icoa-cli 1.9.1 → 2.0.1

package/dist/commands/env.js

@@ -274,13 +274,19 @@ export function registerEnvCommand(program) {
 function showStatus() {
     console.log();
     const os = platform();
-    const pm = os === 'darwin' ? 'brew' : os === 'linux' ? 'apt' : 'choco';
+    const pm = os === 'darwin' ? 'brew' : os === 'linux' ? 'apt' : 'winget';
     console.log(chalk.bold.white('  ICOA Competition Environment'));
     console.log(chalk.gray('  ─────────────────────────────────────────────'));
     console.log(chalk.gray('  OS:       ') + chalk.white(getOsInfo()));
     console.log(chalk.gray('  Node:     ') + chalk.white(getNodeInfo()));
     console.log(chalk.gray('  Package:  ') + chalk.white(pm));
     console.log(chalk.gray('  Target:   ') + chalk.white(`Python ${PYTHON_TARGET}.x`));
+    if (os === 'win32') {
+        console.log();
+        console.log(chalk.yellow('  Windows: recommend WSL (Ubuntu) for full CTF tool support'));
+        console.log(chalk.gray('  Install WSL: ') + chalk.white('wsl --install'));
+        console.log(chalk.gray('  Then run icoa inside WSL for 100% tool compatibility'));
+    }
     console.log(chalk.gray('  ─────────────────────────────────────────────'));
     // Python version check — use brew 3.12 on macOS
     const pyVer = getPythonMajorMinor();
@@ -316,7 +322,7 @@ function showStatus() {
         }
     }
     currentCategory = '';
-    const pipExe = os === 'darwin' ? '/opt/homebrew/opt/python@3.12/bin/pip3.12' : 'pip3';
+    const pipExe = os === 'darwin' ? '/opt/homebrew/opt/python@3.12/bin/pip3.12' : os === 'win32' ? 'pip' : 'pip3';
     for (const lib of PYTHON_LIBS) {
         if (lib.category !== currentCategory) {
             currentCategory = lib.category;
@@ -324,12 +330,12 @@ function showStatus() {
         }
         const ok = isInstalled(lib.check);
         if (ok) {
-            // Get actual installed version — try pip3.12, then pip3
+            // Get actual installed version
             let ver = '';
-            for (const pip of [pipExe, 'pip3']) {
+            for (const pip of [pipExe, 'pip3', 'pip']) {
                 try {
-                    const pkgName = lib.name.replace('python-magic', 'python_magic').replace('beautifulsoup4', 'beautifulsoup4');
-                    const out = execSync(`${pip} show ${pkgName} 2>/dev/null | grep Version`, { encoding: 'utf-8', timeout: 3000 });
+                    const pkgName = lib.name.replace('python-magic', 'python_magic');
+                    const out = execSync(`${pip} show ${pkgName}`, { encoding: 'utf-8', timeout: 3000, stdio: ['pipe', 'pipe', 'ignore'] });
                     const m = out.match(/Version:\s*(\S+)/);
                     if (m) {
                         ver = m[1];
@@ -381,13 +387,20 @@ async function installAll() {
                 console.log(chalk.gray('  Set default: sudo update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.12 1'));
             }
             else {
-                execSync('choco install -y python312', { stdio: 'inherit' });
+                // Windows: try winget first, then choco
+                try {
+                    execSync('winget install Python.Python.3.12 --accept-package-agreements --accept-source-agreements', { stdio: 'inherit' });
+                }
+                catch {
+                    execSync('choco install -y python312', { stdio: 'inherit' });
+                }
                 console.log(chalk.green('  ✓ Python 3.12 installed'));
             }
         }
         catch {
             console.log(chalk.red('  ✗ Failed to install Python 3.12'));
-            console.log(chalk.gray(`  Manual install: ${os === 'darwin' ? 'brew install python@3.12' : os === 'linux' ? 'sudo apt install python3.12' : 'choco install python312'}`));
+            const hint = os === 'darwin' ? 'brew install python@3.12' : os === 'linux' ? 'sudo apt install python3.12' : 'winget install Python.Python.3.12';
+            console.log(chalk.gray(`  Manual install: ${hint}`));
         }
         console.log();
     }
@@ -395,7 +408,14 @@ async function installAll() {
         console.log(chalk.green(`  ✓ Python 3.12 (${getVersion('python3')})`));
         console.log();
     }
-    // Install system tools via brew (macOS) / apt (Linux) / choco (Windows)
+    // Windows: recommend WSL instead of installing tools natively
+    if (os === 'win32') {
+        console.log(chalk.yellow('  Windows: Most CTF tools require Linux. Recommended:'));
+        console.log(chalk.white('    wsl --install'));
+        console.log(chalk.gray('  Then run icoa inside WSL Ubuntu for full tool support.'));
+        console.log();
+    }
+    // Install system tools via brew (macOS) / apt (Linux)
     const missingSystem = [];
     for (const tool of SYSTEM_TOOLS) {
         if (!isInstalled(tool.check)) {
@@ -404,8 +424,8 @@ async function installAll() {
                 missingSystem.push(tool);
         }
     }
-    if (missingSystem.length > 0) {
-        const pmName = os === 'darwin' ? 'brew' : os === 'linux' ? 'apt' : 'choco';
+    if (missingSystem.length > 0 && os !== 'win32') {
+        const pmName = os === 'darwin' ? 'brew' : 'apt';
         console.log(chalk.bold.white(`  System Tools via ${pmName} (${missingSystem.length} missing)`));
         console.log(chalk.gray('  ─────────────────────────────────────────────'));
         for (const tool of missingSystem) {
@@ -456,6 +476,9 @@ async function installAll() {
         }
         catch { /* fall back to pip3 */ }
     }
+    else if (os === 'win32') {
+        pipCmd = 'pip';
+    }
     // Pre-install system dependencies for packages that need them
     if (os === 'darwin') {
         console.log(chalk.gray('  Installing build dependencies...'));

package/dist/index.js

@@ -36,7 +36,7 @@ ${LINE}
    ${chalk.white('Sydney, Australia')}  ${chalk.gray('Jun 27 - Jul 2, 2026')}
    ${chalk.cyan.underline('https://icoa2026.au')}
 
-   ${chalk.gray('CLI-Native Competition Terminal  v1.9.1')}
+   ${chalk.gray('CLI-Native Competition Terminal  v2.0.1')}
 
 ${LINE}
 `;

package/dist/lib/access.js

@@ -143,10 +143,8 @@ function getDeviceFingerprint() {
             }
         }
         else if (platform() === 'win32') {
-            const out = execSync('wmic csproduct get uuid', { encoding: 'utf-8' });
-            const lines = out.trim().split('\n');
-            if (lines.length > 1)
-                parts.push(lines[1].trim());
+            const out = execSync('powershell -Command "(Get-CimInstance Win32_ComputerSystemProduct).UUID"', { encoding: 'utf-8' });
+            parts.push(out.trim());
         }
     }
     catch {

package/dist/repl.js

@@ -7,8 +7,27 @@ import { resetTerminalTheme } from './lib/theme.js';
 import { ensureSandbox, runInSandbox, isDockerAvailable } from './lib/sandbox.js';
 import { logCommand } from './lib/logger.js';
 import { startLogSync, stopLogSync } from './lib/log-sync.js';
+import { existsSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+// Competition workspace — all system commands restricted here
+const WORKSPACE = join(homedir(), 'icoa-workspace');
+function ensureWorkspace() {
+    if (!existsSync(WORKSPACE))
+        mkdirSync(WORKSPACE, { recursive: true });
+    return WORKSPACE;
+}
+// Blocked commands — security risk
+const BLOCKED_COMMANDS = new Set([
+    'sudo', 'su', 'doas', 'pkexec', // privilege escalation
+    'brew', 'apt', 'apt-get', 'yum', 'choco', // package managers (use env setup)
+    'npm', 'npx', 'pip', 'pip3', // package install (use env setup)
+    'shutdown', 'reboot', 'halt', // system control
+    'mkfs', 'fdisk', 'dd', // disk operations
+    'iptables', 'ufw', // firewall
+]);
 const INTERCEPT = '__REPL_NO_EXIT__';
-const VERSION = '1.9.1';
+const VERSION = '2.0.1';
 export async function startRepl(program, resumeMode) {
     const config = getConfig();
     const connected = isConnected();
@@ -48,7 +67,9 @@ export async function startRepl(program, resumeMode) {
                     console.log();
                     // Trigger env setup
                     const { execSync: ex } = await import('node:child_process');
-                    ex('node ' + new URL('../index.js', import.meta.url).pathname + ' env setup', { stdio: 'inherit' });
+                    const { fileURLToPath } = await import('node:url');
+                    const indexPath = fileURLToPath(new URL('../index.js', import.meta.url));
+                    ex(`node "${indexPath}" env setup`, { stdio: 'inherit' });
                 }
             }
             catch {
@@ -83,7 +104,9 @@ export async function startRepl(program, resumeMode) {
         console.log();
     }
     else if (activated) {
+        ensureWorkspace();
         console.log(chalk.green('   Welcome, competitor! Ready to hack.'));
+        console.log(chalk.gray(`   Workspace: ${WORKSPACE}`));
         console.log();
         console.log(chalk.gray('   Quick Start'));
         console.log(chalk.gray('   ─────────────'));
@@ -193,20 +216,24 @@ export async function startRepl(program, resumeMode) {
             'log', 'lang', 'setup', 'env', 'model', 'ctf',
         ];
         if (!knownCommands.includes(cmd)) {
-            // Force Python 3.12 — rewrite python3/python/pip3 to 3.12 binaries
+            // Block dangerous commands
+            if (BLOCKED_COMMANDS.has(cmd)) {
+                console.log(chalk.red(`  Blocked: ${cmd} is not allowed during competition.`));
+                console.log();
+                rl.prompt();
+                return;
+            }
+            // Force Python 3.12 — rewrite python3/python to 3.12 binaries
             let resolvedInput = input;
             if (process.platform === 'darwin') {
                 const py12 = '/opt/homebrew/opt/python@3.12/bin/python3.12';
-                const pip12 = '/opt/homebrew/opt/python@3.12/bin/pip3.12';
                 resolvedInput = resolvedInput
                     .replace(/^python3?\s/, `${py12} `)
-                    .replace(/^pip3?\s/, `${pip12} `);
-                if (resolvedInput === 'python3' || resolvedInput === 'python')
-                    resolvedInput = py12;
-                if (resolvedInput === 'pip3' || resolvedInput === 'pip')
-                    resolvedInput = pip12;
+                    .replace(/^(python3|python)$/, py12);
             }
-            // Route to Docker sandbox if available, otherwise system shell
+            // Ensure workspace directory
+            const cwd = ensureWorkspace();
+            // Route to Docker sandbox if available, otherwise system shell (in workspace)
             processing = true;
             try {
                 if (isDockerAvailable()) {
@@ -215,11 +242,11 @@ export async function startRepl(program, resumeMode) {
                         await runInSandbox(resolvedInput, rl);
                     }
                     else {
-                        await runSystemCommand(resolvedInput, rl);
+                        await runSystemCommand(resolvedInput, rl, cwd);
                     }
                 }
                 else {
-                    await runSystemCommand(resolvedInput, rl);
+                    await runSystemCommand(resolvedInput, rl, cwd);
                 }
             }
             catch {
@@ -264,13 +291,13 @@ export async function startRepl(program, resumeMode) {
         realExit(0);
     });
 }
-function runSystemCommand(input, rl) {
+function runSystemCommand(input, rl, cwd) {
     return new Promise((resolve) => {
-        // Pause readline so the child process gets full terminal control
         rl.pause();
         const child = spawn(input, {
             shell: true,
             stdio: 'inherit',
+            cwd: cwd || process.cwd(),
         });
         child.on('close', () => {
             rl.resume();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "1.9.1",
+  "version": "2.0.1",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {