icoa-cli 2.19.357 → 2.19.359

package/dist/commands/files.js

@@ -1,59 +1 @@
-import chalk from 'chalk';
-import { CTFdClient } from '../lib/ctfd-client.js';
-import { getConfig, isConnected } from '../lib/config.js';
-import { challengeDownloadDir } from '../lib/challenge-dir.js';
-import { logCommand } from '../lib/logger.js';
-import { printError, createSpinner } from '../lib/ui.js';
-export function registerFilesCommand(program) {
-    program
-        .command('files <id>')
-        .description('Download challenge files')
-        .action(async (id) => {
-        logCommand(`files ${id}`);
-        const config = getConfig();
-        if (!isConnected()) {
-            printError('Not connected. Run: join <url>');
-            return;
-        }
-        // Session-mode logins store the cookie string in config.token; passing it
-        // as the API token sends `Authorization: Token session=…` → CTFd serves the
-        // login page (HTML) and JSON parsing fails. Split token vs session cookie.
-        const session = config.sessionCookie || '';
-        const token = config.token && !config.token.includes('session=') ? config.token : '';
-        const client = new CTFdClient(config.ctfdUrl, token, session || config.token);
-        const destDir = challengeDownloadDir(id);
-        const spinner = createSpinner('Fetching challenge files...');
-        spinner.start();
-        try {
-            const files = await client.getChallengeFiles(parseInt(id, 10));
-            if (!files || files.length === 0) {
-                spinner.info('No files attached to this challenge.');
-                return;
-            }
-            spinner.text = `Downloading ${files.length} file(s)...`;
-            const downloaded = [];
-            for (const filePath of files) {
-                try {
-                    const dest = await client.downloadFile(filePath, destDir);
-                    downloaded.push(dest);
-                }
-                catch (_err) {
-                    spinner.warn(`Failed to download: ${filePath}`);
-                }
-            }
-            spinner.succeed(`Downloaded ${downloaded.length} file(s)`);
-            console.log(chalk.gray(`  Location: ${destDir}`));
-            for (const f of downloaded) {
-                console.log(chalk.gray(`    → ${f.split('/').pop()}`));
-            }
-            const firstName = downloaded.length ? downloaded[0].split('/').pop() : '<file>';
-            console.log(chalk.gray(`  Run tools on them directly, e.g. ${chalk.white(`file ${id}/${firstName}`)}`));
-            console.log(chalk.gray(`  Open an image/audio file with: ${chalk.white(`view ${id} <file>`)}`));
-            console.log();
-        }
-        catch (err) {
-            spinner.fail('Failed to download files');
-            printError(err.message);
-        }
-    });
-}
+import chalk from"chalk";import{CTFdClient as o}from"../lib/ctfd-client.js";import{getConfig as e,isConnected as i}from"../lib/config.js";import{challengeDownloadDir as l}from"../lib/challenge-dir.js";import{logCommand as t}from"../lib/logger.js";import{printError as n,createSpinner as s}from"../lib/ui.js";export function registerFilesCommand(c){c.command("files <id>").description("Download challenge files").action(async c=>{t(`files ${c}`);const a=e();if(!i())return void n("Not connected. Run: join <url>");const r=a.sessionCookie||"",f=a.token&&!a.token.includes("session=")?a.token:"",g=new o(a.ctfdUrl,f,r||a.token),d=l(c),h=s("Fetching challenge files...");h.start();try{const o=await g.getChallengeFiles(parseInt(c,10));if(!o||0===o.length)return void h.info("No files attached to this challenge.");h.text=`Downloading ${o.length} file(s)...`;const e=[];for(const i of o)try{const o=await g.downloadFile(i,d);e.push(o)}catch(o){h.warn(`Failed to download: ${i}`)}h.succeed(`Downloaded ${e.length} file(s)`),console.log(chalk.gray(`  Location: ${d}`));for(const o of e)console.log(chalk.gray(`    → ${o.split("/").pop()}`));const i=e.length?e[0].split("/").pop():"<file>";console.log(chalk.gray(`  Run tools on them directly, e.g. ${chalk.white(`file ${c}/${i}`)}`)),console.log(chalk.gray(`  Open an image/audio file with: ${chalk.white(`view ${c} <file>`)}`)),console.log()}catch(o){h.fail("Failed to download files"),n(o.message)}})}

package/dist/commands/lang.js

@@ -1,202 +1 @@
-import chalk from 'chalk';
-import { getConfig, saveConfig } from '../lib/config.js';
-import { COUNTRY_LANG } from '../lib/country-lang.js';
-import { getExamState, getRealExamState } from '../lib/exam-state.js';
-import { logCommand } from '../lib/logger.js';
-import { ensureLangCache } from '../lib/translations-fetcher.js';
-import { loadUiPack } from '../lib/i18n.js';
-import { printSuccess, printError, printInfo } from '../lib/ui.js';
-import { SUPPORTED_LANGUAGES } from '../types/index.js';
-const LANG_NAMES = {
-    en: 'English',
-    zh: '中文 (Chinese)',
-    ja: '日本語 (Japanese)',
-    ko: '한국어 (Korean)',
-    es: 'Español (Spanish)',
-    ar: 'العربية (Arabic)',
-    fr: 'Français (French)',
-    pt: 'Português (Portuguese)',
-    ru: 'Русский (Russian)',
-    hi: 'हिन्दी (Hindi)',
-    de: 'Deutsch (German)',
-    id: 'Bahasa (Indonesian)',
-    th: 'ไทย (Thai)',
-    vi: 'Tiếng Việt (Vietnamese)',
-    tr: 'Türkçe (Turkish)',
-    uk: 'Українська (Ukrainian)',
-    ht: 'Kreyòl (Haitian Creole)',
-    sw: 'Kiswahili (Swahili)',
-    uz: 'Oʻzbek (Uzbek)',
-    lo: 'ລາວ (Lao)',
-};
-export function registerLangCommand(program) {
-    program
-        .command('lang [code]')
-        .description('Switch display language')
-        .action(async (code) => {
-        logCommand(`lang ${code || ''}`);
-        if (!code) {
-            const config = getConfig();
-            printInfo(`Current language: ${chalk.white(LANG_NAMES[config.language] || config.language)}`);
-            console.log();
-            console.log(chalk.gray('  Supported languages:'));
-            for (const lang of SUPPORTED_LANGUAGES) {
-                const current = config.language === lang ? chalk.yellow(' ← current') : '';
-                console.log(`    ${chalk.white(lang)}  ${LANG_NAMES[lang]}${current}`);
-            }
-            console.log();
-            console.log(chalk.gray('  Switch now: ') +
-                chalk.cyan('lang <code>') +
-                chalk.gray('   (e.g. ') +
-                chalk.cyan('lang es') +
-                chalk.gray(')'));
-            console.log(chalk.gray('  No "back" needed — you are still at the ') + chalk.cyan('icoa>') + chalk.gray(' prompt.'));
-            console.log();
-            return;
-        }
-        if (!SUPPORTED_LANGUAGES.includes(code)) {
-            printError(`Unsupported language: ${code}`);
-            const supported = SUPPORTED_LANGUAGES.map((l) => `${l} (${LANG_NAMES[l]?.split(' ')[0] || l})`).join(', ');
-            printInfo(`Supported: ${supported}`);
-            return;
-        }
-        // Country lock: during an active real exam, only allow English or the
-        // language auto-detected from the token's country prefix. Demo exams
-        // are not affected (getRealExamState returns null for demos).
-        const realExam = getRealExamState();
-        const examToken = realExam?.session?.token;
-        if (examToken) {
-            const prefix = examToken.substring(0, 2).toUpperCase();
-            const expectedLang = COUNTRY_LANG[prefix];
-            if (expectedLang && code !== expectedLang && code !== 'en') {
-                printError(`Language is locked during your exam.`);
-                printInfo(`Your token (${prefix}xxx) supports two languages: ` +
-                    `${chalk.cyan('en')} (English) or ${chalk.cyan(expectedLang)} (${LANG_NAMES[expectedLang] || expectedLang}).`);
-                printInfo(`To change language, finish or quit the current exam first.`);
-                return;
-            }
-        }
-        saveConfig({ language: code });
-        printSuccess(`Language set to: ${LANG_NAMES[code] || code}`);
-        // Fetch the translation pack on first switch to this language (no-op
-        // when already cached or when code === 'en'). Non-fatal if it fails;
-        // per-question lookups will fall back to the on-the-fly translator.
-        await ensureLangCache(code);
-        // Apply the freshly-fetched UI pack immediately (the pack's ui.json now
-        // drives interface strings via t(); see src/lib/i18n.ts lazy-load).
-        loadUiPack(code);
-        // If demo in progress, re-translate each drawn question in place using
-        // sourceNumber + sourceOrder so the user's answers and option positions are
-        // preserved. If an older state lacks these fields (pre-v2.19.22), fall back
-        // to restart-with-fresh-pick so nothing crashes.
-        const state = getExamState();
-        if (state && state.session.examId === 'demo-free') {
-            try {
-                const { pickDemoQuestions, getLocalizedDemoSession, getLocalizedDemoQuestions, getLocalizedExplanations, DEMO_PICK_SIZE, } = await import('../lib/demo-exam.js');
-                const { saveExamState } = await import('../lib/exam-state.js');
-                const canRetranslate = state.questions.every((q) => q.sourceNumber != null && Array.isArray(q.sourceOrder) && q.sourceOrder.length === 4);
-                if (canRetranslate) {
-                    const pool = getLocalizedDemoQuestions();
-                    const explanations = getLocalizedExplanations();
-                    state.questions = state.questions.map((q) => {
-                        const src = pool.find((p) => p.number === q.sourceNumber);
-                        if (!src || !q.sourceOrder)
-                            return q;
-                        return {
-                            ...q,
-                            text: src.text,
-                            category: src.category,
-                            options: {
-                                A: src.options[q.sourceOrder[0]],
-                                B: src.options[q.sourceOrder[1]],
-                                C: src.options[q.sourceOrder[2]],
-                                D: src.options[q.sourceOrder[3]],
-                            },
-                            explanation: explanations[q.sourceNumber],
-                        };
-                    });
-                    state.session.examName = getLocalizedDemoSession().examName;
-                    saveExamState(state);
-                    const currentQ = state._lastQ || 1;
-                    console.log();
-                    console.log(chalk.green(`  Demo continues in ${LANG_NAMES[code] || code}. Your progress is kept.`));
-                    console.log(chalk.white(`  Resume: exam q ${currentQ}`));
-                }
-                else {
-                    // Legacy state from before v2.19.22 — safely reset
-                    state.questions = pickDemoQuestions(DEMO_PICK_SIZE);
-                    state.answers = {};
-                    state.session.examName = getLocalizedDemoSession().examName;
-                    state.session.startedAt = new Date().toISOString();
-                    state._lastQ = 1;
-                    saveExamState(state);
-                    console.log();
-                    console.log(chalk.green(`  Demo restarted in ${LANG_NAMES[code] || code}.`));
-                    console.log(chalk.white('  Type: exam q 1'));
-                }
-            }
-            catch {
-                console.log(chalk.gray('  Language changed. Type: demo'));
-            }
-        }
-        else if (state && state.session.token) {
-            // Real exam with token: re-fetch questions in new language from server
-            try {
-                const { getConfig } = await import('../lib/config.js');
-                const { saveExamState } = await import('../lib/exam-state.js');
-                const { getDeviceFingerprint } = await import('../lib/access.js');
-                const config = getConfig();
-                const serverUrl = config.ctfdUrl || 'https://practice.icoa2026.au';
-                const token = state.session.token;
-                const res = await fetch(`${serverUrl}/api/icoa/exam-token`, {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ token, deviceHash: getDeviceFingerprint(), lang: code }),
-                    signal: AbortSignal.timeout(10000),
-                });
-                if (res.ok) {
-                    const json = (await res.json());
-                    const newQuestions = json.data.questions;
-                    // Keep answers, interactions, aiUsage — only update question text
-                    state.questions = newQuestions;
-                    saveExamState(state);
-                    const currentQ = state._lastQ || 1;
-                    console.log();
-                    printSuccess(`Exam questions updated to ${LANG_NAMES[code] || code}. Your answers are kept.`);
-                    console.log(chalk.white(`  Resume: exam q ${currentQ}`));
-                }
-                else if (res.status === 429) {
-                    // V8 anti-bruteforce cooldown — token is alive, just throttled.
-                    // Do NOT clear local state, or contestants lose their real session
-                    // because the server briefly rate-limited a language switch.
-                    const errBody = (await res.json().catch(() => null));
-                    const m = errBody?.message?.match(/(\d+)\s*s/i);
-                    const waitS = m ? parseInt(m[1], 10) : 60;
-                    console.log();
-                    printInfo(`Server rate-limited that token (wait ~${waitS}s).`);
-                    printInfo(`Your exam session is intact — try ${chalk.cyan(`lang ${code}`)} again after the cooldown.`);
-                }
-                else {
-                    // Other non-200: token revoked / submitted / window closed. Auto-
-                    // clear the dead local session so contestants never need to learn
-                    // the hidden `exam reset` command — they just retype their token.
-                    const { clearExamState } = await import('../lib/exam-state.js');
-                    clearExamState();
-                    console.log();
-                    console.log(chalk.green('  ✓ Old session record cleared — your scores are safe.'));
-                    console.log(chalk.gray('  To start (or resume) your exam, type your token:'));
-                    console.log(chalk.gray('    → ') + chalk.bold.cyan('exam <your-token>'));
-                }
-            }
-            catch {
-                console.log(chalk.yellow('  Could not reach server. Language changed for UI only.'));
-            }
-        }
-        else if (state) {
-            const currentQ = state._lastQ || 1;
-            console.log();
-            console.log(chalk.gray(`  Exam in progress — resuming Q${currentQ}:`));
-            console.log(chalk.white(`  Type: exam q ${currentQ}`));
-        }
-    });
-}
+import chalk from"chalk";import{getConfig as e,saveConfig as o}from"../lib/config.js";import{COUNTRY_LANG as s}from"../lib/country-lang.js";import{getExamState as a,getRealExamState as t}from"../lib/exam-state.js";import{logCommand as n}from"../lib/logger.js";import{ensureLangCache as r}from"../lib/translations-fetcher.js";import{loadUiPack as i}from"../lib/i18n.js";import{printSuccess as l,printError as c,printInfo as g}from"../lib/ui.js";import{SUPPORTED_LANGUAGES as u}from"../types/index.js";const m={en:"English",zh:"中文 (Chinese)",ja:"日本語 (Japanese)",ko:"한국어 (Korean)",es:"Español (Spanish)",ar:"العربية (Arabic)",fr:"Français (French)",pt:"Português (Portuguese)",ru:"Русский (Russian)",hi:"हिन्दी (Hindi)",de:"Deutsch (German)",id:"Bahasa (Indonesian)",th:"ไทย (Thai)",vi:"Tiếng Việt (Vietnamese)",tr:"Türkçe (Turkish)",uk:"Українська (Ukrainian)",ht:"Kreyòl (Haitian Creole)",sw:"Kiswahili (Swahili)",uz:"Oʻzbek (Uzbek)",lo:"ລາວ (Lao)"};export function registerLangCommand(p){p.command("lang [code]").description("Switch display language").action(async p=>{if(n(`lang ${p||""}`),!p){const o=e();g(`Current language: ${chalk.white(m[o.language]||o.language)}`),console.log(),console.log(chalk.gray("  Supported languages:"));for(const e of u){const s=o.language===e?chalk.yellow(" ← current"):"";console.log(`    ${chalk.white(e)}  ${m[e]}${s}`)}return console.log(),console.log(chalk.gray("  Switch now: ")+chalk.cyan("lang <code>")+chalk.gray("   (e.g. ")+chalk.cyan("lang es")+chalk.gray(")")),console.log(chalk.gray('  No "back" needed — you are still at the ')+chalk.cyan("icoa>")+chalk.gray(" prompt.")),void console.log()}if(!u.includes(p)){c(`Unsupported language: ${p}`);const e=u.map(e=>`${e} (${m[e]?.split(" ")[0]||e})`).join(", ");return void g(`Supported: ${e}`)}const d=t(),y=d?.session?.token;if(y){const e=y.substring(0,2).toUpperCase(),o=s[e];if(o&&p!==o&&"en"!==p)return c("Language is locked during your exam."),g(`Your token (${e}xxx) supports two languages: ${chalk.cyan("en")} (English) or ${chalk.cyan(o)} (${m[o]||o}).`),void g("To change language, finish or quit the current exam first.")}o({language:p}),l(`Language set to: ${m[p]||p}`),await r(p),i(p);const h=a();if(h&&"demo-free"===h.session.examId)try{const{pickDemoQuestions:e,getLocalizedDemoSession:o,getLocalizedDemoQuestions:s,getLocalizedExplanations:a,DEMO_PICK_SIZE:t}=await import("../lib/demo-exam.js"),{saveExamState:n}=await import("../lib/exam-state.js");if(h.questions.every(e=>null!=e.sourceNumber&&Array.isArray(e.sourceOrder)&&4===e.sourceOrder.length)){const e=s(),t=a();h.questions=h.questions.map(o=>{const s=e.find(e=>e.number===o.sourceNumber);return s&&o.sourceOrder?{...o,text:s.text,category:s.category,options:{A:s.options[o.sourceOrder[0]],B:s.options[o.sourceOrder[1]],C:s.options[o.sourceOrder[2]],D:s.options[o.sourceOrder[3]]},explanation:t[o.sourceNumber]}:o}),h.session.examName=o().examName,n(h);const r=h._lastQ||1;console.log(),console.log(chalk.green(`  Demo continues in ${m[p]||p}. Your progress is kept.`)),console.log(chalk.white(`  Resume: exam q ${r}`))}else h.questions=e(t),h.answers={},h.session.examName=o().examName,h.session.startedAt=(new Date).toISOString(),h._lastQ=1,n(h),console.log(),console.log(chalk.green(`  Demo restarted in ${m[p]||p}.`)),console.log(chalk.white("  Type: exam q 1"))}catch{console.log(chalk.gray("  Language changed. Type: demo"))}else if(h&&h.session.token)try{const{getConfig:e}=await import("../lib/config.js"),{saveExamState:o}=await import("../lib/exam-state.js"),{getDeviceFingerprint:s}=await import("../lib/access.js"),a=e().ctfdUrl||"https://practice.icoa2026.au",t=h.session.token,n=await fetch(`${a}/api/icoa/exam-token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({token:t,deviceHash:s(),lang:p}),signal:AbortSignal.timeout(1e4)});if(n.ok){const e=(await n.json()).data.questions;h.questions=e,o(h);const s=h._lastQ||1;console.log(),l(`Exam questions updated to ${m[p]||p}. Your answers are kept.`),console.log(chalk.white(`  Resume: exam q ${s}`))}else if(429===n.status){const e=await n.json().catch(()=>null),o=e?.message?.match(/(\d+)\s*s/i),s=o?parseInt(o[1],10):60;console.log(),g(`Server rate-limited that token (wait ~${s}s).`),g(`Your exam session is intact — try ${chalk.cyan(`lang ${p}`)} again after the cooldown.`)}else{const{clearExamState:e}=await import("../lib/exam-state.js");e(),console.log(),console.log(chalk.green("  ✓ Old session record cleared — your scores are safe.")),console.log(chalk.gray("  To start (or resume) your exam, type your token:")),console.log(chalk.gray("    → ")+chalk.bold.cyan("exam <your-token>"))}}catch{console.log(chalk.yellow("  Could not reach server. Language changed for UI only."))}else if(h){const e=h._lastQ||1;console.log(),console.log(chalk.gray(`  Exam in progress — resuming Q${e}:`)),console.log(chalk.white(`  Type: exam q ${e}`))}})}

package/dist/commands/log.js

@@ -1,171 +1 @@
-import chalk from 'chalk';
-import { readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { getSessionLog } from '../lib/logger.js';
-import { getIcoaDir, getConfig } from '../lib/config.js';
-import { printHeader, printInfo, printTable } from '../lib/ui.js';
-export function registerLogCommand(program) {
-    const logCmd = program
-        .command('log')
-        .description('Display session history')
-        .action(() => {
-        showLog();
-    });
-    // icoa log export — export full audit log for post-competition review
-    logCmd
-        .command('export')
-        .description('Export full audit log for review')
-        .action(async () => {
-        await exportLog();
-    });
-    // icoa log stats — show summary statistics
-    logCmd
-        .command('stats')
-        .description('Show session statistics')
-        .action(() => {
-        showStats();
-    });
-}
-function showLog() {
-    const entries = getSessionLog();
-    if (entries.length === 0) {
-        printInfo('No session log entries yet.');
-        return;
-    }
-    printHeader('Session Log');
-    const rows = entries.map((entry) => {
-        const time = entry.timestamp.replace('T', ' ').substring(0, 19);
-        const levelColor = {
-            A: chalk.green,
-            B: chalk.yellow,
-            C: chalk.red,
-            command: chalk.blue,
-            submit: chalk.magenta,
-        };
-        const colorFn = levelColor[entry.level] || chalk.gray;
-        const input = entry.input.length > 60 ? `${entry.input.substring(0, 57)}...` : entry.input;
-        return [chalk.gray(time), colorFn(entry.level.padEnd(7)), input];
-    });
-    printTable(['Time', 'Type', 'Content'], rows);
-    console.log(chalk.gray(`  ${entries.length} entries total`));
-    console.log();
-    console.log(chalk.gray('  You are at the ') +
-        chalk.cyan('icoa>') +
-        chalk.gray(' prompt. Also: ') +
-        chalk.cyan('log stats') +
-        chalk.gray(' · ') +
-        chalk.cyan('log export') +
-        chalk.gray(' · ') +
-        chalk.cyan('help') +
-        chalk.gray(' all commands.'));
-    console.log();
-}
-async function exportLog() {
-    const config = getConfig();
-    const icoaDir = getIcoaDir();
-    const _logFile = join(icoaDir, 'session.log');
-    const sessionFile = join(icoaDir, 'session-state.json');
-    const _configFile = join(icoaDir, 'config.json');
-    const timestamp = new Date().toISOString().replace(/[:.]/g, '-').substring(0, 19);
-    const userName = config.userName || 'unknown';
-    const exportName = `icoa-audit-${userName}-${timestamp}.json`;
-    const exportPath = join(process.cwd(), exportName);
-    // Gather all audit data
-    const audit = {
-        exportedAt: new Date().toISOString(),
-        version: '1.7.2',
-        competitor: {
-            userName: config.userName,
-            userId: config.userId,
-            teamName: config.teamName,
-            teamId: config.teamId,
-            sessionId: config.sessionId,
-        },
-        connection: {
-            ctfdUrl: config.ctfdUrl,
-        },
-        session: existsSync(sessionFile) ? JSON.parse(readFileSync(sessionFile, 'utf-8')) : null,
-        commands: getSessionLog(),
-    };
-    // Count by type
-    const entries = getSessionLog();
-    const counts = {};
-    for (const e of entries) {
-        counts[e.level] = (counts[e.level] || 0) + 1;
-    }
-    audit.summary = {
-        totalCommands: entries.length,
-        byType: counts,
-        firstEntry: entries[0]?.timestamp || null,
-        lastEntry: entries[entries.length - 1]?.timestamp || null,
-    };
-    // Write export
-    const { writeFileSync } = await import('node:fs');
-    writeFileSync(exportPath, JSON.stringify(audit, null, 2));
-    console.log();
-    console.log(chalk.green(`  ✓ Audit log exported`));
-    console.log(chalk.white(`  ${exportPath}`));
-    console.log();
-    console.log(chalk.gray('  Contents:'));
-    console.log(chalk.gray(`    Commands: ${entries.length}`));
-    Object.entries(counts).forEach(([type, count]) => {
-        console.log(chalk.gray(`    ${type}: ${count}`));
-    });
-    console.log();
-    console.log(chalk.gray('  This file contains the complete session audit trail.'));
-    console.log(chalk.gray('  Submit to organizers for post-competition verification.'));
-    console.log();
-}
-function showStats() {
-    const entries = getSessionLog();
-    const icoaDir = getIcoaDir();
-    const sessionFile = join(icoaDir, 'session-state.json');
-    console.log();
-    console.log(chalk.bold.white('  Session Statistics'));
-    console.log(chalk.gray('  ─────────────────────────────────────────────'));
-    if (entries.length === 0) {
-        console.log(chalk.gray('  No activity recorded yet.'));
-        console.log();
-        return;
-    }
-    // Time range
-    const first = new Date(entries[0].timestamp);
-    const last = new Date(entries[entries.length - 1].timestamp);
-    const durationMin = Math.round((last.getTime() - first.getTime()) / 60000);
-    console.log(chalk.gray('  First activity:  ') + chalk.white(first.toLocaleString()));
-    console.log(chalk.gray('  Last activity:   ') + chalk.white(last.toLocaleString()));
-    console.log(chalk.gray('  Duration:        ') + chalk.white(`${durationMin} min`));
-    console.log();
-    // Count by type
-    const counts = {};
-    for (const e of entries) {
-        counts[e.level] = (counts[e.level] || 0) + 1;
-    }
-    console.log(chalk.gray('  Total commands:  ') + chalk.white(String(entries.length)));
-    if (counts.command)
-        console.log(chalk.blue('    commands:      ') + chalk.white(String(counts.command)));
-    if (counts.A)
-        console.log(chalk.green('    hint A:        ') + chalk.white(String(counts.A)));
-    if (counts.B)
-        console.log(chalk.yellow('    hint B:        ') + chalk.white(String(counts.B)));
-    if (counts.C)
-        console.log(chalk.red('    hint C:        ') + chalk.white(String(counts.C)));
-    if (counts.submit)
-        console.log(chalk.magenta('    submissions:   ') + chalk.white(String(counts.submit)));
-    // Exit info
-    if (existsSync(sessionFile)) {
-        try {
-            const session = JSON.parse(readFileSync(sessionFile, 'utf-8'));
-            console.log();
-            console.log(chalk.gray('  Exit count:      ') + chalk.white(String(session.exitCount || 0)));
-            if (session.totalAwaySeconds) {
-                const awayMin = Math.round(session.totalAwaySeconds / 60);
-                console.log(chalk.gray('  Total away:      ') + chalk.white(`${awayMin} min`));
-            }
-        }
-        catch {
-            /* ignore */
-        }
-    }
-    console.log();
-}
+import chalk from"chalk";import{readFileSync as o,existsSync as t}from"node:fs";import{join as e}from"node:path";import{getSessionLog as n}from"../lib/logger.js";import{getIcoaDir as s,getConfig as i}from"../lib/config.js";import{printHeader as l,printInfo as a,printTable as r}from"../lib/ui.js";export function registerLogCommand(c){const g=c.command("log").description("Display session history").action(()=>{!function(){const o=n();if(0===o.length)return void a("No session log entries yet.");l("Session Log");const t=o.map(o=>{const t=o.timestamp.replace("T"," ").substring(0,19),e={A:chalk.green,B:chalk.yellow,C:chalk.red,command:chalk.blue,submit:chalk.magenta}[o.level]||chalk.gray,n=o.input.length>60?`${o.input.substring(0,57)}...`:o.input;return[chalk.gray(t),e(o.level.padEnd(7)),n]});r(["Time","Type","Content"],t),console.log(chalk.gray(`  ${o.length} entries total`)),console.log(),console.log(chalk.gray("  You are at the ")+chalk.cyan("icoa>")+chalk.gray(" prompt. Also: ")+chalk.cyan("log stats")+chalk.gray(" · ")+chalk.cyan("log export")+chalk.gray(" · ")+chalk.cyan("help")+chalk.gray(" all commands.")),console.log()}()});g.command("export").description("Export full audit log for review").action(async()=>{await async function(){const l=i(),a=s(),r=(e(a,"session.log"),e(a,"session-state.json")),c=(e(a,"config.json"),(new Date).toISOString().replace(/[:.]/g,"-").substring(0,19)),g=`icoa-audit-${l.userName||"unknown"}-${c}.json`,m=e(process.cwd(),g),y={exportedAt:(new Date).toISOString(),version:"1.7.2",competitor:{userName:l.userName,userId:l.userId,teamName:l.teamName,teamId:l.teamId,sessionId:l.sessionId},connection:{ctfdUrl:l.ctfdUrl},session:t(r)?JSON.parse(o(r,"utf-8")):null,commands:n()},d=n(),u={};for(const o of d)u[o.level]=(u[o.level]||0)+1;y.summary={totalCommands:d.length,byType:u,firstEntry:d[0]?.timestamp||null,lastEntry:d[d.length-1]?.timestamp||null};const{writeFileSync:p}=await import("node:fs");p(m,JSON.stringify(y,null,2)),console.log(),console.log(chalk.green("  ✓ Audit log exported")),console.log(chalk.white(`  ${m}`)),console.log(),console.log(chalk.gray("  Contents:")),console.log(chalk.gray(`    Commands: ${d.length}`)),Object.entries(u).forEach(([o,t])=>{console.log(chalk.gray(`    ${o}: ${t}`))}),console.log(),console.log(chalk.gray("  This file contains the complete session audit trail.")),console.log(chalk.gray("  Submit to organizers for post-competition verification.")),console.log()}()}),g.command("stats").description("Show session statistics").action(()=>{!function(){const i=n(),l=s(),a=e(l,"session-state.json");if(console.log(),console.log(chalk.bold.white("  Session Statistics")),console.log(chalk.gray("  ─────────────────────────────────────────────")),0===i.length)return console.log(chalk.gray("  No activity recorded yet.")),void console.log();const r=new Date(i[0].timestamp),c=new Date(i[i.length-1].timestamp),g=Math.round((c.getTime()-r.getTime())/6e4);console.log(chalk.gray("  First activity:  ")+chalk.white(r.toLocaleString())),console.log(chalk.gray("  Last activity:   ")+chalk.white(c.toLocaleString())),console.log(chalk.gray("  Duration:        ")+chalk.white(`${g} min`)),console.log();const m={};for(const o of i)m[o.level]=(m[o.level]||0)+1;if(console.log(chalk.gray("  Total commands:  ")+chalk.white(String(i.length))),m.command&&console.log(chalk.blue("    commands:      ")+chalk.white(String(m.command))),m.A&&console.log(chalk.green("    hint A:        ")+chalk.white(String(m.A))),m.B&&console.log(chalk.yellow("    hint B:        ")+chalk.white(String(m.B))),m.C&&console.log(chalk.red("    hint C:        ")+chalk.white(String(m.C))),m.submit&&console.log(chalk.magenta("    submissions:   ")+chalk.white(String(m.submit))),t(a))try{const t=JSON.parse(o(a,"utf-8"));if(console.log(),console.log(chalk.gray("  Exit count:      ")+chalk.white(String(t.exitCount||0))),t.totalAwaySeconds){const o=Math.round(t.totalAwaySeconds/60);console.log(chalk.gray("  Total away:      ")+chalk.white(`${o} min`))}}catch{}console.log()}()})}

package/dist/commands/shell.js

@@ -1,151 +1 @@
-import { execSync, spawnSync } from 'node:child_process';
-import chalk from 'chalk';
-import { printInfo, printSuccess } from '../lib/ui.js';
-import { logCommand } from '../lib/logger.js';
-import { getActiveCwd } from '../lib/exam-sandbox.js';
-import { isDockerRunning } from '../lib/docker-probe.js';
-/**
- * Decide which shell to launch. The Docker sandbox is the PREFERRED path (extra
- * isolation), but it is OPTIONAL: the 110 CTF tools are installed on the HOST by
- * `env setup`, and the `env` doctor explicitly marks docker "optional — not
- * needed". So when Docker is absent we must NOT dead-end the user with an
- * "install Docker" wall — we drop them into a host shell where every tool they
- * need already lives. Pure + testable so the no-docker → host fallback is locked
- * by a regression test.
- */
-export function resolveShellLaunch(opts) {
-    if (opts.dockerAvailable) {
-        return { mode: 'docker', command: 'docker' };
-    }
-    const command = opts.platform === 'win32' ? opts.comspecEnv || 'cmd.exe' : opts.shellEnv || '/bin/bash';
-    return { mode: 'host', command };
-}
-// The image ladder is shared with the REPL's persistent-container path — one
-// source of truth in lib/sandbox.ts; re-exported here for the unit tests.
-export { SANDBOX_IMAGES, resolveSandboxImage } from '../lib/sandbox.js';
-import { SANDBOX_IMAGES, resolveSandboxImage } from '../lib/sandbox.js';
-/**
- * docker-run args as an ARRAY (spawnSync — no shell, so a cwd with spaces
- * survives untouched). The two mounts are the aienv × docker interlock:
- *  - cwd → /work: challenge files flow both ways instead of being invisible
- *    from inside the container (and work done in /work outlives --rm).
- *  - icoa-aienv named volume → /root/.icoa: docker's copy-up seeds it from the
- *    image-baked venv on first use, then in-container pip installs survive
- *    --rm across sessions. Reset anytime: `docker volume rm icoa-aienv`.
- */
-export function buildSandboxRunArgs(opts) {
-    return [
-        'run',
-        '--rm',
-        '-it',
-        '--name',
-        opts.containerName,
-        '--network=host',
-        '-v',
-        `${opts.cwd}:/work`,
-        '-w',
-        '/work',
-        '-v',
-        'icoa-aienv:/root/.icoa',
-        opts.image,
-        '/bin/bash',
-    ];
-}
-// Probe the daemon socket, not the `docker` CLI — checking must never wake a
-// stopped Docker Desktop (the sandbox is optional; host shell is the fallback).
-// See lib/docker-probe.ts.
-function isDockerAvailable() {
-    return isDockerRunning();
-}
-function openHostShell() {
-    const cwd = getActiveCwd();
-    const { command } = resolveShellLaunch({
-        dockerAvailable: false,
-        platform: process.platform,
-        shellEnv: process.env.SHELL,
-        comspecEnv: process.env.COMSPEC,
-    });
-    printInfo('Docker not found — opening a host shell.');
-    console.log(chalk.gray('  All 110 CTF tools run on your host. If any are missing, run ') +
-        chalk.cyan('env setup') +
-        chalk.gray('.'));
-    console.log(chalk.gray("  Type 'exit' to return to ICOA CLI."));
-    console.log();
-    try {
-        execSync(command, { stdio: 'inherit', cwd });
-        console.log();
-        printSuccess('Shell session ended.');
-    }
-    catch {
-        // A non-zero exit (incl. the user typing `exit`) lands here — not an error.
-        console.log();
-        printInfo('Shell session ended.');
-    }
-}
-export function registerShellCommand(program) {
-    program
-        .command('shell')
-        .description('Open an interactive CTF shell (Docker sandbox if available, else host)')
-        .action(async () => {
-        logCommand('shell');
-        // Docker is the preferred (isolated) path but is OPTIONAL — fall back to
-        // the host shell instead of telling the user to install Docker.
-        if (!(await isDockerAvailable())) {
-            openHostShell();
-            return;
-        }
-        const hasLocal = (image) => {
-            try {
-                execSync(`docker image inspect ${image}`, { stdio: 'ignore' });
-                return true;
-            }
-            catch {
-                return false;
-            }
-        };
-        const pull = (image) => {
-            printInfo(`Pulling ${image}...`);
-            try {
-                execSync(`docker pull ${image}`, { stdio: 'inherit' });
-                return true;
-            }
-            catch {
-                return false;
-            }
-        };
-        const image = resolveSandboxImage(hasLocal, pull);
-        if (image === null) {
-            // No image local or pullable — don't dead-end, the host has the tools.
-            printInfo('Could not pull a sandbox image — using your host shell instead.');
-            openHostShell();
-            return;
-        }
-        const cwd = getActiveCwd();
-        printSuccess('Launching sandbox...');
-        console.log(chalk.gray('  Your folder is mounted at ') +
-            chalk.cyan('/work') +
-            chalk.gray(' — files there persist on your host.'));
-        if (image === SANDBOX_IMAGES[0]) {
-            console.log(chalk.gray('  ML venv: ') +
-                chalk.cyan('~/.icoa/aienv/bin/python') +
-                chalk.gray(' (sklearn / jupyter / mujoco) — its pip installs persist across sessions.'));
-        }
-        else {
-            console.log(chalk.gray('  This image has no ML venv — get the newer one with ') +
-                chalk.cyan(`docker pull ${SANDBOX_IMAGES[0]}`));
-        }
-        console.log(chalk.gray("  Type 'exit' to return to ICOA CLI."));
-        console.log();
-        const containerName = `icoa-sandbox-${Date.now()}`;
-        const result = spawnSync('docker', buildSandboxRunArgs({ cwd, image, containerName }), {
-            stdio: 'inherit',
-        });
-        console.log();
-        if (result.error) {
-            printInfo('Sandbox session ended.');
-        }
-        else {
-            printSuccess('Sandbox session ended.');
-        }
-    });
-}
+import{execSync as o,spawnSync as e}from"node:child_process";import chalk from"chalk";import{printInfo as n,printSuccess as r}from"../lib/ui.js";import{logCommand as s}from"../lib/logger.js";import{getActiveCwd as i}from"../lib/exam-sandbox.js";import{isDockerRunning as l}from"../lib/docker-probe.js";export function resolveShellLaunch(o){return o.dockerAvailable?{mode:"docker",command:"docker"}:{mode:"host",command:"win32"===o.platform?o.comspecEnv||"cmd.exe":o.shellEnv||"/bin/bash"}}export{SANDBOX_IMAGES,resolveSandboxImage}from"../lib/sandbox.js";import{SANDBOX_IMAGES as t,resolveSandboxImage as a}from"../lib/sandbox.js";export function buildSandboxRunArgs(o){return["run","--rm","-it","--name",o.containerName,"--network=host","-v",`${o.cwd}:/work`,"-w","/work","-v","icoa-aienv:/root/.icoa",o.image,"/bin/bash"]}function c(){const e=i(),{command:s}=resolveShellLaunch({dockerAvailable:!1,platform:process.platform,shellEnv:process.env.SHELL,comspecEnv:process.env.COMSPEC});n("Docker not found — opening a host shell."),console.log(chalk.gray("  All 110 CTF tools run on your host. If any are missing, run ")+chalk.cyan("env setup")+chalk.gray(".")),console.log(chalk.gray("  Type 'exit' to return to ICOA CLI.")),console.log();try{o(s,{stdio:"inherit",cwd:e}),console.log(),r("Shell session ended.")}catch{console.log(),n("Shell session ended.")}}export function registerShellCommand(d){d.command("shell").description("Open an interactive CTF shell (Docker sandbox if available, else host)").action(async()=>{if(s("shell"),!await l())return void c();const d=a(e=>{try{return o(`docker image inspect ${e}`,{stdio:"ignore"}),!0}catch{return!1}},e=>{n(`Pulling ${e}...`);try{return o(`docker pull ${e}`,{stdio:"inherit"}),!0}catch{return!1}});if(null===d)return n("Could not pull a sandbox image — using your host shell instead."),void c();const m=i();r("Launching sandbox..."),console.log(chalk.gray("  Your folder is mounted at ")+chalk.cyan("/work")+chalk.gray(" — files there persist on your host.")),d===t[0]?console.log(chalk.gray("  ML venv: ")+chalk.cyan("~/.icoa/aienv/bin/python")+chalk.gray(" (sklearn / jupyter / mujoco) — its pip installs persist across sessions.")):console.log(chalk.gray("  This image has no ML venv — get the newer one with ")+chalk.cyan(`docker pull ${t[0]}`)),console.log(chalk.gray("  Type 'exit' to return to ICOA CLI.")),console.log();const u=`icoa-sandbox-${Date.now()}`,g=e("docker",buildSandboxRunArgs({cwd:m,image:d,containerName:u}),{stdio:"inherit"});console.log(),g.error?n("Sandbox session ended."):r("Sandbox session ended.")})}