icoa-cli 2.19.42 → 2.19.44

package/dist/commands/exam.js

@@ -226,12 +226,34 @@ function getHelpState(state) {
         eliminated: state._eliminated || {},
     };
 }
+// Track whether the practical section intro has been shown this session
+let _practicalIntroShown = false;
 function printQuestion(q, answer) {
     const state = getExamState();
     const total = Number(state?.session.questionCount || 30);
     const answered = Object.keys(state?.answers || {}).length;
     const help = getHelpState(state);
     const eliminated = help.eliminated[q.number] || [];
+    const isPractical = q.type === 'ai4ctf' || q.type === 'ctf4ai' || (q.options && !q.options.A && !q.options.B);
+    // Show practical section intro once when first entering Q31+
+    if (isPractical && !_practicalIntroShown && state?.session.examId !== 'demo-free') {
+        _practicalIntroShown = true;
+        console.log();
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log(chalk.bold.white('  Practical Section — Python Required'));
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log();
+        console.log(chalk.white('  Three ways to run Python:'));
+        console.log();
+        console.log(chalk.yellow('  1.') + chalk.white(' One-liner: ') + chalk.green('!python3 -c "print(1+1)"'));
+        console.log(chalk.yellow('  2.') + chalk.white(' Interactive: ') + chalk.green('!python3') + chalk.gray(' → >>> import struct ...'));
+        console.log(chalk.yellow('  3.') + chalk.white(' Script: ') + chalk.green("!cat << 'EOF' > s.py") + chalk.gray(' → ') + chalk.green('!python3 s.py'));
+        console.log();
+        console.log(chalk.white('  Need help? Type ') + chalk.bold.cyan('hint') + chalk.white(' to ask AI (25K tokens per section)'));
+        console.log(chalk.white('  Submit flag: ') + chalk.green('exam answer <n> ICOA{your_flag}'));
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log();
+    }
     // Progress bar
     printQuestionProgress(q.number, total, answered);
     // Easter egg (position calculated by percentage of total)
@@ -242,22 +264,43 @@ function printQuestion(q, answer) {
     console.log();
     if (q.category)
         console.log(chalk.cyan(`  [${q.category}]`));
-    console.log(chalk.bold.white(`  Q${q.number}. `) + chalk.white(q.text));
-    console.log();
-    for (const key of ['A', 'B', 'C', 'D']) {
-        const isEliminated = eliminated.includes(key);
-        const selected = answer === key;
-        if (isEliminated) {
-            console.log(chalk.gray.strikethrough(`    ${key}. ${q.options[key]}`) + chalk.red(` (${t('wrong')})`));
+    if (q.points && q.points > 2) {
+        console.log(chalk.cyan(`  [${q.points} points]`));
+    }
+    if (isPractical) {
+        // Practical question display
+        const displayText = q.description || q.text;
+        console.log(chalk.bold.white(`  Q${q.number}. `) + chalk.white(displayText.split('\n')[0]));
+        // Show remaining lines with proper indentation
+        const lines = displayText.split('\n').slice(1);
+        for (const line of lines) {
+            console.log(chalk.white(`  ${line}`));
         }
-        else if (selected) {
-            console.log(chalk.green.bold(`  ▸ ${key}. ${q.options[key]}`));
+        console.log();
+        if (answer) {
+            console.log(chalk.green(`  Your answer: ${answer}`));
+            console.log();
         }
-        else {
-            console.log(chalk.gray(`    ${key}.`) + ' ' + chalk.white(q.options[key]));
+    }
+    else {
+        // MCQ display
+        console.log(chalk.bold.white(`  Q${q.number}. `) + chalk.white(q.text));
+        console.log();
+        for (const key of ['A', 'B', 'C', 'D']) {
+            const isEliminated = eliminated.includes(key);
+            const selected = answer === key;
+            if (isEliminated) {
+                console.log(chalk.gray.strikethrough(`    ${key}. ${q.options[key]}`) + chalk.red(` (${t('wrong')})`));
+            }
+            else if (selected) {
+                console.log(chalk.green.bold(`  ▸ ${key}. ${q.options[key]}`));
+            }
+            else {
+                console.log(chalk.gray(`    ${key}.`) + ' ' + chalk.white(q.options[key]));
+            }
         }
+        console.log();
     }
-    console.log();
     // Q2 tutorial hint
     const isDemo = state?.session.examId === 'demo-free';
     const q2Helps = help.perQ[2] || 0;
@@ -265,14 +308,21 @@ function printQuestion(q, answer) {
         console.log(chalk.yellow.bold(`  ${t('qTutorial')}`));
         console.log();
     }
-    // Full menu on every question
+    // Full menu
     const remaining = help.max - help.used;
-    const helpLabel = remaining > 0
-        ? chalk.gray(`${t('helpRemove')} `) + chalk.yellow(`(${remaining}/${help.max})`)
-        : (help.max < 8 ? chalk.gray(`${t('helpUsedUp')}`) : chalk.gray(`${t('helpAllUsed')} (${help.used}/${help.max})`));
     console.log(chalk.gray('  ─────────────────────────────────────────'));
-    console.log(chalk.yellow('    A/B/C/D') + chalk.gray(`       ${t('answerThis')}`));
-    console.log(chalk.yellow('    help') + '          ' + helpLabel);
+    if (isPractical) {
+        console.log(chalk.yellow('    exam answer <n> ICOA{...}') + chalk.gray('  submit flag'));
+        console.log(chalk.yellow('    hint') + chalk.gray('          ask AI for help'));
+        console.log(chalk.yellow('    !python3') + chalk.gray('      start Python'));
+    }
+    else {
+        const helpLabel = remaining > 0
+            ? chalk.gray(`${t('helpRemove')} `) + chalk.yellow(`(${remaining}/${help.max})`)
+            : (help.max < 8 ? chalk.gray(`${t('helpUsedUp')}`) : chalk.gray(`${t('helpAllUsed')} (${help.used}/${help.max})`));
+        console.log(chalk.yellow('    A/B/C/D') + chalk.gray(`       ${t('answerThis')}`));
+        console.log(chalk.yellow('    help') + '          ' + helpLabel);
+    }
     console.log(chalk.yellow('    next') + chalk.gray(' / ') + chalk.yellow('prev') + chalk.gray(`    ${t('htpNav')}`));
     console.log(chalk.yellow(`    exam q 1..${total}`) + chalk.gray(`   ${t('htpJump')}`));
     console.log(chalk.yellow('    exam review') + chalk.gray(`   ${t('htpReview')}`));
@@ -648,9 +698,10 @@ export function registerExamCommand(program) {
     });
     // ─── exam answer <n> <choice> ───
     exam
-        .command('answer <n> <choice>')
-        .description('Answer question N with choice A/B/C/D')
-        .action(async (n, choice) => {
+        .command('answer <n> <choice...>')
+        .description('Answer question N (A/B/C/D for MCQ, ICOA{flag} for practical)')
+        .action(async (n, choiceParts) => {
+        const choice = choiceParts.join(' ');
         logCommand(`exam answer ${n} ${choice}`);
         const state = getExamState();
         if (!state) {
@@ -665,10 +716,23 @@ export function registerExamCommand(program) {
             printError(`Question ${n} not found (1-${state.questions.length}).`);
             return;
         }
-        const c = choice.toUpperCase();
-        if (!['A', 'B', 'C', 'D'].includes(c)) {
-            printError('Choice must be A, B, C, or D.');
-            return;
+        // Detect question type: practical (ai4ctf/ctf4ai) or MCQ
+        const isPractical = q.type === 'ai4ctf' || q.type === 'ctf4ai' || (q.options && !q.options.A && !q.options.B);
+        let c;
+        if (isPractical) {
+            // Accept flag format: ICOA{...} or any string
+            c = choice.trim();
+            if (!c) {
+                printError('Please provide your flag: exam answer <n> ICOA{your_flag}');
+                return;
+            }
+        }
+        else {
+            c = choice.toUpperCase();
+            if (!['A', 'B', 'C', 'D'].includes(c)) {
+                printError('Choice must be A, B, C, or D.');
+                return;
+            }
         }
         // Q2 tutorial: must use help first before answering
         if (state.session.examId === 'demo-free' && num === 2) {
@@ -1437,6 +1501,42 @@ export function registerExamCommand(program) {
         else {
             printWarning(`${installed.length}/${PACKAGES.length} packages installed. ${failed.length} failed: ${failed.join(', ')}`);
         }
+        // Python usage tutorial for beginners
+        console.log();
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log(chalk.bold.white('  How to use Python in ICOA CLI'));
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log();
+        console.log(chalk.bold.yellow('  Method 1: One-liner') + chalk.gray(' (quick tasks)'));
+        console.log(chalk.white('  Just add ! before the command:'));
+        console.log(chalk.green('    !python3 -c "import base64; print(base64.b64decode(\'SGVsbG8=\'))"'));
+        console.log(chalk.gray('    → b\'Hello\''));
+        console.log();
+        console.log(chalk.bold.yellow('  Method 2: Interactive Python') + chalk.gray(' (explore & experiment)'));
+        console.log(chalk.white('  Start a Python session, type commands one by one:'));
+        console.log(chalk.green('    !python3'));
+        console.log(chalk.gray('    >>> from Crypto.Cipher import AES'));
+        console.log(chalk.gray('    >>> key = bytes.fromhex("49434f41...")'));
+        console.log(chalk.gray('    >>> cipher = AES.new(key, AES.MODE_CBC, iv)'));
+        console.log(chalk.gray('    >>> print(cipher.decrypt(data))'));
+        console.log(chalk.gray('    >>> exit()'));
+        console.log();
+        console.log(chalk.bold.yellow('  Method 3: Script file') + chalk.gray(' (complex solutions)'));
+        console.log(chalk.white('  Write a .py file, then run it:'));
+        console.log(chalk.green("    !cat << 'EOF' > solve.py"));
+        console.log(chalk.gray('    from pwn import xor'));
+        console.log(chalk.gray('    ct = bytes.fromhex("0a2b0e1c...")'));
+        console.log(chalk.gray('    key = xor(ct[:5], b"ICOA{")'));
+        console.log(chalk.gray('    print(xor(ct, key).decode())'));
+        console.log(chalk.green('    EOF'));
+        console.log(chalk.green('    !python3 solve.py'));
+        console.log();
+        console.log(chalk.bold.yellow('  AI Assistant'));
+        console.log(chalk.white('  During the exam, type ') + chalk.bold.cyan('hint') + chalk.white(' to ask AI for help:'));
+        console.log(chalk.gray('    "How do I decrypt AES-CBC in Python?"'));
+        console.log(chalk.gray('    "Show me how to use struct.unpack"'));
+        console.log(chalk.gray('    AI budget: 25K tokens for AI4CTF + 25K for CTF4AI'));
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
         console.log();
         console.log(chalk.white('  Next step: ') + chalk.bold.cyan('exam <token>'));
         console.log();

package/dist/commands/lang.js

@@ -106,6 +106,40 @@ export function registerLangCommand(program) {
                 console.log(chalk.gray('  Language changed. Type: demo'));
             }
         }
+        else if (state && state.session.token) {
+            // Real exam with token: re-fetch questions in new language from server
+            try {
+                const { getConfig } = await import('../lib/config.js');
+                const { saveExamState } = await import('../lib/exam-state.js');
+                const { getDeviceFingerprint } = await import('../lib/access.js');
+                const config = getConfig();
+                const serverUrl = config.ctfdUrl || 'https://practice.icoa2026.au';
+                const token = state.session.token;
+                const res = await fetch(`${serverUrl}/api/icoa/exam-token`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ token, deviceHash: getDeviceFingerprint(), lang: code }),
+                    signal: AbortSignal.timeout(10000),
+                });
+                if (res.ok) {
+                    const json = await res.json();
+                    const newQuestions = json.data.questions;
+                    // Keep answers, interactions, aiUsage — only update question text
+                    state.questions = newQuestions;
+                    saveExamState(state);
+                    const currentQ = state._lastQ || 1;
+                    console.log();
+                    printSuccess(`Exam questions updated to ${LANG_NAMES[code] || code}. Your answers are kept.`);
+                    console.log(chalk.white(`  Resume: exam q ${currentQ}`));
+                }
+                else {
+                    console.log(chalk.yellow('  Could not reload questions in new language. Try again later.'));
+                }
+            }
+            catch {
+                console.log(chalk.yellow('  Could not reach server. Language changed for UI only.'));
+            }
+        }
         else if (state) {
             const currentQ = state._lastQ || 1;
             console.log();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.42",
+  "version": "2.19.44",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {