icoa-cli 2.19.85 → 2.19.87

package/dist/commands/exam.js

@@ -1045,6 +1045,9 @@ export function registerExamCommand(program) {
         state.answers[num] = c;
         state._lastQ = num;
         saveExamState(state);
+        // UX: visible "saved" indicator reassures beginners their answer is safe
+        // even if they Ctrl+C or lose network. Neutral — doesn't reveal correctness.
+        console.log(chalk.gray('    ✓ saved'));
         // Per-question sync to server (real exam only). Best-effort, fire-and-forget.
         // If timer expires or network drops before final submit, the server still
         // has the answer. Final submit is authoritative and overwrites this.
@@ -1792,6 +1795,34 @@ export function registerExamCommand(program) {
             await playDemoIntro();
             saveConfig({ demoIntroSeen: true });
         }
+        // T2-6: Pre-start confirmation. Prevents accidental launches (user typed
+        // `demo` instead of exploring the menu). No timer pressure, but exam
+        // state + AI budget get allocated the moment the first question lands,
+        // so a 1-line "are you ready?" gate is cheap insurance. Ctrl+C here
+        // cleanly exits via the REPL's SIGINT handler.
+        console.log();
+        console.log(chalk.white('  Demo: ') + chalk.gray(`${DEMO_PICK_SIZE} questions drawn from a pool of ${DEMO_POOL_SIZE}. No timer. Free practice.`));
+        console.log(chalk.gray('  You can pause with ') + chalk.cyan('Ctrl+C') + chalk.gray(' or leave with ') + chalk.cyan('back') + chalk.gray(' at any time.'));
+        await new Promise((resolve) => {
+            process.stdout.write(chalk.bold.yellow('  Press Enter to begin... '));
+            const wasRaw = process.stdin.isTTY ? process.stdin.isRaw : false;
+            if (process.stdin.isTTY && process.stdin.setRawMode) {
+                process.stdin.setRawMode(false);
+            }
+            const onData = (chunk) => {
+                const s = chunk.toString();
+                if (s.includes('\n') || s.includes('\r')) {
+                    process.stdin.removeListener('data', onData);
+                    if (process.stdin.isTTY && process.stdin.setRawMode) {
+                        process.stdin.setRawMode(wasRaw);
+                    }
+                    process.stdout.write('\n');
+                    resolve();
+                }
+            };
+            process.stdin.on('data', onData);
+            process.stdin.resume();
+        });
         const DEMO_QUESTIONS = pickDemoQuestions(DEMO_PICK_SIZE);
         const DEMO_SESSION = getLocalizedDemoSession();
         // Demo uses separate state file — doesn't conflict with real exam

package/dist/index.js

@@ -104,6 +104,18 @@ program
     // Force hacker theme: black background + green text
     setTerminalTheme();
     checkForUpdates();
+    // T2-7: UTF-8 locale sanity check. Non-UTF-8 terminals mangle the box-
+    // drawing banner, the ✓/✗/⚠ glyphs used throughout the CLI, and any
+    // Cyrillic/CJK/Arabic/Devanagari/etc. translation text. Warn once at
+    // startup (not blocking) so students see a concrete fix hint instead of
+    // wondering why "哪个命令..." appears as "????..." on their machine.
+    const envLang = process.env.LANG || process.env.LC_ALL || process.env.LC_CTYPE || '';
+    if (!/UTF-?8/i.test(envLang)) {
+        console.log(chalk.yellow('⚠ Your terminal locale is not UTF-8 (LANG=' + (envLang || '(unset)') + ').'));
+        console.log(chalk.gray('  Non-English text and box characters may display as "?" or garbled glyphs.'));
+        console.log(chalk.gray('  Fix: ') + chalk.cyan('export LANG=en_US.UTF-8') + chalk.gray(' (or your locale, e.g. ') + chalk.cyan('zh_CN.UTF-8') + chalk.gray(', ') + chalk.cyan('uk_UA.UTF-8') + chalk.gray(')'));
+        console.log();
+    }
     console.log(BANNER);
     // If running interactively (no extra args or --resume), start REPL
     if (process.argv.length <= 2 || opts.resume) {

package/dist/repl.js

@@ -192,6 +192,14 @@ function printSelectionMenu() {
         console.log(chalk.white('     lang es') + chalk.gray('         Switch language (17 supported)'));
         console.log(chalk.gray('   ─────────────────────────────────────────────'));
     }
+    // Beginner-friendly safety net: make it obvious how to pause / exit / get help.
+    // This is the first place a new K-12 user lands, so the three escape hatches
+    // need to be visible without cluttering the main command list above.
+    console.log(chalk.gray('   ') +
+        chalk.gray('Tip: ') + chalk.cyan('help') + chalk.gray(' for commands · ') +
+        chalk.cyan('Ctrl+C') + chalk.gray(' pauses · ') +
+        chalk.cyan('exit') + chalk.gray(' → menu · ') +
+        chalk.cyan('quit') + chalk.gray(' closes CLI'));
     console.log();
 }
 export async function startRepl(program, resumeMode) {
@@ -716,10 +724,19 @@ export async function startRepl(program, resumeMode) {
                 console.log(chalk.green('  Access granted! Token bound to this device.'));
             }
             else if (result === 'already_bound') {
-                console.log(chalk.red('  Token already activated on another device.'));
+                console.log();
+                console.log(chalk.red('  Token already activated on a different device.'));
+                console.log(chalk.gray('  Each token binds to the first device that uses it. If you lost the device,'));
+                console.log(chalk.gray('  contact your proctor to have the token re-issued for a new device.'));
             }
             else {
-                console.log(chalk.red('  Invalid token.'));
+                console.log();
+                console.log(chalk.red('  Token not recognized.'));
+                console.log(chalk.gray('  Possible reasons:'));
+                console.log(chalk.white('    • ') + chalk.gray('Typo — tokens are case-insensitive, 10 chars, start with a 2-letter country code (e.g. ') + chalk.cyan('UAK7M2R9Q4') + chalk.gray(')'));
+                console.log(chalk.white('    • ') + chalk.gray('Expired — ask your proctor or organizer for a fresh token'));
+                console.log(chalk.white('    • ') + chalk.gray('Network — verify connection to ') + chalk.cyan('practice.icoa2026.au'));
+                console.log(chalk.gray('  Still stuck? type ') + chalk.cyan('help') + chalk.gray(' or try ') + chalk.cyan('exam demo') + chalk.gray(' for a free practice round.'));
             }
             console.log();
             rl.prompt();
@@ -975,6 +992,28 @@ export async function startRepl(program, resumeMode) {
         console.log();
         rl.prompt();
     });
+    // SIGINT (Ctrl+C) — intercept gracefully so beginners don't lose confidence.
+    // Without this listener, readline's default is to raise SIGINT which our
+    // theme.ts handler converts to process.exit(130). Installing this listener
+    // swallows that path and lets the user get oriented. If they want to exit,
+    // they type `quit` or hit Ctrl+D (sends EOF → 'close' event below).
+    rl.on('SIGINT', () => {
+        console.log();
+        if (isChatActive() || isCtf4aiActive()) {
+            console.log(chalk.yellow('  Type ') + chalk.bold.cyan('exit') + chalk.yellow(' to leave chat, or Ctrl+D to close ICOA CLI.'));
+        }
+        else if (getExamState()) {
+            console.log(chalk.yellow('  Exam paused. Your answers are auto-saved.'));
+            console.log(chalk.white('  Resume: ') + chalk.cyan('exam q 1') +
+                chalk.gray('  ·  Back to menu: ') + chalk.cyan('back') +
+                chalk.gray('  ·  Close CLI: ') + chalk.cyan('quit'));
+        }
+        else {
+            console.log(chalk.yellow('  Press Ctrl+D or type ') + chalk.bold.cyan('quit') + chalk.yellow(' to close. ') + chalk.bold.cyan('help') + chalk.yellow(' for commands.'));
+        }
+        console.log();
+        rl.prompt();
+    });
     rl.on('close', () => {
         stopLogSync();
         recordExit();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.85",
+  "version": "2.19.87",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {
@@ -25,7 +25,7 @@
     "icoa",
     "competition"
   ],
-  "license": "SEE LICENSE IN LICENSE",
+  "license": "BUSL-1.1",
   "dependencies": {
     "@google/genai": "^1.48.0",
     "@inquirer/prompts": "^7.5.0",