icoa-cli 2.19.82 → 2.19.84

package/dist/commands/env.js

@@ -44,7 +44,7 @@ const PYTHON_LIBS = [
     { name: 'pyserial', check: 'python3 -c "import serial"', install: 'pyserial==3.5', category: 'Security Tools' },
 ];
 // ══════════════════════════════════════════════════════════
-// 82 System Tools — brew (Mac) / apt (Ubuntu) / choco (Win)
+// 83 System Tools — brew (Mac) / apt (Ubuntu) / choco (Win)
 // ══════════════════════════════════════════════════════════
 const W = process.platform === 'win32';
 const CMD = (unix, win) => W ? (win || `where ${unix}`) : `which ${unix}`;
@@ -109,6 +109,8 @@ const SYSTEM_TOOLS = [
     { name: 'xxd', check: CMD('xxd'), brew: 'vim', apt: 'xxd', category: 'Forensics' },
     { name: 'pdftotext', check: CMD('pdftotext'), brew: 'poppler', apt: 'poppler-utils', category: 'Forensics' },
     { name: 'pngcheck', check: CMD('pngcheck'), brew: 'pngcheck', apt: 'pngcheck', category: 'Forensics' },
+    // sleuthkit — disk-image forensics (mmls/fls/icat/blkcat + 20 more)
+    { name: 'sleuthkit', check: CMD('mmls'), brew: 'sleuthkit', apt: 'sleuthkit', choco: 'sleuthkit', category: 'Forensics' },
     // Crypto & Password (4)
     { name: 'john', check: CMD('john'), brew: 'john', apt: 'john', choco: 'john', category: 'Crypto & Password' },
     { name: 'hashcat', check: CMD('hashcat'), brew: 'hashcat', apt: 'hashcat', choco: 'hashcat', category: 'Crypto & Password' },
@@ -270,12 +272,12 @@ function getPythonFullVersion() {
 }
 export function registerEnvCommand(program) {
     const envCmd = program.command('env').description('Manage competition environment');
-    envCmd.command('status').alias('check').description('Check all 109 tools').action(() => showStatus());
+    envCmd.command('status').alias('check').description('Check all 110 tools').action(() => showStatus());
     envCmd.command('setup').description('Install all Python libraries + system tools').action(async () => { await installAll(); });
     envCmd.command('python').description('Show Python 3.12 install guide for your platform').action(() => showPythonInstallGuide());
     envCmd.action(() => showStatus());
 }
-// Lightweight Python 3.12 install guide for Selection mode (no 109-tool check).
+// Lightweight Python 3.12 install guide for Selection mode (no 110-tool check).
 // Detects distro on Linux so contestants get the right command the first time.
 function showPythonInstallGuide() {
     const os = platform();
@@ -405,7 +407,7 @@ function showStatus() {
     console.log(chalk.gray('               You need these for most challenges'));
     console.log(chalk.yellow('  Recommended') + chalk.gray(' pycryptodome, beautifulsoup4, scapy, sympy'));
     console.log(chalk.gray('               Covers Web, Crypto, and Forensics'));
-    console.log(chalk.gray('  Full (109)  All tools for every category'));
+    console.log(chalk.gray('  Full (110)  All tools for every category'));
     console.log();
     console.log(chalk.gray('  Missing tools? Run ') + chalk.bold.cyan('env setup') + chalk.gray(' to install everything.'));
     console.log(chalk.gray('  ─────────────────────────────────────────────'));
@@ -502,7 +504,7 @@ function showStatus() {
     const total = installed + missing;
     console.log();
     console.log(chalk.gray('  ─────────────────────────────────────────────'));
-    console.log(`  ${chalk.green(`✓ ${installed}/${total}`)}  ${missing > 0 ? chalk.red(`✗ ${missing} missing`) : chalk.green('All 109 ready!')}`);
+    console.log(`  ${chalk.green(`✓ ${installed}/${total}`)}  ${missing > 0 ? chalk.red(`✗ ${missing} missing`) : chalk.green('All 110 ready!')}`);
     if (missing > 0) {
         console.log(chalk.gray('  Install everything: ') + chalk.white('env setup'));
     }

package/dist/commands/exam.js

@@ -101,7 +101,7 @@ async function playDemoIntro() {
         await waitOrSkip(1500);
         if (skipped)
             return;
-        console.log(chalk.gray('   · 109 CTF tools pre-configured'));
+        console.log(chalk.gray('   · 110 CTF tools pre-configured'));
         await waitOrSkip(400);
         if (skipped)
             return;
@@ -883,15 +883,9 @@ export function registerExamCommand(program) {
             }
             return;
         }
-        // Eliminate one wrong option (async for demo answers)
-        const doEliminate = (correct) => {
-            const wrongRemaining = remaining.filter((k) => k !== correct && !eliminated.includes(k));
-            if (wrongRemaining.length === 0)
-                return;
-            // Pick random wrong option to eliminate
-            const toRemove = wrongRemaining[Math.floor(Math.random() * wrongRemaining.length)];
+        // Apply elimination of a specific option
+        const applyEliminate = (toRemove) => {
             eliminated.push(toRemove);
-            // Update state
             if (!help.eliminated[currentQ])
                 help.eliminated[currentQ] = [];
             help.eliminated[currentQ] = eliminated;
@@ -909,31 +903,42 @@ export function registerExamCommand(program) {
             console.log(chalk.yellow(`  💡 Option ${toRemove} eliminated!`) + chalk.gray(`  (help ${help.used}/${help.max})`));
             printQuestion(q, state.answers[q.number]);
         };
+        // Pick a random wrong option to eliminate (needs correct answer)
+        const doEliminate = (correct) => {
+            const wrongRemaining = remaining.filter((k) => k !== correct && !eliminated.includes(k));
+            if (wrongRemaining.length === 0)
+                return;
+            applyEliminate(wrongRemaining[Math.floor(Math.random() * wrongRemaining.length)]);
+        };
         if (state.session.examId === 'demo-free' && q.answer) {
             doEliminate(q.answer);
         }
         else {
-            // For server exams, we don't know the answer — eliminate random non-selected option
-            const userAnswer = state.answers[currentQ];
-            const candidates = remaining.filter((k) => k !== userAnswer);
-            const toRemove = candidates[Math.floor(Math.random() * candidates.length)];
-            eliminated.push(toRemove);
-            if (!help.eliminated[currentQ])
-                help.eliminated[currentQ] = [];
-            help.eliminated[currentQ] = eliminated;
-            help.perQ[currentQ] = qHelps + 1;
-            help.used++;
-            state._helpUsed = help.used;
-            state._helpMax = help.max;
-            state._helpPerQ = help.perQ;
-            state._eliminated = help.eliminated;
-            if (!state.interactions)
-                state.interactions = [];
-            state.interactions.push({ ts: new Date().toISOString(), q: currentQ, type: 'help_used', result: `eliminated ${toRemove}` });
-            saveExamState(state);
-            console.log();
-            console.log(chalk.yellow(`  💡 Option ${toRemove} eliminated!`) + chalk.gray(`  (help ${help.used}/${help.max})`));
-            printQuestion(q, state.answers[q.number]);
+            // Server-authoritative: ask server which wrong option to eliminate
+            const config = getConfig();
+            const serverUrl = config.ctfdUrl || 'https://practice.icoa2026.au';
+            const token = state.session?.token || '';
+            try {
+                const res = await fetch(`${serverUrl}/api/icoa/exams/${state.session.examId}/help`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', 'User-Agent': 'icoa-cli' },
+                    body: JSON.stringify({ token, question: currentQ, eliminated }),
+                    signal: AbortSignal.timeout(5000),
+                });
+                const json = await res.json();
+                const toRemove = json?.data?.eliminate;
+                if (toRemove && ['A', 'B', 'C', 'D'].includes(toRemove)) {
+                    applyEliminate(toRemove);
+                }
+                else {
+                    console.log();
+                    console.log(chalk.gray('  Server did not return a valid option. Try again.'));
+                }
+            }
+            catch {
+                console.log();
+                console.log(chalk.gray('  Could not reach server for help. Check your connection.'));
+            }
         }
     });
     // ─── exam more-help ───

package/dist/repl.js

@@ -245,7 +245,7 @@ export async function startRepl(program, resumeMode) {
             console.log(chalk.bold.white('   What Makes ICOA Different'));
             console.log(chalk.gray('   · AI-native     AI teammate, AI adversary, AI translation'));
             console.log(chalk.gray('   · CLI OS        Complete competition environment in terminal'));
-            console.log(chalk.gray('   · 109 tools     pwntools, z3, gdb, nmap... pre-configured'));
+            console.log(chalk.gray('   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured'));
             console.log(chalk.gray('   · Global scale  15,000+ concurrent exams · 15 languages'));
             console.log();
             console.log(chalk.bold.white('   Competition Format'));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.82",
+  "version": "2.19.84",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {