icoa-cli 2.19.100 → 2.19.101

package/dist/lib/log-sync.js

@@ -1,110 +1 @@
-import { readFileSync, existsSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { getIcoaDir, getConfig } from './config.js';
-import { getDeviceFingerprint } from './access.js';
-// Every 30s, post new lines from ~/.icoa/session.log to the server audit
-// endpoint. Two auth modes:
-//
-//   1. Logged-in user (CTFd token present)  → Authorization: Token <token>,
-//      stored on the server as /opt/CTFd/audit/user-<userId>.jsonl
-//   2. Anonymous demo user (no token)       → X-Device-Fingerprint: <hash>,
-//      stored as /opt/CTFd/audit/demo-<fingerprint>.jsonl
-//
-// The demo path is what lets us observe the full prompt/command history of
-// users who never log in (the main demo audience).
-const SYNC_INTERVAL = 30_000;
-const DEFAULT_SERVER = 'https://practice.icoa2026.au';
-const SYNC_STATE_FILE = () => join(getIcoaDir(), 'sync-state.json');
-let syncTimer = null;
-function getSyncState() {
-    const file = SYNC_STATE_FILE();
-    if (!existsSync(file))
-        return { lastSyncedLine: 0, lastSyncAt: null, syncCount: 0, failCount: 0 };
-    try {
-        return JSON.parse(readFileSync(file, 'utf-8'));
-    }
-    catch {
-        return { lastSyncedLine: 0, lastSyncAt: null, syncCount: 0, failCount: 0 };
-    }
-}
-function saveSyncState(state) {
-    writeFileSync(SYNC_STATE_FILE(), JSON.stringify(state, null, 2));
-}
-async function syncLogs() {
-    const config = getConfig();
-    const serverUrl = config.ctfdUrl || DEFAULT_SERVER;
-    const logPath = join(getIcoaDir(), 'session.log');
-    if (!existsSync(logPath))
-        return;
-    const state = getSyncState();
-    const allLines = readFileSync(logPath, 'utf-8').trim().split('\n').filter(Boolean);
-    const newLines = allLines.slice(state.lastSyncedLine);
-    if (newLines.length === 0)
-        return;
-    // Pick auth mode: token for logged-in users, device fingerprint for anon.
-    const headers = { 'Content-Type': 'application/json' };
-    let identity;
-    if (config.token) {
-        headers['Authorization'] = `Token ${config.token}`;
-        identity = `user:${config.userId ?? 'unknown'}`;
-    }
-    else {
-        const fp = config.deviceFingerprint || getDeviceFingerprint();
-        headers['X-Device-Fingerprint'] = fp;
-        identity = `demo:${fp.slice(0, 12)}`;
-    }
-    const payload = {
-        identity,
-        userId: config.userId,
-        userName: config.userName,
-        teamId: config.teamId,
-        sessionId: config.sessionId,
-        deviceFingerprint: config.deviceFingerprint || getDeviceFingerprint(),
-        lang: config.language || 'en',
-        timestamp: new Date().toISOString(),
-        entries: newLines.map((line) => {
-            try {
-                return JSON.parse(line);
-            }
-            catch {
-                return { raw: line };
-            }
-        }),
-    };
-    try {
-        const url = new URL('/api/icoa/audit', serverUrl).href;
-        const res = await fetch(url, {
-            method: 'POST',
-            headers,
-            body: JSON.stringify(payload),
-            signal: AbortSignal.timeout(10_000),
-        });
-        if (res.ok) {
-            state.lastSyncedLine = allLines.length;
-            state.lastSyncAt = new Date().toISOString();
-            state.syncCount++;
-            saveSyncState(state);
-        }
-        else {
-            state.failCount++;
-            saveSyncState(state);
-        }
-    }
-    catch {
-        // Silent fail — network issues shouldn't break the CLI
-        state.failCount++;
-        saveSyncState(state);
-    }
-}
-export function startLogSync() {
-    setTimeout(() => syncLogs(), 5_000);
-    syncTimer = setInterval(() => syncLogs(), SYNC_INTERVAL);
-}
-export function stopLogSync() {
-    if (syncTimer) {
-        clearInterval(syncTimer);
-        syncTimer = null;
-    }
-    // Final sync before exit
-    syncLogs();
-}
+import{readFileSync as t,existsSync as n,writeFileSync as e}from"node:fs";import{join as i}from"node:path";import{getIcoaDir as o,getConfig as r}from"./config.js";import{getDeviceFingerprint as s}from"./access.js";const a=()=>i(o(),"sync-state.json");let c=null;function l(t){e(a(),JSON.stringify(t,null,2))}async function u(){const e=r(),c=e.ctfdUrl||"https://practice.icoa2026.au",u=i(o(),"session.log");if(!n(u))return;const f=function(){const e=a();if(!n(e))return{lastSyncedLine:0,lastSyncAt:null,syncCount:0,failCount:0};try{return JSON.parse(t(e,"utf-8"))}catch{return{lastSyncedLine:0,lastSyncAt:null,syncCount:0,failCount:0}}}(),d=t(u,"utf-8").trim().split("\n").filter(Boolean),p=d.slice(f.lastSyncedLine);if(0===p.length)return;const y={"Content-Type":"application/json"};let m;if(e.token)y.Authorization=`Token ${e.token}`,m=`user:${e.userId??"unknown"}`;else{const t=e.deviceFingerprint||s();y["X-Device-Fingerprint"]=t,m=`demo:${t.slice(0,12)}`}const g={identity:m,userId:e.userId,userName:e.userName,teamId:e.teamId,sessionId:e.sessionId,deviceFingerprint:e.deviceFingerprint||s(),lang:e.language||"en",timestamp:(new Date).toISOString(),entries:p.map(t=>{try{return JSON.parse(t)}catch{return{raw:t}}})};try{const t=new URL("/api/icoa/audit",c).href;(await fetch(t,{method:"POST",headers:y,body:JSON.stringify(g),signal:AbortSignal.timeout(1e4)})).ok?(f.lastSyncedLine=d.length,f.lastSyncAt=(new Date).toISOString(),f.syncCount++,l(f)):(f.failCount++,l(f))}catch{f.failCount++,l(f)}}export function startLogSync(){setTimeout(()=>u(),5e3),c=setInterval(()=>u(),3e4)}export function stopLogSync(){c&&(clearInterval(c),c=null),u()}

package/dist/lib/logger.js

@@ -1,59 +1 @@
-import { appendFileSync, readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { getConfig, getIcoaDir } from './config.js';
-function getLogPath() {
-    return join(getIcoaDir(), 'session.log');
-}
-export function logEntry(entry) {
-    try {
-        appendFileSync(getLogPath(), JSON.stringify(entry) + '\n');
-    }
-    catch {
-        // Silently fail — logging should never break the CLI
-    }
-}
-export function logCommand(command) {
-    const config = getConfig();
-    logEntry({
-        timestamp: new Date().toISOString(),
-        level: 'command',
-        input: command,
-        sessionId: config.sessionId,
-    });
-}
-export function logHint(level, question, challengeId) {
-    const config = getConfig();
-    logEntry({
-        timestamp: new Date().toISOString(),
-        level: level,
-        input: question,
-        challengeId,
-        sessionId: config.sessionId,
-    });
-}
-export function logSubmission(challengeId, flag) {
-    const config = getConfig();
-    logEntry({
-        timestamp: new Date().toISOString(),
-        level: 'submit',
-        input: flag,
-        challengeId,
-        sessionId: config.sessionId,
-    });
-}
-export function getSessionLog() {
-    const logPath = getLogPath();
-    if (!existsSync(logPath))
-        return [];
-    try {
-        const raw = readFileSync(logPath, 'utf-8');
-        return raw
-            .trim()
-            .split('\n')
-            .filter(Boolean)
-            .map((line) => JSON.parse(line));
-    }
-    catch {
-        return [];
-    }
-}
+import{appendFileSync as t,readFileSync as n,existsSync as o}from"node:fs";import{join as e}from"node:path";import{getConfig as s,getIcoaDir as i}from"./config.js";function r(){return e(i(),"session.log")}export function logEntry(n){try{t(r(),JSON.stringify(n)+"\n")}catch{}}export function logCommand(t){const n=s();logEntry({timestamp:(new Date).toISOString(),level:"command",input:t,sessionId:n.sessionId})}export function logHint(t,n,o){const e=s();logEntry({timestamp:(new Date).toISOString(),level:t,input:n,challengeId:o,sessionId:e.sessionId})}export function logSubmission(t,n){const o=s();logEntry({timestamp:(new Date).toISOString(),level:"submit",input:n,challengeId:t,sessionId:o.sessionId})}export function getSessionLog(){const t=r();if(!o(t))return[];try{return n(t,"utf-8").trim().split("\n").filter(Boolean).map(t=>JSON.parse(t))}catch{return[]}}

package/dist/lib/paper-upgrade.js

@@ -1,117 +1 @@
-/**
- * Paper C → Paper B upgrade prompt.
- *
- * Shown after a successful Paper C submission. Paper C is the K-12 entry
- * funnel (MCQ only, no tools). Paper B is the next step — adds AI4CTF
- * and CTF4AI practical challenges for 150-point total. The upgrade path
- * depends on which platform the student is on.
- *
- * Policy:
- * - Only triggered after Paper C submission (examId ends in `-c` or
- *   starts with a country code + `-2026-c`).
- * - Only triggered if student passed. Students who failed C should
- *   retry C before being pushed toward a harder paper.
- * - Always points at https://icoa2026.au/selectionguide/ for detailed
- *   platform-specific install instructions, so the CLI copy stays
- *   concise and the canonical guide lives in one place.
- * - Never prescribes a token — students must request one from their
- *   organizer. This prevents the CLI from implying self-service token
- *   issuance.
- */
-import chalk from 'chalk';
-import { isNativeWindowsCmd, isInWSL, hasPython } from './platform.js';
-/**
- * True when the just-submitted exam is a C paper (MCQ entry funnel).
- * Matches `ua-2026-c`, `pe-2026-c`, `cn-2026-c`, etc. Case-insensitive.
- */
-export function isCPaper(examId) {
-    if (!examId)
-        return false;
-    return /-2026-c$/i.test(examId.trim());
-}
-/**
- * Renders the C→B upgrade prompt to stdout. No-op if conditions aren't met.
- *
- * @param examId   The submitted exam ID (from state.session.examId before clear)
- * @param passed   Whether the student met the passing bar
- */
-export function showCToBUpgradePrompt(examId, passed) {
-    if (!isCPaper(examId))
-        return;
-    if (!passed)
-        return;
-    const onCmd = isNativeWindowsCmd();
-    const onWSL = isInWSL();
-    const pyReady = hasPython();
-    console.log(chalk.cyan('  ─────────────────────────────────────────────'));
-    console.log();
-    console.log(chalk.bold.white('  ★ Ready for more? Paper B — K-12 with AI'));
-    console.log();
-    console.log(chalk.gray('  Paper B adds ') + chalk.white('AI4CTF') + chalk.gray(' (chat with AI to find hidden flags) and ')
-        + chalk.white('CTF4AI') + chalk.gray(' (break AI security).'));
-    console.log(chalk.gray('  150 points total · 90 minutes · same command interface you already know.'));
-    console.log();
-    if (onCmd) {
-        // Windows cmd / PowerShell — needs WSL2 path for full Paper B
-        console.log(chalk.bold.white('  To take Paper B on Windows, install WSL2 + Ubuntu 22:'));
-        console.log();
-        console.log(chalk.white('    1. Open PowerShell as Administrator'));
-        console.log(chalk.gray('       (right-click PowerShell → "Run as administrator")'));
-        console.log(chalk.white('    2. Run: ') + chalk.cyan('wsl --install -d Ubuntu-22.04'));
-        console.log(chalk.white('    3. Reboot when prompted, create a Linux username + password'));
-        console.log(chalk.white('    4. Inside Ubuntu, install Node.js 22 and this CLI:'));
-        console.log(chalk.gray('         ') + chalk.cyan('curl -fsSL https://deb.nodesource.com/setup_22.x | sudo bash -'));
-        console.log(chalk.gray('         ') + chalk.cyan('sudo apt install -y nodejs'));
-        console.log(chalk.gray('         ') + chalk.cyan('sudo npm install -g icoa-cli'));
-        console.log();
-        console.log(chalk.gray('  Setup takes 30-60 min the first time. You only do this once.'));
-    }
-    else if (onWSL) {
-        // Already on WSL2 — just need Python for practicals
-        console.log(chalk.bold.white('  You are on WSL2 — your setup is almost ready:'));
-        console.log();
-        if (!pyReady) {
-            console.log(chalk.white('    Install Python 3 (for Paper B practical questions):'));
-            console.log(chalk.gray('      ') + chalk.cyan('sudo apt install -y python3 python3-pip'));
-            console.log();
-        }
-        else {
-            console.log(chalk.green('    ✓ Python 3 already installed. You are ready.'));
-            console.log();
-        }
-    }
-    else if (process.platform === 'darwin') {
-        // macOS
-        console.log(chalk.bold.white('  On macOS, install Python 3 for Paper B practicals:'));
-        console.log();
-        console.log(chalk.white('    With Homebrew:'));
-        console.log(chalk.gray('      ') + chalk.cyan('brew install python@3.12'));
-        console.log();
-        console.log(chalk.white('    Without Homebrew: download from ') + chalk.cyan.underline('https://python.org'));
-        if (pyReady) {
-            console.log();
-            console.log(chalk.green('    ✓ Python 3 already detected. You are ready.'));
-        }
-        console.log();
-    }
-    else {
-        // Linux native (not WSL)
-        console.log(chalk.bold.white('  On Linux, install Python 3 for Paper B practicals:'));
-        console.log();
-        console.log(chalk.white('    Ubuntu / Debian:'));
-        console.log(chalk.gray('      ') + chalk.cyan('sudo apt install -y python3 python3-pip'));
-        console.log(chalk.white('    Fedora / RHEL:'));
-        console.log(chalk.gray('      ') + chalk.cyan('sudo dnf install -y python3 python3-pip'));
-        if (pyReady) {
-            console.log();
-            console.log(chalk.green('    ✓ Python 3 already detected. You are ready.'));
-        }
-        console.log();
-    }
-    console.log(chalk.bold.white('  Then get a Paper B token from your organizer.'));
-    console.log(chalk.gray('  Each token is one-shot and bound to one device.'));
-    console.log();
-    console.log(chalk.gray('  Detailed step-by-step guide: ')
-        + chalk.cyan.underline('https://icoa2026.au/selectionguide/'));
-    console.log();
-}
+import chalk from"chalk";import{isNativeWindowsCmd as o,isInWSL as e,hasPython as l}from"./platform.js";export function isCPaper(o){return!!o&&/-2026-c$/i.test(o.trim())}export function showCToBUpgradePrompt(n,t){if(!isCPaper(n))return;if(!t)return;const s=o(),a=e(),r=l();console.log(chalk.cyan("  ─────────────────────────────────────────────")),console.log(),console.log(chalk.bold.white("  ★ Ready for more? Paper B — K-12 with AI")),console.log(),console.log(chalk.gray("  Paper B adds ")+chalk.white("AI4CTF")+chalk.gray(" (chat with AI to find hidden flags) and ")+chalk.white("CTF4AI")+chalk.gray(" (break AI security).")),console.log(chalk.gray("  150 points total · 90 minutes · same command interface you already know.")),console.log(),s?(console.log(chalk.bold.white("  To take Paper B on Windows, install WSL2 + Ubuntu 22:")),console.log(),console.log(chalk.white("    1. Open PowerShell as Administrator")),console.log(chalk.gray('       (right-click PowerShell → "Run as administrator")')),console.log(chalk.white("    2. Run: ")+chalk.cyan("wsl --install -d Ubuntu-22.04")),console.log(chalk.white("    3. Reboot when prompted, create a Linux username + password")),console.log(chalk.white("    4. Inside Ubuntu, install Node.js 22 and this CLI:")),console.log(chalk.gray("         ")+chalk.cyan("curl -fsSL https://deb.nodesource.com/setup_22.x | sudo bash -")),console.log(chalk.gray("         ")+chalk.cyan("sudo apt install -y nodejs")),console.log(chalk.gray("         ")+chalk.cyan("sudo npm install -g icoa-cli")),console.log(),console.log(chalk.gray("  Setup takes 30-60 min the first time. You only do this once."))):a?(console.log(chalk.bold.white("  You are on WSL2 — your setup is almost ready:")),console.log(),r?(console.log(chalk.green("    ✓ Python 3 already installed. You are ready.")),console.log()):(console.log(chalk.white("    Install Python 3 (for Paper B practical questions):")),console.log(chalk.gray("      ")+chalk.cyan("sudo apt install -y python3 python3-pip")),console.log())):"darwin"===process.platform?(console.log(chalk.bold.white("  On macOS, install Python 3 for Paper B practicals:")),console.log(),console.log(chalk.white("    With Homebrew:")),console.log(chalk.gray("      ")+chalk.cyan("brew install python@3.12")),console.log(),console.log(chalk.white("    Without Homebrew: download from ")+chalk.cyan.underline("https://python.org")),r&&(console.log(),console.log(chalk.green("    ✓ Python 3 already detected. You are ready."))),console.log()):(console.log(chalk.bold.white("  On Linux, install Python 3 for Paper B practicals:")),console.log(),console.log(chalk.white("    Ubuntu / Debian:")),console.log(chalk.gray("      ")+chalk.cyan("sudo apt install -y python3 python3-pip")),console.log(chalk.white("    Fedora / RHEL:")),console.log(chalk.gray("      ")+chalk.cyan("sudo dnf install -y python3 python3-pip")),r&&(console.log(),console.log(chalk.green("    ✓ Python 3 already detected. You are ready."))),console.log()),console.log(chalk.bold.white("  Then get a Paper B token from your organizer.")),console.log(chalk.gray("  Each token is one-shot and bound to one device.")),console.log(),console.log(chalk.gray("  Detailed step-by-step guide: ")+chalk.cyan.underline("https://icoa2026.au/selectionguide/")),console.log()}

package/dist/lib/platform.js

@@ -1,86 +1 @@
-/**
- * Platform detection for Windows cmd.exe K-12 entry path.
- *
- * Context: Windows middle-school students (12-14 y/o) are the expected largest
- * cohort for ICOA 2026. Observed in-field: 4-5 students blocked by WSL install
- * complexity. Their viable path is Windows native cmd + Node.js, which handles
- * MCQ + AI chat perfectly but not Q31-36 (Unix grep / strings / pwntools).
- *
- * Decision (v2.19.97): C paper (ua-2026-c) is the cmd entry funnel — 30 MCQ
- * only, 45 min, 70 pts, no tools. Non-cmd users get B paper (full 150 pts).
- *
- * This module is the single source of truth for "should we show exam setup?"
- * and "should we route this user to C paper?". Used by src/repl.ts menu
- * rendering and src/commands/exam.ts pre-token guards.
- */
-import { execFileSync } from 'node:child_process';
-/**
- * Heuristic: true when running inside a WSL distribution. Node.js reports
- * `process.platform === 'linux'` in that case, but WSL sets specific env vars.
- */
-export function isInWSL() {
-    return !!(process.env.WSL_DISTRO_NAME || process.env.WSLENV);
-}
-/**
- * True when the user is on Windows native (cmd.exe or PowerShell), NOT a
- * WSL distribution.
- */
-export function isNativeWindowsCmd() {
-    return process.platform === 'win32' && !isInWSL();
-}
-/**
- * Probe whether any Python 3 binary is reachable. Silent — no stderr leaks
- * to the user. Used to decide whether Q31-35 practical questions are even
- * theoretically doable on this machine.
- *
- * Uses execFileSync (no shell) so probe failures don't leak cmd.exe's
- * "not recognized as internal or external command" messages to stdout.
- */
-export function hasPython() {
-    const probes = [
-        ['python3', ['--version']],
-        ['python', ['--version']],
-        ['py', ['-3', '--version']],
-    ];
-    for (const [bin, args] of probes) {
-        try {
-            execFileSync(bin, args, {
-                encoding: 'utf-8',
-                timeout: 1500,
-                stdio: ['ignore', 'pipe', 'ignore'],
-            });
-            return true;
-        }
-        catch { /* try next */ }
-    }
-    return false;
-}
-export function getPlatformInfo() {
-    return {
-        platform: process.platform,
-        isWindowsNativeCmd: isNativeWindowsCmd(),
-        isInWSL: isInWSL(),
-        hasPython: hasPython(),
-    };
-}
-/**
- * Should the Selection-mode menu show the `exam setup` row?
- *
- * Windows native cmd: NO. Setup installs pip packages for Q31-35 practical
- * which don't apply on the C-paper (cmd-recommended) path. Showing setup
- * sends them chasing Python installs that may fail for 12-year-olds.
- *
- * Everyone else (macOS, Linux, WSL): YES. They can reach B-paper and setup
- * is a legit pre-step.
- */
-export function shouldShowExamSetup() {
-    return !isNativeWindowsCmd();
-}
-/**
- * Is this user recommended to take the C paper (MCQ-only) rather than B?
- * Currently: Windows native cmd users. Future: might expand based on age
- * or partner-country policy.
- */
-export function shouldRecommendCPaper() {
-    return isNativeWindowsCmd();
-}
+import{execFileSync as o}from"node:child_process";export function isInWSL(){return!(!process.env.WSL_DISTRO_NAME&&!process.env.WSLENV)}export function isNativeWindowsCmd(){return"win32"===process.platform&&!isInWSL()}export function hasPython(){const n=[["python3",["--version"]],["python",["--version"]],["py",["-3","--version"]]];for(const[t,e]of n)try{return o(t,e,{encoding:"utf-8",timeout:1500,stdio:["ignore","pipe","ignore"]}),!0}catch{}return!1}export function getPlatformInfo(){return{platform:process.platform,isWindowsNativeCmd:isNativeWindowsCmd(),isInWSL:isInWSL(),hasPython:hasPython()}}export function shouldShowExamSetup(){return!isNativeWindowsCmd()}export function shouldRecommendCPaper(){return isNativeWindowsCmd()}

package/dist/lib/sandbox.js

@@ -1,93 +1 @@
-import { execSync, spawn } from 'node:child_process';
-import chalk from 'chalk';
-const IMAGE = 'icoa/sandbox:2026';
-const CONTAINER = 'icoa-sandbox';
-export function isDockerAvailable() {
-    try {
-        execSync('docker info', { stdio: 'ignore' });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-export function isSandboxRunning() {
-    try {
-        const out = execSync(`docker inspect -f '{{.State.Running}}' ${CONTAINER} 2>/dev/null`, {
-            encoding: 'utf-8',
-        });
-        return out.trim() === 'true';
-    }
-    catch {
-        return false;
-    }
-}
-export async function ensureSandbox() {
-    if (!isDockerAvailable()) {
-        console.log(chalk.yellow('  Docker not found. Install Docker Desktop to use sandbox tools.'));
-        console.log(chalk.gray('  https://www.docker.com/products/docker-desktop'));
-        return false;
-    }
-    if (isSandboxRunning())
-        return true;
-    // Check if container exists but stopped
-    try {
-        execSync(`docker start ${CONTAINER}`, { stdio: 'ignore' });
-        return true;
-    }
-    catch {
-        // Container doesn't exist, create it
-    }
-    // Check if image exists
-    try {
-        execSync(`docker image inspect ${IMAGE}`, { stdio: 'ignore' });
-    }
-    catch {
-        console.log(chalk.gray('  Pulling sandbox image (first time only)...'));
-        try {
-            execSync(`docker pull ${IMAGE}`, { stdio: 'inherit' });
-        }
-        catch {
-            // Image not on registry yet, try building locally
-            console.log(chalk.gray('  Building sandbox from local Dockerfile...'));
-            try {
-                const dockerDir = new URL('../../docker', import.meta.url).pathname;
-                execSync(`docker build -t ${IMAGE} ${dockerDir}`, { stdio: 'inherit' });
-            }
-            catch {
-                console.log(chalk.red('  Failed to set up sandbox.'));
-                return false;
-            }
-        }
-    }
-    // Create and start container
-    try {
-        execSync(`docker run -d --name ${CONTAINER} ` +
-            `-v icoa-challenges:/home/competitor/challenges ` +
-            `--network host ` +
-            `${IMAGE} sleep infinity`, { stdio: 'ignore' });
-        return true;
-    }
-    catch {
-        console.log(chalk.red('  Failed to start sandbox container.'));
-        return false;
-    }
-}
-export function runInSandbox(command, rl) {
-    return new Promise((resolve) => {
-        rl.pause();
-        const opts = {
-            stdio: 'inherit',
-            shell: true,
-        };
-        const child = spawn('docker', ['exec', '-it', CONTAINER, 'bash', '-c', command], opts);
-        child.on('close', () => {
-            rl.resume();
-            resolve();
-        });
-        child.on('error', () => {
-            rl.resume();
-            resolve();
-        });
-    });
-}
+import{execSync as o,spawn as e}from"node:child_process";import chalk from"chalk";const r="icoa/sandbox:2026",n="icoa-sandbox";export function isDockerAvailable(){try{return o("docker info",{stdio:"ignore"}),!0}catch{return!1}}export function isSandboxRunning(){try{return"true"===o(`docker inspect -f '{{.State.Running}}' ${n} 2>/dev/null`,{encoding:"utf-8"}).trim()}catch{return!1}}export async function ensureSandbox(){if(!isDockerAvailable())return console.log(chalk.yellow("  Docker not found. Install Docker Desktop to use sandbox tools.")),console.log(chalk.gray("  https://www.docker.com/products/docker-desktop")),!1;if(isSandboxRunning())return!0;try{return o(`docker start ${n}`,{stdio:"ignore"}),!0}catch{}try{o(`docker image inspect ${r}`,{stdio:"ignore"})}catch{console.log(chalk.gray("  Pulling sandbox image (first time only)..."));try{o(`docker pull ${r}`,{stdio:"inherit"})}catch{console.log(chalk.gray("  Building sandbox from local Dockerfile..."));try{const e=new URL("../../docker",import.meta.url).pathname;o(`docker build -t ${r} ${e}`,{stdio:"inherit"})}catch{return console.log(chalk.red("  Failed to set up sandbox.")),!1}}}try{return o(`docker run -d --name ${n} -v icoa-challenges:/home/competitor/challenges --network host ${r} sleep infinity`,{stdio:"ignore"}),!0}catch{return console.log(chalk.red("  Failed to start sandbox container.")),!1}}export function runInSandbox(o,r){return new Promise(t=>{r.pause();const c=e("docker",["exec","-it",n,"bash","-c",o],{stdio:"inherit",shell:!0});c.on("close",()=>{r.resume(),t()}),c.on("error",()=>{r.resume(),t()})})}

package/dist/lib/terminal.js

@@ -1,49 +1 @@
-import chalk from 'chalk';
-export function detectTerminal() {
-    const termProgram = process.env.TERM_PROGRAM || '';
-    const platform = process.platform;
-    // ICOA Terminal (custom bundled app) — bypass platform-specific checks
-    if (process.env.ICOA_TERMINAL === '1') {
-        return { name: 'ICOA Terminal', allowed: true };
-    }
-    // macOS: only Apple Terminal
-    if (platform === 'darwin') {
-        if (termProgram === 'Apple_Terminal') {
-            return { name: 'macOS Terminal', allowed: true };
-        }
-        return { name: termProgram || 'Unknown macOS terminal', allowed: false };
-    }
-    // Linux: GNOME Terminal, or basic xterm/linux console
-    if (platform === 'linux') {
-        const isGnome = termProgram === 'gnome-terminal' ||
-            process.env.GNOME_TERMINAL_SERVICE !== undefined;
-        if (isGnome) {
-            return { name: 'GNOME Terminal', allowed: true };
-        }
-        // Also allow basic linux console (no TERM_PROGRAM, e.g. TTY)
-        if (!termProgram && (process.env.TERM === 'linux' || process.env.TERM === 'xterm')) {
-            return { name: 'Linux Console', allowed: true };
-        }
-        return { name: termProgram || 'Unknown Linux terminal', allowed: false };
-    }
-    // Windows: PowerShell
-    if (platform === 'win32') {
-        const isPowerShell = !!process.env.PSModulePath;
-        if (isPowerShell) {
-            return { name: 'PowerShell', allowed: true };
-        }
-        return { name: 'Windows CMD or other', allowed: false };
-    }
-    return { name: 'Unknown', allowed: false };
-}
-export function checkTerminal() {
-    const info = detectTerminal();
-    if (!info.allowed) {
-        console.log(chalk.yellow(`  ⚠ Unsupported terminal: ${info.name}`));
-        console.log(chalk.gray('  Competition requires:'));
-        console.log(chalk.gray('    macOS   → Terminal.app (system default)'));
-        console.log(chalk.gray('    Linux   → GNOME Terminal (system default)'));
-        console.log(chalk.gray('    Windows → PowerShell (system default)'));
-        console.log();
-    }
-}
+import chalk from"chalk";export function detectTerminal(){const e=process.env.TERM_PROGRAM||"",n=process.platform;return"1"===process.env.ICOA_TERMINAL?{name:"ICOA Terminal",allowed:!0}:"darwin"===n?"Apple_Terminal"===e?{name:"macOS Terminal",allowed:!0}:{name:e||"Unknown macOS terminal",allowed:!1}:"linux"===n?"gnome-terminal"===e||void 0!==process.env.GNOME_TERMINAL_SERVICE?{name:"GNOME Terminal",allowed:!0}:e||"linux"!==process.env.TERM&&"xterm"!==process.env.TERM?{name:e||"Unknown Linux terminal",allowed:!1}:{name:"Linux Console",allowed:!0}:"win32"===n?process.env.PSModulePath?{name:"PowerShell",allowed:!0}:{name:"Windows CMD or other",allowed:!1}:{name:"Unknown",allowed:!1}}export function checkTerminal(){const e=detectTerminal();e.allowed||(console.log(chalk.yellow(`  ⚠ Unsupported terminal: ${e.name}`)),console.log(chalk.gray("  Competition requires:")),console.log(chalk.gray("    macOS   → Terminal.app (system default)")),console.log(chalk.gray("    Linux   → GNOME Terminal (system default)")),console.log(chalk.gray("    Windows → PowerShell (system default)")),console.log())}

package/dist/lib/theme.js

@@ -1,108 +1 @@
-// Unified Darcula terminal theme — works across macOS Terminal.app, iTerm2,
-// GNOME Terminal, Konsole, Windows Terminal (cmd/PowerShell/WSL).
-//
-// Three mechanisms are combined so every modern terminal gets the best it can:
-//
-//   1. OSC 10/11/12 sets the terminal's *default* fg/bg/cursor colors.
-//      Honored by iTerm2, GNOME Terminal, Konsole, Windows Terminal → lossless
-//      background, no scrollback or resize artifacts. Ignored by Terminal.app.
-//
-//   2. SGR 38;2/48;2 + \x1b[2J paints with 24-bit truecolor Darcula on every
-//      terminal that supports truecolor. This is the default path.
-//
-//   3. SGR 38;5/48;5 + \x1b[2J paints with 256-color approximation on macOS
-//      Terminal.app. Terminal.app does NOT support truecolor SGR and mis-parses
-//      `\x1b[48;2;43;43;43m` as a sequence of 16-color codes — the trailing
-//      `43` becomes ANSI "bg yellow", which is why v2.19.23/24 rendered with a
-//      yellow background there. Color 235 ≈ #262626 (dark gray, ~#2B2B2B) and
-//      color 250 ≈ #BCBCBC (light gray, ~#A9B7C6) are close enough.
-//
-// Legacy cmd.exe (pre-Win10 1809) can't run Node 22 anyway, so no separate
-// fallback path is needed.
-const OSC_INIT_DARK = '\x1b]10;#A9B7C6\x07' + // default fg
-    '\x1b]11;#2B2B2B\x07' + // default bg
-    '\x1b]12;#A9B7C6\x07'; // cursor color
-// High-contrast: pure black bg + pure white fg. For students with low vision
-// or screens where Darcula's subtle grays wash out (e.g., projectors, cheap
-// LCDs under fluorescent light). Still works with existing chalk colors —
-// cyan/green/yellow/red all show up clearly against pure black.
-const OSC_INIT_HC = '\x1b]10;#FFFFFF\x07' +
-    '\x1b]11;#000000\x07' +
-    '\x1b]12;#FFFFFF\x07';
-const OSC_RESET = '\x1b]110\x07' + // reset default fg
-    '\x1b]111\x07' + // reset default bg
-    '\x1b]112\x07'; // reset cursor color
-const SGR_INIT_TRUECOLOR_DARK = '\x1b[38;2;169;183;198m' + // fg #A9B7C6
-    '\x1b[48;2;43;43;43m' + // bg #2B2B2B
-    '\x1b[2J' +
-    '\x1b[H';
-const SGR_INIT_256_DARK = '\x1b[38;5;250m' + // fg ≈ #BCBCBC
-    '\x1b[48;5;235m' + // bg ≈ #262626
-    '\x1b[2J' +
-    '\x1b[H';
-const SGR_INIT_TRUECOLOR_HC = '\x1b[38;2;255;255;255m' + // fg pure white
-    '\x1b[48;2;0;0;0m' + // bg pure black
-    '\x1b[2J' +
-    '\x1b[H';
-const SGR_INIT_256_HC = '\x1b[38;5;231m' + // fg white (231 = pure white in 256)
-    '\x1b[48;5;16m' + // bg black (16 = pure black in 256)
-    '\x1b[2J' +
-    '\x1b[H';
-const SGR_RESET = '\x1b[0m\x1b[2J\x1b[H';
-function supportsAnsi() {
-    if (!process.stdout.isTTY)
-        return false;
-    const depth = process.stdout.getColorDepth?.();
-    if (typeof depth === 'number')
-        return depth >= 8;
-    return true;
-}
-// When icoa-cli runs inside the ICOA Terminal (Tauri + xterm.js), the host is
-// already pre-themed to the exact Darcula palette we'd be setting. Every OSC
-// and SGR we'd emit is a no-op in terms of color, but the \x1b[2J inside our
-// init/reset sequences would clear the grid visibly. Skip the paint entirely
-// in that environment so the banner simply appears in the shell cursor
-// position and scrollback is preserved on exit.
-function isIcoaTerminal() {
-    return process.env.ICOA_TERMINAL === '1';
-}
-// macOS Terminal.app does not implement SGR truecolor (\x1b[38;2;… / \x1b[48;2;…)
-// and mis-parses those sequences as 16-color codes, producing e.g. a yellow bg.
-// Detect it and fall back to 256-color SGR which Terminal.app handles correctly.
-function isAppleTerminal() {
-    return process.env.TERM_PROGRAM === 'Apple_Terminal';
-}
-let armed = false;
-export function setTerminalTheme(variant = 'dark') {
-    if (!supportsAnsi())
-        return;
-    if (isIcoaTerminal())
-        return; // host is already Darcula; nothing to do
-    const osc = variant === 'high-contrast' ? OSC_INIT_HC : OSC_INIT_DARK;
-    const sgr = isAppleTerminal()
-        ? (variant === 'high-contrast' ? SGR_INIT_256_HC : SGR_INIT_256_DARK)
-        : (variant === 'high-contrast' ? SGR_INIT_TRUECOLOR_HC : SGR_INIT_TRUECOLOR_DARK);
-    process.stdout.write(osc + sgr);
-    if (!armed) {
-        armed = true;
-        // Belt-and-braces cleanup on every exit path. Without these, Ctrl+C leaves
-        // the user's shell stuck with our SGR state.
-        const cleanup = () => {
-            try {
-                process.stdout.write(OSC_RESET + SGR_RESET);
-            }
-            catch { }
-        };
-        process.on('exit', cleanup);
-        process.on('SIGINT', () => { cleanup(); process.exit(130); });
-        process.on('SIGTERM', () => { cleanup(); process.exit(143); });
-        process.on('SIGHUP', () => { cleanup(); process.exit(129); });
-    }
-}
-export function resetTerminalTheme() {
-    if (!supportsAnsi())
-        return;
-    if (isIcoaTerminal())
-        return; // nothing to undo
-    process.stdout.write(OSC_RESET + SGR_RESET);
-}
+const e="]110]111]112",t="";function s(){if(!process.stdout.isTTY)return!1;const e=process.stdout.getColorDepth?.();return"number"!=typeof e||e>=8}function r(){return"1"===process.env.ICOA_TERMINAL}let o=!1;export function setTerminalTheme(n="dark"){if(!s())return;if(r())return;const c="high-contrast"===n?"]10;#FFFFFF]11;#000000]12;#FFFFFF":"]10;#A9B7C6]11;#2B2B2B]12;#A9B7C6",i="Apple_Terminal"===process.env.TERM_PROGRAM?"high-contrast"===n?"":"":"high-contrast"===n?"":"";if(process.stdout.write(c+i),!o){o=!0;const s=()=>{try{process.stdout.write(e+t)}catch{}};process.on("exit",s),process.on("SIGINT",()=>{s(),process.exit(130)}),process.on("SIGTERM",()=>{s(),process.exit(143)}),process.on("SIGHUP",()=>{s(),process.exit(129)})}}export function resetTerminalTheme(){s()&&(r()||process.stdout.write(e+t))}