icoa-cli 2.19.75 → 2.19.77

package/dist/repl.js

@@ -17,6 +17,55 @@ import { startLogSync, stopLogSync } from './lib/log-sync.js';
 import { existsSync, mkdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
+// Pre-import commonly-used CTF modules on interactive Python startup.
+// Failures are silent — selectors import only what's available so a partial
+// exam setup doesn't crash the shell. Creates ~/.icoa/python-startup.py once.
+const PYTHON_STARTUP_CONTENT = `# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP
+import base64, struct, hashlib, re, json, os, sys, binascii
+try: import requests
+except ImportError: pass
+try: from Crypto.Cipher import AES
+except ImportError: pass
+try: from Crypto.Util.Padding import pad, unpad
+except ImportError: pass
+try: from pwn import xor, p32, u32, p64, u64
+except ImportError: pass
+try: import bs4
+except ImportError: pass
+try: import numpy as np
+except ImportError: pass
+`;
+function ensurePythonStartup() {
+    const icoaDir = join(homedir(), '.icoa');
+    if (!existsSync(icoaDir))
+        mkdirSync(icoaDir, { recursive: true });
+    const path = join(icoaDir, 'python-startup.py');
+    if (!existsSync(path)) {
+        const { writeFileSync } = require('node:fs');
+        writeFileSync(path, PYTHON_STARTUP_CONTENT);
+    }
+    return path;
+}
+function printPythonBanner() {
+    console.log();
+    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log(chalk.bold.white('  Python ready — ICOA exam toolkit pre-loaded'));
+    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log();
+    console.log(chalk.white('  Already imported: ') + chalk.gray('base64, struct, hashlib, re, json, binascii'));
+    console.log(chalk.white('  Also available:   ') + chalk.gray('requests, bs4, numpy, AES, pad/unpad, xor, p32/u32/p64/u64'));
+    console.log();
+    console.log(chalk.yellow('  Quick examples:'));
+    console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ') + chalk.gray('# decode base64'));
+    console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ') + chalk.gray('# hex → bytes'));
+    console.log(chalk.gray('    "ICOA{x}".encode()                 ') + chalk.gray('# str → bytes'));
+    console.log(chalk.gray('    [chr(c) for c in [73,67,79,65]]    ') + chalk.gray('# ASCII codes'));
+    console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ') + chalk.gray('# pwntools XOR'));
+    console.log();
+    console.log(chalk.gray('  Exit:  ') + chalk.white('exit()') + chalk.gray('  or Ctrl-D'));
+    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log();
+}
 // Compute the REPL prompt based on current state.
 // Real exam wins over demo (matches getExamState() priority). Chat modes have
 // their own prompts and are handled separately.
@@ -706,8 +755,11 @@ export async function startRepl(program, resumeMode) {
         const organizerCommands = ['join', 'exam', 'demo', 'retry', 'next', 'prev', 'logout', 'setup', 'lang', 'ref', 'ctf', 'mark', 'unmark', 'review', 'submit'];
         // Selection mode allows shell commands prefixed with ! — contestants
         // need !python3, !cat, !base64 etc. for practical questions (Q31-Q40).
+        // Also allow bare `python` / `python3` / `python3.12` since contestants
+        // naturally type that when they want interactive Python.
         // BLOCKED_COMMANDS check downstream still rejects dangerous ones.
-        const isShellCommand = input.startsWith('!') || cmd.startsWith('!');
+        const isPythonCmd = /^python3?(\.\d+)?$/.test(cmd);
+        const isShellCommand = input.startsWith('!') || cmd.startsWith('!') || isPythonCmd;
         if (mode === 'selection' && !isShellCommand && !selectionCommands.includes(cmd)) {
             console.log(chalk.gray('  Not available in Selection mode.'));
             if (examState) {
@@ -792,6 +844,16 @@ export async function startRepl(program, resumeMode) {
             }
             // Ensure workspace directory
             const cwd = ensureWorkspace();
+            // Interactive Python (no script args, no -c): print welcome banner and
+            // pre-import common CTF modules via a startup file. Makes entry painless
+            // for contestants — they land in a shell with base64/struct/hashlib/pwn
+            // already imported and see a 4-line cheat sheet of common one-liners.
+            const isInteractivePython = /^(\S*python3?(\.\d+)?)\s*$/.test(resolvedInput);
+            if (isInteractivePython) {
+                const startupPath = ensurePythonStartup();
+                resolvedInput = `PYTHONSTARTUP="${startupPath}" ${resolvedInput}`;
+                printPythonBanner();
+            }
             // Route to Docker sandbox if available, otherwise system shell (in workspace)
             processing = true;
             try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.75",
+  "version": "2.19.77",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {