icoa-cli 2.19.86 → 2.19.87

package/dist/commands/exam.js

@@ -1795,6 +1795,34 @@ export function registerExamCommand(program) {
             await playDemoIntro();
             saveConfig({ demoIntroSeen: true });
         }
+        // T2-6: Pre-start confirmation. Prevents accidental launches (user typed
+        // `demo` instead of exploring the menu). No timer pressure, but exam
+        // state + AI budget get allocated the moment the first question lands,
+        // so a 1-line "are you ready?" gate is cheap insurance. Ctrl+C here
+        // cleanly exits via the REPL's SIGINT handler.
+        console.log();
+        console.log(chalk.white('  Demo: ') + chalk.gray(`${DEMO_PICK_SIZE} questions drawn from a pool of ${DEMO_POOL_SIZE}. No timer. Free practice.`));
+        console.log(chalk.gray('  You can pause with ') + chalk.cyan('Ctrl+C') + chalk.gray(' or leave with ') + chalk.cyan('back') + chalk.gray(' at any time.'));
+        await new Promise((resolve) => {
+            process.stdout.write(chalk.bold.yellow('  Press Enter to begin... '));
+            const wasRaw = process.stdin.isTTY ? process.stdin.isRaw : false;
+            if (process.stdin.isTTY && process.stdin.setRawMode) {
+                process.stdin.setRawMode(false);
+            }
+            const onData = (chunk) => {
+                const s = chunk.toString();
+                if (s.includes('\n') || s.includes('\r')) {
+                    process.stdin.removeListener('data', onData);
+                    if (process.stdin.isTTY && process.stdin.setRawMode) {
+                        process.stdin.setRawMode(wasRaw);
+                    }
+                    process.stdout.write('\n');
+                    resolve();
+                }
+            };
+            process.stdin.on('data', onData);
+            process.stdin.resume();
+        });
         const DEMO_QUESTIONS = pickDemoQuestions(DEMO_PICK_SIZE);
         const DEMO_SESSION = getLocalizedDemoSession();
         // Demo uses separate state file — doesn't conflict with real exam

package/dist/index.js

@@ -104,6 +104,18 @@ program
     // Force hacker theme: black background + green text
     setTerminalTheme();
     checkForUpdates();
+    // T2-7: UTF-8 locale sanity check. Non-UTF-8 terminals mangle the box-
+    // drawing banner, the ✓/✗/⚠ glyphs used throughout the CLI, and any
+    // Cyrillic/CJK/Arabic/Devanagari/etc. translation text. Warn once at
+    // startup (not blocking) so students see a concrete fix hint instead of
+    // wondering why "哪个命令..." appears as "????..." on their machine.
+    const envLang = process.env.LANG || process.env.LC_ALL || process.env.LC_CTYPE || '';
+    if (!/UTF-?8/i.test(envLang)) {
+        console.log(chalk.yellow('⚠ Your terminal locale is not UTF-8 (LANG=' + (envLang || '(unset)') + ').'));
+        console.log(chalk.gray('  Non-English text and box characters may display as "?" or garbled glyphs.'));
+        console.log(chalk.gray('  Fix: ') + chalk.cyan('export LANG=en_US.UTF-8') + chalk.gray(' (or your locale, e.g. ') + chalk.cyan('zh_CN.UTF-8') + chalk.gray(', ') + chalk.cyan('uk_UA.UTF-8') + chalk.gray(')'));
+        console.log();
+    }
     console.log(BANNER);
     // If running interactively (no extra args or --resume), start REPL
     if (process.argv.length <= 2 || opts.resume) {

package/dist/repl.js

@@ -724,10 +724,19 @@ export async function startRepl(program, resumeMode) {
                 console.log(chalk.green('  Access granted! Token bound to this device.'));
             }
             else if (result === 'already_bound') {
-                console.log(chalk.red('  Token already activated on another device.'));
+                console.log();
+                console.log(chalk.red('  Token already activated on a different device.'));
+                console.log(chalk.gray('  Each token binds to the first device that uses it. If you lost the device,'));
+                console.log(chalk.gray('  contact your proctor to have the token re-issued for a new device.'));
             }
             else {
-                console.log(chalk.red('  Invalid token.'));
+                console.log();
+                console.log(chalk.red('  Token not recognized.'));
+                console.log(chalk.gray('  Possible reasons:'));
+                console.log(chalk.white('    • ') + chalk.gray('Typo — tokens are case-insensitive, 10 chars, start with a 2-letter country code (e.g. ') + chalk.cyan('UAK7M2R9Q4') + chalk.gray(')'));
+                console.log(chalk.white('    • ') + chalk.gray('Expired — ask your proctor or organizer for a fresh token'));
+                console.log(chalk.white('    • ') + chalk.gray('Network — verify connection to ') + chalk.cyan('practice.icoa2026.au'));
+                console.log(chalk.gray('  Still stuck? type ') + chalk.cyan('help') + chalk.gray(' or try ') + chalk.cyan('exam demo') + chalk.gray(' for a free practice round.'));
             }
             console.log();
             rl.prompt();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.86",
+  "version": "2.19.87",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {