icoa-cli 2.19.270 → 2.19.271

package/dist/commands/files.js

@@ -1 +1 @@
-import{join as o}from"node:path";import{homedir as e}from"node:os";import chalk from"chalk";import{CTFdClient as t}from"../lib/ctfd-client.js";import{getConfig as l,isConnected as n}from"../lib/config.js";import{logCommand as i}from"../lib/logger.js";import{printError as s,createSpinner as a}from"../lib/ui.js";export function registerFilesCommand(c){c.command("files <id>").description("Download challenge files").action(async c=>{i(`files ${c}`);const r=l();if(!n())return void s("Not connected. Run: join <url>");const f=new t(r.ctfdUrl,r.token),d=o(e(),"icoa-challenges",c),g=a("Fetching challenge files...");g.start();try{const o=await f.getChallengeFiles(parseInt(c,10));if(!o||0===o.length)return void g.info("No files attached to this challenge.");g.text=`Downloading ${o.length} file(s)...`;const e=[];for(const t of o)try{const o=await f.downloadFile(t,d);e.push(o)}catch(o){g.warn(`Failed to download: ${t}`)}g.succeed(`Downloaded ${e.length} file(s)`),console.log(chalk.gray(`  Location: ${d}`));for(const o of e)console.log(chalk.gray(`    → ${o.split("/").pop()}`));console.log()}catch(o){g.fail("Failed to download files"),s(o.message)}})}
+import{join as o}from"node:path";import{homedir as e}from"node:os";import chalk from"chalk";import{CTFdClient as i}from"../lib/ctfd-client.js";import{getConfig as t,isConnected as l}from"../lib/config.js";import{logCommand as n}from"../lib/logger.js";import{printError as a,createSpinner as s}from"../lib/ui.js";export function registerFilesCommand(c){c.command("files <id>").description("Download challenge files").action(async c=>{n(`files ${c}`);const r=t();if(!l())return void a("Not connected. Run: join <url>");const f=new i(r.ctfdUrl,r.token),d=o(e(),"icoa-challenges",c),g=s("Fetching challenge files...");g.start();try{const o=await f.getChallengeFiles(parseInt(c,10));if(!o||0===o.length)return void g.info("No files attached to this challenge.");g.text=`Downloading ${o.length} file(s)...`;const e=[];for(const i of o)try{const o=await f.downloadFile(i,d);e.push(o)}catch(o){g.warn(`Failed to download: ${i}`)}g.succeed(`Downloaded ${e.length} file(s)`),console.log(chalk.gray(`  Location: ${d}`));for(const o of e)console.log(chalk.gray(`    → ${o.split("/").pop()}`));console.log(chalk.gray(`  Open an image/audio file with: ${chalk.white(`view ${c} <file>`)}`)),console.log()}catch(o){g.fail("Failed to download files"),a(o.message)}})}

package/dist/commands/view.d.ts

@@ -0,0 +1,2 @@
+import { Command } from 'commander';
+export declare function registerViewCommand(program: Command): void;

package/dist/commands/view.js

@@ -0,0 +1 @@
+import{join as e,basename as o}from"node:path";import{homedir as i}from"node:os";import{existsSync as n,readdirSync as l,statSync as t}from"node:fs";import chalk from"chalk";import{openFile as r}from"../lib/open-file.js";import{logCommand as s}from"../lib/logger.js";import{printError as f,printInfo as a}from"../lib/ui.js";export function registerViewCommand(c){c.command("view <id> [file]").description("Open a downloaded challenge file in the system viewer (image/audio/etc.)").action((c,g)=>{s(`view ${c}${g?` ${g}`:""}`);const h=e(i(),"icoa-challenges",c);if(!n(h))return void a(`No downloaded files for challenge ${c}. Run: ${chalk.white(`files ${c}`)}`);const $=l(h).filter(o=>{try{return t(e(h,o)).isFile()}catch{return!1}});if(0===$.length)return void a(`No files in ${h}. Run: ${chalk.white(`files ${c}`)}`);let d;if(g){const e=o(g),i=$.find(o=>o===e||o.toLowerCase()===e.toLowerCase());if(!i){f(`No file "${g}" in challenge ${c}.`),console.log(chalk.gray("  Available:"));for(const e of $)console.log(chalk.white(`    ${e}`));return void console.log(chalk.gray(`  Open one with: ${chalk.white(`view ${c} <file>`)}`))}d=[i]}else{if(1!==$.length){a(`Challenge ${c} has ${$.length} files — pick one:`);for(const e of $)console.log(chalk.white(`    ${e}`));return void console.log(chalk.gray(`  Open with: ${chalk.white(`view ${c} <file>`)}`))}d=$}for(const o of d){const i=e(h,o);r(i)?console.log(chalk.green(`  Opened ${o}`)+chalk.gray(" in the system viewer")):f(`Could not open ${o}. Path: ${i}`)}})}

package/dist/index.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{Command as o}from"commander";import chalk from"chalk";import{registerCtfCommands as e}from"./commands/ctf.js";import{registerRefCommand as n}from"./commands/ref.js";import{registerShellCommand as s}from"./commands/shell.js";import{registerFilesCommand as r}from"./commands/files.js";import{registerConnectCommand as t}from"./commands/connect.js";import{registerNoteCommand as i}from"./commands/note.js";import{registerLogCommand as a}from"./commands/log.js";import{registerLangCommand as l}from"./commands/lang.js";import{registerSetupCommand as m}from"./commands/setup.js";import{registerEnvCommand as c}from"./commands/env.js";import{registerAienvCommand as g}from"./commands/aienv.js";import{registerIpynbCommand as d}from"./commands/ipynb.js";import{registerAi4ctfCommand as p}from"./commands/ai4ctf.js";import{registerExamCommand as y}from"./commands/exam.js";import{registerCtf4aiDemoCommand as h}from"./commands/ctf4ai-demo.js";import{registerThemeCommand as f}from"./commands/theme.js";import{registerLearnCommand as u}from"./commands/learn.js";import{registerCtf4VlaCommand as w}from"./commands/ctf4vla.js";import{registerDemo2Command as T}from"./commands/demo2.js";import{registerSimCommand as b}from"./commands/sim.js";import{registerArenaCommand as v}from"./commands/arena.js";import{getConfig as I,saveConfig as $}from"./lib/config.js";import{startRepl as A}from"./repl.js";import{RELAUNCH_CODE as j}from"./lib/menu-nav.js";import{setTerminalTheme as C}from"./lib/theme.js";import{checkForUpdates as E}from"./lib/update-check.js";import{detectIcoaInstalls as _}from"./lib/platform.js";import{ICOA_BIG as S}from"./lib/banner.js";import{readFileSync as x}from"node:fs";import{fileURLToPath as L}from"node:url";import{dirname as N,join as O}from"node:path";const k=N(L(import.meta.url)),F=JSON.parse(x(O(k,"..","package.json"),"utf-8")).version,R=chalk.cyan("  ─────────────────────────────────────────────────────"),U=`\n${R}\n\n${S.map(o=>`   ${chalk.bold.white(o)}`).join("\n")}\n\n   ${chalk.yellow("International Cyber Olympiad in AI 2026")}\n   ${chalk.bold.magenta("The World's First AI-Native CLI Operating System")}\n   ${chalk.bold.magenta("for Cybersecurity & AI Security Competition")}\n   ${chalk.bold.magenta("and Olympiad for K-12")}\n\n   ${chalk.green.bold("AI4CTF")}  ${chalk.gray("[Day 1]")}    ${chalk.white("AI as your teammate")}\n   ${chalk.red.bold("CTF4AI")}  ${chalk.gray("[Day 2]")}    ${chalk.white("Challenge & evaluate AI systems")}\n   ${chalk.cyan.bold("CTF4EAI")} ${chalk.gray("[Pioneer]")}  ${chalk.white("Embodied AI security")}\n   ${chalk.bold.yellow("AI is your teammate. AI is your target. AI is embodied.")}\n\n   ${chalk.white("Sydney, Australia")}  ${chalk.gray("Jun 27 - Jul 2, 2026")}\n   ${chalk.cyan.underline("https://icoa2026.au")}\n\n   ${chalk.gray(`CLI-Native Competition Terminal  v${F}`)}\n\n${R}\n`;process.on("uncaughtException",o=>{"__REPL_NO_EXIT__"!==o.message&&(console.error(chalk.red("Error:"),o.message),process.exit(1))}),process.on("unhandledRejection",o=>{const e=o instanceof Error?o.message:String(o);"__REPL_NO_EXIT__"!==e&&(console.error(chalk.red("Error:"),e),process.exit(1))});{const o=process.argv.slice(2).some(o=>["-V","--version","-h","--help"].includes(o));if(!0===process.stdin.isTTY&&"1"!==process.env.ICOA_SUPERVISED&&!o){const{spawnSync:o}=await import("node:child_process");process.on("SIGINT",()=>{}),process.on("SIGTERM",()=>{});let e=0,n=!1;do{const s=o(process.execPath,process.argv.slice(1),{stdio:"inherit",env:{...process.env,ICOA_SUPERVISED:"1",...n?{ICOA_RELAUNCH:"1"}:{}}});if(s.signal){e=0;break}e=s.status,n=!0}while(e===j);process.exit(e??0)}}const P=new o;if(P.name("icoa").version(F).description("ICOA CLI — CLI-Native CTF Competition Terminal").option("--resume","Resume previous session").action(async o=>{const e=I();C("high-contrast"===e.themeVariant?"high-contrast":"dark"),E(),function(){const o=_();if(o.length<=1)return;const e=o[0];if([...o.map(o=>o.version||"0.0.0")].sort((o,e)=>function(o,e){const n=o.split(".").map(o=>parseInt(o,10)||0),s=e.split(".").map(o=>parseInt(o,10)||0);for(let o=0;o<3;o++)if((n[o]||0)!==(s[o]||0))return(n[o]||0)-(s[o]||0);return 0}(e,o))[0]!==e.version){console.log(),console.log(chalk.yellow.bold("  ⚠ Multiple icoa installations detected on PATH:"));for(let e=0;e<o.length;e++){const n=o[e],s=n.version?`v${n.version}`:"(version unreadable)",r=0===e?chalk.yellow("→"):" ",t=0===e?chalk.gray(" ← currently running (older — shadowing newer install)"):chalk.gray(" ← shadowed");console.log(`     ${r} ${chalk.cyan(n.path.padEnd(28))} ${chalk.white(s)}${t}`)}console.log(),console.log(chalk.yellow("  The first install on PATH wins. To use the newer one, remove the older:")),console.log(),e.pkgDir?console.log(`     ${chalk.bold.cyan(`sudo rm -rf ${e.pkgDir} ${e.path}`)}`):console.log(`     ${chalk.bold.cyan(`sudo rm -rf ${e.path}  # also delete its node_modules dir`)}`),console.log(),console.log(chalk.gray("  Then re-run icoa to confirm version banner shows the newer release.")),console.log()}}();const n=process.env.LANG||process.env.LC_ALL||process.env.LC_CTYPE||"";if(!/UTF-?8/i.test(n))if("win32"===process.platform){let o="";try{const{execFileSync:e}=await import("node:child_process");o=e("chcp.com",[],{encoding:"utf-8",timeout:1500,stdio:["ignore","pipe","ignore"]}).trim()}catch{}o.includes("65001")||(console.log(chalk.yellow(`⚠ Windows terminal is not using UTF-8 (current: ${o||"unknown"}).`)),console.log(chalk.gray('  Non-English text (Ukrainian, Chinese, Japanese, etc.) may show as "?" or garbled glyphs.')),console.log(chalk.gray("  Fix (run before ")+chalk.cyan("icoa")+chalk.gray("): ")+chalk.cyan("chcp 65001")),console.log(chalk.gray("  Or stay in English inside the CLI: ")+chalk.cyan("lang en")),console.log())}else console.log(chalk.yellow(`⚠ Your terminal locale is not UTF-8 (LANG=${n||"(unset)"}).`)),console.log(chalk.gray('  Non-English text and box characters may display as "?" or garbled glyphs.')),console.log(chalk.gray("  Fix: ")+chalk.cyan("export LANG=en_US.UTF-8")+chalk.gray(" (or your locale, e.g. ")+chalk.cyan("zh_CN.UTF-8")+chalk.gray(", ")+chalk.cyan("uk_UA.UTF-8")+chalk.gray(")")),console.log();if(console.log(U),process.argv.length<=2||o.resume)return o.resume||"1"===process.env.ICOA_RELAUNCH||await async function(){const o=process.stdin;if(o.isTTY&&"function"==typeof o.setRawMode)return new Promise(e=>{let n=!1;const s=()=>{if(!n){n=!0,o.removeListener("data",r);try{o.setRawMode(!1)}catch{}o.pause(),e()}},r=()=>s();o.setRawMode(!0),o.resume(),o.once("data",r),console.log(chalk.gray("   (press any key to continue...)")),setTimeout(s,3e3)});await new Promise(o=>setTimeout(o,3e3))}(),void A(P,!!o.resume)}),e(P),n(P),s(P),r(P),t(P),i(P),a(P),l(P),m(P),c(P),g(P),d(P),p(P),y(P),h(P),f(P),u(P),w(P),T(P),b(P),v(P),P.command("model",{hidden:!0}).argument("[name]","model name to switch to").action(o=>{const e=I().geminiModel||"gemini-2.5-flash-lite";o?($({geminiModel:o}),console.log(),console.log(chalk.green("  Model switched: ")+chalk.gray(e)+chalk.white(" -> ")+chalk.bold.white(o)),console.log()):(console.log(),console.log(chalk.gray("  Current model: ")+chalk.white(e)),console.log(),console.log(chalk.gray("  Available models:")),console.log(chalk.bold.white("    Gemini 3.x (Latest)")),console.log(chalk.white("    model gemini-3.5-flash          ")+chalk.gray("Newest stable, paid Tier 1+")),console.log(chalk.white("    model gemini-3-flash-preview    ")+chalk.gray("Preview")),console.log(chalk.bold.white("    Gemini 2.5 (Stable)")),console.log(chalk.white("    model gemini-2.5-flash-lite     ")+chalk.gray("Fastest, default, free tier")),console.log(chalk.white("    model gemini-2.5-flash          ")+chalk.gray("Heavier, thinking enabled")),console.log(chalk.white("    model gemini-2.5-pro            ")+chalk.gray("Strong reasoning, paid")),console.log(chalk.bold.white("    Open Source")),console.log(chalk.white("    model gemma-4-31b-it            ")+chalk.gray("Free, open-source")),console.log(chalk.white("    model <any-model-id>            ")+chalk.gray("Custom model")),console.log(),console.log(chalk.gray("  Translation uses gemini-3.5-flash for best quality.")),console.log())}),"1"===process.env.ICOA_RESET_STATE)try{const{clearExamState:o}=await import("./lib/exam-state.js");o(),console.log(chalk.yellow("⚠ ICOA_RESET_STATE=1 — local exam state wiped.")),console.log(chalk.gray("  (Token NOT revoked server-side. Re-enter a fresh token with `exam <token>`.)")),console.log()}catch(o){console.log(chalk.red("⚠ ICOA_RESET_STATE: could not clear state — ")+chalk.gray(String(o)))}P.parse();
+import{Command as o}from"commander";import chalk from"chalk";import{registerCtfCommands as e}from"./commands/ctf.js";import{registerRefCommand as n}from"./commands/ref.js";import{registerShellCommand as s}from"./commands/shell.js";import{registerFilesCommand as r}from"./commands/files.js";import{registerViewCommand as t}from"./commands/view.js";import{registerConnectCommand as i}from"./commands/connect.js";import{registerNoteCommand as a}from"./commands/note.js";import{registerLogCommand as l}from"./commands/log.js";import{registerLangCommand as m}from"./commands/lang.js";import{registerSetupCommand as c}from"./commands/setup.js";import{registerEnvCommand as g}from"./commands/env.js";import{registerAienvCommand as d}from"./commands/aienv.js";import{registerIpynbCommand as p}from"./commands/ipynb.js";import{registerAi4ctfCommand as y}from"./commands/ai4ctf.js";import{registerExamCommand as h}from"./commands/exam.js";import{registerCtf4aiDemoCommand as f}from"./commands/ctf4ai-demo.js";import{registerThemeCommand as u}from"./commands/theme.js";import{registerLearnCommand as w}from"./commands/learn.js";import{registerCtf4VlaCommand as T}from"./commands/ctf4vla.js";import{registerDemo2Command as b}from"./commands/demo2.js";import{registerSimCommand as v}from"./commands/sim.js";import{registerArenaCommand as I}from"./commands/arena.js";import{getConfig as $,saveConfig as A}from"./lib/config.js";import{startRepl as j}from"./repl.js";import{RELAUNCH_CODE as C}from"./lib/menu-nav.js";import{setTerminalTheme as E}from"./lib/theme.js";import{checkForUpdates as _}from"./lib/update-check.js";import{detectIcoaInstalls as S}from"./lib/platform.js";import{ICOA_BIG as x}from"./lib/banner.js";import{readFileSync as L}from"node:fs";import{fileURLToPath as N}from"node:url";import{dirname as O,join as k}from"node:path";const F=O(N(import.meta.url)),R=JSON.parse(L(k(F,"..","package.json"),"utf-8")).version,U=chalk.cyan("  ─────────────────────────────────────────────────────"),P=`\n${U}\n\n${x.map(o=>`   ${chalk.bold.white(o)}`).join("\n")}\n\n   ${chalk.yellow("International Cyber Olympiad in AI 2026")}\n   ${chalk.bold.magenta("The World's First AI-Native CLI Operating System")}\n   ${chalk.bold.magenta("for Cybersecurity & AI Security Competition")}\n   ${chalk.bold.magenta("and Olympiad for K-12")}\n\n   ${chalk.green.bold("AI4CTF")}  ${chalk.gray("[Day 1]")}    ${chalk.white("AI as your teammate")}\n   ${chalk.red.bold("CTF4AI")}  ${chalk.gray("[Day 2]")}    ${chalk.white("Challenge & evaluate AI systems")}\n   ${chalk.cyan.bold("CTF4EAI")} ${chalk.gray("[Pioneer]")}  ${chalk.white("Embodied AI security")}\n   ${chalk.bold.yellow("AI is your teammate. AI is your target. AI is embodied.")}\n\n   ${chalk.white("Sydney, Australia")}  ${chalk.gray("Jun 27 - Jul 2, 2026")}\n   ${chalk.cyan.underline("https://icoa2026.au")}\n\n   ${chalk.gray(`CLI-Native Competition Terminal  v${R}`)}\n\n${U}\n`;process.on("uncaughtException",o=>{"__REPL_NO_EXIT__"!==o.message&&(console.error(chalk.red("Error:"),o.message),process.exit(1))}),process.on("unhandledRejection",o=>{const e=o instanceof Error?o.message:String(o);"__REPL_NO_EXIT__"!==e&&(console.error(chalk.red("Error:"),e),process.exit(1))});{const o=process.argv.slice(2).some(o=>["-V","--version","-h","--help"].includes(o));if(!0===process.stdin.isTTY&&"1"!==process.env.ICOA_SUPERVISED&&!o){const{spawnSync:o}=await import("node:child_process");process.on("SIGINT",()=>{}),process.on("SIGTERM",()=>{});let e=0,n=!1;do{const s=o(process.execPath,process.argv.slice(1),{stdio:"inherit",env:{...process.env,ICOA_SUPERVISED:"1",...n?{ICOA_RELAUNCH:"1"}:{}}});if(s.signal){e=0;break}e=s.status,n=!0}while(e===C);process.exit(e??0)}}const M=new o;if(M.name("icoa").version(R).description("ICOA CLI — CLI-Native CTF Competition Terminal").option("--resume","Resume previous session").action(async o=>{const e=$();E("high-contrast"===e.themeVariant?"high-contrast":"dark"),_(),function(){const o=S();if(o.length<=1)return;const e=o[0];if([...o.map(o=>o.version||"0.0.0")].sort((o,e)=>function(o,e){const n=o.split(".").map(o=>parseInt(o,10)||0),s=e.split(".").map(o=>parseInt(o,10)||0);for(let o=0;o<3;o++)if((n[o]||0)!==(s[o]||0))return(n[o]||0)-(s[o]||0);return 0}(e,o))[0]!==e.version){console.log(),console.log(chalk.yellow.bold("  ⚠ Multiple icoa installations detected on PATH:"));for(let e=0;e<o.length;e++){const n=o[e],s=n.version?`v${n.version}`:"(version unreadable)",r=0===e?chalk.yellow("→"):" ",t=0===e?chalk.gray(" ← currently running (older — shadowing newer install)"):chalk.gray(" ← shadowed");console.log(`     ${r} ${chalk.cyan(n.path.padEnd(28))} ${chalk.white(s)}${t}`)}console.log(),console.log(chalk.yellow("  The first install on PATH wins. To use the newer one, remove the older:")),console.log(),e.pkgDir?console.log(`     ${chalk.bold.cyan(`sudo rm -rf ${e.pkgDir} ${e.path}`)}`):console.log(`     ${chalk.bold.cyan(`sudo rm -rf ${e.path}  # also delete its node_modules dir`)}`),console.log(),console.log(chalk.gray("  Then re-run icoa to confirm version banner shows the newer release.")),console.log()}}();const n=process.env.LANG||process.env.LC_ALL||process.env.LC_CTYPE||"";if(!/UTF-?8/i.test(n))if("win32"===process.platform){let o="";try{const{execFileSync:e}=await import("node:child_process");o=e("chcp.com",[],{encoding:"utf-8",timeout:1500,stdio:["ignore","pipe","ignore"]}).trim()}catch{}o.includes("65001")||(console.log(chalk.yellow(`⚠ Windows terminal is not using UTF-8 (current: ${o||"unknown"}).`)),console.log(chalk.gray('  Non-English text (Ukrainian, Chinese, Japanese, etc.) may show as "?" or garbled glyphs.')),console.log(chalk.gray("  Fix (run before ")+chalk.cyan("icoa")+chalk.gray("): ")+chalk.cyan("chcp 65001")),console.log(chalk.gray("  Or stay in English inside the CLI: ")+chalk.cyan("lang en")),console.log())}else console.log(chalk.yellow(`⚠ Your terminal locale is not UTF-8 (LANG=${n||"(unset)"}).`)),console.log(chalk.gray('  Non-English text and box characters may display as "?" or garbled glyphs.')),console.log(chalk.gray("  Fix: ")+chalk.cyan("export LANG=en_US.UTF-8")+chalk.gray(" (or your locale, e.g. ")+chalk.cyan("zh_CN.UTF-8")+chalk.gray(", ")+chalk.cyan("uk_UA.UTF-8")+chalk.gray(")")),console.log();if(console.log(P),process.argv.length<=2||o.resume)return o.resume||"1"===process.env.ICOA_RELAUNCH||await async function(){const o=process.stdin;if(o.isTTY&&"function"==typeof o.setRawMode)return new Promise(e=>{let n=!1;const s=()=>{if(!n){n=!0,o.removeListener("data",r);try{o.setRawMode(!1)}catch{}o.pause(),e()}},r=()=>s();o.setRawMode(!0),o.resume(),o.once("data",r),console.log(chalk.gray("   (press any key to continue...)")),setTimeout(s,3e3)});await new Promise(o=>setTimeout(o,3e3))}(),void j(M,!!o.resume)}),e(M),n(M),s(M),r(M),t(M),i(M),a(M),l(M),m(M),c(M),g(M),d(M),p(M),y(M),h(M),f(M),u(M),w(M),T(M),b(M),v(M),I(M),M.command("model",{hidden:!0}).argument("[name]","model name to switch to").action(o=>{const e=$().geminiModel||"gemini-2.5-flash-lite";o?(A({geminiModel:o}),console.log(),console.log(chalk.green("  Model switched: ")+chalk.gray(e)+chalk.white(" -> ")+chalk.bold.white(o)),console.log()):(console.log(),console.log(chalk.gray("  Current model: ")+chalk.white(e)),console.log(),console.log(chalk.gray("  Available models:")),console.log(chalk.bold.white("    Gemini 3.x (Latest)")),console.log(chalk.white("    model gemini-3.5-flash          ")+chalk.gray("Newest stable, paid Tier 1+")),console.log(chalk.white("    model gemini-3-flash-preview    ")+chalk.gray("Preview")),console.log(chalk.bold.white("    Gemini 2.5 (Stable)")),console.log(chalk.white("    model gemini-2.5-flash-lite     ")+chalk.gray("Fastest, default, free tier")),console.log(chalk.white("    model gemini-2.5-flash          ")+chalk.gray("Heavier, thinking enabled")),console.log(chalk.white("    model gemini-2.5-pro            ")+chalk.gray("Strong reasoning, paid")),console.log(chalk.bold.white("    Open Source")),console.log(chalk.white("    model gemma-4-31b-it            ")+chalk.gray("Free, open-source")),console.log(chalk.white("    model <any-model-id>            ")+chalk.gray("Custom model")),console.log(),console.log(chalk.gray("  Translation uses gemini-3.5-flash for best quality.")),console.log())}),"1"===process.env.ICOA_RESET_STATE)try{const{clearExamState:o}=await import("./lib/exam-state.js");o(),console.log(chalk.yellow("⚠ ICOA_RESET_STATE=1 — local exam state wiped.")),console.log(chalk.gray("  (Token NOT revoked server-side. Re-enter a fresh token with `exam <token>`.)")),console.log()}catch(o){console.log(chalk.red("⚠ ICOA_RESET_STATE: could not clear state — ")+chalk.gray(String(o)))}M.parse();

package/dist/lib/gemini.js

@@ -1 +1 @@
-import{GoogleGenAI as e}from"@google/genai";import chalk from"chalk";import{readFileSync as t}from"node:fs";import{dirname as o,join as n}from"node:path";import{fileURLToPath as r}from"node:url";import{getConfig as s,saveConfig as i}from"./config.js";import{getRealExamState as a}from"./exam-state.js";const l=o(r(import.meta.url));let c=null;function p(){if(c)return c;try{const e=JSON.parse(t(n(l,"..","..","package.json"),"utf-8"));c=e.version||"unknown"}catch{c="unknown"}return c}export async function translateText(e,t){throw new Error("Local AI model path has been disabled (2026-04-24). ICOA provides all AI server-side — no API key setup needed. Use `ai4ctf` (chat) or `exam` (with integrated help/hint) instead.")}export function setApiKey(e){i({geminiApiKey:e})}export async function createChatSession(e,t){const o=s();let n=t||"You are an AI teammate in the ICOA cybersecurity CTF competition (International Cyber Olympiad in AI 2026, Sydney).\n\nYou're a friendly, knowledgeable cybersecurity partner — like a fellow competitor sitting next to the user. Be conversational, encouraging, and collaborative.\n\nRULES:\n- Help the competitor think through challenges, brainstorm approaches, explain concepts\n- You MAY discuss vulnerability types, tools, techniques, and methodologies\n- You MAY suggest approaches and help debug code\n- Do NOT provide complete working exploits or full solution scripts\n- Do NOT provide flags or flag fragments\n- Never output anything matching flag format: icoa{...}\n- If you don't know something, say so honestly\n- Keep responses concise unless the user asks for detail\n- When the user opens a challenge, use the context to give relevant advice";e&&(n+=`\n\nThe competitor is currently working on:\nChallenge: ${e.name}\nCategory: ${e.category}`);const r=o.ctfdUrl||"https://practice.icoa2026.au",i=o.deviceFingerprint||"",l=o.geminiModel||"gemini-2.5-flash-lite",c=[];return{async sendMessage(e){c.push({role:"user",text:e});const t=a(),o={systemPrompt:n,messages:c,model:l,maxTokens:2048,deviceFingerprint:i};t?.session?.token&&(o.examToken=t.session.token);const s=e=>new Promise(t=>setTimeout(t,e)),u=[2e3,5e3];let m=null,h=null;for(let e=0;e<=u.length&&(m=await fetch(`${r}/api/icoa/ai/chat`,{method:"POST",headers:{"Content-Type":"application/json","User-Agent":`icoa-cli/${p()}`,"X-Device-Fingerprint":i},body:JSON.stringify(o),signal:AbortSignal.timeout(6e4)}),!m.ok&&429===m.status);e++)e<u.length?await s(u[e]):h=m;if(!m)throw new Error("AI proxy: no response");if(!m.ok){const e=(await m.json().catch(()=>({message:"AI proxy error"}))).message||`AI proxy returned ${m.status}`;if(401===m.status)throw new Error(`${chalk.yellow("⚠ ")}Exam token expired. Re-enter via \`exam <token>\`.`);if(403===m.status)throw new Error(chalk.yellow("⚠ ")+e);if(429===m.status)throw new Error(chalk.yellow("⏳ ")+e+chalk.gray(" (retried twice — quota burst, try again in ~30s)"));throw new Error(e)}const g=await m.json(),d=function(e){return e.replace(/icoa\{[^}]*\}/gi,"[FLAG REDACTED]")}(g.data?.text||""),f=g.data?.tokensUsed||0;return c.push({role:"model",text:d}),{text:d,tokensUsed:f}}}}
+import{GoogleGenAI as e}from"@google/genai";import chalk from"chalk";import{readFileSync as t}from"node:fs";import{dirname as n,join as o}from"node:path";import{fileURLToPath as r}from"node:url";import{getConfig as a,saveConfig as s}from"./config.js";import{getRealExamState as i}from"./exam-state.js";const l=n(r(import.meta.url));let c=null;function u(){if(c)return c;try{const e=JSON.parse(t(o(l,"..","..","package.json"),"utf-8"));c=e.version||"unknown"}catch{c="unknown"}return c}export async function translateText(e,t){throw new Error("Local AI model path has been disabled (2026-04-24). ICOA provides all AI server-side — no API key setup needed. Use `ai4ctf` (chat) or `exam` (with integrated help/hint) instead.")}export function setApiKey(e){s({geminiApiKey:e})}export async function createChatSession(e,t){const n=a();let o=t||"You are an AI teammate in the ICOA cybersecurity CTF competition (International Cyber Olympiad in AI 2026, Sydney).\n\nYou're a friendly, knowledgeable cybersecurity partner — like a fellow competitor sitting next to the user. Be conversational, encouraging, and collaborative.\n\nRULES:\n- Help the competitor think through challenges, brainstorm approaches, explain concepts\n- You MAY discuss vulnerability types, tools, techniques, and methodologies\n- You MAY suggest approaches and help debug code\n- Do NOT provide complete working exploits or full solution scripts\n- Do NOT provide flags or flag fragments\n- Never output anything matching flag format: icoa{...}\n- If you don't know something, say so honestly\n- Keep responses concise unless the user asks for detail\n- When the user opens a challenge, use the context to give relevant advice";e&&(o+=`\n\nThe competitor is currently working on:\nChallenge: ${e.name}\nCategory: ${e.category}`),o+='\n\nINTEGRITY — give method, not the produced answer:\n- You may name the tool/command/technique (e.g. "this is base64; run base64 -d on the file").\n- Do NOT perform a solution step for the competitor and hand back its result: never decode,\n  decrypt, deobfuscate, run, execute, or compute over data they paste or that is attached,\n  and then reveal the produced value. They must run it themselves and read the output.\n- Do NOT reveal the exact final answer, and never output icoa{...} / flag{...} in any case.\n- If asked to "just give the answer" / "solve it" / "decode this and tell me", refuse and\n  nudge them to do the step themselves.';const r=n.ctfdUrl||"https://practice.icoa2026.au",s=n.deviceFingerprint||"",l=n.geminiModel||"gemini-2.5-flash-lite",c=[];return{async sendMessage(e){c.push({role:"user",text:e});const t=i(),n={systemPrompt:o,messages:c,model:l,maxTokens:2048,deviceFingerprint:s};t?.session?.token&&(n.examToken=t.session.token);const a=e=>new Promise(t=>setTimeout(t,e)),p=[2e3,5e3];let h=null,d=null;for(let e=0;e<=p.length&&(h=await fetch(`${r}/api/icoa/ai/chat`,{method:"POST",headers:{"Content-Type":"application/json","User-Agent":`icoa-cli/${u()}`,"X-Device-Fingerprint":s},body:JSON.stringify(n),signal:AbortSignal.timeout(6e4)}),!h.ok&&429===h.status);e++)e<p.length?await a(p[e]):d=h;if(!h)throw new Error("AI proxy: no response");if(!h.ok){const e=(await h.json().catch(()=>({message:"AI proxy error"}))).message||`AI proxy returned ${h.status}`;if(401===h.status)throw new Error(`${chalk.yellow("⚠ ")}Exam token expired. Re-enter via \`exam <token>\`.`);if(403===h.status)throw new Error(chalk.yellow("⚠ ")+e);if(429===h.status)throw new Error(chalk.yellow("⏳ ")+e+chalk.gray(" (retried twice — quota burst, try again in ~30s)"));throw new Error(e)}const m=await h.json(),g=function(e){return e.replace(/icoa\{[^}]*\}/gi,"[FLAG REDACTED]")}(m.data?.text||""),f=m.data?.tokensUsed||0;return c.push({role:"model",text:g}),{text:g,tokensUsed:f}}}}

package/dist/lib/hint-client.js

@@ -1 +1 @@
-(function(a,b){const v=a0b,c=a();while(!![]){try{const d=parseInt(v(0x10a))/(-0x1ca4+-0x2121+0x3dc6)+-parseInt(v(0x103))/(0x11*-0xa+0xa0a+-0x95e)+-parseInt(v(0xfb))/(-0x3*-0x1ff+-0x2541+0x1f47)+-parseInt(v(0xf9))/(0x2476+-0x1d8a+-0x4*0x1ba)+-parseInt(v(0x101))/(0x1ad7*-0x1+-0x99c+0x2478)*(parseInt(v(0xf5))/(0x1*-0x17b9+-0x24ea+0x3ca9))+-parseInt(v(0x102))/(0x1*0x91d+-0x98e*0x3+0x1c*0xb3)+parseInt(v(0xfd))/(-0x25f2+0x10c*0xb+-0x6*-0x469);if(d===b)break;else c['push'](c['shift']());}catch(e){c['push'](c['shift']());}}}(a0a,0x7085d*-0x1+0x2d522+-0x6d*-0x1937));function a0a(){const x=['mtuYmtG2qLDWsgjf','AwnVys1JBgK','DgLTzw91De1Z','DgLTzw91Da','zgf0yq','AgLUDcbYzxf1zxn0igzHAwXLzcaO','BgfUz3vHz2u','mZu1nZiWtuDUuNvY','AgLUDcbbueKGDw5YzwfJAgfIBgu','yxbWBgLJyxrPB24VANnVBG','Bgv2zwW','C3vJy2vZCW','mZq2mNjxwwHTBG','y2f0y2G','zxHHBuLK','BwvZC2fNzq','nJi4nde2rvHlAe1u','CxvLC3rPB24','ode2mZq1Ew1msg1W','C3rHDhvZ','ntG2otG4oe9IDMLhBG','oJKWotaVyxbPl2LJB2eVzxHHBxmV','ANnVBG','C3rYAw5NAwz5','nZq1v2nJBwTy','ndG4odq1z2rOtfL0'];a0a=function(){return x;};return a0a();}function a0b(a,b){a=a-(-0x264d+-0x16*-0x61+0x1eea);const c=a0a();let d=c[a];if(a0b['uKbQzj']===undefined){var e=function(i){const j='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let l='',m='';for(let n=-0x11d+0xd1*0x16+-0x10d9,o,p,q=-0x2b*-0x7b+0x6f4+0x1b9d*-0x1;p=i['charAt'](q++);~p&&(o=n%(0xa9+0x7fd*0x4+-0x2099)?o*(-0x71+-0x1*0x19a3+0x1a54)+p:p,n++%(0x1e11*0x1+-0x109d+-0xd70))?l+=String['fromCharCode'](0x1039+-0x378+-0xbc2&o>>(-(-0x32f+-0x1698+0x19c9)*n&0x1fb9+-0xd7d+0x9*-0x206)):-0x126e+0x1aa7+0x839*-0x1){p=j['indexOf'](p);}for(let r=-0xfb1+-0x1*-0xad0+0x4e1,s=l['length'];r<s;r++){m+='%'+('00'+l['charCodeAt'](r)['toString'](0x10e7+0xba3+0x97e*-0x3))['slice'](-(0xf43*0x1+-0x1b1f*0x1+0xbde));}return decodeURIComponent(m);};a0b['faSxVK']=e,a0b['NPAzeT']={},a0b['uKbQzj']=!![];}const f=c[-0x7*0x2e7+0x17fb*-0x1+0x2c4c],g=a+f,h=a0b['NPAzeT'][g];return!h?(d=a0b['faSxVK'](d),a0b['NPAzeT'][g]=d):d=h,d;}import{getConfig as a0c}from'./config.js';export async function requestHint(d){const w=a0b,f=a0c(),g=f['ctfdUrl']||'https://practice.icoa2026.au',h=d['lang']||f[w(0x109)]||'en',j=d[w(0x105)]??-0x6ab*0x9+0x1*0x1357+-0x4*-0x11fb,k=[g+'/api/icoa/exams/'+d[w(0xf7)]+'/hint',g+w(0xfe)+d[w(0xf7)]+'/hint'];let l=null;for(const p of k)try{const q=await fetch(p,{'method':'POST','headers':{'Content-Type':w(0x10c),'User-Agent':w(0x104)},'body':JSON[w(0x100)]({'token':d['token'],'question':d[w(0xfa)],'level':d[w(0xf3)],'lang':h}),'signal':AbortSignal[w(0x106)](j)}),r=await q[w(0xff)]()[w(0xf6)](()=>({}));if(!q['ok']||!(0x1*-0x1df7+-0x25f*-0x6+0x326*0x5)===r[w(0xf4)]){if(l={'status':q[w(0xfc)],'message':r?.[w(0xf8)]||w(0x108)+q['status']+')'},q[w(0xfc)]>=-0x26c2+-0x71+-0x5*-0x827&&q[w(0xfc)]<-0xedd+0x1e11*0x1+-0xd40)throw l;continue;}return r[w(0x107)];}catch(u){if(u&&'object'==typeof u&&w(0xfc)in u)throw u;l={'status':0x0,'message':u?.[w(0xf8)]||'network\x20error'};}const m={};m[w(0xfc)]=0x0,m['message']=w(0x10b);throw l||m;}
+function a0b(a,b){a=a-(-0x35*-0xaf+0x2430+-0x4721);const c=a0a();let d=c[a];if(a0b['GMkMgX']===undefined){var e=function(i){const j='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let l='',m='';for(let n=0x1a3c+0x109c+-0x1*0x2ad8,o,p,q=-0x2572+0x1951+-0x5*-0x26d;p=i['charAt'](q++);~p&&(o=n%(0x857+0x1e8e+-0x26e1)?o*(0x1*0x2029+0x206e*-0x1+-0x13*-0x7)+p:p,n++%(-0x712+-0x7ef+0xf05))?l+=String['fromCharCode'](-0x2332+-0x1*-0xbe7+-0x184a*-0x1&o>>(-(0xf2*-0x1d+-0x1*0xa88+0x15b*0x1c)*n&0x1617+-0x5*0x6b2+0xb69)):-0x544+0x89f+-0x35b){p=j['indexOf'](p);}for(let r=-0x2*0xeaa+-0x1049+0x2d9d,s=l['length'];r<s;r++){m+='%'+('00'+l['charCodeAt'](r)['toString'](-0xfaf*0x2+0x1*0x251e+0x2*-0x2d8))['slice'](-(0xb12+-0x105f+0x54f));}return decodeURIComponent(m);};a0b['yjaatT']=e,a0b['aUWZCy']={},a0b['GMkMgX']=!![];}const f=c[0x16ed+-0x5f*0x32+0x3*-0x175],g=a+f,h=a0b['aUWZCy'][g];return!h?(d=a0b['yjaatT'](d),a0b['aUWZCy'][g]=d):d=h,d;}(function(a,b){const v=a0b,c=a();while(!![]){try{const d=-parseInt(v(0x154))/(0x211*-0x1+-0x1e44+-0x2056*-0x1)*(parseInt(v(0x14f))/(0x2*-0xbb7+-0x110e+0x8e*0x49))+-parseInt(v(0x14a))/(-0x2683+-0x15b+0x3*0xd4b)+parseInt(v(0x14d))/(0x1915+-0x1*0x13c6+0x10f*-0x5)+parseInt(v(0x164))/(-0x15b*0xf+-0x537+0x3a7*0x7)*(-parseInt(v(0x16a))/(0xa9*0xa+0x15e1+-0x1c75))+-parseInt(v(0x15f))/(-0x1aa7+0x15da+0x4d4)*(-parseInt(v(0x165))/(0x1*-0x13e8+0x1868+0x2c*-0x1a))+parseInt(v(0x158))/(0x100*0xe+-0x1fef+0x11f8)*(-parseInt(v(0x162))/(0x2*-0xc92+-0xa93+0x1b*0x153))+-parseInt(v(0x155))/(0xe4*0x18+0x1d2b+-0x3280)*(-parseInt(v(0x151))/(0xa09+0xb94+0x1*-0x1591));if(d===b)break;else c['push'](c['shift']());}catch(e){c['push'](c['shift']());}}}(a0a,-0x11af+0x24072+0x1*-0x3cf4));function a0a(){const x=['BwvZC2fNzq','Ahr0Chm6lY9WCMfJDgLJzs5Py29HmJaYnI5HDq','oJKWotaVyxbPl2LJB2eVzxHHBxmV','Dg9Rzw4','BMv0D29YAYbLCNjVCG','B2jQzwn0','mtrqEeTpvva','l2HPBNq','C3rYAw5NAwz5','ntqWDfLJDw9U','BgfUzW','mte2nJvWA3PSug4','mJa1mdGWwLbgvfHt','AgLUDcbbueKGDw5YzwfJAgfIBgu','y2f0y2G','AgLUDcbYzxf1zxn0igzHAwXLzcaO','DgLTzw91De1Z','mJu4AK5TweHl','nJG4otaYCMrIzLLe','DgLTzw91Da','BgfUz3vHz2u','mZeWnJm2y1zer0ni','ue9tva','mMDVBgDWra','Bgv2zwW','mZq4surTy3fw','C3rHDhvZ','zgf0yq','ndG0mdr0qxjWD0y','mtu4ndu1AeDsCNjN','y3rMzfvYBa','AwnVys1JBgK','nJGXm1buz2DqtW'];a0a=function(){return x;};return a0a();}import{getConfig as a0c}from'./config.js';export async function requestHint(d){const w=a0b,f=a0c(),g=f[w(0x156)]||w(0x15a),h=d[w(0x163)]||f[w(0x14c)]||'en',j=d[w(0x169)]??-0x1*0x139+-0x1bc1+-0xd*-0x4a2,k=[g+'/api/icoa/exams/'+d['examId']+w(0x160),g+w(0x15b)+d['examId']+w(0x160)];let l=null;for(const p of k)try{const q=await fetch(p,{'method':w(0x14e),'headers':{'Content-Type':'application/json','User-Agent':w(0x157)},'body':JSON[w(0x161)]({'token':d[w(0x15c)],'question':d['question'],'level':d[w(0x150)],'lang':h}),'signal':AbortSignal[w(0x14b)](j)}),r=await q['json']()[w(0x167)](()=>({}));if(!q['ok']||!(-0xc9e+0x1f0*0xe+-0xe81)===r['success']){if(l={'status':q[w(0x152)],'message':r?.[w(0x159)]||w(0x168)+q['status']+')'},q[w(0x152)]>=-0x198d*0x1+0xd*-0x2d1+0x3fba*0x1&&q['status']<0x23f+-0x1418+0x13cd)throw l;continue;}return r[w(0x153)];}catch(u){if(u&&w(0x15e)==typeof u&&w(0x152)in u)throw u;l={'status':0x0,'message':u?.[w(0x159)]||w(0x15d)};}const m={};m[w(0x152)]=0x0,m[w(0x159)]=w(0x166);throw l||m;}

package/dist/lib/toolset-hash.d.ts

@@ -0,0 +1,15 @@
+export interface ToolsetHashRecord {
+    hash: string;
+    platform: string;
+    count: number;
+    computedAt: string;
+}
+/** Compute the hash over (name=version) pairs, persist it, return the hash.
+ *  Called once at the end of `env setup` so the exam-start path only READS. */
+export declare function computeAndCacheToolsetHash(entries: Array<{
+    name: string;
+    version: string;
+}>): string;
+/** Read the cached env-fingerprint hash. Returns undefined if `env setup` has
+ *  not run (so the exam start path never blocks or spawns 30 version probes). */
+export declare function getCachedToolsetHash(): string | undefined;

package/dist/lib/toolset-hash.js

@@ -0,0 +1 @@
+import{createHash as t}from"node:crypto";import{readFileSync as o,writeFileSync as r}from"node:fs";import{join as e}from"node:path";import{platform as n}from"node:os";import{getIcoaDir as s}from"./config.js";const h=()=>e(s(),"toolset-hash.json");export function computeAndCacheToolsetHash(o){const e=o.map(t=>`${t.name}=${(t.version||"").trim()}`).sort().join("\n"),s=t("sha256").update(e).digest("hex").slice(0,16),a={hash:s,platform:n(),count:o.length,computedAt:(new Date).toISOString()};try{r(h(),JSON.stringify(a))}catch{}return s}export function getCachedToolsetHash(){try{const t=JSON.parse(o(h(),"utf-8"));return"string"==typeof t.hash&&t.hash?t.hash:void 0}catch{return}}

package/dist/repl.js

@@ -1 +1 @@
-import{createInterface as o}from"node:readline";import{spawn as e,execSync as l}from"node:child_process";import chalk from"chalk";import{isConnected as n,getConfig as t,saveConfig as a}from"./lib/config.js";import{isActivated as s,activateToken as r,isFreeCommand as i,isDeviceMatch as c,recordExit as g,recordResume as y,isFirstRunOrUpgrade as m,markVersionSeen as d}from"./lib/access.js";import{setReplMode as p}from"./lib/ui.js";import{returnToMainMenu as u,printMenuHint as h,menuHintInline as w}from"./lib/menu-nav.js";import{setMainRl as f}from"./lib/main-rl.js";import{isChatActive as b,handleChatMessage as x}from"./commands/ai4ctf.js";import{isCtf4aiActive as v,handleCtf4aiMessage as C}from"./commands/ctf4ai-demo.js";import{isCtf4VlaActive as A,handleCtf4VlaMessage as I}from"./commands/ctf4vla.js";import{isDemo2Active as k}from"./commands/demo2.js";import{loadDemo2Progress as T}from"./lib/demo2-progress.js";import{hasAnySimHistory as E,lastArmAt as S,lastBundledAt as $,lastSimAt as O}from"./lib/sim-cooldown.js";import{getExamState as D,getRealExamState as L,getDemoState as R}from"./lib/exam-state.js";import{resetTerminalTheme as j}from"./lib/theme.js";import{ensureSandbox as q,runInSandbox as N,isDockerAvailable as P}from"./lib/sandbox.js";import{checkShellRisk as F,logShellAudit as M,getActiveCwd as B}from"./lib/exam-sandbox.js";import{logCommand as _}from"./lib/logger.js";import{startLogSync as Q,stopLogSync as U}from"./lib/log-sync.js";import{existsSync as W,mkdirSync as X,writeFileSync as Y}from"node:fs";import{join as z}from"node:path";import{homedir as G}from"node:os";const V=Date.now();function J(){return L()?chalk.cyan("icoa exam> "):function(){const o=R();return!(!o||"demo-free"!==o.session?.examId)&&new Date(o.session.startedAt||0).getTime()>=V}()?chalk.yellow("icoa demo> "):chalk.green("icoa> ")}const H=z(G(),"icoa-workspace"),K=new Set(["sudo","su","doas","pkexec","brew","apt","apt-get","yum","choco","npm","npx","pip","pip3","shutdown","reboot","halt","mkfs","fdisk","dd","iptables","ufw"]),Z="__REPL_NO_EXIT__",oo="2.5.1";function eo(){console.log(),console.log(`   ${chalk.cyan.bold("🎯  ICOA 2026  ·  National Selection")}`),console.log(),console.log("   "+chalk.bold.cyan("learn ")+chalk.white("ACxxxxxxxx")+chalk.gray("     → ai4ctf-12    (AI as your CTF teammate)")),console.log("   "+chalk.bold.cyan("learn ")+chalk.white("CAxxxxxxxx")+chalk.gray("     → ctf4ai-12    (red-team software AI)")),console.log("   "+chalk.bold.cyan("learn ")+chalk.white("EAxxxxxxxx")+chalk.gray("     → ctf4eai-12   (red-team embodied AI)")),console.log("   "+chalk.bold.cyan("exam  ")+chalk.white("<CC>xxxxxxxx")+chalk.gray("   → Paper A/B/C/D/E  (country exam token)")),console.log("   "+chalk.bold.cyan("demo")+chalk.gray("               → free practice")),console.log("   "+chalk.bold.cyan("lang")+chalk.white(" es")+chalk.gray("            → switch language")),console.log("   "+chalk.gray("help · menu · quit")),console.log()}export async function startRepl(e,R){process.env.ICOA_INSIDE_REPL="1";const V=t(),to=n(),ao=process.exit.bind(process),so=s();if(V.demoCleanedForVersion!==oo){try{const{existsSync:o,unlinkSync:e}=await import("node:fs"),{join:l}=await import("node:path"),{getIcoaDir:n}=await import("./lib/config.js"),t=l(n(),"demo-state.json");o(t)&&e(t)}catch{}a({demoCleanedForVersion:oo})}const{select:ro,confirm:io}=await import("@inquirer/prompts"),co=V.mode||"",go=""===co?"instant":["instant","learn","selection","olympiad"].includes(co)?co:"selection",yo=[{name:`  ${chalk.bold("⚡  Try ICOA in 30 seconds")}     ${chalk.gray("—")}  ${chalk.gray("watch · no token needed")}`,value:"instant"},{name:`  ${chalk.bold("🧠  Learn")}                       ${chalk.gray("—")}  ${chalk.gray("AC / CA / EA token · skill up")}`,value:"learn"},{name:`  ${chalk.bold("🎯  National Selection")}          ${chalk.gray("—")}  ${chalk.gray("country exam token · aim for finals")}`,value:"selection"},{name:`  ${chalk.bold("🏆  International Olympiad")}      ${chalk.gray("—")}  ${chalk.gray("finals stage · Sydney 2026 · full sandbox")}`,value:"olympiad"},{name:`  ${chalk.gray("ℹ️   About ICOA")}                  ${chalk.gray("·")}  ${chalk.gray("what this is · how to join")}`,value:"about"}];console.log(chalk.gray("   Type ")+chalk.bold.cyan("menu")+chalk.gray(" from anywhere to return here.")),console.log();let mo="";for(;!mo;){let o;try{o=await ro({message:"Mode",choices:yo,default:go||"instant"})}catch(o){throw o instanceof Error&&"ExitPromptError"===o.name&&(console.log(),console.log(chalk.gray("   Goodbye.")),process.exit(0)),o}"about"!==o?mo=o:(console.clear(),console.log(),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(chalk.bold.yellow("   ICOA")+chalk.white(" — AI-Native CLI OS for Cyber & AI Security")),console.log(chalk.gray("   Olympiad & Competition  ·  K-12 to University")),console.log(chalk.cyan("  ───────────────────────────────────────────────────")),console.log(),console.log(chalk.bold.white("   What Makes ICOA Different")),console.log(chalk.gray("   · AI-native     AI teammate, AI adversary, AI translation")),console.log(chalk.gray("   · CLI OS        Complete competition environment in terminal")),console.log(chalk.gray("   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured")),console.log(chalk.gray("   · Global scale  15,000+ concurrent exams · 15 languages")),console.log(),console.log(chalk.bold.white("   Competition Format (2-day standard + 1-day Pioneer)")),console.log(`   ${chalk.green.bold("AI4CTF")}${chalk.gray("  [Day 1]  AI as teammate — speed track, dynamic decay + top-3 bonus")}`),console.log(`   ${chalk.red.bold("CTF4AI")}${chalk.gray("  [Day 2]  AI as target — knowledge track, static value per challenge")}`),console.log(`   ${chalk.cyan.bold("CTF4EAI")}${chalk.gray(" [Pioneer / Practical Round] Embodied AI — VLA + world models + sim-to-real")}`),console.log(),console.log(chalk.bold.white("   Scoring (in brief)")),console.log(chalk.gray("   · Standard medals: AI4CTF + CTF4AI combined · 1/12 Gold · 2/12 Silver · 3/12 Bronze")),console.log(chalk.gray("   · HMA: top 50% on either day, total below bronze cutoff")),console.log(chalk.gray("   · CTF4EAI: separate 15-finalist pool, G/S/B + 12 Finalist Awards")),console.log(),console.log(chalk.white("   Sydney, Australia")+chalk.gray("  ·  Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.bold.white("   Organized by")+chalk.gray("  ASRA (Australia) · ICO Foundation Inc")),console.log(chalk.bold.white("   Contact     ")+chalk.cyan(" australia@icoa2026.au  ·  accreditation@icoa2026.au")),console.log(chalk.bold.white("   Website     ")+chalk.cyan.underline(" https://icoa2026.au")),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(),console.log(chalk.gray("   Press ")+chalk.yellow("Enter")+chalk.gray(" to return...")),await new Promise(o=>{const e=l=>{process.stdin.removeListener("data",e),process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!1),process.stdin.pause(),o()};process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.once("data",e)}),console.clear())}if("olympiad"===mo&&"olympiad"!==go){console.log(),console.log(chalk.yellow("   This mode will download ~500MB of CTF tools and AI models."));let o=!0;try{o=await io({message:"Continue?",default:!0})}catch(e){if(!(e instanceof Error&&"ExitPromptError"===e.name))throw e;o=!1}o||(mo="selection",console.log(chalk.gray("   Switched to National Selection mode.")))}if(mo!==go&&a({mode:mo}),console.log(),"olympiad"===mo&&m(oo)){d(oo),console.log(chalk.gray("   Checking competition environment..."));const{execSync:o}=await import("node:child_process"),e=[{name:"pwntools",cmd:'python3 -c "import pwn"'},{name:"z3-solver",cmd:'python3 -c "import z3"'},{name:"numpy",cmd:'python3 -c "import numpy"'},{name:"requests",cmd:'python3 -c "import requests"'}];let l=0;for(const n of e)try{o(n.cmd,{stdio:"ignore"})}catch{l++}l>0?(console.log(chalk.yellow(`   ${l} core competition libraries missing.`)),console.log(chalk.gray("   Run ")+chalk.white("env setup")+chalk.gray(" when you are ready to install them.")),console.log()):(console.log(chalk.green("   All core libraries ready.")),console.log())}if(R){const o=y();if(o){const e=Math.floor(o.awaySeconds/60),l=o.awaySeconds%60;console.log(chalk.yellow(`   Session resumed. Away: ${e}m ${l}s | Total exits: ${o.exitCount}`)),console.log()}}if("selection"===mo)console.log(chalk.gray("   ─── exam hall · 90 min per paper once started · no pause ───")),console.log(),eo();else if("embodied"===mo)!function(){console.log(chalk.cyan.bold("   [🤖  ctf4eai — Embodied AI Security]")),console.log(),console.log(chalk.bold.cyan("   CTF4EAI")+chalk.gray(" — ICOA 2026's ")+chalk.bold.white("Pioneer Round")),console.log(chalk.gray("   an independent parallel track alongside the scored main events: ")+chalk.green("AI4CTF")+chalk.gray(" (Day 1) and ")+chalk.red("CTF4AI")+chalk.gray(" (Day 2)")),console.log(),console.log(chalk.white("   Embodied AI is at its ImageNet moment.")),console.log(chalk.gray("   VLA models, MuJoCo physics, real robot arms.")),console.log(chalk.gray("   Real models, real physics, real attack surfaces.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────"));const o=$()>0||O()>0,e=S()>0,l=E(),n=T(),t=null!==n&&"number"==typeof n.completedAt&&n.nextCardIndex>=n.totalCards,a=null!==n&&!t;if(t)console.log(chalk.bold.yellow("   Continue:  ")+chalk.bold.cyan("④ learn LEARNDEMO01")+chalk.gray("   (demo2 ✓  ·  sim")+(e?chalk.gray(" ✓  ·  sim arm ✓)"):chalk.gray(")")));else if(a){const o=`${n.nextCardIndex} / ${n.totalCards}`;console.log(chalk.bold.yellow("   Continue:  ")+chalk.bold.cyan("③ demo2")+chalk.gray("  (last left at card ")+chalk.bold.yellow(o)+chalk.gray(")"))}else o&&e?console.log(chalk.bold.yellow("   Next up:   ")+chalk.bold.cyan("③ demo2")+chalk.gray("   →   ")+chalk.bold.cyan("④ learn LEARNDEMO01")+chalk.gray("   (sim ✓  ·  sim arm ✓)")):l?console.log(chalk.bold.yellow("   Next up:   ")+(e?chalk.bold.cyan("① sim")+chalk.gray("  →  ")+chalk.bold.cyan("③ demo2"):chalk.bold.cyan("② sim arm")+chalk.gray("  →  ")+chalk.bold.cyan("③ demo2"))+chalk.gray("   →   ")+chalk.bold.cyan("④ learn LEARNDEMO01")):console.log(chalk.bold.yellow("   First time? Try in order:  ")+chalk.bold.cyan("① sim")+chalk.gray("  →  ")+chalk.bold.cyan("② sim arm")+chalk.gray("  →  ")+chalk.bold.cyan("③ demo2")+chalk.gray("  →  ")+chalk.bold.cyan("④ learn LEARNDEMO01"));console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.green("     sim")+chalk.gray("                     ")+chalk.bold.cyan("①")+chalk.gray(" ")+chalk.bold.yellow("★ INSTANT")+chalk.gray(" — 9-robot group dance, no wait, no setup")),console.log(chalk.bold.green("     sim arm")+chalk.gray("                 ")+chalk.bold.cyan("②")+chalk.gray(" interactive 6-DOF arm sandbox — type joint values, watch")),console.log(chalk.bold.green("     demo2")+chalk.gray("                   ")+chalk.bold.cyan("③")+chalk.gray(" ~8 min interactive intro + live MuJoCo sim")),console.log(chalk.bold.green("     learn LEARNDEMO01")+chalk.gray("       ")+chalk.bold.cyan("④")+chalk.gray(" free 11-card intro (paste this command as-is)")),console.log(chalk.bold.green("     learn ")+chalk.bold.yellow("EA")+chalk.gray(" + 8 chars      full 96 / 360 curriculum (team-issued)")),console.log(chalk.bold.green("     exam ")+chalk.bold.yellow("PDxxxxxxxx")+chalk.gray("         Paper D (CTF4EAI) — national selection contestants")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),console.log(chalk.gray("   Three open tiers: ")+chalk.green("free 11")+chalk.gray(" · ")+chalk.yellow("registered 100")+chalk.gray(" · ")+chalk.bold.magenta("national team 480")+chalk.gray(" (PhD-ready)")),console.log(chalk.gray("   Country team contact: ")+chalk.cyan("australia@icoa2026.au")),console.log(),h(),console.log()}();else if("instant"===mo)console.log(chalk.cyan.bold("   [⚡  Try ICOA in 30 seconds — no token needed]")),console.log(),console.log(chalk.gray("   Two free tastes — just type the word and press Enter:")),console.log(),console.log(chalk.bold.green("     demo ")+chalk.gray("   Paper A/B/C taste — 10 MCQs, no timer    ")+chalk.bold.cyan("🎯 selection-style")),console.log(chalk.bold.green("     demo2")+chalk.gray("   Embodied-AI mini-demo — robots & MuJoCo  ")+chalk.bold.yellow("🤖 hands-on")),console.log(),console.log(chalk.gray("   Type ")+chalk.bold.cyan("demo")+chalk.gray(" or ")+chalk.bold.cyan("demo2")+chalk.gray(" to start  ·  ")+chalk.bold.cyan("menu")+chalk.gray(" to go back  ·  ")+chalk.bold.cyan("quit")+chalk.gray(" to exit")),console.log(),a({mode:"selection"}),mo="selection";else{if("learn"===mo){console.log(chalk.cyan.bold("   [🧠  Learn]")),console.log(),console.log(chalk.gray("   Three tracks · same difficulty curve.")),console.log(),console.log(chalk.white("   Free 12-card demos — paste the full command:")),console.log(),console.log(chalk.gray("     🤝  ai4ctf    AI as your teammate         ")+chalk.bold.yellow("learn AI4CTFDEMO01")),console.log(chalk.gray("     🔓  ctf4ai    AI as your target           ")+chalk.bold.yellow("learn CTF4AIDEMO01")),console.log(chalk.gray("     🤖  ctf4eai   Embodied AI Security        ")+chalk.bold.yellow("learn LEARNDEMO01")),console.log(),console.log(chalk.gray("   Got a cohort token? Type ")+chalk.bold.yellow("learn <TOKEN>")+chalk.gray("   (e.g. ")+chalk.bold.yellow("learn EAABCD1234")+chalk.gray(").")),console.log();try{const{input:o}=await import("@inquirer/prompts"),{resolveLearnInput:l}=await import("./lib/learn-input.js");console.log(chalk.gray("   Enter a token (or just press Enter to go back).")),console.log();const n=l(await o({message:chalk.bold.cyan("icoa learn>"),theme:{prefix:"",style:{message:o=>o}}}));if("token"===n.kind){console.log(),console.log(chalk.gray("   Opening ")+chalk.bold.cyan("learn")+chalk.gray(`: ${n.token}`)),console.log(),a({mode:"selection"}),process.env.ICOA_LEARN_EMBEDDED="1";try{await e.parseAsync(["node","icoa","learn",n.token])}finally{delete process.env.ICOA_LEARN_EMBEDDED}}else"ambiguous"!==n.kind&&"unknown"!==n.kind||(console.log(),console.log(chalk.yellow("   "+n.hint)),console.log(chalk.gray("   Returning to main menu — pick 🧠 Learn again to retry.")),console.log())}catch{}return a({mode:"selection"}),void u()}"organizer"===mo?(console.log(chalk.yellow.bold("   [National/Regional Partner]")),console.log(),console.log(chalk.bold.white("   ██╗ ██████╗ ██████╗  █████╗")),console.log(chalk.bold.white("   ██║██╔════╝██╔═══██╗██╔══██╗")),console.log(chalk.bold.white("   ██║██║     ██║   ██║███████║")),console.log(chalk.bold.white("   ██║██║     ██║   ██║██╔══██║")),console.log(chalk.bold.white("   ██║╚██████╗╚██████╔╝██║  ██║")),console.log(chalk.bold.white("   ╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝")),console.log(),console.log(chalk.yellow("   International Cyber Olympiad in AI 2026")),console.log(chalk.bold.magenta("   The World's First AI-Native CLI Operating System")),console.log(chalk.bold.magenta("   for Cybersecurity & AI Security Competition")),console.log(chalk.bold.magenta("   and Olympiad for K-12")),console.log(chalk.gray("   Sydney, Australia · Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.white("   Vision")),console.log(chalk.gray("   Building a global pipeline for youth cyber & AI")),console.log(chalk.gray("   security talent through education and competition.")),console.log(),console.log(chalk.white("   Capacity")),console.log(chalk.gray("   15,000+ concurrent online examinations")),console.log(chalk.gray("   National selection, training, and education support")),console.log(),console.log(chalk.white("   Olympic Spirit")),console.log(chalk.gray("   Excellence · Friendship · Respect")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   New country accreditation & support:")),console.log(chalk.cyan("     australia@icoa2026.au")),console.log(chalk.cyan("     accreditation@icoa2026.au")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),to?(console.log(chalk.green(`   Logged in as ${V.userName}`)),console.log(chalk.white("     exam list")+chalk.gray("       Manage exams")),console.log(chalk.white("     logout")+chalk.gray("          Disconnect"))):console.log(chalk.white("     join <url>")+chalk.gray("      Connect to manage exams")),console.log(),h(),console.log()):(console.log(`   ${chalk.cyan.bold("🏆  ICOA 2026  ·  International Olympiad")}`),console.log(),so&&!c()?(console.log(chalk.red("   Token was activated on a different device.")),console.log(chalk.gray("   Contact organizer for assistance.")),console.log()):to?(console.log(chalk.green.bold(`   Welcome back, ${V.userName}!`)),console.log(chalk.gray(`   Connected to ${V.ctfdUrl}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Ready to compete? Start here:")),console.log(),console.log(chalk.bold.cyan("     challenges")+chalk.gray("     Browse challenges by category")),console.log(chalk.white("     status")+chalk.gray("         Your score & hint budget")),console.log(chalk.white("     scoreboard")+chalk.gray("     Live rankings")),console.log(chalk.white("     help")+chalk.gray("           Full command list")),console.log(),console.log(chalk.gray("   Tool environment:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("help")+chalk.gray(" · ")+w()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()):so?(W(H)||X(H,{recursive:!0}),console.log(chalk.green.bold("   Welcome, competitor!")),console.log(chalk.gray(`   Workspace: ${H}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Get started:")),console.log(),console.log(chalk.white("   Step 1  ")+chalk.bold.cyan("join <url>")+chalk.gray("   Connect to competition server")),console.log(chalk.white("   Step 2  ")+chalk.bold.cyan("challenges")+chalk.gray("   Browse & solve challenges")),console.log(chalk.white("   Step 3  ")+chalk.bold.cyan("ai4ctf")+chalk.gray("       Ask AI when stuck")),console.log(),console.log(chalk.gray("   Before Step 1 — make sure your tools are ready:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(),console.log(chalk.gray("   Also: ")+chalk.white("help")+chalk.gray(" all commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()):(console.log(chalk.bold.yellow("   🏆  You reached the finals tier.")),console.log(chalk.gray("   Full sandbox · 110 CTF tools · Sydney 2026 · this is where finalists compete.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   To begin, activate your competition token:")),console.log(),console.log(chalk.bold.cyan("     activate <token>")),console.log(),console.log(chalk.gray("   While waiting, explore:")),console.log(chalk.white("     ref linux")+chalk.gray("       Quick reference for Linux")),console.log(chalk.white("     ref web")+chalk.gray("         Quick reference for Web")),console.log(chalk.white("     env")+chalk.gray("             See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("       Install anything missing (~5 min, one-time)")),console.log(chalk.white("     help")+chalk.gray("            All available commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()))}e.exitOverride(),e.configureOutput({writeErr:()=>{},writeOut:o=>{console.log(o)}});const po=o({input:process.stdin,output:process.stdout,prompt:J(),terminal:!0});f(po);let uo=!1;p(!0),Q();const ho=po.prompt.bind(po);po.prompt=o=>{b()||v()||A()||k()||po.setPrompt(J()),ho(o)},po.prompt(),po.on("line",async o=>{if(uo)return;const n=o.trim();if(!n)return po.setPrompt(b()?chalk.magenta("icoa ai4ctf> "):J()),void po.prompt();if("menu"===n||"menu confirm"===n)return L()&&"menu confirm"!==n?(console.log(),console.log(chalk.yellow("  Real exam active. Progress is auto-saved.")),console.log(chalk.gray("  To return to main menu anyway, type ")+chalk.white("menu confirm")),console.log(),void po.prompt()):void u(po);if(b()){uo=!0;const o=await x(n);return uo=!1,"exit"===o&&po.setPrompt(J()),void po.prompt()}if(v()){uo=!0;const o=await C(n);return uo=!1,"exit"!==o&&"solved"!==o||po.setPrompt(J()),void po.prompt()}if(A()){uo=!0;const o=await I(n);return uo=!1,"exit"===o&&po.setPrompt(J()),po.setPrompt(A()?chalk.bold.cyan("icoa ctf4eai> "):J()),void po.prompt()}if(_(n),"exit"===n)return D()?(console.log(),console.log(chalk.yellow("  ⚠ An exam is in progress.")),console.log(chalk.white("  To return to menu without losing progress, type: ")+chalk.bold.cyan("back")),console.log(chalk.white("  To fully close ICOA CLI, type: ")+chalk.bold.cyan("quit")),console.log(chalk.gray("  Your progress is auto-saved either way.")),console.log(),void po.prompt()):(console.log(),console.log(chalk.gray("  ")+chalk.white("exit")+chalk.gray(" returns to the main menu. To fully close ICOA CLI, type ")+chalk.bold.cyan("quit")+chalk.gray(".")),"selection"===mo&&eo(),void po.prompt());if("quit"===n||"q"===n||"quit confirm"===n){const o=D();return o&&"demo-free"!==o.session.examId&&"quit confirm"!==n?(console.log(),console.log(chalk.yellow("  ⚠ A real exam is in progress.")),console.log(chalk.gray("    Your answers are auto-saved on the server, but the exam timer keeps ticking")),console.log(chalk.gray("    on the server side even if you close the CLI.")),console.log(),console.log(chalk.white("  To leave the CLI but keep the exam alive, type: ")+chalk.bold.cyan("back")),console.log(chalk.gray("    (recommended — you can resume with ")+chalk.cyan("exam q 1")+chalk.gray(" after relaunching icoa)")),console.log(),console.log(chalk.white("  To really close ICOA CLI, type: ")+chalk.bold.cyan("quit confirm")),console.log(),void po.prompt()):(o&&"demo-free"===o.session.examId&&(console.log(),console.log(chalk.gray("  Demo paused. Resume with: ")+chalk.white("demo")+chalk.gray(" (fresh) or ")+chalk.white("exam q 1")+chalk.gray(" (continue)."))),U(),g(),console.log(chalk.gray("  Session saved. Use ")+chalk.white("icoa --resume")+chalk.gray(" to continue.")),j(),void ao(0))}if("back"===n){const o=D(),e=o&&"demo-free"!==o.session.examId,l=o&&"demo-free"===o.session.examId&&(()=>{const e=new Date(o.session.startedAt||0).getTime();return Date.now()-e<18e5})();if(e)console.log(),console.log(chalk.gray("  Exam paused. Your progress is saved.")),console.log(chalk.white("  Resume: exam q 1")+chalk.gray("  ·  ")+chalk.white("exam review")+chalk.gray("  ·  ")+chalk.white("exam submit")),console.log();else if(l){const e=Object.keys(o.answers).length,l=o.session.questionCount;console.log(),console.log(chalk.gray(`  Demo paused (${e}/${l} answered). Resume with: `)+chalk.white("exam q 1")),console.log(chalk.gray("  Or type ")+chalk.white("demo")+chalk.gray(" to restart.")),console.log()}else{if(o&&"demo-free"===o.session.examId){const{clearExamState:o}=await import("./lib/exam-state.js");o("demo-free")}const e=t();fetch("https://practice.icoa2026.au/api/icoa/demo-stats",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({type:"post-report-back",lang:e.language||"en",timestamp:(new Date).toISOString()}),signal:AbortSignal.timeout(5e3)}).catch(()=>{}),"selection"===mo?eo():console.log(chalk.gray("  Already at main menu."))}return void po.prompt()}if("help"===n||"?"===n){if(D()){uo=!0;try{await e.parseAsync(["node","icoa","exam","help"])}catch{}return uo=!1,void po.prompt()}return no(s(),mo),void po.prompt()}if("man"===n||"manual"===n)return no(s(),mo),void po.prompt();if("more help"===n.toLowerCase()&&D()){uo=!0;try{await e.parseAsync(["node","icoa","exam","more-help"])}catch{}return uo=!1,void po.prompt()}if("continue"===n.toLowerCase())return console.log(),console.log(chalk.green.bold("  ═══ AI4CTF — AI as Your Teammate ═══")),console.log(),console.log(chalk.white("  In AI4CTF, you solve cybersecurity challenges")),console.log(chalk.white("  with AI by your side.")),console.log(),console.log(chalk.white("  In competition, you get AI help at 3 levels:")),console.log(chalk.yellow("    hint a")+chalk.gray("    General guidance (50 uses)")),console.log(chalk.yellow("    hint b")+chalk.gray("    Deep analysis (10 uses)")),console.log(chalk.yellow("    hint c")+chalk.gray("    Critical assist (2 uses)")),console.log(),console.log(chalk.white("  Try it now! Type: ")+chalk.bold.green("ai4ctf")),console.log(chalk.gray('  Chat freely with your AI teammate. Type "exit" when done.')),console.log(),console.log(chalk.gray("  After ai4ctf, try: ")+chalk.bold.red("ctf4ai")+chalk.gray(' — trick the AI into saying "koala"')),console.log(),void po.prompt();if(/^ICOA-[A-Z]{2,3}-\d{1,6}$/i.test(n.trim())){uo=!0;try{await e.parseAsync(["node","icoa","exam","token",n.trim()])}catch{}return uo=!1,void po.prompt()}if(/^[A-Z]{2}[0-9A-HJKMNP-TV-Z]{8}$/i.test(n.trim())){uo=!0;try{await e.parseAsync(["node","icoa","exam","token",n.trim().toUpperCase()])}catch{}return uo=!1,void po.prompt()}const a=n.match(/^exam\s+([A-Z]{2}[0-9A-HJKMNP-TV-Z]{8})$/i);if(a){uo=!0;try{await e.parseAsync(["node","icoa","exam","token",a[1].toUpperCase()])}catch{}return uo=!1,void po.prompt()}const y=n.match(/^exam\s+([A-Z]{2,3})$/i);if(y){uo=!0;try{await e.parseAsync(["node","icoa","exam","list",y[1]])}catch{}return uo=!1,void po.prompt()}if("clear"===n||"cls"===n)return console.clear(),void po.prompt();if(n.startsWith("activate ")){const o=n.slice(9).trim(),e=r(o);return"ok"===e?console.log(chalk.green("  Access granted! Token bound to this device.")):"already_bound"===e?(console.log(),console.log(chalk.red("  Token already activated on a different device.")),console.log(chalk.gray("  Each token binds to the first device that uses it. If you lost the device,")),console.log(chalk.gray("  contact your proctor to have the token re-issued for a new device."))):(console.log(),console.log(chalk.red("  Token not recognized.")),console.log(chalk.gray("  Possible reasons:")),console.log(chalk.white("    • ")+chalk.gray("Typo — access tokens are case-insensitive and look like ")+chalk.cyan("ICOA-XXXX-XXXX-XXXX")+chalk.gray(" (4-char hex groups, e.g. ICOA-385E-27F2-B21B)")),console.log(chalk.white("    • ")+chalk.gray("Expired — ask your proctor or organizer for a fresh token")),console.log(chalk.white("    • ")+chalk.gray("Network — verify connection to ")+chalk.cyan("practice.icoa2026.au")),console.log(chalk.gray("  Still stuck? type ")+chalk.cyan("help")+chalk.gray(" or try ")+chalk.cyan("exam demo")+chalk.gray(" for a free practice round."))),console.log(),void po.prompt()}if("activate"===n)return console.log(chalk.gray("  Usage: ")+chalk.white("activate <token>")),console.log(),void po.prompt();const m=D();if(m){const o=n.toUpperCase().trim(),l=o=>{const e=m.questions.find(e=>e.number===o);return!!e&&("ai4ctf"===e.type||"ctf4ai"===e.type||e.options&&!e.options.A&&!e.options.B)},t=o=>{const e=m.questions.find(e=>e.number===o);return"short_answer"===e?.type},a=o=>{const e="demo-free"!==m.session.examId,l=e&&o>=39?"ctf4ai":e&&o>=31?"ai4ctf":null;console.log(),console.log(chalk.yellow(`  Q${o} is a practical question — letters (A/B/C/D) don't apply here.`)),l?(console.log(chalk.white("  Enter the AI chat for this question:  ")+chalk.bold.cyan(l)),console.log(chalk.gray("  Or submit a flag directly: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`))):console.log(chalk.gray("  Submit a flag: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`)),console.log()};if(/^[ABCDE]$/.test(o)){const n=m._lastQ||1;if(l(n))return a(n),void po.prompt();if(t(n))return console.log(),console.log(chalk.yellow(`  Q${n} is a short-answer question — type a number, not a letter.`)),console.log(chalk.gray("  Example: ")+chalk.green("42")+chalk.gray("  (or ")+chalk.green(`exam answer ${n} 42`)+chalk.gray(")")),console.log(),void po.prompt();uo=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(n),o])}catch{}return uo=!1,void po.prompt()}if(/^-?\d+$/.test(o)){const l=m._lastQ||1;if(t(l)){uo=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(l),o])}catch{}return uo=!1,void po.prompt()}}const s=o.match(/^(\d+)\s+([ABCDE]|-?\d+)$/);if(s){const o=parseInt(s[1],10);if(l(o))return a(o),void po.prompt();uo=!0;try{await e.parseAsync(["node","icoa","exam","answer",s[1],s[2]])}catch{}return uo=!1,void po.prompt()}}const d=n.split(/\s+/)[0].toLowerCase(),p=/^python3?(\.\d+)?$/.test(d),h="ls"===d||"pwd"===d,w=n.startsWith("!")||d.startsWith("!")||p||h,f=new Set(["nano","vi","vim","emacs","pico","ed","code","cat","less","more","head","tail","ls","pwd","cd","base64","xxd","hexdump","od","openssl","md5sum","sha256sum","grep","find","awk","sed","strings","file","curl","wget","nc","ping","nmap","echo","bash","sh","zsh","pip","pip3","node","npm"]),k=()=>{console.log(chalk.gray("  Shell commands need ")+chalk.bold.cyan("!")+chalk.gray(" prefix. Try: ")+chalk.bold.cyan(`!${n}`)),console.log()};if("embodied"===mo&&!w&&!["demo2","learn","exam","ctf4eai","ctf4vla","lang","ref","setup","env","aienv","ipynb","sim"].includes(d))return f.has(d)?(k(),void po.prompt()):(console.log(chalk.gray("  Not available in Embodied AI Security mode.")),console.log(chalk.white("  Try ")+chalk.bold.cyan("demo2")+chalk.gray(" (intro) · ")+chalk.bold.cyan("learn")+chalk.gray(" (curriculum) · ")+chalk.bold.cyan("exam <PD-token>")+chalk.gray(" (Paper D)")),console.log(),void po.prompt());if("selection"===mo&&!w&&!["exam","demo","demo2","retry","nations","next","prev","continue","setup","lang","ref","ai4ctf","ctf4ai","mark","unmark","review","submit","env","aienv","ipynb","sim"].includes(d)){if(f.has(d))return k(),void po.prompt();if(console.log(chalk.gray("  Not available in Selection mode.")),m){const o=m._lastQ||1;console.log(chalk.white(`  Resume exam: exam q ${o}`)+chalk.gray("  ·  ")+chalk.white("A/B/C/D")+chalk.gray(" to answer"))}else console.log(chalk.gray("  Try: demo  ·  setup to switch mode"));return console.log(),void po.prompt()}if("organizer"===mo&&!["join","exam","demo","retry","next","prev","logout","setup","lang","ref","ctf","mark","unmark","review","submit"].includes(d))return console.log(chalk.gray("  Not available in Organizer mode. Switch via: setup")),console.log(),void po.prompt();if(!("olympiad"!==mo||s()&&c()||i(d)))return console.log(chalk.yellow("  Restricted mode. ")+chalk.gray("Enter your access token:")),console.log(chalk.white("    activate <token>")),console.log(),console.log(chalk.gray("  Free commands: ")+chalk.white("ref [topic]")+chalk.gray(", ")+chalk.white("help")+chalk.gray(", ")+chalk.white("exit")),console.log(),void po.prompt();if(!["join","activate","challenges","ch","open","submit","flag","scoreboard","sb","status","time","ref","shell","files","connect","note","notes","logbook","log","man","manual","lang","setup","env","aienv","ipynb","ai4ctf","model","ctf","exam","demo","retry","nations","next","prev","continue","logout","ctf4ai","mark","unmark","review","submit","learn","demo2","ctf4eai","ctf4vla","theme","sim"].includes(d)){if(K.has(d))return console.log(chalk.yellow(`  "${d}" is a shell command — the ICOA prompt isn't a shell.`)),console.log(chalk.gray("  In real-exam mode, prefix with ! to run inside the sandbox: ")+chalk.cyan(`!${n}`)),console.log(),void po.prompt();if(/(?:^|\s)(?:\/(?!home\/|Users\/|tmp\/)|\.\.\/|~\/)/.test(n)&&!n.startsWith("cd ")){const o=/(?:^|\s)\/(?!home\/\w+\/icoa-workspace|Users\/\w+\/icoa-workspace|tmp\/)/.test(n),e=/\.\./.test(n);if(o||e)return console.log(chalk.red("  Blocked: access outside workspace is not allowed.")),console.log(chalk.gray(`  Workspace: ${H}`)),console.log(),void po.prompt()}let o=n.startsWith("!")?n.slice(1).trim():n;if("darwin"===process.platform){const e="/opt/homebrew/opt/python@3.12/bin/python3.12";o=o.replace(/^python3?\s/,`${e} `).replace(/^(python3|python)$/,e)}else if("win32"===process.platform){const e=(()=>{try{return l("py -3 --version",{stdio:["ignore","ignore","ignore"],timeout:1500}),"py -3"}catch{}return"python"})();o=o.replace(/^python3?(\.\d+)?\s/,`${e} `).replace(/^python3?(\.\d+)?$/,e)}else{const e=(()=>{try{return l("which python3.12",{stdio:"ignore"}),"python3.12"}catch{return"python3"}})();o=o.replace(/^python\s/,`${e} `).replace(/^python$/,e)}const e=B(),t=F(n);M({cwd:e,input:n,riskFlags:t}),t.length>0&&L()&&(console.log(chalk.yellow(`  ⚠ Action flagged: ${t.join(", ")} — logged.`)),console.log()),/^(\S*python3?(\.\d+)?)\s*$/.test(o)&&(o=`PYTHONSTARTUP="${function(){const o=z(G(),".icoa");W(o)||X(o,{recursive:!0});const e=z(o,"python-startup.py");return W(e)||Y(e,"# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP\nimport base64, struct, hashlib, re, json, os, sys, binascii\ntry: import requests\nexcept ImportError: pass\ntry: from Crypto.Cipher import AES\nexcept ImportError: pass\ntry: from Crypto.Util.Padding import pad, unpad\nexcept ImportError: pass\ntry: from pwn import xor, p32, u32, p64, u64\nexcept ImportError: pass\ntry: import bs4\nexcept ImportError: pass\ntry: import numpy as np\nexcept ImportError: pass\n"),e}()}" ${o}`,console.log(),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(chalk.bold.white("  Python ready — ICOA exam toolkit pre-loaded")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(),console.log(chalk.white("  Already imported: ")+chalk.gray("base64, struct, hashlib, re, json, binascii")),console.log(chalk.white("  Also available:   ")+chalk.gray("requests, bs4, numpy, AES, pad/unpad, xor, p32/u32/p64/u64")),console.log(),console.log(chalk.yellow("  Quick examples:")),console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ')+chalk.gray("# decode base64")),console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ')+chalk.gray("# hex → bytes")),console.log(chalk.gray('    "ICOA{x}".encode()                 ')+chalk.gray("# str → bytes")),console.log(chalk.gray("    [chr(c) for c in [73,67,79,65]]    ")+chalk.gray("# ASCII codes")),console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ')+chalk.gray("# pwntools XOR")),console.log(),console.log(chalk.gray("  Exit:  ")+chalk.white("exit()")+chalk.gray("  or Ctrl-D")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log()),uo=!0;try{P()&&await q()?await N(o,po):await lo(o,po,e)}catch{console.log(chalk.yellow(`  Command failed: ${d}`))}return uo=!1,console.log(),void po.prompt()}uo=!0;const T=n.trim(),E=T.toLowerCase();let S,$=null,O="";if(m)if("submit"===E)$="final";else if(E.startsWith("submit ")){let o=T.slice(7).trim();/^submit\s+/i.test(o)&&(o=o.replace(/^submit\s+/i,"").trim()),o=o.replace(/^["'`]+|["'`]+$/g,"").trim(),o&&/^ICOA\{[^}]*\}?$/i.test(o)&&($="flag",O=o)}else/^ICOA\{[^}]+\}$/i.test(T)&&($="flag",O=T);S="final"===$?["exam","submit"]:"flag"===$?["exam","answer",String(m?._lastQ||1),O]:function(o){const e=o.split(/\s+/),l=e[0].toLowerCase(),n=e.slice(1),t={demo:["exam","demo"],retry:["exam","demo-retry"],nations:["exam","nations"],next:["exam","next"],prev:["exam","prev"],mark:["exam","mark",...n],unmark:["exam","unmark",...n],review:["exam","review"],logout:["ctf","logout"],join:["ctf","join",...n],activate:["ctf","activate",...n],challenges:["ctf","challenges"],ch:["ctf","challenges"],open:["ctf","open",...n],submit:["ctf","submit",...n],flag:["ctf","submit",...n],scoreboard:["ctf","scoreboard",...n],sb:["ctf","scoreboard",...n],status:["ctf","status"],time:["ctf","time"]};return t[l]?t[l]:["ref","shell","files","connect","note","notes","logbook","log","man","manual","lang","setup","env","aienv","ipynb","ai4ctf","model","ctf","exam","ctf4ai"].includes(l)?[l,...n]:e}(n);const R="ctf"===S[0]&&"join"===S[1];R&&po.pause(),process.exit=()=>{throw new Error(Z)};try{await e.parseAsync(["node","icoa",...S])}catch(o){const e=o instanceof Error?o.message:String(o);if(e===Z);else if(e.includes("commander.unknownCommand")){const{distance:o}=await import("fastest-levenshtein"),e=["ctf","ref","shell","files","connect","note","notes","logbook","log","manual","lang","setup","env","aienv","ipynb","ai4ctf","exam","ctf4ai","theme","clear","cls","quit","exit","back","menu","help","continue","activate","demo","challenges","status","scoreboard","join","logout"],l=d.split(/\s+/)[0]||d;let n={word:"",dist:1/0};for(const t of e){const e=o(l.toLowerCase(),t);e<n.dist&&(n={word:t,dist:e})}console.log(chalk.yellow(`  Unknown command: ${d}.`)),n.dist>0&&n.dist<=2&&console.log(chalk.gray("  Did you mean: ")+chalk.bold.cyan(n.word)+chalk.gray("?")),console.log(chalk.gray("  Type ")+chalk.cyan("help")+chalk.gray(" for the full command list."))}else e.includes("commander.")||(e.includes("fetch failed")||e.includes("ECONNREFUSED")||e.includes("ETIMEDOUT"))&&console.log(chalk.yellow("  Network error. Check your connection."))}finally{process.exit=ao,uo=!1,R&&po.resume()}b()?po.setPrompt(chalk.magenta("icoa ai4ctf> ")):v()?po.setPrompt(chalk.red("icoa ctf4ai> ")):A()&&po.setPrompt(chalk.bold.cyan("icoa ctf4eai> ")),console.log(),po.prompt()}),po.on("SIGINT",()=>{if(console.log(),b()||v())console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still in the AI chat.")),console.log(chalk.white("  Type ")+chalk.bold.cyan("exit")+chalk.white(" to leave the chat and return to the menu."));else if(D()){const o="demo-free"!==D().session.examId;console.log(chalk.yellow("  Ctrl+C did NOT close ICOA CLI.")),console.log(chalk.gray(`  Your ${o?"exam":"demo"} is paused and every answer is auto-saved.`)),console.log(),console.log(chalk.white("  Resume: ")+chalk.cyan("exam q 1")+chalk.gray("  ·  Back to menu: ")+chalk.cyan("back")+chalk.gray("  ·  Close CLI: ")+chalk.cyan(o?"quit confirm":"quit"))}else console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still at the ")+chalk.cyan("icoa>")+chalk.yellow(" prompt.")),console.log(chalk.gray("  Keep typing — ")+chalk.cyan("help")+chalk.gray(" lists commands. (Only ")+chalk.cyan("quit")+chalk.gray(" or Ctrl+D actually close the CLI.)"));console.log(),po.prompt()}),po.on("close",()=>{U(),g(),j(),ao(0)})}function lo(o,l,n){return new Promise(t=>{const a=process.stdin,s=!!a.isTTY&&!!a.isRaw;if(l.pause(),a.isTTY&&"function"==typeof a.setRawMode)try{a.setRawMode(!1)}catch{}const r=e(o,{shell:!0,stdio:"inherit",cwd:n||process.cwd()}),i=()=>{if(a.isTTY&&"function"==typeof a.setRawMode&&s)try{a.setRawMode(!0)}catch{}l.resume(),t()};r.on("close",i),r.on("error",i)})}function no(o,e="olympiad"){return console.log(),"selection"===e||"organizer"===e?(console.log(chalk.bold.white("  Exam")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to exam server")),console.log(chalk.white("    exam list           ")+chalk.gray("Available exams")),console.log(chalk.white("    exam start <id>     ")+chalk.gray("Begin an exam")),console.log(chalk.white("    exam q [n]          ")+chalk.gray("View questions")),console.log(chalk.white("    exam answer <n> <X> ")+chalk.gray("Answer question")),console.log(chalk.white("    exam review         ")+chalk.gray("Review all answers")),console.log(chalk.white("    exam submit         ")+chalk.gray("Submit for grading")),console.log(chalk.white("    exam result         ")+chalk.gray("View your score")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    setup               ")+chalk.gray("Settings / switch mode")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),void console.log()):o?(console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(chalk.bold.white("  How it works")),console.log(),console.log(chalk.gray("  1. Browse ")+chalk.white("challenges")+chalk.gray(" and pick one")),console.log(chalk.gray("  2. ")+chalk.white("open <id>")+chalk.gray(" to read the challenge")),console.log(chalk.gray("  3. Use ")+chalk.white("ai4ctf")+chalk.gray(" to chat with AI when stuck")),console.log(chalk.gray("  4. ")+chalk.white("submit <id> icoa{flag}")+chalk.gray(" to score points")),console.log(chalk.gray("  5. Check ")+chalk.white("scoreboard")+chalk.gray(" to track your rank")),console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(),console.log(chalk.bold.white("  Competition")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to CTFd")),console.log(chalk.white("    challenges (ch)     ")+chalk.gray("List challenges by category")),console.log(chalk.white("    open <id>           ")+chalk.gray("Read challenge + get next steps")),console.log(chalk.white("    submit <id> <flag>  ")+chalk.gray("Submit a flag")),console.log(chalk.white("    scoreboard (sb)     ")+chalk.gray("Live rankings")),console.log(chalk.white("    status              ")+chalk.gray("Your score, budget & timer")),console.log(chalk.white("    time                ")+chalk.gray("Countdown timer")),console.log(),console.log(chalk.bold.white("  AI Teammate")+chalk.gray(" — 3 levels, use wisely")),console.log(chalk.white('    hint "question"     ')+chalk.gray("Level A — General guidance (50 uses)")),console.log(chalk.white('    hint-b "question"   ')+chalk.gray("Level B — Deep analysis (10 uses)")),console.log(chalk.white('    hint-c "question"   ')+chalk.gray("Level C — Critical assist (2 uses)")),console.log(chalk.white("    hint budget         ")+chalk.gray("Check remaining uses")),console.log(chalk.white("    ai4ctf              ")+chalk.gray("Free-chat with AI (no limit)")),console.log(),console.log(chalk.bold.white("  Tools")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference (linux, web, crypto...)")),console.log(chalk.white("    shell               ")+chalk.gray("Docker sandbox")),console.log(chalk.white("    files <id>          ")+chalk.gray("Download challenge files")),console.log(chalk.white("    connect <id>        ")+chalk.gray("Connect to remote target")),console.log(chalk.white("    note [text]         ")+chalk.gray("Add a logbook entry (in-exam: tags current Q)")),console.log(chalk.white("    logbook [n]         ")+chalk.gray("View your logbook (in-exam: filter by Q)")),console.log(chalk.white("    log                 ")+chalk.gray("Session history")),console.log(chalk.white("    man / manual        ")+chalk.gray("Show this command list (works in exam too, does not burn elimination)")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    setup               ")+chalk.gray("Configure settings")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language (15 supported)")),console.log(chalk.white("    logout              ")+chalk.gray("Disconnect")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit (session saved)")),void console.log()):(console.log(chalk.bold.yellow("  Restricted Mode — activate with a token to unlock all commands")),console.log(),console.log(chalk.white("    activate <token>    ")+chalk.gray("Unlock full access")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),void console.log())}
+import{createInterface as o}from"node:readline";import{spawn as e,execSync as l}from"node:child_process";import chalk from"chalk";import{isConnected as n,getConfig as t,saveConfig as a}from"./lib/config.js";import{isActivated as s,activateToken as r,isFreeCommand as i,isDeviceMatch as c,recordExit as g,recordResume as y,isFirstRunOrUpgrade as m,markVersionSeen as d}from"./lib/access.js";import{setReplMode as p}from"./lib/ui.js";import{returnToMainMenu as u,printMenuHint as h,menuHintInline as w}from"./lib/menu-nav.js";import{setMainRl as f}from"./lib/main-rl.js";import{isChatActive as b,handleChatMessage as x}from"./commands/ai4ctf.js";import{isCtf4aiActive as v,handleCtf4aiMessage as C}from"./commands/ctf4ai-demo.js";import{isCtf4VlaActive as A,handleCtf4VlaMessage as I}from"./commands/ctf4vla.js";import{isDemo2Active as k}from"./commands/demo2.js";import{loadDemo2Progress as T}from"./lib/demo2-progress.js";import{hasAnySimHistory as E,lastArmAt as S,lastBundledAt as $,lastSimAt as O}from"./lib/sim-cooldown.js";import{getExamState as D,getRealExamState as L,getDemoState as R}from"./lib/exam-state.js";import{resetTerminalTheme as j}from"./lib/theme.js";import{ensureSandbox as q,runInSandbox as N,isDockerAvailable as P}from"./lib/sandbox.js";import{checkShellRisk as F,logShellAudit as M,getActiveCwd as B}from"./lib/exam-sandbox.js";import{logCommand as _}from"./lib/logger.js";import{startLogSync as Q,stopLogSync as U}from"./lib/log-sync.js";import{existsSync as W,mkdirSync as X,writeFileSync as Y}from"node:fs";import{join as z}from"node:path";import{homedir as G}from"node:os";const V=Date.now();function J(){return L()?chalk.cyan("icoa exam> "):function(){const o=R();return!(!o||"demo-free"!==o.session?.examId)&&new Date(o.session.startedAt||0).getTime()>=V}()?chalk.yellow("icoa demo> "):chalk.green("icoa> ")}const H=z(G(),"icoa-workspace"),K=new Set(["sudo","su","doas","pkexec","brew","apt","apt-get","yum","choco","npm","npx","pip","pip3","shutdown","reboot","halt","mkfs","fdisk","dd","iptables","ufw"]),Z="__REPL_NO_EXIT__",oo="2.5.1";function eo(){console.log(),console.log(`   ${chalk.cyan.bold("🎯  ICOA 2026  ·  National Selection")}`),console.log(),console.log("   "+chalk.bold.cyan("learn ")+chalk.white("ACxxxxxxxx")+chalk.gray("     → ai4ctf-12    (AI as your CTF teammate)")),console.log("   "+chalk.bold.cyan("learn ")+chalk.white("CAxxxxxxxx")+chalk.gray("     → ctf4ai-12    (red-team software AI)")),console.log("   "+chalk.bold.cyan("learn ")+chalk.white("EAxxxxxxxx")+chalk.gray("     → ctf4eai-12   (red-team embodied AI)")),console.log("   "+chalk.bold.cyan("exam  ")+chalk.white("<CC>xxxxxxxx")+chalk.gray("   → Paper A/B/C/D/E  (country exam token)")),console.log("   "+chalk.bold.cyan("demo")+chalk.gray("               → free practice")),console.log("   "+chalk.bold.cyan("lang")+chalk.white(" es")+chalk.gray("            → switch language")),console.log("   "+chalk.gray("help · menu · quit")),console.log()}export async function startRepl(e,R){process.env.ICOA_INSIDE_REPL="1";const V=t(),to=n(),ao=process.exit.bind(process),so=s();if(V.demoCleanedForVersion!==oo){try{const{existsSync:o,unlinkSync:e}=await import("node:fs"),{join:l}=await import("node:path"),{getIcoaDir:n}=await import("./lib/config.js"),t=l(n(),"demo-state.json");o(t)&&e(t)}catch{}a({demoCleanedForVersion:oo})}const{select:ro,confirm:io}=await import("@inquirer/prompts"),co=V.mode||"",go=""===co?"instant":["instant","learn","selection","olympiad"].includes(co)?co:"selection",yo=[{name:`  ${chalk.bold("⚡  Try ICOA in 30 seconds")}     ${chalk.gray("—")}  ${chalk.gray("watch · no token needed")}`,value:"instant"},{name:`  ${chalk.bold("🧠  Learn")}                       ${chalk.gray("—")}  ${chalk.gray("AC / CA / EA token · skill up")}`,value:"learn"},{name:`  ${chalk.bold("🎯  National Selection")}          ${chalk.gray("—")}  ${chalk.gray("country exam token · aim for finals")}`,value:"selection"},{name:`  ${chalk.bold("🏆  International Olympiad")}      ${chalk.gray("—")}  ${chalk.gray("finals stage · Sydney 2026 · full sandbox")}`,value:"olympiad"},{name:`  ${chalk.gray("ℹ️   About ICOA")}                  ${chalk.gray("·")}  ${chalk.gray("what this is · how to join")}`,value:"about"}];console.log(chalk.gray("   Type ")+chalk.bold.cyan("menu")+chalk.gray(" from anywhere to return here.")),console.log();let mo="";for(;!mo;){let o;try{o=await ro({message:"Mode",choices:yo,default:go||"instant"})}catch(o){throw o instanceof Error&&"ExitPromptError"===o.name&&(console.log(),console.log(chalk.gray("   Goodbye.")),process.exit(0)),o}"about"!==o?mo=o:(console.clear(),console.log(),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(chalk.bold.yellow("   ICOA")+chalk.white(" — AI-Native CLI OS for Cyber & AI Security")),console.log(chalk.gray("   Olympiad & Competition  ·  K-12 to University")),console.log(chalk.cyan("  ───────────────────────────────────────────────────")),console.log(),console.log(chalk.bold.white("   What Makes ICOA Different")),console.log(chalk.gray("   · AI-native     AI teammate, AI adversary, AI translation")),console.log(chalk.gray("   · CLI OS        Complete competition environment in terminal")),console.log(chalk.gray("   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured")),console.log(chalk.gray("   · Global scale  15,000+ concurrent exams · 15 languages")),console.log(),console.log(chalk.bold.white("   Competition Format (2-day standard + 1-day Pioneer)")),console.log(`   ${chalk.green.bold("AI4CTF")}${chalk.gray("  [Day 1]  AI as teammate — speed track, dynamic decay + top-3 bonus")}`),console.log(`   ${chalk.red.bold("CTF4AI")}${chalk.gray("  [Day 2]  AI as target — knowledge track, static value per challenge")}`),console.log(`   ${chalk.cyan.bold("CTF4EAI")}${chalk.gray(" [Pioneer / Practical Round] Embodied AI — VLA + world models + sim-to-real")}`),console.log(),console.log(chalk.bold.white("   Scoring (in brief)")),console.log(chalk.gray("   · Standard medals: AI4CTF + CTF4AI combined · 1/12 Gold · 2/12 Silver · 3/12 Bronze")),console.log(chalk.gray("   · HMA: top 50% on either day, total below bronze cutoff")),console.log(chalk.gray("   · CTF4EAI: separate 15-finalist pool, G/S/B + 12 Finalist Awards")),console.log(),console.log(chalk.white("   Sydney, Australia")+chalk.gray("  ·  Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.bold.white("   Organized by")+chalk.gray("  ASRA (Australia) · ICO Foundation Inc")),console.log(chalk.bold.white("   Contact     ")+chalk.cyan(" australia@icoa2026.au  ·  accreditation@icoa2026.au")),console.log(chalk.bold.white("   Website     ")+chalk.cyan.underline(" https://icoa2026.au")),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(),console.log(chalk.gray("   Press ")+chalk.yellow("Enter")+chalk.gray(" to return...")),await new Promise(o=>{const e=l=>{process.stdin.removeListener("data",e),process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!1),process.stdin.pause(),o()};process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.once("data",e)}),console.clear())}if("olympiad"===mo&&"olympiad"!==go){console.log(),console.log(chalk.yellow("   This mode will download ~500MB of CTF tools and AI models."));let o=!0;try{o=await io({message:"Continue?",default:!0})}catch(e){if(!(e instanceof Error&&"ExitPromptError"===e.name))throw e;o=!1}o||(mo="selection",console.log(chalk.gray("   Switched to National Selection mode.")))}if(mo!==go&&a({mode:mo}),console.log(),"olympiad"===mo&&m(oo)){d(oo),console.log(chalk.gray("   Checking competition environment..."));const{execSync:o}=await import("node:child_process"),e=[{name:"pwntools",cmd:'python3 -c "import pwn"'},{name:"z3-solver",cmd:'python3 -c "import z3"'},{name:"numpy",cmd:'python3 -c "import numpy"'},{name:"requests",cmd:'python3 -c "import requests"'}];let l=0;for(const n of e)try{o(n.cmd,{stdio:"ignore"})}catch{l++}l>0?(console.log(chalk.yellow(`   ${l} core competition libraries missing.`)),console.log(chalk.gray("   Run ")+chalk.white("env setup")+chalk.gray(" when you are ready to install them.")),console.log()):(console.log(chalk.green("   All core libraries ready.")),console.log())}if(R){const o=y();if(o){const e=Math.floor(o.awaySeconds/60),l=o.awaySeconds%60;console.log(chalk.yellow(`   Session resumed. Away: ${e}m ${l}s | Total exits: ${o.exitCount}`)),console.log()}}if("selection"===mo)console.log(chalk.gray("   ─── exam hall · 90 min per paper once started · no pause ───")),console.log(),eo();else if("embodied"===mo)!function(){console.log(chalk.cyan.bold("   [🤖  ctf4eai — Embodied AI Security]")),console.log(),console.log(chalk.bold.cyan("   CTF4EAI")+chalk.gray(" — ICOA 2026's ")+chalk.bold.white("Pioneer Round")),console.log(chalk.gray("   an independent parallel track alongside the scored main events: ")+chalk.green("AI4CTF")+chalk.gray(" (Day 1) and ")+chalk.red("CTF4AI")+chalk.gray(" (Day 2)")),console.log(),console.log(chalk.white("   Embodied AI is at its ImageNet moment.")),console.log(chalk.gray("   VLA models, MuJoCo physics, real robot arms.")),console.log(chalk.gray("   Real models, real physics, real attack surfaces.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────"));const o=$()>0||O()>0,e=S()>0,l=E(),n=T(),t=null!==n&&"number"==typeof n.completedAt&&n.nextCardIndex>=n.totalCards,a=null!==n&&!t;if(t)console.log(chalk.bold.yellow("   Continue:  ")+chalk.bold.cyan("④ learn LEARNDEMO01")+chalk.gray("   (demo2 ✓  ·  sim")+(e?chalk.gray(" ✓  ·  sim arm ✓)"):chalk.gray(")")));else if(a){const o=`${n.nextCardIndex} / ${n.totalCards}`;console.log(chalk.bold.yellow("   Continue:  ")+chalk.bold.cyan("③ demo2")+chalk.gray("  (last left at card ")+chalk.bold.yellow(o)+chalk.gray(")"))}else o&&e?console.log(chalk.bold.yellow("   Next up:   ")+chalk.bold.cyan("③ demo2")+chalk.gray("   →   ")+chalk.bold.cyan("④ learn LEARNDEMO01")+chalk.gray("   (sim ✓  ·  sim arm ✓)")):l?console.log(chalk.bold.yellow("   Next up:   ")+(e?chalk.bold.cyan("① sim")+chalk.gray("  →  ")+chalk.bold.cyan("③ demo2"):chalk.bold.cyan("② sim arm")+chalk.gray("  →  ")+chalk.bold.cyan("③ demo2"))+chalk.gray("   →   ")+chalk.bold.cyan("④ learn LEARNDEMO01")):console.log(chalk.bold.yellow("   First time? Try in order:  ")+chalk.bold.cyan("① sim")+chalk.gray("  →  ")+chalk.bold.cyan("② sim arm")+chalk.gray("  →  ")+chalk.bold.cyan("③ demo2")+chalk.gray("  →  ")+chalk.bold.cyan("④ learn LEARNDEMO01"));console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.green("     sim")+chalk.gray("                     ")+chalk.bold.cyan("①")+chalk.gray(" ")+chalk.bold.yellow("★ INSTANT")+chalk.gray(" — 9-robot group dance, no wait, no setup")),console.log(chalk.bold.green("     sim arm")+chalk.gray("                 ")+chalk.bold.cyan("②")+chalk.gray(" interactive 6-DOF arm sandbox — type joint values, watch")),console.log(chalk.bold.green("     demo2")+chalk.gray("                   ")+chalk.bold.cyan("③")+chalk.gray(" ~8 min interactive intro + live MuJoCo sim")),console.log(chalk.bold.green("     learn LEARNDEMO01")+chalk.gray("       ")+chalk.bold.cyan("④")+chalk.gray(" free 11-card intro (paste this command as-is)")),console.log(chalk.bold.green("     learn ")+chalk.bold.yellow("EA")+chalk.gray(" + 8 chars      full 96 / 360 curriculum (team-issued)")),console.log(chalk.bold.green("     exam ")+chalk.bold.yellow("PDxxxxxxxx")+chalk.gray("         Paper D (CTF4EAI) — national selection contestants")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),console.log(chalk.gray("   Three open tiers: ")+chalk.green("free 11")+chalk.gray(" · ")+chalk.yellow("registered 100")+chalk.gray(" · ")+chalk.bold.magenta("national team 480")+chalk.gray(" (PhD-ready)")),console.log(chalk.gray("   Country team contact: ")+chalk.cyan("australia@icoa2026.au")),console.log(),h(),console.log()}();else if("instant"===mo)console.log(chalk.cyan.bold("   [⚡  Try ICOA in 30 seconds — no token needed]")),console.log(),console.log(chalk.gray("   Two free tastes — just type the word and press Enter:")),console.log(),console.log(chalk.bold.green("     demo ")+chalk.gray("   Paper A/B/C taste — 10 MCQs, no timer    ")+chalk.bold.cyan("🎯 selection-style")),console.log(chalk.bold.green("     demo2")+chalk.gray("   Embodied-AI mini-demo — robots & MuJoCo  ")+chalk.bold.yellow("🤖 hands-on")),console.log(),console.log(chalk.gray("   Type ")+chalk.bold.cyan("demo")+chalk.gray(" or ")+chalk.bold.cyan("demo2")+chalk.gray(" to start  ·  ")+chalk.bold.cyan("menu")+chalk.gray(" to go back  ·  ")+chalk.bold.cyan("quit")+chalk.gray(" to exit")),console.log(),a({mode:"selection"}),mo="selection";else{if("learn"===mo){console.log(chalk.cyan.bold("   [🧠  Learn]")),console.log(),console.log(chalk.gray("   Three tracks · same difficulty curve.")),console.log(),console.log(chalk.white("   Free 12-card demos — paste the full command:")),console.log(),console.log(chalk.gray("     🤝  ai4ctf    AI as your teammate         ")+chalk.bold.yellow("learn AI4CTFDEMO01")),console.log(chalk.gray("     🔓  ctf4ai    AI as your target           ")+chalk.bold.yellow("learn CTF4AIDEMO01")),console.log(chalk.gray("     🤖  ctf4eai   Embodied AI Security        ")+chalk.bold.yellow("learn LEARNDEMO01")),console.log(),console.log(chalk.gray("   Got a cohort token? Type ")+chalk.bold.yellow("learn <TOKEN>")+chalk.gray("   (e.g. ")+chalk.bold.yellow("learn EAABCD1234")+chalk.gray(").")),console.log();try{const{input:o}=await import("@inquirer/prompts"),{resolveLearnInput:l}=await import("./lib/learn-input.js");console.log(chalk.gray("   Enter a token (or just press Enter to go back).")),console.log();const n=l(await o({message:chalk.bold.cyan("icoa learn>"),theme:{prefix:"",style:{message:o=>o}}}));if("token"===n.kind){console.log(),console.log(chalk.gray("   Opening ")+chalk.bold.cyan("learn")+chalk.gray(`: ${n.token}`)),console.log(),a({mode:"selection"}),process.env.ICOA_LEARN_EMBEDDED="1";try{await e.parseAsync(["node","icoa","learn",n.token])}finally{delete process.env.ICOA_LEARN_EMBEDDED}}else"ambiguous"!==n.kind&&"unknown"!==n.kind||(console.log(),console.log(chalk.yellow("   "+n.hint)),console.log(chalk.gray("   Returning to main menu — pick 🧠 Learn again to retry.")),console.log())}catch{}return a({mode:"selection"}),void u()}"organizer"===mo?(console.log(chalk.yellow.bold("   [National/Regional Partner]")),console.log(),console.log(chalk.bold.white("   ██╗ ██████╗ ██████╗  █████╗")),console.log(chalk.bold.white("   ██║██╔════╝██╔═══██╗██╔══██╗")),console.log(chalk.bold.white("   ██║██║     ██║   ██║███████║")),console.log(chalk.bold.white("   ██║██║     ██║   ██║██╔══██║")),console.log(chalk.bold.white("   ██║╚██████╗╚██████╔╝██║  ██║")),console.log(chalk.bold.white("   ╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝")),console.log(),console.log(chalk.yellow("   International Cyber Olympiad in AI 2026")),console.log(chalk.bold.magenta("   The World's First AI-Native CLI Operating System")),console.log(chalk.bold.magenta("   for Cybersecurity & AI Security Competition")),console.log(chalk.bold.magenta("   and Olympiad for K-12")),console.log(chalk.gray("   Sydney, Australia · Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.white("   Vision")),console.log(chalk.gray("   Building a global pipeline for youth cyber & AI")),console.log(chalk.gray("   security talent through education and competition.")),console.log(),console.log(chalk.white("   Capacity")),console.log(chalk.gray("   15,000+ concurrent online examinations")),console.log(chalk.gray("   National selection, training, and education support")),console.log(),console.log(chalk.white("   Olympic Spirit")),console.log(chalk.gray("   Excellence · Friendship · Respect")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   New country accreditation & support:")),console.log(chalk.cyan("     australia@icoa2026.au")),console.log(chalk.cyan("     accreditation@icoa2026.au")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),to?(console.log(chalk.green(`   Logged in as ${V.userName}`)),console.log(chalk.white("     exam list")+chalk.gray("       Manage exams")),console.log(chalk.white("     logout")+chalk.gray("          Disconnect"))):console.log(chalk.white("     join <url>")+chalk.gray("      Connect to manage exams")),console.log(),h(),console.log()):(console.log(`   ${chalk.cyan.bold("🏆  ICOA 2026  ·  International Olympiad")}`),console.log(),so&&!c()?(console.log(chalk.red("   Token was activated on a different device.")),console.log(chalk.gray("   Contact organizer for assistance.")),console.log()):to?(console.log(chalk.green.bold(`   Welcome back, ${V.userName}!`)),console.log(chalk.gray(`   Connected to ${V.ctfdUrl}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Ready to compete? Start here:")),console.log(),console.log(chalk.bold.cyan("     challenges")+chalk.gray("     Browse challenges by category")),console.log(chalk.white("     status")+chalk.gray("         Your score & hint budget")),console.log(chalk.white("     scoreboard")+chalk.gray("     Live rankings")),console.log(chalk.white("     help")+chalk.gray("           Full command list")),console.log(),console.log(chalk.gray("   Tool environment:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("help")+chalk.gray(" · ")+w()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()):so?(W(H)||X(H,{recursive:!0}),console.log(chalk.green.bold("   Welcome, competitor!")),console.log(chalk.gray(`   Workspace: ${H}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Get started:")),console.log(),console.log(chalk.white("   Step 1  ")+chalk.bold.cyan("join <url>")+chalk.gray("   Connect to competition server")),console.log(chalk.white("   Step 2  ")+chalk.bold.cyan("challenges")+chalk.gray("   Browse & solve challenges")),console.log(chalk.white("   Step 3  ")+chalk.bold.cyan("ai4ctf")+chalk.gray("       Ask AI when stuck")),console.log(),console.log(chalk.gray("   Before Step 1 — make sure your tools are ready:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(),console.log(chalk.gray("   Also: ")+chalk.white("help")+chalk.gray(" all commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()):(console.log(chalk.bold.yellow("   🏆  You reached the finals tier.")),console.log(chalk.gray("   Full sandbox · 110 CTF tools · Sydney 2026 · this is where finalists compete.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   To begin, activate your competition token:")),console.log(),console.log(chalk.bold.cyan("     activate <token>")),console.log(),console.log(chalk.gray("   While waiting, explore:")),console.log(chalk.white("     ref linux")+chalk.gray("       Quick reference for Linux")),console.log(chalk.white("     ref web")+chalk.gray("         Quick reference for Web")),console.log(chalk.white("     env")+chalk.gray("             See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("       Install anything missing (~5 min, one-time)")),console.log(chalk.white("     help")+chalk.gray("            All available commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()))}e.exitOverride(),e.configureOutput({writeErr:()=>{},writeOut:o=>{console.log(o)}});const po=o({input:process.stdin,output:process.stdout,prompt:J(),terminal:!0});f(po);let uo=!1;p(!0),Q();const ho=po.prompt.bind(po);po.prompt=o=>{b()||v()||A()||k()||po.setPrompt(J()),ho(o)},po.prompt(),po.on("line",async o=>{if(uo)return;const n=o.trim();if(!n)return po.setPrompt(b()?chalk.magenta("icoa ai4ctf> "):J()),void po.prompt();if("menu"===n||"menu confirm"===n)return L()&&"menu confirm"!==n?(console.log(),console.log(chalk.yellow("  Real exam active. Progress is auto-saved.")),console.log(chalk.gray("  To return to main menu anyway, type ")+chalk.white("menu confirm")),console.log(),void po.prompt()):void u(po);if(b()){uo=!0;const o=await x(n);return uo=!1,"exit"===o&&po.setPrompt(J()),void po.prompt()}if(v()){uo=!0;const o=await C(n);return uo=!1,"exit"!==o&&"solved"!==o||po.setPrompt(J()),void po.prompt()}if(A()){uo=!0;const o=await I(n);return uo=!1,"exit"===o&&po.setPrompt(J()),po.setPrompt(A()?chalk.bold.cyan("icoa ctf4eai> "):J()),void po.prompt()}if(_(n),"exit"===n)return D()?(console.log(),console.log(chalk.yellow("  ⚠ An exam is in progress.")),console.log(chalk.white("  To return to menu without losing progress, type: ")+chalk.bold.cyan("back")),console.log(chalk.white("  To fully close ICOA CLI, type: ")+chalk.bold.cyan("quit")),console.log(chalk.gray("  Your progress is auto-saved either way.")),console.log(),void po.prompt()):(console.log(),console.log(chalk.gray("  ")+chalk.white("exit")+chalk.gray(" returns to the main menu. To fully close ICOA CLI, type ")+chalk.bold.cyan("quit")+chalk.gray(".")),"selection"===mo&&eo(),void po.prompt());if("quit"===n||"q"===n||"quit confirm"===n){const o=D();return o&&"demo-free"!==o.session.examId&&"quit confirm"!==n?(console.log(),console.log(chalk.yellow("  ⚠ A real exam is in progress.")),console.log(chalk.gray("    Your answers are auto-saved on the server, but the exam timer keeps ticking")),console.log(chalk.gray("    on the server side even if you close the CLI.")),console.log(),console.log(chalk.white("  To leave the CLI but keep the exam alive, type: ")+chalk.bold.cyan("back")),console.log(chalk.gray("    (recommended — you can resume with ")+chalk.cyan("exam q 1")+chalk.gray(" after relaunching icoa)")),console.log(),console.log(chalk.white("  To really close ICOA CLI, type: ")+chalk.bold.cyan("quit confirm")),console.log(),void po.prompt()):(o&&"demo-free"===o.session.examId&&(console.log(),console.log(chalk.gray("  Demo paused. Resume with: ")+chalk.white("demo")+chalk.gray(" (fresh) or ")+chalk.white("exam q 1")+chalk.gray(" (continue)."))),U(),g(),console.log(chalk.gray("  Session saved. Use ")+chalk.white("icoa --resume")+chalk.gray(" to continue.")),j(),void ao(0))}if("back"===n){const o=D(),e=o&&"demo-free"!==o.session.examId,l=o&&"demo-free"===o.session.examId&&(()=>{const e=new Date(o.session.startedAt||0).getTime();return Date.now()-e<18e5})();if(e)console.log(),console.log(chalk.gray("  Exam paused. Your progress is saved.")),console.log(chalk.white("  Resume: exam q 1")+chalk.gray("  ·  ")+chalk.white("exam review")+chalk.gray("  ·  ")+chalk.white("exam submit")),console.log();else if(l){const e=Object.keys(o.answers).length,l=o.session.questionCount;console.log(),console.log(chalk.gray(`  Demo paused (${e}/${l} answered). Resume with: `)+chalk.white("exam q 1")),console.log(chalk.gray("  Or type ")+chalk.white("demo")+chalk.gray(" to restart.")),console.log()}else{if(o&&"demo-free"===o.session.examId){const{clearExamState:o}=await import("./lib/exam-state.js");o("demo-free")}const e=t();fetch("https://practice.icoa2026.au/api/icoa/demo-stats",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({type:"post-report-back",lang:e.language||"en",timestamp:(new Date).toISOString()}),signal:AbortSignal.timeout(5e3)}).catch(()=>{}),"selection"===mo?eo():console.log(chalk.gray("  Already at main menu."))}return void po.prompt()}if("help"===n||"?"===n){if(D()){uo=!0;try{await e.parseAsync(["node","icoa","exam","help"])}catch{}return uo=!1,void po.prompt()}return no(s(),mo),void po.prompt()}if("man"===n||"manual"===n)return no(s(),mo),void po.prompt();if("more help"===n.toLowerCase()&&D()){uo=!0;try{await e.parseAsync(["node","icoa","exam","more-help"])}catch{}return uo=!1,void po.prompt()}if("continue"===n.toLowerCase())return console.log(),console.log(chalk.green.bold("  ═══ AI4CTF — AI as Your Teammate ═══")),console.log(),console.log(chalk.white("  In AI4CTF, you solve cybersecurity challenges")),console.log(chalk.white("  with AI by your side.")),console.log(),console.log(chalk.white("  In competition, you get AI help at 3 levels:")),console.log(chalk.yellow("    hint a")+chalk.gray("    General guidance (50 uses)")),console.log(chalk.yellow("    hint b")+chalk.gray("    Deep analysis (10 uses)")),console.log(chalk.yellow("    hint c")+chalk.gray("    Critical assist (2 uses)")),console.log(),console.log(chalk.white("  Try it now! Type: ")+chalk.bold.green("ai4ctf")),console.log(chalk.gray('  Chat freely with your AI teammate. Type "exit" when done.')),console.log(),console.log(chalk.gray("  After ai4ctf, try: ")+chalk.bold.red("ctf4ai")+chalk.gray(' — trick the AI into saying "koala"')),console.log(),void po.prompt();if(/^ICOA-[A-Z]{2,3}-\d{1,6}$/i.test(n.trim())){uo=!0;try{await e.parseAsync(["node","icoa","exam","token",n.trim()])}catch{}return uo=!1,void po.prompt()}if(/^[A-Z]{2}[0-9A-HJKMNP-TV-Z]{8}$/i.test(n.trim())){uo=!0;try{await e.parseAsync(["node","icoa","exam","token",n.trim().toUpperCase()])}catch{}return uo=!1,void po.prompt()}const a=n.match(/^exam\s+([A-Z]{2}[0-9A-HJKMNP-TV-Z]{8})$/i);if(a){uo=!0;try{await e.parseAsync(["node","icoa","exam","token",a[1].toUpperCase()])}catch{}return uo=!1,void po.prompt()}const y=n.match(/^exam\s+([A-Z]{2,3})$/i);if(y){uo=!0;try{await e.parseAsync(["node","icoa","exam","list",y[1]])}catch{}return uo=!1,void po.prompt()}if("clear"===n||"cls"===n)return console.clear(),void po.prompt();if(n.startsWith("activate ")){const o=n.slice(9).trim(),e=r(o);return"ok"===e?console.log(chalk.green("  Access granted! Token bound to this device.")):"already_bound"===e?(console.log(),console.log(chalk.red("  Token already activated on a different device.")),console.log(chalk.gray("  Each token binds to the first device that uses it. If you lost the device,")),console.log(chalk.gray("  contact your proctor to have the token re-issued for a new device."))):(console.log(),console.log(chalk.red("  Token not recognized.")),console.log(chalk.gray("  Possible reasons:")),console.log(chalk.white("    • ")+chalk.gray("Typo — access tokens are case-insensitive and look like ")+chalk.cyan("ICOA-XXXX-XXXX-XXXX")+chalk.gray(" (4-char hex groups, e.g. ICOA-385E-27F2-B21B)")),console.log(chalk.white("    • ")+chalk.gray("Expired — ask your proctor or organizer for a fresh token")),console.log(chalk.white("    • ")+chalk.gray("Network — verify connection to ")+chalk.cyan("practice.icoa2026.au")),console.log(chalk.gray("  Still stuck? type ")+chalk.cyan("help")+chalk.gray(" or try ")+chalk.cyan("exam demo")+chalk.gray(" for a free practice round."))),console.log(),void po.prompt()}if("activate"===n)return console.log(chalk.gray("  Usage: ")+chalk.white("activate <token>")),console.log(),void po.prompt();const m=D();if(m){const o=n.toUpperCase().trim(),l=o=>{const e=m.questions.find(e=>e.number===o);return!!e&&("ai4ctf"===e.type||"ctf4ai"===e.type||e.options&&!e.options.A&&!e.options.B)},t=o=>{const e=m.questions.find(e=>e.number===o);return"short_answer"===e?.type},a=o=>{const e="demo-free"!==m.session.examId,l=e&&o>=39?"ctf4ai":e&&o>=31?"ai4ctf":null;console.log(),console.log(chalk.yellow(`  Q${o} is a practical question — letters (A/B/C/D) don't apply here.`)),l?(console.log(chalk.white("  Enter the AI chat for this question:  ")+chalk.bold.cyan(l)),console.log(chalk.gray("  Or submit a flag directly: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`))):console.log(chalk.gray("  Submit a flag: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`)),console.log()};if(/^[ABCDE]$/.test(o)){const n=m._lastQ||1;if(l(n))return a(n),void po.prompt();if(t(n))return console.log(),console.log(chalk.yellow(`  Q${n} is a short-answer question — type a number, not a letter.`)),console.log(chalk.gray("  Example: ")+chalk.green("42")+chalk.gray("  (or ")+chalk.green(`exam answer ${n} 42`)+chalk.gray(")")),console.log(),void po.prompt();uo=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(n),o])}catch{}return uo=!1,void po.prompt()}if(/^-?\d+$/.test(o)){const l=m._lastQ||1;if(t(l)){uo=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(l),o])}catch{}return uo=!1,void po.prompt()}}const s=o.match(/^(\d+)\s+([ABCDE]|-?\d+)$/);if(s){const o=parseInt(s[1],10);if(l(o))return a(o),void po.prompt();uo=!0;try{await e.parseAsync(["node","icoa","exam","answer",s[1],s[2]])}catch{}return uo=!1,void po.prompt()}}const d=n.split(/\s+/)[0].toLowerCase(),p=/^python3?(\.\d+)?$/.test(d),h="ls"===d||"pwd"===d,w=n.startsWith("!")||d.startsWith("!")||p||h,f=new Set(["nano","vi","vim","emacs","pico","ed","code","cat","less","more","head","tail","ls","pwd","cd","base64","xxd","hexdump","od","openssl","md5sum","sha256sum","grep","find","awk","sed","strings","file","curl","wget","nc","ping","nmap","echo","bash","sh","zsh","pip","pip3","node","npm"]),k=()=>{console.log(chalk.gray("  Shell commands need ")+chalk.bold.cyan("!")+chalk.gray(" prefix. Try: ")+chalk.bold.cyan(`!${n}`)),console.log()};if("embodied"===mo&&!w&&!["demo2","learn","exam","ctf4eai","ctf4vla","lang","ref","setup","env","aienv","ipynb","sim"].includes(d))return f.has(d)?(k(),void po.prompt()):(console.log(chalk.gray("  Not available in Embodied AI Security mode.")),console.log(chalk.white("  Try ")+chalk.bold.cyan("demo2")+chalk.gray(" (intro) · ")+chalk.bold.cyan("learn")+chalk.gray(" (curriculum) · ")+chalk.bold.cyan("exam <PD-token>")+chalk.gray(" (Paper D)")),console.log(),void po.prompt());if("selection"===mo&&!w&&!["exam","demo","demo2","retry","nations","next","prev","continue","setup","lang","ref","ai4ctf","ctf4ai","mark","unmark","review","submit","env","aienv","ipynb","sim"].includes(d)){if(f.has(d))return k(),void po.prompt();if(console.log(chalk.gray("  Not available in Selection mode.")),m){const o=m._lastQ||1;console.log(chalk.white(`  Resume exam: exam q ${o}`)+chalk.gray("  ·  ")+chalk.white("A/B/C/D")+chalk.gray(" to answer"))}else console.log(chalk.gray("  Try: demo  ·  setup to switch mode"));return console.log(),void po.prompt()}if("organizer"===mo&&!["join","exam","demo","retry","next","prev","logout","setup","lang","ref","ctf","mark","unmark","review","submit"].includes(d))return console.log(chalk.gray("  Not available in Organizer mode. Switch via: setup")),console.log(),void po.prompt();if(!("olympiad"!==mo||s()&&c()||i(d)))return console.log(chalk.yellow("  Restricted mode. ")+chalk.gray("Enter your access token:")),console.log(chalk.white("    activate <token>")),console.log(),console.log(chalk.gray("  Free commands: ")+chalk.white("ref [topic]")+chalk.gray(", ")+chalk.white("help")+chalk.gray(", ")+chalk.white("exit")),console.log(),void po.prompt();if(!["join","activate","challenges","ch","open","submit","flag","scoreboard","sb","status","time","ref","shell","files","view","connect","note","notes","logbook","log","man","manual","lang","setup","env","aienv","ipynb","ai4ctf","model","ctf","exam","demo","retry","nations","next","prev","continue","logout","ctf4ai","mark","unmark","review","submit","learn","demo2","ctf4eai","ctf4vla","theme","sim"].includes(d)){if(K.has(d))return console.log(chalk.yellow(`  "${d}" is a shell command — the ICOA prompt isn't a shell.`)),console.log(chalk.gray("  In real-exam mode, prefix with ! to run inside the sandbox: ")+chalk.cyan(`!${n}`)),console.log(),void po.prompt();if(/(?:^|\s)(?:\/(?!home\/|Users\/|tmp\/)|\.\.\/|~\/)/.test(n)&&!n.startsWith("cd ")){const o=/(?:^|\s)\/(?!home\/\w+\/icoa-workspace|Users\/\w+\/icoa-workspace|tmp\/)/.test(n),e=/\.\./.test(n);if(o||e)return console.log(chalk.red("  Blocked: access outside workspace is not allowed.")),console.log(chalk.gray(`  Workspace: ${H}`)),console.log(),void po.prompt()}let o=n.startsWith("!")?n.slice(1).trim():n;if("darwin"===process.platform){const e="/opt/homebrew/opt/python@3.12/bin/python3.12";o=o.replace(/^python3?\s/,`${e} `).replace(/^(python3|python)$/,e)}else if("win32"===process.platform){const e=(()=>{try{return l("py -3 --version",{stdio:["ignore","ignore","ignore"],timeout:1500}),"py -3"}catch{}return"python"})();o=o.replace(/^python3?(\.\d+)?\s/,`${e} `).replace(/^python3?(\.\d+)?$/,e)}else{const e=(()=>{try{return l("which python3.12",{stdio:"ignore"}),"python3.12"}catch{return"python3"}})();o=o.replace(/^python\s/,`${e} `).replace(/^python$/,e)}const e=B(),t=F(n);M({cwd:e,input:n,riskFlags:t}),t.length>0&&L()&&(console.log(chalk.yellow(`  ⚠ Action flagged: ${t.join(", ")} — logged.`)),console.log()),/^(\S*python3?(\.\d+)?)\s*$/.test(o)&&(o=`PYTHONSTARTUP="${function(){const o=z(G(),".icoa");W(o)||X(o,{recursive:!0});const e=z(o,"python-startup.py");return W(e)||Y(e,"# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP\nimport base64, struct, hashlib, re, json, os, sys, binascii\ntry: import requests\nexcept ImportError: pass\ntry: from Crypto.Cipher import AES\nexcept ImportError: pass\ntry: from Crypto.Util.Padding import pad, unpad\nexcept ImportError: pass\ntry: from pwn import xor, p32, u32, p64, u64\nexcept ImportError: pass\ntry: import bs4\nexcept ImportError: pass\ntry: import numpy as np\nexcept ImportError: pass\n"),e}()}" ${o}`,console.log(),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(chalk.bold.white("  Python ready — ICOA exam toolkit pre-loaded")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(),console.log(chalk.white("  Already imported: ")+chalk.gray("base64, struct, hashlib, re, json, binascii")),console.log(chalk.white("  Also available:   ")+chalk.gray("requests, bs4, numpy, AES, pad/unpad, xor, p32/u32/p64/u64")),console.log(),console.log(chalk.yellow("  Quick examples:")),console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ')+chalk.gray("# decode base64")),console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ')+chalk.gray("# hex → bytes")),console.log(chalk.gray('    "ICOA{x}".encode()                 ')+chalk.gray("# str → bytes")),console.log(chalk.gray("    [chr(c) for c in [73,67,79,65]]    ")+chalk.gray("# ASCII codes")),console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ')+chalk.gray("# pwntools XOR")),console.log(),console.log(chalk.gray("  Exit:  ")+chalk.white("exit()")+chalk.gray("  or Ctrl-D")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log()),uo=!0;try{P()&&await q()?await N(o,po):await lo(o,po,e)}catch{console.log(chalk.yellow(`  Command failed: ${d}`))}return uo=!1,console.log(),void po.prompt()}uo=!0;const T=n.trim(),E=T.toLowerCase();let S,$=null,O="";if(m)if("submit"===E)$="final";else if(E.startsWith("submit ")){let o=T.slice(7).trim();/^submit\s+/i.test(o)&&(o=o.replace(/^submit\s+/i,"").trim()),o=o.replace(/^["'`]+|["'`]+$/g,"").trim(),o&&/^ICOA\{[^}]*\}?$/i.test(o)&&($="flag",O=o)}else/^ICOA\{[^}]+\}$/i.test(T)&&($="flag",O=T);S="final"===$?["exam","submit"]:"flag"===$?["exam","answer",String(m?._lastQ||1),O]:function(o){const e=o.split(/\s+/),l=e[0].toLowerCase(),n=e.slice(1),t={demo:["exam","demo"],retry:["exam","demo-retry"],nations:["exam","nations"],next:["exam","next"],prev:["exam","prev"],mark:["exam","mark",...n],unmark:["exam","unmark",...n],review:["exam","review"],logout:["ctf","logout"],join:["ctf","join",...n],activate:["ctf","activate",...n],challenges:["ctf","challenges"],ch:["ctf","challenges"],open:["ctf","open",...n],submit:["ctf","submit",...n],flag:["ctf","submit",...n],scoreboard:["ctf","scoreboard",...n],sb:["ctf","scoreboard",...n],status:["ctf","status"],time:["ctf","time"]};return t[l]?t[l]:["ref","shell","files","view","connect","note","notes","logbook","log","man","manual","lang","setup","env","aienv","ipynb","ai4ctf","model","ctf","exam","ctf4ai"].includes(l)?[l,...n]:e}(n);const R="ctf"===S[0]&&"join"===S[1];R&&po.pause(),process.exit=()=>{throw new Error(Z)};try{await e.parseAsync(["node","icoa",...S])}catch(o){const e=o instanceof Error?o.message:String(o);if(e===Z);else if(e.includes("commander.unknownCommand")){const{distance:o}=await import("fastest-levenshtein"),e=["ctf","ref","shell","files","view","connect","note","notes","logbook","log","manual","lang","setup","env","aienv","ipynb","ai4ctf","exam","ctf4ai","theme","clear","cls","quit","exit","back","menu","help","continue","activate","demo","challenges","status","scoreboard","join","logout"],l=d.split(/\s+/)[0]||d;let n={word:"",dist:1/0};for(const t of e){const e=o(l.toLowerCase(),t);e<n.dist&&(n={word:t,dist:e})}console.log(chalk.yellow(`  Unknown command: ${d}.`)),n.dist>0&&n.dist<=2&&console.log(chalk.gray("  Did you mean: ")+chalk.bold.cyan(n.word)+chalk.gray("?")),console.log(chalk.gray("  Type ")+chalk.cyan("help")+chalk.gray(" for the full command list."))}else e.includes("commander.")||(e.includes("fetch failed")||e.includes("ECONNREFUSED")||e.includes("ETIMEDOUT"))&&console.log(chalk.yellow("  Network error. Check your connection."))}finally{process.exit=ao,uo=!1,R&&po.resume()}b()?po.setPrompt(chalk.magenta("icoa ai4ctf> ")):v()?po.setPrompt(chalk.red("icoa ctf4ai> ")):A()&&po.setPrompt(chalk.bold.cyan("icoa ctf4eai> ")),console.log(),po.prompt()}),po.on("SIGINT",()=>{if(console.log(),b()||v())console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still in the AI chat.")),console.log(chalk.white("  Type ")+chalk.bold.cyan("exit")+chalk.white(" to leave the chat and return to the menu."));else if(D()){const o="demo-free"!==D().session.examId;console.log(chalk.yellow("  Ctrl+C did NOT close ICOA CLI.")),console.log(chalk.gray(`  Your ${o?"exam":"demo"} is paused and every answer is auto-saved.`)),console.log(),console.log(chalk.white("  Resume: ")+chalk.cyan("exam q 1")+chalk.gray("  ·  Back to menu: ")+chalk.cyan("back")+chalk.gray("  ·  Close CLI: ")+chalk.cyan(o?"quit confirm":"quit"))}else console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still at the ")+chalk.cyan("icoa>")+chalk.yellow(" prompt.")),console.log(chalk.gray("  Keep typing — ")+chalk.cyan("help")+chalk.gray(" lists commands. (Only ")+chalk.cyan("quit")+chalk.gray(" or Ctrl+D actually close the CLI.)"));console.log(),po.prompt()}),po.on("close",()=>{U(),g(),j(),ao(0)})}function lo(o,l,n){return new Promise(t=>{const a=process.stdin,s=!!a.isTTY&&!!a.isRaw;if(l.pause(),a.isTTY&&"function"==typeof a.setRawMode)try{a.setRawMode(!1)}catch{}const r=e(o,{shell:!0,stdio:"inherit",cwd:n||process.cwd()}),i=()=>{if(a.isTTY&&"function"==typeof a.setRawMode&&s)try{a.setRawMode(!0)}catch{}l.resume(),t()};r.on("close",i),r.on("error",i)})}function no(o,e="olympiad"){return console.log(),"selection"===e||"organizer"===e?(console.log(chalk.bold.white("  Exam")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to exam server")),console.log(chalk.white("    exam list           ")+chalk.gray("Available exams")),console.log(chalk.white("    exam start <id>     ")+chalk.gray("Begin an exam")),console.log(chalk.white("    exam q [n]          ")+chalk.gray("View questions")),console.log(chalk.white("    exam answer <n> <X> ")+chalk.gray("Answer question")),console.log(chalk.white("    exam review         ")+chalk.gray("Review all answers")),console.log(chalk.white("    exam submit         ")+chalk.gray("Submit for grading")),console.log(chalk.white("    exam result         ")+chalk.gray("View your score")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    setup               ")+chalk.gray("Settings / switch mode")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),void console.log()):o?(console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(chalk.bold.white("  How it works")),console.log(),console.log(chalk.gray("  1. Browse ")+chalk.white("challenges")+chalk.gray(" and pick one")),console.log(chalk.gray("  2. ")+chalk.white("open <id>")+chalk.gray(" to read the challenge")),console.log(chalk.gray("  3. Use ")+chalk.white("ai4ctf")+chalk.gray(" to chat with AI when stuck")),console.log(chalk.gray("  4. ")+chalk.white("submit <id> icoa{flag}")+chalk.gray(" to score points")),console.log(chalk.gray("  5. Check ")+chalk.white("scoreboard")+chalk.gray(" to track your rank")),console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(),console.log(chalk.bold.white("  Competition")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to CTFd")),console.log(chalk.white("    challenges (ch)     ")+chalk.gray("List challenges by category")),console.log(chalk.white("    open <id>           ")+chalk.gray("Read challenge + get next steps")),console.log(chalk.white("    submit <id> <flag>  ")+chalk.gray("Submit a flag")),console.log(chalk.white("    scoreboard (sb)     ")+chalk.gray("Live rankings")),console.log(chalk.white("    status              ")+chalk.gray("Your score, budget & timer")),console.log(chalk.white("    time                ")+chalk.gray("Countdown timer")),console.log(),console.log(chalk.bold.white("  AI Teammate")+chalk.gray(" — 3 levels, use wisely")),console.log(chalk.white('    hint "question"     ')+chalk.gray("Level A — General guidance (50 uses)")),console.log(chalk.white('    hint-b "question"   ')+chalk.gray("Level B — Deep analysis (10 uses)")),console.log(chalk.white('    hint-c "question"   ')+chalk.gray("Level C — Critical assist (2 uses)")),console.log(chalk.white("    hint budget         ")+chalk.gray("Check remaining uses")),console.log(chalk.white("    ai4ctf              ")+chalk.gray("Free-chat with AI (no limit)")),console.log(),console.log(chalk.bold.white("  Tools")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference (linux, web, crypto...)")),console.log(chalk.white("    shell               ")+chalk.gray("Docker sandbox")),console.log(chalk.white("    files <id>          ")+chalk.gray("Download challenge files")),console.log(chalk.white("    connect <id>        ")+chalk.gray("Connect to remote target")),console.log(chalk.white("    note [text]         ")+chalk.gray("Add a logbook entry (in-exam: tags current Q)")),console.log(chalk.white("    logbook [n]         ")+chalk.gray("View your logbook (in-exam: filter by Q)")),console.log(chalk.white("    log                 ")+chalk.gray("Session history")),console.log(chalk.white("    man / manual        ")+chalk.gray("Show this command list (works in exam too, does not burn elimination)")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    setup               ")+chalk.gray("Configure settings")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language (15 supported)")),console.log(chalk.white("    logout              ")+chalk.gray("Disconnect")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit (session saved)")),void console.log()):(console.log(chalk.bold.yellow("  Restricted Mode — activate with a token to unlock all commands")),console.log(),console.log(chalk.white("    activate <token>    ")+chalk.gray("Unlock full access")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),void console.log())}

package/dist/types/index.d.ts

@@ -158,6 +158,7 @@ export interface ExamSession {
     passingScore?: number;
     country: string;
     token?: string;
+    sessionNonce?: string;
     clockOffsetMs?: number;
     deadlineServerMs?: number;
     workspaceDir?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.270",
+  "version": "2.19.271",
   "description": "ICOA CLI — The world's first CLI-native cyber & AI security olympiad terminal: AI4CTF (Day 1), CTF4AI (Day 2), VLA4CTF (Pioneer Round — embodied AI)",
   "type": "module",
   "bin": {