icoa-cli 2.19.81 → 2.19.83

package/dist/commands/env.js

@@ -44,7 +44,7 @@ const PYTHON_LIBS = [
     { name: 'pyserial', check: 'python3 -c "import serial"', install: 'pyserial==3.5', category: 'Security Tools' },
 ];
 // ══════════════════════════════════════════════════════════
-// 82 System Tools — brew (Mac) / apt (Ubuntu) / choco (Win)
+// 83 System Tools — brew (Mac) / apt (Ubuntu) / choco (Win)
 // ══════════════════════════════════════════════════════════
 const W = process.platform === 'win32';
 const CMD = (unix, win) => W ? (win || `where ${unix}`) : `which ${unix}`;
@@ -109,6 +109,8 @@ const SYSTEM_TOOLS = [
     { name: 'xxd', check: CMD('xxd'), brew: 'vim', apt: 'xxd', category: 'Forensics' },
     { name: 'pdftotext', check: CMD('pdftotext'), brew: 'poppler', apt: 'poppler-utils', category: 'Forensics' },
     { name: 'pngcheck', check: CMD('pngcheck'), brew: 'pngcheck', apt: 'pngcheck', category: 'Forensics' },
+    // sleuthkit — disk-image forensics (mmls/fls/icat/blkcat + 20 more)
+    { name: 'sleuthkit', check: CMD('mmls'), brew: 'sleuthkit', apt: 'sleuthkit', choco: 'sleuthkit', category: 'Forensics' },
     // Crypto & Password (4)
     { name: 'john', check: CMD('john'), brew: 'john', apt: 'john', choco: 'john', category: 'Crypto & Password' },
     { name: 'hashcat', check: CMD('hashcat'), brew: 'hashcat', apt: 'hashcat', choco: 'hashcat', category: 'Crypto & Password' },
@@ -270,12 +272,12 @@ function getPythonFullVersion() {
 }
 export function registerEnvCommand(program) {
     const envCmd = program.command('env').description('Manage competition environment');
-    envCmd.command('status').alias('check').description('Check all 109 tools').action(() => showStatus());
+    envCmd.command('status').alias('check').description('Check all 110 tools').action(() => showStatus());
     envCmd.command('setup').description('Install all Python libraries + system tools').action(async () => { await installAll(); });
     envCmd.command('python').description('Show Python 3.12 install guide for your platform').action(() => showPythonInstallGuide());
     envCmd.action(() => showStatus());
 }
-// Lightweight Python 3.12 install guide for Selection mode (no 109-tool check).
+// Lightweight Python 3.12 install guide for Selection mode (no 110-tool check).
 // Detects distro on Linux so contestants get the right command the first time.
 function showPythonInstallGuide() {
     const os = platform();
@@ -285,21 +287,37 @@ function showPythonInstallGuide() {
     console.log();
     let currentPy = '';
     let pyStatus = 'missing';
-    try {
-        const out = execSync('python3 --version', { encoding: 'utf-8', timeout: 3000 }).trim();
-        currentPy = out.replace('Python ', '');
-        const parts = currentPy.split('.').map(Number);
-        if (parts[0] === 3 && parts[1] === 12)
-            pyStatus = 'ok';
-        else if (parts[0] === 3 && parts[1] >= 10 && parts[1] < 12)
-            pyStatus = 'old';
-        else if (parts[0] === 3 && parts[1] > 12)
-            pyStatus = 'new';
-        else
-            pyStatus = 'missing';
-    }
-    catch {
-        pyStatus = 'missing';
+    // Prefer the versioned binary if available. On macOS with Homebrew, `python3`
+    // often points to the latest (e.g. 3.13) while python@3.12 is also installed
+    // at /opt/homebrew/opt/python@3.12/bin/python3.12. Don't force the user to
+    // reinstall just because the default changed.
+    const pyProbes = [
+        'python3.12 --version',
+        '/opt/homebrew/opt/python@3.12/bin/python3.12 --version',
+        '/usr/local/opt/python@3.12/bin/python3.12 --version',
+        'python3 --version',
+    ];
+    for (const cmd of pyProbes) {
+        try {
+            const out = execSync(cmd, { encoding: 'utf-8', timeout: 3000 }).trim();
+            const ver = out.replace('Python ', '');
+            const parts = ver.split('.').map(Number);
+            // Only accept as "ok" if this probe returned 3.12. Otherwise keep trying.
+            if (parts[0] === 3 && parts[1] === 12) {
+                currentPy = ver;
+                pyStatus = 'ok';
+                break;
+            }
+            // Remember the last-seen version for fallback reporting
+            currentPy = ver;
+            if (parts[0] === 3 && parts[1] >= 10 && parts[1] < 12)
+                pyStatus = 'old';
+            else if (parts[0] === 3 && parts[1] > 12)
+                pyStatus = 'new';
+            else
+                pyStatus = 'missing';
+        }
+        catch { /* try next probe */ }
     }
     if (pyStatus === 'ok') {
         console.log(chalk.green(`  ✓ Python ${currentPy} — you're good!`));
@@ -389,7 +407,7 @@ function showStatus() {
     console.log(chalk.gray('               You need these for most challenges'));
     console.log(chalk.yellow('  Recommended') + chalk.gray(' pycryptodome, beautifulsoup4, scapy, sympy'));
     console.log(chalk.gray('               Covers Web, Crypto, and Forensics'));
-    console.log(chalk.gray('  Full (109)  All tools for every category'));
+    console.log(chalk.gray('  Full (110)  All tools for every category'));
     console.log();
     console.log(chalk.gray('  Missing tools? Run ') + chalk.bold.cyan('env setup') + chalk.gray(' to install everything.'));
     console.log(chalk.gray('  ─────────────────────────────────────────────'));
@@ -486,7 +504,7 @@ function showStatus() {
     const total = installed + missing;
     console.log();
     console.log(chalk.gray('  ─────────────────────────────────────────────'));
-    console.log(`  ${chalk.green(`✓ ${installed}/${total}`)}  ${missing > 0 ? chalk.red(`✗ ${missing} missing`) : chalk.green('All 109 ready!')}`);
+    console.log(`  ${chalk.green(`✓ ${installed}/${total}`)}  ${missing > 0 ? chalk.red(`✗ ${missing} missing`) : chalk.green('All 110 ready!')}`);
     if (missing > 0) {
         console.log(chalk.gray('  Install everything: ') + chalk.white('env setup'));
     }

package/dist/commands/exam.js

@@ -101,7 +101,7 @@ async function playDemoIntro() {
         await waitOrSkip(1500);
         if (skipped)
             return;
-        console.log(chalk.gray('   · 109 CTF tools pre-configured'));
+        console.log(chalk.gray('   · 110 CTF tools pre-configured'));
         await waitOrSkip(400);
         if (skipped)
             return;

package/dist/repl.js

@@ -103,21 +103,35 @@ const VERSION = '2.5.1';
 // Quick Python version check (used in Selection menu startup warning).
 // Returns {ok, version, status}. Silent/defensive — any error means 'missing'.
 function checkPython() {
-    try {
-        const out = execSyncFn('python3 --version', { encoding: 'utf-8', timeout: 2000 }).trim();
-        const version = out.replace('Python ', '');
-        const [maj, min] = version.split('.').map(Number);
-        if (maj === 3 && min === 12)
-            return { ok: true, version, status: 'ok' };
-        if (maj === 3 && min >= 10 && min < 12)
-            return { ok: true, version, status: 'old' };
-        if (maj === 3 && min > 12)
-            return { ok: true, version, status: 'new' };
-        return { ok: false, version, status: 'missing' };
-    }
-    catch {
-        return { ok: false, version: '', status: 'missing' };
+    // Probe python3.12 first — macOS Homebrew installs python@3.12 alongside a
+    // newer default python3, and we don't want to flag a 3.12-ready machine just
+    // because the default alias moved to 3.13.
+    const probes = [
+        'python3.12 --version',
+        '/opt/homebrew/opt/python@3.12/bin/python3.12 --version',
+        '/usr/local/opt/python@3.12/bin/python3.12 --version',
+        'python3 --version',
+    ];
+    let lastVersion = '';
+    let lastStatus = 'missing';
+    for (const cmd of probes) {
+        try {
+            const out = execSyncFn(cmd, { encoding: 'utf-8', timeout: 2000 }).trim();
+            const version = out.replace('Python ', '');
+            const [maj, min] = version.split('.').map(Number);
+            if (maj === 3 && min === 12)
+                return { ok: true, version, status: 'ok' };
+            lastVersion = version;
+            if (maj === 3 && min >= 10 && min < 12)
+                lastStatus = 'old';
+            else if (maj === 3 && min > 12)
+                lastStatus = 'new';
+            else
+                lastStatus = 'missing';
+        }
+        catch { /* try next probe */ }
     }
+    return { ok: lastStatus !== 'missing', version: lastVersion, status: lastStatus };
 }
 function printSelectionMenu() {
     const stats = getDemoStats();
@@ -231,7 +245,7 @@ export async function startRepl(program, resumeMode) {
             console.log(chalk.bold.white('   What Makes ICOA Different'));
             console.log(chalk.gray('   · AI-native     AI teammate, AI adversary, AI translation'));
             console.log(chalk.gray('   · CLI OS        Complete competition environment in terminal'));
-            console.log(chalk.gray('   · 109 tools     pwntools, z3, gdb, nmap... pre-configured'));
+            console.log(chalk.gray('   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured'));
             console.log(chalk.gray('   · Global scale  15,000+ concurrent exams · 15 languages'));
             console.log();
             console.log(chalk.bold.white('   Competition Format'));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.81",
+  "version": "2.19.83",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {