icoa-cli 2.19.43 → 2.19.45

package/dist/commands/exam.js

@@ -226,12 +226,34 @@ function getHelpState(state) {
         eliminated: state._eliminated || {},
     };
 }
+// Track whether the practical section intro has been shown this session
+let _practicalIntroShown = false;
 function printQuestion(q, answer) {
     const state = getExamState();
     const total = Number(state?.session.questionCount || 30);
     const answered = Object.keys(state?.answers || {}).length;
     const help = getHelpState(state);
     const eliminated = help.eliminated[q.number] || [];
+    const isPractical = q.type === 'ai4ctf' || q.type === 'ctf4ai' || (q.options && !q.options.A && !q.options.B);
+    // Show practical section intro once when first entering Q31+
+    if (isPractical && !_practicalIntroShown && state?.session.examId !== 'demo-free') {
+        _practicalIntroShown = true;
+        console.log();
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log(chalk.bold.white('  Practical Section — Python Required'));
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log();
+        console.log(chalk.white('  Three ways to run Python:'));
+        console.log();
+        console.log(chalk.yellow('  1.') + chalk.white(' One-liner: ') + chalk.green('!python3 -c "print(1+1)"'));
+        console.log(chalk.yellow('  2.') + chalk.white(' Interactive: ') + chalk.green('!python3') + chalk.gray(' → >>> import struct ...'));
+        console.log(chalk.yellow('  3.') + chalk.white(' Script: ') + chalk.green("!cat << 'EOF' > s.py") + chalk.gray(' → ') + chalk.green('!python3 s.py'));
+        console.log();
+        console.log(chalk.white('  Need help? Type ') + chalk.bold.cyan('hint') + chalk.white(' to ask AI (25K tokens per section)'));
+        console.log(chalk.white('  Submit flag: ') + chalk.green('exam answer <n> ICOA{your_flag}'));
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log();
+    }
     // Progress bar
     printQuestionProgress(q.number, total, answered);
     // Easter egg (position calculated by percentage of total)
@@ -242,22 +264,43 @@ function printQuestion(q, answer) {
     console.log();
     if (q.category)
         console.log(chalk.cyan(`  [${q.category}]`));
-    console.log(chalk.bold.white(`  Q${q.number}. `) + chalk.white(q.text));
-    console.log();
-    for (const key of ['A', 'B', 'C', 'D']) {
-        const isEliminated = eliminated.includes(key);
-        const selected = answer === key;
-        if (isEliminated) {
-            console.log(chalk.gray.strikethrough(`    ${key}. ${q.options[key]}`) + chalk.red(` (${t('wrong')})`));
+    if (q.points && q.points > 2) {
+        console.log(chalk.cyan(`  [${q.points} points]`));
+    }
+    if (isPractical) {
+        // Practical question display
+        const displayText = q.description || q.text;
+        console.log(chalk.bold.white(`  Q${q.number}. `) + chalk.white(displayText.split('\n')[0]));
+        // Show remaining lines with proper indentation
+        const lines = displayText.split('\n').slice(1);
+        for (const line of lines) {
+            console.log(chalk.white(`  ${line}`));
         }
-        else if (selected) {
-            console.log(chalk.green.bold(`  ▸ ${key}. ${q.options[key]}`));
+        console.log();
+        if (answer) {
+            console.log(chalk.green(`  Your answer: ${answer}`));
+            console.log();
         }
-        else {
-            console.log(chalk.gray(`    ${key}.`) + ' ' + chalk.white(q.options[key]));
+    }
+    else {
+        // MCQ display
+        console.log(chalk.bold.white(`  Q${q.number}. `) + chalk.white(q.text));
+        console.log();
+        for (const key of ['A', 'B', 'C', 'D']) {
+            const isEliminated = eliminated.includes(key);
+            const selected = answer === key;
+            if (isEliminated) {
+                console.log(chalk.gray.strikethrough(`    ${key}. ${q.options[key]}`) + chalk.red(` (${t('wrong')})`));
+            }
+            else if (selected) {
+                console.log(chalk.green.bold(`  ▸ ${key}. ${q.options[key]}`));
+            }
+            else {
+                console.log(chalk.gray(`    ${key}.`) + ' ' + chalk.white(q.options[key]));
+            }
         }
+        console.log();
     }
-    console.log();
     // Q2 tutorial hint
     const isDemo = state?.session.examId === 'demo-free';
     const q2Helps = help.perQ[2] || 0;
@@ -265,14 +308,21 @@ function printQuestion(q, answer) {
         console.log(chalk.yellow.bold(`  ${t('qTutorial')}`));
         console.log();
     }
-    // Full menu on every question
+    // Full menu
     const remaining = help.max - help.used;
-    const helpLabel = remaining > 0
-        ? chalk.gray(`${t('helpRemove')} `) + chalk.yellow(`(${remaining}/${help.max})`)
-        : (help.max < 8 ? chalk.gray(`${t('helpUsedUp')}`) : chalk.gray(`${t('helpAllUsed')} (${help.used}/${help.max})`));
     console.log(chalk.gray('  ─────────────────────────────────────────'));
-    console.log(chalk.yellow('    A/B/C/D') + chalk.gray(`       ${t('answerThis')}`));
-    console.log(chalk.yellow('    help') + '          ' + helpLabel);
+    if (isPractical) {
+        console.log(chalk.yellow('    exam answer <n> ICOA{...}') + chalk.gray('  submit flag'));
+        console.log(chalk.yellow('    hint') + chalk.gray('          ask AI for help'));
+        console.log(chalk.yellow('    !python3') + chalk.gray('      start Python'));
+    }
+    else {
+        const helpLabel = remaining > 0
+            ? chalk.gray(`${t('helpRemove')} `) + chalk.yellow(`(${remaining}/${help.max})`)
+            : (help.max < 8 ? chalk.gray(`${t('helpUsedUp')}`) : chalk.gray(`${t('helpAllUsed')} (${help.used}/${help.max})`));
+        console.log(chalk.yellow('    A/B/C/D') + chalk.gray(`       ${t('answerThis')}`));
+        console.log(chalk.yellow('    help') + '          ' + helpLabel);
+    }
     console.log(chalk.yellow('    next') + chalk.gray(' / ') + chalk.yellow('prev') + chalk.gray(`    ${t('htpNav')}`));
     console.log(chalk.yellow(`    exam q 1..${total}`) + chalk.gray(`   ${t('htpJump')}`));
     console.log(chalk.yellow('    exam review') + chalk.gray(`   ${t('htpReview')}`));
@@ -648,9 +698,10 @@ export function registerExamCommand(program) {
     });
     // ─── exam answer <n> <choice> ───
     exam
-        .command('answer <n> <choice>')
-        .description('Answer question N with choice A/B/C/D')
-        .action(async (n, choice) => {
+        .command('answer <n> <choice...>')
+        .description('Answer question N (A/B/C/D for MCQ, ICOA{flag} for practical)')
+        .action(async (n, choiceParts) => {
+        const choice = choiceParts.join(' ');
         logCommand(`exam answer ${n} ${choice}`);
         const state = getExamState();
         if (!state) {
@@ -665,10 +716,23 @@ export function registerExamCommand(program) {
             printError(`Question ${n} not found (1-${state.questions.length}).`);
             return;
         }
-        const c = choice.toUpperCase();
-        if (!['A', 'B', 'C', 'D'].includes(c)) {
-            printError('Choice must be A, B, C, or D.');
-            return;
+        // Detect question type: practical (ai4ctf/ctf4ai) or MCQ
+        const isPractical = q.type === 'ai4ctf' || q.type === 'ctf4ai' || (q.options && !q.options.A && !q.options.B);
+        let c;
+        if (isPractical) {
+            // Accept flag format: ICOA{...} or any string
+            c = choice.trim();
+            if (!c) {
+                printError('Please provide your flag: exam answer <n> ICOA{your_flag}');
+                return;
+            }
+        }
+        else {
+            c = choice.toUpperCase();
+            if (!['A', 'B', 'C', 'D'].includes(c)) {
+                printError('Choice must be A, B, C, or D.');
+                return;
+            }
         }
         // Q2 tutorial: must use help first before answering
         if (state.session.examId === 'demo-free' && num === 2) {
@@ -1066,7 +1130,8 @@ export function registerExamCommand(program) {
         .description('Enter exam with access token (no login needed)')
         .action(async (code) => {
         logCommand(`exam token ${code}`);
-        const existing = getExamState();
+        const { getRealExamState } = await import('../lib/exam-state.js');
+        const existing = getRealExamState();
         if (existing) {
             printWarning(`Exam "${existing.session.examName}" is already in progress.`);
             printInfo('Use "exam review" or "exam submit" first.');
@@ -1191,17 +1256,11 @@ export function registerExamCommand(program) {
         }
         const DEMO_QUESTIONS = pickDemoQuestions(DEMO_PICK_SIZE);
         const DEMO_SESSION = getLocalizedDemoSession();
-        const existing = getExamState();
-        if (existing) {
-            if (existing.session.examId === 'demo-free') {
-                // Demo: always restart fresh
-                clearExamState();
-            }
-            else {
-                printWarning(`Exam "${existing.session.examName}" is in progress.`);
-                printInfo('Submit it first: exam submit');
-                return;
-            }
+        // Demo uses separate state file — doesn't conflict with real exam
+        const { getDemoState, clearExamState: clearState } = await import('../lib/exam-state.js');
+        const existingDemo = getDemoState();
+        if (existingDemo) {
+            clearState('demo-free');
         }
         console.log();
         printHeader('ICOA Demo Exam — Free Practice');
@@ -1437,6 +1496,42 @@ export function registerExamCommand(program) {
         else {
             printWarning(`${installed.length}/${PACKAGES.length} packages installed. ${failed.length} failed: ${failed.join(', ')}`);
         }
+        // Python usage tutorial for beginners
+        console.log();
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log(chalk.bold.white('  How to use Python in ICOA CLI'));
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log();
+        console.log(chalk.bold.yellow('  Method 1: One-liner') + chalk.gray(' (quick tasks)'));
+        console.log(chalk.white('  Just add ! before the command:'));
+        console.log(chalk.green('    !python3 -c "import base64; print(base64.b64decode(\'SGVsbG8=\'))"'));
+        console.log(chalk.gray('    → b\'Hello\''));
+        console.log();
+        console.log(chalk.bold.yellow('  Method 2: Interactive Python') + chalk.gray(' (explore & experiment)'));
+        console.log(chalk.white('  Start a Python session, type commands one by one:'));
+        console.log(chalk.green('    !python3'));
+        console.log(chalk.gray('    >>> from Crypto.Cipher import AES'));
+        console.log(chalk.gray('    >>> key = bytes.fromhex("49434f41...")'));
+        console.log(chalk.gray('    >>> cipher = AES.new(key, AES.MODE_CBC, iv)'));
+        console.log(chalk.gray('    >>> print(cipher.decrypt(data))'));
+        console.log(chalk.gray('    >>> exit()'));
+        console.log();
+        console.log(chalk.bold.yellow('  Method 3: Script file') + chalk.gray(' (complex solutions)'));
+        console.log(chalk.white('  Write a .py file, then run it:'));
+        console.log(chalk.green("    !cat << 'EOF' > solve.py"));
+        console.log(chalk.gray('    from pwn import xor'));
+        console.log(chalk.gray('    ct = bytes.fromhex("0a2b0e1c...")'));
+        console.log(chalk.gray('    key = xor(ct[:5], b"ICOA{")'));
+        console.log(chalk.gray('    print(xor(ct, key).decode())'));
+        console.log(chalk.green('    EOF'));
+        console.log(chalk.green('    !python3 solve.py'));
+        console.log();
+        console.log(chalk.bold.yellow('  AI Assistant'));
+        console.log(chalk.white('  During the exam, type ') + chalk.bold.cyan('hint') + chalk.white(' to ask AI for help:'));
+        console.log(chalk.gray('    "How do I decrypt AES-CBC in Python?"'));
+        console.log(chalk.gray('    "Show me how to use struct.unpack"'));
+        console.log(chalk.gray('    AI budget: 25K tokens for AI4CTF + 25K for CTF4AI'));
+        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
         console.log();
         console.log(chalk.white('  Next step: ') + chalk.bold.cyan('exam <token>'));
         console.log();

package/dist/lib/exam-state.d.ts

@@ -1,7 +1,9 @@
 import type { ExamState } from '../types/index.js';
 export declare function getExamState(): ExamState | null;
+export declare function getDemoState(): ExamState | null;
+export declare function getRealExamState(): ExamState | null;
 export declare function saveExamState(state: ExamState): void;
-export declare function clearExamState(): void;
+export declare function clearExamState(examId?: string): void;
 export declare function isExamActive(): boolean;
 export declare function getExamDeadline(): Date | null;
 export declare function addInteraction(interaction: import('../types/index.js').ExamInteraction): void;

package/dist/lib/exam-state.js

@@ -1,10 +1,49 @@
 import { readFileSync, writeFileSync, existsSync, unlinkSync } from 'node:fs';
 import { join } from 'node:path';
 import { getIcoaDir } from './config.js';
+// Demo and real exam use separate state files so they don't block each other
 function stateFile() {
     return join(getIcoaDir(), 'exam-state.json');
 }
+function demoStateFile() {
+    return join(getIcoaDir(), 'demo-state.json');
+}
+// Internal: pick the right file based on examId
+function resolveStateFile(examId) {
+    return examId === 'demo-free' ? demoStateFile() : stateFile();
+}
 export function getExamState() {
+    // Check both files, return the most recently active one
+    const files = [stateFile(), demoStateFile()];
+    let latest = null;
+    let latestTime = 0;
+    for (const f of files) {
+        if (!existsSync(f))
+            continue;
+        try {
+            const state = JSON.parse(readFileSync(f, 'utf-8'));
+            const t = new Date(state.session.confirmedAt || state.session.startedAt).getTime();
+            if (t > latestTime) {
+                latest = state;
+                latestTime = t;
+            }
+        }
+        catch { }
+    }
+    return latest;
+}
+export function getDemoState() {
+    const f = demoStateFile();
+    if (!existsSync(f))
+        return null;
+    try {
+        return JSON.parse(readFileSync(f, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+export function getRealExamState() {
     const f = stateFile();
     if (!existsSync(f))
         return null;
@@ -16,12 +55,24 @@ export function getExamState() {
     }
 }
 export function saveExamState(state) {
-    writeFileSync(stateFile(), JSON.stringify(state, null, 2));
+    const f = resolveStateFile(state.session.examId);
+    writeFileSync(f, JSON.stringify(state, null, 2));
 }
-export function clearExamState() {
-    const f = stateFile();
-    if (existsSync(f))
-        unlinkSync(f);
+export function clearExamState(examId) {
+    if (examId) {
+        const f = resolveStateFile(examId);
+        if (existsSync(f))
+            unlinkSync(f);
+    }
+    else {
+        // Clear the currently active exam
+        const state = getExamState();
+        if (state) {
+            const f = resolveStateFile(state.session.examId);
+            if (existsSync(f))
+                unlinkSync(f);
+        }
+    }
 }
 export function isExamActive() {
     return getExamState() !== null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.43",
+  "version": "2.19.45",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {