icoa-cli 2.19.349 → 2.19.350

package/dist/repl.js

@@ -1,2251 +1 @@
-import { createInterface } from 'node:readline';
-import { spawn, execSync as execSyncFn } from 'node:child_process';
-import chalk from 'chalk';
-import { isConnected, getConfig, saveConfig } from './lib/config.js';
-import { ensureLangCache } from './lib/translations-fetcher.js';
-import { loadUiPack } from './lib/i18n.js';
-import { isActivated, activateToken, isFreeCommand, isDeviceMatch, recordExit, recordResume, isFirstRunOrUpgrade, markVersionSeen, } from './lib/access.js';
-import { setReplMode } from './lib/ui.js';
-import { returnToMainMenu, printMenuHint, menuHintInline } from './lib/menu-nav.js';
-import { setMainRl } from './lib/main-rl.js';
-import { shellSplit } from './lib/shell-split.js';
-import { isChatActive, handleChatMessage } from './commands/ai4ctf.js';
-import { renderToolMan } from './lib/tool-man.js';
-import { isCtf4aiActive, handleCtf4aiMessage } from './commands/ctf4ai-demo.js';
-import { isCtf4VlaActive, handleCtf4VlaMessage } from './commands/ctf4vla.js';
-import { isDemo2Active } from './commands/demo2.js';
-import { loadDemo2Progress } from './lib/demo2-progress.js';
-import { hasAnySimHistory, lastArmAt, lastBundledAt, lastSimAt } from './lib/sim-cooldown.js';
-import { getExamState, getRealExamState, getDemoState, practicalChatCommand } from './lib/exam-state.js';
-import { resetTerminalTheme } from './lib/theme.js';
-import { ensureSandbox, runInSandbox, isDockerAvailable } from './lib/sandbox.js';
-import { checkShellRisk, logShellAudit, getActiveCwd } from './lib/exam-sandbox.js';
-import { logCommand } from './lib/logger.js';
-import { startLogSync, stopLogSync } from './lib/log-sync.js';
-import { startBroadcastPoll, stopBroadcastPoll, showBroadcast, isCompetitionJoined, isMelCompetition, isLeaderAccount, isLeaderSession, fetchPublicScoreboard, isCommsActive, } from './lib/comms.js';
-import { enterMemoScreen, enterJuryScreen } from './commands/comms.js';
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-// Pre-import commonly-used CTF modules on interactive Python startup.
-// Failures are silent — selectors import only what's available so a partial
-// exam setup doesn't crash the shell. Creates ~/.icoa/python-startup.py once.
-const PYTHON_STARTUP_CONTENT = `# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP
-import base64, struct, hashlib, re, json, os, sys, binascii
-try: import requests
-except ImportError: pass
-try: from Crypto.Cipher import AES
-except ImportError: pass
-try: from Crypto.Util.Padding import pad, unpad
-except ImportError: pass
-try: from pwn import xor, p32, u32, p64, u64
-except ImportError: pass
-try: import bs4
-except ImportError: pass
-try: import numpy as np
-except ImportError: pass
-try: from PIL import Image
-except ImportError: pass
-`;
-function ensurePythonStartup() {
-    const icoaDir = join(homedir(), '.icoa');
-    if (!existsSync(icoaDir))
-        mkdirSync(icoaDir, { recursive: true });
-    const path = join(icoaDir, 'python-startup.py');
-    // Rewrite whenever the bundled content has changed. The old "write once"
-    // guard left a stale ~/.icoa/python-startup.py on every machine that had
-    // ever booted the REPL, so toolkit additions (e.g. PIL) never reached
-    // returning users until they manually deleted the file.
-    let current = '';
-    if (existsSync(path)) {
-        try {
-            current = readFileSync(path, 'utf-8');
-        }
-        catch {
-            /* unreadable — fall through to rewrite */
-        }
-    }
-    if (current !== PYTHON_STARTUP_CONTENT) {
-        writeFileSync(path, PYTHON_STARTUP_CONTENT);
-    }
-    return path;
-}
-function printPythonBanner() {
-    console.log();
-    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
-    console.log(chalk.bold.white('  Python ready — ICOA exam toolkit pre-loaded'));
-    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
-    console.log();
-    console.log(chalk.white('  Already imported: ') + chalk.gray('base64, struct, hashlib, re, json, binascii'));
-    console.log(chalk.white('  Also available:   ') +
-        chalk.gray('requests, bs4, numpy, PIL.Image, AES, pad/unpad, xor, p32/u32/p64/u64'));
-    console.log();
-    console.log(chalk.yellow('  Quick examples:'));
-    console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ') + chalk.gray('# decode base64'));
-    console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ') + chalk.gray('# hex → bytes'));
-    console.log(chalk.gray('    "ICOA{x}".encode()                 ') + chalk.gray('# str → bytes'));
-    console.log(chalk.gray('    [chr(c) for c in [73,67,79,65]]    ') + chalk.gray('# ASCII codes'));
-    console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ') + chalk.gray('# pwntools XOR'));
-    console.log();
-    console.log(chalk.gray('  Exit:  ') + chalk.white('exit()') + chalk.gray('  or Ctrl-D'));
-    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
-    console.log();
-}
-// Compute the REPL prompt based on current state.
-// Real exam wins over demo (matches getExamState() priority). Chat modes have
-// their own prompts and are handled separately.
-// A demo is "active" only if it was started DURING THIS PROCESS. A leftover
-// demo-state.json from a prior run (user ran demo, quit, relaunched into
-// National Selection) must NOT make the prompt claim "icoa demo>" when the user
-// isn't in a demo. The earlier 30-min wall-clock window failed exactly this
-// case — quit→relaunch within 30 min still showed demo. Process-start time is
-// the right boundary: a fresh launch is a new process, so any demo started
-// before it belongs to a past session. File is NOT deleted (so `exam q 1` could
-// still resume) — we only stop the prompt from lying.
-const PROCESS_START_MS = Date.now();
-function isActiveDemo() {
-    const d = getDemoState();
-    if (!d || d.session?.examId !== 'demo-free')
-        return false;
-    const started = new Date(d.session.startedAt || 0).getTime();
-    return started >= PROCESS_START_MS;
-}
-function computePrompt() {
-    // Hierarchical prompt rule (CLAUDE.md "Hierarchical Prompt"):
-    //   level 1: "icoa> "  — at the root REPL
-    //   level 2: "icoa <subcmd>> "  — inside any sub-mode
-    // User always sees they're inside icoa AND which mode. They type just
-    // commands (e.g. `quit`), never "icoa quit".
-    // mel competition takes priority: a user joined to the live mel box should
-    // always see `icoa 2026>`, even if a stale real-exam state lingers from before.
-    // ("2026" not "mel" — competitors don't know the internal Melbourne-box name.)
-    if (isMelCompetition())
-        return chalk.yellow('icoa 2026> ');
-    if (getRealExamState())
-        return chalk.cyan('icoa exam> ');
-    if (isActiveDemo())
-        return chalk.yellow('icoa demo> ');
-    return chalk.green('icoa> ');
-}
-// Competition workspace — all system commands restricted here
-const WORKSPACE = join(homedir(), 'icoa-workspace');
-function ensureWorkspace() {
-    if (!existsSync(WORKSPACE))
-        mkdirSync(WORKSPACE, { recursive: true });
-    return WORKSPACE;
-}
-// Hint list — NOT a security boundary.
-//
-// This list catches the common "oh I meant to do this in a real shell" cases
-// and produces a friendly message instead of letting them through to a shell
-// that doesn't exist (the REPL is not a shell — there's no `!` prefix here).
-// It is trivially bypassed (`\sudo whoami`, `bash -c sudo`, etc.) and was
-// never intended as a sandbox. The actual contestant sandbox is the docker
-// container reached via `!cmd` in real-exam mode. Anything that runs on the
-// contestant's host (including REPL-typed text that escapes to the user's
-// own shell via system or backticks) is contestant-trusted code, not a
-// security perimeter. See docs/exam-system.md for the threat model.
-const REPL_NOT_A_SHELL_HINTS = new Set([
-    'sudo',
-    'su',
-    'doas',
-    'pkexec',
-    'brew',
-    'apt',
-    'apt-get',
-    'yum',
-    'choco',
-    'npm',
-    'npx',
-    'pip',
-    'pip3',
-    'shutdown',
-    'reboot',
-    'halt',
-    'mkfs',
-    'fdisk',
-    'dd',
-    'iptables',
-    'ufw',
-]);
-// Kept under the old name for any older import paths.
-const BLOCKED_COMMANDS = REPL_NOT_A_SHELL_HINTS;
-const INTERCEPT = '__REPL_NO_EXIT__';
-const VERSION = '2.5.1';
-function printSelectionMenu() {
-    console.log();
-    console.log(`   ${chalk.cyan.bold('🎯  ICOA 2026  ·  National Selection')}`);
-    console.log();
-    console.log('   ' +
-        chalk.bold.cyan('learn ') +
-        chalk.white('ACxxxxxxxx') +
-        chalk.gray('     → ai4ctf-12    (AI as your CTF teammate)'));
-    console.log('   ' +
-        chalk.bold.cyan('learn ') +
-        chalk.white('CAxxxxxxxx') +
-        chalk.gray('     → ctf4ai-12    (red-team software AI)'));
-    console.log('   ' +
-        chalk.bold.cyan('learn ') +
-        chalk.white('EAxxxxxxxx') +
-        chalk.gray('     → ctf4eai-12   (red-team embodied AI)'));
-    console.log('   ' +
-        chalk.bold.cyan('exam  ') +
-        chalk.white('<CC>xxxxxxxx') +
-        chalk.gray('   → Paper A/B/C/D/E  (country exam token)'));
-    console.log('   ' + chalk.bold.cyan('demo') + chalk.gray('               → free practice'));
-    console.log('   ' + chalk.bold.cyan('lang') + chalk.white(' es') + chalk.gray('            → switch language'));
-    console.log('   ' + chalk.gray('help · menu · quit'));
-    console.log();
-}
-// Embodied AI Security landing — Pioneer Round (CTF4EAI) intro with
-// adaptive path guidance based on prior sim/demo2 progress. Extracted from
-// the legacy `mode === 'embodied'` block (Phase 2) so it can be reused by
-// the new 🧠 Learn → EA-track picker as well as the legacy embodied mode.
-function printEmbodiedLanding() {
-    console.log(chalk.cyan.bold('   [🤖  ctf4eai — Embodied AI Security]'));
-    console.log();
-    console.log(chalk.bold.cyan('   CTF4EAI') + chalk.gray(" — ICOA 2026's ") + chalk.bold.white('Pioneer Round'));
-    console.log(chalk.gray('   an independent parallel track alongside the scored main events: ') +
-        chalk.green('AI4CTF') +
-        chalk.gray(' (Day 1) and ') +
-        chalk.red('CTF4AI') +
-        chalk.gray(' (Day 2)'));
-    console.log();
-    console.log(chalk.white('   Embodied AI is at its ImageNet moment.'));
-    console.log(chalk.gray('   VLA models, MuJoCo physics, real robot arms.'));
-    console.log(chalk.gray('   Real models, real physics, real attack surfaces.'));
-    console.log();
-    console.log(chalk.gray('   ─────────────────────────────────────────────'));
-    const _seenBundled = lastBundledAt() > 0 || lastSimAt() > 0;
-    const _seenArm = lastArmAt() > 0;
-    const _anySim = hasAnySimHistory();
-    const _progress = loadDemo2Progress();
-    const _demo2Done = _progress !== null && typeof _progress.completedAt === 'number' && _progress.nextCardIndex >= _progress.totalCards;
-    const _demo2Partial = _progress !== null && !_demo2Done;
-    if (_demo2Done) {
-        console.log(chalk.bold.yellow('   Continue:  ') +
-            chalk.bold.cyan('④ learn LEARNDEMO01') +
-            chalk.gray('   (demo2 ✓  ·  sim') +
-            (_seenArm ? chalk.gray(' ✓  ·  sim arm ✓)') : chalk.gray(')')));
-    }
-    else if (_demo2Partial) {
-        const at = `${_progress.nextCardIndex} / ${_progress.totalCards}`;
-        console.log(chalk.bold.yellow('   Continue:  ') +
-            chalk.bold.cyan('③ demo2') +
-            chalk.gray('  (last left at card ') +
-            chalk.bold.yellow(at) +
-            chalk.gray(')'));
-    }
-    else if (_seenBundled && _seenArm) {
-        console.log(chalk.bold.yellow('   Next up:   ') +
-            chalk.bold.cyan('③ demo2') +
-            chalk.gray('   →   ') +
-            chalk.bold.cyan('④ learn LEARNDEMO01') +
-            chalk.gray('   (sim ✓  ·  sim arm ✓)'));
-    }
-    else if (_anySim) {
-        console.log(chalk.bold.yellow('   Next up:   ') +
-            (_seenArm
-                ? chalk.bold.cyan('① sim') + chalk.gray('  →  ') + chalk.bold.cyan('③ demo2')
-                : chalk.bold.cyan('② sim arm') + chalk.gray('  →  ') + chalk.bold.cyan('③ demo2')) +
-            chalk.gray('   →   ') +
-            chalk.bold.cyan('④ learn LEARNDEMO01'));
-    }
-    else {
-        console.log(chalk.bold.yellow('   First time? Try in order:  ') +
-            chalk.bold.cyan('① sim') +
-            chalk.gray('  →  ') +
-            chalk.bold.cyan('② sim arm') +
-            chalk.gray('  →  ') +
-            chalk.bold.cyan('③ demo2') +
-            chalk.gray('  →  ') +
-            chalk.bold.cyan('④ learn LEARNDEMO01'));
-    }
-    console.log(chalk.gray('   ─────────────────────────────────────────────'));
-    console.log(chalk.bold.green('     sim') +
-        chalk.gray('                     ') +
-        chalk.bold.cyan('①') +
-        chalk.gray(' ') +
-        chalk.bold.yellow('★ INSTANT') +
-        chalk.gray(' — 9-robot group dance, no wait, no setup'));
-    console.log(chalk.bold.green('     sim arm') +
-        chalk.gray('                 ') +
-        chalk.bold.cyan('②') +
-        chalk.gray(' interactive 6-DOF arm sandbox — type joint values, watch'));
-    console.log(chalk.bold.green('     demo2') +
-        chalk.gray('                   ') +
-        chalk.bold.cyan('③') +
-        chalk.gray(' ~8 min interactive intro + live MuJoCo sim'));
-    console.log(chalk.bold.green('     learn LEARNDEMO01') +
-        chalk.gray('       ') +
-        chalk.bold.cyan('④') +
-        chalk.gray(' free 11-card intro (paste this command as-is)'));
-    console.log(chalk.bold.green('     learn ') +
-        chalk.bold.yellow('EA') +
-        chalk.gray(' + 8 chars      full 96 / 360 curriculum (team-issued)'));
-    console.log(chalk.bold.green('     exam ') +
-        chalk.bold.yellow('PDxxxxxxxx') +
-        chalk.gray('         Paper D (CTF4EAI) — national selection contestants'));
-    console.log(chalk.gray('   ─────────────────────────────────────────────'));
-    console.log();
-    console.log(chalk.gray('   Three open tiers: ') +
-        chalk.green('free 11') +
-        chalk.gray(' · ') +
-        chalk.yellow('registered 100') +
-        chalk.gray(' · ') +
-        chalk.bold.magenta('national team 480') +
-        chalk.gray(' (PhD-ready)'));
-    console.log(chalk.gray('   Country team contact: ') + chalk.cyan('australia@icoa2026.au'));
-    console.log();
-    printMenuHint();
-    console.log();
-}
-export async function startRepl(program, resumeMode) {
-    // Mark this process as the interactive REPL so child commands (sim, demo2,
-    // learn etc.) can suppress the `icoa` prefix in their "try next" hints —
-    // typing `icoa sim` inside the icoa> prompt is wrong; bare `sim` is right.
-    process.env.ICOA_INSIDE_REPL = '1';
-    // mel daily-expiry — wipe a stale (previous Sydney calendar day) session
-    // BEFORE the banner/`connected` are computed, so the banner shows "join"
-    // instead of "Welcome back / Not you?". The user-facing notice is deferred
-    // to after rl setup (melDailyExpired). Rationale: one match per day
-    // (~10:00–17:00 Sydney); yesterday's sign-in must not carry into today's.
-    let melDailyExpired = false;
-    if (isMelCompetition()) {
-        const j = getConfig().joinedAt;
-        const sydneyDay = (d) => new Intl.DateTimeFormat('en-CA', {
-            timeZone: 'Australia/Sydney',
-            year: 'numeric',
-            month: '2-digit',
-            day: '2-digit',
-        }).format(d);
-        if (!j || sydneyDay(new Date(j)) !== sydneyDay(new Date())) {
-            saveConfig({
-                ctfdUrl: '',
-                token: '',
-                sessionCookie: '',
-                userId: null,
-                userName: '',
-                teamId: null,
-                country: '',
-                joinedAt: '',
-            });
-            melDailyExpired = true;
-        }
-    }
-    const config = getConfig();
-    const connected = isConnected();
-    const realExit = process.exit.bind(process);
-    const activated = isActivated();
-    // Lazy-load the active language's UI pack. Non-EN UI strings moved out of the
-    // npm bundle (i18n.ts → server <lang>.tar.gz/ui.json). ensureLangCache refetches
-    // the pack when it lacks ui.json — e.g. after upgrading from a version that
-    // bundled the strings — then loadUiPack applies it. Offline / missing pack →
-    // t() falls back to English. EN users: no-op, never blocks boot.
-    if (config.language && config.language !== 'en') {
-        await ensureLangCache(config.language, { silent: true });
-        loadUiPack(config.language);
-    }
-    // Auto-cleanup: clear demo state once per version upgrade.
-    // Demo is free practice with no time pressure, no scoring, no real loss
-    // for users. Old versions may have left demo state in incompatible formats
-    // (pre-v2.19.45 shared state, pre-v2.19.67 timestamp confusion, etc.).
-    // Real exam state is NEVER auto-cleared — it may contain in-progress answers.
-    if (config.demoCleanedForVersion !== VERSION) {
-        try {
-            const { existsSync, unlinkSync } = await import('node:fs');
-            const { join } = await import('node:path');
-            const { getIcoaDir } = await import('./lib/config.js');
-            const demoFile = join(getIcoaDir(), 'demo-state.json');
-            if (existsSync(demoFile))
-                unlinkSync(demoFile);
-        }
-        catch { }
-        saveConfig({ demoCleanedForVersion: VERSION });
-    }
-    // ─── Mode selection (every launch) ───
-    const { select: selectMode, confirm: confirmMode } = await import('@inquirer/prompts');
-    // Defensive: returning users on an older release may have saved 'tokenentry'
-    // (removed in Phase 1 pyramid) or 'embodied' (folded into 🧠 Learn in Phase 2).
-    // Map both to 'selection' so the inquirer default lands on a valid choice.
-    const rawSavedMode = config.mode || '';
-    const savedMode = rawSavedMode === ''
-        ? // Genuine first-time user (no saved mode) → default to ⚡ Instant, the
-            // top of the viral pyramid / zero-token front door. A newcomer who just
-            // hits Enter must NOT land on 🎯 National Selection (needs an exam token
-            // they don't have). Returning users keep their last mode below.
-            'instant'
-        : ['instant', 'learn', 'selection', 'olympiad'].includes(rawSavedMode)
-            ? rawSavedMode
-            : // Legacy saved modes ('tokenentry'/'embodied', removed in the pyramid
-                // redesign) map to a safe valid choice.
-                'selection';
-    // ⚡🧠🎯🏆 viral pyramid — top-down Hero's Journey:
-    //   spark → train → aim → win
-    // Each tier reads in 5ms across any language/script. Emoji-led so
-    // screenshots travel without translation. Country counts intentionally
-    // suppressed (BD copy, not student-facing). See Panda 2 conversation
-    // 2026-05-28 for the K-factor rationale.
-    const modeChoices = [
-        {
-            name: `  ${chalk.bold('⚡  Try ICOA in 30 seconds')}     ${chalk.gray('—')}  ${chalk.gray('watch · no token needed')}`,
-            value: 'instant',
-        },
-        {
-            name: `  ${chalk.bold('🧠  Learn')}                       ${chalk.gray('—')}  ${chalk.gray('AC / CA / EA token · skill up')}`,
-            value: 'learn',
-        },
-        {
-            name: `  ${chalk.bold('🎯  National Selection')}          ${chalk.gray('—')}  ${chalk.gray('country exam token · aim for finals')}`,
-            value: 'selection',
-        },
-        {
-            name: `  ${chalk.bold('🏆  International Olympiad')}      ${chalk.gray('—')}  ${chalk.gray('finals stage · Sydney 2026 · full sandbox')}`,
-            value: 'olympiad',
-        },
-        {
-            name: `  ${chalk.gray('ℹ️   About ICOA')}                  ${chalk.gray('·')}  ${chalk.gray('what this is · how to join')}`,
-            value: 'about',
-        },
-    ];
-    // Inquirer's `select` adds its own "(Use arrow keys)" indicator next to
-    // the prompt, so we don't repeat that here. Just remind users about the
-    // global escape: typing `menu` from anywhere returns to this screen.
-    console.log(chalk.gray('   Type ') + chalk.bold.cyan('menu') + chalk.gray(' from anywhere to return here.'));
-    console.log();
-    let mode = '';
-    while (!mode) {
-        let selected;
-        try {
-            selected = await selectMode({
-                message: 'Mode',
-                choices: modeChoices,
-                default: savedMode || 'instant',
-            });
-        }
-        catch (err) {
-            // Ctrl+C / Ctrl+D / EOF at the boot menu throws inquirer's
-            // ExitPromptError. The sub-pickers all catch this; the top-level
-            // selector used to let it bubble to the global unhandledRejection
-            // handler, which printed a raw red "Error: User force closed the
-            // prompt with 0 null" and exited 1. Exit cleanly instead.
-            if (err instanceof Error && err.name === 'ExitPromptError') {
-                console.log();
-                console.log(chalk.gray('   Goodbye.'));
-                process.exit(0);
-            }
-            throw err;
-        }
-        if (selected === 'about') {
-            console.clear();
-            console.log();
-            console.log(chalk.cyan('  ═══════════════════════════════════════════════════'));
-            console.log(chalk.bold.yellow('   ICOA') + chalk.white(' — AI-Native CLI OS for Cyber & AI Security'));
-            console.log(chalk.gray('   Olympiad & Competition  ·  K-12 to University'));
-            console.log(chalk.cyan('  ───────────────────────────────────────────────────'));
-            console.log();
-            console.log(chalk.bold.white('   What Makes ICOA Different'));
-            console.log(chalk.gray('   · AI-native     AI teammate, AI adversary, AI translation'));
-            console.log(chalk.gray('   · CLI OS        Complete competition environment in terminal'));
-            console.log(chalk.gray('   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured'));
-            console.log(chalk.gray('   · Global scale  15,000+ concurrent exams · 15 languages'));
-            console.log();
-            console.log(chalk.bold.white('   Competition Format (2-day standard + 1-day Pioneer)'));
-            console.log(`   ${chalk.green.bold('AI4CTF')}${chalk.gray('  [Day 1]  AI as teammate — speed track, dynamic decay + top-3 bonus')}`);
-            console.log(`   ${chalk.red.bold('CTF4AI')}${chalk.gray('  [Day 2]  AI as target — knowledge track, static value per challenge')}`);
-            console.log(`   ${chalk.cyan.bold('CTF4EAI')}${chalk.gray(' [Pioneer / Practical Round] Embodied AI — VLA + world models + sim-to-real')}`);
-            console.log();
-            console.log(chalk.bold.white('   Scoring (in brief)'));
-            console.log(chalk.gray('   · Standard medals: AI4CTF + CTF4AI combined · 1/12 Gold · 2/12 Silver · 3/12 Bronze'));
-            console.log(chalk.gray('   · HMA: top 50% on either day, total below bronze cutoff'));
-            console.log(chalk.gray('   · CTF4EAI: separate 15-finalist pool, G/S/B + 12 Finalist Awards'));
-            console.log();
-            console.log(chalk.white('   Sydney, Australia') + chalk.gray('  ·  Jun 27 - Jul 2, 2026'));
-            console.log();
-            console.log(chalk.bold.white('   Organized by') + chalk.gray('  ASRA (Australia) · ICO Foundation Inc'));
-            console.log(chalk.bold.white('   Contact     ') + chalk.cyan(' australia@icoa2026.au  ·  accreditation@icoa2026.au'));
-            console.log(chalk.bold.white('   Website     ') + chalk.cyan.underline(' https://icoa2026.au'));
-            console.log(chalk.cyan('  ═══════════════════════════════════════════════════'));
-            console.log();
-            console.log(chalk.gray('   Press ') + chalk.yellow('Enter') + chalk.gray(' to return...'));
-            await new Promise((resolve) => {
-                const onKey = (_chunk) => {
-                    process.stdin.removeListener('data', onKey);
-                    if (process.stdin.isTTY && process.stdin.setRawMode) {
-                        process.stdin.setRawMode(false);
-                    }
-                    process.stdin.pause();
-                    resolve();
-                };
-                if (process.stdin.isTTY && process.stdin.setRawMode) {
-                    process.stdin.setRawMode(true);
-                }
-                process.stdin.resume();
-                process.stdin.once('data', onKey);
-            });
-            console.clear();
-            // Loop back to mode selection
-            continue;
-        }
-        mode = selected;
-    }
-    if (mode === 'olympiad' && savedMode !== 'olympiad') {
-        console.log();
-        console.log(chalk.yellow('   This mode will download ~500MB of CTF tools and AI models.'));
-        let proceed = true;
-        try {
-            proceed = await confirmMode({ message: 'Continue?', default: true });
-        }
-        catch (err) {
-            // Ctrl+C / Ctrl+D at the confirm — treat as "no" and drop to Selection
-            // rather than crashing with a raw ExitPromptError.
-            if (err instanceof Error && err.name === 'ExitPromptError') {
-                proceed = false;
-            }
-            else {
-                throw err;
-            }
-        }
-        if (!proceed) {
-            mode = 'selection';
-            console.log(chalk.gray('   Switched to National Selection mode.'));
-        }
-    }
-    if (mode !== savedMode)
-        saveConfig({ mode });
-    console.log();
-    // First run or upgrade: prompt to install env (olympiad only)
-    if (mode === 'olympiad' && isFirstRunOrUpgrade(VERSION)) {
-        markVersionSeen(VERSION);
-        console.log(chalk.gray('   Checking competition environment...'));
-        // Quick check: count missing Python libs
-        const { execSync } = await import('node:child_process');
-        const checks = [
-            { name: 'pwntools', cmd: 'python3 -c "import pwn"' },
-            { name: 'z3-solver', cmd: 'python3 -c "import z3"' },
-            { name: 'numpy', cmd: 'python3 -c "import numpy"' },
-            { name: 'requests', cmd: 'python3 -c "import requests"' },
-        ];
-        let missing = 0;
-        for (const c of checks) {
-            try {
-                execSync(c.cmd, { stdio: 'ignore' });
-            }
-            catch {
-                missing++;
-            }
-        }
-        if (missing > 0) {
-            // Manual-only: NEVER auto-run setup on boot. A default-yes confirm here
-            // (re-fired on every version bump, which is frequent) meant returning
-            // olympiad users would launch `env setup` just by pressing Enter at
-            // startup — "it installs without me asking". Show a passive nudge instead;
-            // the user must explicitly type `env setup` to install.
-            console.log(chalk.yellow(`   ${missing} core competition libraries missing.`));
-            console.log(chalk.gray('   Run ') + chalk.white('env setup') + chalk.gray(' when you are ready to install them.'));
-            console.log();
-        }
-        else {
-            console.log(chalk.green('   All core libraries ready.'));
-            console.log();
-        }
-    }
-    // Handle resume
-    if (resumeMode) {
-        const info = recordResume();
-        if (info) {
-            const mins = Math.floor(info.awaySeconds / 60);
-            const secs = info.awaySeconds % 60;
-            console.log(chalk.yellow(`   Session resumed. Away: ${mins}m ${secs}s | Total exits: ${info.exitCount}`));
-            console.log();
-        }
-    }
-    // ─── Mode-specific welcome ───
-    if (mode === 'selection') {
-        // Exam-hall atmospheric subline — shown only on first entry into Selection
-        // mode (not on every return from sub-flows, which would noise up the REPL).
-        console.log(chalk.gray('   ─── exam hall · 90 min per paper once started · no pause ───'));
-        console.log();
-        printSelectionMenu();
-    }
-    else if (mode === 'embodied') {
-        printEmbodiedLanding();
-    }
-    else if (mode === 'instant') {
-        // ⚡ Try ICOA in 30 seconds — viral front door, zero token required.
-        //
-        // Design (2026-06-04, user directive): NO nested arrow-key picker. The
-        // only ↑↓ menu in the whole CLI is the top-level mode selector; every
-        // deeper choice is a TYPED command at the `icoa>` prompt (the bash/venv
-        // precedent — you type `ls`, not arrow-select it). The old inquirer
-        // sub-picker here was both a UX inconsistency and, when it dispatched the
-        // non-self-contained `exam demo`, the source of the "进入 demo 闪退到 menu"
-        // bounce (see git history / BUG-008 class).
-        //
-        // So ⚡ now prints clear guidance and drops STRAIGHT into the REPL (mode
-        // 'selection', which already permits `demo`/`demo2`/`menu`). `demo` and
-        // `demo2` run IN-PROCESS and return to `icoa>` — no respawn, no process
-        // stacking. `menu` returns to the top selector (clean relaunch via the
-        // index.ts supervisor). Falling through (no early return) lands us in the
-        // rl loop at ~line 879.
-        console.log(chalk.cyan.bold('   [⚡  Try ICOA in 30 seconds — no token needed]'));
-        console.log();
-        console.log(chalk.gray('   Two free tastes — just type the word and press Enter:'));
-        console.log();
-        console.log(chalk.bold.green('     demo ') +
-            chalk.gray('   Paper A/B/C taste — 10 MCQs, no timer    ') +
-            chalk.bold.cyan('🎯 selection-style'));
-        console.log(chalk.bold.green('     demo2') +
-            chalk.gray('   Embodied-AI mini-demo — robots & MuJoCo  ') +
-            chalk.bold.yellow('🤖 hands-on'));
-        console.log();
-        console.log(chalk.gray('   Type ') +
-            chalk.bold.cyan('demo') +
-            chalk.gray(' or ') +
-            chalk.bold.cyan('demo2') +
-            chalk.gray(' to start  ·  ') +
-            chalk.bold.cyan('menu') +
-            chalk.gray(' to go back  ·  ') +
-            chalk.bold.cyan('quit') +
-            chalk.gray(' to exit'));
-        console.log();
-        // Land in the REPL using Selection mode's command set (demo/demo2/menu are
-        // all permitted below). saveConfig keeps the user's next default at
-        // 'selection' so a returning user doesn't loop back into ⚡ forever.
-        saveConfig({ mode: 'selection' });
-        mode = 'selection';
-        // fall through to the rl loop — NO returnToMainMenu()/return.
-    }
-    else if (mode === 'learn') {
-        // 🧠 Learn — flat token-input entry. No arrow-key track picker; the 3
-        // free 12-card demo codes are advertised inline, and any learn token
-        // (AC/CA/EA/EI/IO/IA + 8 chars, or future hidden curricula) is accepted
-        // via the same input field. The `learn` command itself routes by prefix.
-        console.log(chalk.cyan.bold('   [🧠  Learn]'));
-        console.log();
-        console.log(chalk.gray('   Three tracks · same difficulty curve.'));
-        console.log();
-        console.log(chalk.white('   Free 12-card demos — paste the full command:'));
-        console.log();
-        console.log(chalk.gray('     🤝  ai4ctf    AI as your teammate         ') + chalk.bold.yellow('learn AI4CTFDEMO01'));
-        console.log(chalk.gray('     🔓  ctf4ai    AI as your target           ') + chalk.bold.yellow('learn CTF4AIDEMO01'));
-        console.log(chalk.gray('     🤖  ctf4eai   Embodied AI Security        ') + chalk.bold.yellow('learn LEARNDEMO01'));
-        console.log();
-        console.log(chalk.gray('   Got a cohort token? Type ') +
-            chalk.bold.yellow('learn <TOKEN>') +
-            chalk.gray('   (e.g. ') +
-            chalk.bold.yellow('learn EAABCD1234') +
-            chalk.gray(').'));
-        console.log();
-        // Single inquirer call (no loop) — keeps stdin handling simple and
-        // avoids BUG-008 dual-readline cascades when re-prompting inside the
-        // boot-time menu where the main REPL may already be listening.
-        // Fuzzy resolver still handles "3" / "ctf4eai" / "learn LEARNDEMO01" /
-        // case variants. On unrecognised input, fall back to main menu — user
-        // can re-enter Learn and try again (one extra menu hop, no chaos).
-        try {
-            const { input: inputPrompt } = await import('@inquirer/prompts');
-            const { resolveLearnInput } = await import('./lib/learn-input.js');
-            console.log(chalk.gray('   Enter a token (or just press Enter to go back).'));
-            console.log();
-            // Hierarchical-prompt rule (CLAUDE.md): every prompt starts with `icoa`.
-            // Strip inquirer's `?`/`✔` prefix so this reads exactly like the in-learn
-            // REPL prompt `icoa learn> ` (same pattern as exam.ts token entry).
-            const raw = await inputPrompt({
-                message: chalk.bold.cyan('icoa learn>'),
-                theme: { prefix: '', style: { message: (t) => t } },
-            });
-            const res = resolveLearnInput(raw);
-            if (res.kind === 'token') {
-                console.log();
-                console.log(chalk.gray('   Opening ') + chalk.bold.cyan('learn') + chalk.gray(`: ${res.token}`));
-                console.log();
-                saveConfig({ mode: 'selection' });
-                // Tell learn it is embedded so it hands control back (resolves) on exit
-                // instead of process.exit — the returnToMainMenu() below is the single
-                // respawn. Cleared before that respawn so the child doesn't inherit it.
-                process.env.ICOA_LEARN_EMBEDDED = '1';
-                try {
-                    await program.parseAsync(['node', 'icoa', 'learn', res.token]);
-                }
-                finally {
-                    delete process.env.ICOA_LEARN_EMBEDDED;
-                }
-            }
-            else if (res.kind === 'ambiguous' || res.kind === 'unknown') {
-                console.log();
-                console.log(chalk.yellow('   ' + res.hint));
-                console.log(chalk.gray('   Returning to main menu — pick 🧠 Learn again to retry.'));
-                console.log();
-            }
-            // res.kind === 'back' → silent fall-through to main menu
-        }
-        catch {
-            // user cancelled — fall through to main menu return
-        }
-        // UX principle: 2nd-level path completes → return to MAIN menu,
-        // never cross-over into another tier's REPL.
-        saveConfig({ mode: 'selection' });
-        returnToMainMenu();
-        return;
-    }
-    else if (mode === 'organizer') {
-        console.log(chalk.yellow.bold('   [National/Regional Partner]'));
-        console.log();
-        console.log(chalk.bold.white('   ██╗ ██████╗ ██████╗  █████╗'));
-        console.log(chalk.bold.white('   ██║██╔════╝██╔═══██╗██╔══██╗'));
-        console.log(chalk.bold.white('   ██║██║     ██║   ██║███████║'));
-        console.log(chalk.bold.white('   ██║██║     ██║   ██║██╔══██║'));
-        console.log(chalk.bold.white('   ██║╚██████╗╚██████╔╝██║  ██║'));
-        console.log(chalk.bold.white('   ╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝'));
-        console.log();
-        console.log(chalk.yellow('   International Cyber Olympiad in AI 2026'));
-        console.log(chalk.bold.magenta("   The World's First AI-Native CLI Operating System"));
-        console.log(chalk.bold.magenta('   for Cybersecurity & AI Security Competition'));
-        console.log(chalk.bold.magenta('   and Olympiad for K-12'));
-        console.log(chalk.gray('   Sydney, Australia · Jun 27 - Jul 2, 2026'));
-        console.log();
-        console.log(chalk.white('   Vision'));
-        console.log(chalk.gray('   Building a global pipeline for youth cyber & AI'));
-        console.log(chalk.gray('   security talent through education and competition.'));
-        console.log();
-        console.log(chalk.white('   Capacity'));
-        console.log(chalk.gray('   15,000+ concurrent online examinations'));
-        console.log(chalk.gray('   National selection, training, and education support'));
-        console.log();
-        console.log(chalk.white('   Olympic Spirit'));
-        console.log(chalk.gray('   Excellence · Friendship · Respect'));
-        console.log();
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-        console.log(chalk.white('   New country accreditation & support:'));
-        console.log(chalk.cyan('     australia@icoa2026.au'));
-        console.log(chalk.cyan('     accreditation@icoa2026.au'));
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-        console.log();
-        if (connected) {
-            console.log(chalk.green(`   Logged in as ${config.userName}`));
-            console.log(chalk.white('     exam list') + chalk.gray('       Manage exams'));
-            console.log(chalk.white('     logout') + chalk.gray('          Disconnect'));
-        }
-        else {
-            console.log(chalk.white('     join <url>') + chalk.gray('      Connect to manage exams'));
-        }
-        console.log();
-        printMenuHint();
-        console.log();
-    }
-    else {
-        // Olympiad mode: full flow with activate/device checks
-        console.log(`   ${chalk.cyan.bold('🏆  ICOA 2026  ·  International Olympiad')}`);
-        console.log();
-        if (activated && !isDeviceMatch()) {
-            console.log(chalk.red('   Token was activated on a different device.'));
-            console.log(chalk.gray('   Contact organizer for assistance.'));
-            console.log();
-        }
-        else if (connected) {
-            console.log(chalk.green.bold(`   Welcome back, ${config.userName}!`));
-            console.log(chalk.gray(`   Connected to ${config.ctfdUrl}`));
-            console.log(chalk.gray('   Not you? Type ') +
-                chalk.cyan('logout') +
-                chalk.gray(' to switch accounts'));
-            console.log();
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.white('   Ready to compete? Start here:'));
-            console.log();
-            console.log(chalk.bold.cyan('     challenges') + chalk.gray('     Browse challenges by category'));
-            console.log(chalk.white('     status') + chalk.gray('         Your score & timer'));
-            console.log(chalk.white('     scoreboard') + chalk.gray('     Live rankings'));
-            console.log(chalk.white('     memo') + chalk.gray('           Report an issue to organizers (one-way)'));
-            console.log();
-            console.log(chalk.gray('   Tool environment:'));
-            console.log(chalk.white('     env') + chalk.gray('            See which of the 110 CTF tools are installed'));
-            console.log(chalk.white('     env setup') + chalk.gray('      Install anything missing (~5 min, one-time)'));
-            console.log(chalk.bold.yellow('   ★ ') +
-                chalk.bold.cyan('man <tool>') +
-                chalk.gray('    How to USE a tool (steghide, nmap…) · ') +
-                chalk.cyan('man tools') +
-                chalk.gray(' = list'));
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.gray('   Tip: ') +
-                chalk.cyan('help') +
-                chalk.gray(' · ') +
-                menuHintInline() +
-                chalk.gray(' · ') +
-                chalk.cyan('Ctrl+C') +
-                chalk.gray(' pauses · ') +
-                chalk.cyan('quit') +
-                chalk.gray(' closes'));
-            console.log();
-        }
-        else if (activated) {
-            ensureWorkspace();
-            console.log(chalk.green.bold('   Welcome, competitor!'));
-            console.log(chalk.gray(`   Workspace: ${WORKSPACE}`));
-            console.log();
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.white('   Get started:'));
-            console.log();
-            console.log(chalk.white('   Step 1  ') + chalk.bold.cyan('join <url>') + chalk.gray('   Connect to competition server'));
-            console.log(chalk.white('   Step 2  ') + chalk.bold.cyan('challenges') + chalk.gray('   Browse & solve challenges'));
-            console.log(chalk.white('   Step 3  ') + chalk.bold.cyan('ai4ctf') + chalk.gray('       Ask AI when stuck'));
-            console.log();
-            console.log(chalk.gray('   Before Step 1 — make sure your tools are ready:'));
-            console.log(chalk.white('     env') + chalk.gray('            See which of the 110 CTF tools are installed'));
-            console.log(chalk.white('     env setup') + chalk.gray('      Install anything missing (~5 min, one-time)'));
-            console.log(chalk.bold.yellow('   ★ ') +
-                chalk.bold.cyan('man <tool>') +
-                chalk.gray('    How to USE a tool (steghide, nmap…) · ') +
-                chalk.cyan('man tools') +
-                chalk.gray(' = list'));
-            console.log();
-            console.log(chalk.gray('   Also: ') + chalk.white('help') + chalk.gray(' all commands'));
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.gray('   Tip: ') +
-                chalk.cyan('Ctrl+C') +
-                chalk.gray(' pauses · ') +
-                menuHintInline() +
-                chalk.gray(' · ') +
-                chalk.cyan('quit') +
-                chalk.gray(' closes CLI'));
-            console.log();
-        }
-        else {
-            console.log(chalk.bold.yellow('   🏆  You reached the finals tier.'));
-            console.log(chalk.gray('   Full sandbox · 110 CTF tools · Sydney 2026 · this is where finalists compete.'));
-            console.log();
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.white('   To begin, activate your competition token:'));
-            console.log();
-            console.log(chalk.bold.cyan('     activate <token>'));
-            console.log();
-            console.log(chalk.gray('   While waiting, explore:'));
-            console.log(chalk.white('     ref linux') + chalk.gray('       Quick reference for Linux'));
-            console.log(chalk.white('     ref web') + chalk.gray('         Quick reference for Web'));
-            console.log(chalk.white('     env') + chalk.gray('             See which of the 110 CTF tools are installed'));
-            console.log(chalk.white('     env setup') + chalk.gray('       Install anything missing (~5 min, one-time)'));
-            console.log(chalk.white('     help') + chalk.gray('            All available commands'));
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.gray('   Tip: ') +
-                chalk.cyan('Ctrl+C') +
-                chalk.gray(' pauses · ') +
-                menuHintInline() +
-                chalk.gray(' · ') +
-                chalk.cyan('quit') +
-                chalk.gray(' closes CLI'));
-            console.log();
-        }
-    }
-    program.exitOverride();
-    program.configureOutput({
-        writeErr: () => { },
-        writeOut: (str) => {
-            console.log(str);
-        },
-    });
-    const rl = createInterface({
-        input: process.stdin,
-        output: process.stdout,
-        prompt: computePrompt(),
-        terminal: true,
-    });
-    // Expose the main REPL's readline to linear-flow commands (demo2, etc.)
-    // so they can pause stdin echo before opening their own readline.
-    // Without this, two readline.Interface instances on the same TTY
-    // double every keystroke ("lang" → "llaanngg").
-    setMainRl(rl);
-    let processing = false;
-    setReplMode(true);
-    startLogSync();
-    // mel daily-expiry notice — the wipe already happened at the top of startRepl
-    // (before the banner). Just show the deferred explanation here.
-    if (melDailyExpired) {
-        console.log();
-        console.log(chalk.yellow('  ⏱  A new competition day has started (Sydney time).'));
-        console.log(chalk.gray('     For fairness, yesterday’s sign-in has been cleared. Type ') +
-            chalk.cyan('join <url>') +
-            chalk.gray(' to sign in with your account.'));
-        console.log();
-    }
-    // mel identity gate — machines are shared across a multi-day on-site event and
-    // students may forget to `logout`. isConnected()/isMelCompetition() trust only
-    // the local config, so the next person on a machine would otherwise compete as
-    // whoever left it signed in (flags scored under the wrong account). Force an
-    // explicit "is this you?" confirmation before the prompt; Enter continues,
-    // `logout` clears the session so the next student signs in fresh. Mel only.
-    // Runs BEFORE the rl.prompt wrap below so rl.question keeps its own `> ` prompt.
-    // (After daily-expiry above; if it wiped the session this is now a no-op.)
-    if (isMelCompetition()) {
-        const who = getConfig().userName || 'this account';
-        console.log();
-        console.log(chalk.yellow('  ⚠  This machine is signed in as ') + chalk.bold.white(who) + chalk.yellow('.'));
-        console.log(chalk.gray('     Press ') +
-            chalk.cyan('Enter') +
-            chalk.gray(` to continue as ${who}, or type `) +
-            chalk.cyan('logout') +
-            chalk.gray(' to switch accounts.'));
-        const answer = await new Promise((resolve) => {
-            rl.question(chalk.white('  > '), (a) => resolve(a.trim()));
-        });
-        if (answer.toLowerCase() === 'logout') {
-            saveConfig({
-                ctfdUrl: '',
-                token: '',
-                sessionCookie: '',
-                userId: null,
-                userName: '',
-                teamId: null,
-                country: '',
-            });
-            console.log();
-            console.log(chalk.green('  ✓ Logged out. ') +
-                chalk.gray('Run ') +
-                chalk.cyan('join <url>') +
-                chalk.gray(' to sign in with your own account.'));
-        }
-        console.log();
-    }
-    if (isCompetitionJoined()) {
-        startBroadcastPoll(() => rl.prompt());
-    }
-    // Wrap rl.prompt() so it always picks up current state (icoa/demo/exam mode).
-    // This keeps the prompt accurate after exam token entry, exam submit, demo finish, etc.
-    // Chat modes (ai4ctf/ctf4ai) set their own prompt via setPrompt and bypass this.
-    const _origPrompt = rl.prompt.bind(rl);
-    rl.prompt = (preserveCursor) => {
-        if (!isChatActive() &&
-            !isCtf4aiActive() &&
-            !isCtf4VlaActive() &&
-            !isDemo2Active() &&
-            !isCommsActive()) {
-            rl.setPrompt(computePrompt());
-        }
-        _origPrompt(preserveCursor);
-    };
-    rl.prompt();
-    rl.on('line', async (line) => {
-        if (processing)
-            return;
-        const input = line.trim();
-        if (!input) {
-            rl.setPrompt(isChatActive() ? chalk.magenta('icoa ai4ctf> ') : computePrompt());
-            rl.prompt();
-            return;
-        }
-        // ─── Global `menu` — always return to boot screen ─────────────────────
-        // Sits ABOVE all sub-REPL routing so it works from inside ai4ctf,
-        // ctf4ai, ctf4vla, exam, demo, anywhere. Real-exam state requires
-        // `menu confirm` to prevent accidental exit; auto-save keeps progress.
-        if (input === 'menu' || input === 'menu confirm') {
-            const realExam = getRealExamState();
-            if (realExam && input !== 'menu confirm') {
-                console.log();
-                console.log(chalk.yellow('  Real exam active. Progress is auto-saved.'));
-                console.log(chalk.gray('  To return to main menu anyway, type ') + chalk.white('menu confirm'));
-                console.log();
-                rl.prompt();
-                return;
-            }
-            returnToMainMenu(rl);
-            return;
-        }
-        // If in AI chat mode, route to chat handler
-        if (isChatActive()) {
-            processing = true;
-            const result = await handleChatMessage(input);
-            processing = false;
-            if (result === 'exit') {
-                rl.setPrompt(computePrompt());
-            }
-            rl.prompt();
-            return;
-        }
-        // If in CTF4AI challenge mode, route to ctf4ai handler
-        if (isCtf4aiActive()) {
-            processing = true;
-            const result = await handleCtf4aiMessage(input);
-            processing = false;
-            if (result === 'exit' || result === 'solved') {
-                rl.setPrompt(computePrompt());
-            }
-            rl.prompt();
-            return;
-        }
-        // If in CTF4EAI mode (Paper D), route to ctf4vla handler
-        if (isCtf4VlaActive()) {
-            processing = true;
-            const result = await handleCtf4VlaMessage(input);
-            processing = false;
-            if (result === 'exit') {
-                rl.setPrompt(computePrompt());
-            }
-            rl.setPrompt(isCtf4VlaActive() ? chalk.bold.cyan('icoa ctf4eai> ') : computePrompt());
-            rl.prompt();
-            return;
-        }
-        // Log ALL commands for audit trail
-        logCommand(input);
-        // `exit` — soft exit: acts like `back` and surfaces the menu. Only
-        // `quit` / `q` actually close the CLI. Rationale: in the demo flow the
-        // user bounces between main prompt and sub-flows (ai4ctf / ctf4ai /
-        // demo exam); typing `exit` at the main prompt to mean "leave the demo"
-        // is a very common mistake and should never nuke the whole session.
-        if (input === 'exit') {
-            if (getExamState()) {
-                console.log();
-                console.log(chalk.yellow('  ⚠ An exam is in progress.'));
-                console.log(chalk.white('  To return to menu without losing progress, type: ') + chalk.bold.cyan('back'));
-                console.log(chalk.white('  To fully close ICOA CLI, type: ') + chalk.bold.cyan('quit'));
-                console.log(chalk.gray('  Your progress is auto-saved either way.'));
-                console.log();
-                rl.prompt();
-                return;
-            }
-            console.log();
-            console.log(chalk.gray('  ') +
-                chalk.white('exit') +
-                chalk.gray(' returns to the main menu. To fully close ICOA CLI, type ') +
-                chalk.bold.cyan('quit') +
-                chalk.gray('.'));
-            if (mode === 'selection') {
-                printSelectionMenu();
-            }
-            rl.prompt();
-            return;
-        }
-        // Explicit quit — `quit` / `q` close the CLI. During a live **real** exam
-        // (token-gated, timed, graded) we require `quit confirm` as a second step
-        // to prevent accidental loss of a 90-minute session to a single keystroke.
-        // Demo has no time pressure and no scoring, so demo quit stays one-step.
-        if (input === 'quit' || input === 'q' || input === 'quit confirm') {
-            const state = getExamState();
-            const isRealExam = state && state.session.examId !== 'demo-free';
-            if (isRealExam && input !== 'quit confirm') {
-                console.log();
-                console.log(chalk.yellow('  ⚠ A real exam is in progress.'));
-                console.log(chalk.gray('    Your answers are auto-saved on the server, but the exam timer keeps ticking'));
-                console.log(chalk.gray('    on the server side even if you close the CLI.'));
-                console.log();
-                console.log(chalk.white('  To leave the CLI but keep the exam alive, type: ') + chalk.bold.cyan('back'));
-                console.log(chalk.gray('    (recommended — you can resume with ') +
-                    chalk.cyan('exam q 1') +
-                    chalk.gray(' after relaunching icoa)'));
-                console.log();
-                console.log(chalk.white('  To really close ICOA CLI, type: ') + chalk.bold.cyan('quit confirm'));
-                console.log();
-                rl.prompt();
-                return;
-            }
-            if (state && state.session.examId === 'demo-free') {
-                console.log();
-                console.log(chalk.gray('  Demo paused. Resume with: ') +
-                    chalk.white('demo') +
-                    chalk.gray(' (fresh) or ') +
-                    chalk.white('exam q 1') +
-                    chalk.gray(' (continue).'));
-            }
-            stopLogSync();
-            stopBroadcastPoll();
-            recordExit();
-            console.log(chalk.gray('  Session saved. Use ') + chalk.white('icoa --resume') + chalk.gray(' to continue.'));
-            resetTerminalTheme();
-            realExit(0);
-            return;
-        }
-        // "back" — return to main menu.
-        //   Real exam:       show "Exam paused", preserve state (server timer is ticking).
-        //   Active demo:     show pause message, keep state so `exam q N` can resume.
-        //   Stale demo:      auto-clear and show menu (demo from a previous session the
-        //                    user long abandoned — hanging state makes the menu lie).
-        //   Nothing:         show selection menu.
-        // A demo is "active" if `startedAt` is within the last 30 minutes. That window
-        // covers an intentional "back to check something and come right back" case but
-        // clears anything left over from a prior session.
-        // `back` — pause exam / return to current-mode menu (intra-mode nav).
-        // For boot-screen escape (cross-mode), see global `menu` handler at top.
-        if (input === 'back') {
-            const state = getExamState();
-            const isRealExam = state && state.session.examId !== 'demo-free';
-            const isActiveDemo = state &&
-                state.session.examId === 'demo-free' &&
-                (() => {
-                    const started = new Date(state.session.startedAt || 0).getTime();
-                    return Date.now() - started < 30 * 60 * 1000;
-                })();
-            if (isRealExam) {
-                console.log();
-                console.log(chalk.gray('  Exam paused. Your progress is saved.'));
-                console.log(chalk.white('  Resume: exam q 1') +
-                    chalk.gray('  ·  ') +
-                    chalk.white('exam review') +
-                    chalk.gray('  ·  ') +
-                    chalk.white('exam submit'));
-                console.log();
-            }
-            else if (isActiveDemo) {
-                const answered = Object.keys(state.answers).length;
-                const total = state.session.questionCount;
-                console.log();
-                console.log(chalk.gray(`  Demo paused (${answered}/${total} answered). Resume with: `) + chalk.white(`exam q 1`));
-                console.log(chalk.gray('  Or type ') + chalk.white('demo') + chalk.gray(' to restart.'));
-                console.log();
-            }
-            else {
-                // Stale demo state from a past session — clear it so the menu reflects
-                // reality. Demo is free-practice, user can always restart.
-                if (state && state.session.examId === 'demo-free') {
-                    const { clearExamState } = await import('./lib/exam-state.js');
-                    clearExamState('demo-free');
-                }
-                const cfg = getConfig();
-                fetch('https://practice.icoa2026.au/api/icoa/demo-stats', {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({
-                        type: 'post-report-back',
-                        lang: cfg.language || 'en',
-                        timestamp: new Date().toISOString(),
-                    }),
-                    signal: AbortSignal.timeout(5000),
-                }).catch(() => { });
-                if (mode === 'selection') {
-                    printSelectionMenu();
-                }
-                else {
-                    console.log(chalk.gray('  Already at main menu.'));
-                }
-            }
-            rl.prompt();
-            return;
-        }
-        // Help — during exam, route to exam help (= elimination lifeline);
-        // otherwise show REPL help. `man` (with `manual` alias) is the unambiguous
-        // "show me the command list" command that works in every state — Unix-
-        // idiomatic, resolves the in-exam ambiguity where typing `help` to see
-        // commands accidentally burns one of the contestant's elimination uses.
-        // `manual` was the original spelling (v2.19.192); `man` adopted as the
-        // primary in v2.19.196 to align with Unix convention.
-        if (input === 'help' || input === '?') {
-            if (getExamState()) {
-                processing = true;
-                try {
-                    await program.parseAsync(['node', 'icoa', 'exam', 'help']);
-                }
-                catch { }
-                processing = false;
-                rl.prompt();
-                return;
-            }
-            printReplHelp(isActivated(), mode);
-            rl.prompt();
-            return;
-        }
-        if (input === 'man' || input === 'manual') {
-            printReplHelp(isActivated(), mode);
-            console.log();
-            console.log(chalk.bold.yellow('  ★ Stuck on a tool? ') +
-                chalk.bold.cyan('man <tool>') +
-                chalk.gray('  e.g. ') +
-                chalk.cyan('man steghide') +
-                chalk.gray('   ·  ') +
-                chalk.cyan('man tools') +
-                chalk.gray(' = full list'));
-            rl.prompt();
-            return;
-        }
-        // `man <tool>` / `man tools` — CTF tool usage cheatsheet (not Python env; that's `env`).
-        if (/^(?:man|manual)\s+\S/i.test(input)) {
-            renderToolMan(input.replace(/^(?:man|manual)\s+/i, ''));
-            rl.prompt();
-            return;
-        }
-        // "more help" — during exam, unlock bonus helps
-        if (input.toLowerCase() === 'more help') {
-            if (getExamState()) {
-                processing = true;
-                try {
-                    await program.parseAsync(['node', 'icoa', 'exam', 'more-help']);
-                }
-                catch { }
-                processing = false;
-                rl.prompt();
-                return;
-            }
-        }
-        // "continue" — after demo, guide to ai4ctf then ctf4ai
-        if (input.toLowerCase() === 'continue') {
-            console.log();
-            console.log(chalk.green.bold('  ═══ AI4CTF — AI as Your Teammate ═══'));
-            console.log();
-            console.log(chalk.white('  In AI4CTF, you solve cybersecurity challenges'));
-            console.log(chalk.white('  with AI by your side.'));
-            console.log();
-            console.log(chalk.white('  In this demo, your AI teammate gives help at 3 levels:'));
-            console.log(chalk.yellow('    hint a') + chalk.gray('    General guidance'));
-            console.log(chalk.yellow('    hint b') + chalk.gray('    Deep analysis'));
-            console.log(chalk.yellow('    hint c') + chalk.gray('    Critical assist'));
-            console.log();
-            console.log(chalk.white('  Try it now! Type: ') + chalk.bold.green('ai4ctf'));
-            console.log(chalk.gray('  Chat freely with your AI teammate. Type "exit" when done.'));
-            console.log();
-            console.log(chalk.gray('  After ai4ctf, try: ') +
-                chalk.bold.red('ctf4ai') +
-                chalk.gray(' — trick the AI into saying "koala"'));
-            console.log();
-            rl.prompt();
-            return;
-        }
-        // ICOA exam token detection: legacy "ICOA-PE-001" or new Crockford "UAHXP7SWMM"
-        if (/^ICOA-[A-Z]{2,3}-\d{1,6}$/i.test(input.trim())) {
-            processing = true;
-            try {
-                await program.parseAsync(['node', 'icoa', 'exam', 'token', input.trim()]);
-            }
-            catch { }
-            processing = false;
-            rl.prompt();
-            return;
-        }
-        // New 10-char Crockford Base32 token (e.g., UAHXP7SWMM) — no hyphen
-        if (/^[A-Z]{2}[0-9A-HJKMNP-TV-Z]{8}$/i.test(input.trim())) {
-            processing = true;
-            try {
-                await program.parseAsync(['node', 'icoa', 'exam', 'token', input.trim().toUpperCase()]);
-            }
-            catch { }
-            processing = false;
-            rl.prompt();
-            return;
-        }
-        // "exam UAHXP7SWMM" — 10-char token after exam prefix
-        const examTokenMatch = input.match(/^exam\s+([A-Z]{2}[0-9A-HJKMNP-TV-Z]{8})$/i);
-        if (examTokenMatch) {
-            processing = true;
-            try {
-                await program.parseAsync(['node', 'icoa', 'exam', 'token', examTokenMatch[1].toUpperCase()]);
-            }
-            catch { }
-            processing = false;
-            rl.prompt();
-            return;
-        }
-        // "exam AU" / "exam PE" — shortcut to exam list <country>
-        const examCountryMatch = input.match(/^exam\s+([A-Z]{2,3})$/i);
-        if (examCountryMatch) {
-            processing = true;
-            try {
-                await program.parseAsync(['node', 'icoa', 'exam', 'list', examCountryMatch[1]]);
-            }
-            catch { }
-            processing = false;
-            rl.prompt();
-            return;
-        }
-        // Clear
-        if (input === 'clear' || input === 'cls') {
-            console.clear();
-            rl.prompt();
-            return;
-        }
-        // ─── Competition comms (mel/join flow) ───
-        // "news" — re-show the current competition broadcast on demand.
-        if (input === 'news') {
-            if (isCompetitionJoined()) {
-                showBroadcast();
-            }
-            else {
-                console.log(chalk.gray('  No competition joined. Use ') + chalk.white('join <url>') + chalk.gray('.'));
-            }
-            rl.prompt();
-            return;
-        }
-        // "memo" — contestant issue-report sub-screen (one-way).
-        if (input === 'memo') {
-            if (!isCompetitionJoined()) {
-                console.log(chalk.gray('  Join a competition first: ') + chalk.white('join <url>'));
-                rl.prompt();
-                return;
-            }
-            processing = true;
-            try {
-                await enterMemoScreen();
-            }
-            catch { }
-            processing = false;
-            return; // enterMemoScreen restores listeners + re-prompts
-        }
-        const _isLeader = isLeaderSession() || isLeaderAccount(getConfig().userName || '');
-        // "jury" — HIDDEN, leader-only. Non-leaders fall through to the normal
-        // unknown-command path (no hint it exists). Server also enforces.
-        if (input === 'jury' && _isLeader) {
-            processing = true;
-            try {
-                await enterJuryScreen();
-            }
-            catch { }
-            processing = false;
-            return; // enterJuryScreen restores listeners + re-prompts
-        }
-        // Leader `scoreboard` reads the PUBLIC scoreboard (a leader-token session has
-        // no CTFd token, so the normal authed `ctf scoreboard` would fail). Render
-        // the same ranking from the public endpoint instead.
-        if (_isLeader && isLeaderSession() && input.split(/\s+/)[0] === 'scoreboard') {
-            processing = true;
-            try {
-                const board = await fetchPublicScoreboard();
-                console.log();
-                if (board.length === 0) {
-                    console.log(chalk.gray('  Scoreboard is empty.'));
-                }
-                else {
-                    console.log(chalk.bold.white('  Scoreboard'));
-                    for (const r of board.slice(0, 50)) {
-                        console.log(chalk.gray(`  ${String(r.pos).padStart(3)}. `) +
-                            chalk.white(r.name.padEnd(28).slice(0, 28)) +
-                            chalk.cyan(String(r.score)));
-                    }
-                }
-                console.log();
-            }
-            catch { }
-            processing = false;
-            rl.prompt();
-            return;
-        }
-        // Team leaders (TMLD) never get the challenge bracket — block the
-        // solve commands with a one-liner instead of building the menu.
-        // scoreboard IS allowed (view-only rankings — handled above for leaders).
-        if (_isLeader && isMelCompetition()) {
-            const head = input.split(/\s+/)[0];
-            if (['challenges', 'open', 'submit', 'hint'].includes(head)) {
-                console.log();
-                console.log(chalk.yellow('  Team-leader account — the challenge bracket is not available here.'));
-                console.log(chalk.gray('  Available: ') +
-                    chalk.white('scoreboard') +
-                    chalk.gray(' · ') +
-                    chalk.white('news') +
-                    chalk.gray(' · ') +
-                    chalk.white('jury') +
-                    chalk.gray(' · ') +
-                    chalk.white('time') +
-                    chalk.gray(' · ') +
-                    chalk.white('status') +
-                    chalk.gray(' · ') +
-                    chalk.white('logout'));
-                console.log();
-                rl.prompt();
-                return;
-            }
-        }
-        // Activate token
-        if (input.startsWith('activate ')) {
-            const token = input.slice(9).trim();
-            const result = activateToken(token);
-            if (result === 'ok') {
-                console.log(chalk.green('  Access granted! Token bound to this device.'));
-            }
-            else if (result === 'already_bound') {
-                console.log();
-                console.log(chalk.red('  Token already activated on a different device.'));
-                console.log(chalk.gray('  Each token binds to the first device that uses it. If you lost the device,'));
-                console.log(chalk.gray('  contact your proctor to have the token re-issued for a new device.'));
-            }
-            else {
-                console.log();
-                console.log(chalk.red('  Token not recognized.'));
-                console.log(chalk.gray('  Possible reasons:'));
-                console.log(chalk.white('    • ') +
-                    chalk.gray('Typo — access tokens are case-insensitive and look like ') +
-                    chalk.cyan('ICOA-XXXX-XXXX-XXXX') +
-                    chalk.gray(' (4-char hex groups, e.g. ICOA-385E-27F2-B21B)'));
-                console.log(chalk.white('    • ') + chalk.gray('Expired — ask your proctor or organizer for a fresh token'));
-                console.log(chalk.white('    • ') + chalk.gray('Network — verify connection to ') + chalk.cyan('practice.icoa2026.au'));
-                console.log(chalk.gray('  Still stuck? type ') +
-                    chalk.cyan('help') +
-                    chalk.gray(' or try ') +
-                    chalk.cyan('exam demo') +
-                    chalk.gray(' for a free practice round.'));
-            }
-            console.log();
-            rl.prompt();
-            return;
-        }
-        if (input === 'activate') {
-            console.log(chalk.gray('  Usage: ') + chalk.white('activate <token>'));
-            console.log();
-            rl.prompt();
-            return;
-        }
-        // ─── Quick exam answer shortcuts ───
-        // "A" / "B" / "C" / "D" → answer current question (MCQ only)
-        // "2 C" / "5 A" → answer specific question (MCQ only)
-        // Practical questions (Q31-40) require flag format (ICOA{...}) — single
-        // letters on those would be silently accepted as the wrong flag answer,
-        // which is a footgun. Block and nudge the user toward the flag syntax.
-        const examState = getExamState();
-        if (examState) {
-            const upper = input.toUpperCase().trim();
-            // Helper: is question N practical (no A/B/C/D options)?
-            const isPracticalQ = (n) => {
-                const q = examState.questions.find((qq) => qq.number === n);
-                if (!q)
-                    return false;
-                return q.type === 'ai4ctf' || q.type === 'ctf4ai' || (q.options && !q.options.A && !q.options.B);
-            };
-            // Helper: is question N a SIMOC Section B short-answer (integer) question?
-            const isShortAnswerQ = (n) => {
-                const q = examState.questions.find((qq) => qq.number === n);
-                return q?.type === 'short_answer';
-            };
-            // Helper: suggest the right chat entry for a practical question.
-            // Derive the chat command from the QUESTION TYPE, never the number.
-            // The practical section is interleaved (standard paper: Q38 ctf4ai,
-            // Q39 ai4ctf, Q40 ctf4ai; Paper E: Q37-46 ai4ctf, Q47-48 ctf4ai), so
-            // the old `n >= 39 ? ctf4ai : n >= 31 ? ai4ctf` range misrouted Q38/Q39
-            // (and all of Paper E's ai4ctf block) to the wrong AI chat — the exact
-            // root cause already fixed in printSectionIntro (exam.ts). vla → ctf4eai.
-            const practicalGuidance = (n) => {
-                const isReal = examState.session.examId !== 'demo-free';
-                const gq = examState.questions.find((qq) => qq.number === n);
-                const cmd = practicalChatCommand(gq?.type, isReal);
-                console.log();
-                console.log(chalk.yellow(`  Q${n} is a practical question — letters (A/B/C/D) don't apply here.`));
-                if (cmd) {
-                    console.log(chalk.white('  Enter the AI chat for this question:  ') + chalk.bold.cyan(cmd));
-                    console.log(chalk.gray('  Or submit a flag directly: ') + chalk.green(`exam answer ${n} ICOA{your_flag}`));
-                }
-                else {
-                    console.log(chalk.gray('  Submit a flag: ') + chalk.green(`exam answer ${n} ICOA{your_flag}`));
-                }
-                console.log();
-            };
-            // Single letter: A–E → answer current question (MCQ only; E is the SIMOC
-            // 5th option "None of the above"). The `exam answer` command validates the
-            // letter against the question's actual options, so a stray E on a 4-option
-            // paper is rejected cleanly there.
-            if (/^[ABCDE]$/.test(upper)) {
-                const currentQ = examState._lastQ || 1;
-                if (isPracticalQ(currentQ)) {
-                    practicalGuidance(currentQ);
-                    rl.prompt();
-                    return;
-                }
-                if (isShortAnswerQ(currentQ)) {
-                    console.log();
-                    console.log(chalk.yellow(`  Q${currentQ} is a short-answer question — type a number, not a letter.`));
-                    console.log(chalk.gray('  Example: ') +
-                        chalk.green('42') +
-                        chalk.gray('  (or ') +
-                        chalk.green(`exam answer ${currentQ} 42`) +
-                        chalk.gray(')'));
-                    console.log();
-                    rl.prompt();
-                    return;
-                }
-                processing = true;
-                try {
-                    await program.parseAsync(['node', 'icoa', 'exam', 'answer', String(currentQ), upper]);
-                }
-                catch { }
-                processing = false;
-                rl.prompt();
-                return;
-            }
-            // Bare integer → answer the current question if it's short-answer (SIMOC
-            // Section B). Mirrors the bare-letter MCQ shortcut. A bare integer on an
-            // MCQ/practical question falls through (it isn't a valid choice there).
-            if (/^-?\d+$/.test(upper)) {
-                const currentQ = examState._lastQ || 1;
-                if (isShortAnswerQ(currentQ)) {
-                    processing = true;
-                    try {
-                        await program.parseAsync(['node', 'icoa', 'exam', 'answer', String(currentQ), upper]);
-                    }
-                    catch { }
-                    processing = false;
-                    rl.prompt();
-                    return;
-                }
-            }
-            // "N X" pattern: answer question N. X is a letter A–E (MCQ) or an integer
-            // (SIMOC short-answer), e.g. "15 A", "2 E", "16 642".
-            const match = upper.match(/^(\d+)\s+([ABCDE]|-?\d+)$/);
-            if (match) {
-                const targetQ = parseInt(match[1], 10);
-                if (isPracticalQ(targetQ)) {
-                    practicalGuidance(targetQ);
-                    rl.prompt();
-                    return;
-                }
-                processing = true;
-                try {
-                    await program.parseAsync(['node', 'icoa', 'exam', 'answer', match[1], match[2]]);
-                }
-                catch { }
-                processing = false;
-                rl.prompt();
-                return;
-            }
-        }
-        const cmd = input.split(/\s+/)[0].toLowerCase();
-        // ─── Mode-based command filtering ───
-        const selectionCommands = [
-            'exam',
-            'demo',
-            'demo2',
-            'retry',
-            'nations',
-            'next',
-            'prev',
-            'continue',
-            'setup',
-            'lang',
-            'ref',
-            'ai4ctf',
-            'ctf4ai',
-            'mark',
-            'unmark',
-            'review',
-            'submit',
-            'env',
-            'aienv',
-            'ipynb',
-            'sim',
-        ];
-        const organizerCommands = [
-            'join',
-            'exam',
-            'demo',
-            'retry',
-            'next',
-            'prev',
-            'logout',
-            'setup',
-            'lang',
-            'ref',
-            'ctf',
-            'mark',
-            'unmark',
-            'review',
-            'submit',
-        ];
-        const embodiedCommands = [
-            'demo2',
-            'learn',
-            'exam',
-            'ctf4eai',
-            'ctf4vla',
-            // The embodied-AI red-team arena — its natural home is this mode. Both
-            // the friendly `eai` command and the underlying `arena eai` form are
-            // allowed so the documented entry points work without a mode switch.
-            'eai',
-            'arena',
-            'lang',
-            'ref',
-            'setup',
-            'env',
-            'aienv',
-            'ipynb',
-            'sim',
-        ];
-        // Selection mode allows shell commands prefixed with ! — contestants
-        // need !python3, !cat, !base64 etc. for practical questions (Q31-Q40).
-        // Also allow bare `python` / `python3` / `python3.12` since contestants
-        // naturally type that when they want interactive Python.
-        // BLOCKED_COMMANDS check downstream still rejects dangerous ones.
-        const isPythonCmd = /^python3?(\.\d+)?$/.test(cmd);
-        // Bare `ls` / `pwd` auto-promote to shell — the two most-typed read-only
-        // display commands shouldn't require the `!` prefix dance. The shell-exec
-        // path that follows already runs them in the active workspace (per-exam
-        // tmpdir during a real exam), so contestants see only what's in scope.
-        const autoShellCmd = cmd === 'ls' || cmd === 'pwd';
-        const isShellCommand = input.startsWith('!') || cmd.startsWith('!') || isPythonCmd || autoShellCmd;
-        // Common shell tools contestants try to run without `!` prefix — when
-        // detected, point them at the right syntax instead of the generic
-        // "Not available in X mode." dead-end.
-        const SHELL_TOOL_HINTS = new Set([
-            'nano',
-            'vi',
-            'vim',
-            'emacs',
-            'pico',
-            'ed',
-            'code',
-            'cat',
-            'less',
-            'more',
-            'head',
-            'tail',
-            'ls',
-            'pwd',
-            'cd',
-            'base64',
-            'xxd',
-            'hexdump',
-            'od',
-            'openssl',
-            'md5sum',
-            'sha256sum',
-            'grep',
-            'find',
-            'awk',
-            'sed',
-            'strings',
-            'file',
-            'curl',
-            'wget',
-            'nc',
-            'ping',
-            'nmap',
-            'echo',
-            'bash',
-            'sh',
-            'zsh',
-            'pip',
-            'pip3',
-            'node',
-            'npm',
-        ]);
-        const shellHint = () => {
-            console.log(chalk.gray('  Shell commands need ') +
-                chalk.bold.cyan('!') +
-                chalk.gray(' prefix. Try: ') +
-                chalk.bold.cyan(`!${input}`));
-            console.log();
-        };
-        if (mode === 'embodied' && !isShellCommand && !embodiedCommands.includes(cmd)) {
-            if (SHELL_TOOL_HINTS.has(cmd)) {
-                shellHint();
-                rl.prompt();
-                return;
-            }
-            console.log(chalk.gray('  Not available in Embodied AI Security mode.'));
-            console.log(chalk.white('  Try ') +
-                chalk.bold.cyan('demo2') +
-                chalk.gray(' (intro) · ') +
-                chalk.bold.cyan('learn') +
-                chalk.gray(' (curriculum) · ') +
-                chalk.bold.cyan('exam <PD-token>') +
-                chalk.gray(' (Paper D)'));
-            console.log();
-            rl.prompt();
-            return;
-        }
-        if (mode === 'selection' && !isShellCommand && !selectionCommands.includes(cmd)) {
-            if (SHELL_TOOL_HINTS.has(cmd)) {
-                shellHint();
-                rl.prompt();
-                return;
-            }
-            console.log(chalk.gray('  Not available in Selection mode.'));
-            if (examState) {
-                const currentQ = examState._lastQ || 1;
-                console.log(chalk.white(`  Resume exam: exam q ${currentQ}`) +
-                    chalk.gray('  ·  ') +
-                    chalk.white('A/B/C/D') +
-                    chalk.gray(' to answer'));
-            }
-            else {
-                console.log(chalk.gray('  Try: demo  ·  setup to switch mode'));
-            }
-            console.log();
-            rl.prompt();
-            return;
-        }
-        if (mode === 'organizer' && !organizerCommands.includes(cmd)) {
-            console.log(chalk.gray('  Not available in Organizer mode. Switch via: setup'));
-            console.log();
-            rl.prompt();
-            return;
-        }
-        // Token check — only in olympiad mode
-        if (mode === 'olympiad' && (!isActivated() || !isDeviceMatch()) && !isFreeCommand(cmd)) {
-            console.log(chalk.yellow('  Restricted mode. ') + chalk.gray('Enter your access token:'));
-            console.log(chalk.white('    activate <token>'));
-            console.log();
-            console.log(chalk.gray('  Free commands: ') +
-                chalk.white('ref [topic]') +
-                chalk.gray(', ') +
-                chalk.white('help') +
-                chalk.gray(', ') +
-                chalk.white('exit'));
-            console.log();
-            rl.prompt();
-            return;
-        }
-        // Check if it's a known ICOA command or a system command
-        const knownCommands = [
-            'join',
-            'activate',
-            'challenges',
-            'ch',
-            'open',
-            'submit',
-            'flag',
-            'scoreboard',
-            'sb',
-            'status',
-            'time',
-            'ref',
-            'shell',
-            'files',
-            'view',
-            'connect',
-            'challenge',
-            'note',
-            'notes',
-            'logbook',
-            'log',
-            'man',
-            'manual',
-            'lang',
-            'setup',
-            'env',
-            'aienv',
-            'ipynb',
-            'ai4ctf',
-            'model',
-            'ctf',
-            'exam',
-            'demo',
-            'retry',
-            'nations',
-            'next',
-            'prev',
-            'continue',
-            'logout',
-            'ctf4ai',
-            'mark',
-            'unmark',
-            'review',
-            'submit',
-            'learn',
-            'demo2',
-            'ctf4eai',
-            'ctf4vla',
-            'theme',
-            'sim',
-            'arena',
-            'eai',
-            'learn-pull',
-        ];
-        if (!knownCommands.includes(cmd)) {
-            // Friendly hint — the REPL isn't a shell, so these have nowhere to run.
-            // This is NOT a sandbox; see REPL_NOT_A_SHELL_HINTS comment above.
-            if (BLOCKED_COMMANDS.has(cmd)) {
-                console.log(chalk.yellow(`  "${cmd}" is a shell command — the ICOA prompt isn't a shell.`));
-                console.log(chalk.gray('  In real-exam mode, prefix with ! to run inside the sandbox: ') + chalk.cyan(`!${input}`));
-                console.log();
-                rl.prompt();
-                return;
-            }
-            // Block path escape attempts
-            if (/(?:^|\s)(?:\/(?!home\/|Users\/|tmp\/)|\.\.\/|~\/)/.test(input) && !input.startsWith('cd ')) {
-                // Allow relative paths within workspace, block absolute paths outside
-                const hasAbsPath = /(?:^|\s)\/(?!home\/\w+\/icoa-workspace|Users\/\w+\/icoa-workspace|tmp\/)/.test(input);
-                const hasParentPath = /\.\./.test(input);
-                if (hasAbsPath || hasParentPath) {
-                    console.log(chalk.red('  Blocked: access outside workspace is not allowed.'));
-                    console.log(chalk.gray(`  Workspace: ${WORKSPACE}`));
-                    console.log();
-                    rl.prompt();
-                    return;
-                }
-            }
-            // Force Python 3.12 — rewrite python/python3 to correct binary
-            // Strip optional ! prefix that contestants use to disambiguate shell
-            // commands from CLI commands (e.g. !python3 vs cli's "python" command).
-            let resolvedInput = input.startsWith('!') ? input.slice(1).trim() : input;
-            if (process.platform === 'darwin') {
-                const py12 = '/opt/homebrew/opt/python@3.12/bin/python3.12';
-                resolvedInput = resolvedInput.replace(/^python3?\s/, `${py12} `).replace(/^(python3|python)$/, py12);
-            }
-            else if (process.platform === 'win32') {
-                // Windows: the binary is `python` (not `python3`). Python Launcher `py -3`
-                // is also common. Rewrite `python3 xyz` → `python xyz` or `py -3 xyz` so
-                // students who followed Unix-oriented practical-question hints don't get
-                // "'python3' is not recognized". Prefer `py -3` if the launcher exists
-                // (handles multi-version installs); fall back to plain `python`.
-                const pyCmd = (() => {
-                    try {
-                        execSyncFn('py -3 --version', { stdio: ['ignore', 'ignore', 'ignore'], timeout: 1500 });
-                        return 'py -3';
-                    }
-                    catch { }
-                    return 'python';
-                })();
-                resolvedInput = resolvedInput.replace(/^python3?(\.\d+)?\s/, `${pyCmd} `).replace(/^python3?(\.\d+)?$/, pyCmd);
-            }
-            else {
-                // Linux/WSL: python → python3 (or python3.12 if available)
-                const py12 = (() => {
-                    try {
-                        execSyncFn('which python3.12', { stdio: 'ignore' });
-                        return 'python3.12';
-                    }
-                    catch {
-                        return 'python3';
-                    }
-                })();
-                resolvedInput = resolvedInput.replace(/^python\s/, `${py12} `).replace(/^python$/, py12);
-            }
-            // Active workspace — per-exam tmpdir during a real exam (L1), otherwise
-            // the legacy ~/icoa-workspace. getActiveCwd() handles the switch.
-            const cwd = getActiveCwd();
-            // L2 — audit shell escapes during real exams. Risk pattern hits print
-            // a warning to the contestant and log to server + local audit file.
-            const riskFlags = checkShellRisk(input);
-            logShellAudit({ cwd, input, riskFlags });
-            if (riskFlags.length > 0 && getRealExamState()) {
-                console.log(chalk.yellow(`  ⚠ Action flagged: ${riskFlags.join(', ')} — logged.`));
-                console.log();
-            }
-            // Interactive Python (no script args, no -c): print welcome banner and
-            // pre-import common CTF modules via a startup file. Makes entry painless
-            // for contestants — they land in a shell with base64/struct/hashlib/pwn
-            // already imported and see a 4-line cheat sheet of common one-liners.
-            const isInteractivePython = /^(\S*python3?(\.\d+)?)\s*$/.test(resolvedInput);
-            if (isInteractivePython) {
-                const startupPath = ensurePythonStartup();
-                resolvedInput = `PYTHONSTARTUP="${startupPath}" ${resolvedInput}`;
-                printPythonBanner();
-            }
-            // Route to Docker sandbox if available, otherwise system shell (in workspace)
-            processing = true;
-            try {
-                if (isDockerAvailable()) {
-                    const ready = await ensureSandbox();
-                    if (ready) {
-                        await runInSandbox(resolvedInput, rl);
-                    }
-                    else {
-                        await runSystemCommand(resolvedInput, rl, cwd);
-                    }
-                }
-                else {
-                    await runSystemCommand(resolvedInput, rl, cwd);
-                }
-            }
-            catch {
-                console.log(chalk.yellow(`  Command failed: ${cmd}`));
-            }
-            processing = false;
-            console.log();
-            rl.prompt();
-            return;
-        }
-        processing = true;
-        // During an exam, `submit` must mean "submit my exam", not "submit a CTF
-        // flag". The `mapCommand` shortcut table always points `submit` at CTF,
-        // which silently fails in Selection mode and leaves users stuck. Route
-        // to exam submit here instead.
-        //
-        // Two distinct cases:
-        //   1. Bare `submit` (no flag)         → exam submit (final-submit the exam)
-        //   2. `submit ICOA{...}` (with flag)  → exam answer <current_q> <flag>
-        //      Q31-Q38 hint text in selection JSON tells students to use
-        //      `submit ICOA{...}` (matches demo muscle memory). Without this
-        //      shortcut they'd type the literal hint and hit silent failure
-        //      (real bug 2026-05-05; reproed by Tina, Ubuntu 22). Mapping it to
-        //      `exam answer` here means the on-screen hint becomes correct
-        //      without rewriting 910 occurrences across 245 country JSON files.
-        const trimmed = input.trim();
-        const lc = trimmed.toLowerCase();
-        let submitInExam = null;
-        let flagArg = '';
-        if (examState) {
-            if (lc === 'submit') {
-                submitInExam = 'final';
-            }
-            else if (lc.startsWith('submit ')) {
-                let rest = trimmed.slice('submit '.length).trim();
-                // Tolerate accidental double-submit / wrapping quotes
-                if (/^submit\s+/i.test(rest))
-                    rest = rest.replace(/^submit\s+/i, '').trim();
-                rest = rest.replace(/^["'`]+|["'`]+$/g, '').trim();
-                if (rest && /^ICOA\{[^}]*\}?$/i.test(rest)) {
-                    submitInExam = 'flag';
-                    flagArg = rest;
-                }
-                else if (rest && /^[ABCDE]$/i.test(rest)) {
-                    // `submit B` on an MCQ — common muscle memory carried over from the
-                    // practical `submit ICOA{...}` flow. Without this, a bare letter
-                    // fell through to mapCommand → `ctf submit B` → silent failure in
-                    // paper mode ("Q11 无法提交"). Route it to `exam answer <currentQ> B`;
-                    // exam answer validates the letter against the question's real
-                    // options (and rejects a stray letter on a practical question).
-                    submitInExam = 'flag';
-                    flagArg = rest.toUpperCase();
-                }
-                // submit followed by anything else (e.g. `submit q1` typo) → fall
-                // through to mapCommand, which produces a clearer error than silent.
-            }
-            else if (/^ICOA\{[^}]+\}$/i.test(trimmed)) {
-                // Bare ICOA{...} paste — same auto-detect as ai4ctf chat.
-                submitInExam = 'flag';
-                flagArg = trimmed;
-            }
-        }
-        let args;
-        if (submitInExam === 'final') {
-            args = ['exam', 'submit'];
-        }
-        else if (submitInExam === 'flag') {
-            const currentQ = examState?._lastQ || 1;
-            args = ['exam', 'answer', String(currentQ), flagArg];
-        }
-        else {
-            args = mapCommand(input);
-        }
-        // Pause REPL readline for commands that read stdin (join)
-        const needsPause = args[0] === 'ctf' && args[1] === 'join';
-        if (needsPause)
-            rl.pause();
-        process.exit = (() => {
-            throw new Error(INTERCEPT);
-        });
-        try {
-            await program.parseAsync(['node', 'icoa', ...args]);
-        }
-        catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            if (msg === INTERCEPT) {
-                // Command tried to exit — continue REPL
-            }
-            else if (msg.includes('commander.unknownCommand')) {
-                // T4-12: typo suggestion via Levenshtein distance. Shorten the
-                // "unknown command" frustration by pointing to the likely-intended
-                // command when the user's input is within 2 edits of a real one.
-                const { distance } = await import('fastest-levenshtein');
-                const KNOWN_CMDS = [
-                    'ctf',
-                    'ref',
-                    'shell',
-                    'files',
-                    'view',
-                    'connect',
-                    'challenge',
-                    'note',
-                    'notes',
-                    'logbook',
-                    'log',
-                    'manual',
-                    'lang',
-                    'setup',
-                    'env',
-                    'aienv',
-                    'ipynb',
-                    'ai4ctf',
-                    'exam',
-                    'ctf4ai',
-                    'theme',
-                    'eai',
-                    'clear',
-                    'cls',
-                    'quit',
-                    'exit',
-                    'back',
-                    'menu',
-                    'help',
-                    'continue',
-                    'activate',
-                    'demo',
-                    'challenges',
-                    'status',
-                    'scoreboard',
-                    'join',
-                    'logout',
-                ];
-                const firstWord = cmd.split(/\s+/)[0] || cmd;
-                let best = { word: '', dist: Infinity };
-                for (const known of KNOWN_CMDS) {
-                    const d = distance(firstWord.toLowerCase(), known);
-                    if (d < best.dist)
-                        best = { word: known, dist: d };
-                }
-                console.log(chalk.yellow(`  Unknown command: ${cmd}.`));
-                if (best.dist > 0 && best.dist <= 2) {
-                    console.log(chalk.gray('  Did you mean: ') + chalk.bold.cyan(best.word) + chalk.gray('?'));
-                }
-                console.log(chalk.gray('  Type ') + chalk.cyan('help') + chalk.gray(' for the full command list.'));
-            }
-            else if (msg.includes('commander.missingArgument') ||
-                err?.code === 'commander.missingArgument') {
-                // Incomplete command. Commander's own stderr is suppressed
-                // (configureOutput writeErr is a no-op), so without this branch the
-                // user sees NOTHING — the classic "submit 44 → 提交后没有反应" where the
-                // flag was left off. Print an actionable usage line instead of silence.
-                if (cmd === 'submit' || cmd === 'flag') {
-                    console.log(chalk.yellow('  Incomplete — usage: ') + chalk.cyan('submit <challenge#> <flag>'));
-                    console.log(chalk.gray('  Put the number AND the flag on one line, e.g. ') + chalk.cyan('submit 44 pecan{...}'));
-                }
-                else {
-                    console.log(chalk.yellow(`  Incomplete command: ${cmd}`));
-                    console.log(chalk.gray('  Type ') + chalk.cyan('help') + chalk.gray(' for usage.'));
-                }
-            }
-            else if (msg.includes('commander.')) {
-                // Internal Commander errors — ignore
-            }
-            else if (msg.includes('fetch failed') || msg.includes('ECONNREFUSED') || msg.includes('ETIMEDOUT')) {
-                console.log(chalk.yellow('  Network error. Check your connection.'));
-            }
-        }
-        finally {
-            process.exit = realExit;
-            processing = false;
-            if (needsPause)
-                rl.resume();
-        }
-        // Switch prompt if entering chat/challenge mode
-        if (isChatActive()) {
-            rl.setPrompt(chalk.magenta('icoa ai4ctf> '));
-        }
-        else if (isCtf4aiActive()) {
-            rl.setPrompt(chalk.red('icoa ctf4ai> '));
-        }
-        else if (isCtf4VlaActive()) {
-            rl.setPrompt(chalk.bold.cyan('icoa ctf4eai> '));
-        }
-        console.log();
-        rl.prompt();
-    });
-    // SIGINT (Ctrl+C) — intercept gracefully so beginners don't lose confidence.
-    // Without this listener, readline's default is to raise SIGINT which our
-    // theme.ts handler converts to process.exit(130). Installing this listener
-    // swallows that path and lets the user get oriented. If they want to exit,
-    // they type `quit` or hit Ctrl+D (sends EOF → 'close' event below).
-    rl.on('SIGINT', () => {
-        console.log();
-        if (isChatActive() || isCtf4aiActive()) {
-            console.log(chalk.yellow('  Ctrl+C did not close ICOA CLI — you are still in the AI chat.'));
-            console.log(chalk.white('  Type ') + chalk.bold.cyan('exit') + chalk.white(' to leave the chat and return to the menu.'));
-        }
-        else if (getExamState()) {
-            const isReal = getExamState().session.examId !== 'demo-free';
-            console.log(chalk.yellow('  Ctrl+C did NOT close ICOA CLI.'));
-            console.log(chalk.gray(`  Your ${isReal ? 'exam' : 'demo'} is paused and every answer is auto-saved.`));
-            console.log();
-            console.log(chalk.white('  Resume: ') +
-                chalk.cyan('exam q 1') +
-                chalk.gray('  ·  Back to menu: ') +
-                chalk.cyan('back') +
-                chalk.gray('  ·  Close CLI: ') +
-                chalk.cyan(isReal ? 'quit confirm' : 'quit'));
-        }
-        else {
-            console.log(chalk.yellow('  Ctrl+C did not close ICOA CLI — you are still at the ') +
-                chalk.cyan('icoa>') +
-                chalk.yellow(' prompt.'));
-            console.log(chalk.gray('  Keep typing — ') +
-                chalk.cyan('help') +
-                chalk.gray(' lists commands. (Only ') +
-                chalk.cyan('quit') +
-                chalk.gray(' or Ctrl+D actually close the CLI.)'));
-        }
-        console.log();
-        rl.prompt();
-    });
-    rl.on('close', () => {
-        stopLogSync();
-        stopBroadcastPoll();
-        recordExit();
-        resetTerminalTheme();
-        realExit(0);
-    });
-}
-function runSystemCommand(input, rl, cwd) {
-    return new Promise((resolve) => {
-        // Fully release the TTY so interactive children (python3, bash, etc.)
-        // get a clean terminal with proper echo. `rl.pause()` alone doesn't
-        // reset raw mode or release stdin — readline keeps it in line-editing
-        // mode where typed characters don't display until our REPL reads a line.
-        const stdin = process.stdin;
-        const wasRaw = stdin.isTTY ? !!stdin.isRaw : false;
-        rl.pause();
-        if (stdin.isTTY && typeof stdin.setRawMode === 'function') {
-            try {
-                stdin.setRawMode(false);
-            }
-            catch { }
-        }
-        const child = spawn(input, {
-            shell: true,
-            stdio: 'inherit',
-            cwd: cwd || process.cwd(),
-        });
-        const restore = () => {
-            if (stdin.isTTY && typeof stdin.setRawMode === 'function' && wasRaw) {
-                try {
-                    stdin.setRawMode(true);
-                }
-                catch { }
-            }
-            rl.resume();
-            resolve();
-        };
-        child.on('close', restore);
-        child.on('error', restore);
-    });
-}
-function mapCommand(input) {
-    const parts = input.split(/\s+/);
-    const cmd = parts[0].toLowerCase();
-    const rest = parts.slice(1);
-    // `aienv run` / `aienv python` forward everything after the subcommand to the
-    // venv python child, so the args must survive shell-style quoting (spaced
-    // paths, -c "expr"). Re-tokenize the raw line quote-aware instead of using the
-    // naive whitespace split above — otherwise the quotes/spaces reach python
-    // mangled. Only these arg-forwarding subcommands need it.
-    if (cmd === 'aienv' && ['run', 'python', 'py'].includes((rest[0] ?? '').toLowerCase())) {
-        return shellSplit(input);
-    }
-    // `submit <id> <flag>` / `flag <id> <flag>` — the flag may contain spaces
-    // (multi-word flags are common, e.g. song-lyric answers like
-    // `pecan{Keep you second guessing}`). The generic `...rest` spread below would
-    // pass each word as a separate operand → commander.excessArguments → the REPL
-    // swallows it silently ("submit … 提交后没有反应"). Re-join everything after the
-    // id into one flag argument, and strip any wrapping quotes the user added.
-    if ((cmd === 'submit' || cmd === 'flag') && rest.length >= 2) {
-        const id = rest[0];
-        const flagText = rest
-            .slice(1)
-            .join(' ')
-            .trim()
-            .replace(/^["'`]+|["'`]+$/g, '');
-        return ['ctf', 'submit', id, flagText];
-    }
-    const ctfShortcuts = {
-        demo: ['exam', 'demo'],
-        retry: ['exam', 'demo-retry'],
-        nations: ['exam', 'nations'],
-        next: ['exam', 'next'],
-        prev: ['exam', 'prev'],
-        mark: ['exam', 'mark', ...rest],
-        unmark: ['exam', 'unmark', ...rest],
-        review: ['exam', 'review'],
-        logout: ['ctf', 'logout'],
-        join: ['ctf', 'join', ...rest],
-        activate: ['ctf', 'activate', ...rest],
-        challenges: ['ctf', 'challenges'],
-        ch: ['ctf', 'challenges'],
-        open: ['ctf', 'open', ...rest],
-        submit: ['ctf', 'submit', ...rest],
-        flag: ['ctf', 'submit', ...rest],
-        scoreboard: ['ctf', 'scoreboard', ...rest],
-        sb: ['ctf', 'scoreboard', ...rest],
-        status: ['ctf', 'status'],
-        time: ['ctf', 'time'],
-    };
-    if (ctfShortcuts[cmd]) {
-        return ctfShortcuts[cmd];
-    }
-    const directCommands = [
-        'ref',
-        'shell',
-        'files',
-        'view',
-        'connect',
-        'challenge',
-        'note',
-        'notes',
-        'logbook',
-        'log',
-        'man',
-        'manual',
-        'lang',
-        'setup',
-        'env',
-        'aienv',
-        'ipynb',
-        'ai4ctf',
-        'model',
-        'ctf',
-        'exam',
-        'ctf4ai',
-    ];
-    if (directCommands.includes(cmd)) {
-        return [cmd, ...rest];
-    }
-    return parts;
-}
-function printReplHelp(activated, mode = 'olympiad') {
-    console.log();
-    // ─── Selection / Organizer: lightweight help ───
-    if (mode === 'selection' || mode === 'organizer') {
-        console.log(chalk.bold.white('  Exam'));
-        console.log(chalk.white('    join <url>          ') + chalk.gray('Connect to exam server'));
-        console.log(chalk.white('    exam list           ') + chalk.gray('Available exams'));
-        console.log(chalk.white('    exam start <id>     ') + chalk.gray('Begin an exam'));
-        console.log(chalk.white('    exam q [n]          ') + chalk.gray('View questions'));
-        console.log(chalk.white('    exam answer <n> <X> ') + chalk.gray('Answer question'));
-        console.log(chalk.white('    exam review         ') + chalk.gray('Review all answers'));
-        console.log(chalk.white('    exam submit         ') + chalk.gray('Submit for grading'));
-        console.log(chalk.white('    exam result         ') + chalk.gray('View your score'));
-        console.log();
-        console.log(chalk.bold.white('  System'));
-        console.log(chalk.white('    ref [topic]         ') + chalk.gray('Quick reference'));
-        console.log(chalk.white('    setup               ') + chalk.gray('Settings / switch mode'));
-        console.log(chalk.white('    lang [code]         ') + chalk.gray('Switch language'));
-        console.log(chalk.white('    clear               ') + chalk.gray('Clear screen'));
-        console.log(chalk.white('    exit                ') + chalk.gray('Quit'));
-        console.log();
-        return;
-    }
-    // ─── Olympiad: full help ───
-    if (!activated) {
-        console.log(chalk.bold.yellow('  Restricted Mode — activate with a token to unlock all commands'));
-        console.log();
-        console.log(chalk.white('    activate <token>    ') + chalk.gray('Unlock full access'));
-        console.log(chalk.white('    ref [topic]         ') + chalk.gray('Quick reference'));
-        console.log(chalk.white('    exit                ') + chalk.gray('Quit'));
-        console.log();
-        return;
-    }
-    // How it works — workflow overview
-    console.log(chalk.cyan('  ═══════════════════════════════════════════════'));
-    console.log(chalk.bold.white('  How it works'));
-    console.log();
-    console.log(chalk.gray('  1. Browse ') + chalk.white('challenges') + chalk.gray(' and pick one'));
-    console.log(chalk.gray('  2. ') + chalk.white('open <id>') + chalk.gray(' to read the challenge'));
-    console.log(chalk.gray('  3. Use ') + chalk.white('ai4ctf') + chalk.gray(' to chat with AI when stuck'));
-    console.log(chalk.gray('  4. ') + chalk.white('submit <id> <flag>') + chalk.gray(' to score points'));
-    console.log(chalk.gray('  5. Check ') + chalk.white('scoreboard') + chalk.gray(' to track your rank'));
-    console.log(chalk.cyan('  ═══════════════════════════════════════════════'));
-    console.log();
-    console.log(chalk.bold.white('  Competition'));
-    console.log(chalk.white('    join <url>          ') + chalk.gray('Connect to CTFd'));
-    console.log(chalk.white('    challenges (ch)     ') + chalk.gray('List challenges by category'));
-    console.log(chalk.white('    open <id>           ') + chalk.gray('Read challenge + get next steps'));
-    console.log(chalk.white('    submit <id> <flag>  ') + chalk.gray('Submit a flag'));
-    console.log(chalk.white('    scoreboard (sb)     ') + chalk.gray('Live rankings'));
-    console.log(chalk.white('    status              ') + chalk.gray('Your score & timer'));
-    console.log(chalk.white('    time                ') + chalk.gray('Countdown timer'));
-    console.log();
-    console.log(chalk.bold.white('  AI Teammate'));
-    console.log(chalk.white('    ai4ctf              ') + chalk.gray('Free-chat with your AI teammate'));
-    console.log();
-    console.log(chalk.bold.white('  Tools'));
-    console.log(chalk.white('    ref [topic]         ') + chalk.gray('Quick reference (linux, web, crypto...)'));
-    console.log(chalk.white('    shell               ') + chalk.gray('Interactive CTF shell (sandbox if present, else host)'));
-    console.log(chalk.white('    files <id>          ') + chalk.gray('Download challenge files'));
-    console.log(chalk.white('    connect <id>        ') + chalk.gray('Connect to remote target'));
-    console.log(chalk.white('    note [text]         ') + chalk.gray('Add a logbook entry (in-exam: tags current Q)'));
-    console.log(chalk.white('    logbook [n]         ') + chalk.gray('View your logbook (in-exam: filter by Q)'));
-    console.log(chalk.white('    log                 ') + chalk.gray('Session history'));
-    console.log(chalk.white('    man <tool>          ') +
-        chalk.bold.yellow('★ ') +
-        chalk.gray('How to use a tool (steghide, nmap…); ') +
-        chalk.cyan('man tools') +
-        chalk.gray(' = list. Bare ') +
-        chalk.cyan('man') +
-        chalk.gray(' = this list.'));
-    console.log();
-    console.log(chalk.bold.white('  System'));
-    console.log(chalk.white('    setup               ') + chalk.gray('Configure settings'));
-    console.log(chalk.white('    lang [code]         ') + chalk.gray('Switch language (15 supported)'));
-    console.log(chalk.white('    logout              ') + chalk.gray('Disconnect'));
-    console.log(chalk.white('    clear               ') + chalk.gray('Clear screen'));
-    console.log(chalk.white('    exit                ') + chalk.gray('Quit (session saved)'));
-    console.log();
-}
+import{createInterface as o}from"node:readline";import{spawn as e,execSync as l}from"node:child_process";import chalk from"chalk";import{isConnected as n,getConfig as t,saveConfig as a}from"./lib/config.js";import{ensureLangCache as s}from"./lib/translations-fetcher.js";import{loadUiPack as r}from"./lib/i18n.js";import{isActivated as i,activateToken as c,isFreeCommand as g,isDeviceMatch as y,recordExit as m,recordResume as d,isFirstRunOrUpgrade as p,markVersionSeen as u}from"./lib/access.js";import{setReplMode as h}from"./lib/ui.js";import{returnToMainMenu as w,printMenuHint as f,menuHintInline as b}from"./lib/menu-nav.js";import{setMainRl as x}from"./lib/main-rl.js";import{shellSplit as v}from"./lib/shell-split.js";import{isChatActive as A,handleChatMessage as C}from"./commands/ai4ctf.js";import{renderToolMan as I}from"./lib/tool-man.js";import{isCtf4aiActive as k,handleCtf4aiMessage as T}from"./commands/ctf4ai-demo.js";import{isCtf4VlaActive as E,handleCtf4VlaMessage as S}from"./commands/ctf4vla.js";import{isDemo2Active as $}from"./commands/demo2.js";import{loadDemo2Progress as O}from"./lib/demo2-progress.js";import{hasAnySimHistory as j,lastArmAt as D,lastBundledAt as L,lastSimAt as N}from"./lib/sim-cooldown.js";import{getExamState as R,getRealExamState as P,getDemoState as F,practicalChatCommand as q}from"./lib/exam-state.js";import{resetTerminalTheme as M}from"./lib/theme.js";import{ensureSandbox as B,runInSandbox as U,isDockerAvailable as _}from"./lib/sandbox.js";import{checkShellRisk as Q,logShellAudit as z,getActiveCwd as W}from"./lib/exam-sandbox.js";import{logCommand as X}from"./lib/logger.js";import{startLogSync as Y,stopLogSync as J}from"./lib/log-sync.js";import{startBroadcastPoll as V,stopBroadcastPoll as G,showBroadcast as H,isCompetitionJoined as Z,isMelCompetition as K,isLeaderAccount as oo,isLeaderSession as eo,fetchPublicScoreboard as lo,isCommsActive as no}from"./lib/comms.js";import{enterMemoScreen as to,enterJuryScreen as ao}from"./commands/comms.js";import{existsSync as so,mkdirSync as ro,readFileSync as io,writeFileSync as co}from"node:fs";import{join as go}from"node:path";import{homedir as yo}from"node:os";const mo="# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP\nimport base64, struct, hashlib, re, json, os, sys, binascii\ntry: import requests\nexcept ImportError: pass\ntry: from Crypto.Cipher import AES\nexcept ImportError: pass\ntry: from Crypto.Util.Padding import pad, unpad\nexcept ImportError: pass\ntry: from pwn import xor, p32, u32, p64, u64\nexcept ImportError: pass\ntry: import bs4\nexcept ImportError: pass\ntry: import numpy as np\nexcept ImportError: pass\ntry: from PIL import Image\nexcept ImportError: pass\n",po=Date.now();function uo(){return K()?chalk.yellow("icoa 2026> "):P()?chalk.cyan("icoa exam> "):function(){const o=F();return!(!o||"demo-free"!==o.session?.examId)&&new Date(o.session.startedAt||0).getTime()>=po}()?chalk.yellow("icoa demo> "):chalk.green("icoa> ")}const ho=go(yo(),"icoa-workspace"),wo=new Set(["sudo","su","doas","pkexec","brew","apt","apt-get","yum","choco","npm","npx","pip","pip3","shutdown","reboot","halt","mkfs","fdisk","dd","iptables","ufw"]),fo="__REPL_NO_EXIT__",bo="2.5.1";function xo(){console.log(),console.log(`   ${chalk.cyan.bold("🎯  ICOA 2026  ·  National Selection")}`),console.log(),console.log("   "+chalk.bold.cyan("learn ")+chalk.white("ACxxxxxxxx")+chalk.gray("     → ai4ctf-12    (AI as your CTF teammate)")),console.log("   "+chalk.bold.cyan("learn ")+chalk.white("CAxxxxxxxx")+chalk.gray("     → ctf4ai-12    (red-team software AI)")),console.log("   "+chalk.bold.cyan("learn ")+chalk.white("EAxxxxxxxx")+chalk.gray("     → ctf4eai-12   (red-team embodied AI)")),console.log("   "+chalk.bold.cyan("exam  ")+chalk.white("<CC>xxxxxxxx")+chalk.gray("   → Paper A/B/C/D/E  (country exam token)")),console.log("   "+chalk.bold.cyan("demo")+chalk.gray("               → free practice")),console.log("   "+chalk.bold.cyan("lang")+chalk.white(" es")+chalk.gray("            → switch language")),console.log("   "+chalk.gray("help · menu · quit")),console.log()}export async function startRepl(e,F){process.env.ICOA_INSIDE_REPL="1";let po=!1;if(K()){const o=t().joinedAt,e=o=>new Intl.DateTimeFormat("en-CA",{timeZone:"Australia/Sydney",year:"numeric",month:"2-digit",day:"2-digit"}).format(o);o&&e(new Date(o))===e(new Date)||(a({ctfdUrl:"",token:"",sessionCookie:"",userId:null,userName:"",teamId:null,country:"",joinedAt:""}),po=!0)}const Co=t(),Io=n(),ko=process.exit.bind(process),To=i();if(Co.language&&"en"!==Co.language&&(await s(Co.language,{silent:!0}),r(Co.language)),Co.demoCleanedForVersion!==bo){try{const{existsSync:o,unlinkSync:e}=await import("node:fs"),{join:l}=await import("node:path"),{getIcoaDir:n}=await import("./lib/config.js"),t=l(n(),"demo-state.json");o(t)&&e(t)}catch{}a({demoCleanedForVersion:bo})}const{select:Eo,confirm:So}=await import("@inquirer/prompts"),$o=Co.mode||"",Oo=""===$o?"instant":["instant","learn","selection","olympiad"].includes($o)?$o:"selection",jo=[{name:`  ${chalk.bold("⚡  Try ICOA in 30 seconds")}     ${chalk.gray("—")}  ${chalk.gray("watch · no token needed")}`,value:"instant"},{name:`  ${chalk.bold("🧠  Learn")}                       ${chalk.gray("—")}  ${chalk.gray("AC / CA / EA token · skill up")}`,value:"learn"},{name:`  ${chalk.bold("🎯  National Selection")}          ${chalk.gray("—")}  ${chalk.gray("country exam token · aim for finals")}`,value:"selection"},{name:`  ${chalk.bold("🏆  International Olympiad")}      ${chalk.gray("—")}  ${chalk.gray("finals stage · Sydney 2026 · full sandbox")}`,value:"olympiad"},{name:`  ${chalk.gray("ℹ️   About ICOA")}                  ${chalk.gray("·")}  ${chalk.gray("what this is · how to join")}`,value:"about"}];console.log(chalk.gray("   Type ")+chalk.bold.cyan("menu")+chalk.gray(" from anywhere to return here.")),console.log();let Do="";for(;!Do;){let o;try{o=await Eo({message:"Mode",choices:jo,default:Oo||"instant"})}catch(o){throw o instanceof Error&&"ExitPromptError"===o.name&&(console.log(),console.log(chalk.gray("   Goodbye.")),process.exit(0)),o}"about"!==o?Do=o:(console.clear(),console.log(),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(chalk.bold.yellow("   ICOA")+chalk.white(" — AI-Native CLI OS for Cyber & AI Security")),console.log(chalk.gray("   Olympiad & Competition  ·  K-12 to University")),console.log(chalk.cyan("  ───────────────────────────────────────────────────")),console.log(),console.log(chalk.bold.white("   What Makes ICOA Different")),console.log(chalk.gray("   · AI-native     AI teammate, AI adversary, AI translation")),console.log(chalk.gray("   · CLI OS        Complete competition environment in terminal")),console.log(chalk.gray("   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured")),console.log(chalk.gray("   · Global scale  15,000+ concurrent exams · 15 languages")),console.log(),console.log(chalk.bold.white("   Competition Format (2-day standard + 1-day Pioneer)")),console.log(`   ${chalk.green.bold("AI4CTF")}${chalk.gray("  [Day 1]  AI as teammate — speed track, dynamic decay + top-3 bonus")}`),console.log(`   ${chalk.red.bold("CTF4AI")}${chalk.gray("  [Day 2]  AI as target — knowledge track, static value per challenge")}`),console.log(`   ${chalk.cyan.bold("CTF4EAI")}${chalk.gray(" [Pioneer / Practical Round] Embodied AI — VLA + world models + sim-to-real")}`),console.log(),console.log(chalk.bold.white("   Scoring (in brief)")),console.log(chalk.gray("   · Standard medals: AI4CTF + CTF4AI combined · 1/12 Gold · 2/12 Silver · 3/12 Bronze")),console.log(chalk.gray("   · HMA: top 50% on either day, total below bronze cutoff")),console.log(chalk.gray("   · CTF4EAI: separate 15-finalist pool, G/S/B + 12 Finalist Awards")),console.log(),console.log(chalk.white("   Sydney, Australia")+chalk.gray("  ·  Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.bold.white("   Organized by")+chalk.gray("  ASRA (Australia) · ICO Foundation Inc")),console.log(chalk.bold.white("   Contact     ")+chalk.cyan(" australia@icoa2026.au  ·  accreditation@icoa2026.au")),console.log(chalk.bold.white("   Website     ")+chalk.cyan.underline(" https://icoa2026.au")),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(),console.log(chalk.gray("   Press ")+chalk.yellow("Enter")+chalk.gray(" to return...")),await new Promise(o=>{const e=l=>{process.stdin.removeListener("data",e),process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!1),process.stdin.pause(),o()};process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.once("data",e)}),console.clear())}if("olympiad"===Do&&"olympiad"!==Oo){console.log(),console.log(chalk.yellow("   This mode will download ~500MB of CTF tools and AI models."));let o=!0;try{o=await So({message:"Continue?",default:!0})}catch(e){if(!(e instanceof Error&&"ExitPromptError"===e.name))throw e;o=!1}o||(Do="selection",console.log(chalk.gray("   Switched to National Selection mode.")))}if(Do!==Oo&&a({mode:Do}),console.log(),"olympiad"===Do&&p(bo)){u(bo),console.log(chalk.gray("   Checking competition environment..."));const{execSync:o}=await import("node:child_process"),e=[{name:"pwntools",cmd:'python3 -c "import pwn"'},{name:"z3-solver",cmd:'python3 -c "import z3"'},{name:"numpy",cmd:'python3 -c "import numpy"'},{name:"requests",cmd:'python3 -c "import requests"'}];let l=0;for(const n of e)try{o(n.cmd,{stdio:"ignore"})}catch{l++}l>0?(console.log(chalk.yellow(`   ${l} core competition libraries missing.`)),console.log(chalk.gray("   Run ")+chalk.white("env setup")+chalk.gray(" when you are ready to install them.")),console.log()):(console.log(chalk.green("   All core libraries ready.")),console.log())}if(F){const o=d();if(o){const e=Math.floor(o.awaySeconds/60),l=o.awaySeconds%60;console.log(chalk.yellow(`   Session resumed. Away: ${e}m ${l}s | Total exits: ${o.exitCount}`)),console.log()}}if("selection"===Do)console.log(chalk.gray("   ─── exam hall · 90 min per paper once started · no pause ───")),console.log(),xo();else if("embodied"===Do)!function(){console.log(chalk.cyan.bold("   [🤖  ctf4eai — Embodied AI Security]")),console.log(),console.log(chalk.bold.cyan("   CTF4EAI")+chalk.gray(" — ICOA 2026's ")+chalk.bold.white("Pioneer Round")),console.log(chalk.gray("   an independent parallel track alongside the scored main events: ")+chalk.green("AI4CTF")+chalk.gray(" (Day 1) and ")+chalk.red("CTF4AI")+chalk.gray(" (Day 2)")),console.log(),console.log(chalk.white("   Embodied AI is at its ImageNet moment.")),console.log(chalk.gray("   VLA models, MuJoCo physics, real robot arms.")),console.log(chalk.gray("   Real models, real physics, real attack surfaces.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────"));const o=L()>0||N()>0,e=D()>0,l=j(),n=O(),t=null!==n&&"number"==typeof n.completedAt&&n.nextCardIndex>=n.totalCards,a=null!==n&&!t;if(t)console.log(chalk.bold.yellow("   Continue:  ")+chalk.bold.cyan("④ learn LEARNDEMO01")+chalk.gray("   (demo2 ✓  ·  sim")+(e?chalk.gray(" ✓  ·  sim arm ✓)"):chalk.gray(")")));else if(a){const o=`${n.nextCardIndex} / ${n.totalCards}`;console.log(chalk.bold.yellow("   Continue:  ")+chalk.bold.cyan("③ demo2")+chalk.gray("  (last left at card ")+chalk.bold.yellow(o)+chalk.gray(")"))}else o&&e?console.log(chalk.bold.yellow("   Next up:   ")+chalk.bold.cyan("③ demo2")+chalk.gray("   →   ")+chalk.bold.cyan("④ learn LEARNDEMO01")+chalk.gray("   (sim ✓  ·  sim arm ✓)")):l?console.log(chalk.bold.yellow("   Next up:   ")+(e?chalk.bold.cyan("① sim")+chalk.gray("  →  ")+chalk.bold.cyan("③ demo2"):chalk.bold.cyan("② sim arm")+chalk.gray("  →  ")+chalk.bold.cyan("③ demo2"))+chalk.gray("   →   ")+chalk.bold.cyan("④ learn LEARNDEMO01")):console.log(chalk.bold.yellow("   First time? Try in order:  ")+chalk.bold.cyan("① sim")+chalk.gray("  →  ")+chalk.bold.cyan("② sim arm")+chalk.gray("  →  ")+chalk.bold.cyan("③ demo2")+chalk.gray("  →  ")+chalk.bold.cyan("④ learn LEARNDEMO01"));console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.green("     sim")+chalk.gray("                     ")+chalk.bold.cyan("①")+chalk.gray(" ")+chalk.bold.yellow("★ INSTANT")+chalk.gray(" — 9-robot group dance, no wait, no setup")),console.log(chalk.bold.green("     sim arm")+chalk.gray("                 ")+chalk.bold.cyan("②")+chalk.gray(" interactive 6-DOF arm sandbox — type joint values, watch")),console.log(chalk.bold.green("     demo2")+chalk.gray("                   ")+chalk.bold.cyan("③")+chalk.gray(" ~8 min interactive intro + live MuJoCo sim")),console.log(chalk.bold.green("     learn LEARNDEMO01")+chalk.gray("       ")+chalk.bold.cyan("④")+chalk.gray(" free 11-card intro (paste this command as-is)")),console.log(chalk.bold.green("     learn ")+chalk.bold.yellow("EA")+chalk.gray(" + 8 chars      full 96 / 360 curriculum (team-issued)")),console.log(chalk.bold.green("     exam ")+chalk.bold.yellow("PDxxxxxxxx")+chalk.gray("         Paper D (CTF4EAI) — national selection contestants")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),console.log(chalk.gray("   Three open tiers: ")+chalk.green("free 11")+chalk.gray(" · ")+chalk.yellow("registered 100")+chalk.gray(" · ")+chalk.bold.magenta("national team 480")+chalk.gray(" (PhD-ready)")),console.log(chalk.gray("   Country team contact: ")+chalk.cyan("australia@icoa2026.au")),console.log(),f(),console.log()}();else if("instant"===Do)console.log(chalk.cyan.bold("   [⚡  Try ICOA in 30 seconds — no token needed]")),console.log(),console.log(chalk.gray("   Two free tastes — just type the word and press Enter:")),console.log(),console.log(chalk.bold.green("     demo ")+chalk.gray("   Paper A/B/C taste — 10 MCQs, no timer    ")+chalk.bold.cyan("🎯 selection-style")),console.log(chalk.bold.green("     demo2")+chalk.gray("   Embodied-AI mini-demo — robots & MuJoCo  ")+chalk.bold.yellow("🤖 hands-on")),console.log(),console.log(chalk.gray("   Type ")+chalk.bold.cyan("demo")+chalk.gray(" or ")+chalk.bold.cyan("demo2")+chalk.gray(" to start  ·  ")+chalk.bold.cyan("menu")+chalk.gray(" to go back  ·  ")+chalk.bold.cyan("quit")+chalk.gray(" to exit")),console.log(),a({mode:"selection"}),Do="selection";else{if("learn"===Do){console.log(chalk.cyan.bold("   [🧠  Learn]")),console.log(),console.log(chalk.gray("   Three tracks · same difficulty curve.")),console.log(),console.log(chalk.white("   Free 12-card demos — paste the full command:")),console.log(),console.log(chalk.gray("     🤝  ai4ctf    AI as your teammate         ")+chalk.bold.yellow("learn AI4CTFDEMO01")),console.log(chalk.gray("     🔓  ctf4ai    AI as your target           ")+chalk.bold.yellow("learn CTF4AIDEMO01")),console.log(chalk.gray("     🤖  ctf4eai   Embodied AI Security        ")+chalk.bold.yellow("learn LEARNDEMO01")),console.log(),console.log(chalk.gray("   Got a cohort token? Type ")+chalk.bold.yellow("learn <TOKEN>")+chalk.gray("   (e.g. ")+chalk.bold.yellow("learn EAABCD1234")+chalk.gray(").")),console.log();try{const{input:o}=await import("@inquirer/prompts"),{resolveLearnInput:l}=await import("./lib/learn-input.js");console.log(chalk.gray("   Enter a token (or just press Enter to go back).")),console.log();const n=l(await o({message:chalk.bold.cyan("icoa learn>"),theme:{prefix:"",style:{message:o=>o}}}));if("token"===n.kind){console.log(),console.log(chalk.gray("   Opening ")+chalk.bold.cyan("learn")+chalk.gray(`: ${n.token}`)),console.log(),a({mode:"selection"}),process.env.ICOA_LEARN_EMBEDDED="1";try{await e.parseAsync(["node","icoa","learn",n.token])}finally{delete process.env.ICOA_LEARN_EMBEDDED}}else"ambiguous"!==n.kind&&"unknown"!==n.kind||(console.log(),console.log(chalk.yellow("   "+n.hint)),console.log(chalk.gray("   Returning to main menu — pick 🧠 Learn again to retry.")),console.log())}catch{}return a({mode:"selection"}),void w()}"organizer"===Do?(console.log(chalk.yellow.bold("   [National/Regional Partner]")),console.log(),console.log(chalk.bold.white("   ██╗ ██████╗ ██████╗  █████╗")),console.log(chalk.bold.white("   ██║██╔════╝██╔═══██╗██╔══██╗")),console.log(chalk.bold.white("   ██║██║     ██║   ██║███████║")),console.log(chalk.bold.white("   ██║██║     ██║   ██║██╔══██║")),console.log(chalk.bold.white("   ██║╚██████╗╚██████╔╝██║  ██║")),console.log(chalk.bold.white("   ╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝")),console.log(),console.log(chalk.yellow("   International Cyber Olympiad in AI 2026")),console.log(chalk.bold.magenta("   The World's First AI-Native CLI Operating System")),console.log(chalk.bold.magenta("   for Cybersecurity & AI Security Competition")),console.log(chalk.bold.magenta("   and Olympiad for K-12")),console.log(chalk.gray("   Sydney, Australia · Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.white("   Vision")),console.log(chalk.gray("   Building a global pipeline for youth cyber & AI")),console.log(chalk.gray("   security talent through education and competition.")),console.log(),console.log(chalk.white("   Capacity")),console.log(chalk.gray("   15,000+ concurrent online examinations")),console.log(chalk.gray("   National selection, training, and education support")),console.log(),console.log(chalk.white("   Olympic Spirit")),console.log(chalk.gray("   Excellence · Friendship · Respect")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   New country accreditation & support:")),console.log(chalk.cyan("     australia@icoa2026.au")),console.log(chalk.cyan("     accreditation@icoa2026.au")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),Io?(console.log(chalk.green(`   Logged in as ${Co.userName}`)),console.log(chalk.white("     exam list")+chalk.gray("       Manage exams")),console.log(chalk.white("     logout")+chalk.gray("          Disconnect"))):console.log(chalk.white("     join <url>")+chalk.gray("      Connect to manage exams")),console.log(),f(),console.log()):(console.log(`   ${chalk.cyan.bold("🏆  ICOA 2026  ·  International Olympiad")}`),console.log(),To&&!y()?(console.log(chalk.red("   Token was activated on a different device.")),console.log(chalk.gray("   Contact organizer for assistance.")),console.log()):Io?(console.log(chalk.green.bold(`   Welcome back, ${Co.userName}!`)),console.log(chalk.gray(`   Connected to ${Co.ctfdUrl}`)),console.log(chalk.gray("   Not you? Type ")+chalk.cyan("logout")+chalk.gray(" to switch accounts")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Ready to compete? Start here:")),console.log(),console.log(chalk.bold.cyan("     challenges")+chalk.gray("     Browse challenges by category")),console.log(chalk.white("     status")+chalk.gray("         Your score & timer")),console.log(chalk.white("     scoreboard")+chalk.gray("     Live rankings")),console.log(chalk.white("     memo")+chalk.gray("           Report an issue to organizers (one-way)")),console.log(),console.log(chalk.gray("   Tool environment:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(chalk.bold.yellow("   ★ ")+chalk.bold.cyan("man <tool>")+chalk.gray("    How to USE a tool (steghide, nmap…) · ")+chalk.cyan("man tools")+chalk.gray(" = list")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("help")+chalk.gray(" · ")+b()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()):To?(so(ho)||ro(ho,{recursive:!0}),console.log(chalk.green.bold("   Welcome, competitor!")),console.log(chalk.gray(`   Workspace: ${ho}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Get started:")),console.log(),console.log(chalk.white("   Step 1  ")+chalk.bold.cyan("join <url>")+chalk.gray("   Connect to competition server")),console.log(chalk.white("   Step 2  ")+chalk.bold.cyan("challenges")+chalk.gray("   Browse & solve challenges")),console.log(chalk.white("   Step 3  ")+chalk.bold.cyan("ai4ctf")+chalk.gray("       Ask AI when stuck")),console.log(),console.log(chalk.gray("   Before Step 1 — make sure your tools are ready:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(chalk.bold.yellow("   ★ ")+chalk.bold.cyan("man <tool>")+chalk.gray("    How to USE a tool (steghide, nmap…) · ")+chalk.cyan("man tools")+chalk.gray(" = list")),console.log(),console.log(chalk.gray("   Also: ")+chalk.white("help")+chalk.gray(" all commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+b()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()):(console.log(chalk.bold.yellow("   🏆  You reached the finals tier.")),console.log(chalk.gray("   Full sandbox · 110 CTF tools · Sydney 2026 · this is where finalists compete.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   To begin, activate your competition token:")),console.log(),console.log(chalk.bold.cyan("     activate <token>")),console.log(),console.log(chalk.gray("   While waiting, explore:")),console.log(chalk.white("     ref linux")+chalk.gray("       Quick reference for Linux")),console.log(chalk.white("     ref web")+chalk.gray("         Quick reference for Web")),console.log(chalk.white("     env")+chalk.gray("             See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("       Install anything missing (~5 min, one-time)")),console.log(chalk.white("     help")+chalk.gray("            All available commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+b()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()))}e.exitOverride(),e.configureOutput({writeErr:()=>{},writeOut:o=>{console.log(o)}});const Lo=o({input:process.stdin,output:process.stdout,prompt:uo(),terminal:!0});x(Lo);let No=!1;if(h(!0),Y(),po&&(console.log(),console.log(chalk.yellow("  ⏱  A new competition day has started (Sydney time).")),console.log(chalk.gray("     For fairness, yesterday’s sign-in has been cleared. Type ")+chalk.cyan("join <url>")+chalk.gray(" to sign in with your account.")),console.log()),K()){const o=t().userName||"this account";console.log(),console.log(chalk.yellow("  ⚠  This machine is signed in as ")+chalk.bold.white(o)+chalk.yellow(".")),console.log(chalk.gray("     Press ")+chalk.cyan("Enter")+chalk.gray(` to continue as ${o}, or type `)+chalk.cyan("logout")+chalk.gray(" to switch accounts.")),"logout"===(await new Promise(o=>{Lo.question(chalk.white("  > "),e=>o(e.trim()))})).toLowerCase()&&(a({ctfdUrl:"",token:"",sessionCookie:"",userId:null,userName:"",teamId:null,country:""}),console.log(),console.log(chalk.green("  ✓ Logged out. ")+chalk.gray("Run ")+chalk.cyan("join <url>")+chalk.gray(" to sign in with your own account."))),console.log()}Z()&&V(()=>Lo.prompt());const Ro=Lo.prompt.bind(Lo);Lo.prompt=o=>{A()||k()||E()||$()||no()||Lo.setPrompt(uo()),Ro(o)},Lo.prompt(),Lo.on("line",async o=>{if(No)return;const n=o.trim();if(!n)return Lo.setPrompt(A()?chalk.magenta("icoa ai4ctf> "):uo()),void Lo.prompt();if("menu"===n||"menu confirm"===n)return P()&&"menu confirm"!==n?(console.log(),console.log(chalk.yellow("  Real exam active. Progress is auto-saved.")),console.log(chalk.gray("  To return to main menu anyway, type ")+chalk.white("menu confirm")),console.log(),void Lo.prompt()):void w(Lo);if(A()){No=!0;const o=await C(n);return No=!1,"exit"===o&&Lo.setPrompt(uo()),void Lo.prompt()}if(k()){No=!0;const o=await T(n);return No=!1,"exit"!==o&&"solved"!==o||Lo.setPrompt(uo()),void Lo.prompt()}if(E()){No=!0;const o=await S(n);return No=!1,"exit"===o&&Lo.setPrompt(uo()),Lo.setPrompt(E()?chalk.bold.cyan("icoa ctf4eai> "):uo()),void Lo.prompt()}if(X(n),"exit"===n)return R()?(console.log(),console.log(chalk.yellow("  ⚠ An exam is in progress.")),console.log(chalk.white("  To return to menu without losing progress, type: ")+chalk.bold.cyan("back")),console.log(chalk.white("  To fully close ICOA CLI, type: ")+chalk.bold.cyan("quit")),console.log(chalk.gray("  Your progress is auto-saved either way.")),console.log(),void Lo.prompt()):(console.log(),console.log(chalk.gray("  ")+chalk.white("exit")+chalk.gray(" returns to the main menu. To fully close ICOA CLI, type ")+chalk.bold.cyan("quit")+chalk.gray(".")),"selection"===Do&&xo(),void Lo.prompt());if("quit"===n||"q"===n||"quit confirm"===n){const o=R();return o&&"demo-free"!==o.session.examId&&"quit confirm"!==n?(console.log(),console.log(chalk.yellow("  ⚠ A real exam is in progress.")),console.log(chalk.gray("    Your answers are auto-saved on the server, but the exam timer keeps ticking")),console.log(chalk.gray("    on the server side even if you close the CLI.")),console.log(),console.log(chalk.white("  To leave the CLI but keep the exam alive, type: ")+chalk.bold.cyan("back")),console.log(chalk.gray("    (recommended — you can resume with ")+chalk.cyan("exam q 1")+chalk.gray(" after relaunching icoa)")),console.log(),console.log(chalk.white("  To really close ICOA CLI, type: ")+chalk.bold.cyan("quit confirm")),console.log(),void Lo.prompt()):(o&&"demo-free"===o.session.examId&&(console.log(),console.log(chalk.gray("  Demo paused. Resume with: ")+chalk.white("demo")+chalk.gray(" (fresh) or ")+chalk.white("exam q 1")+chalk.gray(" (continue)."))),J(),G(),m(),console.log(chalk.gray("  Session saved. Use ")+chalk.white("icoa --resume")+chalk.gray(" to continue.")),M(),void ko(0))}if("back"===n){const o=R(),e=o&&"demo-free"!==o.session.examId,l=o&&"demo-free"===o.session.examId&&(()=>{const e=new Date(o.session.startedAt||0).getTime();return Date.now()-e<18e5})();if(e)console.log(),console.log(chalk.gray("  Exam paused. Your progress is saved.")),console.log(chalk.white("  Resume: exam q 1")+chalk.gray("  ·  ")+chalk.white("exam review")+chalk.gray("  ·  ")+chalk.white("exam submit")),console.log();else if(l){const e=Object.keys(o.answers).length,l=o.session.questionCount;console.log(),console.log(chalk.gray(`  Demo paused (${e}/${l} answered). Resume with: `)+chalk.white("exam q 1")),console.log(chalk.gray("  Or type ")+chalk.white("demo")+chalk.gray(" to restart.")),console.log()}else{if(o&&"demo-free"===o.session.examId){const{clearExamState:o}=await import("./lib/exam-state.js");o("demo-free")}const e=t();fetch("https://practice.icoa2026.au/api/icoa/demo-stats",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({type:"post-report-back",lang:e.language||"en",timestamp:(new Date).toISOString()}),signal:AbortSignal.timeout(5e3)}).catch(()=>{}),"selection"===Do?xo():console.log(chalk.gray("  Already at main menu."))}return void Lo.prompt()}if("help"===n||"?"===n){if(R()){No=!0;try{await e.parseAsync(["node","icoa","exam","help"])}catch{}return No=!1,void Lo.prompt()}return Ao(i(),Do),void Lo.prompt()}if("man"===n||"manual"===n)return Ao(i(),Do),console.log(),console.log(chalk.bold.yellow("  ★ Stuck on a tool? ")+chalk.bold.cyan("man <tool>")+chalk.gray("  e.g. ")+chalk.cyan("man steghide")+chalk.gray("   ·  ")+chalk.cyan("man tools")+chalk.gray(" = full list")),void Lo.prompt();if(/^(?:man|manual)\s+\S/i.test(n))return I(n.replace(/^(?:man|manual)\s+/i,"")),void Lo.prompt();if("more help"===n.toLowerCase()&&R()){No=!0;try{await e.parseAsync(["node","icoa","exam","more-help"])}catch{}return No=!1,void Lo.prompt()}if("continue"===n.toLowerCase())return console.log(),console.log(chalk.green.bold("  ═══ AI4CTF — AI as Your Teammate ═══")),console.log(),console.log(chalk.white("  In AI4CTF, you solve cybersecurity challenges")),console.log(chalk.white("  with AI by your side.")),console.log(),console.log(chalk.white("  In this demo, your AI teammate gives help at 3 levels:")),console.log(chalk.yellow("    hint a")+chalk.gray("    General guidance")),console.log(chalk.yellow("    hint b")+chalk.gray("    Deep analysis")),console.log(chalk.yellow("    hint c")+chalk.gray("    Critical assist")),console.log(),console.log(chalk.white("  Try it now! Type: ")+chalk.bold.green("ai4ctf")),console.log(chalk.gray('  Chat freely with your AI teammate. Type "exit" when done.')),console.log(),console.log(chalk.gray("  After ai4ctf, try: ")+chalk.bold.red("ctf4ai")+chalk.gray(' — trick the AI into saying "koala"')),console.log(),void Lo.prompt();if(/^ICOA-[A-Z]{2,3}-\d{1,6}$/i.test(n.trim())){No=!0;try{await e.parseAsync(["node","icoa","exam","token",n.trim()])}catch{}return No=!1,void Lo.prompt()}if(/^[A-Z]{2}[0-9A-HJKMNP-TV-Z]{8}$/i.test(n.trim())){No=!0;try{await e.parseAsync(["node","icoa","exam","token",n.trim().toUpperCase()])}catch{}return No=!1,void Lo.prompt()}const a=n.match(/^exam\s+([A-Z]{2}[0-9A-HJKMNP-TV-Z]{8})$/i);if(a){No=!0;try{await e.parseAsync(["node","icoa","exam","token",a[1].toUpperCase()])}catch{}return No=!1,void Lo.prompt()}const s=n.match(/^exam\s+([A-Z]{2,3})$/i);if(s){No=!0;try{await e.parseAsync(["node","icoa","exam","list",s[1]])}catch{}return No=!1,void Lo.prompt()}if("clear"===n||"cls"===n)return console.clear(),void Lo.prompt();if("news"===n)return Z()?H():console.log(chalk.gray("  No competition joined. Use ")+chalk.white("join <url>")+chalk.gray(".")),void Lo.prompt();if("memo"===n){if(!Z())return console.log(chalk.gray("  Join a competition first: ")+chalk.white("join <url>")),void Lo.prompt();No=!0;try{await to()}catch{}return void(No=!1)}const r=eo()||oo(t().userName||"");if("jury"===n&&r){No=!0;try{await ao()}catch{}return void(No=!1)}if(r&&eo()&&"scoreboard"===n.split(/\s+/)[0]){No=!0;try{const o=await lo();if(console.log(),0===o.length)console.log(chalk.gray("  Scoreboard is empty."));else{console.log(chalk.bold.white("  Scoreboard"));for(const e of o.slice(0,50))console.log(chalk.gray(`  ${String(e.pos).padStart(3)}. `)+chalk.white(e.name.padEnd(28).slice(0,28))+chalk.cyan(String(e.score)))}console.log()}catch{}return No=!1,void Lo.prompt()}if(r&&K()){const o=n.split(/\s+/)[0];if(["challenges","open","submit","hint"].includes(o))return console.log(),console.log(chalk.yellow("  Team-leader account — the challenge bracket is not available here.")),console.log(chalk.gray("  Available: ")+chalk.white("scoreboard")+chalk.gray(" · ")+chalk.white("news")+chalk.gray(" · ")+chalk.white("jury")+chalk.gray(" · ")+chalk.white("time")+chalk.gray(" · ")+chalk.white("status")+chalk.gray(" · ")+chalk.white("logout")),console.log(),void Lo.prompt()}if(n.startsWith("activate ")){const o=n.slice(9).trim(),e=c(o);return"ok"===e?console.log(chalk.green("  Access granted! Token bound to this device.")):"already_bound"===e?(console.log(),console.log(chalk.red("  Token already activated on a different device.")),console.log(chalk.gray("  Each token binds to the first device that uses it. If you lost the device,")),console.log(chalk.gray("  contact your proctor to have the token re-issued for a new device."))):(console.log(),console.log(chalk.red("  Token not recognized.")),console.log(chalk.gray("  Possible reasons:")),console.log(chalk.white("    • ")+chalk.gray("Typo — access tokens are case-insensitive and look like ")+chalk.cyan("ICOA-XXXX-XXXX-XXXX")+chalk.gray(" (4-char hex groups, e.g. ICOA-385E-27F2-B21B)")),console.log(chalk.white("    • ")+chalk.gray("Expired — ask your proctor or organizer for a fresh token")),console.log(chalk.white("    • ")+chalk.gray("Network — verify connection to ")+chalk.cyan("practice.icoa2026.au")),console.log(chalk.gray("  Still stuck? type ")+chalk.cyan("help")+chalk.gray(" or try ")+chalk.cyan("exam demo")+chalk.gray(" for a free practice round."))),console.log(),void Lo.prompt()}if("activate"===n)return console.log(chalk.gray("  Usage: ")+chalk.white("activate <token>")),console.log(),void Lo.prompt();const d=R();if(d){const o=n.toUpperCase().trim(),l=o=>{const e=d.questions.find(e=>e.number===o);return!!e&&("ai4ctf"===e.type||"ctf4ai"===e.type||e.options&&!e.options.A&&!e.options.B)},t=o=>{const e=d.questions.find(e=>e.number===o);return"short_answer"===e?.type},a=o=>{const e="demo-free"!==d.session.examId,l=d.questions.find(e=>e.number===o),n=q(l?.type,e);console.log(),console.log(chalk.yellow(`  Q${o} is a practical question — letters (A/B/C/D) don't apply here.`)),n?(console.log(chalk.white("  Enter the AI chat for this question:  ")+chalk.bold.cyan(n)),console.log(chalk.gray("  Or submit a flag directly: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`))):console.log(chalk.gray("  Submit a flag: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`)),console.log()};if(/^[ABCDE]$/.test(o)){const n=d._lastQ||1;if(l(n))return a(n),void Lo.prompt();if(t(n))return console.log(),console.log(chalk.yellow(`  Q${n} is a short-answer question — type a number, not a letter.`)),console.log(chalk.gray("  Example: ")+chalk.green("42")+chalk.gray("  (or ")+chalk.green(`exam answer ${n} 42`)+chalk.gray(")")),console.log(),void Lo.prompt();No=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(n),o])}catch{}return No=!1,void Lo.prompt()}if(/^-?\d+$/.test(o)){const l=d._lastQ||1;if(t(l)){No=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(l),o])}catch{}return No=!1,void Lo.prompt()}}const s=o.match(/^(\d+)\s+([ABCDE]|-?\d+)$/);if(s){const o=parseInt(s[1],10);if(l(o))return a(o),void Lo.prompt();No=!0;try{await e.parseAsync(["node","icoa","exam","answer",s[1],s[2]])}catch{}return No=!1,void Lo.prompt()}}const p=n.split(/\s+/)[0].toLowerCase(),u=/^python3?(\.\d+)?$/.test(p),h="ls"===p||"pwd"===p,f=n.startsWith("!")||p.startsWith("!")||u||h,b=new Set(["nano","vi","vim","emacs","pico","ed","code","cat","less","more","head","tail","ls","pwd","cd","base64","xxd","hexdump","od","openssl","md5sum","sha256sum","grep","find","awk","sed","strings","file","curl","wget","nc","ping","nmap","echo","bash","sh","zsh","pip","pip3","node","npm"]),x=()=>{console.log(chalk.gray("  Shell commands need ")+chalk.bold.cyan("!")+chalk.gray(" prefix. Try: ")+chalk.bold.cyan(`!${n}`)),console.log()};if("embodied"===Do&&!f&&!["demo2","learn","exam","ctf4eai","ctf4vla","eai","arena","lang","ref","setup","env","aienv","ipynb","sim"].includes(p))return b.has(p)?(x(),void Lo.prompt()):(console.log(chalk.gray("  Not available in Embodied AI Security mode.")),console.log(chalk.white("  Try ")+chalk.bold.cyan("demo2")+chalk.gray(" (intro) · ")+chalk.bold.cyan("learn")+chalk.gray(" (curriculum) · ")+chalk.bold.cyan("exam <PD-token>")+chalk.gray(" (Paper D)")),console.log(),void Lo.prompt());if("selection"===Do&&!f&&!["exam","demo","demo2","retry","nations","next","prev","continue","setup","lang","ref","ai4ctf","ctf4ai","mark","unmark","review","submit","env","aienv","ipynb","sim"].includes(p)){if(b.has(p))return x(),void Lo.prompt();if(console.log(chalk.gray("  Not available in Selection mode.")),d){const o=d._lastQ||1;console.log(chalk.white(`  Resume exam: exam q ${o}`)+chalk.gray("  ·  ")+chalk.white("A/B/C/D")+chalk.gray(" to answer"))}else console.log(chalk.gray("  Try: demo  ·  setup to switch mode"));return console.log(),void Lo.prompt()}if("organizer"===Do&&!["join","exam","demo","retry","next","prev","logout","setup","lang","ref","ctf","mark","unmark","review","submit"].includes(p))return console.log(chalk.gray("  Not available in Organizer mode. Switch via: setup")),console.log(),void Lo.prompt();if(!("olympiad"!==Do||i()&&y()||g(p)))return console.log(chalk.yellow("  Restricted mode. ")+chalk.gray("Enter your access token:")),console.log(chalk.white("    activate <token>")),console.log(),console.log(chalk.gray("  Free commands: ")+chalk.white("ref [topic]")+chalk.gray(", ")+chalk.white("help")+chalk.gray(", ")+chalk.white("exit")),console.log(),void Lo.prompt();if(!["join","activate","challenges","ch","open","submit","flag","scoreboard","sb","status","time","ref","shell","files","view","connect","challenge","note","notes","logbook","log","man","manual","lang","setup","env","aienv","ipynb","ai4ctf","model","ctf","exam","demo","retry","nations","next","prev","continue","logout","ctf4ai","mark","unmark","review","submit","learn","demo2","ctf4eai","ctf4vla","theme","sim","arena","eai","learn-pull"].includes(p)){if(wo.has(p))return console.log(chalk.yellow(`  "${p}" is a shell command — the ICOA prompt isn't a shell.`)),console.log(chalk.gray("  In real-exam mode, prefix with ! to run inside the sandbox: ")+chalk.cyan(`!${n}`)),console.log(),void Lo.prompt();if(/(?:^|\s)(?:\/(?!home\/|Users\/|tmp\/)|\.\.\/|~\/)/.test(n)&&!n.startsWith("cd ")){const o=/(?:^|\s)\/(?!home\/\w+\/icoa-workspace|Users\/\w+\/icoa-workspace|tmp\/)/.test(n),e=/\.\./.test(n);if(o||e)return console.log(chalk.red("  Blocked: access outside workspace is not allowed.")),console.log(chalk.gray(`  Workspace: ${ho}`)),console.log(),void Lo.prompt()}let o=n.startsWith("!")?n.slice(1).trim():n;if("darwin"===process.platform){const e="/opt/homebrew/opt/python@3.12/bin/python3.12";o=o.replace(/^python3?\s/,`${e} `).replace(/^(python3|python)$/,e)}else if("win32"===process.platform){const e=(()=>{try{return l("py -3 --version",{stdio:["ignore","ignore","ignore"],timeout:1500}),"py -3"}catch{}return"python"})();o=o.replace(/^python3?(\.\d+)?\s/,`${e} `).replace(/^python3?(\.\d+)?$/,e)}else{const e=(()=>{try{return l("which python3.12",{stdio:"ignore"}),"python3.12"}catch{return"python3"}})();o=o.replace(/^python\s/,`${e} `).replace(/^python$/,e)}const e=W(),t=Q(n);z({cwd:e,input:n,riskFlags:t}),t.length>0&&P()&&(console.log(chalk.yellow(`  ⚠ Action flagged: ${t.join(", ")} — logged.`)),console.log()),/^(\S*python3?(\.\d+)?)\s*$/.test(o)&&(o=`PYTHONSTARTUP="${function(){const o=go(yo(),".icoa");so(o)||ro(o,{recursive:!0});const e=go(o,"python-startup.py");let l="";if(so(e))try{l=io(e,"utf-8")}catch{}return l!==mo&&co(e,mo),e}()}" ${o}`,console.log(),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(chalk.bold.white("  Python ready — ICOA exam toolkit pre-loaded")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(),console.log(chalk.white("  Already imported: ")+chalk.gray("base64, struct, hashlib, re, json, binascii")),console.log(chalk.white("  Also available:   ")+chalk.gray("requests, bs4, numpy, PIL.Image, AES, pad/unpad, xor, p32/u32/p64/u64")),console.log(),console.log(chalk.yellow("  Quick examples:")),console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ')+chalk.gray("# decode base64")),console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ')+chalk.gray("# hex → bytes")),console.log(chalk.gray('    "ICOA{x}".encode()                 ')+chalk.gray("# str → bytes")),console.log(chalk.gray("    [chr(c) for c in [73,67,79,65]]    ")+chalk.gray("# ASCII codes")),console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ')+chalk.gray("# pwntools XOR")),console.log(),console.log(chalk.gray("  Exit:  ")+chalk.white("exit()")+chalk.gray("  or Ctrl-D")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log()),No=!0;try{_()&&await B()?await U(o,Lo):await vo(o,Lo,e)}catch{console.log(chalk.yellow(`  Command failed: ${p}`))}return No=!1,console.log(),void Lo.prompt()}No=!0;const $=n.trim(),O=$.toLowerCase();let j,D=null,L="";if(d)if("submit"===O)D="final";else if(O.startsWith("submit ")){let o=$.slice(7).trim();/^submit\s+/i.test(o)&&(o=o.replace(/^submit\s+/i,"").trim()),o=o.replace(/^["'`]+|["'`]+$/g,"").trim(),o&&/^ICOA\{[^}]*\}?$/i.test(o)?(D="flag",L=o):o&&/^[ABCDE]$/i.test(o)&&(D="flag",L=o.toUpperCase())}else/^ICOA\{[^}]+\}$/i.test($)&&(D="flag",L=$);j="final"===D?["exam","submit"]:"flag"===D?["exam","answer",String(d?._lastQ||1),L]:function(o){const e=o.split(/\s+/),l=e[0].toLowerCase(),n=e.slice(1);if("aienv"===l&&["run","python","py"].includes((n[0]??"").toLowerCase()))return v(o);if(("submit"===l||"flag"===l)&&n.length>=2)return["ctf","submit",n[0],n.slice(1).join(" ").trim().replace(/^["'`]+|["'`]+$/g,"")];if("connect"===l&&n.length>=2){const e=v(o);return["connect",e[1]??n[0],e.slice(2).join(" ")]}const t={demo:["exam","demo"],retry:["exam","demo-retry"],nations:["exam","nations"],next:["exam","next"],prev:["exam","prev"],mark:["exam","mark",...n],unmark:["exam","unmark",...n],review:["exam","review"],logout:["ctf","logout"],join:["ctf","join",...n],activate:["ctf","activate",...n],challenges:["ctf","challenges"],ch:["ctf","challenges"],open:["ctf","open",...n],submit:["ctf","submit",...n],flag:["ctf","submit",...n],scoreboard:["ctf","scoreboard",...n],sb:["ctf","scoreboard",...n],status:["ctf","status"],time:["ctf","time"]};return t[l]?t[l]:["ref","shell","files","view","connect","challenge","note","notes","logbook","log","man","manual","lang","setup","env","aienv","ipynb","ai4ctf","model","ctf","exam","ctf4ai"].includes(l)?[l,...n]:e}(n);const N="ctf"===j[0]&&"join"===j[1];N&&Lo.pause(),process.exit=()=>{throw new Error(fo)};try{await e.parseAsync(["node","icoa",...j])}catch(o){const e=o instanceof Error?o.message:String(o);if(e===fo);else if(e.includes("commander.unknownCommand")){const{distance:o}=await import("fastest-levenshtein"),e=["ctf","ref","shell","files","view","connect","challenge","note","notes","logbook","log","manual","lang","setup","env","aienv","ipynb","ai4ctf","exam","ctf4ai","theme","eai","clear","cls","quit","exit","back","menu","help","continue","activate","demo","challenges","status","scoreboard","join","logout"],l=p.split(/\s+/)[0]||p;let n={word:"",dist:1/0};for(const t of e){const e=o(l.toLowerCase(),t);e<n.dist&&(n={word:t,dist:e})}console.log(chalk.yellow(`  Unknown command: ${p}.`)),n.dist>0&&n.dist<=2&&console.log(chalk.gray("  Did you mean: ")+chalk.bold.cyan(n.word)+chalk.gray("?")),console.log(chalk.gray("  Type ")+chalk.cyan("help")+chalk.gray(" for the full command list."))}else e.includes("commander.missingArgument")||"commander.missingArgument"===o?.code?"submit"===p||"flag"===p?(console.log(chalk.yellow("  Incomplete — usage: ")+chalk.cyan("submit <challenge#> <flag>")),console.log(chalk.gray("  Put the number AND the flag on one line, e.g. ")+chalk.cyan("submit 44 pecan{...}"))):(console.log(chalk.yellow(`  Incomplete command: ${p}`)),console.log(chalk.gray("  Type ")+chalk.cyan("help")+chalk.gray(" for usage."))):e.includes("commander.")||(e.includes("fetch failed")||e.includes("ECONNREFUSED")||e.includes("ETIMEDOUT"))&&console.log(chalk.yellow("  Network error. Check your connection."))}finally{process.exit=ko,No=!1,N&&Lo.resume()}A()?Lo.setPrompt(chalk.magenta("icoa ai4ctf> ")):k()?Lo.setPrompt(chalk.red("icoa ctf4ai> ")):E()&&Lo.setPrompt(chalk.bold.cyan("icoa ctf4eai> ")),console.log(),Lo.prompt()}),Lo.on("SIGINT",()=>{if(console.log(),A()||k())console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still in the AI chat.")),console.log(chalk.white("  Type ")+chalk.bold.cyan("exit")+chalk.white(" to leave the chat and return to the menu."));else if(R()){const o="demo-free"!==R().session.examId;console.log(chalk.yellow("  Ctrl+C did NOT close ICOA CLI.")),console.log(chalk.gray(`  Your ${o?"exam":"demo"} is paused and every answer is auto-saved.`)),console.log(),console.log(chalk.white("  Resume: ")+chalk.cyan("exam q 1")+chalk.gray("  ·  Back to menu: ")+chalk.cyan("back")+chalk.gray("  ·  Close CLI: ")+chalk.cyan(o?"quit confirm":"quit"))}else console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still at the ")+chalk.cyan("icoa>")+chalk.yellow(" prompt.")),console.log(chalk.gray("  Keep typing — ")+chalk.cyan("help")+chalk.gray(" lists commands. (Only ")+chalk.cyan("quit")+chalk.gray(" or Ctrl+D actually close the CLI.)"));console.log(),Lo.prompt()}),Lo.on("close",()=>{J(),G(),m(),M(),ko(0)})}function vo(o,l,n){return new Promise(t=>{const a=process.stdin,s=!!a.isTTY&&!!a.isRaw;if(l.pause(),a.isTTY&&"function"==typeof a.setRawMode)try{a.setRawMode(!1)}catch{}const r=e(o,{shell:!0,stdio:"inherit",cwd:n||process.cwd()}),i=()=>{if(a.isTTY&&"function"==typeof a.setRawMode&&s)try{a.setRawMode(!0)}catch{}l.resume(),t()};r.on("close",i),r.on("error",i)})}function Ao(o,e="olympiad"){return console.log(),"selection"===e||"organizer"===e?(console.log(chalk.bold.white("  Exam")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to exam server")),console.log(chalk.white("    exam list           ")+chalk.gray("Available exams")),console.log(chalk.white("    exam start <id>     ")+chalk.gray("Begin an exam")),console.log(chalk.white("    exam q [n]          ")+chalk.gray("View questions")),console.log(chalk.white("    exam answer <n> <X> ")+chalk.gray("Answer question")),console.log(chalk.white("    exam review         ")+chalk.gray("Review all answers")),console.log(chalk.white("    exam submit         ")+chalk.gray("Submit for grading")),console.log(chalk.white("    exam result         ")+chalk.gray("View your score")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    setup               ")+chalk.gray("Settings / switch mode")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),void console.log()):o?(console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(chalk.bold.white("  How it works")),console.log(),console.log(chalk.gray("  1. Browse ")+chalk.white("challenges")+chalk.gray(" and pick one")),console.log(chalk.gray("  2. ")+chalk.white("open <id>")+chalk.gray(" to read the challenge")),console.log(chalk.gray("  3. Use ")+chalk.white("ai4ctf")+chalk.gray(" to chat with AI when stuck")),console.log(chalk.gray("  4. ")+chalk.white("submit <id> <flag>")+chalk.gray(" to score points")),console.log(chalk.gray("  5. Check ")+chalk.white("scoreboard")+chalk.gray(" to track your rank")),console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(),console.log(chalk.bold.white("  Competition")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to CTFd")),console.log(chalk.white("    challenges (ch)     ")+chalk.gray("List challenges by category")),console.log(chalk.white("    open <id>           ")+chalk.gray("Read challenge + get next steps")),console.log(chalk.white("    submit <id> <flag>  ")+chalk.gray("Submit a flag")),console.log(chalk.white("    scoreboard (sb)     ")+chalk.gray("Live rankings")),console.log(chalk.white("    status              ")+chalk.gray("Your score & timer")),console.log(chalk.white("    time                ")+chalk.gray("Countdown timer")),console.log(),console.log(chalk.bold.white("  AI Teammate")),console.log(chalk.white("    ai4ctf              ")+chalk.gray("Free-chat with your AI teammate")),console.log(),console.log(chalk.bold.white("  Tools")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference (linux, web, crypto...)")),console.log(chalk.white("    shell               ")+chalk.gray("Interactive CTF shell (sandbox if present, else host)")),console.log(chalk.white("    files <id>          ")+chalk.gray("Download challenge files")),console.log(chalk.white("    connect <id>        ")+chalk.gray("Connect to remote target")),console.log(chalk.white("    note [text]         ")+chalk.gray("Add a logbook entry (in-exam: tags current Q)")),console.log(chalk.white("    logbook [n]         ")+chalk.gray("View your logbook (in-exam: filter by Q)")),console.log(chalk.white("    log                 ")+chalk.gray("Session history")),console.log(chalk.white("    man <tool>          ")+chalk.bold.yellow("★ ")+chalk.gray("How to use a tool (steghide, nmap…); ")+chalk.cyan("man tools")+chalk.gray(" = list. Bare ")+chalk.cyan("man")+chalk.gray(" = this list.")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    setup               ")+chalk.gray("Configure settings")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language (15 supported)")),console.log(chalk.white("    logout              ")+chalk.gray("Disconnect")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit (session saved)")),void console.log()):(console.log(chalk.bold.yellow("  Restricted Mode — activate with a token to unlock all commands")),console.log(),console.log(chalk.white("    activate <token>    ")+chalk.gray("Unlock full access")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),void console.log())}