icoa-cli 2.19.99 → 2.19.101

package/dist/repl.js

@@ -1,1259 +1 @@
-import { createInterface } from 'node:readline';
-import { spawn, execSync as execSyncFn } from 'node:child_process';
-import chalk from 'chalk';
-import { isConnected, getConfig, saveConfig } from './lib/config.js';
-import { isActivated, activateToken, isFreeCommand, isDeviceMatch, recordExit, recordResume, isFirstRunOrUpgrade, markVersionSeen } from './lib/access.js';
-import { setReplMode } from './lib/ui.js';
-import { isChatActive, handleChatMessage } from './commands/ai4ctf.js';
-import { isCtf4aiActive, handleCtf4aiMessage } from './commands/ctf4ai-demo.js';
-import { getExamState, getRealExamState, getDemoState } from './lib/exam-state.js';
-import { getDemoStats } from './lib/demo-stats.js';
-import { isExamSetupComplete } from './lib/exam-setup.js';
-import { DEMO_PICK_SIZE, DEMO_POOL_SIZE } from './lib/demo-exam.js';
-import { isNativeWindowsCmd } from './lib/platform.js';
-import { resetTerminalTheme } from './lib/theme.js';
-import { ensureSandbox, runInSandbox, isDockerAvailable } from './lib/sandbox.js';
-import { logCommand } from './lib/logger.js';
-import { startLogSync, stopLogSync } from './lib/log-sync.js';
-import { existsSync, mkdirSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-// Pre-import commonly-used CTF modules on interactive Python startup.
-// Failures are silent — selectors import only what's available so a partial
-// exam setup doesn't crash the shell. Creates ~/.icoa/python-startup.py once.
-const PYTHON_STARTUP_CONTENT = `# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP
-import base64, struct, hashlib, re, json, os, sys, binascii
-try: import requests
-except ImportError: pass
-try: from Crypto.Cipher import AES
-except ImportError: pass
-try: from Crypto.Util.Padding import pad, unpad
-except ImportError: pass
-try: from pwn import xor, p32, u32, p64, u64
-except ImportError: pass
-try: import bs4
-except ImportError: pass
-try: import numpy as np
-except ImportError: pass
-`;
-function ensurePythonStartup() {
-    const icoaDir = join(homedir(), '.icoa');
-    if (!existsSync(icoaDir))
-        mkdirSync(icoaDir, { recursive: true });
-    const path = join(icoaDir, 'python-startup.py');
-    if (!existsSync(path)) {
-        const { writeFileSync } = require('node:fs');
-        writeFileSync(path, PYTHON_STARTUP_CONTENT);
-    }
-    return path;
-}
-function printPythonBanner() {
-    console.log();
-    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
-    console.log(chalk.bold.white('  Python ready — ICOA exam toolkit pre-loaded'));
-    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
-    console.log();
-    console.log(chalk.white('  Already imported: ') + chalk.gray('base64, struct, hashlib, re, json, binascii'));
-    console.log(chalk.white('  Also available:   ') + chalk.gray('requests, bs4, numpy, AES, pad/unpad, xor, p32/u32/p64/u64'));
-    console.log();
-    console.log(chalk.yellow('  Quick examples:'));
-    console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ') + chalk.gray('# decode base64'));
-    console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ') + chalk.gray('# hex → bytes'));
-    console.log(chalk.gray('    "ICOA{x}".encode()                 ') + chalk.gray('# str → bytes'));
-    console.log(chalk.gray('    [chr(c) for c in [73,67,79,65]]    ') + chalk.gray('# ASCII codes'));
-    console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ') + chalk.gray('# pwntools XOR'));
-    console.log();
-    console.log(chalk.gray('  Exit:  ') + chalk.white('exit()') + chalk.gray('  or Ctrl-D'));
-    console.log(chalk.cyan('  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
-    console.log();
-}
-// Compute the REPL prompt based on current state.
-// Real exam wins over demo (matches getExamState() priority). Chat modes have
-// their own prompts and are handled separately.
-function computePrompt() {
-    if (getRealExamState())
-        return chalk.cyan('exam> ');
-    if (getDemoState())
-        return chalk.yellow('demo> ');
-    return chalk.green('icoa> ');
-}
-// Competition workspace — all system commands restricted here
-const WORKSPACE = join(homedir(), 'icoa-workspace');
-function ensureWorkspace() {
-    if (!existsSync(WORKSPACE))
-        mkdirSync(WORKSPACE, { recursive: true });
-    return WORKSPACE;
-}
-// Blocked commands — security risk
-const BLOCKED_COMMANDS = new Set([
-    'sudo', 'su', 'doas', 'pkexec', // privilege escalation
-    'brew', 'apt', 'apt-get', 'yum', 'choco', // package managers (use env setup)
-    'npm', 'npx', 'pip', 'pip3', // package install (use env setup)
-    'shutdown', 'reboot', 'halt', // system control
-    'mkfs', 'fdisk', 'dd', // disk operations
-    'iptables', 'ufw', // firewall
-]);
-const INTERCEPT = '__REPL_NO_EXIT__';
-const VERSION = '2.5.1';
-// National Selection main menu — shown on REPL entry and when user types `back`
-// after finishing the demo flow. Progressive onboarding per spec
-// docs/superpowers/specs/2026-04-13-exam-national-selection-design.md §4.1:
-//   State 0 (no demo yet): recommend demo, hide exam setup / exam <token>
-//   State 1 (demo done, no setup): show demo completion + setup CTA, hide token
-//   State 2 (demo done + setup done): show token entry CTA
-// Quick Python version check (used in Selection menu startup warning).
-// Returns {ok, version, status}. Silent/defensive — any error means 'missing'.
-function checkPython() {
-    // Probe python3.12 first — macOS Homebrew installs python@3.12 alongside a
-    // newer default python3, and we don't want to flag a 3.12-ready machine just
-    // because the default alias moved to 3.13.
-    // On Windows (cmd/PowerShell), the binary is `python` not `python3`, and the
-    // Python launcher `py -3` is also common. Include these so Windows K-12
-    // students don't get a spurious "Python missing" warning when Python IS
-    // installed. We also stdio: ignore stderr so cmd.exe's "not recognized as
-    // internal or external command" error doesn't leak to the user.
-    const probes = [
-        'python3.12 --version',
-        '/opt/homebrew/opt/python@3.12/bin/python3.12 --version',
-        '/usr/local/opt/python@3.12/bin/python3.12 --version',
-        'python3 --version',
-        'python --version', // Windows default name
-        'py -3.12 --version', // Windows Python Launcher
-        'py -3 --version', // Windows Python Launcher (any 3.x)
-    ];
-    let lastVersion = '';
-    let lastStatus = 'missing';
-    for (const cmd of probes) {
-        try {
-            const out = execSyncFn(cmd, {
-                encoding: 'utf-8',
-                timeout: 2000,
-                stdio: ['ignore', 'pipe', 'ignore'],
-            }).trim();
-            const version = out.replace('Python ', '');
-            const [maj, min] = version.split('.').map(Number);
-            if (maj === 3 && min === 12)
-                return { ok: true, version, status: 'ok' };
-            lastVersion = version;
-            if (maj === 3 && min >= 10 && min < 12)
-                lastStatus = 'old';
-            else if (maj === 3 && min > 12)
-                lastStatus = 'new';
-            else
-                lastStatus = 'missing';
-        }
-        catch { /* try next probe */ }
-    }
-    return { ok: lastStatus !== 'missing', version: lastVersion, status: lastStatus };
-}
-function printSelectionMenu() {
-    const stats = getDemoStats();
-    const setupDone = isExamSetupComplete();
-    const demoLine = `Free practice — ${DEMO_PICK_SIZE} questions (from pool of ${DEMO_POOL_SIZE})`;
-    // v2.19.97 — Windows cmd K-12 entry path. Skip setup prompts + Python
-    // warnings for cmd users; they're routed to C paper (MCQ-only) which
-    // needs zero external tools.
-    const cmdMode = isNativeWindowsCmd();
-    console.log();
-    console.log('   ' + chalk.cyan.bold('[Selection Mode]'));
-    console.log();
-    if (cmdMode) {
-        console.log(chalk.gray('   Platform: ') + chalk.white('Windows cmd.exe') + chalk.gray(' — routed to Paper C (MCQ-only, 45 min, 70 pts, zero extra tools)'));
-        console.log();
-    }
-    else if (stats.attempts > 0) {
-        // Proactive Python check only matters for non-cmd users heading toward
-        // exam setup. Missing or version >= 3.13 shows yellow note pointing at
-        // `env python`. Quiet when 3.10-3.12 are installed.
-        const py = checkPython();
-        if (py.status === 'missing') {
-            console.log(chalk.yellow('   ⚠ Python not detected. For exam practical questions:'));
-            console.log(chalk.gray('     → ') + chalk.bold.cyan('env python') + chalk.gray('  (platform install guide)'));
-            console.log();
-        }
-        else if (py.status === 'new') {
-            console.log(chalk.yellow(`   ⚠ Python ${py.version} may lack CTF wheels. Python 3.12 recommended:`));
-            console.log(chalk.gray('     → ') + chalk.bold.cyan('env python') + chalk.gray('  (install guide)'));
-            console.log();
-        }
-    }
-    if (stats.attempts === 0) {
-        // State 0: brand new user. Only demo matters right now.
-        console.log(chalk.white('   New here? Start with ') + chalk.bold.cyan('demo') + chalk.white(' — it takes a few minutes.'));
-        console.log();
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-        console.log(chalk.bold.cyan('     demo') + chalk.gray(`            ${demoLine}`));
-        console.log(chalk.white('     lang') + chalk.gray('            List all supported languages'));
-        console.log(chalk.white('     lang es') + chalk.gray('         Switch language (e.g. lang es, lang zh, lang fr)'));
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-    }
-    else if (!setupDone && !cmdMode) {
-        // State 1: demo done at least once, but exam environment not installed.
-        // Windows cmd users skip this state entirely — they don't need setup.
-        const plural = stats.attempts === 1 ? 'attempt' : 'attempts';
-        console.log(chalk.green('   ✓ Demo completed ') + chalk.gray(`(${stats.attempts} ${plural}${stats.bestPercentage > 0 ? ` · best ${stats.bestPercentage}%` : ''})`));
-        console.log(chalk.yellow('   → Next: prepare your environment for the real exam.'));
-        console.log();
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-        console.log(chalk.white('     demo') + chalk.gray(`            ${demoLine}`));
-        console.log(chalk.bold.yellow('     exam setup') + chalk.gray('      Install tools for national selection (~150MB)'));
-        console.log(chalk.white('     lang') + chalk.gray('            List all supported languages'));
-        console.log(chalk.white('     lang es') + chalk.gray('         Switch language (e.g. lang es, lang zh, lang fr)'));
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-    }
-    else {
-        // State 2: ready to enter exam. For cmd users this is reached immediately
-        // (no setup gate); for others it requires exam setup completion.
-        const plural = stats.attempts === 1 ? 'attempt' : 'attempts';
-        if (stats.attempts > 0) {
-            console.log(chalk.green('   ✓ Demo completed ') + chalk.gray(`(${stats.attempts} ${plural})`));
-        }
-        if (!cmdMode) {
-            console.log(chalk.green('   ✓ Environment ready'));
-        }
-        console.log(chalk.yellow('   → Enter your exam token to begin.'));
-        console.log(chalk.gray('     (10-char code from your organizer, starts with your country code like ') + chalk.cyan('UA') + chalk.gray(' — case-insensitive)'));
-        console.log();
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-        console.log(chalk.bold.yellow('     exam <token>') + chalk.gray('    Enter exam (primary action — use your organizer-issued token)'));
-        console.log(chalk.gray('                     format: ') + chalk.white('exam UAxxxxxxxx') + chalk.gray('  (2-letter country prefix + 8 chars)'));
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-        console.log(chalk.gray('   Other commands:'));
-        console.log(chalk.white('     demo') + chalk.gray(`            ${demoLine}`));
-        if (!cmdMode) {
-            console.log(chalk.white('     exam setup') + chalk.gray('      Re-verify tool environment'));
-        }
-        console.log(chalk.white('     lang') + chalk.gray('            List all supported languages'));
-        console.log(chalk.white('     lang es') + chalk.gray('         Switch language (e.g. lang es, lang zh, lang fr)'));
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-    }
-    console.log(chalk.gray('   ') +
-        chalk.gray('Tip: ') + chalk.cyan('help') + chalk.gray(' for commands · ') +
-        chalk.cyan('Ctrl+C') + chalk.gray(' pauses · ') +
-        chalk.cyan('quit') + chalk.gray(' closes'));
-    console.log();
-}
-export async function startRepl(program, resumeMode) {
-    const config = getConfig();
-    const connected = isConnected();
-    const realExit = process.exit.bind(process);
-    const activated = isActivated();
-    // Auto-cleanup: clear demo state once per version upgrade.
-    // Demo is free practice with no time pressure, no scoring, no real loss
-    // for users. Old versions may have left demo state in incompatible formats
-    // (pre-v2.19.45 shared state, pre-v2.19.67 timestamp confusion, etc.).
-    // Real exam state is NEVER auto-cleared — it may contain in-progress answers.
-    if (config.demoCleanedForVersion !== VERSION) {
-        try {
-            const { existsSync, unlinkSync } = await import('node:fs');
-            const { join } = await import('node:path');
-            const { getIcoaDir } = await import('./lib/config.js');
-            const demoFile = join(getIcoaDir(), 'demo-state.json');
-            if (existsSync(demoFile))
-                unlinkSync(demoFile);
-        }
-        catch { }
-        saveConfig({ demoCleanedForVersion: VERSION });
-    }
-    // ─── Mode selection (every launch) ───
-    const { select: selectMode, confirm: confirmMode } = await import('@inquirer/prompts');
-    const savedMode = config.mode || '';
-    const modeChoices = [
-        { name: `  ${chalk.bold('National Selection')}         ${chalk.gray('—')}  ${chalk.gray('demo, exam (lightweight)')}`, value: 'selection' },
-        { name: `  ${chalk.bold('International Olympiad')}     ${chalk.gray('—')}  ${chalk.gray('CTF × AI (~500MB, advanced)')}`, value: 'olympiad' },
-        { name: `  ${chalk.bold('National/Regional Partner')}  ${chalk.gray('—')}  ${chalk.gray('organizer tools (tokens, competitions)')}`, value: 'organizer' },
-        { name: `  ${chalk.gray('About ICOA')}                 ${chalk.gray('·')}  ${chalk.gray('Info & contact')}`, value: 'about' },
-    ];
-    console.log(chalk.gray('   Use ') + chalk.yellow('↑') + chalk.gray(' or ') + chalk.yellow('↓') + chalk.gray(' to select, ') + chalk.yellow('Enter') + chalk.gray(' to confirm.'));
-    console.log();
-    let mode = '';
-    while (!mode) {
-        const selected = await selectMode({
-            message: 'Mode',
-            choices: modeChoices,
-            default: savedMode || 'selection',
-        });
-        if (selected === 'about') {
-            console.clear();
-            console.log();
-            console.log(chalk.cyan('  ═══════════════════════════════════════════════════'));
-            console.log(chalk.bold.yellow('   ICOA') + chalk.white(' — AI-Native CLI OS for Cyber & AI Security'));
-            console.log(chalk.gray('   Olympiad & Competition  ·  K-12 to University'));
-            console.log(chalk.cyan('  ───────────────────────────────────────────────────'));
-            console.log();
-            console.log(chalk.bold.white('   What Makes ICOA Different'));
-            console.log(chalk.gray('   · AI-native     AI teammate, AI adversary, AI translation'));
-            console.log(chalk.gray('   · CLI OS        Complete competition environment in terminal'));
-            console.log(chalk.gray('   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured'));
-            console.log(chalk.gray('   · Global scale  15,000+ concurrent exams · 15 languages'));
-            console.log();
-            console.log(chalk.bold.white('   Competition Format'));
-            console.log('   ' + chalk.green.bold('AI4CTF') + chalk.gray(' [Day 1]  AI as teammate — 5hr jeopardy CTF'));
-            console.log('   ' + chalk.red.bold('CTF4AI') + chalk.gray(' [Day 2]  Challenge AI — adversarial ML, red-team'));
-            console.log();
-            console.log(chalk.white('   Sydney, Australia') + chalk.gray('  ·  Jun 27 - Jul 2, 2026  ·  40+ countries'));
-            console.log();
-            console.log(chalk.bold.white('   Organized by') + chalk.gray('  ASRA (Australia) · ICO Foundation Inc'));
-            console.log(chalk.bold.white('   Contact     ') + chalk.cyan(' australia@icoa2026.au  ·  accreditation@icoa2026.au'));
-            console.log(chalk.bold.white('   Website     ') + chalk.cyan.underline(' https://icoa2026.au'));
-            console.log(chalk.cyan('  ═══════════════════════════════════════════════════'));
-            console.log();
-            console.log(chalk.gray('   Press ') + chalk.yellow('Enter') + chalk.gray(' to return...'));
-            await new Promise((resolve) => {
-                const onKey = (_chunk) => {
-                    process.stdin.removeListener('data', onKey);
-                    if (process.stdin.isTTY && process.stdin.setRawMode) {
-                        process.stdin.setRawMode(false);
-                    }
-                    process.stdin.pause();
-                    resolve();
-                };
-                if (process.stdin.isTTY && process.stdin.setRawMode) {
-                    process.stdin.setRawMode(true);
-                }
-                process.stdin.resume();
-                process.stdin.once('data', onKey);
-            });
-            console.clear();
-            // Loop back to mode selection
-            continue;
-        }
-        mode = selected;
-    }
-    if (mode === 'olympiad' && savedMode !== 'olympiad') {
-        console.log();
-        console.log(chalk.yellow('   This mode will download ~500MB of CTF tools and AI models.'));
-        const proceed = await confirmMode({ message: 'Continue?', default: true });
-        if (!proceed) {
-            mode = 'selection';
-            console.log(chalk.gray('   Switched to National Selection mode.'));
-        }
-    }
-    if (mode !== savedMode)
-        saveConfig({ mode });
-    console.log();
-    // First run or upgrade: prompt to install env (olympiad only)
-    if (mode === 'olympiad' && isFirstRunOrUpgrade(VERSION)) {
-        markVersionSeen(VERSION);
-        console.log(chalk.gray('   Checking competition environment...'));
-        // Quick check: count missing Python libs
-        const { execSync } = await import('node:child_process');
-        const checks = [
-            { name: 'pwntools', cmd: 'python3 -c "import pwn"' },
-            { name: 'z3-solver', cmd: 'python3 -c "import z3"' },
-            { name: 'numpy', cmd: 'python3 -c "import numpy"' },
-            { name: 'requests', cmd: 'python3 -c "import requests"' },
-        ];
-        let missing = 0;
-        for (const c of checks) {
-            try {
-                execSync(c.cmd, { stdio: 'ignore' });
-            }
-            catch {
-                missing++;
-            }
-        }
-        if (missing > 0) {
-            console.log(chalk.yellow(`   ${missing} core libraries missing.`));
-            try {
-                const { confirm } = await import('@inquirer/prompts');
-                const yes = await confirm({
-                    message: '  Install competition Python libraries now?',
-                    default: true,
-                    theme: { prefix: '', style: { message: (t) => chalk.green(t), defaultAnswer: (t) => chalk.green(t) } },
-                });
-                if (yes) {
-                    console.log();
-                    // Trigger env setup — use `icoa` command directly
-                    const { execSync: ex } = await import('node:child_process');
-                    ex('icoa env setup', { stdio: 'inherit' });
-                }
-            }
-            catch {
-                console.log(chalk.gray('   Run ') + chalk.white('env setup') + chalk.gray(' later to install.'));
-            }
-            console.log();
-        }
-        else {
-            console.log(chalk.green('   All core libraries ready.'));
-            console.log();
-        }
-    }
-    // Handle resume
-    if (resumeMode) {
-        const info = recordResume();
-        if (info) {
-            const mins = Math.floor(info.awaySeconds / 60);
-            const secs = info.awaySeconds % 60;
-            console.log(chalk.yellow(`   Session resumed. Away: ${mins}m ${secs}s | Total exits: ${info.exitCount}`));
-            console.log();
-        }
-    }
-    // ─── Mode-specific welcome ───
-    if (mode === 'selection') {
-        printSelectionMenu();
-    }
-    else if (mode === 'organizer') {
-        console.log(chalk.yellow.bold('   [National/Regional Partner]'));
-        console.log();
-        console.log(chalk.bold.white('   ██╗ ██████╗ ██████╗  █████╗'));
-        console.log(chalk.bold.white('   ██║██╔════╝██╔═══██╗██╔══██╗'));
-        console.log(chalk.bold.white('   ██║██║     ██║   ██║███████║'));
-        console.log(chalk.bold.white('   ██║██║     ██║   ██║██╔══██║'));
-        console.log(chalk.bold.white('   ██║╚██████╗╚██████╔╝██║  ██║'));
-        console.log(chalk.bold.white('   ╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝'));
-        console.log();
-        console.log(chalk.yellow('   International Cyber Olympiad in AI 2026'));
-        console.log(chalk.bold.magenta('   The World\'s First AI-Native CLI Operating System'));
-        console.log(chalk.bold.magenta('   for Cybersecurity & AI Security Competition'));
-        console.log(chalk.bold.magenta('   and Olympiad for K-12'));
-        console.log(chalk.gray('   Sydney, Australia · Jun 27 - Jul 2, 2026'));
-        console.log();
-        console.log(chalk.white('   Vision'));
-        console.log(chalk.gray('   Building a global pipeline for youth cyber & AI'));
-        console.log(chalk.gray('   security talent through education and competition.'));
-        console.log();
-        console.log(chalk.white('   Capacity'));
-        console.log(chalk.gray('   15,000+ concurrent online examinations'));
-        console.log(chalk.gray('   National selection, training, and education support'));
-        console.log();
-        console.log(chalk.white('   Olympic Spirit'));
-        console.log(chalk.gray('   Excellence · Friendship · Respect'));
-        console.log();
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-        console.log(chalk.white('   New country accreditation & support:'));
-        console.log(chalk.cyan('     australia@icoa2026.au'));
-        console.log(chalk.cyan('     accreditation@icoa2026.au'));
-        console.log(chalk.gray('   ─────────────────────────────────────────────'));
-        console.log();
-        if (connected) {
-            console.log(chalk.green(`   Logged in as ${config.userName}`));
-            console.log(chalk.white('     exam list') + chalk.gray('       Manage exams'));
-            console.log(chalk.white('     logout') + chalk.gray('          Disconnect'));
-        }
-        else {
-            console.log(chalk.white('     join <url>') + chalk.gray('      Connect to manage exams'));
-        }
-        console.log();
-    }
-    else {
-        // Olympiad mode: full flow with activate/device checks
-        if (activated && !isDeviceMatch()) {
-            console.log(chalk.red('   Token was activated on a different device.'));
-            console.log(chalk.gray('   Contact organizer for assistance.'));
-            console.log();
-        }
-        else if (connected) {
-            console.log(chalk.green.bold(`   Welcome back, ${config.userName}!`));
-            console.log(chalk.gray(`   Connected to ${config.ctfdUrl}`));
-            console.log();
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.white('   Ready to compete? Start here:'));
-            console.log();
-            console.log(chalk.bold.cyan('     challenges') + chalk.gray('     Browse challenges by category'));
-            console.log(chalk.white('     status') + chalk.gray('         Your score & hint budget'));
-            console.log(chalk.white('     scoreboard') + chalk.gray('     Live rankings'));
-            console.log(chalk.white('     help') + chalk.gray('           Full command list'));
-            console.log();
-            console.log(chalk.gray('   Tool environment:'));
-            console.log(chalk.white('     env') + chalk.gray('            See which of the 110 CTF tools are installed'));
-            console.log(chalk.white('     env setup') + chalk.gray('      Install anything missing (~5 min, one-time)'));
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.gray('   Tip: ') + chalk.cyan('help') + chalk.gray(' · ') + chalk.cyan('Ctrl+C') + chalk.gray(' pauses · ') + chalk.cyan('quit') + chalk.gray(' closes'));
-            console.log();
-        }
-        else if (activated) {
-            ensureWorkspace();
-            console.log(chalk.green.bold('   Welcome, competitor!'));
-            console.log(chalk.gray(`   Workspace: ${WORKSPACE}`));
-            console.log();
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.white('   Get started:'));
-            console.log();
-            console.log(chalk.white('   Step 1  ') + chalk.bold.cyan('join <url>') + chalk.gray('   Connect to competition server'));
-            console.log(chalk.white('   Step 2  ') + chalk.bold.cyan('challenges') + chalk.gray('   Browse & solve challenges'));
-            console.log(chalk.white('   Step 3  ') + chalk.bold.cyan('hint') + chalk.gray('         Ask AI when stuck'));
-            console.log();
-            console.log(chalk.gray('   Before Step 1 — make sure your tools are ready:'));
-            console.log(chalk.white('     env') + chalk.gray('            See which of the 110 CTF tools are installed'));
-            console.log(chalk.white('     env setup') + chalk.gray('      Install anything missing (~5 min, one-time)'));
-            console.log();
-            console.log(chalk.gray('   Also: ') + chalk.white('help') + chalk.gray(' all commands'));
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.gray('   Tip: ') + chalk.cyan('Ctrl+C') + chalk.gray(' pauses · ') + chalk.cyan('exit') + chalk.gray(' → menu · ') + chalk.cyan('quit') + chalk.gray(' closes CLI'));
-            console.log();
-        }
-        else {
-            console.log(chalk.bold.white('   Welcome to ICOA CLI — International Olympiad'));
-            console.log();
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.white('   To begin, activate your competition token:'));
-            console.log();
-            console.log(chalk.bold.cyan('     activate <token>'));
-            console.log();
-            console.log(chalk.gray('   While waiting, explore:'));
-            console.log(chalk.white('     ref linux') + chalk.gray('       Quick reference for Linux'));
-            console.log(chalk.white('     ref web') + chalk.gray('         Quick reference for Web'));
-            console.log(chalk.white('     env') + chalk.gray('             See which of the 110 CTF tools are installed'));
-            console.log(chalk.white('     env setup') + chalk.gray('       Install anything missing (~5 min, one-time)'));
-            console.log(chalk.white('     help') + chalk.gray('            All available commands'));
-            console.log(chalk.gray('   ─────────────────────────────────────────────'));
-            console.log(chalk.gray('   Tip: ') + chalk.cyan('Ctrl+C') + chalk.gray(' pauses · ') + chalk.cyan('exit') + chalk.gray(' → menu · ') + chalk.cyan('quit') + chalk.gray(' closes CLI'));
-            console.log();
-        }
-    }
-    program.exitOverride();
-    program.configureOutput({
-        writeErr: () => { },
-        writeOut: (str) => { console.log(str); },
-    });
-    const rl = createInterface({
-        input: process.stdin,
-        output: process.stdout,
-        prompt: computePrompt(),
-        terminal: true,
-    });
-    let processing = false;
-    setReplMode(true);
-    startLogSync();
-    // Wrap rl.prompt() so it always picks up current state (icoa/demo/exam mode).
-    // This keeps the prompt accurate after exam token entry, exam submit, demo finish, etc.
-    // Chat modes (ai4ctf/ctf4ai) set their own prompt via setPrompt and bypass this.
-    const _origPrompt = rl.prompt.bind(rl);
-    rl.prompt = (preserveCursor) => {
-        if (!isChatActive() && !isCtf4aiActive()) {
-            rl.setPrompt(computePrompt());
-        }
-        _origPrompt(preserveCursor);
-    };
-    rl.prompt();
-    rl.on('line', async (line) => {
-        if (processing)
-            return;
-        const input = line.trim();
-        if (!input) {
-            rl.setPrompt(isChatActive() ? chalk.magenta('ai4ctf> ') : computePrompt());
-            rl.prompt();
-            return;
-        }
-        // If in AI chat mode, route to chat handler
-        if (isChatActive()) {
-            processing = true;
-            const result = await handleChatMessage(input);
-            processing = false;
-            if (result === 'exit') {
-                rl.setPrompt(computePrompt());
-            }
-            rl.prompt();
-            return;
-        }
-        // If in CTF4AI challenge mode, route to ctf4ai handler
-        if (isCtf4aiActive()) {
-            processing = true;
-            const result = await handleCtf4aiMessage(input);
-            processing = false;
-            if (result === 'exit' || result === 'solved') {
-                rl.setPrompt(computePrompt());
-            }
-            rl.prompt();
-            return;
-        }
-        // Log ALL commands for audit trail
-        logCommand(input);
-        // `exit` — soft exit: acts like `back` and surfaces the menu. Only
-        // `quit` / `q` actually close the CLI. Rationale: in the demo flow the
-        // user bounces between main prompt and sub-flows (ai4ctf / ctf4ai /
-        // demo exam); typing `exit` at the main prompt to mean "leave the demo"
-        // is a very common mistake and should never nuke the whole session.
-        if (input === 'exit') {
-            if (getExamState()) {
-                console.log();
-                console.log(chalk.yellow('  ⚠ An exam is in progress.'));
-                console.log(chalk.white('  To return to menu without losing progress, type: ') + chalk.bold.cyan('back'));
-                console.log(chalk.white('  To fully close ICOA CLI, type: ') + chalk.bold.cyan('quit'));
-                console.log(chalk.gray('  Your progress is auto-saved either way.'));
-                console.log();
-                rl.prompt();
-                return;
-            }
-            console.log();
-            console.log(chalk.gray('  ') + chalk.white('exit') + chalk.gray(' returns to the main menu. To fully close ICOA CLI, type ') + chalk.bold.cyan('quit') + chalk.gray('.'));
-            if (mode === 'selection') {
-                printSelectionMenu();
-            }
-            rl.prompt();
-            return;
-        }
-        // Explicit quit — `quit` or `q` always closes the CLI.
-        if (input === 'quit' || input === 'q') {
-            if (getExamState()) {
-                console.log();
-                console.log(chalk.yellow('  ⚠ An exam is in progress — progress is auto-saved.'));
-                console.log(chalk.gray('  Closing anyway. Resume with: ') + chalk.white('icoa --resume'));
-                console.log();
-            }
-            stopLogSync();
-            recordExit();
-            console.log(chalk.gray('  Session saved. Use ') + chalk.white('icoa --resume') + chalk.gray(' to continue.'));
-            resetTerminalTheme();
-            realExit(0);
-            return;
-        }
-        // "back" — return to main menu.
-        //   Real exam:       show "Exam paused", preserve state (server timer is ticking).
-        //   Active demo:     show pause message, keep state so `exam q N` can resume.
-        //   Stale demo:      auto-clear and show menu (demo from a previous session the
-        //                    user long abandoned — hanging state makes the menu lie).
-        //   Nothing:         show selection menu.
-        // A demo is "active" if `startedAt` is within the last 30 minutes. That window
-        // covers an intentional "back to check something and come right back" case but
-        // clears anything left over from a prior session.
-        // T3-9: `menu` is a universal alias for `back` — more discoverable for
-        // K-12 beginners. Both drop to the Selection menu (or pause active exam).
-        if (input === 'back' || input === 'menu') {
-            const state = getExamState();
-            const isRealExam = state && state.session.examId !== 'demo-free';
-            const isActiveDemo = state && state.session.examId === 'demo-free' && (() => {
-                const started = new Date(state.session.startedAt || 0).getTime();
-                return Date.now() - started < 30 * 60 * 1000;
-            })();
-            if (isRealExam) {
-                console.log();
-                console.log(chalk.gray('  Exam paused. Your progress is saved.'));
-                console.log(chalk.white('  Resume: exam q 1') + chalk.gray('  ·  ') + chalk.white('exam review') + chalk.gray('  ·  ') + chalk.white('exam submit'));
-                console.log();
-            }
-            else if (isActiveDemo) {
-                const answered = Object.keys(state.answers).length;
-                const total = state.session.questionCount;
-                console.log();
-                console.log(chalk.gray(`  Demo paused (${answered}/${total} answered). Resume with: `) + chalk.white(`exam q 1`));
-                console.log(chalk.gray('  Or type ') + chalk.white('demo') + chalk.gray(' to restart.'));
-                console.log();
-            }
-            else {
-                // Stale demo state from a past session — clear it so the menu reflects
-                // reality. Demo is free-practice, user can always restart.
-                if (state && state.session.examId === 'demo-free') {
-                    const { clearExamState } = await import('./lib/exam-state.js');
-                    clearExamState('demo-free');
-                }
-                const cfg = getConfig();
-                fetch('https://practice.icoa2026.au/api/icoa/demo-stats', {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({
-                        type: 'post-report-back',
-                        lang: cfg.language || 'en',
-                        timestamp: new Date().toISOString(),
-                    }),
-                    signal: AbortSignal.timeout(5000),
-                }).catch(() => { });
-                if (mode === 'selection') {
-                    printSelectionMenu();
-                }
-                else {
-                    console.log(chalk.gray('  Already at main menu.'));
-                }
-            }
-            rl.prompt();
-            return;
-        }
-        // Help — during exam, route to exam help; otherwise show REPL help
-        if (input === 'help' || input === '?') {
-            if (getExamState()) {
-                processing = true;
-                try {
-                    await program.parseAsync(['node', 'icoa', 'exam', 'help']);
-                }
-                catch { }
-                processing = false;
-                rl.prompt();
-                return;
-            }
-            printReplHelp(isActivated(), mode);
-            rl.prompt();
-            return;
-        }
-        // "more help" — during exam, unlock bonus helps
-        if (input.toLowerCase() === 'more help') {
-            if (getExamState()) {
-                processing = true;
-                try {
-                    await program.parseAsync(['node', 'icoa', 'exam', 'more-help']);
-                }
-                catch { }
-                processing = false;
-                rl.prompt();
-                return;
-            }
-        }
-        // "continue" — after demo, guide to ai4ctf then ctf4ai
-        if (input.toLowerCase() === 'continue') {
-            console.log();
-            console.log(chalk.green.bold('  ═══ AI4CTF — AI as Your Teammate ═══'));
-            console.log();
-            console.log(chalk.white('  In AI4CTF, you solve cybersecurity challenges'));
-            console.log(chalk.white('  with AI by your side.'));
-            console.log();
-            console.log(chalk.white('  In competition, you get AI help at 3 levels:'));
-            console.log(chalk.yellow('    hint a') + chalk.gray('    General guidance (50 uses)'));
-            console.log(chalk.yellow('    hint b') + chalk.gray('    Deep analysis (10 uses)'));
-            console.log(chalk.yellow('    hint c') + chalk.gray('    Critical assist (2 uses)'));
-            console.log();
-            console.log(chalk.white('  Try it now! Type: ') + chalk.bold.green('ai4ctf'));
-            console.log(chalk.gray('  Chat freely with your AI teammate. Type "exit" when done.'));
-            console.log();
-            console.log(chalk.gray('  After ai4ctf, try: ') + chalk.bold.red('ctf4ai') + chalk.gray(' — trick the AI into saying "koala"'));
-            console.log();
-            rl.prompt();
-            return;
-        }
-        // ICOA exam token detection: legacy "ICOA-PE-001" or new Crockford "UAHXP7SWMM"
-        if (/^ICOA-[A-Z]{2,3}-\d{1,6}$/i.test(input.trim())) {
-            processing = true;
-            try {
-                await program.parseAsync(['node', 'icoa', 'exam', 'token', input.trim()]);
-            }
-            catch { }
-            processing = false;
-            rl.prompt();
-            return;
-        }
-        // New 10-char Crockford Base32 token (e.g., UAHXP7SWMM) — no hyphen
-        if (/^[A-Z]{2}[0-9A-HJKMNP-TV-Z]{8}$/i.test(input.trim())) {
-            processing = true;
-            try {
-                await program.parseAsync(['node', 'icoa', 'exam', 'token', input.trim().toUpperCase()]);
-            }
-            catch { }
-            processing = false;
-            rl.prompt();
-            return;
-        }
-        // "exam UAHXP7SWMM" — 10-char token after exam prefix
-        const examTokenMatch = input.match(/^exam\s+([A-Z]{2}[0-9A-HJKMNP-TV-Z]{8})$/i);
-        if (examTokenMatch) {
-            processing = true;
-            try {
-                await program.parseAsync(['node', 'icoa', 'exam', 'token', examTokenMatch[1].toUpperCase()]);
-            }
-            catch { }
-            processing = false;
-            rl.prompt();
-            return;
-        }
-        // "exam AU" / "exam PE" — shortcut to exam list <country>
-        const examCountryMatch = input.match(/^exam\s+([A-Z]{2,3})$/i);
-        if (examCountryMatch) {
-            processing = true;
-            try {
-                await program.parseAsync(['node', 'icoa', 'exam', 'list', examCountryMatch[1]]);
-            }
-            catch { }
-            processing = false;
-            rl.prompt();
-            return;
-        }
-        // Clear
-        if (input === 'clear' || input === 'cls') {
-            console.clear();
-            rl.prompt();
-            return;
-        }
-        // Activate token
-        if (input.startsWith('activate ')) {
-            const token = input.slice(9).trim();
-            const result = activateToken(token);
-            if (result === 'ok') {
-                console.log(chalk.green('  Access granted! Token bound to this device.'));
-            }
-            else if (result === 'already_bound') {
-                console.log();
-                console.log(chalk.red('  Token already activated on a different device.'));
-                console.log(chalk.gray('  Each token binds to the first device that uses it. If you lost the device,'));
-                console.log(chalk.gray('  contact your proctor to have the token re-issued for a new device.'));
-            }
-            else {
-                console.log();
-                console.log(chalk.red('  Token not recognized.'));
-                console.log(chalk.gray('  Possible reasons:'));
-                console.log(chalk.white('    • ') + chalk.gray('Typo — tokens are case-insensitive, 10 chars, start with a 2-letter country code (e.g. ') + chalk.cyan('UAK7M2R9Q4') + chalk.gray(')'));
-                console.log(chalk.white('    • ') + chalk.gray('Expired — ask your proctor or organizer for a fresh token'));
-                console.log(chalk.white('    • ') + chalk.gray('Network — verify connection to ') + chalk.cyan('practice.icoa2026.au'));
-                console.log(chalk.gray('  Still stuck? type ') + chalk.cyan('help') + chalk.gray(' or try ') + chalk.cyan('exam demo') + chalk.gray(' for a free practice round.'));
-            }
-            console.log();
-            rl.prompt();
-            return;
-        }
-        if (input === 'activate') {
-            console.log(chalk.gray('  Usage: ') + chalk.white('activate <token>'));
-            console.log();
-            rl.prompt();
-            return;
-        }
-        // ─── Quick exam answer shortcuts ───
-        // "A" / "B" / "C" / "D" → answer current question (MCQ only)
-        // "2 C" / "5 A" → answer specific question (MCQ only)
-        // Practical questions (Q31-40) require flag format (ICOA{...}) — single
-        // letters on those would be silently accepted as the wrong flag answer,
-        // which is a footgun. Block and nudge the user toward the flag syntax.
-        const examState = getExamState();
-        if (examState) {
-            const upper = input.toUpperCase().trim();
-            // Helper: is question N practical (no A/B/C/D options)?
-            const isPracticalQ = (n) => {
-                const q = examState.questions.find((qq) => qq.number === n);
-                if (!q)
-                    return false;
-                return q.type === 'ai4ctf' || q.type === 'ctf4ai' || (q.options && !q.options.A && !q.options.B);
-            };
-            // Helper: suggest the right chat entry for a practical question
-            const practicalGuidance = (n) => {
-                const isReal = examState.session.examId !== 'demo-free';
-                const cmd = isReal && n >= 39 ? 'ctf4ai' : isReal && n >= 31 ? 'ai4ctf' : null;
-                console.log();
-                console.log(chalk.yellow(`  Q${n} is a practical question — letters (A/B/C/D) don't apply here.`));
-                if (cmd) {
-                    console.log(chalk.white('  Enter the AI chat for this question:  ') + chalk.bold.cyan(cmd));
-                    console.log(chalk.gray('  Or submit a flag directly: ') + chalk.green(`exam answer ${n} ICOA{your_flag}`));
-                }
-                else {
-                    console.log(chalk.gray('  Submit a flag: ') + chalk.green(`exam answer ${n} ICOA{your_flag}`));
-                }
-                console.log();
-            };
-            // Single letter: A, B, C, D → answer current question (only if MCQ)
-            if (/^[ABCD]$/.test(upper)) {
-                const currentQ = examState._lastQ || 1;
-                if (isPracticalQ(currentQ)) {
-                    practicalGuidance(currentQ);
-                    rl.prompt();
-                    return;
-                }
-                processing = true;
-                try {
-                    await program.parseAsync(['node', 'icoa', 'exam', 'answer', String(currentQ), upper]);
-                }
-                catch { }
-                processing = false;
-                rl.prompt();
-                return;
-            }
-            // "N X" pattern: e.g. "2 C", "15 A" (MCQ only — same protection)
-            const match = upper.match(/^(\d+)\s+([ABCD])$/);
-            if (match) {
-                const targetQ = parseInt(match[1], 10);
-                if (isPracticalQ(targetQ)) {
-                    practicalGuidance(targetQ);
-                    rl.prompt();
-                    return;
-                }
-                processing = true;
-                try {
-                    await program.parseAsync(['node', 'icoa', 'exam', 'answer', match[1], match[2]]);
-                }
-                catch { }
-                processing = false;
-                rl.prompt();
-                return;
-            }
-        }
-        const cmd = input.split(/\s+/)[0].toLowerCase();
-        // ─── Mode-based command filtering ───
-        const selectionCommands = ['exam', 'demo', 'retry', 'nations', 'next', 'prev', 'continue', 'setup', 'lang', 'ref', 'ai4ctf', 'ctf4ai', 'mark', 'unmark', 'review', 'submit', 'env'];
-        const organizerCommands = ['join', 'exam', 'demo', 'retry', 'next', 'prev', 'logout', 'setup', 'lang', 'ref', 'ctf', 'mark', 'unmark', 'review', 'submit'];
-        // Selection mode allows shell commands prefixed with ! — contestants
-        // need !python3, !cat, !base64 etc. for practical questions (Q31-Q40).
-        // Also allow bare `python` / `python3` / `python3.12` since contestants
-        // naturally type that when they want interactive Python.
-        // BLOCKED_COMMANDS check downstream still rejects dangerous ones.
-        const isPythonCmd = /^python3?(\.\d+)?$/.test(cmd);
-        const isShellCommand = input.startsWith('!') || cmd.startsWith('!') || isPythonCmd;
-        if (mode === 'selection' && !isShellCommand && !selectionCommands.includes(cmd)) {
-            console.log(chalk.gray('  Not available in Selection mode.'));
-            if (examState) {
-                const currentQ = examState._lastQ || 1;
-                console.log(chalk.white(`  Resume exam: exam q ${currentQ}`) + chalk.gray('  ·  ') + chalk.white('A/B/C/D') + chalk.gray(' to answer'));
-            }
-            else {
-                console.log(chalk.gray('  Try: demo  ·  setup to switch mode'));
-            }
-            console.log();
-            rl.prompt();
-            return;
-        }
-        if (mode === 'organizer' && !organizerCommands.includes(cmd)) {
-            console.log(chalk.gray('  Not available in Organizer mode. Switch via: setup'));
-            console.log();
-            rl.prompt();
-            return;
-        }
-        // Token check — only in olympiad mode
-        if (mode === 'olympiad' && (!isActivated() || !isDeviceMatch()) && !isFreeCommand(cmd)) {
-            console.log(chalk.yellow('  Restricted mode. ') + chalk.gray('Enter your access token:'));
-            console.log(chalk.white('    activate <token>'));
-            console.log();
-            console.log(chalk.gray('  Free commands: ') + chalk.white('ref [topic]') + chalk.gray(', ') + chalk.white('help') + chalk.gray(', ') + chalk.white('exit'));
-            console.log();
-            rl.prompt();
-            return;
-        }
-        // Check if it's a known ICOA command or a system command
-        const knownCommands = [
-            'join', 'activate', 'challenges', 'ch', 'open', 'submit', 'flag',
-            'scoreboard', 'sb', 'status', 'time', 'hint', 'hint-b', 'hint-c',
-            'hint-budget', 'ref', 'shell', 'files', 'connect', 'note',
-            'log', 'lang', 'setup', 'env', 'ai4ctf', 'model', 'ctf',
-            'exam', 'demo', 'retry', 'nations', 'next', 'prev', 'continue', 'logout', 'ctf4ai',
-            'mark', 'unmark', 'review', 'submit',
-        ];
-        if (!knownCommands.includes(cmd)) {
-            // Block dangerous commands
-            if (BLOCKED_COMMANDS.has(cmd)) {
-                console.log(chalk.red(`  Blocked: ${cmd} is not allowed during competition.`));
-                console.log();
-                rl.prompt();
-                return;
-            }
-            // Block path escape attempts
-            if (/(?:^|\s)(?:\/(?!home\/|Users\/|tmp\/)|\.\.\/|~\/)/.test(input) && !input.startsWith('cd ')) {
-                // Allow relative paths within workspace, block absolute paths outside
-                const hasAbsPath = /(?:^|\s)\/(?!home\/\w+\/icoa-workspace|Users\/\w+\/icoa-workspace|tmp\/)/.test(input);
-                const hasParentPath = /\.\./.test(input);
-                if (hasAbsPath || hasParentPath) {
-                    console.log(chalk.red('  Blocked: access outside workspace is not allowed.'));
-                    console.log(chalk.gray(`  Workspace: ${WORKSPACE}`));
-                    console.log();
-                    rl.prompt();
-                    return;
-                }
-            }
-            // Force Python 3.12 — rewrite python/python3 to correct binary
-            // Strip optional ! prefix that contestants use to disambiguate shell
-            // commands from CLI commands (e.g. !python3 vs cli's "python" command).
-            let resolvedInput = input.startsWith('!') ? input.slice(1).trim() : input;
-            if (process.platform === 'darwin') {
-                const py12 = '/opt/homebrew/opt/python@3.12/bin/python3.12';
-                resolvedInput = resolvedInput
-                    .replace(/^python3?\s/, `${py12} `)
-                    .replace(/^(python3|python)$/, py12);
-            }
-            else if (process.platform === 'win32') {
-                // Windows: the binary is `python` (not `python3`). Python Launcher `py -3`
-                // is also common. Rewrite `python3 xyz` → `python xyz` or `py -3 xyz` so
-                // students who followed Unix-oriented practical-question hints don't get
-                // "'python3' is not recognized". Prefer `py -3` if the launcher exists
-                // (handles multi-version installs); fall back to plain `python`.
-                const pyCmd = (() => {
-                    try {
-                        execSyncFn('py -3 --version', { stdio: ['ignore', 'ignore', 'ignore'], timeout: 1500 });
-                        return 'py -3';
-                    }
-                    catch { }
-                    return 'python';
-                })();
-                resolvedInput = resolvedInput
-                    .replace(/^python3?(\.\d+)?\s/, `${pyCmd} `)
-                    .replace(/^python3?(\.\d+)?$/, pyCmd);
-            }
-            else {
-                // Linux/WSL: python → python3 (or python3.12 if available)
-                const py12 = (() => { try {
-                    execSyncFn('which python3.12', { stdio: 'ignore' });
-                    return 'python3.12';
-                }
-                catch {
-                    return 'python3';
-                } })();
-                resolvedInput = resolvedInput
-                    .replace(/^python\s/, `${py12} `)
-                    .replace(/^python$/, py12);
-            }
-            // Ensure workspace directory
-            const cwd = ensureWorkspace();
-            // Interactive Python (no script args, no -c): print welcome banner and
-            // pre-import common CTF modules via a startup file. Makes entry painless
-            // for contestants — they land in a shell with base64/struct/hashlib/pwn
-            // already imported and see a 4-line cheat sheet of common one-liners.
-            const isInteractivePython = /^(\S*python3?(\.\d+)?)\s*$/.test(resolvedInput);
-            if (isInteractivePython) {
-                const startupPath = ensurePythonStartup();
-                resolvedInput = `PYTHONSTARTUP="${startupPath}" ${resolvedInput}`;
-                printPythonBanner();
-            }
-            // Route to Docker sandbox if available, otherwise system shell (in workspace)
-            processing = true;
-            try {
-                if (isDockerAvailable()) {
-                    const ready = await ensureSandbox();
-                    if (ready) {
-                        await runInSandbox(resolvedInput, rl);
-                    }
-                    else {
-                        await runSystemCommand(resolvedInput, rl, cwd);
-                    }
-                }
-                else {
-                    await runSystemCommand(resolvedInput, rl, cwd);
-                }
-            }
-            catch {
-                console.log(chalk.yellow(`  Command failed: ${cmd}`));
-            }
-            processing = false;
-            console.log();
-            rl.prompt();
-            return;
-        }
-        processing = true;
-        // During an exam, `submit` must mean "submit my exam", not "submit a CTF
-        // flag". The `mapCommand` shortcut table always points `submit` at CTF,
-        // which silently fails in Selection mode and leaves users stuck. Route
-        // to exam submit here instead.
-        const submitInExam = examState && (input.toLowerCase() === 'submit');
-        const args = submitInExam ? ['exam', 'submit'] : mapCommand(input);
-        // Pause REPL readline for commands that read stdin (join)
-        const needsPause = args[0] === 'ctf' && args[1] === 'join';
-        if (needsPause)
-            rl.pause();
-        process.exit = (() => {
-            throw new Error(INTERCEPT);
-        });
-        try {
-            await program.parseAsync(['node', 'icoa', ...args]);
-        }
-        catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            if (msg === INTERCEPT) {
-                // Command tried to exit — continue REPL
-            }
-            else if (msg.includes('commander.unknownCommand')) {
-                // T4-12: typo suggestion via Levenshtein distance. Shorten the
-                // "unknown command" frustration by pointing to the likely-intended
-                // command when the user's input is within 2 edits of a real one.
-                const { distance } = await import('fastest-levenshtein');
-                const KNOWN_CMDS = [
-                    'ctf', 'hint', 'hint-b', 'hint-c', 'hint-budget', 'ref', 'shell',
-                    'files', 'connect', 'note', 'log', 'lang', 'setup', 'env',
-                    'ai4ctf', 'exam', 'ctf4ai', 'theme',
-                    'clear', 'cls', 'quit', 'exit', 'back', 'menu', 'help',
-                    'continue', 'activate', 'demo', 'challenges', 'status', 'scoreboard',
-                    'join', 'logout',
-                ];
-                const firstWord = cmd.split(/\s+/)[0] || cmd;
-                let best = { word: '', dist: Infinity };
-                for (const known of KNOWN_CMDS) {
-                    const d = distance(firstWord.toLowerCase(), known);
-                    if (d < best.dist)
-                        best = { word: known, dist: d };
-                }
-                console.log(chalk.yellow(`  Unknown command: ${cmd}.`));
-                if (best.dist > 0 && best.dist <= 2) {
-                    console.log(chalk.gray('  Did you mean: ') + chalk.bold.cyan(best.word) + chalk.gray('?'));
-                }
-                console.log(chalk.gray('  Type ') + chalk.cyan('help') + chalk.gray(' for the full command list.'));
-            }
-            else if (msg.includes('commander.')) {
-                // Internal Commander errors — ignore
-            }
-            else if (msg.includes('fetch failed') || msg.includes('ECONNREFUSED') || msg.includes('ETIMEDOUT')) {
-                console.log(chalk.yellow('  Network error. Check your connection.'));
-            }
-        }
-        finally {
-            process.exit = realExit;
-            processing = false;
-            if (needsPause)
-                rl.resume();
-        }
-        // Switch prompt if entering chat/challenge mode
-        if (isChatActive()) {
-            rl.setPrompt(chalk.magenta('ai4ctf> '));
-        }
-        else if (isCtf4aiActive()) {
-            rl.setPrompt(chalk.red('ctf4ai> '));
-        }
-        console.log();
-        rl.prompt();
-    });
-    // SIGINT (Ctrl+C) — intercept gracefully so beginners don't lose confidence.
-    // Without this listener, readline's default is to raise SIGINT which our
-    // theme.ts handler converts to process.exit(130). Installing this listener
-    // swallows that path and lets the user get oriented. If they want to exit,
-    // they type `quit` or hit Ctrl+D (sends EOF → 'close' event below).
-    rl.on('SIGINT', () => {
-        console.log();
-        if (isChatActive() || isCtf4aiActive()) {
-            console.log(chalk.yellow('  Type ') + chalk.bold.cyan('exit') + chalk.yellow(' to leave chat, or Ctrl+D to close ICOA CLI.'));
-        }
-        else if (getExamState()) {
-            console.log(chalk.yellow('  Exam paused. Your answers are auto-saved.'));
-            console.log(chalk.white('  Resume: ') + chalk.cyan('exam q 1') +
-                chalk.gray('  ·  Back to menu: ') + chalk.cyan('back') +
-                chalk.gray('  ·  Close CLI: ') + chalk.cyan('quit'));
-        }
-        else {
-            console.log(chalk.yellow('  Press Ctrl+D or type ') + chalk.bold.cyan('quit') + chalk.yellow(' to close. ') + chalk.bold.cyan('help') + chalk.yellow(' for commands.'));
-        }
-        console.log();
-        rl.prompt();
-    });
-    rl.on('close', () => {
-        stopLogSync();
-        recordExit();
-        resetTerminalTheme();
-        realExit(0);
-    });
-}
-function runSystemCommand(input, rl, cwd) {
-    return new Promise((resolve) => {
-        // Fully release the TTY so interactive children (python3, bash, etc.)
-        // get a clean terminal with proper echo. `rl.pause()` alone doesn't
-        // reset raw mode or release stdin — readline keeps it in line-editing
-        // mode where typed characters don't display until our REPL reads a line.
-        const stdin = process.stdin;
-        const wasRaw = stdin.isTTY ? !!stdin.isRaw : false;
-        rl.pause();
-        if (stdin.isTTY && typeof stdin.setRawMode === 'function') {
-            try {
-                stdin.setRawMode(false);
-            }
-            catch { }
-        }
-        const child = spawn(input, {
-            shell: true,
-            stdio: 'inherit',
-            cwd: cwd || process.cwd(),
-        });
-        const restore = () => {
-            if (stdin.isTTY && typeof stdin.setRawMode === 'function' && wasRaw) {
-                try {
-                    stdin.setRawMode(true);
-                }
-                catch { }
-            }
-            rl.resume();
-            resolve();
-        };
-        child.on('close', restore);
-        child.on('error', restore);
-    });
-}
-function mapCommand(input) {
-    const parts = input.split(/\s+/);
-    const cmd = parts[0].toLowerCase();
-    const rest = parts.slice(1);
-    const ctfShortcuts = {
-        'demo': ['exam', 'demo'],
-        'retry': ['exam', 'demo-retry'],
-        'nations': ['exam', 'nations'],
-        'next': ['exam', 'next'],
-        'prev': ['exam', 'prev'],
-        'mark': ['exam', 'mark', ...rest],
-        'unmark': ['exam', 'unmark', ...rest],
-        'review': ['exam', 'review'],
-        'logout': ['ctf', 'logout'],
-        'join': ['ctf', 'join', ...rest],
-        'activate': ['ctf', 'activate', ...rest],
-        'challenges': ['ctf', 'challenges'],
-        'ch': ['ctf', 'challenges'],
-        'open': ['ctf', 'open', ...rest],
-        'submit': ['ctf', 'submit', ...rest],
-        'flag': ['ctf', 'submit', ...rest],
-        'scoreboard': ['ctf', 'scoreboard', ...rest],
-        'sb': ['ctf', 'scoreboard', ...rest],
-        'status': ['ctf', 'status'],
-        'time': ['ctf', 'time'],
-    };
-    if (ctfShortcuts[cmd]) {
-        return ctfShortcuts[cmd];
-    }
-    const directCommands = [
-        'hint', 'hint-b', 'hint-c', 'hint-budget',
-        'ref', 'shell', 'files', 'connect', 'note',
-        'log', 'lang', 'setup', 'env', 'ai4ctf', 'model',
-        'ctf', 'exam', 'ctf4ai',
-    ];
-    if (directCommands.includes(cmd)) {
-        return [cmd, ...rest];
-    }
-    return parts;
-}
-function printReplHelp(activated, mode = 'olympiad') {
-    console.log();
-    // ─── Selection / Organizer: lightweight help ───
-    if (mode === 'selection' || mode === 'organizer') {
-        console.log(chalk.bold.white('  Exam'));
-        console.log(chalk.white('    join <url>          ') + chalk.gray('Connect to exam server'));
-        console.log(chalk.white('    exam list           ') + chalk.gray('Available exams'));
-        console.log(chalk.white('    exam start <id>     ') + chalk.gray('Begin an exam'));
-        console.log(chalk.white('    exam q [n]          ') + chalk.gray('View questions'));
-        console.log(chalk.white('    exam answer <n> <X> ') + chalk.gray('Answer question'));
-        console.log(chalk.white('    exam review         ') + chalk.gray('Review all answers'));
-        console.log(chalk.white('    exam submit         ') + chalk.gray('Submit for grading'));
-        console.log(chalk.white('    exam result         ') + chalk.gray('View your score'));
-        console.log();
-        console.log(chalk.bold.white('  System'));
-        console.log(chalk.white('    ref [topic]         ') + chalk.gray('Quick reference'));
-        console.log(chalk.white('    setup               ') + chalk.gray('Settings / switch mode'));
-        console.log(chalk.white('    lang [code]         ') + chalk.gray('Switch language'));
-        console.log(chalk.white('    clear               ') + chalk.gray('Clear screen'));
-        console.log(chalk.white('    exit                ') + chalk.gray('Quit'));
-        console.log();
-        return;
-    }
-    // ─── Olympiad: full help ───
-    if (!activated) {
-        console.log(chalk.bold.yellow('  Restricted Mode — activate with a token to unlock all commands'));
-        console.log();
-        console.log(chalk.white('    activate <token>    ') + chalk.gray('Unlock full access'));
-        console.log(chalk.white('    ref [topic]         ') + chalk.gray('Quick reference'));
-        console.log(chalk.white('    exit                ') + chalk.gray('Quit'));
-        console.log();
-        return;
-    }
-    // How it works — workflow overview
-    console.log(chalk.cyan('  ═══════════════════════════════════════════════'));
-    console.log(chalk.bold.white('  How it works'));
-    console.log();
-    console.log(chalk.gray('  1. Browse ') + chalk.white('challenges') + chalk.gray(' and pick one'));
-    console.log(chalk.gray('  2. ') + chalk.white('open <id>') + chalk.gray(' to read the challenge'));
-    console.log(chalk.gray('  3. Use ') + chalk.white('hint') + chalk.gray(' / ') + chalk.white('hint-b') + chalk.gray(' / ') + chalk.white('hint-c') + chalk.gray(' when stuck'));
-    console.log(chalk.gray('  4. ') + chalk.white('submit <id> icoa{flag}') + chalk.gray(' to score points'));
-    console.log(chalk.gray('  5. Check ') + chalk.white('scoreboard') + chalk.gray(' to track your rank'));
-    console.log(chalk.cyan('  ═══════════════════════════════════════════════'));
-    console.log();
-    console.log(chalk.bold.white('  Competition'));
-    console.log(chalk.white('    join <url>          ') + chalk.gray('Connect to CTFd'));
-    console.log(chalk.white('    challenges (ch)     ') + chalk.gray('List challenges by category'));
-    console.log(chalk.white('    open <id>           ') + chalk.gray('Read challenge + get next steps'));
-    console.log(chalk.white('    submit <id> <flag>  ') + chalk.gray('Submit a flag'));
-    console.log(chalk.white('    scoreboard (sb)     ') + chalk.gray('Live rankings'));
-    console.log(chalk.white('    status              ') + chalk.gray('Your score, budget & timer'));
-    console.log(chalk.white('    time                ') + chalk.gray('Countdown timer'));
-    console.log();
-    console.log(chalk.bold.white('  AI Teammate') + chalk.gray(' — 3 levels, use wisely'));
-    console.log(chalk.white('    hint "question"     ') + chalk.gray('Level A — General guidance (50 uses)'));
-    console.log(chalk.white('    hint-b "question"   ') + chalk.gray('Level B — Deep analysis (10 uses)'));
-    console.log(chalk.white('    hint-c "question"   ') + chalk.gray('Level C — Critical assist (2 uses)'));
-    console.log(chalk.white('    hint budget         ') + chalk.gray('Check remaining uses'));
-    console.log(chalk.white('    ai4ctf              ') + chalk.gray('Free-chat with AI (no limit)'));
-    console.log();
-    console.log(chalk.bold.white('  Tools'));
-    console.log(chalk.white('    ref [topic]         ') + chalk.gray('Quick reference (linux, web, crypto...)'));
-    console.log(chalk.white('    shell               ') + chalk.gray('Docker sandbox'));
-    console.log(chalk.white('    files <id>          ') + chalk.gray('Download challenge files'));
-    console.log(chalk.white('    connect <id>        ') + chalk.gray('Connect to remote target'));
-    console.log(chalk.white('    note [text]         ') + chalk.gray('Personal notepad'));
-    console.log(chalk.white('    log                 ') + chalk.gray('Session history'));
-    console.log();
-    console.log(chalk.bold.white('  System'));
-    console.log(chalk.white('    setup               ') + chalk.gray('Configure settings'));
-    console.log(chalk.white('    lang [code]         ') + chalk.gray('Switch language (15 supported)'));
-    console.log(chalk.white('    logout              ') + chalk.gray('Disconnect'));
-    console.log(chalk.white('    clear               ') + chalk.gray('Clear screen'));
-    console.log(chalk.white('    exit                ') + chalk.gray('Quit (session saved)'));
-    console.log();
-}
+import{createInterface as o}from"node:readline";import{spawn as e,execSync as t}from"node:child_process";import chalk from"chalk";import{isConnected as n,getConfig as l,saveConfig as s}from"./lib/config.js";import{isActivated as a,activateToken as r,isFreeCommand as i,isDeviceMatch as c,recordExit as g,recordResume as y,isFirstRunOrUpgrade as m,markVersionSeen as p}from"./lib/access.js";import{setReplMode as d}from"./lib/ui.js";import{isChatActive as h,handleChatMessage as u}from"./commands/ai4ctf.js";import{isCtf4aiActive as w,handleCtf4aiMessage as f}from"./commands/ctf4ai-demo.js";import{getExamState as b,getRealExamState as x,getDemoState as v}from"./lib/exam-state.js";import{getDemoStats as C}from"./lib/demo-stats.js";import{isExamSetupComplete as k}from"./lib/exam-setup.js";import{DEMO_PICK_SIZE as I,DEMO_POOL_SIZE as A}from"./lib/demo-exam.js";import{isNativeWindowsCmd as T}from"./lib/platform.js";import{resetTerminalTheme as S}from"./lib/theme.js";import{ensureSandbox as $,runInSandbox as O,isDockerAvailable as q}from"./lib/sandbox.js";import{logCommand as L}from"./lib/logger.js";import{startLogSync as j,stopLogSync as E}from"./lib/log-sync.js";import{existsSync as P,mkdirSync as R}from"node:fs";import{join as N}from"node:path";import{homedir as D}from"node:os";function F(){return x()?chalk.cyan("exam> "):v()?chalk.yellow("demo> "):chalk.green("icoa> ")}const M=N(D(),"icoa-workspace");function U(){return P(M)||R(M,{recursive:!0}),M}const z=new Set(["sudo","su","doas","pkexec","brew","apt","apt-get","yum","choco","npm","npx","pip","pip3","shutdown","reboot","halt","mkfs","fdisk","dd","iptables","ufw"]),B="__REPL_NO_EXIT__",W="2.5.1";function Q(){const o=C(),e=k(),n=`Free practice — ${I} questions (from pool of ${A})`,l=T();if(console.log(),console.log("   "+chalk.cyan.bold("[Selection Mode]")),console.log(),l)console.log(chalk.gray("   Platform: ")+chalk.white("Windows cmd.exe")+chalk.gray(" — routed to Paper C (MCQ-only, 45 min, 70 pts, zero extra tools)")),console.log();else if(o.attempts>0){const o=function(){const o=["python3.12 --version","/opt/homebrew/opt/python@3.12/bin/python3.12 --version","/usr/local/opt/python@3.12/bin/python3.12 --version","python3 --version","python --version","py -3.12 --version","py -3 --version"];let e="",n="missing";for(const l of o)try{const o=t(l,{encoding:"utf-8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim().replace("Python ",""),[s,a]=o.split(".").map(Number);if(3===s&&12===a)return{ok:!0,version:o,status:"ok"};e=o,n=3===s&&a>=10&&a<12?"old":3===s&&a>12?"new":"missing"}catch{}return{ok:"missing"!==n,version:e,status:n}}();"missing"===o.status?(console.log(chalk.yellow("   ⚠ Python not detected. For exam practical questions:")),console.log(chalk.gray("     → ")+chalk.bold.cyan("env python")+chalk.gray("  (platform install guide)")),console.log()):"new"===o.status&&(console.log(chalk.yellow(`   ⚠ Python ${o.version} may lack CTF wheels. Python 3.12 recommended:`)),console.log(chalk.gray("     → ")+chalk.bold.cyan("env python")+chalk.gray("  (install guide)")),console.log())}if(0===o.attempts)console.log(chalk.white("   New here? Start with ")+chalk.bold.cyan("demo")+chalk.white(" — it takes a few minutes.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.cyan("     demo")+chalk.gray(`            ${n}`)),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"));else if(e||l){const e=1===o.attempts?"attempt":"attempts";o.attempts>0&&console.log(chalk.green("   ✓ Demo completed ")+chalk.gray(`(${o.attempts} ${e})`)),l||console.log(chalk.green("   ✓ Environment ready")),console.log(chalk.yellow("   → Enter your exam token to begin.")),console.log(chalk.gray("     (10-char code from your organizer, starts with your country code like ")+chalk.cyan("UA")+chalk.gray(" — case-insensitive)")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.yellow("     exam <token>")+chalk.gray("    Enter exam (primary action — use your organizer-issued token)")),console.log(chalk.gray("                     format: ")+chalk.white("exam UAxxxxxxxx")+chalk.gray("  (2-letter country prefix + 8 chars)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Other commands:")),console.log(chalk.white("     demo")+chalk.gray(`            ${n}`)),l||console.log(chalk.white("     exam setup")+chalk.gray("      Re-verify tool environment")),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"))}else{const e=1===o.attempts?"attempt":"attempts";console.log(chalk.green("   ✓ Demo completed ")+chalk.gray(`(${o.attempts} ${e}${o.bestPercentage>0?` · best ${o.bestPercentage}%`:""})`)),console.log(chalk.yellow("   → Next: prepare your environment for the real exam.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("     demo")+chalk.gray(`            ${n}`)),console.log(chalk.bold.yellow("     exam setup")+chalk.gray("      Install tools for national selection (~150MB)")),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"))}console.log(chalk.gray("   ")+chalk.gray("Tip: ")+chalk.cyan("help")+chalk.gray(" for commands · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()}export async function startRepl(e,x){const v=l(),C=n(),k=process.exit.bind(process),I=a();if(v.demoCleanedForVersion!==W){try{const{existsSync:o,unlinkSync:e}=await import("node:fs"),{join:t}=await import("node:path"),{getIcoaDir:n}=await import("./lib/config.js"),l=t(n(),"demo-state.json");o(l)&&e(l)}catch{}s({demoCleanedForVersion:W})}const{select:A,confirm:T}=await import("@inquirer/prompts"),_=v.mode||"",V=[{name:`  ${chalk.bold("National Selection")}         ${chalk.gray("—")}  ${chalk.gray("demo, exam (lightweight)")}`,value:"selection"},{name:`  ${chalk.bold("International Olympiad")}     ${chalk.gray("—")}  ${chalk.gray("CTF × AI (~500MB, advanced)")}`,value:"olympiad"},{name:`  ${chalk.bold("National/Regional Partner")}  ${chalk.gray("—")}  ${chalk.gray("organizer tools (tokens, competitions)")}`,value:"organizer"},{name:`  ${chalk.gray("About ICOA")}                 ${chalk.gray("·")}  ${chalk.gray("Info & contact")}`,value:"about"}];console.log(chalk.gray("   Use ")+chalk.yellow("↑")+chalk.gray(" or ")+chalk.yellow("↓")+chalk.gray(" to select, ")+chalk.yellow("Enter")+chalk.gray(" to confirm.")),console.log();let G="";for(;!G;){const o=await A({message:"Mode",choices:V,default:_||"selection"});"about"!==o?G=o:(console.clear(),console.log(),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(chalk.bold.yellow("   ICOA")+chalk.white(" — AI-Native CLI OS for Cyber & AI Security")),console.log(chalk.gray("   Olympiad & Competition  ·  K-12 to University")),console.log(chalk.cyan("  ───────────────────────────────────────────────────")),console.log(),console.log(chalk.bold.white("   What Makes ICOA Different")),console.log(chalk.gray("   · AI-native     AI teammate, AI adversary, AI translation")),console.log(chalk.gray("   · CLI OS        Complete competition environment in terminal")),console.log(chalk.gray("   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured")),console.log(chalk.gray("   · Global scale  15,000+ concurrent exams · 15 languages")),console.log(),console.log(chalk.bold.white("   Competition Format")),console.log("   "+chalk.green.bold("AI4CTF")+chalk.gray(" [Day 1]  AI as teammate — 5hr jeopardy CTF")),console.log("   "+chalk.red.bold("CTF4AI")+chalk.gray(" [Day 2]  Challenge AI — adversarial ML, red-team")),console.log(),console.log(chalk.white("   Sydney, Australia")+chalk.gray("  ·  Jun 27 - Jul 2, 2026  ·  40+ countries")),console.log(),console.log(chalk.bold.white("   Organized by")+chalk.gray("  ASRA (Australia) · ICO Foundation Inc")),console.log(chalk.bold.white("   Contact     ")+chalk.cyan(" australia@icoa2026.au  ·  accreditation@icoa2026.au")),console.log(chalk.bold.white("   Website     ")+chalk.cyan.underline(" https://icoa2026.au")),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(),console.log(chalk.gray("   Press ")+chalk.yellow("Enter")+chalk.gray(" to return...")),await new Promise(o=>{const e=t=>{process.stdin.removeListener("data",e),process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!1),process.stdin.pause(),o()};process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.once("data",e)}),console.clear())}if("olympiad"===G&&"olympiad"!==_&&(console.log(),console.log(chalk.yellow("   This mode will download ~500MB of CTF tools and AI models.")),await T({message:"Continue?",default:!0})||(G="selection",console.log(chalk.gray("   Switched to National Selection mode.")))),G!==_&&s({mode:G}),console.log(),"olympiad"===G&&m(W)){p(W),console.log(chalk.gray("   Checking competition environment..."));const{execSync:o}=await import("node:child_process"),e=[{name:"pwntools",cmd:'python3 -c "import pwn"'},{name:"z3-solver",cmd:'python3 -c "import z3"'},{name:"numpy",cmd:'python3 -c "import numpy"'},{name:"requests",cmd:'python3 -c "import requests"'}];let t=0;for(const n of e)try{o(n.cmd,{stdio:"ignore"})}catch{t++}if(t>0){console.log(chalk.yellow(`   ${t} core libraries missing.`));try{const{confirm:o}=await import("@inquirer/prompts");if(await o({message:"  Install competition Python libraries now?",default:!0,theme:{prefix:"",style:{message:o=>chalk.green(o),defaultAnswer:o=>chalk.green(o)}}})){console.log();const{execSync:o}=await import("node:child_process");o("icoa env setup",{stdio:"inherit"})}}catch{console.log(chalk.gray("   Run ")+chalk.white("env setup")+chalk.gray(" later to install."))}console.log()}else console.log(chalk.green("   All core libraries ready.")),console.log()}if(x){const o=y();if(o){const e=Math.floor(o.awaySeconds/60),t=o.awaySeconds%60;console.log(chalk.yellow(`   Session resumed. Away: ${e}m ${t}s | Total exits: ${o.exitCount}`)),console.log()}}"selection"===G?Q():"organizer"===G?(console.log(chalk.yellow.bold("   [National/Regional Partner]")),console.log(),console.log(chalk.bold.white("   ██╗ ██████╗ ██████╗  █████╗")),console.log(chalk.bold.white("   ██║██╔════╝██╔═══██╗██╔══██╗")),console.log(chalk.bold.white("   ██║██║     ██║   ██║███████║")),console.log(chalk.bold.white("   ██║██║     ██║   ██║██╔══██║")),console.log(chalk.bold.white("   ██║╚██████╗╚██████╔╝██║  ██║")),console.log(chalk.bold.white("   ╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝")),console.log(),console.log(chalk.yellow("   International Cyber Olympiad in AI 2026")),console.log(chalk.bold.magenta("   The World's First AI-Native CLI Operating System")),console.log(chalk.bold.magenta("   for Cybersecurity & AI Security Competition")),console.log(chalk.bold.magenta("   and Olympiad for K-12")),console.log(chalk.gray("   Sydney, Australia · Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.white("   Vision")),console.log(chalk.gray("   Building a global pipeline for youth cyber & AI")),console.log(chalk.gray("   security talent through education and competition.")),console.log(),console.log(chalk.white("   Capacity")),console.log(chalk.gray("   15,000+ concurrent online examinations")),console.log(chalk.gray("   National selection, training, and education support")),console.log(),console.log(chalk.white("   Olympic Spirit")),console.log(chalk.gray("   Excellence · Friendship · Respect")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   New country accreditation & support:")),console.log(chalk.cyan("     australia@icoa2026.au")),console.log(chalk.cyan("     accreditation@icoa2026.au")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),C?(console.log(chalk.green(`   Logged in as ${v.userName}`)),console.log(chalk.white("     exam list")+chalk.gray("       Manage exams")),console.log(chalk.white("     logout")+chalk.gray("          Disconnect"))):console.log(chalk.white("     join <url>")+chalk.gray("      Connect to manage exams")),console.log()):I&&!c()?(console.log(chalk.red("   Token was activated on a different device.")),console.log(chalk.gray("   Contact organizer for assistance.")),console.log()):C?(console.log(chalk.green.bold(`   Welcome back, ${v.userName}!`)),console.log(chalk.gray(`   Connected to ${v.ctfdUrl}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Ready to compete? Start here:")),console.log(),console.log(chalk.bold.cyan("     challenges")+chalk.gray("     Browse challenges by category")),console.log(chalk.white("     status")+chalk.gray("         Your score & hint budget")),console.log(chalk.white("     scoreboard")+chalk.gray("     Live rankings")),console.log(chalk.white("     help")+chalk.gray("           Full command list")),console.log(),console.log(chalk.gray("   Tool environment:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("help")+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()):I?(U(),console.log(chalk.green.bold("   Welcome, competitor!")),console.log(chalk.gray(`   Workspace: ${M}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Get started:")),console.log(),console.log(chalk.white("   Step 1  ")+chalk.bold.cyan("join <url>")+chalk.gray("   Connect to competition server")),console.log(chalk.white("   Step 2  ")+chalk.bold.cyan("challenges")+chalk.gray("   Browse & solve challenges")),console.log(chalk.white("   Step 3  ")+chalk.bold.cyan("hint")+chalk.gray("         Ask AI when stuck")),console.log(),console.log(chalk.gray("   Before Step 1 — make sure your tools are ready:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(),console.log(chalk.gray("   Also: ")+chalk.white("help")+chalk.gray(" all commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("exit")+chalk.gray(" → menu · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()):(console.log(chalk.bold.white("   Welcome to ICOA CLI — International Olympiad")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   To begin, activate your competition token:")),console.log(),console.log(chalk.bold.cyan("     activate <token>")),console.log(),console.log(chalk.gray("   While waiting, explore:")),console.log(chalk.white("     ref linux")+chalk.gray("       Quick reference for Linux")),console.log(chalk.white("     ref web")+chalk.gray("         Quick reference for Web")),console.log(chalk.white("     env")+chalk.gray("             See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("       Install anything missing (~5 min, one-time)")),console.log(chalk.white("     help")+chalk.gray("            All available commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("exit")+chalk.gray(" → menu · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()),e.exitOverride(),e.configureOutput({writeErr:()=>{},writeOut:o=>{console.log(o)}});const J=o({input:process.stdin,output:process.stdout,prompt:F(),terminal:!0});let K=!1;d(!0),j();const Z=J.prompt.bind(J);J.prompt=o=>{h()||w()||J.setPrompt(F()),Z(o)},J.prompt(),J.on("line",async o=>{if(K)return;const n=o.trim();if(!n)return J.setPrompt(h()?chalk.magenta("ai4ctf> "):F()),void J.prompt();if(h()){K=!0;const o=await u(n);return K=!1,"exit"===o&&J.setPrompt(F()),void J.prompt()}if(w()){K=!0;const o=await f(n);return K=!1,"exit"!==o&&"solved"!==o||J.setPrompt(F()),void J.prompt()}if(L(n),"exit"===n)return b()?(console.log(),console.log(chalk.yellow("  ⚠ An exam is in progress.")),console.log(chalk.white("  To return to menu without losing progress, type: ")+chalk.bold.cyan("back")),console.log(chalk.white("  To fully close ICOA CLI, type: ")+chalk.bold.cyan("quit")),console.log(chalk.gray("  Your progress is auto-saved either way.")),console.log(),void J.prompt()):(console.log(),console.log(chalk.gray("  ")+chalk.white("exit")+chalk.gray(" returns to the main menu. To fully close ICOA CLI, type ")+chalk.bold.cyan("quit")+chalk.gray(".")),"selection"===G&&Q(),void J.prompt());if("quit"===n||"q"===n||"quit confirm"===n){const o=b();return o&&"demo-free"!==o.session.examId&&"quit confirm"!==n?(console.log(),console.log(chalk.yellow("  ⚠ A real exam is in progress.")),console.log(chalk.gray("    Your answers are auto-saved on the server, but the exam timer keeps ticking")),console.log(chalk.gray("    on the server side even if you close the CLI.")),console.log(),console.log(chalk.white("  To leave the CLI but keep the exam alive, type: ")+chalk.bold.cyan("back")),console.log(chalk.gray("    (recommended — you can resume with ")+chalk.cyan("exam q 1")+chalk.gray(" after relaunching icoa)")),console.log(),console.log(chalk.white("  To really close ICOA CLI, type: ")+chalk.bold.cyan("quit confirm")),console.log(),void J.prompt()):(o&&"demo-free"===o.session.examId&&(console.log(),console.log(chalk.gray("  Demo paused. Resume with: ")+chalk.white("demo")+chalk.gray(" (fresh) or ")+chalk.white("exam q 1")+chalk.gray(" (continue)."))),E(),g(),console.log(chalk.gray("  Session saved. Use ")+chalk.white("icoa --resume")+chalk.gray(" to continue.")),S(),void k(0))}if("back"===n||"menu"===n){const o=b(),e=o&&"demo-free"!==o.session.examId,t=o&&"demo-free"===o.session.examId&&(()=>{const e=new Date(o.session.startedAt||0).getTime();return Date.now()-e<18e5})();if(e)console.log(),console.log(chalk.gray("  Exam paused. Your progress is saved.")),console.log(chalk.white("  Resume: exam q 1")+chalk.gray("  ·  ")+chalk.white("exam review")+chalk.gray("  ·  ")+chalk.white("exam submit")),console.log();else if(t){const e=Object.keys(o.answers).length,t=o.session.questionCount;console.log(),console.log(chalk.gray(`  Demo paused (${e}/${t} answered). Resume with: `)+chalk.white("exam q 1")),console.log(chalk.gray("  Or type ")+chalk.white("demo")+chalk.gray(" to restart.")),console.log()}else{if(o&&"demo-free"===o.session.examId){const{clearExamState:o}=await import("./lib/exam-state.js");o("demo-free")}const e=l();fetch("https://practice.icoa2026.au/api/icoa/demo-stats",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({type:"post-report-back",lang:e.language||"en",timestamp:(new Date).toISOString()}),signal:AbortSignal.timeout(5e3)}).catch(()=>{}),"selection"===G?Q():console.log(chalk.gray("  Already at main menu."))}return void J.prompt()}if("help"===n||"?"===n){if(b()){K=!0;try{await e.parseAsync(["node","icoa","exam","help"])}catch{}return K=!1,void J.prompt()}return function(o,e="olympiad"){console.log(),"selection"===e||"organizer"===e?(console.log(chalk.bold.white("  Exam")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to exam server")),console.log(chalk.white("    exam list           ")+chalk.gray("Available exams")),console.log(chalk.white("    exam start <id>     ")+chalk.gray("Begin an exam")),console.log(chalk.white("    exam q [n]          ")+chalk.gray("View questions")),console.log(chalk.white("    exam answer <n> <X> ")+chalk.gray("Answer question")),console.log(chalk.white("    exam review         ")+chalk.gray("Review all answers")),console.log(chalk.white("    exam submit         ")+chalk.gray("Submit for grading")),console.log(chalk.white("    exam result         ")+chalk.gray("View your score")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    setup               ")+chalk.gray("Settings / switch mode")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),console.log()):o?(console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(chalk.bold.white("  How it works")),console.log(),console.log(chalk.gray("  1. Browse ")+chalk.white("challenges")+chalk.gray(" and pick one")),console.log(chalk.gray("  2. ")+chalk.white("open <id>")+chalk.gray(" to read the challenge")),console.log(chalk.gray("  3. Use ")+chalk.white("hint")+chalk.gray(" / ")+chalk.white("hint-b")+chalk.gray(" / ")+chalk.white("hint-c")+chalk.gray(" when stuck")),console.log(chalk.gray("  4. ")+chalk.white("submit <id> icoa{flag}")+chalk.gray(" to score points")),console.log(chalk.gray("  5. Check ")+chalk.white("scoreboard")+chalk.gray(" to track your rank")),console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(),console.log(chalk.bold.white("  Competition")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to CTFd")),console.log(chalk.white("    challenges (ch)     ")+chalk.gray("List challenges by category")),console.log(chalk.white("    open <id>           ")+chalk.gray("Read challenge + get next steps")),console.log(chalk.white("    submit <id> <flag>  ")+chalk.gray("Submit a flag")),console.log(chalk.white("    scoreboard (sb)     ")+chalk.gray("Live rankings")),console.log(chalk.white("    status              ")+chalk.gray("Your score, budget & timer")),console.log(chalk.white("    time                ")+chalk.gray("Countdown timer")),console.log(),console.log(chalk.bold.white("  AI Teammate")+chalk.gray(" — 3 levels, use wisely")),console.log(chalk.white('    hint "question"     ')+chalk.gray("Level A — General guidance (50 uses)")),console.log(chalk.white('    hint-b "question"   ')+chalk.gray("Level B — Deep analysis (10 uses)")),console.log(chalk.white('    hint-c "question"   ')+chalk.gray("Level C — Critical assist (2 uses)")),console.log(chalk.white("    hint budget         ")+chalk.gray("Check remaining uses")),console.log(chalk.white("    ai4ctf              ")+chalk.gray("Free-chat with AI (no limit)")),console.log(),console.log(chalk.bold.white("  Tools")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference (linux, web, crypto...)")),console.log(chalk.white("    shell               ")+chalk.gray("Docker sandbox")),console.log(chalk.white("    files <id>          ")+chalk.gray("Download challenge files")),console.log(chalk.white("    connect <id>        ")+chalk.gray("Connect to remote target")),console.log(chalk.white("    note [text]         ")+chalk.gray("Personal notepad")),console.log(chalk.white("    log                 ")+chalk.gray("Session history")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    setup               ")+chalk.gray("Configure settings")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language (15 supported)")),console.log(chalk.white("    logout              ")+chalk.gray("Disconnect")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit (session saved)")),console.log()):(console.log(chalk.bold.yellow("  Restricted Mode — activate with a token to unlock all commands")),console.log(),console.log(chalk.white("    activate <token>    ")+chalk.gray("Unlock full access")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),console.log())}(a(),G),void J.prompt()}if("more help"===n.toLowerCase()&&b()){K=!0;try{await e.parseAsync(["node","icoa","exam","more-help"])}catch{}return K=!1,void J.prompt()}if("continue"===n.toLowerCase())return console.log(),console.log(chalk.green.bold("  ═══ AI4CTF — AI as Your Teammate ═══")),console.log(),console.log(chalk.white("  In AI4CTF, you solve cybersecurity challenges")),console.log(chalk.white("  with AI by your side.")),console.log(),console.log(chalk.white("  In competition, you get AI help at 3 levels:")),console.log(chalk.yellow("    hint a")+chalk.gray("    General guidance (50 uses)")),console.log(chalk.yellow("    hint b")+chalk.gray("    Deep analysis (10 uses)")),console.log(chalk.yellow("    hint c")+chalk.gray("    Critical assist (2 uses)")),console.log(),console.log(chalk.white("  Try it now! Type: ")+chalk.bold.green("ai4ctf")),console.log(chalk.gray('  Chat freely with your AI teammate. Type "exit" when done.')),console.log(),console.log(chalk.gray("  After ai4ctf, try: ")+chalk.bold.red("ctf4ai")+chalk.gray(' — trick the AI into saying "koala"')),console.log(),void J.prompt();if(/^ICOA-[A-Z]{2,3}-\d{1,6}$/i.test(n.trim())){K=!0;try{await e.parseAsync(["node","icoa","exam","token",n.trim()])}catch{}return K=!1,void J.prompt()}if(/^[A-Z]{2}[0-9A-HJKMNP-TV-Z]{8}$/i.test(n.trim())){K=!0;try{await e.parseAsync(["node","icoa","exam","token",n.trim().toUpperCase()])}catch{}return K=!1,void J.prompt()}const s=n.match(/^exam\s+([A-Z]{2}[0-9A-HJKMNP-TV-Z]{8})$/i);if(s){K=!0;try{await e.parseAsync(["node","icoa","exam","token",s[1].toUpperCase()])}catch{}return K=!1,void J.prompt()}const y=n.match(/^exam\s+([A-Z]{2,3})$/i);if(y){K=!0;try{await e.parseAsync(["node","icoa","exam","list",y[1]])}catch{}return K=!1,void J.prompt()}if("clear"===n||"cls"===n)return console.clear(),void J.prompt();if(n.startsWith("activate ")){const o=n.slice(9).trim(),e=r(o);return"ok"===e?console.log(chalk.green("  Access granted! Token bound to this device.")):"already_bound"===e?(console.log(),console.log(chalk.red("  Token already activated on a different device.")),console.log(chalk.gray("  Each token binds to the first device that uses it. If you lost the device,")),console.log(chalk.gray("  contact your proctor to have the token re-issued for a new device."))):(console.log(),console.log(chalk.red("  Token not recognized.")),console.log(chalk.gray("  Possible reasons:")),console.log(chalk.white("    • ")+chalk.gray("Typo — tokens are case-insensitive, 10 chars, start with a 2-letter country code (e.g. ")+chalk.cyan("UAK7M2R9Q4")+chalk.gray(")")),console.log(chalk.white("    • ")+chalk.gray("Expired — ask your proctor or organizer for a fresh token")),console.log(chalk.white("    • ")+chalk.gray("Network — verify connection to ")+chalk.cyan("practice.icoa2026.au")),console.log(chalk.gray("  Still stuck? type ")+chalk.cyan("help")+chalk.gray(" or try ")+chalk.cyan("exam demo")+chalk.gray(" for a free practice round."))),console.log(),void J.prompt()}if("activate"===n)return console.log(chalk.gray("  Usage: ")+chalk.white("activate <token>")),console.log(),void J.prompt();const m=b();if(m){const o=n.toUpperCase().trim(),t=o=>{const e=m.questions.find(e=>e.number===o);return!!e&&("ai4ctf"===e.type||"ctf4ai"===e.type||e.options&&!e.options.A&&!e.options.B)},l=o=>{const e="demo-free"!==m.session.examId,t=e&&o>=39?"ctf4ai":e&&o>=31?"ai4ctf":null;console.log(),console.log(chalk.yellow(`  Q${o} is a practical question — letters (A/B/C/D) don't apply here.`)),t?(console.log(chalk.white("  Enter the AI chat for this question:  ")+chalk.bold.cyan(t)),console.log(chalk.gray("  Or submit a flag directly: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`))):console.log(chalk.gray("  Submit a flag: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`)),console.log()};if(/^[ABCD]$/.test(o)){const n=m._lastQ||1;if(t(n))return l(n),void J.prompt();K=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(n),o])}catch{}return K=!1,void J.prompt()}const s=o.match(/^(\d+)\s+([ABCD])$/);if(s){const o=parseInt(s[1],10);if(t(o))return l(o),void J.prompt();K=!0;try{await e.parseAsync(["node","icoa","exam","answer",s[1],s[2]])}catch{}return K=!1,void J.prompt()}}const p=n.split(/\s+/)[0].toLowerCase(),d=/^python3?(\.\d+)?$/.test(p),x=n.startsWith("!")||p.startsWith("!")||d;if("selection"===G&&!x&&!["exam","demo","retry","nations","next","prev","continue","setup","lang","ref","ai4ctf","ctf4ai","mark","unmark","review","submit","env"].includes(p)){if(console.log(chalk.gray("  Not available in Selection mode.")),m){const o=m._lastQ||1;console.log(chalk.white(`  Resume exam: exam q ${o}`)+chalk.gray("  ·  ")+chalk.white("A/B/C/D")+chalk.gray(" to answer"))}else console.log(chalk.gray("  Try: demo  ·  setup to switch mode"));return console.log(),void J.prompt()}if("organizer"===G&&!["join","exam","demo","retry","next","prev","logout","setup","lang","ref","ctf","mark","unmark","review","submit"].includes(p))return console.log(chalk.gray("  Not available in Organizer mode. Switch via: setup")),console.log(),void J.prompt();if(!("olympiad"!==G||a()&&c()||i(p)))return console.log(chalk.yellow("  Restricted mode. ")+chalk.gray("Enter your access token:")),console.log(chalk.white("    activate <token>")),console.log(),console.log(chalk.gray("  Free commands: ")+chalk.white("ref [topic]")+chalk.gray(", ")+chalk.white("help")+chalk.gray(", ")+chalk.white("exit")),console.log(),void J.prompt();if(!["join","activate","challenges","ch","open","submit","flag","scoreboard","sb","status","time","hint","hint-b","hint-c","hint-budget","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","model","ctf","exam","demo","retry","nations","next","prev","continue","logout","ctf4ai","mark","unmark","review","submit"].includes(p)){if(z.has(p))return console.log(chalk.red(`  Blocked: ${p} is not allowed during competition.`)),console.log(),void J.prompt();if(/(?:^|\s)(?:\/(?!home\/|Users\/|tmp\/)|\.\.\/|~\/)/.test(n)&&!n.startsWith("cd ")){const o=/(?:^|\s)\/(?!home\/\w+\/icoa-workspace|Users\/\w+\/icoa-workspace|tmp\/)/.test(n),e=/\.\./.test(n);if(o||e)return console.log(chalk.red("  Blocked: access outside workspace is not allowed.")),console.log(chalk.gray(`  Workspace: ${M}`)),console.log(),void J.prompt()}let o=n.startsWith("!")?n.slice(1).trim():n;if("darwin"===process.platform){const e="/opt/homebrew/opt/python@3.12/bin/python3.12";o=o.replace(/^python3?\s/,`${e} `).replace(/^(python3|python)$/,e)}else if("win32"===process.platform){const e=(()=>{try{return t("py -3 --version",{stdio:["ignore","ignore","ignore"],timeout:1500}),"py -3"}catch{}return"python"})();o=o.replace(/^python3?(\.\d+)?\s/,`${e} `).replace(/^python3?(\.\d+)?$/,e)}else{const e=(()=>{try{return t("which python3.12",{stdio:"ignore"}),"python3.12"}catch{return"python3"}})();o=o.replace(/^python\s/,`${e} `).replace(/^python$/,e)}const e=U();/^(\S*python3?(\.\d+)?)\s*$/.test(o)&&(o=`PYTHONSTARTUP="${function(){const o=N(D(),".icoa");P(o)||R(o,{recursive:!0});const e=N(o,"python-startup.py");if(!P(e)){const{writeFileSync:o}=require("node:fs");o(e,"# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP\nimport base64, struct, hashlib, re, json, os, sys, binascii\ntry: import requests\nexcept ImportError: pass\ntry: from Crypto.Cipher import AES\nexcept ImportError: pass\ntry: from Crypto.Util.Padding import pad, unpad\nexcept ImportError: pass\ntry: from pwn import xor, p32, u32, p64, u64\nexcept ImportError: pass\ntry: import bs4\nexcept ImportError: pass\ntry: import numpy as np\nexcept ImportError: pass\n")}return e}()}" ${o}`,console.log(),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(chalk.bold.white("  Python ready — ICOA exam toolkit pre-loaded")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(),console.log(chalk.white("  Already imported: ")+chalk.gray("base64, struct, hashlib, re, json, binascii")),console.log(chalk.white("  Also available:   ")+chalk.gray("requests, bs4, numpy, AES, pad/unpad, xor, p32/u32/p64/u64")),console.log(),console.log(chalk.yellow("  Quick examples:")),console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ')+chalk.gray("# decode base64")),console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ')+chalk.gray("# hex → bytes")),console.log(chalk.gray('    "ICOA{x}".encode()                 ')+chalk.gray("# str → bytes")),console.log(chalk.gray("    [chr(c) for c in [73,67,79,65]]    ")+chalk.gray("# ASCII codes")),console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ')+chalk.gray("# pwntools XOR")),console.log(),console.log(chalk.gray("  Exit:  ")+chalk.white("exit()")+chalk.gray("  or Ctrl-D")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log()),K=!0;try{q()&&await $()?await O(o,J):await Y(o,J,e)}catch{console.log(chalk.yellow(`  Command failed: ${p}`))}return K=!1,console.log(),void J.prompt()}K=!0;const v=m&&"submit"===n.toLowerCase()?["exam","submit"]:function(o){const e=o.split(/\s+/),t=e[0].toLowerCase(),n=e.slice(1),l={demo:["exam","demo"],retry:["exam","demo-retry"],nations:["exam","nations"],next:["exam","next"],prev:["exam","prev"],mark:["exam","mark",...n],unmark:["exam","unmark",...n],review:["exam","review"],logout:["ctf","logout"],join:["ctf","join",...n],activate:["ctf","activate",...n],challenges:["ctf","challenges"],ch:["ctf","challenges"],open:["ctf","open",...n],submit:["ctf","submit",...n],flag:["ctf","submit",...n],scoreboard:["ctf","scoreboard",...n],sb:["ctf","scoreboard",...n],status:["ctf","status"],time:["ctf","time"]};return l[t]?l[t]:["hint","hint-b","hint-c","hint-budget","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","model","ctf","exam","ctf4ai"].includes(t)?[t,...n]:e}(n),C="ctf"===v[0]&&"join"===v[1];C&&J.pause(),process.exit=()=>{throw new Error(B)};try{await e.parseAsync(["node","icoa",...v])}catch(o){const e=o instanceof Error?o.message:String(o);if(e===B);else if(e.includes("commander.unknownCommand")){const{distance:o}=await import("fastest-levenshtein"),e=["ctf","hint","hint-b","hint-c","hint-budget","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","exam","ctf4ai","theme","clear","cls","quit","exit","back","menu","help","continue","activate","demo","challenges","status","scoreboard","join","logout"],t=p.split(/\s+/)[0]||p;let n={word:"",dist:1/0};for(const l of e){const e=o(t.toLowerCase(),l);e<n.dist&&(n={word:l,dist:e})}console.log(chalk.yellow(`  Unknown command: ${p}.`)),n.dist>0&&n.dist<=2&&console.log(chalk.gray("  Did you mean: ")+chalk.bold.cyan(n.word)+chalk.gray("?")),console.log(chalk.gray("  Type ")+chalk.cyan("help")+chalk.gray(" for the full command list."))}else e.includes("commander.")||(e.includes("fetch failed")||e.includes("ECONNREFUSED")||e.includes("ETIMEDOUT"))&&console.log(chalk.yellow("  Network error. Check your connection."))}finally{process.exit=k,K=!1,C&&J.resume()}h()?J.setPrompt(chalk.magenta("ai4ctf> ")):w()&&J.setPrompt(chalk.red("ctf4ai> ")),console.log(),J.prompt()}),J.on("SIGINT",()=>{if(console.log(),h()||w())console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still in the AI chat.")),console.log(chalk.white("  Type ")+chalk.bold.cyan("exit")+chalk.white(" to leave the chat and return to the menu."));else if(b()){const o="demo-free"!==b().session.examId;console.log(chalk.yellow("  Ctrl+C did NOT close ICOA CLI.")),console.log(chalk.gray(`  Your ${o?"exam":"demo"} is paused and every answer is auto-saved.`)),console.log(),console.log(chalk.white("  Resume: ")+chalk.cyan("exam q 1")+chalk.gray("  ·  Back to menu: ")+chalk.cyan("back")+chalk.gray("  ·  Close CLI: ")+chalk.cyan(o?"quit confirm":"quit"))}else console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still at the ")+chalk.cyan("icoa>")+chalk.yellow(" prompt.")),console.log(chalk.gray("  Keep typing — ")+chalk.cyan("help")+chalk.gray(" lists commands. (Only ")+chalk.cyan("quit")+chalk.gray(" or Ctrl+D actually close the CLI.)"));console.log(),J.prompt()}),J.on("close",()=>{E(),g(),S(),k(0)})}function Y(o,t,n){return new Promise(l=>{const s=process.stdin,a=!!s.isTTY&&!!s.isRaw;if(t.pause(),s.isTTY&&"function"==typeof s.setRawMode)try{s.setRawMode(!1)}catch{}const r=e(o,{shell:!0,stdio:"inherit",cwd:n||process.cwd()}),i=()=>{if(s.isTTY&&"function"==typeof s.setRawMode&&a)try{s.setRawMode(!0)}catch{}t.resume(),l()};r.on("close",i),r.on("error",i)})}