icoa-cli 2.19.57 → 2.19.59

package/dist/commands/ai4ctf.js

@@ -300,6 +300,33 @@ export function registerAi4ctfCommand(program) {
         .description('Chat with your AI teammate')
         .action(async () => {
         logCommand('ai4ctf');
+        // Block mid-exam: ai4ctf starts a scripted demo challenge, which would
+        // interrupt a real exam session. Redirect to the actual exam AI tool.
+        const { getRealExamState } = await import('../lib/exam-state.js');
+        const realExam = getRealExamState();
+        if (realExam) {
+            const currentQ = realExam._lastQ || 1;
+            const inAi4ctfRange = currentQ >= 31 && currentQ <= 38;
+            console.log();
+            console.log(chalk.yellow('  ⚠  You are in a real exam — ai4ctf demo is blocked here.'));
+            console.log();
+            if (inAi4ctfRange) {
+                console.log(chalk.white(`  You are on Q${currentQ} (AI4CTF section).`));
+                console.log(chalk.white('  To ask the AI about this question:'));
+                console.log(chalk.gray('    → ') + chalk.bold.cyan(`hint "your question"`));
+                console.log(chalk.gray('  Example: ') + chalk.green(`hint "how do I decrypt AES-CBC in Python?"`));
+            }
+            else {
+                console.log(chalk.white(`  You are on Q${currentQ}. The AI4CTF section is Q31–38.`));
+                console.log(chalk.gray('  Jump there: ') + chalk.bold.cyan('exam q 31'));
+                console.log(chalk.gray('  Then ask the AI with: ') + chalk.white('hint "your question"'));
+            }
+            console.log();
+            console.log(chalk.gray('  ai4ctf as a chat command is demo-only. In the real exam,'));
+            console.log(chalk.gray('  `hint` is the AI interface — 25K AI4CTF + 25K CTF4AI tokens.'));
+            console.log();
+            return;
+        }
         const config = getConfig();
         const modelName = config.geminiModel || 'gemma-4-31b-it';
         // Demo challenge context

package/dist/commands/ctf4ai-demo.js

@@ -170,6 +170,32 @@ export function registerCtf4aiDemoCommand(program) {
         .description('CTF4AI Demo — Prompt injection challenge')
         .action(async () => {
         logCommand('ctf4ai');
+        // Block mid-exam: ctf4ai starts a scripted koala demo, would derail
+        // a real exam session and burn AI tokens against the wrong budget.
+        const { getRealExamState } = await import('../lib/exam-state.js');
+        const realExam = getRealExamState();
+        if (realExam) {
+            const currentQ = realExam._lastQ || 1;
+            const inCtf4aiRange = currentQ >= 39;
+            console.log();
+            console.log(chalk.yellow('  ⚠  You are in a real exam — ctf4ai demo is blocked here.'));
+            console.log();
+            if (inCtf4aiRange) {
+                console.log(chalk.white(`  You are on Q${currentQ} (CTF4AI section).`));
+                console.log(chalk.white('  The question scenario itself is the AI target — read Q39/Q40'));
+                console.log(chalk.white('  carefully. To ask the AI assistant for help:'));
+                console.log(chalk.gray('    → ') + chalk.bold.cyan(`hint "your question"`));
+            }
+            else {
+                console.log(chalk.white(`  You are on Q${currentQ}. The CTF4AI section is Q39–40.`));
+                console.log(chalk.gray('  Jump there: ') + chalk.bold.cyan('exam q 39'));
+            }
+            console.log();
+            console.log(chalk.gray('  ctf4ai as a standalone command is demo-only. In the real exam,'));
+            console.log(chalk.gray('  each Q39/Q40 scenario contains its own AI target to attack.'));
+            console.log();
+            return;
+        }
         if (ctf4aiActive) {
             console.log(chalk.gray(`  ${t('ctf4aiAlready')}`));
             return;

package/dist/commands/exam.js

@@ -327,10 +327,14 @@ function printQuestionProgress(current, total, answered) {
     console.log();
     console.log(`  ${bar}  ${chalk.white.bold(`${current}`)}${chalk.gray(`/${total}`)}  ${chalk.gray(`(${answered} answered)`)}  ${chalk.gray(`${pct}%`)}`);
 }
+// Help budget per exam.md §3: 10 base + 5 hidden bonus (unlocked via `more help`).
+// Demo still uses the lighter 5 + 3 set via _helpMax overrides at demo start.
+const HELP_BASE = 10;
+const HELP_WITH_BONUS = 15;
 function getHelpState(state) {
     return {
         used: state._helpUsed || 0,
-        max: state._helpMax || 5,
+        max: state._helpMax || HELP_BASE,
         perQ: state._helpPerQ || {},
         eliminated: state._eliminated || {},
     };
@@ -488,9 +492,12 @@ function printQuestion(q, answer) {
         console.log(chalk.yellow('    !python3') + chalk.gray('      start Python'));
     }
     else {
+        // "used up" prompt shows until the bonus tier is reached; after that
+        // (already unlocked), show the full-used final state.
+        const bonusUnlocked = help.max >= HELP_WITH_BONUS;
         const helpLabel = remaining > 0
             ? chalk.gray(`${t('helpRemove')} `) + chalk.yellow(`(${remaining}/${help.max})`)
-            : (help.max < 8 ? chalk.gray(`${t('helpUsedUp')}`) : chalk.gray(`${t('helpAllUsed')} (${help.used}/${help.max})`));
+            : (!bonusUnlocked ? chalk.gray(`${t('helpUsedUp')}`) : chalk.gray(`${t('helpAllUsed')} (${help.used}/${help.max})`));
         console.log(chalk.yellow('    A/B/C/D') + chalk.gray(`       ${t('answerThis')}`));
         console.log(chalk.yellow('    help') + '          ' + helpLabel);
     }
@@ -835,10 +842,12 @@ export function registerExamCommand(program) {
         }
         // Check budget
         if (help.used >= help.max) {
-            if (help.max < 8) {
+            const bonusUnlocked = help.max >= HELP_WITH_BONUS;
+            const bonusRemaining = HELP_WITH_BONUS - help.max;
+            if (!bonusUnlocked) {
                 console.log();
                 console.log(chalk.yellow(`  Help used: ${help.used}/${help.max}`));
-                console.log(chalk.white('  Need more? Type: ') + chalk.bold.yellow('more help') + chalk.gray(' (+3 bonus uses)'));
+                console.log(chalk.white('  Need more? Type: ') + chalk.bold.yellow('more help') + chalk.gray(` (+${bonusRemaining} bonus uses)`));
                 console.log();
             }
             else {
@@ -904,7 +913,7 @@ export function registerExamCommand(program) {
     // ─── exam more-help ───
     exam
         .command('more-help')
-        .description('Unlock 3 bonus help uses')
+        .description('Unlock hidden bonus help uses')
         .action(() => {
         logCommand('exam more-help');
         const state = getExamState();
@@ -913,7 +922,12 @@ export function registerExamCommand(program) {
             return;
         }
         const help = getHelpState(state);
-        if (help.max >= 8) {
+        // Demo (5→8) and real exam (10→15) each add their own bonus tier. Pick
+        // the target based on what's already in state: demo-free exam keeps the
+        // smaller step, real exams get the full 15.
+        const isDemo = state.session.examId === 'demo-free';
+        const bonusTarget = isDemo ? 8 : HELP_WITH_BONUS;
+        if (help.max >= bonusTarget) {
             console.log(chalk.gray('  Bonus help already unlocked.'));
             return;
         }
@@ -921,10 +935,11 @@ export function registerExamCommand(program) {
             console.log(chalk.gray(`  You still have ${help.max - help.used} helps remaining. Use them first!`));
             return;
         }
-        state._helpMax = 8;
+        const bonusDelta = bonusTarget - help.max;
+        state._helpMax = bonusTarget;
         saveExamState(state);
         console.log();
-        console.log(chalk.green('  🎁 +3 bonus help unlocked! (3/8 remaining)'));
+        console.log(chalk.green(`  🎁 +${bonusDelta} bonus help unlocked! (${bonusDelta}/${bonusTarget} remaining)`));
         console.log(chalk.gray('  Type "help" on any question to use.'));
         console.log();
     });
@@ -1741,7 +1756,9 @@ export function registerExamCommand(program) {
         drawProgress(100, 'Ready!');
         console.log();
         console.log();
-        saveExamState({ session, questions: DEMO_QUESTIONS, answers: {} });
+        // Demo keeps the lighter 5 + 3 help budget (10 questions, so 5 base =
+        // half the questions; plenty without making the exam trivial).
+        saveExamState({ session, questions: DEMO_QUESTIONS, answers: {}, _helpMax: 5 });
         printKeyValue('Questions', String(DEMO_PICK_SIZE));
         printKeyValue('Duration', 'No time limit');
         // Show first question

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.57",
+  "version": "2.19.59",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {