icoa-cli 2.19.14 → 2.19.15

package/dist/commands/exam.js

@@ -6,6 +6,7 @@ import { getExamState, saveExamState, clearExamState, getExamDeadline } from '..
 import { logCommand } from '../lib/logger.js';
 import { printSuccess, printError, printWarning, printInfo, printTable, printHeader, printKeyValue, createSpinner, formatCountdown, } from '../lib/ui.js';
 import { t } from '../lib/i18n.js';
+import { getDeviceFingerprint } from '../lib/access.js';
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 function drawProgress(percent, label) {
     const width = 30;
@@ -779,12 +780,35 @@ export function registerExamCommand(program) {
             return;
         }
         // Real exam: submit to server
-        const client = requireExamConnection();
-        if (!client)
-            return;
+        // Token-based exam: use direct fetch with exam token
+        // CTFd-based exam: use ExamClient
+        const examToken = state.session.token;
         try {
             drawProgress(0, 'Uploading answers...');
-            const result = await client.submitExam(state.session.examId, state.answers);
+            let result;
+            if (examToken) {
+                // Submit via exam token
+                const config = getConfig();
+                const serverUrl = config.ctfdUrl || 'https://practice.icoa2026.au';
+                const res = await fetch(`${serverUrl}/api/icoa/exams/${state.session.examId}/submit`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ token: examToken, answers: state.answers }),
+                    signal: AbortSignal.timeout(10000),
+                });
+                if (!res.ok) {
+                    const err = await res.json().catch(() => ({ message: 'Submit failed' }));
+                    throw new Error(err.message || 'Submit failed');
+                }
+                const json = await res.json();
+                result = json.data;
+            }
+            else {
+                const client = requireExamConnection();
+                if (!client)
+                    return;
+                result = await client.submitExam(state.session.examId, state.answers);
+            }
             drawProgress(50, 'Grading...');
             await sleep(300);
             drawProgress(100, 'Complete!');
@@ -859,7 +883,11 @@ export function registerExamCommand(program) {
             const res = await fetch(`${serverUrl}/api/icoa/exam-token`, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({ token: code.trim() }),
+                body: JSON.stringify({
+                    token: code.trim(),
+                    deviceHash: getDeviceFingerprint(),
+                    lang: config.language || 'en',
+                }),
                 signal: AbortSignal.timeout(10000),
             });
             if (!res.ok) {

package/dist/lib/access.d.ts

@@ -2,6 +2,7 @@ export declare function isFirstRunOrUpgrade(currentVersion: string): boolean;
 export declare function markVersionSeen(version: string): void;
 export declare function validateToken(token: string): boolean;
 export declare function isActivated(): boolean;
+export declare function getDeviceFingerprint(): string;
 export type ActivateResult = 'ok' | 'invalid' | 'already_bound';
 export declare function activateToken(token: string): ActivateResult;
 export declare function isDeviceMatch(): boolean;

package/dist/lib/access.js

@@ -127,7 +127,7 @@ export function isActivated() {
     const config = getConfig();
     return !!(config.accessToken && TOKEN_HASHES.has(hashToken(config.accessToken)));
 }
-function getDeviceFingerprint() {
+export function getDeviceFingerprint() {
     const parts = [hostname(), platform(), arch()];
     // Add hardware UUID where possible
     try {

package/dist/lib/demo-exam.js

@@ -98,7 +98,7 @@ export function getLocalizedDemoQuestions() {
         return DEMO_QUESTIONS;
     try {
         const data = JSON.parse(readFileSync(path, 'utf-8'));
-        if (Array.isArray(data) && data.length === 30)
+        if (Array.isArray(data) && data.length >= DEMO_QUESTIONS.length)
             return data;
     }
     catch { }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.14",
+  "version": "2.19.15",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {