icoa-cli 2.19.93 → 2.19.95

package/dist/commands/exam.js

@@ -1578,10 +1578,36 @@ export function registerExamCommand(program) {
         .description('Enter exam with access token (no login needed)')
         .action(async (code) => {
         logCommand(`exam token ${code}`);
-        const { getRealExamState, saveExamState: saveExamStateFn } = await import('../lib/exam-state.js');
+        const { getRealExamState, saveExamState: saveExamStateFn, clearExamState: clearState } = await import('../lib/exam-state.js');
         const existing = getRealExamState();
         if (existing) {
             const existingToken = existing.session.token;
+            // Auto-recover from abandoned/expired sessions. If the stored state's
+            // deadline is >30 min in the past, the session is unusable (past the
+            // server's submit grace window). If user types a DIFFERENT token in
+            // this state, they clearly mean "start fresh". Clear silently rather
+            // than locking them out forever. Prevents the stale-A-paper-content +
+            // "Could not reload questions in new language" lockout.
+            const deadlineNow = getExamDeadline();
+            const typedDiffers = !!existingToken && existingToken.trim().toUpperCase() !== code.trim().toUpperCase();
+            const expiredPast30min = deadlineNow ? (deadlineNow.getTime() + 30 * 60 * 1000) < Date.now() : false;
+            if (typedDiffers && expiredPast30min) {
+                clearState();
+                console.log();
+                console.log(chalk.gray('  (previous exam session expired — cleared state, starting fresh with your new token)'));
+                console.log();
+                // Fall through to the fresh-start flow below (skip the "already in progress" guard)
+                // Re-run this action: easiest to just continue out of the `if (existing)` block
+                // by setting a flag. We do that by falling through — but since we're inside
+                // `if (existing)`, we need to proceed. Easiest: re-invoke the inner start flow.
+                // Actually: since we cleared state, the subsequent code paths will treat it
+                // as a fresh session. But we're inside `if (existing)`. Jump to the fresh path
+                // by executing a goto-equivalent via function call. Simplest: return here
+                // after instructing the user to retype the command.
+                console.log(chalk.white('  Please re-type: ') + chalk.bold.cyan(`exam ${code}`));
+                console.log();
+                return;
+            }
             // Migration path: pre-v2.19.55 sessions didn't persist the token on
             // state. Those sessions can't use `lang` or submit via the new token
             // path. If the user re-types the matching token, attach it so the
@@ -1624,6 +1650,9 @@ export function registerExamCommand(program) {
                 console.log();
                 console.log(chalk.yellow('  Note: you typed a different token. Each exam token is bound to'));
                 console.log(chalk.yellow('  one device + one session. You cannot switch tokens mid-exam.'));
+                console.log();
+                console.log(chalk.gray('  If you need to abandon this session (e.g. expired / wrong paper),'));
+                console.log(chalk.gray('  run ') + chalk.bold.cyan('exam reset') + chalk.gray(' to wipe local state, then re-enter the new token.'));
             }
             console.log();
             return;
@@ -1782,6 +1811,53 @@ export function registerExamCommand(program) {
         }
     });
     // ─── exam demo ───
+    exam
+        .command('reset', { hidden: true })
+        .description('Abandon current exam session and wipe local state (recovery only)')
+        .action(async () => {
+        logCommand('exam reset');
+        const { getRealExamState, clearExamState: clearState } = await import('../lib/exam-state.js');
+        const existing = getRealExamState();
+        if (!existing) {
+            console.log();
+            console.log(chalk.gray('  No active exam session to reset.'));
+            console.log();
+            return;
+        }
+        const tok = existing.session.token;
+        console.log();
+        console.log(chalk.yellow('  ⚠  Reset will abandon your current exam session on this device.'));
+        console.log(chalk.gray('     Exam:  ') + chalk.white(existing.session.examName));
+        if (tok)
+            console.log(chalk.gray('     Token: ') + chalk.white(tok));
+        console.log(chalk.gray('     The token itself is NOT revoked server-side. If your session is'));
+        console.log(chalk.gray('     still active and not submitted, re-entering the same token resumes it.'));
+        console.log();
+        console.log(chalk.gray('  Type ') + chalk.bold.cyan('reset') + chalk.gray(' to confirm, or anything else to cancel:'));
+        // Typed-word confirmation — matches existing exam submit confirm pattern
+        const confirmWord = await new Promise((resolve) => {
+            process.stdout.write('  > ');
+            const onData = (chunk) => {
+                const s = chunk.toString().trim();
+                if (s.includes('\n') || s.includes('\r') || s.length > 0) {
+                    process.stdin.removeListener('data', onData);
+                    resolve(s.replace(/[\r\n]/g, ''));
+                }
+            };
+            process.stdin.on('data', onData);
+            process.stdin.resume();
+        });
+        if (confirmWord.toLowerCase() !== 'reset') {
+            console.log(chalk.gray('  Cancelled.'));
+            console.log();
+            return;
+        }
+        clearState();
+        console.log();
+        console.log(chalk.green('  ✓ Exam state cleared.'));
+        console.log(chalk.gray('  You can now enter a new token with ') + chalk.bold.cyan('exam <token>'));
+        console.log();
+    });
     exam
         .command('demo')
         .description('Try a free practice exam (no account needed)')

package/dist/commands/lang.js

@@ -133,7 +133,12 @@ export function registerLangCommand(program) {
                     console.log(chalk.white(`  Resume: exam q ${currentQ}`));
                 }
                 else {
-                    console.log(chalk.yellow('  Could not reload questions in new language. Try again later.'));
+                    // Most common cause here: the stored session's token was already
+                    // submitted on the server (409) or the exam window has closed.
+                    // Surface the recovery path so the user isn't locked out.
+                    console.log(chalk.yellow('  Could not reload questions in new language.'));
+                    console.log(chalk.gray('  The saved session may be expired or already submitted server-side.'));
+                    console.log(chalk.gray('  To abandon it and start fresh: ') + chalk.bold.cyan('back') + chalk.gray(' → ') + chalk.bold.cyan('exam reset') + chalk.gray(' → ') + chalk.bold.cyan('exam <new-token>'));
                 }
             }
             catch {

package/dist/index.js

@@ -181,4 +181,21 @@ program
         console.log();
     }
 });
+// Proctor-only escape hatch: `ICOA_RESET_STATE=1 icoa` wipes any abandoned
+// exam state *before* any subcommand or REPL runs. Fires for ALL invocations
+// (including `icoa exam <token>`) so proctors have a one-liner recovery that
+// works regardless of which subcommand the student would run next.
+// The token itself is untouched server-side.
+if (process.env.ICOA_RESET_STATE === '1') {
+    try {
+        const { clearExamState } = await import('./lib/exam-state.js');
+        clearExamState();
+        console.log(chalk.yellow('⚠ ICOA_RESET_STATE=1 — local exam state wiped.'));
+        console.log(chalk.gray('  (Token NOT revoked server-side. Re-enter a fresh token with `exam <token>`.)'));
+        console.log();
+    }
+    catch (e) {
+        console.log(chalk.red('⚠ ICOA_RESET_STATE: could not clear state — ') + chalk.gray(String(e)));
+    }
+}
 program.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.93",
+  "version": "2.19.95",
   "description": "ICOA CLI — The world's first CLI-native CTF competition terminal",
   "type": "module",
   "bin": {