icoa-cli 2.19.74 → 2.19.76

package/dist/repl.js

@@ -17,6 +17,55 @@ import { startLogSync, stopLogSync } from './lib/log-sync.js';
 import { existsSync, mkdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
+// Pre-import commonly-used CTF modules on interactive Python startup.
+// Failures are silent — selectors import only what's available so a partial
+// exam setup doesn't crash the shell. Creates ~/.icoa/python-startup.py once.
+const PYTHON_STARTUP_CONTENT = `# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP
+import base64, struct, hashlib, re, json, os, sys, binascii
+try: import requests
+except ImportError: pass
+try: from Crypto.Cipher import AES
+except ImportError: pass
+try: from Crypto.Util.Padding import pad, unpad
+except ImportError: pass
+try: from pwn import xor, p32, u32, p64, u64
+except ImportError: pass
+try: import bs4
+except ImportError: pass
+try: import numpy as np
+except ImportError: pass
+`;
+function ensurePythonStartup() {
+    const icoaDir = join(homedir(), '.icoa');
+    if (!existsSync(icoaDir))
+        mkdirSync(icoaDir, { recursive: true });
+    const path = join(icoaDir, 'python-startup.py');
+    if (!existsSync(path)) {
+        const { writeFileSync } = require('node:fs');
+        writeFileSync(path, PYTHON_STARTUP_CONTENT);
+    }
+    return path;
+}
+function printPythonBanner() {
+    console.log();
+    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log(chalk.bold.white('  Python ready — ICOA exam toolkit pre-loaded'));
+    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log();
+    console.log(chalk.white('  Already imported: ') + chalk.gray('base64, struct, hashlib, re, json, binascii'));
+    console.log(chalk.white('  Also available:   ') + chalk.gray('requests, bs4, numpy, AES, pad/unpad, xor, p32/u32/p64/u64'));
+    console.log();
+    console.log(chalk.yellow('  Quick examples:'));
+    console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ') + chalk.gray('# decode base64'));
+    console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ') + chalk.gray('# hex → bytes'));
+    console.log(chalk.gray('    "ICOA{x}".encode()                 ') + chalk.gray('# str → bytes'));
+    console.log(chalk.gray('    [chr(c) for c in [73,67,79,65]]    ') + chalk.gray('# ASCII codes'));
+    console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ') + chalk.gray('# pwntools XOR'));
+    console.log();
+    console.log(chalk.gray('  Exit:  ') + chalk.white('exit()') + chalk.gray('  or Ctrl-D'));
+    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log();
+}
 // Compute the REPL prompt based on current state.
 // Real exam wins over demo (matches getExamState() priority). Chat modes have
 // their own prompts and are handled separately.
@@ -792,6 +841,16 @@ export async function startRepl(program, resumeMode) {
             }
             // Ensure workspace directory
             const cwd = ensureWorkspace();
+            // Interactive Python (no script args, no -c): print welcome banner and
+            // pre-import common CTF modules via a startup file. Makes entry painless
+            // for contestants — they land in a shell with base64/struct/hashlib/pwn
+            // already imported and see a 4-line cheat sheet of common one-liners.
+            const isInteractivePython = /^(\S*python3?(\.\d+)?)\s*$/.test(resolvedInput);
+            if (isInteractivePython) {
+                const startupPath = ensurePythonStartup();
+                resolvedInput = `PYTHONSTARTUP="${startupPath}" ${resolvedInput}`;
+                printPythonBanner();
+            }
             // Route to Docker sandbox if available, otherwise system shell (in workspace)
             processing = true;
             try {
@@ -873,20 +932,36 @@ export async function startRepl(program, resumeMode) {
 }
 function runSystemCommand(input, rl, cwd) {
     return new Promise((resolve) => {
+        // Fully release the TTY so interactive children (python3, bash, etc.)
+        // get a clean terminal with proper echo. `rl.pause()` alone doesn't
+        // reset raw mode or release stdin — readline keeps it in line-editing
+        // mode where typed characters don't display until our REPL reads a line.
+        const stdin = process.stdin;
+        const wasRaw = stdin.isTTY ? !!stdin.isRaw : false;
         rl.pause();
+        if (stdin.isTTY && typeof stdin.setRawMode === 'function') {
+            try {
+                stdin.setRawMode(false);
+            }
+            catch { }
+        }
         const child = spawn(input, {
             shell: true,
             stdio: 'inherit',
             cwd: cwd || process.cwd(),
         });
-        child.on('close', () => {
-            rl.resume();
-            resolve();
-        });
-        child.on('error', () => {
+        const restore = () => {
+            if (stdin.isTTY && typeof stdin.setRawMode === 'function' && wasRaw) {
+                try {
+                    stdin.setRawMode(true);
+                }
+                catch { }
+            }
             rl.resume();
             resolve();
-        });
+        };
+        child.on('close', restore);
+        child.on('error', restore);
     });
 }
 function mapCommand(input) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.74",
+  "version": "2.19.76",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {