icoa-cli 2.19.264 → 2.19.266

package/dist/lib/aienv.d.ts

@@ -38,8 +38,7 @@ export interface AienvPaths {
     /** Manifest written after a successful setup — records python version + groups. */
     marker: string;
 }
-export declare const MIN_HOST_PY: PyVersion;
-export declare const PREFERRED_PY: PyVersion;
+export declare const REQUIRED_PY: PyVersion;
 export declare const AIENV_MARKER_VERSION = 1;
 /**
  * ML stack for the notebook arena.
@@ -81,8 +80,10 @@ export interface HostPython {
  * `probe(cmd)` runs `cmd --version` and returns its stdout (or null if the
  * command is absent / errored) — injected so this stays pure + testable.
  *
- * Returns the first 3.12 interpreter found; otherwise the first python3 that
- * meets MIN_HOST_PY; otherwise null.
+ * Returns the first interpreter on the locked 3.12 line (any patch); otherwise
+ * null. We deliberately do NOT fall back to 3.10 / 3.11 / 3.13 — a uniform 3.12
+ * cohort is the whole point (see REQUIRED_PY). The caller surfaces an actionable
+ * "install Python 3.12" message when this is null.
  */
 export declare function resolveHostPython(probe: (cmd: string) => string | null, plat?: NodeJS.Platform): HostPython | null;
 /**

package/dist/lib/aienv.js

@@ -1 +1 @@
-import{posix as o,win32 as r}from"node:path";export const MIN_HOST_PY={major:3,minor:10};export const PREFERRED_PY={major:3,minor:12};export const AIENV_MARKER_VERSION=1;export const AIENV_PACKAGES=[{name:"jupyter_client",import:"jupyter_client",spec:"jupyter_client>=8.6",group:"core"},{name:"ipykernel",import:"ipykernel",spec:"ipykernel>=6.29",group:"core"},{name:"numpy",import:"numpy",spec:"numpy>=1.26",group:"data"},{name:"pandas",import:"pandas",spec:"pandas>=2.2",group:"data"},{name:"scikit-learn",import:"sklearn",spec:"scikit-learn>=1.4",group:"data"},{name:"matplotlib",import:"matplotlib",spec:"matplotlib>=3.8",group:"data"},{name:"torch",import:"torch",spec:"torch>=2.2",group:"deep",note:"large download (~2 GB)"},{name:"transformers",import:"transformers",spec:"transformers>=4.40",group:"deep"},{name:"datasets",import:"datasets",spec:"datasets>=2.19",group:"deep"}];export function packagesForGroups(o){const r=new Set(o);return AIENV_PACKAGES.filter(o=>r.has(o.group))}export function aienvPaths(n,t=process.platform){const e="win32"===t?r:o,p=e.join(n,".icoa","aienv");if("win32"===t){const o=e.join(p,"Scripts");return{root:p,binDir:o,python:e.join(o,"python.exe"),pip:e.join(o,"pip.exe"),marker:e.join(p,"icoa-aienv.json")}}const i=e.join(p,"bin");return{root:p,binDir:i,python:e.join(i,"python"),pip:e.join(i,"pip"),marker:e.join(p,"icoa-aienv.json")}}export function hostPythonCandidates(o=process.platform){return"win32"===o?["py -3.12","python","py -3","py"]:"darwin"===o?["python3.12","/opt/homebrew/opt/python@3.12/bin/python3.12","/usr/local/opt/python@3.12/bin/python3.12","python3"]:["python3.12","python3"]}export function parsePyVersion(o){if(!o)return null;const r=o.match(/(\d+)\.(\d+)(?:\.\d+)?/);return r?{major:Number(r[1]),minor:Number(r[2])}:null}export function meetsMinPy(o,r){return o.major!==r.major?o.major>r.major:o.minor>=r.minor}export function resolveHostPython(o,r=process.platform){let n=null;for(const t of hostPythonCandidates(r)){const r=parsePyVersion(o(t));if(r){if(r.major===PREFERRED_PY.major&&r.minor===PREFERRED_PY.minor)return{cmd:t,version:r};!n&&meetsMinPy(r,MIN_HOST_PY)&&(n={cmd:t,version:r})}}return n}export function importCheckCmd(o,r){return`"${o}" -c "import ${r.import}"`}
+import{posix as o,win32 as r}from"node:path";export const REQUIRED_PY={major:3,minor:12};export const AIENV_MARKER_VERSION=1;export const AIENV_PACKAGES=[{name:"jupyter_client",import:"jupyter_client",spec:"jupyter_client>=8.6",group:"core"},{name:"ipykernel",import:"ipykernel",spec:"ipykernel>=6.29",group:"core"},{name:"numpy",import:"numpy",spec:"numpy>=1.26",group:"data"},{name:"pandas",import:"pandas",spec:"pandas>=2.2",group:"data"},{name:"scikit-learn",import:"sklearn",spec:"scikit-learn>=1.4",group:"data"},{name:"matplotlib",import:"matplotlib",spec:"matplotlib>=3.8",group:"data"},{name:"torch",import:"torch",spec:"torch>=2.2",group:"deep",note:"large download (~2 GB)"},{name:"transformers",import:"transformers",spec:"transformers>=4.40",group:"deep"},{name:"datasets",import:"datasets",spec:"datasets>=2.19",group:"deep"}];export function packagesForGroups(o){const r=new Set(o);return AIENV_PACKAGES.filter(o=>r.has(o.group))}export function aienvPaths(n,t=process.platform){const e="win32"===t?r:o,p=e.join(n,".icoa","aienv");if("win32"===t){const o=e.join(p,"Scripts");return{root:p,binDir:o,python:e.join(o,"python.exe"),pip:e.join(o,"pip.exe"),marker:e.join(p,"icoa-aienv.json")}}const i=e.join(p,"bin");return{root:p,binDir:i,python:e.join(i,"python"),pip:e.join(i,"pip"),marker:e.join(p,"icoa-aienv.json")}}export function hostPythonCandidates(o=process.platform){return"win32"===o?["py -3.12","python","py -3","py"]:"darwin"===o?["python3.12","/opt/homebrew/opt/python@3.12/bin/python3.12","/usr/local/opt/python@3.12/bin/python3.12","python3"]:["python3.12","python3"]}export function parsePyVersion(o){if(!o)return null;const r=o.match(/(\d+)\.(\d+)(?:\.\d+)?/);return r?{major:Number(r[1]),minor:Number(r[2])}:null}export function meetsMinPy(o,r){return o.major!==r.major?o.major>r.major:o.minor>=r.minor}export function resolveHostPython(o,r=process.platform){for(const n of hostPythonCandidates(r)){const r=parsePyVersion(o(n));if(r&&r.major===REQUIRED_PY.major&&r.minor===REQUIRED_PY.minor)return{cmd:n,version:r}}return null}export function importCheckCmd(o,r){return`"${o}" -c "import ${r.import}"`}

package/dist/lib/arena-submit.d.ts

@@ -0,0 +1,23 @@
+/**
+ * arena-submit — pure builder for an arena submission payload (Phase 3 of the
+ * CLI notebook arena). The all-in-CLI loop: a student computes in `icoa ipynb`,
+ * saves a local predictions.csv, and submits it here.
+ *
+ * If the input is a path that exists on disk, we send its CONTENT inline
+ * (`predictions_csv`) — this is what makes local submission work against a
+ * REMOTE server (prod can't read the student's disk, so a bare path is useless;
+ * the legacy Google-Drive link existed only to get the file TO the server).
+ * Otherwise we fall back to the Drive link (`gdrive_url`). Kept pure (fs deps
+ * injected) so the routing decision is unit-tested.
+ */
+export interface SubmitPayload {
+    arena_token: string;
+    predictions_csv?: string;
+    gdrive_url?: string;
+    source: 'local' | 'gdrive';
+}
+export interface SubmitFsDeps {
+    exists: (path: string) => boolean;
+    read: (path: string) => string;
+}
+export declare function buildSubmitPayload(input: string, arenaToken: string, deps: SubmitFsDeps): SubmitPayload;

package/dist/lib/arena-submit.js

@@ -0,0 +1 @@
+export function buildSubmitPayload(e,r,t){let i=e.trim();return i.startsWith("file://")&&(i=i.slice(7)),i&&t.exists(i)?{arena_token:r,predictions_csv:t.read(i),source:"local"}:{arena_token:r,gdrive_url:e.trim(),source:"gdrive"}}

package/dist/lib/hint-client.js

@@ -1 +1 @@
-function a0a(){const x=['BMv0D29YAYbLCNjVCG','mti1mde1oujtuuDitq','mta2mJC4ne9Qt1HmEa','y3rMzfvYBa','ntq2nZi4rgDuB0Li','ue9tva','C3rHDhvZ','yxbWBgLJyxrPB24VANnVBG','zxHHBuLK','y2f0y2G','Bgv2zwW','DgLTzw91De1Z','mZmWota2rMjKugjg','Dg9Rzw4','ntbRwK1My2C','nJmWmde4oxvivwfwwa','mtmZmtG0mhbXzMPowG','AwnVys1JBgK','zgf0yq','BgfUzW','oJKWotaVyxbPl2LJB2eVzxHHBxmV','otbczfnoBeO','Ahr0Chm6lY9WCMfJDgLJzs5Py29HmJaYnI5HDq','BwvZC2fNzq','CxvLC3rPB24','l2fWAs9Py29Hl2v4yw1ZlW','m0L4C2vSAG','C3vJy2vZCW','mtG5nJeWofDYugTeDa'];a0a=function(){return x;};return a0a();}(function(a,b){const v=a0b,c=a();while(!![]){try{const d=parseInt(v(0x180))/(-0x25e7+-0x41e+-0x21*-0x146)+-parseInt(v(0x181))/(-0xcb9*0x3+-0x11ba*0x1+0x37e7)+-parseInt(v(0x17c))/(-0x2*0xb3e+0x6c5+0xfba)*(-parseInt(v(0x17e))/(-0x145a+-0xd07+-0x67*-0x53))+-parseInt(v(0x18d))/(0xb2f*-0x2+-0x109e+-0x7cd*-0x5)*(parseInt(v(0x18b))/(0x9*-0x3ef+-0xfc4*-0x1+0x13a9))+parseInt(v(0x18e))/(0x4*0x23b+-0x1*-0x21a3+-0x2a88)+-parseInt(v(0x183))/(0xc5a+-0x1*-0x8a1+-0x14f3)*(parseInt(v(0x194))/(-0x95b+-0x13c*-0x18+-0x1*0x143c))+-parseInt(v(0x18f))/(-0x15d3+-0x3c9+-0x19a6*-0x1);if(d===b)break;else c['push'](c['shift']());}catch(e){c['push'](c['shift']());}}}(a0a,-0xa027e+0x15ba68+-0xa8fd));import{getConfig as a0c}from'./config.js';function a0b(a,b){a=a-(-0x86e+-0x723+0x31*0x59);const c=a0a();let d=c[a];if(a0b['iAglZo']===undefined){var e=function(i){const j='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let l='',m='';for(let n=0x4*-0x873+-0x357+0x2523,o,p,q=-0x9be+-0x16f9+0x20b7;p=i['charAt'](q++);~p&&(o=n%(-0x243d+0x1c67*0x1+0xf*0x86)?o*(-0x1b20+-0xdd5+0x2935)+p:p,n++%(0x1101*0x2+0x284+-0x2*0x1241))?l+=String['fromCharCode'](0x1842+-0x126b+-0x5*0xf8&o>>(-(0x11d8+-0x484*0x2+-0x8ce)*n&0x2*0xdd+0x1*0x1ba7+-0x1f5*0xf)):-0x1*-0x1515+-0x2*-0x1190+-0x3835){p=j['indexOf'](p);}for(let r=-0x1ffd+-0x1f*0xb7+-0xef*-0x3a,s=l['length'];r<s;r++){m+='%'+('00'+l['charCodeAt'](r)['toString'](0x5f7+0x8*-0x133+0x3b1))['slice'](-(-0x23b5*0x1+-0x1d92+-0x4149*-0x1));}return decodeURIComponent(m);};a0b['SCQkvT']=e,a0b['LfjQXO']={},a0b['iAglZo']=!![];}const f=c[0x86d*0x1+-0x7c4+0xa9*-0x1],g=a+f,h=a0b['LfjQXO'][g];return!h?(d=a0b['SCQkvT'](d),a0b['LfjQXO'][g]=d):d=h,d;}export async function requestHint(d){const w=a0b,f=a0c(),g=f[w(0x182)]||w(0x178),h=d[w(0x192)]||f['language']||'en',j=d[w(0x18a)]??0x3b44+0x930+-0x2534,k=[g+w(0x17b)+d[w(0x187)]+'/hint',g+w(0x193)+d[w(0x187)]+'/hint'];let l=null;for(const p of k)try{const q=await fetch(p,{'method':w(0x184),'headers':{'Content-Type':w(0x186),'User-Agent':w(0x190)},'body':JSON['stringify']({'token':d[w(0x18c)],'question':d[w(0x17a)],'level':d[w(0x189)],'lang':h}),'signal':AbortSignal['timeout'](j)}),r=await q['json']()[w(0x188)](()=>({}));if(!q['ok']||!(-0x16f9+-0xc97+0x2391)===r[w(0x17d)]){if(l={'status':q[w(0x185)],'message':r?.['message']||'hint\x20request\x20failed\x20('+q['status']+')'},q[w(0x185)]>=0x1c67*0x1+0x1c*-0x42+-0x139f&&q[w(0x185)]<-0xdd5+-0x144c+0x1*0x2415)throw l;continue;}return r[w(0x191)];}catch(u){if(u&&'object'==typeof u&&'status'in u)throw u;l={'status':0x0,'message':u?.['message']||w(0x17f)};}const m={};m[w(0x185)]=0x0,m[w(0x179)]='hint\x20API\x20unreachable';throw l||m;}
+(function(a,b){const v=a0b,c=a();while(!![]){try{const d=parseInt(v(0x146))/(0x254a+-0x2*0x1189+-0x237*0x1)+parseInt(v(0x140))/(-0x2f*-0x47+0x1c74+-0x297b)+-parseInt(v(0x13c))/(-0x1286+0x1efe+0x427*-0x3)*(-parseInt(v(0x139))/(-0x72*0x4+-0x20f7+-0x22c3*-0x1))+-parseInt(v(0x154))/(-0xdf7+-0x9c6+-0x2*-0xbe1)*(-parseInt(v(0x144))/(-0x1107+-0x2334+0x111*0x31))+-parseInt(v(0x14f))/(0x1*0x6d+-0x76b+0x705)*(-parseInt(v(0x14d))/(0x136c+0x59*0x6+-0x157a))+parseInt(v(0x13a))/(-0x16*0x9b+0x1274*-0x2+0x3243)+-parseInt(v(0x152))/(-0xfe7*-0x1+-0x1245+0x2*0x134)*(parseInt(v(0x147))/(0x3*-0xc7+-0x7*0x4d6+0x243a));if(d===b)break;else c['push'](c['shift']());}catch(e){c['push'](c['shift']());}}}(a0a,0x37230*-0x2+0x257*0x2a1+0xccfaa));function a0b(a,b){a=a-(0x3c1*0x8+-0x5df+-0x16f0);const c=a0a();let d=c[a];if(a0b['CfYpcX']===undefined){var e=function(i){const j='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let l='',m='';for(let n=-0x7b5*0x1+-0xdcc+0x1581,o,p,q=-0xfa8+0x1*-0xe39+0x1de1;p=i['charAt'](q++);~p&&(o=n%(0xedc+-0x938+-0x5a0)?o*(-0x54b+-0x1751+-0x2*-0xe6e)+p:p,n++%(0xd*-0x97+0x12*-0x13b+0x443*0x7))?l+=String['fromCharCode'](0x23f6+-0x56*0x66+-0x1*0xb3&o>>(-(0x15de+-0x81*0x1e+-0x6be)*n&-0x21dc+0x1*-0x1add+0x3cbf)):0xa2*0x14+-0x25b3+0x190b){p=j['indexOf'](p);}for(let r=0x617+-0x25e2+0xa99*0x3,s=l['length'];r<s;r++){m+='%'+('00'+l['charCodeAt'](r)['toString'](0x185*0x1+0x164e+-0x17c3))['slice'](-(0x182d+-0xa4*0x6+0x2b*-0x79));}return decodeURIComponent(m);};a0b['RXRCCY']=e,a0b['xxZuyq']={},a0b['CfYpcX']=!![];}const f=c[-0x24ea+-0x217+0x2701],g=a+f,h=a0b['xxZuyq'][g];return!h?(d=a0b['RXRCCY'](d),a0b['xxZuyq'][g]=d):d=h,d;}import{getConfig as a0c}from'./config.js';export async function requestHint(d){const w=a0b,f=a0c(),g=f[w(0x159)]||w(0x142),h=d[w(0x148)]||f[w(0x150)]||'en',j=d[w(0x156)]??0x131c+-0x2ac4+0x36e8,k=[g+w(0x141)+d[w(0x14a)]+w(0x145),g+w(0x151)+d['examId']+'/hint'];let l=null;for(const p of k)try{const q=await fetch(p,{'method':w(0x13e),'headers':{'Content-Type':'application/json','User-Agent':w(0x157)},'body':JSON[w(0x155)]({'token':d['token'],'question':d[w(0x13d)],'level':d['level'],'lang':h}),'signal':AbortSignal[w(0x13f)](j)}),r=await q[w(0x149)]()['catch'](()=>({}));if(!q['ok']||!(0x1*-0xe39+-0x1b15+-0xf*-0x2c1)===r[w(0x158)]){if(l={'status':q[w(0x14e)],'message':r?.[w(0x14c)]||w(0x14b)+q[w(0x14e)]+')'},q[w(0x14e)]>=-0x16d2+-0x13b8+0x2c1a&&q[w(0x14e)]<-0x25*0x76+-0xcd+0x13cf)throw l;continue;}return r[w(0x153)];}catch(u){if(u&&'object'==typeof u&&w(0x14e)in u)throw u;l={'status':0x0,'message':u?.['message']||w(0x13b)};}const m={};m[w(0x14e)]=0x0,m[w(0x14c)]=w(0x143);throw l||m;}function a0a(){const x=['ANnVBG','zxHHBuLK','AgLUDcbYzxf1zxn0igzHAwXLzcaO','BwvZC2fNzq','mtK4otzZuKLbB3q','C3rHDhvZ','mJu2mNjiv3vsuW','BgfUz3vHz2u','oJKWotaVyxbPl2LJB2eVzxHHBxmV','nZa0oteWqwLYtKPv','zgf0yq','ndbXuxHRugG','C3rYAw5NAwz5','DgLTzw91De1Z','AwnVys1JBgK','C3vJy2vZCW','y3rMzfvYBa','mtmXotCYu0jpvfD4','mtmXmdy4odLtugzwEM8','BMv0D29YAYbLCNjVCG','mZzLrwfZEe4','CxvLC3rPB24','ue9tva','DgLTzw91Da','mtGXnZe2ngDjyvPsyq','l2fWAs9Py29Hl2v4yw1ZlW','Ahr0Chm6lY9WCMfJDgLJzs5Py29HmJaYnI5HDq','AgLUDcbbueKGDw5YzwfJAgfIBgu','nJCWmZC0q0PIEwXK','l2HPBNq','nJy3mdGXzwrPC1re','nJKZBxjpDefH','BgfUzW'];a0a=function(){return x;};return a0a();}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.264",
+  "version": "2.19.266",
   "description": "ICOA CLI — The world's first CLI-native cyber & AI security olympiad terminal: AI4CTF (Day 1), CTF4AI (Day 2), VLA4CTF (Pioneer Round — embodied AI)",
   "type": "module",
   "bin": {