icoa-cli 2.19.77 → 2.19.78

package/dist/lib/gemini.js

@@ -1,6 +1,24 @@
 import { GoogleGenAI } from '@google/genai';
 import chalk from 'chalk';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
 import { getConfig, saveConfig } from './config.js';
+import { getRealExamState } from './exam-state.js';
+const __dirname_gemini = dirname(fileURLToPath(import.meta.url));
+let _cachedVersion = null;
+function getCliVersion() {
+    if (_cachedVersion)
+        return _cachedVersion;
+    try {
+        const pkg = JSON.parse(readFileSync(join(__dirname_gemini, '..', '..', 'package.json'), 'utf-8'));
+        _cachedVersion = pkg.version || 'unknown';
+    }
+    catch {
+        _cachedVersion = 'unknown';
+    }
+    return _cachedVersion;
+}
 const SYSTEM_PROMPTS = {
     A: `You are an AI assistant in a cybersecurity CTF competition called ICOA.
 You are providing Level A (General Guidance) to a competitor.
@@ -170,24 +188,42 @@ export async function createChatSession(context, customSystemPrompt) {
     return {
         async sendMessage(msg) {
             messages.push({ role: 'user', text: msg });
+            // Attach exam token if contestant is in a real exam — grants full
+            // 2048 maxTokens and higher rate limit. Demo/anonymous users rely on
+            // the User-Agent gate on the server side.
+            const realExam = getRealExamState();
+            const payload = {
+                systemPrompt,
+                messages,
+                model: modelName,
+                maxTokens: 2048,
+                deviceFingerprint: fp,
+            };
+            if (realExam?.session?.token) {
+                payload.examToken = realExam.session.token;
+            }
             const res = await fetch(`${serverUrl}/api/icoa/ai/chat`, {
                 method: 'POST',
-                headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({
-                    systemPrompt,
-                    messages,
-                    model: modelName,
-                    maxTokens: 2048,
-                    deviceFingerprint: fp,
-                }),
+                headers: {
+                    'Content-Type': 'application/json',
+                    'User-Agent': `icoa-cli/${getCliVersion()}`,
+                },
+                body: JSON.stringify(payload),
                 signal: AbortSignal.timeout(60_000),
             });
             if (!res.ok) {
                 const err = await res.json().catch(() => ({ message: 'AI proxy error' }));
+                const msg = err.message || `AI proxy returned ${res.status}`;
+                if (res.status === 401) {
+                    throw new Error(chalk.yellow('⚠ ') + 'Exam token expired. Re-enter via `exam <token>`.');
+                }
+                if (res.status === 403) {
+                    throw new Error(chalk.yellow('⚠ ') + msg);
+                }
                 if (res.status === 429) {
-                    throw new Error(chalk.yellow('⏳ ') + (err.message || 'Too many requests. Please wait a moment and try again.'));
+                    throw new Error(chalk.yellow('⏳ ') + msg);
                 }
-                throw new Error(err.message || `AI proxy returned ${res.status}`);
+                throw new Error(msg);
             }
             const json = await res.json();
             const text = filterFlagPatterns(json.data?.text || '');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.77",
+  "version": "2.19.78",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {