icoa-cli 2.19.164 → 2.19.166

package/dist/commands/simvla.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `icoa simvla` — interactive ICOA-VLA sandbox.
+ *
+ * Student speaks to the robot in plain language. Every instruction goes
+ * through real VLA inference (not pre-rendered keyframes like `sim`),
+ * returns the action vector + a low-res 3s MP4. Repeat-prompt cache on
+ * server-side makes iteration snappy after the first call.
+ *
+ * Distinct from `sim`:
+ *   sim     = fast pre-rendered "wow" videos for marketing (canned action)
+ *   simvla  = real model inference, slow first call, learning sandbox
+ *
+ * Workspace (fixed for v1): red cup at +x, blue cup at +x/-y, Franka at
+ * center on a tabletop. Future: scenario picker.
+ *
+ * Built around BUG-008's listener-swap pattern — never creates a 2nd
+ * readline on stdin while the main REPL is active.
+ */
+import { Command } from 'commander';
+export declare function runSimvlaInteractive(): Promise<void>;
+export declare function registerSimvlaCommand(program: Command): void;

package/dist/commands/simvla.js

@@ -0,0 +1 @@
+import chalk from"chalk";import{spawn as o}from"node:child_process";import{writeFileSync as e}from"node:fs";import{createInterface as n}from"node:readline";import{join as r}from"node:path";import{fetchWithCountdown as t}from"../lib/countdown.js";import{getMainRl as l}from"../lib/main-rl.js";import{SIMVLA_COOLDOWN_SECONDS as s,lastSimvlaAt as i,markSimvlaAt as a}from"../lib/simvla-cooldown.js";const c=["pick up the red cup","lift the gripper up","pick up the cup on the left","press the blue button"];export async function runSimvlaInteractive(){!function(){console.log(),console.log(chalk.bold.cyan("  ICOA-VLA Sandbox")+chalk.gray("  ·  Speak to the robot in plain language")),console.log(),console.log(chalk.gray("  Workspace: ")+chalk.white("red cup at +x")+chalk.gray(", ")+chalk.white("blue cup at +x/-y")+chalk.gray(", ")+chalk.white("Franka at center")),console.log(),console.log(chalk.gray("  Try one of these or write your own:"));for(const o of c)console.log(chalk.gray("    · ")+chalk.cyan(o));console.log(),console.log(chalk.gray("  Commands: ")+chalk.white("help")+chalk.gray(" · ")+chalk.white("menu")+chalk.gray(" (back to main) · ")+chalk.white("quit")+chalk.gray(" (exit)")),console.log()}();const g=l(),p=null!==g,m=p?g.listeners("line").slice():[];p&&g.removeAllListeners("line");const d=p?g:n({input:process.stdin,output:process.stdout,terminal:!0});let u=!1;const y=()=>{d.setPrompt(chalk.bold.cyan("simvla> ")),d.prompt()};return new Promise(n=>{d.on("line",async l=>{const c=l.trim();if(u)return;if(!c)return void y();const g=c.toLowerCase();if("menu"===g||"menu confirm"===g){const{returnToMainMenu:o}=await import("../lib/menu-nav.js");if(d.removeAllListeners("line"),p)for(const o of m)d.on("line",o);return o(d),void n()}if("quit"!==g&&"exit"!==g&&"q"!==g&&"back"!==g){if("help"===g||"?"===g)return console.log(),console.log(chalk.gray("  Type any natural-language instruction for the robot.")),console.log(chalk.gray("  ICOA-VLA will infer an action vector and render a 3s playback.")),console.log(),console.log(chalk.gray("  · Same instruction is cached server-side — repeats are fast.")),console.log(chalk.gray(`  · ${s}s cooldown between calls (model is shared).`)),console.log(chalk.gray("  · Try ambiguous or impossible instructions to see how VLA handles them.")),console.log(),void y();u=!0;try{await async function(n){const l=`${process.env.ICOA_SERVER_URL?.replace(/\/+$/,"")||"https://practice.icoa2026.au"}/api/ai/vla/sim/instruct`,c=(Date.now()-i())/1e3;if(c<s){const o=Math.ceil(s-c);return console.log(),console.log(chalk.yellow(`  Cooldown: ${o}s before next call.`)),console.log(chalk.gray("  (Shared model — keeps things fast for everyone.)")),void console.log()}console.log(),console.log(chalk.gray("  Instruction: ")+chalk.white(n)),console.log();try{const s=fetch(l,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({instruction:n}),signal:AbortSignal.timeout(6e4)}),i=await t(s,{from:10,waitText:"  ICOA-VLA is thinking..."});if(!i.ok)return console.log(chalk.yellow(`  Server returned HTTP ${i.status}.`)),void console.log();const c=await i.json();if(!c.success||!c.data?.mp4_b64)return console.log(chalk.yellow("  "+(c.message||"VLA confused — try clearer wording."))),void console.log();a(Date.now());const{action:g,mp4_b64:p,cached:m,inference_ms:d,render_ms:u,q41_paper_d_win:y}=c.data;if(g){const o=g.xyz.map(o=>o>=0?`+${o.toFixed(2)}`:o.toFixed(2)).join(", "),e=g.gripper_close,n=e>.5?chalk.green("CLOSE"):chalk.red("OPEN");console.log(chalk.gray("  ✓ Action: ")+chalk.white(`xyz=[${o}]`)+chalk.gray("  gripper=")+n+chalk.gray(` (${e.toFixed(2)})`))}const f=m?chalk.green("cached"):chalk.gray("fresh");console.log(chalk.gray("    ")+f+chalk.gray(` · inference ${d??"?"}ms · render ${u??"?"}ms`)),y&&(console.log(),console.log(chalk.bold.yellow("  ⚑ This action would pass Paper D Q41 win condition ")+chalk.gray("(gripper_close < 0.10)")));const h=process.env.TMPDIR||"/tmp",w=r(h,`icoa-simvla-${Date.now()}.mp4`);e(w,Buffer.from(p,"base64"));const b="darwin"===process.platform?"open":"win32"===process.platform?"start":"xdg-open";b?(o(b,[w],{stdio:"ignore",detached:!0}).unref(),console.log(),console.log(chalk.gray("  ▸ Opening 3s playback in your video player."))):console.log(chalk.gray("  Saved to "+w)),console.log()}catch(o){const e=o instanceof Error?o.message:String(o);console.log(),console.log(chalk.yellow(`  Sandbox error: ${e}`)),console.log()}}(c)}finally{u=!1}y()}else{if(console.log(),console.log(chalk.gray("  Sandbox closed.")),console.log(),p){d.removeAllListeners("line");for(const o of m)d.on("line",o);d.prompt()}else d.close();n()}}),y()})}export function registerSimvlaCommand(o){o.command("simvla").description("Interactive ICOA-VLA sandbox: speak to the robot in plain language").action(async()=>{await runSimvlaInteractive()})}

package/dist/index.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{Command as o}from"commander";import chalk from"chalk";import{registerCtfCommands as e}from"./commands/ctf.js";import{registerRefCommand as n}from"./commands/ref.js";import{registerShellCommand as r}from"./commands/shell.js";import{registerFilesCommand as s}from"./commands/files.js";import{registerConnectCommand as t}from"./commands/connect.js";import{registerNoteCommand as l}from"./commands/note.js";import{registerLogCommand as i}from"./commands/log.js";import{registerLangCommand as a}from"./commands/lang.js";import{registerSetupCommand as m}from"./commands/setup.js";import{registerEnvCommand as c}from"./commands/env.js";import{registerAi4ctfCommand as g}from"./commands/ai4ctf.js";import{registerExamCommand as d}from"./commands/exam.js";import{registerCtf4aiDemoCommand as p}from"./commands/ctf4ai-demo.js";import{registerThemeCommand as y}from"./commands/theme.js";import{registerLearnCommand as h}from"./commands/learn.js";import{registerVla4CtfCommand as f}from"./commands/vla4ctf.js";import{registerDemo2Command as u}from"./commands/demo2.js";import{registerSimCommand as w}from"./commands/sim.js";import{getConfig as b,saveConfig as T}from"./lib/config.js";import{startRepl as $}from"./repl.js";import{setTerminalTheme as v}from"./lib/theme.js";import{checkForUpdates as j}from"./lib/update-check.js";import{detectIcoaInstalls as A}from"./lib/platform.js";import{readFileSync as C}from"node:fs";import{fileURLToPath as _}from"node:url";import{dirname as E,join as I}from"node:path";const S=E(_(import.meta.url)),x=JSON.parse(C(I(S,"..","package.json"),"utf-8")).version,F=chalk.cyan("  ─────────────────────────────────────────────────────"),L=`\n${F}\n\n   ${chalk.bold.white("██╗ ██████╗ ██████╗  █████╗")}\n   ${chalk.bold.white("██║██╔════╝██╔═══██╗██╔══██╗")}\n   ${chalk.bold.white("██║██║     ██║   ██║███████║")}\n   ${chalk.bold.white("██║██║     ██║   ██║██╔══██║")}\n   ${chalk.bold.white("██║╚██████╗╚██████╔╝██║  ██║")}\n   ${chalk.bold.white("╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝")}\n\n   ${chalk.yellow("International Cyber Olympiad in AI 2026")}\n   ${chalk.bold.magenta("The World's First AI-Native CLI Operating System")}\n   ${chalk.bold.magenta("for Cybersecurity & AI Security Competition")}\n   ${chalk.bold.magenta("and Olympiad for K-12")}\n\n   ${chalk.green.bold("AI4CTF")}${chalk.gray("[Day 1]")}  ${chalk.white("AI as your teammate")}\n   ${chalk.red.bold("CTF4AI")}${chalk.gray("[Day 2]")}  ${chalk.white("Challenge & evaluate AI systems")}\n   ${chalk.bold.yellow("AI is your ally. AI is your target.")}\n\n   ${chalk.white("Sydney, Australia")}  ${chalk.gray("Jun 27 - Jul 2, 2026")}\n   ${chalk.cyan.underline("https://icoa2026.au")}\n\n   ${chalk.gray(`CLI-Native Competition Terminal  v${x}`)}\n\n${F}\n`;process.on("uncaughtException",o=>{"__REPL_NO_EXIT__"!==o.message&&(console.error(chalk.red("Error:"),o.message),process.exit(1))}),process.on("unhandledRejection",o=>{const e=o instanceof Error?o.message:String(o);"__REPL_NO_EXIT__"!==e&&(console.error(chalk.red("Error:"),e),process.exit(1))});const k=new o;if(k.name("icoa").version(x).description("ICOA CLI — CLI-Native CTF Competition Terminal").option("--resume","Resume previous session").action(async o=>{const e=b();v("high-contrast"===e.themeVariant?"high-contrast":"dark"),j(),function(){const o=A();if(o.length<=1)return;const e=o[0];if([...o.map(o=>o.version||"0.0.0")].sort((o,e)=>function(o,e){const n=o.split(".").map(o=>parseInt(o,10)||0),r=e.split(".").map(o=>parseInt(o,10)||0);for(let o=0;o<3;o++)if((n[o]||0)!==(r[o]||0))return(n[o]||0)-(r[o]||0);return 0}(e,o))[0]!==e.version){console.log(),console.log(chalk.yellow.bold("  ⚠ Multiple icoa installations detected on PATH:"));for(let e=0;e<o.length;e++){const n=o[e],r=n.version?`v${n.version}`:"(version unreadable)",s=0===e?chalk.yellow("→"):" ",t=0===e?chalk.gray(" ← currently running (older — shadowing newer install)"):chalk.gray(" ← shadowed");console.log(`     ${s} ${chalk.cyan(n.path.padEnd(28))} ${chalk.white(r)}${t}`)}console.log(),console.log(chalk.yellow("  The first install on PATH wins. To use the newer one, remove the older:")),console.log(),e.pkgDir?console.log(`     ${chalk.bold.cyan(`sudo rm -rf ${e.pkgDir} ${e.path}`)}`):console.log(`     ${chalk.bold.cyan(`sudo rm -rf ${e.path}  # also delete its node_modules dir`)}`),console.log(),console.log(chalk.gray("  Then re-run icoa to confirm version banner shows the newer release.")),console.log()}}();const n=process.env.LANG||process.env.LC_ALL||process.env.LC_CTYPE||"";if(!/UTF-?8/i.test(n))if("win32"===process.platform){let o="";try{const{execFileSync:e}=await import("node:child_process");o=e("chcp.com",[],{encoding:"utf-8",timeout:1500,stdio:["ignore","pipe","ignore"]}).trim()}catch{}o.includes("65001")||(console.log(chalk.yellow(`⚠ Windows terminal is not using UTF-8 (current: ${o||"unknown"}).`)),console.log(chalk.gray('  Non-English text (Ukrainian, Chinese, Japanese, etc.) may show as "?" or garbled glyphs.')),console.log(chalk.gray("  Fix (run before ")+chalk.cyan("icoa")+chalk.gray("): ")+chalk.cyan("chcp 65001")),console.log(chalk.gray("  Or stay in English inside the CLI: ")+chalk.cyan("lang en")),console.log())}else console.log(chalk.yellow(`⚠ Your terminal locale is not UTF-8 (LANG=${n||"(unset)"}).`)),console.log(chalk.gray('  Non-English text and box characters may display as "?" or garbled glyphs.')),console.log(chalk.gray("  Fix: ")+chalk.cyan("export LANG=en_US.UTF-8")+chalk.gray(" (or your locale, e.g. ")+chalk.cyan("zh_CN.UTF-8")+chalk.gray(", ")+chalk.cyan("uk_UA.UTF-8")+chalk.gray(")")),console.log();if(console.log(L),process.argv.length<=2||o.resume)return o.resume||await async function(){const o=process.stdin;if(o.isTTY&&"function"==typeof o.setRawMode)return new Promise(e=>{let n=!1;const r=()=>{if(!n){n=!0,o.removeListener("data",s);try{o.setRawMode(!1)}catch{}o.pause(),e()}},s=()=>r();o.setRawMode(!0),o.resume(),o.once("data",s),console.log(chalk.gray("   (press any key to continue...)")),setTimeout(r,3e3)});await new Promise(o=>setTimeout(o,3e3))}(),void $(k,!!o.resume)}),e(k),n(k),r(k),s(k),t(k),l(k),i(k),a(k),m(k),c(k),g(k),d(k),p(k),y(k),h(k),f(k),u(k),w(k),k.command("model",{hidden:!0}).argument("[name]","model name to switch to").action(o=>{const e=b().geminiModel||"gemini-2.5-flash";o?(T({geminiModel:o}),console.log(),console.log(chalk.green("  Model switched: ")+chalk.gray(e)+chalk.white(" -> ")+chalk.bold.white(o)),console.log()):(console.log(),console.log(chalk.gray("  Current model: ")+chalk.white(e)),console.log(),console.log(chalk.gray("  Available models:")),console.log(chalk.bold.white("    Gemini 3.x (Latest)")),console.log(chalk.white("    model gemini-3.1-pro-preview    ")+chalk.gray("Most powerful, paid")),console.log(chalk.white("    model gemini-3-flash-preview    ")+chalk.gray("Fast, free tier")),console.log(chalk.bold.white("    Gemini 2.5 (Stable)")),console.log(chalk.white("    model gemini-2.5-flash          ")+chalk.gray("Fast, free tier (default)")),console.log(chalk.white("    model gemini-2.5-pro            ")+chalk.gray("Strong reasoning, paid")),console.log(chalk.bold.white("    Open Source")),console.log(chalk.white("    model gemma-4-31b-it            ")+chalk.gray("Free, open-source")),console.log(chalk.white("    model <any-model-id>            ")+chalk.gray("Custom model")),console.log(),console.log(chalk.gray("  Translation uses gemini-3.1-pro-preview for best quality.")),console.log())}),"1"===process.env.ICOA_RESET_STATE)try{const{clearExamState:o}=await import("./lib/exam-state.js");o(),console.log(chalk.yellow("⚠ ICOA_RESET_STATE=1 — local exam state wiped.")),console.log(chalk.gray("  (Token NOT revoked server-side. Re-enter a fresh token with `exam <token>`.)")),console.log()}catch(o){console.log(chalk.red("⚠ ICOA_RESET_STATE: could not clear state — ")+chalk.gray(String(o)))}k.parse();
+import{Command as o}from"commander";import chalk from"chalk";import{registerCtfCommands as e}from"./commands/ctf.js";import{registerRefCommand as n}from"./commands/ref.js";import{registerShellCommand as r}from"./commands/shell.js";import{registerFilesCommand as s}from"./commands/files.js";import{registerConnectCommand as t}from"./commands/connect.js";import{registerNoteCommand as l}from"./commands/note.js";import{registerLogCommand as i}from"./commands/log.js";import{registerLangCommand as a}from"./commands/lang.js";import{registerSetupCommand as m}from"./commands/setup.js";import{registerEnvCommand as c}from"./commands/env.js";import{registerAi4ctfCommand as g}from"./commands/ai4ctf.js";import{registerExamCommand as d}from"./commands/exam.js";import{registerCtf4aiDemoCommand as p}from"./commands/ctf4ai-demo.js";import{registerThemeCommand as y}from"./commands/theme.js";import{registerLearnCommand as h}from"./commands/learn.js";import{registerVla4CtfCommand as f}from"./commands/vla4ctf.js";import{registerDemo2Command as u}from"./commands/demo2.js";import{registerSimCommand as w}from"./commands/sim.js";import{registerSimvlaCommand as b}from"./commands/simvla.js";import{getConfig as T,saveConfig as $}from"./lib/config.js";import{startRepl as v}from"./repl.js";import{setTerminalTheme as j}from"./lib/theme.js";import{checkForUpdates as A}from"./lib/update-check.js";import{detectIcoaInstalls as C}from"./lib/platform.js";import{readFileSync as _}from"node:fs";import{fileURLToPath as E}from"node:url";import{dirname as I,join as S}from"node:path";const x=I(E(import.meta.url)),F=JSON.parse(_(S(x,"..","package.json"),"utf-8")).version,L=chalk.cyan("  ─────────────────────────────────────────────────────"),k=`\n${L}\n\n   ${chalk.bold.white("██╗ ██████╗ ██████╗  █████╗")}\n   ${chalk.bold.white("██║██╔════╝██╔═══██╗██╔══██╗")}\n   ${chalk.bold.white("██║██║     ██║   ██║███████║")}\n   ${chalk.bold.white("██║██║     ██║   ██║██╔══██║")}\n   ${chalk.bold.white("██║╚██████╗╚██████╔╝██║  ██║")}\n   ${chalk.bold.white("╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝")}\n\n   ${chalk.yellow("International Cyber Olympiad in AI 2026")}\n   ${chalk.bold.magenta("The World's First AI-Native CLI Operating System")}\n   ${chalk.bold.magenta("for Cybersecurity & AI Security Competition")}\n   ${chalk.bold.magenta("and Olympiad for K-12")}\n\n   ${chalk.green.bold("AI4CTF")}${chalk.gray("[Day 1]")}  ${chalk.white("AI as your teammate")}\n   ${chalk.red.bold("CTF4AI")}${chalk.gray("[Day 2]")}  ${chalk.white("Challenge & evaluate AI systems")}\n   ${chalk.bold.yellow("AI is your ally. AI is your target.")}\n\n   ${chalk.white("Sydney, Australia")}  ${chalk.gray("Jun 27 - Jul 2, 2026")}\n   ${chalk.cyan.underline("https://icoa2026.au")}\n\n   ${chalk.gray(`CLI-Native Competition Terminal  v${F}`)}\n\n${L}\n`;process.on("uncaughtException",o=>{"__REPL_NO_EXIT__"!==o.message&&(console.error(chalk.red("Error:"),o.message),process.exit(1))}),process.on("unhandledRejection",o=>{const e=o instanceof Error?o.message:String(o);"__REPL_NO_EXIT__"!==e&&(console.error(chalk.red("Error:"),e),process.exit(1))});const N=new o;if(N.name("icoa").version(F).description("ICOA CLI — CLI-Native CTF Competition Terminal").option("--resume","Resume previous session").action(async o=>{const e=T();j("high-contrast"===e.themeVariant?"high-contrast":"dark"),A(),function(){const o=C();if(o.length<=1)return;const e=o[0];if([...o.map(o=>o.version||"0.0.0")].sort((o,e)=>function(o,e){const n=o.split(".").map(o=>parseInt(o,10)||0),r=e.split(".").map(o=>parseInt(o,10)||0);for(let o=0;o<3;o++)if((n[o]||0)!==(r[o]||0))return(n[o]||0)-(r[o]||0);return 0}(e,o))[0]!==e.version){console.log(),console.log(chalk.yellow.bold("  ⚠ Multiple icoa installations detected on PATH:"));for(let e=0;e<o.length;e++){const n=o[e],r=n.version?`v${n.version}`:"(version unreadable)",s=0===e?chalk.yellow("→"):" ",t=0===e?chalk.gray(" ← currently running (older — shadowing newer install)"):chalk.gray(" ← shadowed");console.log(`     ${s} ${chalk.cyan(n.path.padEnd(28))} ${chalk.white(r)}${t}`)}console.log(),console.log(chalk.yellow("  The first install on PATH wins. To use the newer one, remove the older:")),console.log(),e.pkgDir?console.log(`     ${chalk.bold.cyan(`sudo rm -rf ${e.pkgDir} ${e.path}`)}`):console.log(`     ${chalk.bold.cyan(`sudo rm -rf ${e.path}  # also delete its node_modules dir`)}`),console.log(),console.log(chalk.gray("  Then re-run icoa to confirm version banner shows the newer release.")),console.log()}}();const n=process.env.LANG||process.env.LC_ALL||process.env.LC_CTYPE||"";if(!/UTF-?8/i.test(n))if("win32"===process.platform){let o="";try{const{execFileSync:e}=await import("node:child_process");o=e("chcp.com",[],{encoding:"utf-8",timeout:1500,stdio:["ignore","pipe","ignore"]}).trim()}catch{}o.includes("65001")||(console.log(chalk.yellow(`⚠ Windows terminal is not using UTF-8 (current: ${o||"unknown"}).`)),console.log(chalk.gray('  Non-English text (Ukrainian, Chinese, Japanese, etc.) may show as "?" or garbled glyphs.')),console.log(chalk.gray("  Fix (run before ")+chalk.cyan("icoa")+chalk.gray("): ")+chalk.cyan("chcp 65001")),console.log(chalk.gray("  Or stay in English inside the CLI: ")+chalk.cyan("lang en")),console.log())}else console.log(chalk.yellow(`⚠ Your terminal locale is not UTF-8 (LANG=${n||"(unset)"}).`)),console.log(chalk.gray('  Non-English text and box characters may display as "?" or garbled glyphs.')),console.log(chalk.gray("  Fix: ")+chalk.cyan("export LANG=en_US.UTF-8")+chalk.gray(" (or your locale, e.g. ")+chalk.cyan("zh_CN.UTF-8")+chalk.gray(", ")+chalk.cyan("uk_UA.UTF-8")+chalk.gray(")")),console.log();if(console.log(k),process.argv.length<=2||o.resume)return o.resume||await async function(){const o=process.stdin;if(o.isTTY&&"function"==typeof o.setRawMode)return new Promise(e=>{let n=!1;const r=()=>{if(!n){n=!0,o.removeListener("data",s);try{o.setRawMode(!1)}catch{}o.pause(),e()}},s=()=>r();o.setRawMode(!0),o.resume(),o.once("data",s),console.log(chalk.gray("   (press any key to continue...)")),setTimeout(r,3e3)});await new Promise(o=>setTimeout(o,3e3))}(),void v(N,!!o.resume)}),e(N),n(N),r(N),s(N),t(N),l(N),i(N),a(N),m(N),c(N),g(N),d(N),p(N),y(N),h(N),f(N),u(N),w(N),b(N),N.command("model",{hidden:!0}).argument("[name]","model name to switch to").action(o=>{const e=T().geminiModel||"gemini-2.5-flash";o?($({geminiModel:o}),console.log(),console.log(chalk.green("  Model switched: ")+chalk.gray(e)+chalk.white(" -> ")+chalk.bold.white(o)),console.log()):(console.log(),console.log(chalk.gray("  Current model: ")+chalk.white(e)),console.log(),console.log(chalk.gray("  Available models:")),console.log(chalk.bold.white("    Gemini 3.x (Latest)")),console.log(chalk.white("    model gemini-3.1-pro-preview    ")+chalk.gray("Most powerful, paid")),console.log(chalk.white("    model gemini-3-flash-preview    ")+chalk.gray("Fast, free tier")),console.log(chalk.bold.white("    Gemini 2.5 (Stable)")),console.log(chalk.white("    model gemini-2.5-flash          ")+chalk.gray("Fast, free tier (default)")),console.log(chalk.white("    model gemini-2.5-pro            ")+chalk.gray("Strong reasoning, paid")),console.log(chalk.bold.white("    Open Source")),console.log(chalk.white("    model gemma-4-31b-it            ")+chalk.gray("Free, open-source")),console.log(chalk.white("    model <any-model-id>            ")+chalk.gray("Custom model")),console.log(),console.log(chalk.gray("  Translation uses gemini-3.1-pro-preview for best quality.")),console.log())}),"1"===process.env.ICOA_RESET_STATE)try{const{clearExamState:o}=await import("./lib/exam-state.js");o(),console.log(chalk.yellow("⚠ ICOA_RESET_STATE=1 — local exam state wiped.")),console.log(chalk.gray("  (Token NOT revoked server-side. Re-enter a fresh token with `exam <token>`.)")),console.log()}catch(o){console.log(chalk.red("⚠ ICOA_RESET_STATE: could not clear state — ")+chalk.gray(String(o)))}N.parse();

package/dist/lib/simvla-cooldown.d.ts

@@ -0,0 +1,4 @@
+export declare const SIMVLA_COOLDOWN_SECONDS = 30;
+export declare function lastSimvlaAt(): number;
+export declare function markSimvlaAt(t: number): void;
+export declare function simvlaCooldownRemaining(): number;

package/dist/lib/simvla-cooldown.js

@@ -0,0 +1 @@
+import{mkdirSync as t,readFileSync as o,writeFileSync as a}from"node:fs";import{join as n}from"node:path";import{homedir as r}from"node:os";export const SIMVLA_COOLDOWN_SECONDS=30;const e=n(r(),".icoa","simvla-cooldown.json");export function lastSimvlaAt(){try{const t=o(e,"utf-8"),a=JSON.parse(t);return"number"==typeof a.lastCallAt?a.lastCallAt:0}catch{return 0}}export function markSimvlaAt(o){try{t(n(r(),".icoa"),{recursive:!0}),a(e,JSON.stringify({lastCallAt:o}))}catch{}}export function simvlaCooldownRemaining(){const t=(Date.now()-lastSimvlaAt())/1e3;return Math.max(0,Math.ceil(30-t))}

package/dist/repl.js

@@ -1 +1 @@
-import{createInterface as o}from"node:readline";import{spawn as e,execSync as t}from"node:child_process";import chalk from"chalk";import{isConnected as l,getConfig as n,saveConfig as s}from"./lib/config.js";import{isActivated as a,activateToken as r,isFreeCommand as i,isDeviceMatch as c,recordExit as g,recordResume as y,isFirstRunOrUpgrade as m,markVersionSeen as d}from"./lib/access.js";import{setReplMode as p}from"./lib/ui.js";import{returnToMainMenu as u,printMenuHint as h,menuHintInline as w}from"./lib/menu-nav.js";import{setMainRl as f}from"./lib/main-rl.js";import{isChatActive as b,handleChatMessage as x}from"./commands/ai4ctf.js";import{isCtf4aiActive as v,handleCtf4aiMessage as C}from"./commands/ctf4ai-demo.js";import{isVla4CtfActive as A,handleVla4CtfMessage as I}from"./commands/vla4ctf.js";import{isDemo2Active as k}from"./commands/demo2.js";import{getExamState as T,getRealExamState as $,getDemoState as S}from"./lib/exam-state.js";import{getDemoStats as O}from"./lib/demo-stats.js";import{isExamSetupComplete as E}from"./lib/exam-setup.js";import{DEMO_PICK_SIZE as L,DEMO_POOL_SIZE as P}from"./lib/demo-exam.js";import{isNativeWindowsCmd as q}from"./lib/platform.js";import{resetTerminalTheme as R}from"./lib/theme.js";import{ensureSandbox as j,runInSandbox as D,isDockerAvailable as N}from"./lib/sandbox.js";import{logCommand as F}from"./lib/logger.js";import{startLogSync as M,stopLogSync as U}from"./lib/log-sync.js";import{existsSync as W,mkdirSync as z,writeFileSync as B}from"node:fs";import{join as _}from"node:path";import{homedir as Q}from"node:os";function Y(){return $()?chalk.cyan("exam> "):S()?chalk.yellow("demo> "):chalk.green("icoa> ")}const V=_(Q(),"icoa-workspace");function J(){return W(V)||z(V,{recursive:!0}),V}const G=new Set(["sudo","su","doas","pkexec","brew","apt","apt-get","yum","choco","npm","npx","pip","pip3","shutdown","reboot","halt","mkfs","fdisk","dd","iptables","ufw"]),K="__REPL_NO_EXIT__",Z="2.5.1";function H(){const o=O(),e=E(),l=`Free practice — ${L} questions (from pool of ${P})`,n=q();if(console.log(),console.log(`   ${chalk.cyan.bold("[Selection Mode]")}`),console.log(),n)console.log(chalk.gray("   Platform: ")+chalk.white("Windows cmd.exe")+chalk.gray(" — routed to Paper C (MCQ-only, 45 min, 70 pts, zero extra tools)")),console.log();else if(o.attempts>0){const o=function(){const o=["python3.12 --version","/opt/homebrew/opt/python@3.12/bin/python3.12 --version","/usr/local/opt/python@3.12/bin/python3.12 --version","python3 --version","python --version","py -3.12 --version","py -3 --version"];let e="",l="missing";for(const n of o)try{const o=t(n,{encoding:"utf-8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim().replace("Python ",""),[s,a]=o.split(".").map(Number);if(3===s&&12===a)return{ok:!0,version:o,status:"ok"};e=o,l=3===s&&a>=10&&a<12?"old":3===s&&a>12?"new":"missing"}catch{}return{ok:"missing"!==l,version:e,status:l}}();"missing"===o.status?(console.log(chalk.yellow("   ⚠ Python not detected. For exam practical questions:")),console.log(chalk.gray("     → ")+chalk.bold.cyan("env python")+chalk.gray("  (platform install guide)")),console.log()):"new"===o.status&&(console.log(chalk.yellow(`   ⚠ Python ${o.version} may lack CTF wheels. Python 3.12 recommended:`)),console.log(chalk.gray("     → ")+chalk.bold.cyan("env python")+chalk.gray("  (install guide)")),console.log())}if(0===o.attempts)console.log(chalk.white("   New here? Start with ")+chalk.bold.cyan("demo")+chalk.white(" — it takes a few minutes.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.cyan("     demo")+chalk.gray(`            ${l}`)),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"));else if(e||n){const e=1===o.attempts?"attempt":"attempts";o.attempts>0&&console.log(chalk.green("   ✓ Demo completed ")+chalk.gray(`(${o.attempts} ${e})`)),n||console.log(chalk.green("   ✓ Environment ready")),console.log(chalk.yellow("   → Enter your exam token to begin.")),console.log(chalk.gray("     (10-char code from your organizer, starts with your country code like ")+chalk.cyan("UA")+chalk.gray(" — case-insensitive)")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.yellow("     exam <token>")+chalk.gray("    Enter exam (primary action — use your organizer-issued token)")),console.log(chalk.gray("                     format: ")+chalk.white("exam UAxxxxxxxx")+chalk.gray("  (2-letter country prefix + 8 chars)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Other commands:")),console.log(chalk.white("     demo")+chalk.gray(`            ${l}`)),n||console.log(chalk.white("     exam setup")+chalk.gray("      Re-verify tool environment")),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"))}else{const e=1===o.attempts?"attempt":"attempts";console.log(chalk.green("   ✓ Demo completed ")+chalk.gray(`(${o.attempts} ${e}${o.bestPercentage>0?` · best ${o.bestPercentage}%`:""})`)),console.log(chalk.yellow("   → Next: prepare your environment for the real exam.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("     demo")+chalk.gray(`            ${l}`)),console.log(chalk.bold.yellow("     exam setup")+chalk.gray("      Install tools for national selection (~150MB)")),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"))}console.log(chalk.gray("   ")+chalk.gray("Tip: ")+chalk.cyan("help")+chalk.gray(" for commands · ")+w()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()}export async function startRepl(e,S){process.env.ICOA_INSIDE_REPL="1";const O=n(),E=l(),L=process.exit.bind(process),P=a();if(O.demoCleanedForVersion!==Z){try{const{existsSync:o,unlinkSync:e}=await import("node:fs"),{join:t}=await import("node:path"),{getIcoaDir:l}=await import("./lib/config.js"),n=t(l(),"demo-state.json");o(n)&&e(n)}catch{}s({demoCleanedForVersion:Z})}const{select:q,confirm:oo}=await import("@inquirer/prompts"),eo=O.mode||"",to=[{name:`  ${chalk.bold("National Selection")}         ${chalk.gray("—")}  ${chalk.gray("demo, exam (lightweight)")}`,value:"selection"},{name:`  ${chalk.bold("Embodied AI Security")} 🤖    ${chalk.gray("—")}  ${chalk.gray("New VLA4CTF! sim demo2 and learn more")}`,value:"embodied"},{name:`  ${chalk.bold("International Olympiad")}     ${chalk.gray("—")}  ${chalk.gray("CTF × AI (~500MB, advanced)")}`,value:"olympiad"},{name:`  ${chalk.bold("National/Regional Partner")}  ${chalk.gray("—")}  ${chalk.gray("organizer tools (tokens, competitions)")}`,value:"organizer"},{name:`  ${chalk.gray("About ICOA")}                 ${chalk.gray("·")}  ${chalk.gray("Info & contact")}`,value:"about"}];console.log(chalk.gray("   Use ")+chalk.yellow("↑")+chalk.gray(" or ")+chalk.yellow("↓")+chalk.gray(" to select, ")+chalk.yellow("Enter")+chalk.gray(" to confirm.")),console.log();let lo="";for(;!lo;){const o=await q({message:"Mode",choices:to,default:eo||"selection"});"about"!==o?lo=o:(console.clear(),console.log(),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(chalk.bold.yellow("   ICOA")+chalk.white(" — AI-Native CLI OS for Cyber & AI Security")),console.log(chalk.gray("   Olympiad & Competition  ·  K-12 to University")),console.log(chalk.cyan("  ───────────────────────────────────────────────────")),console.log(),console.log(chalk.bold.white("   What Makes ICOA Different")),console.log(chalk.gray("   · AI-native     AI teammate, AI adversary, AI translation")),console.log(chalk.gray("   · CLI OS        Complete competition environment in terminal")),console.log(chalk.gray("   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured")),console.log(chalk.gray("   · Global scale  15,000+ concurrent exams · 15 languages")),console.log(),console.log(chalk.bold.white("   Competition Format")),console.log(`   ${chalk.green.bold("AI4CTF")}${chalk.gray(" [Day 1]  AI as teammate — 5hr jeopardy CTF")}`),console.log(`   ${chalk.red.bold("CTF4AI")}${chalk.gray(" [Day 2]  Challenge AI — adversarial ML, red-team")}`),console.log(`   ${chalk.cyan.bold("VLA4CTF")}${chalk.gray(" [Pioneer Round] Embodied AI — attack robot brains (NEW)")}`),console.log(),console.log(chalk.white("   Sydney, Australia")+chalk.gray("  ·  Jun 27 - Jul 2, 2026  ·  40+ countries")),console.log(),console.log(chalk.bold.white("   Organized by")+chalk.gray("  ASRA (Australia) · ICO Foundation Inc")),console.log(chalk.bold.white("   Contact     ")+chalk.cyan(" australia@icoa2026.au  ·  accreditation@icoa2026.au")),console.log(chalk.bold.white("   Website     ")+chalk.cyan.underline(" https://icoa2026.au")),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(),console.log(chalk.gray("   Press ")+chalk.yellow("Enter")+chalk.gray(" to return...")),await new Promise(o=>{const e=t=>{process.stdin.removeListener("data",e),process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!1),process.stdin.pause(),o()};process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.once("data",e)}),console.clear())}if("olympiad"===lo&&"olympiad"!==eo&&(console.log(),console.log(chalk.yellow("   This mode will download ~500MB of CTF tools and AI models.")),await oo({message:"Continue?",default:!0})||(lo="selection",console.log(chalk.gray("   Switched to National Selection mode.")))),lo!==eo&&s({mode:lo}),console.log(),"olympiad"===lo&&m(Z)){d(Z),console.log(chalk.gray("   Checking competition environment..."));const{execSync:o}=await import("node:child_process"),e=[{name:"pwntools",cmd:'python3 -c "import pwn"'},{name:"z3-solver",cmd:'python3 -c "import z3"'},{name:"numpy",cmd:'python3 -c "import numpy"'},{name:"requests",cmd:'python3 -c "import requests"'}];let t=0;for(const l of e)try{o(l.cmd,{stdio:"ignore"})}catch{t++}if(t>0){console.log(chalk.yellow(`   ${t} core libraries missing.`));try{const{confirm:o}=await import("@inquirer/prompts");if(await o({message:"  Install competition Python libraries now?",default:!0,theme:{prefix:"",style:{message:o=>chalk.green(o),defaultAnswer:o=>chalk.green(o)}}})){console.log();const{execSync:o}=await import("node:child_process");o("icoa env setup",{stdio:"inherit"})}}catch{console.log(chalk.gray("   Run ")+chalk.white("env setup")+chalk.gray(" later to install."))}console.log()}else console.log(chalk.green("   All core libraries ready.")),console.log()}if(S){const o=y();if(o){const e=Math.floor(o.awaySeconds/60),t=o.awaySeconds%60;console.log(chalk.yellow(`   Session resumed. Away: ${e}m ${t}s | Total exits: ${o.exitCount}`)),console.log()}}"selection"===lo?H():"embodied"===lo?(console.log(chalk.cyan.bold("   [Embodied AI Security  🤖]")),console.log(),console.log(chalk.bold.cyan("   VLA4CTF")+chalk.gray(" — ICOA 2026's ")+chalk.bold.white("Pioneer Round")),console.log(chalk.gray("   an independent parallel track alongside the scored main events: ")+chalk.green("AI4CTF")+chalk.gray(" (Day 1) and ")+chalk.red("CTF4AI")+chalk.gray(" (Day 2)")),console.log(),console.log(chalk.white("   Embodied AI is at its ImageNet moment.")),console.log(chalk.gray("   VLA models, MuJoCo physics, real robot arms.")),console.log(chalk.gray("   Real models, real physics, real attack surfaces.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.yellow("   First time? Try in order:  ")+chalk.bold.cyan("① sim")+chalk.gray("  →  ")+chalk.bold.cyan("② demo2")+chalk.gray("  →  ")+chalk.bold.cyan("③ learn LEARNDEMO01")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.green("     sim")+chalk.gray("                     ")+chalk.bold.cyan("①")+chalk.gray(" ")+chalk.bold.yellow("★ WOW")+chalk.gray(" — robot arm replay in seconds")),console.log(chalk.bold.green("     demo2")+chalk.gray("                   ")+chalk.bold.cyan("②")+chalk.gray(" ~8 min interactive intro + live MuJoCo sim")),console.log(chalk.bold.green("     learn LEARNDEMO01")+chalk.gray("       ")+chalk.bold.cyan("③")+chalk.gray(" free 11-card intro (paste this command as-is)")),console.log(chalk.bold.green("     learn ")+chalk.bold.yellow("EAxxxxxxxx")+chalk.gray("        full 100/480-card curriculum (team-issued)")),console.log(chalk.bold.green("     exam ")+chalk.bold.yellow("PDxxxxxxxx")+chalk.gray("         Paper D (VLA4CTF) — national selection contestants")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),console.log(chalk.gray("   Three open tiers: ")+chalk.green("free 11")+chalk.gray(" · ")+chalk.yellow("registered 100")+chalk.gray(" · ")+chalk.bold.magenta("national team 480")+chalk.gray(" (PhD-ready)")),console.log(chalk.gray("   Country team contact: ")+chalk.cyan("australia@icoa2026.au")),console.log(),h(),console.log()):"organizer"===lo?(console.log(chalk.yellow.bold("   [National/Regional Partner]")),console.log(),console.log(chalk.bold.white("   ██╗ ██████╗ ██████╗  █████╗")),console.log(chalk.bold.white("   ██║██╔════╝██╔═══██╗██╔══██╗")),console.log(chalk.bold.white("   ██║██║     ██║   ██║███████║")),console.log(chalk.bold.white("   ██║██║     ██║   ██║██╔══██║")),console.log(chalk.bold.white("   ██║╚██████╗╚██████╔╝██║  ██║")),console.log(chalk.bold.white("   ╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝")),console.log(),console.log(chalk.yellow("   International Cyber Olympiad in AI 2026")),console.log(chalk.bold.magenta("   The World's First AI-Native CLI Operating System")),console.log(chalk.bold.magenta("   for Cybersecurity & AI Security Competition")),console.log(chalk.bold.magenta("   and Olympiad for K-12")),console.log(chalk.gray("   Sydney, Australia · Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.white("   Vision")),console.log(chalk.gray("   Building a global pipeline for youth cyber & AI")),console.log(chalk.gray("   security talent through education and competition.")),console.log(),console.log(chalk.white("   Capacity")),console.log(chalk.gray("   15,000+ concurrent online examinations")),console.log(chalk.gray("   National selection, training, and education support")),console.log(),console.log(chalk.white("   Olympic Spirit")),console.log(chalk.gray("   Excellence · Friendship · Respect")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   New country accreditation & support:")),console.log(chalk.cyan("     australia@icoa2026.au")),console.log(chalk.cyan("     accreditation@icoa2026.au")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),E?(console.log(chalk.green(`   Logged in as ${O.userName}`)),console.log(chalk.white("     exam list")+chalk.gray("       Manage exams")),console.log(chalk.white("     logout")+chalk.gray("          Disconnect"))):console.log(chalk.white("     join <url>")+chalk.gray("      Connect to manage exams")),console.log(),h(),console.log()):P&&!c()?(console.log(chalk.red("   Token was activated on a different device.")),console.log(chalk.gray("   Contact organizer for assistance.")),console.log()):E?(console.log(chalk.green.bold(`   Welcome back, ${O.userName}!`)),console.log(chalk.gray(`   Connected to ${O.ctfdUrl}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Ready to compete? Start here:")),console.log(),console.log(chalk.bold.cyan("     challenges")+chalk.gray("     Browse challenges by category")),console.log(chalk.white("     status")+chalk.gray("         Your score & hint budget")),console.log(chalk.white("     scoreboard")+chalk.gray("     Live rankings")),console.log(chalk.white("     help")+chalk.gray("           Full command list")),console.log(),console.log(chalk.gray("   Tool environment:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("help")+chalk.gray(" · ")+w()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()):P?(J(),console.log(chalk.green.bold("   Welcome, competitor!")),console.log(chalk.gray(`   Workspace: ${V}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Get started:")),console.log(),console.log(chalk.white("   Step 1  ")+chalk.bold.cyan("join <url>")+chalk.gray("   Connect to competition server")),console.log(chalk.white("   Step 2  ")+chalk.bold.cyan("challenges")+chalk.gray("   Browse & solve challenges")),console.log(chalk.white("   Step 3  ")+chalk.bold.cyan("ai4ctf")+chalk.gray("       Ask AI when stuck")),console.log(),console.log(chalk.gray("   Before Step 1 — make sure your tools are ready:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(),console.log(chalk.gray("   Also: ")+chalk.white("help")+chalk.gray(" all commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()):(console.log(chalk.bold.white("   Welcome to ICOA CLI — International Olympiad")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   To begin, activate your competition token:")),console.log(),console.log(chalk.bold.cyan("     activate <token>")),console.log(),console.log(chalk.gray("   While waiting, explore:")),console.log(chalk.white("     ref linux")+chalk.gray("       Quick reference for Linux")),console.log(chalk.white("     ref web")+chalk.gray("         Quick reference for Web")),console.log(chalk.white("     env")+chalk.gray("             See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("       Install anything missing (~5 min, one-time)")),console.log(chalk.white("     help")+chalk.gray("            All available commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()),e.exitOverride(),e.configureOutput({writeErr:()=>{},writeOut:o=>{console.log(o)}});const no=o({input:process.stdin,output:process.stdout,prompt:Y(),terminal:!0});f(no);let so=!1;p(!0),M();const ao=no.prompt.bind(no);no.prompt=o=>{b()||v()||A()||k()||no.setPrompt(Y()),ao(o)},no.prompt(),no.on("line",async o=>{if(so)return;const l=o.trim();if(!l)return no.setPrompt(b()?chalk.magenta("ai4ctf> "):Y()),void no.prompt();if("menu"===l||"menu confirm"===l)return $()&&"menu confirm"!==l?(console.log(),console.log(chalk.yellow("  Real exam active. Progress is auto-saved.")),console.log(chalk.gray("  To return to main menu anyway, type ")+chalk.white("menu confirm")),console.log(),void no.prompt()):void u(no);if(b()){so=!0;const o=await x(l);return so=!1,"exit"===o&&no.setPrompt(Y()),void no.prompt()}if(v()){so=!0;const o=await C(l);return so=!1,"exit"!==o&&"solved"!==o||no.setPrompt(Y()),void no.prompt()}if(A()){so=!0;const o=await I(l);return so=!1,"exit"===o&&no.setPrompt(Y()),no.setPrompt(A()?chalk.bold.cyan("vla4ctf> "):Y()),void no.prompt()}if(F(l),"exit"===l)return T()?(console.log(),console.log(chalk.yellow("  ⚠ An exam is in progress.")),console.log(chalk.white("  To return to menu without losing progress, type: ")+chalk.bold.cyan("back")),console.log(chalk.white("  To fully close ICOA CLI, type: ")+chalk.bold.cyan("quit")),console.log(chalk.gray("  Your progress is auto-saved either way.")),console.log(),void no.prompt()):(console.log(),console.log(chalk.gray("  ")+chalk.white("exit")+chalk.gray(" returns to the main menu. To fully close ICOA CLI, type ")+chalk.bold.cyan("quit")+chalk.gray(".")),"selection"===lo&&H(),void no.prompt());if("quit"===l||"q"===l||"quit confirm"===l){const o=T();return o&&"demo-free"!==o.session.examId&&"quit confirm"!==l?(console.log(),console.log(chalk.yellow("  ⚠ A real exam is in progress.")),console.log(chalk.gray("    Your answers are auto-saved on the server, but the exam timer keeps ticking")),console.log(chalk.gray("    on the server side even if you close the CLI.")),console.log(),console.log(chalk.white("  To leave the CLI but keep the exam alive, type: ")+chalk.bold.cyan("back")),console.log(chalk.gray("    (recommended — you can resume with ")+chalk.cyan("exam q 1")+chalk.gray(" after relaunching icoa)")),console.log(),console.log(chalk.white("  To really close ICOA CLI, type: ")+chalk.bold.cyan("quit confirm")),console.log(),void no.prompt()):(o&&"demo-free"===o.session.examId&&(console.log(),console.log(chalk.gray("  Demo paused. Resume with: ")+chalk.white("demo")+chalk.gray(" (fresh) or ")+chalk.white("exam q 1")+chalk.gray(" (continue)."))),U(),g(),console.log(chalk.gray("  Session saved. Use ")+chalk.white("icoa --resume")+chalk.gray(" to continue.")),R(),void L(0))}if("back"===l){const o=T(),e=o&&"demo-free"!==o.session.examId,t=o&&"demo-free"===o.session.examId&&(()=>{const e=new Date(o.session.startedAt||0).getTime();return Date.now()-e<18e5})();if(e)console.log(),console.log(chalk.gray("  Exam paused. Your progress is saved.")),console.log(chalk.white("  Resume: exam q 1")+chalk.gray("  ·  ")+chalk.white("exam review")+chalk.gray("  ·  ")+chalk.white("exam submit")),console.log();else if(t){const e=Object.keys(o.answers).length,t=o.session.questionCount;console.log(),console.log(chalk.gray(`  Demo paused (${e}/${t} answered). Resume with: `)+chalk.white("exam q 1")),console.log(chalk.gray("  Or type ")+chalk.white("demo")+chalk.gray(" to restart.")),console.log()}else{if(o&&"demo-free"===o.session.examId){const{clearExamState:o}=await import("./lib/exam-state.js");o("demo-free")}const e=n();fetch("https://practice.icoa2026.au/api/icoa/demo-stats",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({type:"post-report-back",lang:e.language||"en",timestamp:(new Date).toISOString()}),signal:AbortSignal.timeout(5e3)}).catch(()=>{}),"selection"===lo?H():console.log(chalk.gray("  Already at main menu."))}return void no.prompt()}if("help"===l||"?"===l){if(T()){so=!0;try{await e.parseAsync(["node","icoa","exam","help"])}catch{}return so=!1,void no.prompt()}return function(o,e="olympiad"){console.log(),"selection"===e||"organizer"===e?(console.log(chalk.bold.white("  Exam")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to exam server")),console.log(chalk.white("    exam list           ")+chalk.gray("Available exams")),console.log(chalk.white("    exam start <id>     ")+chalk.gray("Begin an exam")),console.log(chalk.white("    exam q [n]          ")+chalk.gray("View questions")),console.log(chalk.white("    exam answer <n> <X> ")+chalk.gray("Answer question")),console.log(chalk.white("    exam review         ")+chalk.gray("Review all answers")),console.log(chalk.white("    exam submit         ")+chalk.gray("Submit for grading")),console.log(chalk.white("    exam result         ")+chalk.gray("View your score")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    setup               ")+chalk.gray("Settings / switch mode")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),console.log()):o?(console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(chalk.bold.white("  How it works")),console.log(),console.log(chalk.gray("  1. Browse ")+chalk.white("challenges")+chalk.gray(" and pick one")),console.log(chalk.gray("  2. ")+chalk.white("open <id>")+chalk.gray(" to read the challenge")),console.log(chalk.gray("  3. Use ")+chalk.white("ai4ctf")+chalk.gray(" to chat with AI when stuck")),console.log(chalk.gray("  4. ")+chalk.white("submit <id> icoa{flag}")+chalk.gray(" to score points")),console.log(chalk.gray("  5. Check ")+chalk.white("scoreboard")+chalk.gray(" to track your rank")),console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(),console.log(chalk.bold.white("  Competition")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to CTFd")),console.log(chalk.white("    challenges (ch)     ")+chalk.gray("List challenges by category")),console.log(chalk.white("    open <id>           ")+chalk.gray("Read challenge + get next steps")),console.log(chalk.white("    submit <id> <flag>  ")+chalk.gray("Submit a flag")),console.log(chalk.white("    scoreboard (sb)     ")+chalk.gray("Live rankings")),console.log(chalk.white("    status              ")+chalk.gray("Your score, budget & timer")),console.log(chalk.white("    time                ")+chalk.gray("Countdown timer")),console.log(),console.log(chalk.bold.white("  AI Teammate")+chalk.gray(" — 3 levels, use wisely")),console.log(chalk.white('    hint "question"     ')+chalk.gray("Level A — General guidance (50 uses)")),console.log(chalk.white('    hint-b "question"   ')+chalk.gray("Level B — Deep analysis (10 uses)")),console.log(chalk.white('    hint-c "question"   ')+chalk.gray("Level C — Critical assist (2 uses)")),console.log(chalk.white("    hint budget         ")+chalk.gray("Check remaining uses")),console.log(chalk.white("    ai4ctf              ")+chalk.gray("Free-chat with AI (no limit)")),console.log(),console.log(chalk.bold.white("  Tools")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference (linux, web, crypto...)")),console.log(chalk.white("    shell               ")+chalk.gray("Docker sandbox")),console.log(chalk.white("    files <id>          ")+chalk.gray("Download challenge files")),console.log(chalk.white("    connect <id>        ")+chalk.gray("Connect to remote target")),console.log(chalk.white("    note [text]         ")+chalk.gray("Personal notepad")),console.log(chalk.white("    log                 ")+chalk.gray("Session history")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    setup               ")+chalk.gray("Configure settings")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language (15 supported)")),console.log(chalk.white("    logout              ")+chalk.gray("Disconnect")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit (session saved)")),console.log()):(console.log(chalk.bold.yellow("  Restricted Mode — activate with a token to unlock all commands")),console.log(),console.log(chalk.white("    activate <token>    ")+chalk.gray("Unlock full access")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),console.log())}(a(),lo),void no.prompt()}if("more help"===l.toLowerCase()&&T()){so=!0;try{await e.parseAsync(["node","icoa","exam","more-help"])}catch{}return so=!1,void no.prompt()}if("continue"===l.toLowerCase())return console.log(),console.log(chalk.green.bold("  ═══ AI4CTF — AI as Your Teammate ═══")),console.log(),console.log(chalk.white("  In AI4CTF, you solve cybersecurity challenges")),console.log(chalk.white("  with AI by your side.")),console.log(),console.log(chalk.white("  In competition, you get AI help at 3 levels:")),console.log(chalk.yellow("    hint a")+chalk.gray("    General guidance (50 uses)")),console.log(chalk.yellow("    hint b")+chalk.gray("    Deep analysis (10 uses)")),console.log(chalk.yellow("    hint c")+chalk.gray("    Critical assist (2 uses)")),console.log(),console.log(chalk.white("  Try it now! Type: ")+chalk.bold.green("ai4ctf")),console.log(chalk.gray('  Chat freely with your AI teammate. Type "exit" when done.')),console.log(),console.log(chalk.gray("  After ai4ctf, try: ")+chalk.bold.red("ctf4ai")+chalk.gray(' — trick the AI into saying "koala"')),console.log(),void no.prompt();if(/^ICOA-[A-Z]{2,3}-\d{1,6}$/i.test(l.trim())){so=!0;try{await e.parseAsync(["node","icoa","exam","token",l.trim()])}catch{}return so=!1,void no.prompt()}if(/^[A-Z]{2}[0-9A-HJKMNP-TV-Z]{8}$/i.test(l.trim())){so=!0;try{await e.parseAsync(["node","icoa","exam","token",l.trim().toUpperCase()])}catch{}return so=!1,void no.prompt()}const s=l.match(/^exam\s+([A-Z]{2}[0-9A-HJKMNP-TV-Z]{8})$/i);if(s){so=!0;try{await e.parseAsync(["node","icoa","exam","token",s[1].toUpperCase()])}catch{}return so=!1,void no.prompt()}const y=l.match(/^exam\s+([A-Z]{2,3})$/i);if(y){so=!0;try{await e.parseAsync(["node","icoa","exam","list",y[1]])}catch{}return so=!1,void no.prompt()}if("clear"===l||"cls"===l)return console.clear(),void no.prompt();if(l.startsWith("activate ")){const o=l.slice(9).trim(),e=r(o);return"ok"===e?console.log(chalk.green("  Access granted! Token bound to this device.")):"already_bound"===e?(console.log(),console.log(chalk.red("  Token already activated on a different device.")),console.log(chalk.gray("  Each token binds to the first device that uses it. If you lost the device,")),console.log(chalk.gray("  contact your proctor to have the token re-issued for a new device."))):(console.log(),console.log(chalk.red("  Token not recognized.")),console.log(chalk.gray("  Possible reasons:")),console.log(chalk.white("    • ")+chalk.gray("Typo — tokens are case-insensitive, 10 chars, start with a 2-letter country code (e.g. ")+chalk.cyan("UAK7M2R9Q4")+chalk.gray(")")),console.log(chalk.white("    • ")+chalk.gray("Expired — ask your proctor or organizer for a fresh token")),console.log(chalk.white("    • ")+chalk.gray("Network — verify connection to ")+chalk.cyan("practice.icoa2026.au")),console.log(chalk.gray("  Still stuck? type ")+chalk.cyan("help")+chalk.gray(" or try ")+chalk.cyan("exam demo")+chalk.gray(" for a free practice round."))),console.log(),void no.prompt()}if("activate"===l)return console.log(chalk.gray("  Usage: ")+chalk.white("activate <token>")),console.log(),void no.prompt();const m=T();if(m){const o=l.toUpperCase().trim(),t=o=>{const e=m.questions.find(e=>e.number===o);return!!e&&("ai4ctf"===e.type||"ctf4ai"===e.type||e.options&&!e.options.A&&!e.options.B)},n=o=>{const e="demo-free"!==m.session.examId,t=e&&o>=39?"ctf4ai":e&&o>=31?"ai4ctf":null;console.log(),console.log(chalk.yellow(`  Q${o} is a practical question — letters (A/B/C/D) don't apply here.`)),t?(console.log(chalk.white("  Enter the AI chat for this question:  ")+chalk.bold.cyan(t)),console.log(chalk.gray("  Or submit a flag directly: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`))):console.log(chalk.gray("  Submit a flag: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`)),console.log()};if(/^[ABCD]$/.test(o)){const l=m._lastQ||1;if(t(l))return n(l),void no.prompt();so=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(l),o])}catch{}return so=!1,void no.prompt()}const s=o.match(/^(\d+)\s+([ABCD])$/);if(s){const o=parseInt(s[1],10);if(t(o))return n(o),void no.prompt();so=!0;try{await e.parseAsync(["node","icoa","exam","answer",s[1],s[2]])}catch{}return so=!1,void no.prompt()}}const d=l.split(/\s+/)[0].toLowerCase(),p=/^python3?(\.\d+)?$/.test(d),h=l.startsWith("!")||d.startsWith("!")||p;if("embodied"===lo&&!h&&!["demo2","learn","exam","vla4ctf","lang","ref","setup","env","sim"].includes(d))return console.log(chalk.gray("  Not available in Embodied AI Security mode.")),console.log(chalk.white("  Try ")+chalk.bold.cyan("demo2")+chalk.gray(" (intro) · ")+chalk.bold.cyan("learn")+chalk.gray(" (curriculum) · ")+chalk.bold.cyan("exam <PD-token>")+chalk.gray(" (Paper D)")),console.log(),void no.prompt();if("selection"===lo&&!h&&!["exam","demo","retry","nations","next","prev","continue","setup","lang","ref","ai4ctf","ctf4ai","mark","unmark","review","submit","env","sim"].includes(d)){if(console.log(chalk.gray("  Not available in Selection mode.")),m){const o=m._lastQ||1;console.log(chalk.white(`  Resume exam: exam q ${o}`)+chalk.gray("  ·  ")+chalk.white("A/B/C/D")+chalk.gray(" to answer"))}else console.log(chalk.gray("  Try: demo  ·  setup to switch mode"));return console.log(),void no.prompt()}if("organizer"===lo&&!["join","exam","demo","retry","next","prev","logout","setup","lang","ref","ctf","mark","unmark","review","submit"].includes(d))return console.log(chalk.gray("  Not available in Organizer mode. Switch via: setup")),console.log(),void no.prompt();if(!("olympiad"!==lo||a()&&c()||i(d)))return console.log(chalk.yellow("  Restricted mode. ")+chalk.gray("Enter your access token:")),console.log(chalk.white("    activate <token>")),console.log(),console.log(chalk.gray("  Free commands: ")+chalk.white("ref [topic]")+chalk.gray(", ")+chalk.white("help")+chalk.gray(", ")+chalk.white("exit")),console.log(),void no.prompt();if(!["join","activate","challenges","ch","open","submit","flag","scoreboard","sb","status","time","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","model","ctf","exam","demo","retry","nations","next","prev","continue","logout","ctf4ai","mark","unmark","review","submit","learn","demo2","vla4ctf","theme","sim"].includes(d)){if(G.has(d))return console.log(chalk.red(`  Blocked: ${d} is not allowed during competition.`)),console.log(),void no.prompt();if(/(?:^|\s)(?:\/(?!home\/|Users\/|tmp\/)|\.\.\/|~\/)/.test(l)&&!l.startsWith("cd ")){const o=/(?:^|\s)\/(?!home\/\w+\/icoa-workspace|Users\/\w+\/icoa-workspace|tmp\/)/.test(l),e=/\.\./.test(l);if(o||e)return console.log(chalk.red("  Blocked: access outside workspace is not allowed.")),console.log(chalk.gray(`  Workspace: ${V}`)),console.log(),void no.prompt()}let o=l.startsWith("!")?l.slice(1).trim():l;if("darwin"===process.platform){const e="/opt/homebrew/opt/python@3.12/bin/python3.12";o=o.replace(/^python3?\s/,`${e} `).replace(/^(python3|python)$/,e)}else if("win32"===process.platform){const e=(()=>{try{return t("py -3 --version",{stdio:["ignore","ignore","ignore"],timeout:1500}),"py -3"}catch{}return"python"})();o=o.replace(/^python3?(\.\d+)?\s/,`${e} `).replace(/^python3?(\.\d+)?$/,e)}else{const e=(()=>{try{return t("which python3.12",{stdio:"ignore"}),"python3.12"}catch{return"python3"}})();o=o.replace(/^python\s/,`${e} `).replace(/^python$/,e)}const e=J();/^(\S*python3?(\.\d+)?)\s*$/.test(o)&&(o=`PYTHONSTARTUP="${function(){const o=_(Q(),".icoa");W(o)||z(o,{recursive:!0});const e=_(o,"python-startup.py");return W(e)||B(e,"# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP\nimport base64, struct, hashlib, re, json, os, sys, binascii\ntry: import requests\nexcept ImportError: pass\ntry: from Crypto.Cipher import AES\nexcept ImportError: pass\ntry: from Crypto.Util.Padding import pad, unpad\nexcept ImportError: pass\ntry: from pwn import xor, p32, u32, p64, u64\nexcept ImportError: pass\ntry: import bs4\nexcept ImportError: pass\ntry: import numpy as np\nexcept ImportError: pass\n"),e}()}" ${o}`,console.log(),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(chalk.bold.white("  Python ready — ICOA exam toolkit pre-loaded")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(),console.log(chalk.white("  Already imported: ")+chalk.gray("base64, struct, hashlib, re, json, binascii")),console.log(chalk.white("  Also available:   ")+chalk.gray("requests, bs4, numpy, AES, pad/unpad, xor, p32/u32/p64/u64")),console.log(),console.log(chalk.yellow("  Quick examples:")),console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ')+chalk.gray("# decode base64")),console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ')+chalk.gray("# hex → bytes")),console.log(chalk.gray('    "ICOA{x}".encode()                 ')+chalk.gray("# str → bytes")),console.log(chalk.gray("    [chr(c) for c in [73,67,79,65]]    ")+chalk.gray("# ASCII codes")),console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ')+chalk.gray("# pwntools XOR")),console.log(),console.log(chalk.gray("  Exit:  ")+chalk.white("exit()")+chalk.gray("  or Ctrl-D")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log()),so=!0;try{N()&&await j()?await D(o,no):await X(o,no,e)}catch{console.log(chalk.yellow(`  Command failed: ${d}`))}return so=!1,console.log(),void no.prompt()}so=!0;const w=l.trim(),f=w.toLowerCase();let k,S=null,O="";if(m)if("submit"===f)S="final";else if(f.startsWith("submit ")){let o=w.slice(7).trim();/^submit\s+/i.test(o)&&(o=o.replace(/^submit\s+/i,"").trim()),o=o.replace(/^["'`]+|["'`]+$/g,"").trim(),o&&/^ICOA\{[^}]*\}?$/i.test(o)&&(S="flag",O=o)}else/^ICOA\{[^}]+\}$/i.test(w)&&(S="flag",O=w);k="final"===S?["exam","submit"]:"flag"===S?["exam","answer",String(m?._lastQ||1),O]:function(o){const e=o.split(/\s+/),t=e[0].toLowerCase(),l=e.slice(1),n={demo:["exam","demo"],retry:["exam","demo-retry"],nations:["exam","nations"],next:["exam","next"],prev:["exam","prev"],mark:["exam","mark",...l],unmark:["exam","unmark",...l],review:["exam","review"],logout:["ctf","logout"],join:["ctf","join",...l],activate:["ctf","activate",...l],challenges:["ctf","challenges"],ch:["ctf","challenges"],open:["ctf","open",...l],submit:["ctf","submit",...l],flag:["ctf","submit",...l],scoreboard:["ctf","scoreboard",...l],sb:["ctf","scoreboard",...l],status:["ctf","status"],time:["ctf","time"]};return n[t]?n[t]:["ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","model","ctf","exam","ctf4ai"].includes(t)?[t,...l]:e}(l);const E="ctf"===k[0]&&"join"===k[1];E&&no.pause(),process.exit=()=>{throw new Error(K)};try{await e.parseAsync(["node","icoa",...k])}catch(o){const e=o instanceof Error?o.message:String(o);if(e===K);else if(e.includes("commander.unknownCommand")){const{distance:o}=await import("fastest-levenshtein"),e=["ctf","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","exam","ctf4ai","theme","clear","cls","quit","exit","back","menu","help","continue","activate","demo","challenges","status","scoreboard","join","logout"],t=d.split(/\s+/)[0]||d;let l={word:"",dist:1/0};for(const n of e){const e=o(t.toLowerCase(),n);e<l.dist&&(l={word:n,dist:e})}console.log(chalk.yellow(`  Unknown command: ${d}.`)),l.dist>0&&l.dist<=2&&console.log(chalk.gray("  Did you mean: ")+chalk.bold.cyan(l.word)+chalk.gray("?")),console.log(chalk.gray("  Type ")+chalk.cyan("help")+chalk.gray(" for the full command list."))}else e.includes("commander.")||(e.includes("fetch failed")||e.includes("ECONNREFUSED")||e.includes("ETIMEDOUT"))&&console.log(chalk.yellow("  Network error. Check your connection."))}finally{process.exit=L,so=!1,E&&no.resume()}b()?no.setPrompt(chalk.magenta("ai4ctf> ")):v()?no.setPrompt(chalk.red("ctf4ai> ")):A()&&no.setPrompt(chalk.bold.cyan("vla4ctf> ")),console.log(),no.prompt()}),no.on("SIGINT",()=>{if(console.log(),b()||v())console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still in the AI chat.")),console.log(chalk.white("  Type ")+chalk.bold.cyan("exit")+chalk.white(" to leave the chat and return to the menu."));else if(T()){const o="demo-free"!==T().session.examId;console.log(chalk.yellow("  Ctrl+C did NOT close ICOA CLI.")),console.log(chalk.gray(`  Your ${o?"exam":"demo"} is paused and every answer is auto-saved.`)),console.log(),console.log(chalk.white("  Resume: ")+chalk.cyan("exam q 1")+chalk.gray("  ·  Back to menu: ")+chalk.cyan("back")+chalk.gray("  ·  Close CLI: ")+chalk.cyan(o?"quit confirm":"quit"))}else console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still at the ")+chalk.cyan("icoa>")+chalk.yellow(" prompt.")),console.log(chalk.gray("  Keep typing — ")+chalk.cyan("help")+chalk.gray(" lists commands. (Only ")+chalk.cyan("quit")+chalk.gray(" or Ctrl+D actually close the CLI.)"));console.log(),no.prompt()}),no.on("close",()=>{U(),g(),R(),L(0)})}function X(o,t,l){return new Promise(n=>{const s=process.stdin,a=!!s.isTTY&&!!s.isRaw;if(t.pause(),s.isTTY&&"function"==typeof s.setRawMode)try{s.setRawMode(!1)}catch{}const r=e(o,{shell:!0,stdio:"inherit",cwd:l||process.cwd()}),i=()=>{if(s.isTTY&&"function"==typeof s.setRawMode&&a)try{s.setRawMode(!0)}catch{}t.resume(),n()};r.on("close",i),r.on("error",i)})}
+import{createInterface as o}from"node:readline";import{spawn as e,execSync as t}from"node:child_process";import chalk from"chalk";import{isConnected as l,getConfig as n,saveConfig as s}from"./lib/config.js";import{isActivated as a,activateToken as r,isFreeCommand as i,isDeviceMatch as c,recordExit as g,recordResume as y,isFirstRunOrUpgrade as m,markVersionSeen as d}from"./lib/access.js";import{setReplMode as p}from"./lib/ui.js";import{returnToMainMenu as u,printMenuHint as h,menuHintInline as w}from"./lib/menu-nav.js";import{setMainRl as f}from"./lib/main-rl.js";import{isChatActive as b,handleChatMessage as x}from"./commands/ai4ctf.js";import{isCtf4aiActive as v,handleCtf4aiMessage as C}from"./commands/ctf4ai-demo.js";import{isVla4CtfActive as A,handleVla4CtfMessage as I}from"./commands/vla4ctf.js";import{isDemo2Active as k}from"./commands/demo2.js";import{getExamState as T,getRealExamState as $,getDemoState as S}from"./lib/exam-state.js";import{getDemoStats as O}from"./lib/demo-stats.js";import{isExamSetupComplete as E}from"./lib/exam-setup.js";import{DEMO_PICK_SIZE as L,DEMO_POOL_SIZE as P}from"./lib/demo-exam.js";import{isNativeWindowsCmd as q}from"./lib/platform.js";import{resetTerminalTheme as R}from"./lib/theme.js";import{ensureSandbox as j,runInSandbox as D,isDockerAvailable as N}from"./lib/sandbox.js";import{logCommand as F}from"./lib/logger.js";import{startLogSync as M,stopLogSync as U}from"./lib/log-sync.js";import{existsSync as z,mkdirSync as W,writeFileSync as B}from"node:fs";import{join as _}from"node:path";import{homedir as Q}from"node:os";function Y(){return $()?chalk.cyan("exam> "):S()?chalk.yellow("demo> "):chalk.green("icoa> ")}const V=_(Q(),"icoa-workspace");function J(){return z(V)||W(V,{recursive:!0}),V}const G=new Set(["sudo","su","doas","pkexec","brew","apt","apt-get","yum","choco","npm","npx","pip","pip3","shutdown","reboot","halt","mkfs","fdisk","dd","iptables","ufw"]),K="__REPL_NO_EXIT__",Z="2.5.1";function H(){const o=O(),e=E(),l=`Free practice — ${L} questions (from pool of ${P})`,n=q();if(console.log(),console.log(`   ${chalk.cyan.bold("[Selection Mode]")}`),console.log(),n)console.log(chalk.gray("   Platform: ")+chalk.white("Windows cmd.exe")+chalk.gray(" — routed to Paper C (MCQ-only, 45 min, 70 pts, zero extra tools)")),console.log();else if(o.attempts>0){const o=function(){const o=["python3.12 --version","/opt/homebrew/opt/python@3.12/bin/python3.12 --version","/usr/local/opt/python@3.12/bin/python3.12 --version","python3 --version","python --version","py -3.12 --version","py -3 --version"];let e="",l="missing";for(const n of o)try{const o=t(n,{encoding:"utf-8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim().replace("Python ",""),[s,a]=o.split(".").map(Number);if(3===s&&12===a)return{ok:!0,version:o,status:"ok"};e=o,l=3===s&&a>=10&&a<12?"old":3===s&&a>12?"new":"missing"}catch{}return{ok:"missing"!==l,version:e,status:l}}();"missing"===o.status?(console.log(chalk.yellow("   ⚠ Python not detected. For exam practical questions:")),console.log(chalk.gray("     → ")+chalk.bold.cyan("env python")+chalk.gray("  (platform install guide)")),console.log()):"new"===o.status&&(console.log(chalk.yellow(`   ⚠ Python ${o.version} may lack CTF wheels. Python 3.12 recommended:`)),console.log(chalk.gray("     → ")+chalk.bold.cyan("env python")+chalk.gray("  (install guide)")),console.log())}if(0===o.attempts)console.log(chalk.white("   New here? Start with ")+chalk.bold.cyan("demo")+chalk.white(" — it takes a few minutes.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.cyan("     demo")+chalk.gray(`            ${l}`)),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"));else if(e||n){const e=1===o.attempts?"attempt":"attempts";o.attempts>0&&console.log(chalk.green("   ✓ Demo completed ")+chalk.gray(`(${o.attempts} ${e})`)),n||console.log(chalk.green("   ✓ Environment ready")),console.log(chalk.yellow("   → Enter your exam token to begin.")),console.log(chalk.gray("     (10-char code from your organizer, starts with your country code like ")+chalk.cyan("UA")+chalk.gray(" — case-insensitive)")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.yellow("     exam <token>")+chalk.gray("    Enter exam (primary action — use your organizer-issued token)")),console.log(chalk.gray("                     format: ")+chalk.white("exam UAxxxxxxxx")+chalk.gray("  (2-letter country prefix + 8 chars)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Other commands:")),console.log(chalk.white("     demo")+chalk.gray(`            ${l}`)),n||console.log(chalk.white("     exam setup")+chalk.gray("      Re-verify tool environment")),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"))}else{const e=1===o.attempts?"attempt":"attempts";console.log(chalk.green("   ✓ Demo completed ")+chalk.gray(`(${o.attempts} ${e}${o.bestPercentage>0?` · best ${o.bestPercentage}%`:""})`)),console.log(chalk.yellow("   → Next: prepare your environment for the real exam.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("     demo")+chalk.gray(`            ${l}`)),console.log(chalk.bold.yellow("     exam setup")+chalk.gray("      Install tools for national selection (~150MB)")),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"))}console.log(chalk.gray("   ")+chalk.gray("Tip: ")+chalk.cyan("help")+chalk.gray(" for commands · ")+w()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()}export async function startRepl(e,S){process.env.ICOA_INSIDE_REPL="1";const O=n(),E=l(),L=process.exit.bind(process),P=a();if(O.demoCleanedForVersion!==Z){try{const{existsSync:o,unlinkSync:e}=await import("node:fs"),{join:t}=await import("node:path"),{getIcoaDir:l}=await import("./lib/config.js"),n=t(l(),"demo-state.json");o(n)&&e(n)}catch{}s({demoCleanedForVersion:Z})}const{select:q,confirm:oo}=await import("@inquirer/prompts"),eo=O.mode||"",to=[{name:`  ${chalk.bold("National Selection")}         ${chalk.gray("—")}  ${chalk.gray("demo, exam (lightweight)")}`,value:"selection"},{name:`  ${chalk.bold("Embodied AI Security")} 🤖    ${chalk.gray("—")}  ${chalk.gray("New VLA4CTF! sim demo2 and learn more")}`,value:"embodied"},{name:`  ${chalk.bold("International Olympiad")}     ${chalk.gray("—")}  ${chalk.gray("CTF × AI (~500MB, advanced)")}`,value:"olympiad"},{name:`  ${chalk.bold("National/Regional Partner")}  ${chalk.gray("—")}  ${chalk.gray("organizer tools (tokens, competitions)")}`,value:"organizer"},{name:`  ${chalk.gray("About ICOA")}                 ${chalk.gray("·")}  ${chalk.gray("Info & contact")}`,value:"about"}];console.log(chalk.gray("   Use ")+chalk.yellow("↑")+chalk.gray(" or ")+chalk.yellow("↓")+chalk.gray(" to select, ")+chalk.yellow("Enter")+chalk.gray(" to confirm.")),console.log();let lo="";for(;!lo;){const o=await q({message:"Mode",choices:to,default:eo||"selection"});"about"!==o?lo=o:(console.clear(),console.log(),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(chalk.bold.yellow("   ICOA")+chalk.white(" — AI-Native CLI OS for Cyber & AI Security")),console.log(chalk.gray("   Olympiad & Competition  ·  K-12 to University")),console.log(chalk.cyan("  ───────────────────────────────────────────────────")),console.log(),console.log(chalk.bold.white("   What Makes ICOA Different")),console.log(chalk.gray("   · AI-native     AI teammate, AI adversary, AI translation")),console.log(chalk.gray("   · CLI OS        Complete competition environment in terminal")),console.log(chalk.gray("   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured")),console.log(chalk.gray("   · Global scale  15,000+ concurrent exams · 15 languages")),console.log(),console.log(chalk.bold.white("   Competition Format")),console.log(`   ${chalk.green.bold("AI4CTF")}${chalk.gray(" [Day 1]  AI as teammate — 5hr jeopardy CTF")}`),console.log(`   ${chalk.red.bold("CTF4AI")}${chalk.gray(" [Day 2]  Challenge AI — adversarial ML, red-team")}`),console.log(`   ${chalk.cyan.bold("VLA4CTF")}${chalk.gray(" [Pioneer Round] Embodied AI — attack robot brains (NEW)")}`),console.log(),console.log(chalk.white("   Sydney, Australia")+chalk.gray("  ·  Jun 27 - Jul 2, 2026  ·  40+ countries")),console.log(),console.log(chalk.bold.white("   Organized by")+chalk.gray("  ASRA (Australia) · ICO Foundation Inc")),console.log(chalk.bold.white("   Contact     ")+chalk.cyan(" australia@icoa2026.au  ·  accreditation@icoa2026.au")),console.log(chalk.bold.white("   Website     ")+chalk.cyan.underline(" https://icoa2026.au")),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(),console.log(chalk.gray("   Press ")+chalk.yellow("Enter")+chalk.gray(" to return...")),await new Promise(o=>{const e=t=>{process.stdin.removeListener("data",e),process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!1),process.stdin.pause(),o()};process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.once("data",e)}),console.clear())}if("olympiad"===lo&&"olympiad"!==eo&&(console.log(),console.log(chalk.yellow("   This mode will download ~500MB of CTF tools and AI models.")),await oo({message:"Continue?",default:!0})||(lo="selection",console.log(chalk.gray("   Switched to National Selection mode.")))),lo!==eo&&s({mode:lo}),console.log(),"olympiad"===lo&&m(Z)){d(Z),console.log(chalk.gray("   Checking competition environment..."));const{execSync:o}=await import("node:child_process"),e=[{name:"pwntools",cmd:'python3 -c "import pwn"'},{name:"z3-solver",cmd:'python3 -c "import z3"'},{name:"numpy",cmd:'python3 -c "import numpy"'},{name:"requests",cmd:'python3 -c "import requests"'}];let t=0;for(const l of e)try{o(l.cmd,{stdio:"ignore"})}catch{t++}if(t>0){console.log(chalk.yellow(`   ${t} core libraries missing.`));try{const{confirm:o}=await import("@inquirer/prompts");if(await o({message:"  Install competition Python libraries now?",default:!0,theme:{prefix:"",style:{message:o=>chalk.green(o),defaultAnswer:o=>chalk.green(o)}}})){console.log();const{execSync:o}=await import("node:child_process");o("icoa env setup",{stdio:"inherit"})}}catch{console.log(chalk.gray("   Run ")+chalk.white("env setup")+chalk.gray(" later to install."))}console.log()}else console.log(chalk.green("   All core libraries ready.")),console.log()}if(S){const o=y();if(o){const e=Math.floor(o.awaySeconds/60),t=o.awaySeconds%60;console.log(chalk.yellow(`   Session resumed. Away: ${e}m ${t}s | Total exits: ${o.exitCount}`)),console.log()}}"selection"===lo?H():"embodied"===lo?(console.log(chalk.cyan.bold("   [Embodied AI Security  🤖]")),console.log(),console.log(chalk.bold.cyan("   VLA4CTF")+chalk.gray(" — ICOA 2026's ")+chalk.bold.white("Pioneer Round")),console.log(chalk.gray("   an independent parallel track alongside the scored main events: ")+chalk.green("AI4CTF")+chalk.gray(" (Day 1) and ")+chalk.red("CTF4AI")+chalk.gray(" (Day 2)")),console.log(),console.log(chalk.white("   Embodied AI is at its ImageNet moment.")),console.log(chalk.gray("   VLA models, MuJoCo physics, real robot arms.")),console.log(chalk.gray("   Real models, real physics, real attack surfaces.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.yellow("   First time? Try in order:  ")+chalk.bold.cyan("① sim")+chalk.gray("  →  ")+chalk.bold.cyan("② demo2")+chalk.gray("  →  ")+chalk.bold.cyan("③ learn LEARNDEMO01")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.green("     sim")+chalk.gray("                     ")+chalk.bold.cyan("①")+chalk.gray(" ")+chalk.bold.yellow("★ WOW")+chalk.gray(" — robot arm replay in seconds")),console.log(chalk.bold.green("     demo2")+chalk.gray("                   ")+chalk.bold.cyan("②")+chalk.gray(" ~8 min interactive intro + live MuJoCo sim")),console.log(chalk.bold.green("     learn LEARNDEMO01")+chalk.gray("       ")+chalk.bold.cyan("③")+chalk.gray(" free 11-card intro (paste this command as-is)")),console.log(chalk.bold.green("     learn ")+chalk.bold.yellow("EAxxxxxxxx")+chalk.gray("        full 100/480-card curriculum (team-issued)")),console.log(chalk.bold.green("     exam ")+chalk.bold.yellow("PDxxxxxxxx")+chalk.gray("         Paper D (VLA4CTF) — national selection contestants")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),console.log(chalk.gray("   Three open tiers: ")+chalk.green("free 11")+chalk.gray(" · ")+chalk.yellow("registered 100")+chalk.gray(" · ")+chalk.bold.magenta("national team 480")+chalk.gray(" (PhD-ready)")),console.log(chalk.gray("   Country team contact: ")+chalk.cyan("australia@icoa2026.au")),console.log(),h(),console.log()):"organizer"===lo?(console.log(chalk.yellow.bold("   [National/Regional Partner]")),console.log(),console.log(chalk.bold.white("   ██╗ ██████╗ ██████╗  █████╗")),console.log(chalk.bold.white("   ██║██╔════╝██╔═══██╗██╔══██╗")),console.log(chalk.bold.white("   ██║██║     ██║   ██║███████║")),console.log(chalk.bold.white("   ██║██║     ██║   ██║██╔══██║")),console.log(chalk.bold.white("   ██║╚██████╗╚██████╔╝██║  ██║")),console.log(chalk.bold.white("   ╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝")),console.log(),console.log(chalk.yellow("   International Cyber Olympiad in AI 2026")),console.log(chalk.bold.magenta("   The World's First AI-Native CLI Operating System")),console.log(chalk.bold.magenta("   for Cybersecurity & AI Security Competition")),console.log(chalk.bold.magenta("   and Olympiad for K-12")),console.log(chalk.gray("   Sydney, Australia · Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.white("   Vision")),console.log(chalk.gray("   Building a global pipeline for youth cyber & AI")),console.log(chalk.gray("   security talent through education and competition.")),console.log(),console.log(chalk.white("   Capacity")),console.log(chalk.gray("   15,000+ concurrent online examinations")),console.log(chalk.gray("   National selection, training, and education support")),console.log(),console.log(chalk.white("   Olympic Spirit")),console.log(chalk.gray("   Excellence · Friendship · Respect")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   New country accreditation & support:")),console.log(chalk.cyan("     australia@icoa2026.au")),console.log(chalk.cyan("     accreditation@icoa2026.au")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),E?(console.log(chalk.green(`   Logged in as ${O.userName}`)),console.log(chalk.white("     exam list")+chalk.gray("       Manage exams")),console.log(chalk.white("     logout")+chalk.gray("          Disconnect"))):console.log(chalk.white("     join <url>")+chalk.gray("      Connect to manage exams")),console.log(),h(),console.log()):P&&!c()?(console.log(chalk.red("   Token was activated on a different device.")),console.log(chalk.gray("   Contact organizer for assistance.")),console.log()):E?(console.log(chalk.green.bold(`   Welcome back, ${O.userName}!`)),console.log(chalk.gray(`   Connected to ${O.ctfdUrl}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Ready to compete? Start here:")),console.log(),console.log(chalk.bold.cyan("     challenges")+chalk.gray("     Browse challenges by category")),console.log(chalk.white("     status")+chalk.gray("         Your score & hint budget")),console.log(chalk.white("     scoreboard")+chalk.gray("     Live rankings")),console.log(chalk.white("     help")+chalk.gray("           Full command list")),console.log(),console.log(chalk.gray("   Tool environment:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("help")+chalk.gray(" · ")+w()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()):P?(J(),console.log(chalk.green.bold("   Welcome, competitor!")),console.log(chalk.gray(`   Workspace: ${V}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Get started:")),console.log(),console.log(chalk.white("   Step 1  ")+chalk.bold.cyan("join <url>")+chalk.gray("   Connect to competition server")),console.log(chalk.white("   Step 2  ")+chalk.bold.cyan("challenges")+chalk.gray("   Browse & solve challenges")),console.log(chalk.white("   Step 3  ")+chalk.bold.cyan("ai4ctf")+chalk.gray("       Ask AI when stuck")),console.log(),console.log(chalk.gray("   Before Step 1 — make sure your tools are ready:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(),console.log(chalk.gray("   Also: ")+chalk.white("help")+chalk.gray(" all commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()):(console.log(chalk.bold.white("   Welcome to ICOA CLI — International Olympiad")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   To begin, activate your competition token:")),console.log(),console.log(chalk.bold.cyan("     activate <token>")),console.log(),console.log(chalk.gray("   While waiting, explore:")),console.log(chalk.white("     ref linux")+chalk.gray("       Quick reference for Linux")),console.log(chalk.white("     ref web")+chalk.gray("         Quick reference for Web")),console.log(chalk.white("     env")+chalk.gray("             See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("       Install anything missing (~5 min, one-time)")),console.log(chalk.white("     help")+chalk.gray("            All available commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()),e.exitOverride(),e.configureOutput({writeErr:()=>{},writeOut:o=>{console.log(o)}});const no=o({input:process.stdin,output:process.stdout,prompt:Y(),terminal:!0});f(no);let so=!1;p(!0),M();const ao=no.prompt.bind(no);no.prompt=o=>{b()||v()||A()||k()||no.setPrompt(Y()),ao(o)},no.prompt(),no.on("line",async o=>{if(so)return;const l=o.trim();if(!l)return no.setPrompt(b()?chalk.magenta("ai4ctf> "):Y()),void no.prompt();if("menu"===l||"menu confirm"===l)return $()&&"menu confirm"!==l?(console.log(),console.log(chalk.yellow("  Real exam active. Progress is auto-saved.")),console.log(chalk.gray("  To return to main menu anyway, type ")+chalk.white("menu confirm")),console.log(),void no.prompt()):void u(no);if(b()){so=!0;const o=await x(l);return so=!1,"exit"===o&&no.setPrompt(Y()),void no.prompt()}if(v()){so=!0;const o=await C(l);return so=!1,"exit"!==o&&"solved"!==o||no.setPrompt(Y()),void no.prompt()}if(A()){so=!0;const o=await I(l);return so=!1,"exit"===o&&no.setPrompt(Y()),no.setPrompt(A()?chalk.bold.cyan("vla4ctf> "):Y()),void no.prompt()}if(F(l),"exit"===l)return T()?(console.log(),console.log(chalk.yellow("  ⚠ An exam is in progress.")),console.log(chalk.white("  To return to menu without losing progress, type: ")+chalk.bold.cyan("back")),console.log(chalk.white("  To fully close ICOA CLI, type: ")+chalk.bold.cyan("quit")),console.log(chalk.gray("  Your progress is auto-saved either way.")),console.log(),void no.prompt()):(console.log(),console.log(chalk.gray("  ")+chalk.white("exit")+chalk.gray(" returns to the main menu. To fully close ICOA CLI, type ")+chalk.bold.cyan("quit")+chalk.gray(".")),"selection"===lo&&H(),void no.prompt());if("quit"===l||"q"===l||"quit confirm"===l){const o=T();return o&&"demo-free"!==o.session.examId&&"quit confirm"!==l?(console.log(),console.log(chalk.yellow("  ⚠ A real exam is in progress.")),console.log(chalk.gray("    Your answers are auto-saved on the server, but the exam timer keeps ticking")),console.log(chalk.gray("    on the server side even if you close the CLI.")),console.log(),console.log(chalk.white("  To leave the CLI but keep the exam alive, type: ")+chalk.bold.cyan("back")),console.log(chalk.gray("    (recommended — you can resume with ")+chalk.cyan("exam q 1")+chalk.gray(" after relaunching icoa)")),console.log(),console.log(chalk.white("  To really close ICOA CLI, type: ")+chalk.bold.cyan("quit confirm")),console.log(),void no.prompt()):(o&&"demo-free"===o.session.examId&&(console.log(),console.log(chalk.gray("  Demo paused. Resume with: ")+chalk.white("demo")+chalk.gray(" (fresh) or ")+chalk.white("exam q 1")+chalk.gray(" (continue)."))),U(),g(),console.log(chalk.gray("  Session saved. Use ")+chalk.white("icoa --resume")+chalk.gray(" to continue.")),R(),void L(0))}if("back"===l){const o=T(),e=o&&"demo-free"!==o.session.examId,t=o&&"demo-free"===o.session.examId&&(()=>{const e=new Date(o.session.startedAt||0).getTime();return Date.now()-e<18e5})();if(e)console.log(),console.log(chalk.gray("  Exam paused. Your progress is saved.")),console.log(chalk.white("  Resume: exam q 1")+chalk.gray("  ·  ")+chalk.white("exam review")+chalk.gray("  ·  ")+chalk.white("exam submit")),console.log();else if(t){const e=Object.keys(o.answers).length,t=o.session.questionCount;console.log(),console.log(chalk.gray(`  Demo paused (${e}/${t} answered). Resume with: `)+chalk.white("exam q 1")),console.log(chalk.gray("  Or type ")+chalk.white("demo")+chalk.gray(" to restart.")),console.log()}else{if(o&&"demo-free"===o.session.examId){const{clearExamState:o}=await import("./lib/exam-state.js");o("demo-free")}const e=n();fetch("https://practice.icoa2026.au/api/icoa/demo-stats",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({type:"post-report-back",lang:e.language||"en",timestamp:(new Date).toISOString()}),signal:AbortSignal.timeout(5e3)}).catch(()=>{}),"selection"===lo?H():console.log(chalk.gray("  Already at main menu."))}return void no.prompt()}if("help"===l||"?"===l){if(T()){so=!0;try{await e.parseAsync(["node","icoa","exam","help"])}catch{}return so=!1,void no.prompt()}return function(o,e="olympiad"){console.log(),"selection"===e||"organizer"===e?(console.log(chalk.bold.white("  Exam")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to exam server")),console.log(chalk.white("    exam list           ")+chalk.gray("Available exams")),console.log(chalk.white("    exam start <id>     ")+chalk.gray("Begin an exam")),console.log(chalk.white("    exam q [n]          ")+chalk.gray("View questions")),console.log(chalk.white("    exam answer <n> <X> ")+chalk.gray("Answer question")),console.log(chalk.white("    exam review         ")+chalk.gray("Review all answers")),console.log(chalk.white("    exam submit         ")+chalk.gray("Submit for grading")),console.log(chalk.white("    exam result         ")+chalk.gray("View your score")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    setup               ")+chalk.gray("Settings / switch mode")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),console.log()):o?(console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(chalk.bold.white("  How it works")),console.log(),console.log(chalk.gray("  1. Browse ")+chalk.white("challenges")+chalk.gray(" and pick one")),console.log(chalk.gray("  2. ")+chalk.white("open <id>")+chalk.gray(" to read the challenge")),console.log(chalk.gray("  3. Use ")+chalk.white("ai4ctf")+chalk.gray(" to chat with AI when stuck")),console.log(chalk.gray("  4. ")+chalk.white("submit <id> icoa{flag}")+chalk.gray(" to score points")),console.log(chalk.gray("  5. Check ")+chalk.white("scoreboard")+chalk.gray(" to track your rank")),console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(),console.log(chalk.bold.white("  Competition")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to CTFd")),console.log(chalk.white("    challenges (ch)     ")+chalk.gray("List challenges by category")),console.log(chalk.white("    open <id>           ")+chalk.gray("Read challenge + get next steps")),console.log(chalk.white("    submit <id> <flag>  ")+chalk.gray("Submit a flag")),console.log(chalk.white("    scoreboard (sb)     ")+chalk.gray("Live rankings")),console.log(chalk.white("    status              ")+chalk.gray("Your score, budget & timer")),console.log(chalk.white("    time                ")+chalk.gray("Countdown timer")),console.log(),console.log(chalk.bold.white("  AI Teammate")+chalk.gray(" — 3 levels, use wisely")),console.log(chalk.white('    hint "question"     ')+chalk.gray("Level A — General guidance (50 uses)")),console.log(chalk.white('    hint-b "question"   ')+chalk.gray("Level B — Deep analysis (10 uses)")),console.log(chalk.white('    hint-c "question"   ')+chalk.gray("Level C — Critical assist (2 uses)")),console.log(chalk.white("    hint budget         ")+chalk.gray("Check remaining uses")),console.log(chalk.white("    ai4ctf              ")+chalk.gray("Free-chat with AI (no limit)")),console.log(),console.log(chalk.bold.white("  Tools")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference (linux, web, crypto...)")),console.log(chalk.white("    shell               ")+chalk.gray("Docker sandbox")),console.log(chalk.white("    files <id>          ")+chalk.gray("Download challenge files")),console.log(chalk.white("    connect <id>        ")+chalk.gray("Connect to remote target")),console.log(chalk.white("    note [text]         ")+chalk.gray("Personal notepad")),console.log(chalk.white("    log                 ")+chalk.gray("Session history")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    setup               ")+chalk.gray("Configure settings")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language (15 supported)")),console.log(chalk.white("    logout              ")+chalk.gray("Disconnect")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit (session saved)")),console.log()):(console.log(chalk.bold.yellow("  Restricted Mode — activate with a token to unlock all commands")),console.log(),console.log(chalk.white("    activate <token>    ")+chalk.gray("Unlock full access")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),console.log())}(a(),lo),void no.prompt()}if("more help"===l.toLowerCase()&&T()){so=!0;try{await e.parseAsync(["node","icoa","exam","more-help"])}catch{}return so=!1,void no.prompt()}if("continue"===l.toLowerCase())return console.log(),console.log(chalk.green.bold("  ═══ AI4CTF — AI as Your Teammate ═══")),console.log(),console.log(chalk.white("  In AI4CTF, you solve cybersecurity challenges")),console.log(chalk.white("  with AI by your side.")),console.log(),console.log(chalk.white("  In competition, you get AI help at 3 levels:")),console.log(chalk.yellow("    hint a")+chalk.gray("    General guidance (50 uses)")),console.log(chalk.yellow("    hint b")+chalk.gray("    Deep analysis (10 uses)")),console.log(chalk.yellow("    hint c")+chalk.gray("    Critical assist (2 uses)")),console.log(),console.log(chalk.white("  Try it now! Type: ")+chalk.bold.green("ai4ctf")),console.log(chalk.gray('  Chat freely with your AI teammate. Type "exit" when done.')),console.log(),console.log(chalk.gray("  After ai4ctf, try: ")+chalk.bold.red("ctf4ai")+chalk.gray(' — trick the AI into saying "koala"')),console.log(),void no.prompt();if(/^ICOA-[A-Z]{2,3}-\d{1,6}$/i.test(l.trim())){so=!0;try{await e.parseAsync(["node","icoa","exam","token",l.trim()])}catch{}return so=!1,void no.prompt()}if(/^[A-Z]{2}[0-9A-HJKMNP-TV-Z]{8}$/i.test(l.trim())){so=!0;try{await e.parseAsync(["node","icoa","exam","token",l.trim().toUpperCase()])}catch{}return so=!1,void no.prompt()}const s=l.match(/^exam\s+([A-Z]{2}[0-9A-HJKMNP-TV-Z]{8})$/i);if(s){so=!0;try{await e.parseAsync(["node","icoa","exam","token",s[1].toUpperCase()])}catch{}return so=!1,void no.prompt()}const y=l.match(/^exam\s+([A-Z]{2,3})$/i);if(y){so=!0;try{await e.parseAsync(["node","icoa","exam","list",y[1]])}catch{}return so=!1,void no.prompt()}if("clear"===l||"cls"===l)return console.clear(),void no.prompt();if(l.startsWith("activate ")){const o=l.slice(9).trim(),e=r(o);return"ok"===e?console.log(chalk.green("  Access granted! Token bound to this device.")):"already_bound"===e?(console.log(),console.log(chalk.red("  Token already activated on a different device.")),console.log(chalk.gray("  Each token binds to the first device that uses it. If you lost the device,")),console.log(chalk.gray("  contact your proctor to have the token re-issued for a new device."))):(console.log(),console.log(chalk.red("  Token not recognized.")),console.log(chalk.gray("  Possible reasons:")),console.log(chalk.white("    • ")+chalk.gray("Typo — tokens are case-insensitive, 10 chars, start with a 2-letter country code (e.g. ")+chalk.cyan("UAK7M2R9Q4")+chalk.gray(")")),console.log(chalk.white("    • ")+chalk.gray("Expired — ask your proctor or organizer for a fresh token")),console.log(chalk.white("    • ")+chalk.gray("Network — verify connection to ")+chalk.cyan("practice.icoa2026.au")),console.log(chalk.gray("  Still stuck? type ")+chalk.cyan("help")+chalk.gray(" or try ")+chalk.cyan("exam demo")+chalk.gray(" for a free practice round."))),console.log(),void no.prompt()}if("activate"===l)return console.log(chalk.gray("  Usage: ")+chalk.white("activate <token>")),console.log(),void no.prompt();const m=T();if(m){const o=l.toUpperCase().trim(),t=o=>{const e=m.questions.find(e=>e.number===o);return!!e&&("ai4ctf"===e.type||"ctf4ai"===e.type||e.options&&!e.options.A&&!e.options.B)},n=o=>{const e="demo-free"!==m.session.examId,t=e&&o>=39?"ctf4ai":e&&o>=31?"ai4ctf":null;console.log(),console.log(chalk.yellow(`  Q${o} is a practical question — letters (A/B/C/D) don't apply here.`)),t?(console.log(chalk.white("  Enter the AI chat for this question:  ")+chalk.bold.cyan(t)),console.log(chalk.gray("  Or submit a flag directly: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`))):console.log(chalk.gray("  Submit a flag: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`)),console.log()};if(/^[ABCD]$/.test(o)){const l=m._lastQ||1;if(t(l))return n(l),void no.prompt();so=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(l),o])}catch{}return so=!1,void no.prompt()}const s=o.match(/^(\d+)\s+([ABCD])$/);if(s){const o=parseInt(s[1],10);if(t(o))return n(o),void no.prompt();so=!0;try{await e.parseAsync(["node","icoa","exam","answer",s[1],s[2]])}catch{}return so=!1,void no.prompt()}}const d=l.split(/\s+/)[0].toLowerCase(),p=/^python3?(\.\d+)?$/.test(d),h=l.startsWith("!")||d.startsWith("!")||p,w=new Set(["nano","vi","vim","emacs","pico","ed","code","cat","less","more","head","tail","ls","pwd","cd","base64","xxd","hexdump","od","openssl","md5sum","sha256sum","grep","find","awk","sed","strings","file","curl","wget","nc","ping","nmap","echo","bash","sh","zsh","pip","pip3","node","npm"]),f=()=>{console.log(chalk.gray("  Shell commands need ")+chalk.bold.cyan("!")+chalk.gray(" prefix. Try: ")+chalk.bold.cyan(`!${l}`)),console.log()};if("embodied"===lo&&!h&&!["demo2","learn","exam","vla4ctf","lang","ref","setup","env","sim","simvla"].includes(d))return w.has(d)?(f(),void no.prompt()):(console.log(chalk.gray("  Not available in Embodied AI Security mode.")),console.log(chalk.white("  Try ")+chalk.bold.cyan("demo2")+chalk.gray(" (intro) · ")+chalk.bold.cyan("learn")+chalk.gray(" (curriculum) · ")+chalk.bold.cyan("exam <PD-token>")+chalk.gray(" (Paper D)")),console.log(),void no.prompt());if("selection"===lo&&!h&&!["exam","demo","retry","nations","next","prev","continue","setup","lang","ref","ai4ctf","ctf4ai","mark","unmark","review","submit","env","sim","simvla"].includes(d)){if(w.has(d))return f(),void no.prompt();if(console.log(chalk.gray("  Not available in Selection mode.")),m){const o=m._lastQ||1;console.log(chalk.white(`  Resume exam: exam q ${o}`)+chalk.gray("  ·  ")+chalk.white("A/B/C/D")+chalk.gray(" to answer"))}else console.log(chalk.gray("  Try: demo  ·  setup to switch mode"));return console.log(),void no.prompt()}if("organizer"===lo&&!["join","exam","demo","retry","next","prev","logout","setup","lang","ref","ctf","mark","unmark","review","submit"].includes(d))return console.log(chalk.gray("  Not available in Organizer mode. Switch via: setup")),console.log(),void no.prompt();if(!("olympiad"!==lo||a()&&c()||i(d)))return console.log(chalk.yellow("  Restricted mode. ")+chalk.gray("Enter your access token:")),console.log(chalk.white("    activate <token>")),console.log(),console.log(chalk.gray("  Free commands: ")+chalk.white("ref [topic]")+chalk.gray(", ")+chalk.white("help")+chalk.gray(", ")+chalk.white("exit")),console.log(),void no.prompt();if(!["join","activate","challenges","ch","open","submit","flag","scoreboard","sb","status","time","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","model","ctf","exam","demo","retry","nations","next","prev","continue","logout","ctf4ai","mark","unmark","review","submit","learn","demo2","vla4ctf","theme","sim"].includes(d)){if(G.has(d))return console.log(chalk.red(`  Blocked: ${d} is not allowed during competition.`)),console.log(),void no.prompt();if(/(?:^|\s)(?:\/(?!home\/|Users\/|tmp\/)|\.\.\/|~\/)/.test(l)&&!l.startsWith("cd ")){const o=/(?:^|\s)\/(?!home\/\w+\/icoa-workspace|Users\/\w+\/icoa-workspace|tmp\/)/.test(l),e=/\.\./.test(l);if(o||e)return console.log(chalk.red("  Blocked: access outside workspace is not allowed.")),console.log(chalk.gray(`  Workspace: ${V}`)),console.log(),void no.prompt()}let o=l.startsWith("!")?l.slice(1).trim():l;if("darwin"===process.platform){const e="/opt/homebrew/opt/python@3.12/bin/python3.12";o=o.replace(/^python3?\s/,`${e} `).replace(/^(python3|python)$/,e)}else if("win32"===process.platform){const e=(()=>{try{return t("py -3 --version",{stdio:["ignore","ignore","ignore"],timeout:1500}),"py -3"}catch{}return"python"})();o=o.replace(/^python3?(\.\d+)?\s/,`${e} `).replace(/^python3?(\.\d+)?$/,e)}else{const e=(()=>{try{return t("which python3.12",{stdio:"ignore"}),"python3.12"}catch{return"python3"}})();o=o.replace(/^python\s/,`${e} `).replace(/^python$/,e)}const e=J();/^(\S*python3?(\.\d+)?)\s*$/.test(o)&&(o=`PYTHONSTARTUP="${function(){const o=_(Q(),".icoa");z(o)||W(o,{recursive:!0});const e=_(o,"python-startup.py");return z(e)||B(e,"# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP\nimport base64, struct, hashlib, re, json, os, sys, binascii\ntry: import requests\nexcept ImportError: pass\ntry: from Crypto.Cipher import AES\nexcept ImportError: pass\ntry: from Crypto.Util.Padding import pad, unpad\nexcept ImportError: pass\ntry: from pwn import xor, p32, u32, p64, u64\nexcept ImportError: pass\ntry: import bs4\nexcept ImportError: pass\ntry: import numpy as np\nexcept ImportError: pass\n"),e}()}" ${o}`,console.log(),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(chalk.bold.white("  Python ready — ICOA exam toolkit pre-loaded")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(),console.log(chalk.white("  Already imported: ")+chalk.gray("base64, struct, hashlib, re, json, binascii")),console.log(chalk.white("  Also available:   ")+chalk.gray("requests, bs4, numpy, AES, pad/unpad, xor, p32/u32/p64/u64")),console.log(),console.log(chalk.yellow("  Quick examples:")),console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ')+chalk.gray("# decode base64")),console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ')+chalk.gray("# hex → bytes")),console.log(chalk.gray('    "ICOA{x}".encode()                 ')+chalk.gray("# str → bytes")),console.log(chalk.gray("    [chr(c) for c in [73,67,79,65]]    ")+chalk.gray("# ASCII codes")),console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ')+chalk.gray("# pwntools XOR")),console.log(),console.log(chalk.gray("  Exit:  ")+chalk.white("exit()")+chalk.gray("  or Ctrl-D")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log()),so=!0;try{N()&&await j()?await D(o,no):await X(o,no,e)}catch{console.log(chalk.yellow(`  Command failed: ${d}`))}return so=!1,console.log(),void no.prompt()}so=!0;const k=l.trim(),S=k.toLowerCase();let O,E=null,P="";if(m)if("submit"===S)E="final";else if(S.startsWith("submit ")){let o=k.slice(7).trim();/^submit\s+/i.test(o)&&(o=o.replace(/^submit\s+/i,"").trim()),o=o.replace(/^["'`]+|["'`]+$/g,"").trim(),o&&/^ICOA\{[^}]*\}?$/i.test(o)&&(E="flag",P=o)}else/^ICOA\{[^}]+\}$/i.test(k)&&(E="flag",P=k);O="final"===E?["exam","submit"]:"flag"===E?["exam","answer",String(m?._lastQ||1),P]:function(o){const e=o.split(/\s+/),t=e[0].toLowerCase(),l=e.slice(1),n={demo:["exam","demo"],retry:["exam","demo-retry"],nations:["exam","nations"],next:["exam","next"],prev:["exam","prev"],mark:["exam","mark",...l],unmark:["exam","unmark",...l],review:["exam","review"],logout:["ctf","logout"],join:["ctf","join",...l],activate:["ctf","activate",...l],challenges:["ctf","challenges"],ch:["ctf","challenges"],open:["ctf","open",...l],submit:["ctf","submit",...l],flag:["ctf","submit",...l],scoreboard:["ctf","scoreboard",...l],sb:["ctf","scoreboard",...l],status:["ctf","status"],time:["ctf","time"]};return n[t]?n[t]:["ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","model","ctf","exam","ctf4ai"].includes(t)?[t,...l]:e}(l);const q="ctf"===O[0]&&"join"===O[1];q&&no.pause(),process.exit=()=>{throw new Error(K)};try{await e.parseAsync(["node","icoa",...O])}catch(o){const e=o instanceof Error?o.message:String(o);if(e===K);else if(e.includes("commander.unknownCommand")){const{distance:o}=await import("fastest-levenshtein"),e=["ctf","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","exam","ctf4ai","theme","clear","cls","quit","exit","back","menu","help","continue","activate","demo","challenges","status","scoreboard","join","logout"],t=d.split(/\s+/)[0]||d;let l={word:"",dist:1/0};for(const n of e){const e=o(t.toLowerCase(),n);e<l.dist&&(l={word:n,dist:e})}console.log(chalk.yellow(`  Unknown command: ${d}.`)),l.dist>0&&l.dist<=2&&console.log(chalk.gray("  Did you mean: ")+chalk.bold.cyan(l.word)+chalk.gray("?")),console.log(chalk.gray("  Type ")+chalk.cyan("help")+chalk.gray(" for the full command list."))}else e.includes("commander.")||(e.includes("fetch failed")||e.includes("ECONNREFUSED")||e.includes("ETIMEDOUT"))&&console.log(chalk.yellow("  Network error. Check your connection."))}finally{process.exit=L,so=!1,q&&no.resume()}b()?no.setPrompt(chalk.magenta("ai4ctf> ")):v()?no.setPrompt(chalk.red("ctf4ai> ")):A()&&no.setPrompt(chalk.bold.cyan("vla4ctf> ")),console.log(),no.prompt()}),no.on("SIGINT",()=>{if(console.log(),b()||v())console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still in the AI chat.")),console.log(chalk.white("  Type ")+chalk.bold.cyan("exit")+chalk.white(" to leave the chat and return to the menu."));else if(T()){const o="demo-free"!==T().session.examId;console.log(chalk.yellow("  Ctrl+C did NOT close ICOA CLI.")),console.log(chalk.gray(`  Your ${o?"exam":"demo"} is paused and every answer is auto-saved.`)),console.log(),console.log(chalk.white("  Resume: ")+chalk.cyan("exam q 1")+chalk.gray("  ·  Back to menu: ")+chalk.cyan("back")+chalk.gray("  ·  Close CLI: ")+chalk.cyan(o?"quit confirm":"quit"))}else console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still at the ")+chalk.cyan("icoa>")+chalk.yellow(" prompt.")),console.log(chalk.gray("  Keep typing — ")+chalk.cyan("help")+chalk.gray(" lists commands. (Only ")+chalk.cyan("quit")+chalk.gray(" or Ctrl+D actually close the CLI.)"));console.log(),no.prompt()}),no.on("close",()=>{U(),g(),R(),L(0)})}function X(o,t,l){return new Promise(n=>{const s=process.stdin,a=!!s.isTTY&&!!s.isRaw;if(t.pause(),s.isTTY&&"function"==typeof s.setRawMode)try{s.setRawMode(!1)}catch{}const r=e(o,{shell:!0,stdio:"inherit",cwd:l||process.cwd()}),i=()=>{if(s.isTTY&&"function"==typeof s.setRawMode&&a)try{s.setRawMode(!0)}catch{}t.resume(),n()};r.on("close",i),r.on("error",i)})}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.164",
+  "version": "2.19.166",
   "description": "ICOA CLI — The world's first CLI-native cyber & AI security olympiad terminal: AI4CTF (Day 1), CTF4AI (Day 2), VLA4CTF (Pioneer Round — embodied AI)",
   "type": "module",
   "bin": {