icoa-cli 2.19.349 → 2.19.351

package/dist/lib/log-sync.js

@@ -1,155 +1 @@
-import { readFileSync, existsSync, writeFileSync, chmodSync } from 'node:fs';
-import { join } from 'node:path';
-import { getIcoaDir, getConfig } from './config.js';
-import { getDeviceFingerprint } from './access.js';
-import { getCliVersion } from './version.js';
-// Every 30s, post new lines from ~/.icoa/session.log to the server audit
-// endpoint. Two auth modes:
-//
-//   1. Logged-in user (CTFd token present)  → Authorization: Token <token>,
-//      stored on the server as /opt/CTFd/audit/user-<userId>.jsonl
-//   2. Anonymous demo user (no token)       → X-Device-Fingerprint: <hash>,
-//      stored as /opt/CTFd/audit/demo-<fingerprint>.jsonl
-//
-// The demo path is what lets us observe the full prompt/command history of
-// users who never log in (the main demo audience).
-//
-// V7 fix (v2.19.181): Each entry carries a monotonic `seq` counter that
-// only increments (never resets, never decreases). Server stores last seq
-// per identity. Deleting session.log + sync-state.json no longer hides
-// activity — the seq jump tells the server a chunk was wiped.
-const SYNC_INTERVAL = 30_000;
-const DEFAULT_SERVER = 'https://practice.icoa2026.au';
-const SYNC_STATE_FILE = () => join(getIcoaDir(), 'sync-state.json');
-let syncTimer = null;
-function getSyncState() {
-    const file = SYNC_STATE_FILE();
-    if (!existsSync(file))
-        return { lastSyncedLine: 0, lastSyncAt: null, syncCount: 0, failCount: 0, seq: 0 };
-    try {
-        const parsed = JSON.parse(readFileSync(file, 'utf-8'));
-        return {
-            lastSyncedLine: parsed.lastSyncedLine ?? 0,
-            lastSyncAt: parsed.lastSyncAt ?? null,
-            syncCount: parsed.syncCount ?? 0,
-            failCount: parsed.failCount ?? 0,
-            seq: parsed.seq ?? 0,
-        };
-    }
-    catch {
-        return { lastSyncedLine: 0, lastSyncAt: null, syncCount: 0, failCount: 0, seq: 0 };
-    }
-}
-function saveSyncState(state) {
-    const f = SYNC_STATE_FILE();
-    writeFileSync(f, JSON.stringify(state, null, 2));
-    try {
-        chmodSync(f, 0o600);
-    }
-    catch {
-        /* ignore Windows / restricted FS */
-    }
-}
-async function syncLogs() {
-    const config = getConfig();
-    const serverUrl = config.ctfdUrl || DEFAULT_SERVER;
-    const logPath = join(getIcoaDir(), 'session.log');
-    if (!existsSync(logPath))
-        return;
-    const state = getSyncState();
-    const allLines = readFileSync(logPath, 'utf-8').trim().split('\n').filter(Boolean);
-    // V7 monotonic guard: if the log shrank below our last-synced position
-    // (file was deleted/truncated), our cursor would otherwise stay ahead of
-    // the new content forever. Detect the shrink and resume from 0, but the
-    // server-side `seq` counter keeps climbing, so the gap is still evident
-    // to whoever audits the JSONL.
-    if (allLines.length < state.lastSyncedLine) {
-        state.lastSyncedLine = 0;
-    }
-    const newLines = allLines.slice(state.lastSyncedLine);
-    if (newLines.length === 0)
-        return;
-    // Pick auth mode: token for logged-in users, device fingerprint for anon.
-    const headers = { 'Content-Type': 'application/json' };
-    let identity;
-    if (config.token) {
-        headers.Authorization = `Token ${config.token}`;
-        identity = `user:${config.userId ?? 'unknown'}`;
-    }
-    else {
-        const fp = config.deviceFingerprint || getDeviceFingerprint();
-        headers['X-Device-Fingerprint'] = fp;
-        identity = `demo:${fp.slice(0, 12)}`;
-    }
-    // Tag each entry with a monotonic seq number. The seq counter lives in
-    // sync-state.json and only ever increments (V7 fix). If the contestant
-    // deletes session.log to hide activity, the next batch starts at seq=N+k
-    // and the server sees the jump.
-    const baseSeq = state.seq ?? 0;
-    const taggedEntries = newLines.map((line, idx) => {
-        let parsed;
-        try {
-            parsed = JSON.parse(line);
-        }
-        catch {
-            parsed = { raw: line };
-        }
-        return { ...parsed, _seq: baseSeq + idx + 1 };
-    });
-    const cliVersion = getCliVersion();
-    // V2.19.185: stamp every entry with the CLI version. Lets future forensic
-    // audits answer "which CLI version did this contestant run?" — see the
-    // Paper E dispatcher post-mortem (cross-country-audit-2026-05-23.pdf §6
-    // Gap #2). Top-level field also kept for backward search ergonomics.
-    const entriesWithVersion = taggedEntries.map((e) => ({ ...e, _cli: cliVersion }));
-    const payload = {
-        identity,
-        userId: config.userId,
-        userName: config.userName,
-        teamId: config.teamId,
-        sessionId: config.sessionId,
-        deviceFingerprint: config.deviceFingerprint || getDeviceFingerprint(),
-        lang: config.language || 'en',
-        clientVersion: cliVersion,
-        timestamp: new Date().toISOString(),
-        seqRange: { from: baseSeq + 1, to: baseSeq + taggedEntries.length },
-        entries: entriesWithVersion,
-    };
-    try {
-        const url = new URL('/api/icoa/audit', serverUrl).href;
-        const res = await fetch(url, {
-            method: 'POST',
-            headers,
-            body: JSON.stringify(payload),
-            signal: AbortSignal.timeout(10_000),
-        });
-        if (res.ok) {
-            state.lastSyncedLine = allLines.length;
-            state.lastSyncAt = new Date().toISOString();
-            state.syncCount++;
-            state.seq = baseSeq + taggedEntries.length;
-            saveSyncState(state);
-        }
-        else {
-            state.failCount++;
-            saveSyncState(state);
-        }
-    }
-    catch {
-        // Silent fail — network issues shouldn't break the CLI
-        state.failCount++;
-        saveSyncState(state);
-    }
-}
-export function startLogSync() {
-    setTimeout(() => syncLogs(), 5_000);
-    syncTimer = setInterval(() => syncLogs(), SYNC_INTERVAL);
-}
-export function stopLogSync() {
-    if (syncTimer) {
-        clearInterval(syncTimer);
-        syncTimer = null;
-    }
-    // Final sync before exit
-    syncLogs();
-}
+import{readFileSync as t,existsSync as n,writeFileSync as e,chmodSync as s}from"node:fs";import{join as i}from"node:path";import{getIcoaDir as o,getConfig as c}from"./config.js";import{getDeviceFingerprint as r}from"./access.js";import{getCliVersion as a}from"./version.js";const l=()=>i(o(),"sync-state.json");let u=null;function f(t){const n=l();e(n,JSON.stringify(t,null,2));try{s(n,384)}catch{}}async function y(){const e=c(),s=e.ctfdUrl||"https://practice.icoa2026.au",u=i(o(),"session.log");if(!n(u))return;const y=function(){const e=l();if(!n(e))return{lastSyncedLine:0,lastSyncAt:null,syncCount:0,failCount:0,seq:0};try{const n=JSON.parse(t(e,"utf-8"));return{lastSyncedLine:n.lastSyncedLine??0,lastSyncAt:n.lastSyncAt??null,syncCount:n.syncCount??0,failCount:n.failCount??0,seq:n.seq??0}}catch{return{lastSyncedLine:0,lastSyncAt:null,syncCount:0,failCount:0,seq:0}}}(),d=t(u,"utf-8").trim().split("\n").filter(Boolean);d.length<y.lastSyncedLine&&(y.lastSyncedLine=0);const p=d.slice(y.lastSyncedLine);if(0===p.length)return;const S={"Content-Type":"application/json"};let m;if(e.token)S.Authorization=`Token ${e.token}`,m=`user:${e.userId??"unknown"}`;else{const t=e.deviceFingerprint||r();S["X-Device-Fingerprint"]=t,m=`demo:${t.slice(0,12)}`}const g=y.seq??0,h=p.map((t,n)=>{let e;try{e=JSON.parse(t)}catch{e={raw:t}}return{...e,_seq:g+n+1}}),C=a(),I=h.map(t=>({...t,_cli:C})),L={identity:m,userId:e.userId,userName:e.userName,teamId:e.teamId,sessionId:e.sessionId,deviceFingerprint:e.deviceFingerprint||r(),lang:e.language||"en",clientVersion:C,timestamp:(new Date).toISOString(),seqRange:{from:g+1,to:g+h.length},entries:I};try{const t=new URL("/api/icoa/audit",s).href;(await fetch(t,{method:"POST",headers:S,body:JSON.stringify(L),signal:AbortSignal.timeout(1e4)})).ok?(y.lastSyncedLine=d.length,y.lastSyncAt=(new Date).toISOString(),y.syncCount++,y.seq=g+h.length,f(y)):(y.failCount++,f(y))}catch{y.failCount++,f(y)}}export function startLogSync(){setTimeout(()=>y(),5e3),u=setInterval(()=>y(),3e4)}export function stopLogSync(){u&&(clearInterval(u),u=null),y()}

package/dist/lib/logger.js

@@ -1,49 +1 @@
-import { appendFileSync, readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { getConfig, getIcoaDir } from './config.js';
-function getLogPath() {
-    return join(getIcoaDir(), 'session.log');
-}
-function logEntry(entry) {
-    try {
-        appendFileSync(getLogPath(), `${JSON.stringify(entry)}\n`);
-    }
-    catch {
-        // Silently fail — logging should never break the CLI
-    }
-}
-export function logCommand(command) {
-    const config = getConfig();
-    logEntry({
-        timestamp: new Date().toISOString(),
-        level: 'command',
-        input: command,
-        sessionId: config.sessionId,
-    });
-}
-export function logSubmission(challengeId, flag) {
-    const config = getConfig();
-    logEntry({
-        timestamp: new Date().toISOString(),
-        level: 'submit',
-        input: flag,
-        challengeId,
-        sessionId: config.sessionId,
-    });
-}
-export function getSessionLog() {
-    const logPath = getLogPath();
-    if (!existsSync(logPath))
-        return [];
-    try {
-        const raw = readFileSync(logPath, 'utf-8');
-        return raw
-            .trim()
-            .split('\n')
-            .filter(Boolean)
-            .map((line) => JSON.parse(line));
-    }
-    catch {
-        return [];
-    }
-}
+import{appendFileSync as t,readFileSync as n,existsSync as o}from"node:fs";import{join as e}from"node:path";import{getConfig as i,getIcoaDir as s}from"./config.js";function r(){return e(s(),"session.log")}function m(n){try{t(r(),`${JSON.stringify(n)}\n`)}catch{}}export function logCommand(t){const n=i();m({timestamp:(new Date).toISOString(),level:"command",input:t,sessionId:n.sessionId})}export function logSubmission(t,n){const o=i();m({timestamp:(new Date).toISOString(),level:"submit",input:n,challengeId:t,sessionId:o.sessionId})}export function getSessionLog(){const t=r();if(!o(t))return[];try{return n(t,"utf-8").trim().split("\n").filter(Boolean).map(t=>JSON.parse(t))}catch{return[]}}

package/dist/lib/open-file.js

@@ -1,55 +1 @@
-/**
- * Cross-platform "open this file in the OS default app".
- *
- * Pure core `openFileCommand(path, platform, env)` → {cmd, args} is unit-testable
- * across all four baseline targets without spawning; `openFile(path)` is the thin
- * spawn wrapper. Extracted from arena.ts so `ipynb` (auto-open saved figures) and
- * `arena` (open the downloaded baseline) share ONE opener — notably the WSL branch:
- * xdg-open silently fails under WSL, so the file must be handed to Windows via
- * explorer.exe — AND the Linux path must be translated to a Windows path first
- * (explorer.exe can't resolve `/home/...`), else it "opens" nothing.
- */
-import { spawn, execFileSync } from 'node:child_process';
-/** True when running under WSL. WSL2 sets WSL_DISTRO_NAME; WSL_INTEROP is also
- *  present and survives some shells/sudo invocations that drop WSL_DISTRO_NAME. */
-function isWsl(env) {
-    return !!(env.WSL_DISTRO_NAME || env.WSL_INTEROP);
-}
-/** Decide the OS "open" command for `path`. Pure — platform + env are injected
- *  so every baseline target (macOS / Linux / WSL / Windows) is unit-testable. */
-export function openFileCommand(path, platform = process.platform, env = process.env) {
-    if (platform === 'darwin')
-        return { cmd: 'open', args: [path] };
-    if (platform === 'win32')
-        return { cmd: 'cmd.exe', args: ['/c', 'start', '', path] };
-    // WSL has no Linux GUI — xdg-open silently fails. Hand the file to Windows.
-    if (isWsl(env))
-        return { cmd: 'explorer.exe', args: [path] };
-    return { cmd: 'xdg-open', args: [path] };
-}
-/** Open `path` in the OS default app (detached). Returns false if spawn throws. */
-export function openFile(path) {
-    const { cmd, args } = openFileCommand(path);
-    let finalArgs = args;
-    // explorer.exe cannot resolve a Linux path (`/home/...`). Translate it to a
-    // Windows path (`\\wsl.localhost\<distro>\...`) via wslpath so the Windows
-    // default app actually opens the file. Without this, view "succeeds" silently
-    // but nothing appears — the WSL bug students hit.
-    if (cmd === 'explorer.exe') {
-        try {
-            const win = execFileSync('wslpath', ['-w', path], { encoding: 'utf-8' }).trim();
-            if (win)
-                finalArgs = [win];
-        }
-        catch {
-            /* wslpath unavailable — fall back to the raw path */
-        }
-    }
-    try {
-        spawn(cmd, finalArgs, { stdio: 'ignore', detached: true }).unref();
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
+import{spawn as e,execFileSync as r}from"node:child_process";export function openFileCommand(e,r=process.platform,n=process.env){return"darwin"===r?{cmd:"open",args:[e]}:"win32"===r?{cmd:"cmd.exe",args:["/c","start","",e]}:function(e){return!(!e.WSL_DISTRO_NAME&&!e.WSL_INTEROP)}(n)?{cmd:"explorer.exe",args:[e]}:{cmd:"xdg-open",args:[e]}}export function openFile(n){const{cmd:o,args:t}=openFileCommand(n);let c=t;if("explorer.exe"===o)try{const e=r("wslpath",["-w",n],{encoding:"utf-8"}).trim();e&&(c=[e])}catch{}try{return e(o,c,{stdio:"ignore",detached:!0}).unref(),!0}catch{return!1}}

package/dist/lib/paper-upgrade.js

@@ -1,119 +1 @@
-/**
- * Paper C → Paper B upgrade prompt.
- *
- * Shown after a successful Paper C submission. Paper C is the K-12 entry
- * funnel (MCQ only, no tools). Paper B is the next step — adds AI4CTF
- * and CTF4AI practical challenges for 150-point total. The upgrade path
- * depends on which platform the student is on.
- *
- * Policy:
- * - Only triggered after Paper C submission (examId ends in `-c` or
- *   starts with a country code + `-2026-c`).
- * - Only triggered if student passed. Students who failed C should
- *   retry C before being pushed toward a harder paper.
- * - Always points at https://icoa2026.au/selectionguide/ for detailed
- *   platform-specific install instructions, so the CLI copy stays
- *   concise and the canonical guide lives in one place.
- * - Never prescribes a token — students must request one from their
- *   organizer. This prevents the CLI from implying self-service token
- *   issuance.
- */
-import chalk from 'chalk';
-import { isNativeWindowsCmd, isInWSL, hasPython } from './platform.js';
-/**
- * True when the just-submitted exam is a C paper (MCQ entry funnel).
- * Matches `ua-2026-c`, `pe-2026-c`, `cn-2026-c`, etc. Case-insensitive.
- */
-function isCPaper(examId) {
-    if (!examId)
-        return false;
-    return /-2026-c$/i.test(examId.trim());
-}
-/**
- * Renders the C→B upgrade prompt to stdout. No-op if conditions aren't met.
- *
- * @param examId   The submitted exam ID (from state.session.examId before clear)
- * @param passed   Whether the student met the passing bar
- */
-export function showCToBUpgradePrompt(examId, passed) {
-    if (!isCPaper(examId))
-        return;
-    if (!passed)
-        return;
-    const onCmd = isNativeWindowsCmd();
-    const onWSL = isInWSL();
-    const pyReady = hasPython();
-    console.log(chalk.cyan('  ─────────────────────────────────────────────'));
-    console.log();
-    console.log(chalk.bold.white('  ★ Ready for more? Paper B — K-12 with AI'));
-    console.log();
-    console.log(chalk.gray('  Paper B adds ') +
-        chalk.white('AI4CTF') +
-        chalk.gray(' (chat with AI to find hidden flags) and ') +
-        chalk.white('CTF4AI') +
-        chalk.gray(' (break AI security).'));
-    console.log(chalk.gray('  150 points total · 90 minutes · same command interface you already know.'));
-    console.log();
-    if (onCmd) {
-        // Windows cmd / PowerShell — needs WSL2 path for full Paper B
-        console.log(chalk.bold.white('  To take Paper B on Windows, install WSL2 + Ubuntu 22:'));
-        console.log();
-        console.log(chalk.white('    1. Open PowerShell as Administrator'));
-        console.log(chalk.gray('       (right-click PowerShell → "Run as administrator")'));
-        console.log(chalk.white('    2. Run: ') + chalk.cyan('wsl --install -d Ubuntu-22.04'));
-        console.log(chalk.white('    3. Reboot when prompted, create a Linux username + password'));
-        console.log(chalk.white('    4. Inside Ubuntu, install Node.js 22 and this CLI:'));
-        console.log(chalk.gray('         ') + chalk.cyan('curl -fsSL https://deb.nodesource.com/setup_22.x | sudo bash -'));
-        console.log(chalk.gray('         ') + chalk.cyan('sudo apt install -y nodejs'));
-        console.log(chalk.gray('         ') + chalk.cyan('sudo npm install -g icoa-cli'));
-        console.log();
-        console.log(chalk.gray('  Setup takes 30-60 min the first time. You only do this once.'));
-    }
-    else if (onWSL) {
-        // Already on WSL2 — just need Python for practicals
-        console.log(chalk.bold.white('  You are on WSL2 — your setup is almost ready:'));
-        console.log();
-        if (!pyReady) {
-            console.log(chalk.white('    Install Python 3 (for Paper B practical questions):'));
-            console.log(chalk.gray('      ') + chalk.cyan('sudo apt install -y python3 python3-pip'));
-            console.log();
-        }
-        else {
-            console.log(chalk.green('    ✓ Python 3 already installed. You are ready.'));
-            console.log();
-        }
-    }
-    else if (process.platform === 'darwin') {
-        // macOS
-        console.log(chalk.bold.white('  On macOS, install Python 3 for Paper B practicals:'));
-        console.log();
-        console.log(chalk.white('    With Homebrew:'));
-        console.log(chalk.gray('      ') + chalk.cyan('brew install python@3.12'));
-        console.log();
-        console.log(chalk.white('    Without Homebrew: download from ') + chalk.cyan.underline('https://python.org'));
-        if (pyReady) {
-            console.log();
-            console.log(chalk.green('    ✓ Python 3 already detected. You are ready.'));
-        }
-        console.log();
-    }
-    else {
-        // Linux native (not WSL)
-        console.log(chalk.bold.white('  On Linux, install Python 3 for Paper B practicals:'));
-        console.log();
-        console.log(chalk.white('    Ubuntu / Debian:'));
-        console.log(chalk.gray('      ') + chalk.cyan('sudo apt install -y python3 python3-pip'));
-        console.log(chalk.white('    Fedora / RHEL:'));
-        console.log(chalk.gray('      ') + chalk.cyan('sudo dnf install -y python3 python3-pip'));
-        if (pyReady) {
-            console.log();
-            console.log(chalk.green('    ✓ Python 3 already detected. You are ready.'));
-        }
-        console.log();
-    }
-    console.log(chalk.bold.white('  Then get a Paper B token from your organizer.'));
-    console.log(chalk.gray('  Each token is one-shot and bound to one device.'));
-    console.log();
-    console.log(chalk.gray('  Detailed step-by-step guide: ') + chalk.cyan.underline('https://icoa2026.au/selectionguide/'));
-    console.log();
-}
+import chalk from"chalk";import{isNativeWindowsCmd as o,isInWSL as e,hasPython as l}from"./platform.js";export function showCToBUpgradePrompt(n,t){if(!function(o){return!!o&&/-2026-c$/i.test(o.trim())}(n))return;if(!t)return;const s=o(),a=e(),r=l();console.log(chalk.cyan("  ─────────────────────────────────────────────")),console.log(),console.log(chalk.bold.white("  ★ Ready for more? Paper B — K-12 with AI")),console.log(),console.log(chalk.gray("  Paper B adds ")+chalk.white("AI4CTF")+chalk.gray(" (chat with AI to find hidden flags) and ")+chalk.white("CTF4AI")+chalk.gray(" (break AI security).")),console.log(chalk.gray("  150 points total · 90 minutes · same command interface you already know.")),console.log(),s?(console.log(chalk.bold.white("  To take Paper B on Windows, install WSL2 + Ubuntu 22:")),console.log(),console.log(chalk.white("    1. Open PowerShell as Administrator")),console.log(chalk.gray('       (right-click PowerShell → "Run as administrator")')),console.log(chalk.white("    2. Run: ")+chalk.cyan("wsl --install -d Ubuntu-22.04")),console.log(chalk.white("    3. Reboot when prompted, create a Linux username + password")),console.log(chalk.white("    4. Inside Ubuntu, install Node.js 22 and this CLI:")),console.log(chalk.gray("         ")+chalk.cyan("curl -fsSL https://deb.nodesource.com/setup_22.x | sudo bash -")),console.log(chalk.gray("         ")+chalk.cyan("sudo apt install -y nodejs")),console.log(chalk.gray("         ")+chalk.cyan("sudo npm install -g icoa-cli")),console.log(),console.log(chalk.gray("  Setup takes 30-60 min the first time. You only do this once."))):a?(console.log(chalk.bold.white("  You are on WSL2 — your setup is almost ready:")),console.log(),r?(console.log(chalk.green("    ✓ Python 3 already installed. You are ready.")),console.log()):(console.log(chalk.white("    Install Python 3 (for Paper B practical questions):")),console.log(chalk.gray("      ")+chalk.cyan("sudo apt install -y python3 python3-pip")),console.log())):"darwin"===process.platform?(console.log(chalk.bold.white("  On macOS, install Python 3 for Paper B practicals:")),console.log(),console.log(chalk.white("    With Homebrew:")),console.log(chalk.gray("      ")+chalk.cyan("brew install python@3.12")),console.log(),console.log(chalk.white("    Without Homebrew: download from ")+chalk.cyan.underline("https://python.org")),r&&(console.log(),console.log(chalk.green("    ✓ Python 3 already detected. You are ready."))),console.log()):(console.log(chalk.bold.white("  On Linux, install Python 3 for Paper B practicals:")),console.log(),console.log(chalk.white("    Ubuntu / Debian:")),console.log(chalk.gray("      ")+chalk.cyan("sudo apt install -y python3 python3-pip")),console.log(chalk.white("    Fedora / RHEL:")),console.log(chalk.gray("      ")+chalk.cyan("sudo dnf install -y python3 python3-pip")),r&&(console.log(),console.log(chalk.green("    ✓ Python 3 already detected. You are ready."))),console.log()),console.log(chalk.bold.white("  Then get a Paper B token from your organizer.")),console.log(chalk.gray("  Each token is one-shot and bound to one device.")),console.log(),console.log(chalk.gray("  Detailed step-by-step guide: ")+chalk.cyan.underline("https://icoa2026.au/selectionguide/")),console.log()}

package/dist/lib/render-card.js

@@ -1,112 +1 @@
-/**
- * Chart rendering helper — pulls ASCII chart art out of a Curriculum.charts
- * lookup and prints it between a card's title and body.
- *
- * Design contract: [[reference-chart-lang-neutral]]
- *   - Fixed slot order:   title  →  charts  →  body
- *   - Charts are English-only and never translated; 22 languages share one art.
- *   - Card stores `chart_ids: string[]`; art lives in `curriculum.charts[id]`.
- *
- * Capability picker (pilot scope = T0 / T1):
- *   - T0   pure-ASCII fallback   — picked when LANG=C / non-UTF-8 / chart wider than
- *                                  available columns / explicit user opt-out
- *   - T1   Unicode-safe default  — used on the 4 baseline terminals (macOS Terminal,
- *                                  gnome-terminal, WSL2 Windows Terminal, Chromebook
- *                                  Crostini); see CLAUDE.md cross-platform baseline.
- *
- * Output respects the learn-render frame style: each line gets a `│   ` left
- * border so charts visually sit inside the same three-sided frame as body text.
- */
-import chalk from 'chalk';
-export function detectCaps() {
-    const cols = process.stdout.columns || 80;
-    const lang = process.env.LANG || process.env.LC_ALL || '';
-    const utf8 = /utf-?8/i.test(lang) || lang === '' || lang === 'C.UTF-8';
-    // ICOA_RENDER=ascii forces T0 (also documented in [[reference-rendering-tiers]]).
-    const override = (process.env.ICOA_RENDER || '').toLowerCase();
-    if (override === 'ascii' || lang === 'C' || lang === 'POSIX' || !utf8) {
-        return { tier: 'T0', cols, utf8: false };
-    }
-    return { tier: 'T1', cols, utf8 };
-}
-function pickArt(chart, caps) {
-    // Width fit: if T1 art is wider than the terminal, fall back to T0 — same
-    // idea as the spike-rich-display fallback.
-    if (caps.tier === 'T0' && chart.art_t0)
-        return chart.art_t0;
-    if (chart.width_cols && chart.width_cols > caps.cols - 6 && chart.art_t0) {
-        return chart.art_t0;
-    }
-    return chart.art ?? chart.art_t0 ?? '';
-}
-// Resolve a (possibly dotted, e.g. "bold.green") chalk colour spec into a
-// styling function. Falls back to gray for unknown specs.
-function chalkChain(spec) {
-    try {
-        const fn = spec.split('.').reduce((acc, part) => acc[part], chalk);
-        return typeof fn === 'function' ? fn : chalk.gray;
-    }
-    catch {
-        return chalk.gray;
-    }
-}
-// Apply a char→colour map to one art line. Unmapped chars (and spaces) stay
-// gray — matches the pre-color_map look. ANSI escapes are zero-width so this
-// never disturbs alignment. Caller gates on chalk.level > 0.
-function colorizeArtLine(line, colorMap) {
-    let out = '';
-    for (const ch of line) {
-        const spec = ch === ' ' ? undefined : colorMap[ch];
-        out += spec ? chalkChain(spec)(ch) : chalk.gray(ch);
-    }
-    return out;
-}
-/**
- * Render chart art for a list of chart_ids. Each chart prints on its own
- * "block" with a blank separator line above. Lines are left-padded with the
- * three-sided-frame left bar to match learn-render body style.
- *
- * Pass `frameLeft = false` for standalone (non-card-frame) contexts.
- */
-export function renderCharts(chartIds, charts, caps = detectCaps(), opts = {}) {
-    if (!chartIds || chartIds.length === 0)
-        return;
-    if (!charts)
-        return;
-    const frameLeft = opts.frameLeft !== false;
-    const leftBar = frameLeft ? chalk.cyan('  │ ') : '  ';
-    const leftBarEmpty = frameLeft ? chalk.cyan('  │') : '';
-    let rendered = 0;
-    for (const id of chartIds) {
-        const chart = charts[id];
-        if (!chart)
-            continue; // silent miss — server denormalisation may have lagged
-        // Code-as-insight (6th genre): monospace CODE-LOCK render — cyan, no wrap,
-        // no width-fit (≤~20 ASCII lines, English comments → renders everywhere).
-        if (chart.type === 'code') {
-            const code = chart.code ?? '';
-            if (code.trim() === '')
-                continue;
-            console.log(leftBarEmpty);
-            for (const line of code.split('\n')) {
-                console.log(leftBar + chalk.cyan(line));
-            }
-            rendered++;
-            continue;
-        }
-        // Chart genres: pick T0/T1 art, then optionally apply color_map (render
-        // layer only, after selection — escapes stay zero-width). Mono terminals
-        // (chalk.level === 0, e.g. NO_COLOR / piped) skip colour automatically.
-        const art = pickArt(chart, caps);
-        if (art === '')
-            continue;
-        const useColor = chalk.level > 0 && chart.color_map && Object.keys(chart.color_map).length > 0;
-        console.log(leftBarEmpty); // blank line above each chart
-        for (const line of art.split('\n')) {
-            console.log(leftBar + (useColor ? colorizeArtLine(line, chart.color_map) : chalk.gray(line)));
-        }
-        rendered++;
-    }
-    if (rendered > 0)
-        console.log(leftBarEmpty); // single trailing blank
-}
+import chalk from"chalk";export function detectCaps(){const t=process.stdout.columns||80,o=process.env.LANG||process.env.LC_ALL||"",n=/utf-?8/i.test(o)||""===o||"C.UTF-8"===o;return"ascii"!==(process.env.ICOA_RENDER||"").toLowerCase()&&"C"!==o&&"POSIX"!==o&&n?{tier:"T1",cols:t,utf8:n}:{tier:"T0",cols:t,utf8:!1}}function t(t,o){return"T0"===o.tier&&t.art_t0||t.width_cols&&t.width_cols>o.cols-6&&t.art_t0?t.art_t0:t.art??t.art_t0??""}function o(t){try{const o=t.split(".").reduce((t,o)=>t[o],chalk);return"function"==typeof o?o:chalk.gray}catch{return chalk.gray}}function n(t,n){let c="";for(const e of t){const t=" "===e?void 0:n[e];c+=t?o(t)(e):chalk.gray(e)}return c}export function renderCharts(o,c,e=detectCaps(),r={}){if(!o||0===o.length)return;if(!c)return;const s=!1!==r.frameLeft,i=s?chalk.cyan("  │ "):"  ",l=s?chalk.cyan("  │"):"";let f=0;for(const r of o){const o=c[r];if(!o)continue;if("code"===o.type){const t=o.code??"";if(""===t.trim())continue;console.log(l);for(const o of t.split("\n"))console.log(i+chalk.cyan(o));f++;continue}const s=t(o,e);if(""===s)continue;const a=chalk.level>0&&o.color_map&&Object.keys(o.color_map).length>0;console.log(l);for(const t of s.split("\n"))console.log(i+(a?n(t,o.color_map):chalk.gray(t)));f++}f>0&&console.log(l)}

package/dist/lib/repl-asker.js

@@ -1,67 +1 @@
-/**
- * BUG-008-safe `question()`-style asker for standalone Commander sub-flows that
- * are ALSO dispatched bare from inside the main REPL (e.g. `arena`, `eai`).
- *
- * The problem: the main REPL holds a `terminal: true` readline.Interface on
- * process.stdin. A sub-flow that creates its OWN `createInterface` makes a SECOND
- * interface read stdin — both echo every keystroke ("a" → "aa") and both fire
- * 'line'. `pause()` does NOT help (the new rl's constructor calls resume()).
- *
- * The fix (listener-swap, per CLAUDE.md BUG-008): when a main REPL rl exists,
- * REUSE it — detach its 'line' listeners, drive it ourselves question-by-question
- * with one-shot listeners, then restore the saved listeners on close. No second
- * readline is ever created inside the REPL. When there is no main rl (the flow
- * was launched as `icoa <cmd>` from the system shell), create a standalone one.
- *
- * The asker resolves to `null` when the stream closes (EOF / Ctrl-D) so callers
- * can exit cleanly instead of crashing on "readline was closed".
- */
-import { Interface as ReadlineInterface, createInterface } from 'node:readline';
-import { getMainRl } from './main-rl.js';
-export function makeReplAsker() {
-    const mainRl = getMainRl();
-    const usingMainRl = mainRl !== null;
-    const savedMainListeners = usingMainRl
-        ? mainRl.listeners('line').slice()
-        : [];
-    if (usingMainRl)
-        mainRl.removeAllListeners('line');
-    const rl = usingMainRl
-        ? mainRl
-        : createInterface({ input: process.stdin, output: process.stdout });
-    // The main REPL monkey-patches rl.prompt() (src/repl.ts) to force
-    // computePrompt() for any mode it doesn't recognize — which would clobber our
-    // sub-flow prompt, showing e.g. `icoa 2026>` instead of `icoa ctf4eai>`. Swap
-    // in the NATIVE readline prompt for the session so our setPrompt() sticks, and
-    // restore the patched one on close() so the REPL prompt behaves again after.
-    const savedPrompt = usingMainRl ? rl.prompt : null;
-    if (usingMainRl)
-        rl.prompt = ReadlineInterface.prototype.prompt;
-    const ask = (q) => new Promise((resolve) => {
-        const onLine = (line) => {
-            rl.removeListener('close', onClose);
-            resolve(line);
-        };
-        const onClose = () => {
-            rl.removeListener('line', onLine);
-            resolve(null);
-        };
-        rl.once('line', onLine);
-        rl.once('close', onClose);
-        rl.setPrompt(q);
-        rl.prompt();
-    });
-    const close = () => {
-        if (usingMainRl) {
-            if (savedPrompt)
-                mainRl.prompt = savedPrompt;
-            mainRl.removeAllListeners('line');
-            for (const l of savedMainListeners)
-                mainRl.on('line', l);
-        }
-        else {
-            rl.close();
-        }
-    };
-    return { ask, close };
-}
+import{Interface as e,createInterface as o}from"node:readline";import{getMainRl as n}from"./main-rl.js";export function makeReplAsker(){const r=n(),s=null!==r,t=s?r.listeners("line").slice():[];s&&r.removeAllListeners("line");const l=s?r:o({input:process.stdin,output:process.stdout}),i=s?l.prompt:null;return s&&(l.prompt=e.prototype.prompt),{ask:e=>new Promise(o=>{const n=e=>{l.removeListener("close",r),o(e)},r=()=>{l.removeListener("line",n),o(null)};l.once("line",n),l.once("close",r),l.setPrompt(e),l.prompt()}),close:()=>{if(s){i&&(r.prompt=i),r.removeAllListeners("line");for(const e of t)r.on("line",e)}else l.close()}}}