icoa-cli 2.19.56 → 2.19.58

package/dist/commands/exam.js

@@ -327,16 +327,88 @@ function printQuestionProgress(current, total, answered) {
     console.log();
     console.log(`  ${bar}  ${chalk.white.bold(`${current}`)}${chalk.gray(`/${total}`)}  ${chalk.gray(`(${answered} answered)`)}  ${chalk.gray(`${pct}%`)}`);
 }
+// Help budget per exam.md §3: 10 base + 5 hidden bonus (unlocked via `more help`).
+// Demo still uses the lighter 5 + 3 set via _helpMax overrides at demo start.
+const HELP_BASE = 10;
+const HELP_WITH_BONUS = 15;
 function getHelpState(state) {
     return {
         used: state._helpUsed || 0,
-        max: state._helpMax || 5,
+        max: state._helpMax || HELP_BASE,
         perQ: state._helpPerQ || {},
         eliminated: state._eliminated || {},
     };
 }
-// Track whether the practical section intro has been shown this session
-let _practicalIntroShown = false;
+// Section intros fire once per REPL session, first time the user enters
+// that section. State-persisted via shownWarnings keys 's_ai4ctf' / 's_ctf4ai'
+// so jumping back and forth doesn't re-fire them.
+function printSectionIntro(state, currentQ) {
+    if (state.session.examId === 'demo-free')
+        return;
+    const total = Number(state.session.questionCount || 40);
+    // Only 40-question exams have the three-section structure
+    if (total < 40)
+        return;
+    const shown = new Set(state.shownWarnings || []);
+    // ─── AI4CTF section intro (Q31 = first practical, AI-as-teammate) ───
+    if (currentQ >= 31 && currentQ <= 38 && !shown.has('s_ai4ctf')) {
+        console.log();
+        console.log(chalk.green('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log(chalk.bold.green('   🚀  Section 2: AI4CTF — AI is your teammate'));
+        console.log(chalk.green('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log();
+        console.log(chalk.white('   Welcome to the practical CTF section. Real'));
+        console.log(chalk.white('   security tasks — crypto, web, forensics, pwn.'));
+        console.log();
+        console.log(chalk.bold.white('   Q31–38 (8 questions · 6 pts each)'));
+        console.log(chalk.gray('     Solve ') + chalk.bold('with') + chalk.gray(' AI by your side. AI is your teammate.'));
+        console.log();
+        console.log(chalk.bold.white('   How to work'));
+        console.log(chalk.gray('     Run Python:     ') + chalk.green('!python3 -c "print(1+1)"'));
+        console.log(chalk.gray('                     ') + chalk.green('!python3') + chalk.gray(' for REPL'));
+        console.log(chalk.gray('     Ask AI:         ') + chalk.bold.cyan('hint') + chalk.gray('   — free-form question'));
+        console.log(chalk.gray('     Submit flag:    ') + chalk.green('exam answer <n> ICOA{...}'));
+        console.log();
+        console.log(chalk.bold.white('   Budget'));
+        console.log(chalk.gray('     AI tokens:      ') + chalk.white('25,000') + chalk.gray(' for this section'));
+        console.log(chalk.gray('     Hints A/B/C:    ') + chalk.white('5 / 3 / 1') + chalk.gray(' structured hints per question'));
+        console.log();
+        console.log(chalk.yellow('   Time still counting down. Budget ~2 min per question.'));
+        console.log(chalk.green('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log();
+        shown.add('s_ai4ctf');
+        state.shownWarnings = Array.from(shown);
+        saveExamState(state);
+        return;
+    }
+    // ─── CTF4AI section intro (Q39 = adversarial AI, highest-value questions) ───
+    if (currentQ >= 39 && !shown.has('s_ctf4ai')) {
+        console.log();
+        console.log(chalk.red('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log(chalk.bold.red('   🎯  Section 3: CTF4AI — Challenge the AI'));
+        console.log(chalk.red('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log();
+        console.log(chalk.white('   The final section flips the script: instead of'));
+        console.log(chalk.white('   using AI, you\'re ') + chalk.bold('attacking') + chalk.white(' AI systems.'));
+        console.log();
+        console.log(chalk.bold.white('   Q39–40 (2 questions · 16 pts each — highest value!)'));
+        console.log(chalk.gray('     Prompt injection · adversarial analysis · AI auditing'));
+        console.log();
+        console.log(chalk.bold.white('   How this differs from AI4CTF'));
+        console.log(chalk.gray('     · AI is your ') + chalk.red('target') + chalk.gray(', not your teammate'));
+        console.log(chalk.gray('     · Read the scenario carefully — rules vary'));
+        console.log(chalk.gray('     · Separate AI budget: ') + chalk.white('25,000 tokens'));
+        console.log();
+        console.log(chalk.yellow('   These are the hardest questions. Worth 21% of total score.'));
+        console.log(chalk.yellow('   If time is tight, skim Q39/40 first to decide attack order.'));
+        console.log(chalk.red('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        console.log();
+        shown.add('s_ctf4ai');
+        state.shownWarnings = Array.from(shown);
+        saveExamState(state);
+        return;
+    }
+}
 function printQuestion(q, answer) {
     const state = getExamState();
     const total = Number(state?.session.questionCount || 30);
@@ -347,25 +419,9 @@ function printQuestion(q, answer) {
     // Pacing hints (Q10 time check, Q30 section complete) — real exam only
     if (state)
         printPacingHint(state, q.number);
-    // Show practical section intro once when first entering Q31+
-    if (isPractical && !_practicalIntroShown && state?.session.examId !== 'demo-free') {
-        _practicalIntroShown = true;
-        console.log();
-        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
-        console.log(chalk.bold.white('  Practical Section — Python Required'));
-        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
-        console.log();
-        console.log(chalk.white('  Three ways to run Python:'));
-        console.log();
-        console.log(chalk.yellow('  1.') + chalk.white(' One-liner: ') + chalk.green('!python3 -c "print(1+1)"'));
-        console.log(chalk.yellow('  2.') + chalk.white(' Interactive: ') + chalk.green('!python3') + chalk.gray(' → >>> import struct ...'));
-        console.log(chalk.yellow('  3.') + chalk.white(' Script: ') + chalk.green("!cat << 'EOF' > s.py") + chalk.gray(' → ') + chalk.green('!python3 s.py'));
-        console.log();
-        console.log(chalk.white('  Need help? Type ') + chalk.bold.cyan('hint') + chalk.white(' to ask AI (25K tokens per section)'));
-        console.log(chalk.white('  Submit flag: ') + chalk.green('exam answer <n> ICOA{your_flag}'));
-        console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
-        console.log();
-    }
+    // Section intros (AI4CTF at Q31, CTF4AI at Q39) — real exam only
+    if (state && isPractical)
+        printSectionIntro(state, q.number);
     // Urgent countdown warnings (10 / 5 / 1 minutes remaining)
     if (state)
         printTimeWarningIfNeeded(state);
@@ -436,9 +492,12 @@ function printQuestion(q, answer) {
         console.log(chalk.yellow('    !python3') + chalk.gray('      start Python'));
     }
     else {
+        // "used up" prompt shows until the bonus tier is reached; after that
+        // (already unlocked), show the full-used final state.
+        const bonusUnlocked = help.max >= HELP_WITH_BONUS;
         const helpLabel = remaining > 0
             ? chalk.gray(`${t('helpRemove')} `) + chalk.yellow(`(${remaining}/${help.max})`)
-            : (help.max < 8 ? chalk.gray(`${t('helpUsedUp')}`) : chalk.gray(`${t('helpAllUsed')} (${help.used}/${help.max})`));
+            : (!bonusUnlocked ? chalk.gray(`${t('helpUsedUp')}`) : chalk.gray(`${t('helpAllUsed')} (${help.used}/${help.max})`));
         console.log(chalk.yellow('    A/B/C/D') + chalk.gray(`       ${t('answerThis')}`));
         console.log(chalk.yellow('    help') + '          ' + helpLabel);
     }
@@ -783,10 +842,12 @@ export function registerExamCommand(program) {
         }
         // Check budget
         if (help.used >= help.max) {
-            if (help.max < 8) {
+            const bonusUnlocked = help.max >= HELP_WITH_BONUS;
+            const bonusRemaining = HELP_WITH_BONUS - help.max;
+            if (!bonusUnlocked) {
                 console.log();
                 console.log(chalk.yellow(`  Help used: ${help.used}/${help.max}`));
-                console.log(chalk.white('  Need more? Type: ') + chalk.bold.yellow('more help') + chalk.gray(' (+3 bonus uses)'));
+                console.log(chalk.white('  Need more? Type: ') + chalk.bold.yellow('more help') + chalk.gray(` (+${bonusRemaining} bonus uses)`));
                 console.log();
             }
             else {
@@ -852,7 +913,7 @@ export function registerExamCommand(program) {
     // ─── exam more-help ───
     exam
         .command('more-help')
-        .description('Unlock 3 bonus help uses')
+        .description('Unlock hidden bonus help uses')
         .action(() => {
         logCommand('exam more-help');
         const state = getExamState();
@@ -861,7 +922,12 @@ export function registerExamCommand(program) {
             return;
         }
         const help = getHelpState(state);
-        if (help.max >= 8) {
+        // Demo (5→8) and real exam (10→15) each add their own bonus tier. Pick
+        // the target based on what's already in state: demo-free exam keeps the
+        // smaller step, real exams get the full 15.
+        const isDemo = state.session.examId === 'demo-free';
+        const bonusTarget = isDemo ? 8 : HELP_WITH_BONUS;
+        if (help.max >= bonusTarget) {
             console.log(chalk.gray('  Bonus help already unlocked.'));
             return;
         }
@@ -869,10 +935,11 @@ export function registerExamCommand(program) {
             console.log(chalk.gray(`  You still have ${help.max - help.used} helps remaining. Use them first!`));
             return;
         }
-        state._helpMax = 8;
+        const bonusDelta = bonusTarget - help.max;
+        state._helpMax = bonusTarget;
         saveExamState(state);
         console.log();
-        console.log(chalk.green('  🎁 +3 bonus help unlocked! (3/8 remaining)'));
+        console.log(chalk.green(`  🎁 +${bonusDelta} bonus help unlocked! (${bonusDelta}/${bonusTarget} remaining)`));
         console.log(chalk.gray('  Type "help" on any question to use.'));
         console.log();
     });
@@ -1689,7 +1756,9 @@ export function registerExamCommand(program) {
         drawProgress(100, 'Ready!');
         console.log();
         console.log();
-        saveExamState({ session, questions: DEMO_QUESTIONS, answers: {} });
+        // Demo keeps the lighter 5 + 3 help budget (10 questions, so 5 base =
+        // half the questions; plenty without making the exam trivial).
+        saveExamState({ session, questions: DEMO_QUESTIONS, answers: {}, _helpMax: 5 });
         printKeyValue('Questions', String(DEMO_PICK_SIZE));
         printKeyValue('Duration', 'No time limit');
         // Show first question

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.56",
+  "version": "2.19.58",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {