icoa-cli 2.19.201 → 2.19.203
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commands/ai4ctf.js +1 -1
- package/dist/commands/ctf4ai-demo.js +1 -1
- package/dist/commands/ctf4vla.js +1 -1
- package/dist/commands/exam.js +1 -1
- package/dist/lib/ai4ctf-curriculum-360.d.ts +12 -0
- package/dist/lib/ai4ctf-curriculum-360.js +1 -0
- package/dist/lib/ai4ctf-curriculum-96.d.ts +19 -0
- package/dist/lib/ai4ctf-curriculum-96.js +1 -0
- package/dist/lib/ai4ctf-phases.d.ts +24 -0
- package/dist/lib/ai4ctf-phases.js +1 -0
- package/dist/lib/ctf4ai-curriculum-360.d.ts +18 -0
- package/dist/lib/ctf4ai-curriculum-360.js +1 -0
- package/dist/lib/ctf4ai-curriculum-96.d.ts +14 -0
- package/dist/lib/ctf4ai-curriculum-96.js +1 -0
- package/dist/lib/ctf4ai-phases.d.ts +24 -0
- package/dist/lib/ctf4ai-phases.js +1 -0
- package/dist/lib/ctf4eai-curriculum-96.d.ts +14 -0
- package/dist/lib/ctf4eai-curriculum-96.js +1 -0
- package/dist/lib/hint-client.js +1 -1
- package/dist/lib/learn-curricula.js +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* ctf4ai-360 — Red-Team Software AI, research-grade curriculum.
|
|
3
|
+
*
|
|
4
|
+
* Source: ctf4ai-phases.ts (auto-generated by panda/generate-track-cards.js).
|
|
5
|
+
* 8 phases × 45 cards = 360 total. Knowledge-only tier.
|
|
6
|
+
*
|
|
7
|
+
* Phase 4-8 are the differentiator vs commercial AI security curricula:
|
|
8
|
+
* · Phase 2: Classical adversarial attacks (FGSM/PGD/CW/extraction/poisoning)
|
|
9
|
+
* · Phase 4: Infrastructure exposure (orchestration platform leaks)
|
|
10
|
+
* · Phase 5: Supply chain (malicious MCP/plugin/skill)
|
|
11
|
+
* · Phase 6: Persistence + multi-agent (RAG/Memory poisoning, A2A)
|
|
12
|
+
* · Phase 7: Sandbox + privilege escape
|
|
13
|
+
* · Phase 8: Forensics + responsible disclosure
|
|
14
|
+
*
|
|
15
|
+
* Each card carries bilingual EN/ZH + y/n comprehension check.
|
|
16
|
+
*/
|
|
17
|
+
import type { Curriculum } from './learn-curricula.js';
|
|
18
|
+
export declare const CURRICULUM_CTF4AI_360: Curriculum;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
import{CTF4AI_ALL_PHASES as e,CTF4AI_PHASE_NAMES as r}from"./ctf4ai-phases.js";const n=function(){const r=[];let n=1;for(let t=0;t<8;t++){const o=(e[t]??[]).slice(0,45);for(const e of o)r.push({...e,number:n,module:t+1}),n++}return r}();export const CURRICULUM_CTF4AI_360={id:"ctf4ai-360",name:"CTF4AI — Red-Team Software AI (Research-grade, n=360)",description:"Knowledge-only research-grade curriculum (~75 hours). Eight phases × 45 cards covering classical adversarial ML, prompt injection, infrastructure exposure, supply chain, persistence/multi-agent, sandbox escape, and forensics. Bilingual EN/ZH with y/n comprehension checks throughout.",totalCards:n.length,modules:function(){const e=[];for(let t=0;t<8;t++){const o=n.filter(e=>e.module===t+1);0!==o.length&&e.push({number:t+1,name:r[t],cardRange:[o[0].number,o[o.length-1].number]})}return e}(),cards:n};if(360!==n.length)throw new Error(`ctf4ai-360: expected 360 cards, got ${n.length}`);
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* ctf4ai-96 — competition-focused curated subset of ctf4ai-360.
|
|
3
|
+
*
|
|
4
|
+
* Same heuristic as ai4ctf-96: take the first 12 cards of each phase from
|
|
5
|
+
* the 360 mainline, where outline ordering already prioritized hook +
|
|
6
|
+
* core concepts.
|
|
7
|
+
*
|
|
8
|
+
* IMPORTANT for ctf4ai-96: the contestant MUST recognize the 5 new
|
|
9
|
+
* attack categories during the exam (Phase 4-7 of the 360). Cards 1-12
|
|
10
|
+
* of each of those phases cover the foundational landscape — sufficient
|
|
11
|
+
* for exam-level recognition. Deeper coverage stays in the 360.
|
|
12
|
+
*/
|
|
13
|
+
import type { Curriculum } from './learn-curricula.js';
|
|
14
|
+
export declare const CURRICULUM_CTF4AI_96: Curriculum;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
import{CTF4AI_ALL_PHASES as t,CTF4AI_PHASE_NAMES as e}from"./ctf4ai-phases.js";const n=function(){const e=[];let n=1;for(let o=0;o<8;o++){const r=(t[o]??[]).slice(0,12);for(const t of r)e.push({...t,number:n,module:o+1}),n++}return e}();export const CURRICULUM_CTF4AI_96={id:"ctf4ai-96",name:"CTF4AI — Specialist (n=96, competition-focused)",description:"Curated 24-hour subset of ctf4ai-360. Eight phases × 12 cards covering attacker mindset, classical adversarial ML foundations, prompt injection, and the 5 frontier categories at recognition depth. Bilingual EN/ZH with y/n comprehension checks.",totalCards:n.length,modules:function(){const t=[];for(let o=0;o<8;o++){const r=n.filter(t=>t.module===o+1);0!==r.length&&t.push({number:o+1,name:e[o],cardRange:[r[0].number,r[r.length-1].number]})}return t}(),cards:n};if(96!==n.length)throw new Error(`ctf4ai-96: expected 96 cards, got ${n.length}`);
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* AUTO-GENERATED card content for ctf4ai-360.
|
|
3
|
+
* Source: panda/generate-track-cards.js + panda/retry-fallback-cards.js
|
|
4
|
+
* (Gemini 3.5-flash + lite fallback).
|
|
5
|
+
* DO NOT HAND-EDIT — regenerate by running the scripts.
|
|
6
|
+
*
|
|
7
|
+
* Last updated: 2026-05-24T17:26:19.301Z
|
|
8
|
+
* Cards covered: 360
|
|
9
|
+
*
|
|
10
|
+
* Embargo: ICOA-VLA codename only.
|
|
11
|
+
*/
|
|
12
|
+
import type { CardKnowledge } from './learn-curricula.js';
|
|
13
|
+
type CardSource = Omit<CardKnowledge, 'number'>;
|
|
14
|
+
export declare const CTF4AI_PHASE_1: CardSource[];
|
|
15
|
+
export declare const CTF4AI_PHASE_2: CardSource[];
|
|
16
|
+
export declare const CTF4AI_PHASE_3: CardSource[];
|
|
17
|
+
export declare const CTF4AI_PHASE_4: CardSource[];
|
|
18
|
+
export declare const CTF4AI_PHASE_5: CardSource[];
|
|
19
|
+
export declare const CTF4AI_PHASE_6: CardSource[];
|
|
20
|
+
export declare const CTF4AI_PHASE_7: CardSource[];
|
|
21
|
+
export declare const CTF4AI_PHASE_8: CardSource[];
|
|
22
|
+
export declare const CTF4AI_ALL_PHASES: CardSource[][];
|
|
23
|
+
export declare const CTF4AI_PHASE_NAMES: string[];
|
|
24
|
+
export {};
|