icoa-cli 2.19.14 → 2.19.16

package/dist/commands/exam.js

@@ -6,6 +6,7 @@ import { getExamState, saveExamState, clearExamState, getExamDeadline } from '..
 import { logCommand } from '../lib/logger.js';
 import { printSuccess, printError, printWarning, printInfo, printTable, printHeader, printKeyValue, createSpinner, formatCountdown, } from '../lib/ui.js';
 import { t } from '../lib/i18n.js';
+import { getDeviceFingerprint } from '../lib/access.js';
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 function drawProgress(percent, label) {
     const width = 30;
@@ -694,8 +695,27 @@ export function registerExamCommand(program) {
                 console.log();
                 const questionsSnapshot = [...state.questions];
                 const answersSnapshot = { ...state.answers };
+                const helpState = getHelpState(state);
                 clearExamState();
                 const percentage = Math.round(score / total * 100);
+                // Report demo stats to server
+                const config = getConfig();
+                fetch('https://practice.icoa2026.au/api/icoa/demo-stats', {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({
+                        type: 'demo-exam',
+                        score,
+                        total,
+                        lang: config.language || 'en',
+                        help_used: helpState.used,
+                        help_max: helpState.max,
+                        tokens_used: 0,
+                        solved: percentage >= 60 ? 1 : 0,
+                        timestamp: new Date().toISOString(),
+                    }),
+                    signal: AbortSignal.timeout(5000),
+                }).catch(() => { });
                 console.log();
                 console.log(chalk.cyan('  ═══════════════════════════════════════'));
                 console.log();
@@ -779,12 +799,35 @@ export function registerExamCommand(program) {
             return;
         }
         // Real exam: submit to server
-        const client = requireExamConnection();
-        if (!client)
-            return;
+        // Token-based exam: use direct fetch with exam token
+        // CTFd-based exam: use ExamClient
+        const examToken = state.session.token;
         try {
             drawProgress(0, 'Uploading answers...');
-            const result = await client.submitExam(state.session.examId, state.answers);
+            let result;
+            if (examToken) {
+                // Submit via exam token
+                const config = getConfig();
+                const serverUrl = config.ctfdUrl || 'https://practice.icoa2026.au';
+                const res = await fetch(`${serverUrl}/api/icoa/exams/${state.session.examId}/submit`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ token: examToken, answers: state.answers }),
+                    signal: AbortSignal.timeout(10000),
+                });
+                if (!res.ok) {
+                    const err = await res.json().catch(() => ({ message: 'Submit failed' }));
+                    throw new Error(err.message || 'Submit failed');
+                }
+                const json = await res.json();
+                result = json.data;
+            }
+            else {
+                const client = requireExamConnection();
+                if (!client)
+                    return;
+                result = await client.submitExam(state.session.examId, state.answers);
+            }
             drawProgress(50, 'Grading...');
             await sleep(300);
             drawProgress(100, 'Complete!');
@@ -859,7 +902,11 @@ export function registerExamCommand(program) {
             const res = await fetch(`${serverUrl}/api/icoa/exam-token`, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({ token: code.trim() }),
+                body: JSON.stringify({
+                    token: code.trim(),
+                    deviceHash: getDeviceFingerprint(),
+                    lang: config.language || 'en',
+                }),
                 signal: AbortSignal.timeout(10000),
             });
             if (!res.ok) {

package/dist/lib/access.d.ts

@@ -2,6 +2,7 @@ export declare function isFirstRunOrUpgrade(currentVersion: string): boolean;
 export declare function markVersionSeen(version: string): void;
 export declare function validateToken(token: string): boolean;
 export declare function isActivated(): boolean;
+export declare function getDeviceFingerprint(): string;
 export type ActivateResult = 'ok' | 'invalid' | 'already_bound';
 export declare function activateToken(token: string): ActivateResult;
 export declare function isDeviceMatch(): boolean;

package/dist/lib/access.js

@@ -127,7 +127,7 @@ export function isActivated() {
     const config = getConfig();
     return !!(config.accessToken && TOKEN_HASHES.has(hashToken(config.accessToken)));
 }
-function getDeviceFingerprint() {
+export function getDeviceFingerprint() {
     const parts = [hostname(), platform(), arch()];
     // Add hardware UUID where possible
     try {

package/dist/lib/demo-exam.js

@@ -98,7 +98,7 @@ export function getLocalizedDemoQuestions() {
         return DEMO_QUESTIONS;
     try {
         const data = JSON.parse(readFileSync(path, 'utf-8'));
-        if (Array.isArray(data) && data.length === 30)
+        if (Array.isArray(data) && data.length >= DEMO_QUESTIONS.length)
             return data;
     }
     catch { }

package/dist/lib/log-sync.js

@@ -49,7 +49,7 @@ async function syncLogs() {
     };
     try {
         // POST to CTFd server audit endpoint
-        const url = new URL('/api/v1/audit/logs', config.ctfdUrl).href;
+        const url = new URL('/api/icoa/audit', config.ctfdUrl).href;
         const res = await fetch(url, {
             method: 'POST',
             headers: {

package/dist/repl.js

@@ -10,6 +10,7 @@ import { getExamState } from './lib/exam-state.js';
 import { resetTerminalTheme } from './lib/theme.js';
 import { ensureSandbox, runInSandbox, isDockerAvailable } from './lib/sandbox.js';
 import { logCommand } from './lib/logger.js';
+import { startLogSync, stopLogSync } from './lib/log-sync.js';
 import { existsSync, mkdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
@@ -301,8 +302,7 @@ export async function startRepl(program, resumeMode) {
     });
     let processing = false;
     setReplMode(true);
-    // Log sync disabled until server audit endpoint is configured
-    // startLogSync();
+    startLogSync();
     rl.prompt();
     rl.on('line', async (line) => {
         if (processing)
@@ -349,7 +349,7 @@ export async function startRepl(program, resumeMode) {
                 rl.prompt();
                 return;
             }
-            // stopLogSync();
+            stopLogSync();
             recordExit();
             console.log(chalk.gray('  Session saved. Use ') + chalk.white('icoa --resume') + chalk.gray(' to continue.'));
             resetTerminalTheme();
@@ -657,7 +657,7 @@ export async function startRepl(program, resumeMode) {
         rl.prompt();
     });
     rl.on('close', () => {
-        // stopLogSync();
+        stopLogSync();
         recordExit();
         resetTerminalTheme();
         realExit(0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.14",
+  "version": "2.19.16",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {