icoa-cli 2.19.29 → 2.19.31

package/dist/commands/ai4ctf.js

@@ -31,9 +31,70 @@ function drawTokenBar() {
     console.log(chalk.gray('  Tokens: ') + color('█'.repeat(filled)) + chalk.gray('░'.repeat(empty)) + chalk.gray(` ${used}/${cap} (${pct}%)`));
 }
 const DEMO_FLAG = 'icoa{w3lc0me_2_ai4ctf}';
+// Scripted hints for the built-in Base64 demo challenge. The hint philosophy:
+// - a: nudge you toward the fingerprint (padding, charset).
+// - b: tell you the encoding name, nothing more. No shell command.
+// - c: for simple challenges, c deliberately adds no new info — hint b was
+//      already enough. Instead c explains the hint principle and reminds the
+//      user how to run a shell command inside ai4ctf (the `!` prefix).
+// This mirrors real competition behavior where trivial challenges cap at hint b.
+const DEMO_HINTS = {
+    a: [
+        'The string ends with "==" and uses only letters, digits, "+", "/", and "=".',
+        'That pattern is a fingerprint — you have seen it before.',
+        'Where is "=" typically used as padding?',
+    ],
+    b: [
+        'This is Base64 encoded. Decode the string to find the flag.',
+    ],
+    c: [
+        'Hints never give you the answer directly — they only point you in the right direction.',
+        'For simple challenges like this one, hint c adds nothing extra:',
+        'hint b already tells you everything you need.',
+        '',
+        'If you do not remember how to decode Base64, ask your AI teammate —',
+        'just type a question like: how do I decode Base64 on the command line?',
+        '',
+        'To run a shell command inside ai4ctf, prefix it with "!". For example:',
+        '',
+        '    !echo aWNvYXt3M2xjMG1lXzJfYWk0Y3RmfQ== | base64 -d',
+    ],
+};
+function showDemoHint(tier) {
+    const title = tier === 'a' ? t('ai4ctfHintA') : tier === 'b' ? t('ai4ctfHintB') : t('ai4ctfHintC');
+    const tierLabel = `Hint ${tier.toUpperCase()}`;
+    const color = tier === 'a' ? chalk.green : tier === 'b' ? chalk.yellow : chalk.red;
+    console.log();
+    console.log(color.bold(`  ▸ ${tierLabel}  `) + chalk.gray(title));
+    console.log();
+    for (const line of DEMO_HINTS[tier]) {
+        if (line === '')
+            console.log();
+        else
+            console.log(chalk.white('    ' + line));
+    }
+    console.log();
+    if (tier === 'a') {
+        console.log(chalk.gray('    Stuck? Try: ') + chalk.cyan('hint b'));
+        console.log();
+    }
+    else if (tier === 'b') {
+        console.log(chalk.gray('    Really stuck? Try: ') + chalk.cyan('hint c'));
+        console.log();
+    }
+    // No trailing CTA after hint c — the content itself explains everything.
+}
 export async function handleChatMessage(input) {
     if (!chatSession)
         return 'exit';
+    // Scripted demo hints — intercept before the AI chat so that typing
+    // `hint a` / `hint b` / `hint c` behaves like a real competition command
+    // instead of becoming a generic AI chat turn.
+    const hintMatch = input.trim().toLowerCase().match(/^hint\s+([abc])$/);
+    if (hintMatch) {
+        showDemoHint(hintMatch[1]);
+        return 'continue';
+    }
     // Flag submission
     const submitMatch = input.match(/^submit\s+(.+)/i);
     if (submitMatch) {
@@ -197,13 +258,20 @@ export function registerAi4ctfCommand(program) {
         console.log(chalk.gray(`              ${t('ai4ctfHintCUses')}`));
         console.log();
         console.log(chalk.gray('  ─────────────────────────────────────────'));
-        console.log(chalk.white(`  ${t('ai4ctfTryNow')}`));
-        console.log(chalk.gray(`  ${t('ai4ctfExample')}`));
-        console.log(chalk.gray(`  ${t('ai4ctfFreeChat')}`));
+        console.log(chalk.bold.white('  👉 New here? Start with the hints in order:'));
+        console.log('    ' + chalk.cyan('hint a') + chalk.gray('   → nudge'));
+        console.log('    ' + chalk.cyan('hint b') + chalk.gray('   → technique'));
+        console.log('    ' + chalk.cyan('hint c') + chalk.gray('   → principle + shell reminder'));
+        console.log(chalk.gray('    (hints guide you — they never give the answer directly)'));
+        console.log();
+        console.log(chalk.white('  Or chat freely with your AI teammate — ask anything'));
+        console.log(chalk.gray('  about the challenge. Example: ') + chalk.white('"what encoding is this?"'));
         console.log();
         console.log(chalk.yellow(`  ${t('ai4ctfCommands')}`));
-        console.log(chalk.white('    submit <flag>') + chalk.gray(`   ${t('ai4ctfSubmitCmd')}`));
-        console.log(chalk.white('    !<command>') + chalk.gray(`      ${t('ai4ctfShellCmd')}`));
+        console.log(chalk.white('    hint a / b / c  ') + chalk.gray('pre-written hints (safe to use)'));
+        console.log(chalk.white('    submit <flag>   ') + chalk.gray(t('ai4ctfSubmitCmd')));
+        console.log(chalk.white('    !<shell cmd>    ') + chalk.gray('run a shell command'));
+        console.log(chalk.gray('                    e.g. ') + chalk.white('!echo aWNv... | base64 -d'));
         console.log(chalk.gray(`    exit            ${t('ai4ctfEndSession')}`));
         console.log();
         drawTokenBar();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.29",
+  "version": "2.19.31",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {