icoa-cli 2.19.77 → 2.19.79

package/dist/commands/exam.js

@@ -1891,22 +1891,33 @@ export function registerExamCommand(program) {
             console.log();
             return;
         }
-        // Skip if already set up
+        // Skip if already set up — but only if MOST packages actually installed.
+        // If previous run had 0 or very few successes, retry instead of saying
+        // "already set up" (which is misleading and strands the user).
         const existingSetup = getExamSetup();
         if (existingSetup) {
-            console.log();
-            console.log(chalk.green('  ✓ ') + chalk.green('Environment already set up'));
-            console.log(chalk.gray(`    Completed: ${existingSetup.completedAt.split('T')[0]}`));
-            console.log(chalk.gray(`    Python: ${existingSetup.pythonVersion}`));
-            console.log(chalk.gray(`    Packages: ${existingSetup.installedPackages.length} installed`));
-            if (existingSetup.failedPackages.length > 0) {
-                console.log(chalk.yellow(`    Failed: ${existingSetup.failedPackages.join(', ')}`));
+            const installedCount = existingSetup.installedPackages.length;
+            const totalAttempted = installedCount + existingSetup.failedPackages.length;
+            const successRate = totalAttempted > 0 ? installedCount / totalAttempted : 0;
+            if (installedCount >= 8 || successRate >= 0.7) {
+                console.log();
+                console.log(chalk.green('  ✓ ') + chalk.green('Environment already set up'));
+                console.log(chalk.gray(`    Completed: ${existingSetup.completedAt.split('T')[0]}`));
+                console.log(chalk.gray(`    Python: ${existingSetup.pythonVersion}`));
+                console.log(chalk.gray(`    Packages: ${installedCount} installed`));
+                if (existingSetup.failedPackages.length > 0) {
+                    console.log(chalk.yellow(`    Failed: ${existingSetup.failedPackages.join(', ')}`));
+                }
+                console.log();
+                console.log(chalk.white('  Next step: ') + chalk.bold.cyan('exam <token>'));
+                console.log(chalk.gray('  Or type ') + chalk.bold.cyan('back') + chalk.gray(' to return to the main menu.'));
+                console.log();
+                return;
             }
+            // Prior setup mostly failed — retry
             console.log();
-            console.log(chalk.white('  Next step: ') + chalk.bold.cyan('exam <token>'));
-            console.log(chalk.gray('  Or type ') + chalk.bold.cyan('back') + chalk.gray(' to return to the main menu.'));
+            console.log(chalk.yellow(`  Previous setup had only ${installedCount}/${totalAttempted} packages. Retrying...`));
             console.log();
-            return;
         }
         console.log();
         printHeader('Exam Environment Setup');
@@ -2006,11 +2017,39 @@ export function registerExamCommand(program) {
         console.log();
         console.log(chalk.white(`  Installing ${PACKAGES.length} packages...`));
         console.log();
+        // Detect PEP 668 "externally-managed-environment" — modern Ubuntu/Debian/Kali
+        // block system-wide pip installs. Try a harmless install to detect.
+        let pipExtraFlags = '';
+        try {
+            execSync(`${pythonBin} -m pip install --dry-run pip 2>&1`, { encoding: 'utf-8', timeout: 10000 });
+        }
+        catch (e) {
+            const msg = String(e?.stdout || e?.stderr || e?.message || '');
+            if (/externally-managed-environment|break-system-packages/i.test(msg)) {
+                // Pick the safer option: --user (installs to ~/.local, no sudo needed)
+                pipExtraFlags = '--user --break-system-packages';
+                console.log(chalk.yellow('  ℹ PEP 668 detected — using --user install (no sudo needed)'));
+                console.log();
+            }
+        }
+        // Python 3.13 warning: pwntools may fail to build
+        const pyParts = pythonVersion.split('.').map(Number);
+        if (pyParts[0] === 3 && pyParts[1] >= 13) {
+            console.log(chalk.yellow(`  ⚠ Python ${pythonVersion} detected`));
+            console.log(chalk.gray('    Some packages (pwntools, scapy) may not have wheels yet for 3.13.'));
+            console.log(chalk.gray('    Python 3.12 is recommended. Install:'));
+            if (process.platform === 'linux') {
+                console.log(chalk.green('      sudo apt install python3.12 python3.12-venv'));
+                console.log(chalk.green('      sudo update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.12 1'));
+            }
+            console.log();
+        }
         const installed = [];
         const failed = [];
+        let firstError = '';
         for (const pkg of PACKAGES) {
             try {
-                execSync(`${pythonBin} -m pip install "${pkg}" --quiet 2>/dev/null`, {
+                execSync(`${pythonBin} -m pip install "${pkg}" ${pipExtraFlags} --quiet 2>&1`, {
                     encoding: 'utf-8', timeout: 180000, stdio: 'pipe',
                 });
                 const importName = IMPORT_MAP[pkg] || pkg;
@@ -2028,24 +2067,50 @@ export function registerExamCommand(program) {
                 console.log(chalk.green(`  ✓ ${pkg}`) + (ver ? chalk.gray(` (${ver})`) : ''));
                 installed.push(ver ? `${pkg}==${ver}` : pkg);
             }
-            catch {
-                console.log(chalk.red(`  ✗ ${pkg}`));
-                failed.push(pkg);
+            catch (e) {
+                const raw = String(e?.stdout || e?.stderr || e?.message || '').slice(-400);
+                const short = raw.split('\n').filter((l) => l.trim()).slice(-2).join(' | ').slice(0, 120);
+                console.log(chalk.red(`  ✗ ${pkg}`) + chalk.gray(`  ${short}`));
+                failed.push({ pkg, error: short });
+                if (!firstError)
+                    firstError = raw;
             }
         }
+        // If wholesale failure, show the first full error so user can debug
+        if (installed.length === 0 && firstError) {
+            console.log();
+            console.log(chalk.yellow('  First error detail (for debugging):'));
+            console.log(chalk.gray('  ' + firstError.split('\n').slice(-6).join('\n  ')));
+        }
         // Save state
         saveExamSetup({
             completedAt: new Date().toISOString(),
             pythonVersion,
             installedPackages: installed,
-            failedPackages: failed,
+            failedPackages: failed.map((f) => f.pkg),
         });
         console.log();
         if (failed.length === 0) {
             printSuccess(`Environment ready! All ${PACKAGES.length} packages installed.`);
         }
+        else if (installed.length === 0) {
+            printError(`Setup failed — 0 of ${PACKAGES.length} packages installed.`);
+            console.log();
+            console.log(chalk.yellow('  Troubleshooting:'));
+            if (pyParts[0] === 3 && pyParts[1] >= 13) {
+                console.log(chalk.gray('    Python 3.13 is too new — most CTF libraries lack wheels.'));
+                console.log(chalk.gray('    Install Python 3.12 and re-run exam setup.'));
+            }
+            else {
+                console.log(chalk.gray('    • Check you have internet (pip.pypa.io must be reachable)'));
+                console.log(chalk.gray('    • Try: ') + chalk.cyan(`${pythonBin} -m pip install pwntools`) + chalk.gray(' — see full error'));
+                console.log(chalk.gray('    • On Kali/Ubuntu 22+: might need python3.12-dev + build-essential'));
+            }
+            console.log();
+            console.log(chalk.white('  Rerun when fixed: ') + chalk.bold.cyan('exam setup'));
+        }
         else {
-            printWarning(`${installed.length}/${PACKAGES.length} packages installed. ${failed.length} failed: ${failed.join(', ')}`);
+            printWarning(`${installed.length}/${PACKAGES.length} packages installed. ${failed.length} failed: ${failed.map((f) => f.pkg).join(', ')}`);
         }
         // Python usage tutorial for beginners
         console.log();

package/dist/lib/gemini.js

@@ -1,6 +1,24 @@
 import { GoogleGenAI } from '@google/genai';
 import chalk from 'chalk';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
 import { getConfig, saveConfig } from './config.js';
+import { getRealExamState } from './exam-state.js';
+const __dirname_gemini = dirname(fileURLToPath(import.meta.url));
+let _cachedVersion = null;
+function getCliVersion() {
+    if (_cachedVersion)
+        return _cachedVersion;
+    try {
+        const pkg = JSON.parse(readFileSync(join(__dirname_gemini, '..', '..', 'package.json'), 'utf-8'));
+        _cachedVersion = pkg.version || 'unknown';
+    }
+    catch {
+        _cachedVersion = 'unknown';
+    }
+    return _cachedVersion;
+}
 const SYSTEM_PROMPTS = {
     A: `You are an AI assistant in a cybersecurity CTF competition called ICOA.
 You are providing Level A (General Guidance) to a competitor.
@@ -170,24 +188,42 @@ export async function createChatSession(context, customSystemPrompt) {
     return {
         async sendMessage(msg) {
             messages.push({ role: 'user', text: msg });
+            // Attach exam token if contestant is in a real exam — grants full
+            // 2048 maxTokens and higher rate limit. Demo/anonymous users rely on
+            // the User-Agent gate on the server side.
+            const realExam = getRealExamState();
+            const payload = {
+                systemPrompt,
+                messages,
+                model: modelName,
+                maxTokens: 2048,
+                deviceFingerprint: fp,
+            };
+            if (realExam?.session?.token) {
+                payload.examToken = realExam.session.token;
+            }
             const res = await fetch(`${serverUrl}/api/icoa/ai/chat`, {
                 method: 'POST',
-                headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({
-                    systemPrompt,
-                    messages,
-                    model: modelName,
-                    maxTokens: 2048,
-                    deviceFingerprint: fp,
-                }),
+                headers: {
+                    'Content-Type': 'application/json',
+                    'User-Agent': `icoa-cli/${getCliVersion()}`,
+                },
+                body: JSON.stringify(payload),
                 signal: AbortSignal.timeout(60_000),
             });
             if (!res.ok) {
                 const err = await res.json().catch(() => ({ message: 'AI proxy error' }));
+                const msg = err.message || `AI proxy returned ${res.status}`;
+                if (res.status === 401) {
+                    throw new Error(chalk.yellow('⚠ ') + 'Exam token expired. Re-enter via `exam <token>`.');
+                }
+                if (res.status === 403) {
+                    throw new Error(chalk.yellow('⚠ ') + msg);
+                }
                 if (res.status === 429) {
-                    throw new Error(chalk.yellow('⏳ ') + (err.message || 'Too many requests. Please wait a moment and try again.'));
+                    throw new Error(chalk.yellow('⏳ ') + msg);
                 }
-                throw new Error(err.message || `AI proxy returned ${res.status}`);
+                throw new Error(msg);
             }
             const json = await res.json();
             const text = filterFlagPatterns(json.data?.text || '');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.77",
+  "version": "2.19.79",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {