e4",
+    "3079268d847dc7eb196ce8cdc0af8a8506b9636539a1b7cce53dc5cb3f4cbe15",
+    "985eb5309c546d2f9d5018976973d6da06a374b897c73c830fc9d1305e78efa0",
+    "3a7326d4a7f40cc356b17769f4c5fc0d832d926aff9f067efd60f34c053bf9ef",
+    "129f408a98ad6c1b13924cf2c831c752b0c726bf1975d6b46f212a178ced52e1",
+    "ec44bc0b4eb6a929b969caaa561492527c369cc07efa50e40c2c6c16162f0c2c",
+    "07610942d9da62dd5b91c0ba48602bc44973a9d374ed10ab6c708151677ec626",
+    "8ce3165bb8e23f3b67ac53b39191aca3e2f0a620b7f932fe6a43e2c42315efcc",
+    "69938b605e652afc1cf8bc7c0dcf6a99820878367dfb3b2ec954ba90b36014f5",
+    "660377ce87d378285ab7263fdad86208c8563367d2cc36b4c1402520e45dd5f0",
+    "bef8a3727dffc94861a1dfa7d6a336ceac30aab9f0679dcab662cb9f682079dd",
+    "02318a3597b64a2c7de56b01fc25f33cc4142c76315136186df680f490681294",
+    "b7179114b42b90e9557399ae505050111b6afc55f9295d3ee84d5db6873470c5",
+    "e227ec0a6b22773500b35bee46f21bc6bc6a00fb001d54e71479f15b8fdfd72b",
+    "1c9802ae1e932d55e73994ce173a996d170e4d274aeccb1b784c9d9b69913f3d",
+    "5ed51694773bd1b46a085d10e9a369786a997c50b72ec2bdb6e68921ffca5c51",
+    "478e457279a41e9b76a3dc5894418e38246d2af31e0f4776dda8aa89c74c88c8",
+    "a7ec7e047c0e62862e9be64b0a65d3d7894d41efe6eb16ca6cfca45d8007f16f",
+    "88cf2b75604486ac5f1a0db9afbab28e8e866f9ea00f3e4b4353a7ecc81f6b55",
+    "dc4daa9ef4149f122979ffd5a8b23bca3cbb83b24a87ba99a1d00dc09e39936e",
+    "cffd9a3637b5ae30c27cae4ae42dc21374caa27dd818b5d361f112406bf3c0e7",
+    "33b3e85a964f606e857280ba379de46508f9343cbe1d2722abebbed21b82a106",
+    "a3754074df08f9c9407c73e680eac1868175cee3beac3f0e7d2bd211bdf51f58",
+    "f9eb5fd82f3360e22ad45d4797f3a95b907a766ef5a61d856bf959b60a4930dc",
+    "1c53d3145cb38501a2422bf70f55a0c206b68c14e46da31e0e3dc63c7bee78d6",
+    "20bc5f2dedbf6423a543ba25183fab3c7268cdd2762e080f6d0b3387c4b3cad8",
+    "654faf29e2a177dba2409db4942007630674b86d3ff87d2b11d428e8b4d0db7f",
+    "c27979d019266887a1b86225d3c85b2d4553e85814ab2d791547ffc3f9dc664a",
+    "74f982351453468e39aff8373cb2649d57344b8002b85fc9c0df118d051817fc",
+    "891e59d7896f29a9af2bd1a9aec98ae2ebcc57d9685027e3f07067734e603923",
+    "4a8a234bbad11dc98aa27871ed69d351385f9476af0c15b8b426cfa5630cc3db",
+    "e42c967f02a434a061152d86d68fa0a3da70235f6f8262a792abeeace14fc419",
+    "c1560c78197abd62252f8932abf73d5f7506fcd157e98390230aec81fdf5e5ac",
+    "afa2cc8fe8b9b8785921f2e649d90d239f729223b2ce7460c0f22d79427c7b5e",
+    "d574f129616c989797b3a4a7988e9d4ca3afb59ed1de67136d459307b9a1807a",
+    "94b1c1e2fab8c51bb76d9d7bc07d23f8b509919009feb141f12562cab696d49a",
+    "79bf74936c7274d1ee529fb888f30fbf2a33a15308bedb8c77c1c50793790b42",
+    "2ee8962250f82c51fdbbf170c6c7fa9b69dca336434714ba607c6f816034cb08",
+    "6e8e665df73c6934d5b432f5aa898ba33cc9a40d630b049404a23fa5d2776298",
+    "3561d1bd9ae8c916eace5bdd1eb788cd743ad461cff58acf58ed5b2064b30b7b",
+    "46a48aa8aef9f09dabb9cf340dacc1889cf3eeebc49c6d2f26ff017cd087857c",
+    "561e0536b3cf214a4bf41b2bfb2209c8d659990a871e44bef9bc0136613a4ab9",
+    "7c1f3e331c8f59cc6dab7e310d9ad151628f72e5ca3db5a6ff592c8c976c1974",
+    "fb9d9d484edfa2c0a531a3e08074f52b6988f1082606f1eecaf0c58f117dbf3d",
+    "2810e928a4ce6e2ae016751a7e8b73496de47fe1926abe6ff486bc0eed23e3d7",
+    "723c3ede92f08e9ac12b7dc0b9e6a857ab0426d3418524f4eb50ad69f0228ccd",
+    "66a07cdf0c9d56558ad4f853203071b56adfa990a4fb065b49c10108f4996fe7",
+    "dc826253950962dbc2e5699dc5c138490c4233a23b39a5cf471a931cbbc689b8",
+    "ec29a6c60c70a25a5a238ba1d03407dadafee78c01bc9f921549da428c4fbc03",
+    "0564c17382a344aa22b5452989d2950f514bbd366e7b8289a458a4604c987641",
+    "157ca17a0c1fc9faed3c2557cdf83323210a40020e72497e8e48e1d0055e54c7",
+    "e643beaf8a92e574da88b9efa424852d34261be06496ca78d08acd84c38861b7",
+    "df982789a1598f53bbcf44f1b2991c86bfd7713b36b04a06cf52640cfc9c579d",
+    "e135e4dd1aebe24484909d56fb47619eb975f9790ef4541fdc87f63a3478ecf4",
+    "823235bafe4f9e523cc4ffeb16789a2e2d6b246ab5c248335eba364d54474241",
+    "a314bda9257484bbbabc1159b957d3aae1de0bca777bcd1462fdc52abf5a62fe",
+    "65f6699712af969820645bbe271f66fe92f5da41fd834e329dadeae7801bc112",
+    "17e812f25ef6d73de97b3464ca3fd2109433d9b5bc567e4e74feda35bf660492",
+    "37ff30e4c4384b810bd86e4472e9ada4b447cd6057daf8df3f923fac3b8b3d77",
+    "c55f13e79ce2bb698606f787551591e050e33e576cb845a2f40b03edac56f819",
+    "2124d3353d3f105c3780c937f1eaf377f756e59c6ab6a97ef780a718f3a47c7b",
+    "e581535019c839a7c383d0eca3de97a6a5701025d4a24ea56f01932f910cb99c",
+    "eb089f8a27da4b94b79e5d125ed6205849b1909d0a6c1d0f51c351be2d5b8466",
+    "36ee22c148c0282e112950f8e9939fed4b95d2f8a52c9cd2fd3744070df54333",
+    "c81b6509d23e889c5b5ec79fdfaf64fed1bf00ced8f4b224aa37b5a37821ccfe",
+    "b529c4de4a2fff86266d9b0318f15246ed30f4641b4156778ff9f3fca3099e32",
+    "647c2aa42b094baf52537a8f7ffb015b7aa212c67ca779853d263d420760d8b6",
+    "8043ea259b8bbb2bf488643376c2a2b9a3864e5617ea9ac5dc72966e289c07c2",
+    "bba0397ebaf1a6093a8adb117e84198bb5d2dcf9e8e7792221af9215cda8c10b",
+    "978ec66df04567ef8e4f02aa67b903535859f7bf24a5b63298cae1c938a72ab7",
+    "124befb26711b599a311b0b0d7352b6e980a594cd56c8447e32c1aba26818fd1",
+    "990ddff1fd05882796d2081ebc0d966a39c04af7120a9440562d71db2f48d65d",
+    "f396be48a42c9cca6b6fec0a8ee7f5d15f93a57fba3baf04ab5a7d86af68bea5",
+    "4f2487f0af254ea067e853bb6874d80d05c46f6322ca6e3a8815b37931533aea",
+    "dbacdcc317d0cc436dd93c8be4d1471c712bcc567bda8e9a47dc0c1543d33e19",
+    "6658cb8824afdf853e9cf3e667ac9d6bf566d54cc0f3b81ad62f7d7eeadff530",
+    "b2c4ea7f091911a1c3733e42a52c75d3ee1666ceb62faa4e8ddb15c8a4b12b14",
+    "0f29f04bebfe26d9b0ef7b802e3b2c725e85cdc03407915a3d5753436977f24e",
+    "7eadf05c33f72431c7414e60e4068051143154d647452e3888de4c61316950ea",
+    "45237d7cbb04c768d25f2dd13708f448f3c50af5262015d468ccbdb51fe0c090",
+    "21f14816d480bc5c2e5f0a3387a0897d928e926a4341df3d32d65416b6e387f1",
+    "a39bd710b9489e8bef21362c8df87ed76008939e89dbf8e6708a2c574f0727e0",
+    "cf365a79503e1457c23cd1ea8c9fa8c398d168288f90b5c1920af798508c2b56",
+    "d123f90b3a932edf596fd561e74fc8cc0adc481c3be118a7fa6a5834cd7b787c",
+    "cde02309ad295648d86fa4acefdf7224809abb2ab9b025f14ae41e021512c5ed",
+    "39835a1337c2afd9a9690cb9946752899a110df312d9d3aa68e10f85fad49dea",
+]);
+// Free commands that don't require token
+const FREE_COMMANDS = new Set(['ref', 'help', 'exit', 'quit', 'q', 'clear', 'cls', 'activate']);
+function hashToken(token) {
+    return createHash('sha256').update(token.trim().toUpperCase()).digest('hex');
+}
+export function validateToken(token) {
+    return TOKEN_HASHES.has(hashToken(token));
+}
+export function isActivated() {
+    const config = getConfig();
+    return !!(config.accessToken && TOKEN_HASHES.has(hashToken(config.accessToken)));
+}
+export function activateToken(token) {
+    if (validateToken(token)) {
+        saveConfig({ accessToken: token.trim().toUpperCase() });
+        return true;
+    }
+    return false;
+}
+export function isFreeCommand(cmd) {
+    return FREE_COMMANDS.has(cmd.toLowerCase());
+}
+// Session tracking for anti-cheat
+const SESSION_FILE = () => join(getIcoaDir(), 'session-state.json');
+function getDefaultSession() {
+    return {
+        startedAt: new Date().toISOString(),
+        lastExitAt: null,
+        lastResumeAt: null,
+        exitCount: 0,
+        totalAwaySeconds: 0,
+    };
+}
+export function getSession() {
+    const file = SESSION_FILE();
+    if (!existsSync(file))
+        return getDefaultSession();
+    try {
+        return { ...getDefaultSession(), ...JSON.parse(readFileSync(file, 'utf-8')) };
+    }
+    catch {
+        return getDefaultSession();
+    }
+}
+export function saveSession(session) {
+    const current = getSession();
+    const merged = { ...current, ...session };
+    writeFileSync(SESSION_FILE(), JSON.stringify(merged, null, 2));
+}
+export function recordExit() {
+    const session = getSession();
+    session.lastExitAt = new Date().toISOString();
+    session.exitCount++;
+    saveSession(session);
+}
+export function recordResume() {
+    const session = getSession();
+    if (!session.lastExitAt)
+        return null;
+    const exitTime = new Date(session.lastExitAt).getTime();
+    const now = Date.now();
+    const awaySeconds = Math.round((now - exitTime) / 1000);
+    session.lastResumeAt = new Date().toISOString();
+    session.totalAwaySeconds += awaySeconds;
+    saveSession(session);
+    return { awaySeconds, exitCount: session.exitCount };
+}

package/dist/repl.d.ts

@@ -1,2 +1,2 @@
 import { Command } from 'commander';
-export declare function startRepl(program: Command): void;
+export declare function startRepl(program: Command, resumeMode: boolean): void;

package/dist/repl.js

@@ -1,23 +1,40 @@
 import { createInterface } from 'node:readline';
 import chalk from 'chalk';
 import { isConnected, getConfig } from './lib/config.js';
-// Sentinel error used to intercept process.exit() calls from commands
+import { isActivated, activateToken, isFreeCommand, recordExit, recordResume } from './lib/access.js';
 const INTERCEPT = '__REPL_NO_EXIT__';
-export function startRepl(program) {
+export function startRepl(program, resumeMode) {
     const config = getConfig();
     const connected = isConnected();
     const realExit = process.exit.bind(process);
+    const activated = isActivated();
+    // Handle resume
+    if (resumeMode) {
+        const info = recordResume();
+        if (info) {
+            const mins = Math.floor(info.awaySeconds / 60);
+            const secs = info.awaySeconds % 60;
+            console.log(chalk.yellow(`  Session resumed. Away: ${mins}m ${secs}s | Total exits: ${info.exitCount}`));
+        }
+        else {
+            console.log(chalk.gray('  No previous session to resume.'));
+        }
+        console.log();
+    }
     if (connected) {
         console.log(chalk.gray('  Connected to: ') + chalk.white(config.ctfdUrl));
         console.log(chalk.gray('  User: ') + chalk.white(config.userName));
     }
+    else if (activated) {
+        console.log(chalk.green('  Access granted. ') + chalk.gray('Type: ') + chalk.white('join <url>') + chalk.gray(' to connect.'));
+    }
     else {
-        console.log(chalk.gray('  Not connected. Type: ') + chalk.white('join <url>'));
+        console.log(chalk.yellow('  Restricted mode. ') + chalk.gray('Type: ') + chalk.white('activate <token>') + chalk.gray(' to unlock.'));
+        console.log(chalk.gray('  Available: ') + chalk.white('ref [topic]') + chalk.gray(', ') + chalk.white('help') + chalk.gray(', ') + chalk.white('exit'));
     }
     console.log();
     console.log(chalk.gray('  Type ') + chalk.white('help') + chalk.gray(' for commands, ') + chalk.white('exit') + chalk.gray(' to quit.'));
     console.log();
-    // Configure Commander to throw instead of calling process.exit
     program.exitOverride();
     program.configureOutput({
         writeErr: () => { },
@@ -39,25 +56,57 @@ export function startRepl(program) {
             rl.prompt();
             return;
         }
-        // Built-in REPL commands — handled with real process.exit
+        // Exit — record and quit
         if (input === 'exit' || input === 'quit' || input === 'q') {
-            console.log(chalk.gray('  Goodbye!'));
+            recordExit();
+            console.log(chalk.gray('  Session saved. Use ') + chalk.white('icoa --resume') + chalk.gray(' to continue.'));
             realExit(0);
             return;
         }
+        // Help
         if (input === 'help' || input === '?') {
-            printReplHelp();
+            printReplHelp(isActivated());
             rl.prompt();
             return;
         }
+        // Clear
         if (input === 'clear' || input === 'cls') {
             console.clear();
             rl.prompt();
             return;
         }
+        // Activate token
+        if (input.startsWith('activate ')) {
+            const token = input.slice(9).trim();
+            if (activateToken(token)) {
+                console.log(chalk.green('  Access granted! All commands unlocked.'));
+            }
+            else {
+                console.log(chalk.red('  Invalid token.'));
+            }
+            console.log();
+            rl.prompt();
+            return;
+        }
+        if (input === 'activate') {
+            console.log(chalk.gray('  Usage: ') + chalk.white('activate <token>'));
+            console.log();
+            rl.prompt();
+            return;
+        }
+        // Token check — only ref allowed without activation
+        const cmd = input.split(/\s+/)[0].toLowerCase();
+        if (!isActivated() && !isFreeCommand(cmd)) {
+            console.log(chalk.yellow('  Restricted mode. ') + chalk.gray('Enter your access token:'));
+            console.log(chalk.white('    activate <token>'));
+            console.log();
+            console.log(chalk.gray('  Free commands: ') + chalk.white('ref [topic]') + chalk.gray(', ') + chalk.white('help') + chalk.gray(', ') + chalk.white('exit'));
+            console.log();
+            rl.prompt();
+            return;
+        }
         processing = true;
         const args = mapCommand(input);
-        // Override process.exit so commands don't kill the REPL
         process.exit = (() => {
             throw new Error(INTERCEPT);
         });
@@ -67,17 +116,16 @@ export function startRepl(program) {
         catch (err) {
             const msg = err instanceof Error ? err.message : String(err);
             if (msg === INTERCEPT) {
-                // Command tried to exit — that's fine
+                // Command tried to exit — continue REPL
             }
             else if (msg.includes('commander.unknownCommand')) {
-                console.log(chalk.yellow(`  Unknown command: ${input.split(' ')[0]}. Type 'help' for commands.`));
+                console.log(chalk.yellow(`  Unknown command: ${cmd}. Type 'help' for commands.`));
             }
             else if (msg.includes('commander.')) {
                 // Internal Commander errors — ignore
             }
         }
         finally {
-            // Always restore real process.exit
             process.exit = realExit;
             processing = false;
         }
@@ -85,6 +133,7 @@ export function startRepl(program) {
         rl.prompt();
     });
     rl.on('close', () => {
+        recordExit();
         realExit(0);
     });
 }
@@ -119,8 +168,17 @@ function mapCommand(input) {
     }
     return parts;
 }
-function printReplHelp() {
+function printReplHelp(activated) {
     console.log();
+    if (!activated) {
+        console.log(chalk.bold.yellow('  Restricted Mode — activate with a token to unlock all commands'));
+        console.log();
+        console.log(chalk.white('    activate <token>    ') + chalk.gray('Unlock full access'));
+        console.log(chalk.white('    ref [topic]         ') + chalk.gray('Quick reference'));
+        console.log(chalk.white('    exit                ') + chalk.gray('Quit'));
+        console.log();
+        return;
+    }
     console.log(chalk.bold.white('  Competition'));
     console.log(chalk.white('    join <url>          ') + chalk.gray('Connect to CTFd'));
     console.log(chalk.white('    challenges (ch)     ') + chalk.gray('List challenges'));
@@ -148,6 +206,6 @@ function printReplHelp() {
     console.log(chalk.white('    setup               ') + chalk.gray('Configure settings'));
     console.log(chalk.white('    lang [code]         ') + chalk.gray('Switch language'));
     console.log(chalk.white('    clear               ') + chalk.gray('Clear screen'));
-    console.log(chalk.white('    exit                ') + chalk.gray('Quit ICOA CLI'));
+    console.log(chalk.white('    exit                ') + chalk.gray('Quit (session saved)'));
     console.log();
 }

package/dist/types/index.d.ts

@@ -98,6 +98,7 @@ export interface IcoaConfig {
     competitionEndsAt: string;
     geminiApiKey: string;
     geminiModel: string;
+    accessToken: string;
 }
 export type CompetitionState = 'pre_competition' | 'demo' | 'live' | 'finished' | 'unknown';
 export type HintLevel = 'A' | 'B' | 'C';

package/dist/types/index.js

@@ -26,5 +26,6 @@ export const DEFAULT_CONFIG = {
     competitionEndsAt: '',
     geminiApiKey: '',
     geminiModel: 'gemini-2.5-flash',
+    accessToken: '',
 };
 export const SUPPORTED_LANGUAGES = ['en', 'zh', 'ja', 'ko', 'es'];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {