icoa-cli 2.2.0 → 2.2.1

package/dist/index.js

@@ -36,7 +36,7 @@ ${LINE}
    ${chalk.white('Sydney, Australia')}  ${chalk.gray('Jun 27 - Jul 2, 2026')}
    ${chalk.cyan.underline('https://icoa2026.au')}
 
-   ${chalk.gray('CLI-Native Competition Terminal  v2.2.0')}
+   ${chalk.gray('CLI-Native Competition Terminal  v2.2.1')}
 
 ${LINE}
 `;

package/dist/lib/ctfd-client.d.ts

@@ -22,6 +22,7 @@ export declare class CTFdClient {
     }>;
     getChallengeFiles(id: number): Promise<string[]>;
     downloadFile(filePath: string, destDir: string): Promise<string>;
+    getTokenViaIcoaApi(username: string, password: string): Promise<string | null>;
     loginWithCredentials(username: string, password: string): Promise<{
         token: string;
         session: string;

package/dist/lib/ctfd-client.js

@@ -136,7 +136,32 @@ export class CTFdClient {
         await pipeline(Readable.fromWeb(res.body), fileStream);
         return destPath;
     }
+    async getTokenViaIcoaApi(username, password) {
+        // Try ICOA token API (port 9090) first
+        try {
+            const res = await fetch(`${this.baseUrl}:9090/api/icoa/token`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ name: username, password }),
+                signal: AbortSignal.timeout(5000),
+            });
+            if (res.ok) {
+                const json = await res.json();
+                if (json.success && json.data?.token) {
+                    return json.data.token;
+                }
+            }
+        }
+        catch { /* API not available, try standard flow */ }
+        return null;
+    }
     async loginWithCredentials(username, password) {
+        // Try ICOA token API first (fastest path)
+        const icoaToken = await this.getTokenViaIcoaApi(username, password);
+        if (icoaToken) {
+            return { token: icoaToken, session: '', csrf: '' };
+        }
+        // Fallback: standard CTFd login flow
         // Step 1: GET /login to get nonce
         const loginPageRes = await fetch(`${this.baseUrl}/login`);
         const loginHtml = await loginPageRes.text();

package/dist/repl.js

@@ -27,7 +27,7 @@ const BLOCKED_COMMANDS = new Set([
     'iptables', 'ufw', // firewall
 ]);
 const INTERCEPT = '__REPL_NO_EXIT__';
-const VERSION = '2.2.0';
+const VERSION = '2.2.1';
 export async function startRepl(program, resumeMode) {
     const config = getConfig();
     const connected = isConnected();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {